# changelog

author: Adam Jackson <ajax@redhat.com> 1.14.0-2
changelog:
  - util-macros-1.14.0-autoconf-compat.patch: Undo a warning fix that relies
    on a macro not shipped in el6's autoconf.


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-3
changelog:
  - Add info message when USB dialog is empty
    Resolves: rhbz#804187
  - Properly reset usb channels after non-seamless migration
    Resolves: rhbz#861332
  - Fix read error handling for USB redirection
    Related: rhbz#842354
  - Auto-discover already plugged-in USB devices
    Resolves: rhbz#820964
  - Add support for disabling Ctrl+Alt+Del
    Resolves: rhbz#807771


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-4
changelog:
  - Fix application of Patch2, it includes the git commit log which
    contained a diff hunk which %patch happily applied, which caused
    https://bugzilla.redhat.com/show_bug.cgi?id=804187#c9
    Related: rhbz#804187


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.14-5
changelog:
  - Apply color conversion when creating image
    Resolves: rhbz#843134
  - Show correct ungrab key combination in spicy
    Resolves: rhbz#851090
  - Fix sending 00 scancodes to guests
    Resolves: rhbz#868237
  - Improve open_host() debugging message
    Resolves: rhbz#858232
  - Empty host subject from qemu should only validate hostname
    Resolves: rhbz#858228
  - Fix disabling mouse acceleration on X11
    Resolves: rhbz#867885
  - use more explicit SSL error message
    Resolves: rhbz#846666


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-6
changelog:
  - Don't ask for root/admin password when users want to redirect USB
    devices
    Resolves: rhbz#859392


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - Fix the double suspend on lid close issue when not using KMS hardware.
  - Resolves: #543948


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Do not ask the user to look at the help file on suspend failure,
    it is already out of date.
  - Resolves: #640296


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-5
changelog:
  - Reinstate the "Do nothing" option on the lid close combo because
    per-screen DPMS does not work in RHEL6.
  - Resolves: #623674


author: Daniel Veillard <veillard@redhat.com> - 0.4.9-1
changelog:
  - Change Licence to MIT and release 0.4.9
  - Fix IndexOutOfBoundsException for unknown error codes
  - Fix javadoc warnings
  - Fix typo in Domain.java
  - setSchedulerParameters sets CPU shares to 2 for any value rhbz#770043


author: Chris Feist <cfeist@redhat.com> - 0.9.82-1
changelog:
  - Show constraint id when printing out location rules
  - Improve error messages when adding location rules with errors
  - Add ability to remove constraint rules
  - Allow move of master/slave resources if --master is present


author: Chris Feist <cfeist@redhat.com> - 0.9.87-1
changelog:
  - Allow two ordering constraints with same resources
  - Improved error messages when trying to master/clone resources
  - Updated error message when attempting to move a master/slave without
    --master


author: Chris Feist <cfeist@redhat.com> - 0.9.88-1
changelog:
  - Don't allow order/colocation constraints created for master primitives
  - Check in clones for stonith resources
  - Clarify 'constraint rule add' in man page/usage
  - Fixed minor usage issue with colocation sets


author: Chris Feist <cfeist@redhat.com> - 0.9.89-1
changelog:
  - Show location constraint role in pcs status/constraint
  - Disable resource before removing
  - Misc man/usage fixes


author: Chris Feist <cfeist@redhat.com> - 0.9.90-1
changelog:
  - Add ability to set node attributes
  - Fix issue setting meta attributes on a master when creating a resource


author: Dan Winship <danw@redhat.com> - 1:0.8.1-34
changelog:
  - connection-editor: switch from notebook to tree (part of rh #465345)
  - connection-editor: add InfiniBand support (rh #685096)


author: Dan Winship <danw@redhat.com> - 1:0.8.1-35
changelog:
  - ifcfg-rh: fix writing of bond connections (rh #717475, rh #838907)
  - ifcfg-rh: fix reading of InfiniBand bond slaves (rh #717475)
  - connection-editor: add bond support (rh #465345)


author: Dan Winship <danw@redhat.com> - 1:0.8.1-36
changelog:
  - connection-editor: add VLAN support (rh #712302)
  - libnm-util: add API for VLAN connection editor
  - core: add more checks to VLAN creation
  - ifcfg-rh: fix writing of VLAN connections
  - misc other small connection editor UI updates


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-37
changelog:
  - core: fix 802.1x credentials being requested twice (rh #837056)
  - core: inherit leasefiles from the initramfs (rh #817660)
  - core: periodically retry connections even if they have failed (rh #829499)


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-41
changelog:
  - core: additional fixes for bridging and bonding operation (rh #558983)
  - applet: add support for Bridge, Bond, and VLAN devices


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-1
changelog:
  - Updated to 2.0.0
  - Removed upstream-ed patches
  - Ugly hack (added cvconfig.h)
  - Disable %check on ppc64


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-6
changelog:
  - use cmake build system
  - applications renamed to opencv_xxx instead of opencv-xxx
  - add devel-docs subpackage #546605
  - add OpenCVConfig.cmake
  - enable openmp build
  - enable old SWIG based python wrappers
  - opencv package is a good boy and use global instead of define


author: Karel Klic <kklic@redhat.com> - 2.0.0-7
changelog:
  - re-enable testing on CMake build system
  - fix memory corruption in the gaussian random number generator


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-68
changelog:
  - luci: Add expand/collapse buttons for each inline resource
    Resolves: rhbz#919223
  - luci: Preserve expert mode resource attributes when editing service groups
    Resolves: rhbz#1112297
  - luci: Warn when config can't be set or activated
    Resolves: rhbz#1136456
  - luci: Update fence_virt / fence_xvm labels
    Resolves: rhbz#1204910


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-71
changelog:
  - Prevent clickjacking (malicious use) of luci and enable enforcement
    of some more web service security mechanisms
    Resolves: rhbz#1270958


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-72
changelog:
  - Make luci implicitly avoid SSLv2 and SSLv3 versions of the protocol,
    and also by default, disable RC4 cipher (unless overridden by user)
    at both the web browser/HTTPS (rhbz#1156167) and ricci daemon/SSL
    (rhbz#1156187) sides of communication
    Resolves: rhbz#1156167, rhbz#1156187
  - Update luci self-managed certificate signature digest from sha1 to sha256
    Related: rhbz#1156167, rhbz#1156187
  - Force generating luci.ini anew on update otherwise intended security
    hardenings will not take effect with luci already in use (and avoid
    respective downgrade issues, both using a mechanism already in place)
    Related: rhbz#1270958


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-74
changelog:
  - luci: Fix defaults for dlm/gfs_controld plock_ownership
    Resolves: rhbz#988945
  - luci: Fix allowed values for totem/@secauth
    Resolves: rhbz#1285840


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-1.prerelease
changelog:
  - Rebase to prerelease version of tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07. 
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-2
changelog:
  - Rebase to tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07.
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979300


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979300


author: Steven Dake <sdake@redhat.com> 1.2.3-13
changelog:
  - Resolves: rhbz#614219
  - Add upstream revision 2989 - Don't reset the token timer when a retransmitted
    token is received.  Only reset when a token is received.


author: Steven Dake <sdake@redhat.com> 1.2.3-15
changelog:
  - Resolves: rhbz#611676
  - Add upstream revision 3000 - ensure aborts happen even if the currently
    running sync engine doesn't have an abort operation.
  - Add upstream revision 2999 - reset internal variable in syncv2 on
    configuration change.


author: Angus Salkeld <asalkeld@redhat.com> 1.2.3-16
changelog:
  - Resolves: rhbz#579126
  - Add upstream revision 3004 - Fix merge error with revision 3001.
  - Add upstream revision 3003 - Fix problem where flow control could lock
    up ipc under very heavy load in very rare circumstances.


author: Steven Dake <sdake@redhat.com> 1.2.3-17
changelog:
  - Resolves: rhbz#618570
  - Add upstream revision 3006 - Remove consensus timeout floor check that leads
    to exit in two node clusters with smaller consensus timeouts.


author: Steven Dake <sdake@redhat.com> 1.2.3-18
changelog:
  - Resolves: rhbz#619565
  - Add upstream revision 3013 - dont cancel token retransmit timeout on receipt
    of a multicast message.


author: Steven Dake <sdake@redhat.com> 1.2.3-19
changelog:
  - Resolves: rhbz#623790
  - Add upstream revision 3023 - Properly detect server failure instead of falsely
    detecting during a configuration change.


author: Steven Dake <sdake@edhat.com> 1.2.3-21.1
changelog:
  - Resolves: rhbz#638592
  - merge upstream commit bab4945b57c150301c034085f3ce7b4187b6c864
  -  Works around problem where some switch hardware delays multicast
  -  packets compared to the unicast token.  This would result in messages
  -  being retransmitted when no retransmission was necessary.


author: Mark Harvey <markh794@gmail.com> <mark_harvey@symantec.com>
changelog:
  - Bumped version to 0.18.11
  - Bug fix: Off-by-one if a re-position & then overwrite a filemark.
    Caused TSM & HP Dataprotector all sorts of problems.
  - Export kernel module 'major' number via /sys/bus/pseudo/drivers/mhvtl/major
  - Remove external script to create device nodes. Each daemon creates its own
    device node at startup. Uses 'kernel module' major no. sys interface.
  - Fix potential NULL pointer usage in REQUEST SENSE
  - VPD page 0x83 NAA field fix
  - VPD page length fix (only 0x50 bytes in size not 0x52)
  - Hopefully removed last reference to /proc
  - Use setuidgid if availble instead of 'su $USER -c <vtltape|vtllibrary>'
  - Add kernel module RPM spec file for RedHat
  - Add Gentoo build


author: Mark Harvey <markh794@gmail.com> <mark_harvey@symantec.com>
changelog:
  - Bumped version to 0.18.12
  - Bug fixes:
    - Silence 'which setuidgid' test
    - Fix compile on 2.6.34 kernel
    - ERASE only from BOT
    - Test SPACE '0' blocks/filemarks before moving
    - Fix REQUEST SENSE returned size
    - Implement SILI bit test
    - Check if ERASE WORM media is allowed
    - Only support SPIN/SPOUT for LTO-4/5, T10K and 3592E05/6 drive types
    - Fix REQUEST SENSE page length. Previously only returning 8 bytes.
  - Improvements
    - Re-organised code in vtllibrary to use a big jump table
    - Fix LTO5 media density reporting
    - Match HP ULTRIUM 4-SCSI
    - Ability to create DDS specific media
      (still need to find correct density codes for DDS)


author: Mark Harvey <markh794@gmail.com> <mark_harvey@symantec.com>
changelog:
  - Bumped version to 0.18.13
  - Bug fixes:
    - SMC read element status. Return correct length.
    - SMC read element status. Handle request for 'any' slot type.
    - SSC log page. Byte-swap Bytes Read/Written.
    - vtltape: Return ILLEGAL REQUEST for unsupported OP codes.
    - Density code updates.
    - Increased sense buffer from 38 bytes to 96 bytes.


author: Mark Harvey <markh794@gmail.com> <mark_harvey@symantec.com>
changelog:
  - Bumped version to 0.18.14
  - Bug fixes:
    - kernel module build fixes for Linux kernel 2.6.37 and greater
  - Improvements
    - Add STK T10000C media/drive support
    - Always log 'fatal' errors
    - Cleanup to mhvtl.spec
    - Catch signals to prevent daemon terminating early.


author: Mark Harvey <markh794@gmail.com> <mark_harvey@symantec.com>
changelog:
  - Bumped version to 0.18.15
  - Improvements
    - Implemented 'Personality Module' for each drive type
      (many cleanups due to 'PM' change fallout thanks to Sebastian)
    - Increase max barcode length to 16 chars
  - Bug fixes
    - Inquiry no longer incorrectly reports support for TrmIOP and CmdQue
    - Fixed block read/writes corruption if 'multiple blocks' specified
    - Fix Device Capabilities mode page - Don't advertise EXCHANGE MEDIUM support


author: Mark Harvey <markh794@gmail.com> <mark_harvey@symantec.com>
changelog:
  - Bumped version to 0.18.16
  - Improvements
    - Cleaning media behaves more like real (IBM LTO4) drive.
    - Implement OPEN/CLOSE IMPORT/EXPORT element OP code (Thanks Sebastian)
    - Kernel module support for 2.6.39 (Thanks Sebastian)
  - Bug fixes
    - SPACE op code - Space to end-of-data fixed (Thanks Sebastian)
      This fixes an issue triggered using Oracle Backup
    - REQUEST SENSE - Return correct data.
    - SPOUT - Return check_condition on some error paths
    - Cleaning Media - Return 'not ready' instead of 'good' when loaded
    - Don't write FILEMARKS to WORM or Cleaning media


author: Mark Harvey <markh794@gmail.com> <mark_harvey@symantec.com>
changelog:
  - Bumped version to 0.18.17
  - Improvements
    - Kernel module compile warning since 2.6.33
  - Bug fixes
    - Test MAP port open before moving media
    - Fix buffer overflow in vtllibrary (product_id)
    - Return correct sense from space op code


author: Mark Harvey <markh794@gmail.com> <mark_harvey@symantec.com>
changelog:
  - Bumped version to 1.00.00
  - Re-worked MODE SENSE/SELECT data structures into a linked list.
  - Re-worked LOG SENSE/SELECT data structures into a linked list.
  - Added support for sub-page MODE information.
  - Added STK 9x40 drive emulations.
  - Removed dead code from kernel driver.
  - Add working REPORT DENSITY support to the SSC.
    This change required the personality modules to define the list of supported
    densities. The media density is defined at 'mktape' time.
    Hence, the optional 'media load' rules in device.conf are now redundent
    and not used.
    BUT: The option to load any media into any drive is also gone.


author: Marcela Maslanova <mmaslano@redhat.com> - 0.63-4
changelog:
  - 437681 remove previous patch and use upstream patch, which should solve
          all problems with noisy logs.


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.1.el6]
changelog:
  - [x86] crypto: sha256_ssse3 - fix stack corruption with SSSE3 and AVX implementations (Herbert Xu) [1218681 1201490]
  - [scsi] storvsc: ring buffer failures may result in I/O freeze (Vitaly Kuznetsov) [1215754 1171676]
  - [scsi] storvsc: get rid of overly verbose warning messages (Vitaly Kuznetsov) [1215753 1167967]
  - [scsi] storvsc: NULL pointer dereference fix (Vitaly Kuznetsov) [1215753 1167967]
  - [netdrv] ixgbe: fix detection of SFP+ capable interfaces (John Greene) [1213664 1150343]
  - [x86] crypto: aesni - fix memory usage in GCM decryption (Kurt Stutsman) [1213329 1213330] {CVE-2015-3331}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.25.1.el6]
changelog:
  - [net] ipvs: allow rescheduling of new connections when port reuse is detected (Marcelo Leitner) [1222771 1108514]
  - [net] ipvs: Fix reuse connection if real server is dead (Marcelo Leitner) [1222771 1108514]
  - [netdrv] bonding: fix locking in enslave failure path (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: primary_slave & curr_active_slave are not cleaned on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: vlans don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: mc addresses don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: IFF_BONDING is not stripped on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: fix error handling if slave is busy v2 (Nikolay Aleksandrov) [1222483 1221856]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.26.1.el6]
changelog:
  - [kernel] sched: Fix clock_gettime(CLOCK_[PROCESS/THREAD]_CPUTIME_ID) monotonicity (Seth Jennings) [1219501 1140024]
  - [kernel] sched: Replace use of entity_key() (Larry Woodman) [1219123 1124603]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.27.1.el6]
changelog:
  - [netdrv] mlx4_en: current_mac isn't updated in port up (Amir Vadai) [1224383 1081667]
  - [netdrv] mlx4_en: Fix mac_hash database inconsistency (Amir Vadai) [1224383 1081667]
  - [netdrv] mlx4_en: Protect MAC address modification with the state_lock mutex (Amir Vadai) [1224383 1081667]
  - [netdrv] mlx4_en: Fix errors in MAC address changing when port is down (Amir Vadai) [1224383 1081667]
  - [netdrv] mlx4: Verify port number in __mlx4_unregister_mac (Amir Vadai) [1224383 1081667]
  - [netdrv] mlx4_en: Adding missing initialization of perm_addr (Amir Vadai) [1225489 1120930]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.28.1.el6]
changelog:
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1202860 1185166] {CVE-2015-1805}
  - [net] ipv4: Missing sk_nulls_node_init in ping_unhash (Denys Vlasenko) [1218102 1218103] {CVE-2015-3636}
  - [net] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition (Jesper Brouer) [1227467 1227468 1212801 1200541]
  - [net] tcp: Restore RFC5961-compliant behavior for SYN packets (Jesper Brouer) [1227467 1227468 1212801 1200541]
  - [x86] kernel: ignore NMI IOCK when in kdump kernel (Jerry Snitselaar) [1225054 1196263]
  - [x86] asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Mateusz Guzik) [1209232 1209233] {CVE-2015-2830}
  - [fs] gfs2: try harder to obtain journal lock during recovery (Abhijith Das) [1222588 1110846]
  - [x86] perf: Add cpu_<prepare|starting|dying> for core_pmu (Jiri Olsa) [1219149 1188336]
  - [x86] mm: Linux stack ASLR implementation (Jacob Tanenbaum) [1195682 1195683] {CVE-2015-1593}
  - [fs] xfs: DIO write completion size updates race (Brian Foster) [1218499 1198440]
  - [net] ipv6: Don't reduce hop limit for an interface (Denys Vlasenko) [1208492 1208493]
  - [net] vlan: more careful checksum features handling (Vlad Yasevich) [1221844 1212384]
  - [kernel] tracing: Export tracing clock functions (Jerry Snitselaar) [1217986 1212502]
  - [edac] sb_edac: fix corruption/crash on imbalanced Haswell home agents (Seth Jennings) [1213468 1210148]
  - [netdrv] tun: Fix csum_start with VLAN acceleration (Jason Wang) [1217189 1036482]
  - [netdrv] tun: unbreak truncated packet signalling (Jason Wang) [1217189 1036482]
  - [netdrv] tuntap: hardware vlan tx support (Jason Wang) [1217189 1036482]
  - [vhost] vhost-net: fix handle_rx buffer size (Jason Wang) [1217189 1036482]
  - [netdrv] ixgbe: fix X540 Completion timeout (John Greene) [1215855 1150343]
  - [char] tty: drop driver reference in tty_open fail path (Mateusz Guzik) [1201893 1201894]
  - [netdrv] macvtap: Fix csum_start when VLAN tags are present (Vlad Yasevich) [1215914 1123697]
  - [netdrv] macvtap: signal truncated packets (Vlad Yasevich) [1215914 1123697]
  - [netdrv] macvtap: restore vlan header on user read (Vlad Yasevich) [1215914 1123697]
  - [netdrv] macvlan: Initialize vlan_features to turn on offload support (Vlad Yasevich) [1215914 1123697]
  - [netdrv] macvlan: Add support for 'always_on' offload features (Vlad Yasevich) [1215914 1123697]
  - [netdrv] mactap: Fix checksum errors for non-gso packets in bridge mode (Vlad Yasevich) [1215914 1123697]
  - [netdrv] revert "macvlan: fix checksums error when we are in bridge mode" (Vlad Yasevich) [1215914 1123697]
  - [net] core: Correctly set segment mac_len in skb_segment() (Vlad Yasevich) [1215914 1123697]
  - [net] core: generalize skb_segment() (Vlad Yasevich) [1215914 1123697]
  - [net] core: Add skb_headers_offset_update helper function (Vlad Yasevich) [1215914 1123697]
  - [netdrv] ixgbe: Correctly disable VLAN filter in promiscuous mode (Vlad Yasevich) [1215914 1123697]
  - [netdrv] ixgbe: remove vlan_filter_disable and enable functions (Vlad Yasevich) [1215914 1123697]
  - [netdrv] qlge: Fix TSO for non-accelerated vlan traffic (Vlad Yasevich) [1215914 1123697]
  - [netdrv] i40evf: Fix TSO and hw checksums for non-accelerated vlan packets (Vlad Yasevich) [1215914 1123697]
  - [netdrv] i40e: Fix TSO and hw checksums for non-accelerated vlan packets (Vlad Yasevich) [1215914 1123697]
  - [netdrv] ehea: Fix TSO and hw checksums with non-accelerated vlan packets (Vlad Yasevich) [1215914 1123697]
  - [netdrv] e1000: Fix TSO for non-accelerated vlan traffic (Vlad Yasevich) [1215914 1123697]
  - [kernel] ipc: sysv shared memory limited to 8TiB (George Beshers) [1224301 1171218]
  - [mm] hugetlb: improve page-fault scalability (Larry Woodman) [1212300 1120365]
  - [netdrv] hyperv: Fix the total_data_buflen in send path (Jason Wang) [1222556 1132918]
  - [crypto] drbg: fix maximum value checks on 32 bit systems (Herbert Xu) [1225950 1219907]
  - [crypto] drbg: remove configuration of fixed values (Herbert Xu) [1225950 1219907]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.30.2.el6]
changelog:
  - [crypto] rng: Remove krng (Herbert Xu) [1233512 1226418]
  - [crypto] drbg: Add stdrng alias and increase priority (Herbert Xu) [1233512 1226418]
  - [crypto] seqiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418]
  - [crypto] eseqiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418]
  - [crypto] chainiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.30.3.el6]
changelog:
  - [redhat] spec: Update dracut dependency to pull in drbg module (Frantisek Hrbata) [1241517 1241338]


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-16
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name
    (Resolves: #671460)
  - Set PAM_TTY and PAM_RHOST on PAM authentication (Resolves: #684789)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#796014)
    (MotifZone bug #1552)
  - fixed use after free with comboboxes and XIM (rhbz#836892)
    (MotifZone bug #1559)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096315)
  - fixed missing outline in mwm while moving window (rhbz#1000343)
    (copy of rhbz#997241)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-8
changelog:
  - fixed Label size computed wrong within a Form (rhbz#869782) (rhbz#953938)
    (copy of rhbz#980577)
    (MotifZone bug #1612 final upstream patch with white space changes)
  - fixed segmentation violation in XmList after calling XmListDeleteAllItems 
    and clicking on a new item with left-shift left-button click (rhbz#1058644)
    (MotifZone bug #1636)


author: Joe Orton <jorton@redhat.com> - 2.2.14-5
changelog:
  - mod_ssl: fix CVE-2009-3555 backport (#563119)
  - mod_authnz_ldap: fix for dynamic group support
  - mod_ssl: add SSLInsecureRenegotiation directive (#561435)


author: Joe Orton <jorton@redhat.com> - 2.2.15-1
changelog:
  - update to 2.2.15 (#570465, #570442)
  - fix version string (#572140)
  - mod_ssl: use ASN1_STRING_print() in SSLRequire's OID() (#552942)
  - prevent use of rsync during "make install" (#557049)
  - load mod_version by default in httpd.conf


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-7
changelog:
  - Remove ocaml-find-{requires,provides}.sh from this package.  These are
    now in upstream RPM 4.8 (RHBZ#545116).
  - define -> global in a few places.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.2-5
changelog:
  - Enable execshield stack protection on ppc/ppc64 (572826)
    related: rhbz#1343082
  - Fix strict-aliasing warnings in build (990540).


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21
changelog:
  - Resolves: rhbz#975550 ikev2 md5 hash results in incorrect policy
  - Resolves: rhbz#985596 openswan does not allow SHA2 auth algorithms under FIPS mode 
  - Resolves: rhbz#881914 openswan doesn't support SHA2 certificates
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#960235 CVE-2013-2053: remote buffer overflow in atodn()
  - Resolves: rhbz#963833 Abort pluto on crypto failure to prevent plaintext / nonce leak
  - Resolves: rhbz#771612 ipsec barf should not grep sparse file
  - Resolves: rhbz#841325 leftmodecfgclient=no causes rekey failure [Avesh]
  - Resolves: rhbz#848132 dpdaction=restart can cause full phase1 timeout after DPD [Avesh]
  - Resolves: rhbz#880004 Backported libreswan IKE fragmentation support 
  - Resolves: rhbz#908476 Backported libreswan INITIAL-CONTACT Notify support
  - Resolves: rhbz#796683 Backported libreswan USERCOMPILE with -fno-strict-aliasing
  - Resolves: rhbz#959568 Backported libreswan nat_keepalive=yes|no (default yes) option
  - Resolves: rhbz#916743 Backported libreswan control transmission delay timing
  - Resolves: rhbz#959566 Backported libreswan ikeping compile warnings
  - Resolves: rhbz#957400 Openswan did not load aesni_intel kernel module
  - Resolves: rhbz#960171 Initial loading of CRL always fails on pluto startup [Matt Rogers]
  - Resolves: rhbz#958969 Crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: rhbz#868986 Fix for RDN values containing a comma [Matt Rogers]
  - Resolves: rhbz#747966 Missing else keyword


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-23
changelog:
  - Resolves: rhbz#998587 underspecific build requires (of nss)
  - Resolves: rhbz#1002312 IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  - Resolves: rhbz#1002633 openswan needs -fips subpackage that would provide the FIPS hmac files


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-21
changelog:
  - mod_proxy_ajp: ignore flushing if headers have not been sent (#853160)
  - mod_proxy_ajp: do not mark worker in error state when one request
    timeouts (#864317)
  - mod_ssl: do not run post script if all files are already created (#752618)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-48
changelog:
  - Fixed race condition in rpm file deployment when updating an existing file
    (#1264052)
  - Fixed problems with perl.req script (#1268021)
  - Document option "--obsoletes" (#1203714)
  - Remove _isa from all BuildRequires (#1287557)
  - Turn removal failure debug messages into warning messages (#1142386)
  - Move bdb warnings from stdin to stdout (#1296212)
  - Improved error message (#1250006)


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-40
changelog:
  - mod_proxy: do not mix workers shared memory during graceful restart (#1149906)
  - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache
    are used and SSL session is resumed (#1149703)
  - mod_ssl: log revoked certificates at the INFO level (#1161328)
  - mod_ssl: use -extensions v3_req for certificate generation (#906476)
  - core: check the config file before restarting the server (#1146194)
  - core: do not match files when using DirectoryMatch (#1016963)
  - core: improve error message for inaccessible DocumentRoot (#987590)
  - rotatelogs: improve support for localtime (#922844)
  - mod_deflate: fix decompression of files larger than 4GB (#1057695)
  - ab: fix integer overflow when printing stats with lot of requests (#1092419)
  - ab: try all addresses instead of failing on first one when not available (#1125269)
  - ab: fix read failure when targeting SSL server (#1045477)
  - apachectl: support HTTPD_LANG variable from /etc/sysconfig/httpd (#963146)
  - do not display "bomb" icon for files ending with "core" (#1069625)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
   - added dependency on libibverbs-devel pciutils-devel
   - cannot provide support for cuda (cuda_runtime_api.h). 
   - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Jay Fenlason <fenlason@redhat.com> - 1.5-2
changelog:
  - Build the 1.1 version as well, so we have the old library for backward
    compatability.
    Resolves: rhbz1070347


author: - Guenther Deschner <gdeschner@redhat.com> - 4.0.0-62.rc4
changelog:
  - resolves: #1105501 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108842 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105571 - CVE-2014-0178: Uninitialized memory exposure.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.6-1
changelog:
  - Rebase to libguesfs 1.16.6
    resolves: rhbz#798197, rhbz#797760,rhbz#790958,rhbz#798980,rhbz#795322,rhbz#796520
  - Fix virt-inspector2 man page.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.8-1
changelog:
  - Rebase to libguestfs 1.16.8
    resolves: rhbz#719879
  - Fix set_autosync function so it is not 'ConfigOnly'
    resolves: rhbz#796520
  - Fix header compilation for C++
    resolves: rhbz#799695


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.10-1
changelog:
  - Rebase to libguestfs 1.16.10
    resolves: rhbz#719879
  - Fix: libguestfs holds open file descriptors when handle is launched
    resolves: rhbz#801788
  - Fix: Document for set-pgroup need to be updated
    resolves: rhbz#801273
  - Fix: Possible null dereference and resource leaks
    resolves: rhbz#801298


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.12-1
changelog:
  - Rebase to libguestfs 1.16.12
    resolves: rhbz#719879
  - Fix: could not locate HKLM\SYSTEM\MountedDevices
    resolves: rhbz#803699


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.14-1
changelog:
  - Rebase to libguestfs 1.16.14
    resolves: rhbz#719879
  - virt-sysprep should use virt-inspector2
    resolves: rhbz#807557
  - Fix: mkfs blocksize option breaks when creating btrfs
    resolves: rhbz#807905


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.15-1
changelog:
  - Rebase to libguestfs 1.16.15
    resolves: rhbz#719879
  - Fix: inspection doesn't recognize Fedora 17+ (RHBZ#809401)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.18-2
changelog:
  - Rebase to libguestfs 1.16.18
    resolves: rhbz#719879
  - Fix: guestfs_last_error not set when qemu fails early during launch
    resolves: rhbz#811673
  - Fix: RFE: virt-sysprep: hostname can not be changed on rhel system
    (RHBZ#811112)
  - Fix: RFE: virt-sysprep: net-hwaddr not removed from "ifcfg-*" files on
    rhel (RHBZ#811117)
  - Fix: inspection fails on ubuntu 10.04 guest with encrypted swap (RHBZ#811872)
  - Fix: cannot open disk images which are symlinks to files that
    contain ':' (colon) character (RHBZ#812092)
  - BR gettext-devel so we can rerun autoconf.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.19-1
changelog:
  - Rebase to libguestfs 1.16.19
    resolves: rhbz#719879
  - Rebuild against augeas 0.9.0-3.el6
    related: rhbz#808662
  - Fix: Don't abort inspection if mdadm.conf ARRAY doesn't have a uuid.
  - Switch back to git for patch management.


author: Petr Šabata <contyk@redhat.com> - 0.9.45-4
changelog:
  - The devel subpackage now properly requires the base package to avoid
    multilib conflicts (#869633)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Adam Jackson <ajax@redhat.com> 1:7.2-3
changelog:
  - Move bdftruncate (and its perl dependency) to a subpackage.
  - %doc for the non-empty READMEs and non-stub COPYINGs.


author: Victor Toso <victortoso@redhat.com> - 0.5.1-3
changelog:
  - Add downstream patch which includes a new callback for usbredir
    clients in order to drop isoc packets if client buffer is too big
  - Add downstream patch defining USBREDIR_VERSION so applications can
    test against which version they are building
  - Resolves: rhbz#1290749


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-5
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839916


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-50
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073223)
  - added cache to hrSWRunTable to provide consistent results (#1007634)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1073237)
  - fixed snmptrapd crashing on forwarding SNMPv3 traps (#1131844)
  - fixed HOST-RESOURCES-MIB::hrSystemProcesses (#1134335)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-51
changelog:
  - added faster caching into IP-MIB::ipNetToMediaTable (#789500)
  - fixed compilation with "-Werror=format-security" (#1181994)
  - added clear error message when port specified in 'clientaddrr' config
    option cannot be bound (#886468)
  - fixed error check in IP-MIB::ipAddressTable (#1012430)
  - fixed agentx client crash on failed response (#1023570)
  - fixed dashes in net-snmp-config.h (#1034441)
  - fixed crash on monitor trigger (#1050970)
  - fixed 'netsnmp_assert 1 == new_val->high failed' message in system log
    (#1065210)
  - fixed parsing of 64bit counters from SMUX subagents (#1069046)
  - Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
    (#1070075)
  - fixed net-snmp-create-v3-user to have the same content on 32 and 64bit
    installations (#1073544)
  - fixed IPADDRESS value length in Python bindings (#1100099)
  - fixed hrStorageTable to contain 31 bits integers (#1104293)
  - fixed links to developer man pages (#1119567)
  - fixed storageUseNFS functionality in hrStorageTable (#1125793)
  - fixed netsnmp_set Python bindings call truncating at the first '\000'
    character (#1126914)
  - fixed log level of SMUX messages (#1140234)
  - use python/README to net-snmp-python subpackage (#1157373)
  - fixed forwarding of traps with RequestID=0 in snmptrapd (#1146948)
  - fixed typos in NET-SNMP-PASS-MIB and SMUX-MIB (#1162040)
  - fixed close() overhead of extend commands (#1188295)
  - fixed lmSensorsTable not reporting sensors with duplicate names (#967871)
  - fixed hrDeviceTable with interfaces with large ifIndex (#1195547)


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.22
changelog:
  - Make sure installing po files use -p
  - Fix unchecked return codes
  Resolves: #684015
  - Fix semanage is sending the wrong kind of audit events 
  - Fix Polyinstantiated namespace mount leaking to excluded users 
  Related: #786664 
  - Fix selinux-policy update shows error parsing file obj_perm_s... 
  Related: #786191


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.25
changelog:
  - Make restorecon to return proper exit codes on failure
  Resolves:#824779
  - Fix generated role_types for *.te
  Resolves:#843727


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.27
changelog:
  - Fix restorecond usage
  - Add missing te_stream_rules and if_stream_rules templates
  Resolves:#816460
  - Print a message if no default labels are assigned
  Resolves:#851479


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.28
changelog:
  - Allow to define sock file in /etc directory 
  Resolves:#816460
  - Make output of audit2allow when AVC can be allowed by boolean more readable


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.30
changelog:
  - Fix restorecond init script
  - Make setools.seinfo working only on SELinux enabled systems in seobjet.py
  Resolves:#893065


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-1
changelog:
  - New upstream version, which includes the changeset_r22324 patch.
  - Correct a typo in the Source0 line in this spec file.


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4
changelog:
  - Update to fix licencing and packaging issues:
    Use the system plpa and ltdl librarires rather than the ones in the tarball
    Remove licence incompatible files from the tarball.
  - update module.in to prepend-path		PYTHONPATH


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.2
changelog:
  - BuildRequire the infinipath-psm package to pull in support
    for it on x86_64.
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.3
changelog:
  - Split the psm support packages into their own rpms to close
    Resolves: rhbz616575 openmpi does not work with non-infinipath hardware


author: Florian Festi <ffesti@redhat.com> - 4.8.0-28
changelog:
  - Handle identical binaries for debug-info (#727872)
  - Fix typos in Japanese rpm man page (#845065)
  - Document -D and -E options in man page (#845063)
  - Add --setperms and --setuids to the man page (#839126)
  - Update man page that SHA256 is also used for file digest (#804049)
  - Remove --fileid from man page to get rid of md5
  - Remove -s from patch calls (#773503)
  - Force _host_vendor to redhat to better match toolchain (#743229)
  - Backport reloadConfig for Python API (#825147)
  - Support for dpkg-style sorting of tilde in version/release (#825087)
  - Fix explicit directory %attr() when %defattr() is active (#730473)
  - Don't load keyring if signature checking is disabled (#664696)
  - Retry read() to fix rpm2cpio with pipe as stdin (#802839)


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is "yes" or "no"
  - Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-8
changelog:
  - Fix adding of printers without specification of device-uri.
  - Patch by Tim Waugh.
  - Resolves: #526442


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-10
changelog:
  - Fix adding of printers without specification of ppd-name (#545452)
  - Patch by Tim Waugh.
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-12
changelog:
  - Avoid timeout on job-related methods for invalid jobs
  - Make sure to return an error via dbus in case of failure
  - Resolves: #567986


author: Tom Lane <tgl@redhat.com> 5.1.52-1.1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652553
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstreamed patch for RH1158799.
  - Regenerate add-final-location-rpaths patch against new release.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Resolves: rhbz#1180290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Resolves: rhbz#1180290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update IcedTea and OpenJDK sources to fix x86 build issue.
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Resolves: rhbz#1209065


author: Dave Airlie <airlied@redhat.com> 0.10.6-4
changelog:
  - Add support for default vga arb device selection
  - Update libpciaccess VGA arb code for newer kernel API


author: Adam Jackson <ajax@redhat.com> 0.10.6-5
changelog:
  - libpciaccess-0.10.6-rom-sanity.patch: If we hit the /dev/mem path for
    reading a device's ROM, verify that it looks like it at least might belong
    to the device in question by checking vendor and device ID match.  Fixes
    vbetool post hanging forever (and thus blocking boot) on some dual-gpu
    laptops.


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.1.1.el6]
changelog:
  - [fs] call d_op->d_hash on last component of umount path (Abhijith Das) [1145193 1129712]
  - [usb] serial: memory corruption flaw (Jacob Tanenbaum) [1141401 1141402] {CVE-2014-3185}
  - [char] ipmi: Clear drvdata when interface is removed (Tony Camuso) [1149578 1135910]
  - [char] ipmi: init shadow_ipmi_smi_handlers early in ipmi_si_intf (Tony Camuso) [1149580 1139464]
  - [net] ipsec: update MAX_AH_AUTH_LEN to support sha512 (Herbert Xu) [1149083 1140103]
  - [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]
  - [netdrv] virtio-net: fix big buffer receiving (Jason Wang) [1148693 1144073]
  - [netdrv] tg3: prevent ifup/ifdown during PCI error recovery (Ivan Vecera) [1142570 1117009]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.2.1.el6]
changelog:
  - [fs] udf: Avoid infinite loop when processing indirect ICBs (Jacob Tanenbaum) [1142319 1142320] {CVE-2014-6410}
  - [fs] isofs: unbound recursion when processing relocated directories (Jacob Tanenbaum) [1142268 1142269] {CVE-2014-5472 CVE-2014-5471}
  - [net] ipv6: delete expired route in ip6_pmtu_deliver (Hannes Frederic Sowa) [1161418 1156137]
  - [net] sctp: fix remote memory pressure from excessive queueing (Daniel Borkmann) [1155746 1154676] {CVE-2014-3688}
  - [net] sctp: fix panic on duplicate ASCONF chunks (Daniel Borkmann) [1155733 1154676] {CVE-2014-3687}
  - [net] sctp: fix skb_over_panic when receiving malformed ASCONF chunks (Daniel Borkmann) [1147857 1154676] {CVE-2014-3673}
  - [net] sctp: handle association restarts when the socket is closed (Daniel Borkmann) [1147857 1154676]
  - [md] dm-thin: refactor requeue_io to eliminate spinlock bouncing (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: optimize retry_bios_on_resume (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: sort the deferred cells (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: direct dispatch when breaking sharing (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: remap the bios in a cell immediately (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: defer whole cells rather than individual bios (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: factor out remap_and_issue_overwrite (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: performance improvement to discard processing (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: grab a virtual cell before looking up the mapping (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: implement thin_merge (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm: improve documentation and code clarity in dm_merge_bvec (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: adjust max_sectors_kb based on thinp blocksize (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] block: fix alignment_offset math that assumes io_min is a power-of-2 (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: throttle incoming IO (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: prefetch missing metadata pages (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-transaction-manager: add support for prefetching blocks of metadata (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin-metadata: change dm_thin_find_block to allow blocking, but not issuing, IO (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bio-prison: switch to using a red black tree (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bufio: evict buffers that are past the max age but retain some buffers (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bufio: switch from a huge hash table to an rbtree (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bufio: update last_accessed when relinking a buffer (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-bufio: use kzalloc when allocating dm_bufio_client (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin-metadata: do not allow the data block size to change (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: cleanup noflush_work to use a proper completion (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [md] dm-thin: fix DMERR typo in pool_status error path (Mike Snitzer) [1161420 1161421 1142773 1145230]
  - [fs] xfs: xlog_cil_force_lsn doesn't always wait correctly (Eric Sandeen) [1158325 1133304]
  - [netdrv] ixgbe: allow TXDCTL.WRTHRESH to be 1 will small ITR values (John Greene) [1158326 1132267]
  - [netdrv] ixgbe: Intel Change to allow itr changes without CONFIG_BQL support (John Greene) [1158326 1132267]
  - [video] offb: Fix setting of the pseudo-palette for >8bpp (Gerd Hoffmann) [1158328 1142450]
  - [video] offb: Add palette hack for qemu "standard vga" framebuffer (Gerd Hoffmann) [1158328 1142450]
  - [video] offb: Fix bug in calculating requested vram size (Gerd Hoffmann) [1158328 1142450]
  - [net] sock_queue_err_skb() dont mess with sk_forward_alloc (Jiri Benc) [1155427 1148257]
  - [net] guard tcp_set_keepalive() to tcp sockets (Florian Westphal) [1141744 1141746] {CVE-2012-6657}
  - Revert: [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]
  - [x86] kvm: fix PIT timer race condition (mguzik) [1149592 1149593] {CVE-2014-3611}
  - [x86] kvm: vmx: handle invept and invvpid vm exits gracefull (mguzik) [1144826 1144837 1144827 1144838] {CVE-2014-3646 CVE-2014-3645}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.3.1.el6]
changelog:
  - [s390] zcrypt: toleration of new crypto adapter hardware (Hendrik Brueckner) [1158311 1134984]
  - [s390] zcrypt: support for extended number of ap domains (Hendrik Brueckner) [1158311 1134984]
  - [md] dm-thin: fix potential for infinite loop in pool_io_hints (Mike Snitzer) [1161420 1161421 1142773 1145230]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.4.1.el6]
changelog:
  - [fs] nfs: Make sure pre_change_attr is initialized correctly (Scott Mayhew) [1163214 1160042]
  - [usb] ehci: Fix a regression in the ISO scheduler (Gustavo Duarte) [1162072 1145805]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.5.1.el6]
changelog:
  - [fs] nfsd: don't halt scanning the DRC LRU list when there's an RC_INPROG entry (J. Bruce Fields) [1168129 1150675]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.6.1.el6]
changelog:
  - [fs] ext4: don't count external journal blocks as overhead (Eric Sandeen) [1168504 1163811]
  - [net] sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann) [1163090 1153980] {CVE-2014-7841}
  - [netdrv] e100: fix typo in MDI/MDI-X eeprom check in e100_phy_init (John Greene) [1165985 1156417]
  - [powerpc] Add smp_mb()s to arch_spin_unlock_wait() (Gustavo Duarte) [1165986 1136224]
  - [powerpc] Add smp_mb() to arch_spin_is_locked() (Gustavo Duarte) [1165986 1136224]
  - [kernel] cpuset: PF_SPREAD_PAGE and PF_SPREAD_SLAB should be atomic flags (Aaron Tomlin) [1165002 1045310]
  - [documentation] cpuset: Update the cpuset flag file (Aaron Tomlin) [1165002 1045310]
  - [alsa] control: Make sure that id->index does not overflow (Jacob Tanenbaum) [1149140 1117312] {CVE-2014-4656}
  - [alsa] control: Handle numid overflow (Jacob Tanenbaum) [1149140 1117312] {CVE-2014-4656}
  - [s390] mm: fix SIGBUS handling (Hendrik Brueckner) [1169433 1145070]
  - [fs] gfs2: fix bad inode i_goal values during block allocation (Abhijith Das) [1165001 1130684]
  - [md] dm-thin: fix pool_io_hints to avoid looking at max_hw_sectors (Mike Snitzer) [1161420 1161421 1142773 1145230]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.7.1.el6]
changelog:
  - [kernel] ipc/sem: Fully initialize sem_array before making it visible (Rik van Riel) [1172029 1165277]
  - [kernel] ipc/sem: synchronize semop and semctl with IPC_RMID (Rik van Riel) [1172029 1165277]
  - [kernel] ipc/sem: update sem_otime for all operations (Larry Woodman) [1172025 1168588]
  - [fs] fuse: prevent null nd panic on dentry revalidate (Brian Foster) [1172022 1162782]
  - [net] netfilter: ipset: timeout values corrupted on set resize (Marcelo Leitner) [1172764 1152754]
  - [net] netfilter: fix xt_TCPOPTSTRIP in forwarding path (Marcelo Leitner) [1172027 1135650]
  - [usb] ehci: Fix panic on hotplug race condition (Don Zickus) [1172024 1107010]
  - [usb] usb_wwan: replace release and disconnect with a port_remove hook (Stanislaw Gruszka) [1172030 1148615]
  - [x86] traps: stop using IST for #SS (Petr  Matousek) [1172810 1172811] {CVE-2014-9322}


author: Doug Ledford <dledford@redhat.com> - 1.3.2-1
changelog:
  - Update to latest upstream version
  - Remove requirement on libibcommon since that library is no longer needed
  - Fix a problem with man page listing


author: Stepan Kasal <skasal@redhat.com> - 0.9.7-4
changelog:
  - repack the tarball, there are .jar files without any source
  - do not BR findutils, they are guaranteed in Fedora mock
  - fix obsolete, so that it covers only packages created before this
    spec was added to Fedora


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7
changelog:
  - Revert CVE-2011-0904 and CVE-2011-0905 patch because libvncserver is not
    vulnerable (bug #696767)


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7.1
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1184538)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1184538)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-85
changelog:
  - fix chroot logging issue (#872169)
  - change the bad key permissions error message (#880575)
  - fix a race condition in ssh-agent (#896561)
  - backport support for PKCS11 from openssh-5.4p1 (#908038)
  - add a KexAlgorithms knob to the client and server configuration (#951704)
  - fix parsing logic of ldap.conf file (#954094)
  - Add HMAC-SHA2 algorithm support (#969565)
  - store krb5 credentials after a pam session is created (#974096)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-86
changelog:
  - Add support for certificate key types for users and hosts (#906872)
  - Apply RFC3454 stringprep to banners when possible (#955792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-87
changelog:
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A (#993577)
  - fixed an issue with broken 'ssh -I pkcs11' (#908038)
  - abort non-subsystem sessions to forced internal sftp-server (#993509)
  - reverted 'store krb5 credentials after a pam session is created (#974096)'


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-90
changelog:
  - change default value of MaxStartups - CVE-2010-5107 - #908707
  - add -fips subpackages that contains the FIPS module files (#1001565)


author: Omair Majid <omajid@redhat.com> - 1.7.0.51-2.4.7.5.el6
changelog:
  - Work when capabilities are set on the binary
  - Include hardcoded install path as well as $ORIGIN in RPATH
  - Resolves: rhbz#1105293


author: Doug Ledford <dledford@redhat.com> - 1.2-13.el5
changelog:
  - Update to ofed 1.4.1 final bits
  - Rebuild against non-XRC libibverbs
  - Related: bz506097, bz506258


author: Doug Ledford <dledford@redhat.com> - 1.3.0-1
changelog:
  - Update to latest upstream release (1.2.3 -> 1.3.0)
  - Strip rocee related code out of upstream update
  - Add a buildrequires on libibumad because upstream needs it now
  - Fix lack of build on i686
  - Related: bz725016
  - Resolves: bz724896


author: Doug Ledford <dledford@redhat.com> - 1.3.0-2
changelog:
  - Update to latest upstream release
  - No longer strip rocee related code out, we can compile with it now
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 2.0-1
changelog:
  - Update to latest upstream release
  - We had to drop ib_clock_test program as no equivalent exists
    in the latest release
  - Resolves: bz806183, bz806185, bz830099


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Fix rpmdiff detected error.  Upstream overrode our cflags so stack
    protector got turned off.
  - Related: bz806183


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-4
changelog:
  - use PATH_MAX for buffers passed to realpath (#492861)
  - unconditionally inode-sort Maildir and MH folders
  - restore connection polling callback when closing SASL connection


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Jan Pacner <jpacner@redhat.com> - 5:1.5.20-5.20091214hg736b6a
changelog:
  - Resolves: #1083524 (segmentation fault when sending an e-mail from a command
    line)
  - Resolves: #750929 (SIGSEGV Crash while parsing certificates file)
  - Resolves: #690409 (mutt crash; seg fault in mx_update_context)
  - Resolves: #674271 (SIGSEGV when browsing pop account)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.7-1
changelog:
  - Fix pidstat.process_flag()
  - Introduce pflags utility
  - Parse IRQ affinities for !root
  - Add PF_NO_SETAFFINITY const


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.9-1
changelog:
  - Adds documentations to classes, more work to do on methods
  - Fixes parsing of users in /proc/interrupts users field
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1245677


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-51
changelog:
  - Release 1.2.11.15-51
  - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965)
  - Resolves: #1171308 - Don't add unhashed password mod if we don't have an unhashed value (DS 47752)
  - Resolves: #1167976 - memberof skip nested groups breaks the plugin (DS 47963)
  - Resolves: #1185025 - ldclt needs to support SSL Version range (DS 47996)
  - Resolves: #1183820 - Windows Sync accidentally cleared raw_entry (DS 47989)
  - Resolves: #1155569 - nsslapd-db-locks modify not taking into account. (DS 47934)
  - Resolves: #1145072 - Bad manipulation of passwordhistory (DS 47905)
  - Resolves: #1144092 - During schema reload sometimes the search  returns no results (DS 47973)
  - Resolves: #1145374 - WinSync - manual replica refresh removes AD-only member values from DS and AD in groups (DS 47884)
  - Resolves: #1193243 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV (DS 47659)
  - Resolves: #1150368 - provide enabled ciphers as search result (DS 47880)
  - Resolves: #1153739 - Add SSL/TLS version info to the access log (DS 47945)
  - Resolves: #1118285 - Disable SSL v3, by default [389-ds-base-1.2.11 only] (DS 47928)
  - Resolves: #1193241 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949)
  - Resolves: #1179763 - COS cache doesn't properly mark vattr cache as  invalid when there are multiple suffixes (DS 47981)
  - Resolves: #1175868 - Incorrect assumption in ndn cache (DS 547)
  - Resolves: #1159124 - perl scripts not returning expected error code (DS 47962)
  - Resolves: #1115960 - Nested COS definitions can be incorrectly  processed (DS 47980)
  - Resolves: #1175868 - Backport of Normalized DN Cache (DS 408)
  - Resolves: #1174892 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)
  - Resolves: #1174892 - Need to refresh cache entry after called betxn postop plugins (DS 47750)
  - Resolves: #1193235 - Fix coverity issues (2014/12/16) (DS 47965)
  - Resolves: #1193235 - Fix coverity issues (2014/11/24) (DS 47965)
  - Resolves: #1169974 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970)
  - Resolves: #1169975 - Fix coverity issue (DS 47969)
  - Resolves: #1169975 - COS memory leak when rebuilding the cache (DS 47969)
  - Resolves: #1170706 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967)
  - Resolves: #1167976 - skip nested groups breaks memberof fixup task (DS 47963)
  - Resolves: #1167976 - RFE - memberOf - add option to skip nested group lookups during delete operations (DS 47963)
  - Resolves: #1171357 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950)
  - Resolves: #1162704 - Memory leak in password admin if the admin entry does not exist (DS 47958)
  - Resolves: #1162704 - PasswordAdminDN attribute is not properly returned to client (DS 47952)
  - Resolves: #1145379 - Fix backport issue to 1.2.11 (DS 47900)
  - Resolves: #1145379 - Server fails to start if password admin is set (DS 47900)
  - Resolves: #1145379 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900)
  - Resolves: #1141735 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24 (DS 47907)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-52
changelog:
  - Release 1.2.11.15-52
  - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965)


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.15-4
changelog:
  - Related: rhbz#543948
  - TPROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-1
changelog:
  - Resolves: #564296 - Rebase to new upstream tarball (fixes licensing issues)
  - Resolves: #561743 - CVE-2010-0308 squid: temporary DoS (assertion failure) triggered by truncated DNS packet (SQUID-2010:1)
  - fixes rpmlint issues in spec file
  - fixed rpmlint issue initscript file


author: Jiri Skala <jskala@redhat.com> -7:3.1.4-1
changelog:
  - Resolves: #564296 - Rebase squid to stable upstream tarball 3.1.4
  - bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Jiri Skala <jskala@redhat.com> -7:3.1.10-1
changelog:
  - Resolves: #639365 - Rebase squid to version 3.1.10
  - Resolves: #666533 - small memleak in squid-3.1.4


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.9.1078967-1
changelog:
  - Related: rhbz#675821 - First build of 0-10 branch, but because final
    numbering strategy is still undecided, the 0.9.x label persists for this
    build. QMF has been removed entirely and placed into its own package, as
    there were not only inconsistencies in the old packaging, but also name
    clashes.


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.26.1.el6]
changelog:
  - [net] bnep: fix buffer overflow (Don Howard) [681315 681316] {CVE-2011-1079}
  - [scsi] aic94xx: world-writable sysfs update_bios file (Don Howard) [679306 679307]
  - [x86] tc1100-wmi: world-writable sysfs wireless and jogdial files (Don Howard) [679306 679307]
  - [x86] acer-wmi: world-writable sysfs threeg file (Don Howard) [679306 679307]
  - [mfd] ab3100: world-writable debugfs *_priv files (Don Howard) [679306 679307]
  - [v4l] sn9c102: world-wirtable sysfs files (Don Howard) [679306 679307]
  - [x86] Fix EFI pagetable to map whole memory (Takao Indoh) [670850 664364]
  - [kernel] CAP_SYS_MODULE bypass via CAP_NET_ADMIN (Phillip Lougher) [681772 681773] {CVE-2011-1019}
  - [kernel] failure to revert address limit override in OOPS error path (Dave Anderson) [659572 659573] {CVE-2010-4258}
  - [fs] xfs: zero proper structure size for geometry calls (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [fs] xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1 (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [tty] tty_audit: fix tty_audit_add_data live lock on audit disabled (Danny Feng) [684275 680126]
  - [kernel] proc: protect mm start_code/end_code in /proc/pid/stat (Eugene Teo) [684572 684573] {CVE-2011-0726}
  - [net] dccp oops (Eugene Teo) [682957 682958] {CVE-2011-1093}
  - [firmware] dcdbas: force SMI to happen when expected (Shyam Iyer) [683440 664832]
  - [security] ima: fix add LSM rule bug (Eric Paris) [667914 667915] {CVE-2011-0006}
  - [sound] caiaq: Fix possible string buffer overflow (Jaroslav Kysela) [678475 678476] {CVE-2011-0712}
  - [net] ixgbe: add option to control interrupt mode (Andy Gospodarek) [670114 670110 622640 637332]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.27.1.el6]
changelog:
  - [scsi] megaraid: give FW more time to recover from reset (Tomas Henzl) [695322 692673]
  - [netdrv] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [683820 669231]
  - [sound] ALSA: hda - nvhdmi: Add missing codec IDs, unify names (Jaroslav Kysela) [683817 636922]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Larry Woodman) [695256 691310]
  - [net] fix ebtables stack infoleak (Eugene Teo) [681322 681323] {CVE-2011-1080}
  - [drm] fix unsigned vs signed comparison issue in modeset ctl ioctl (Don Howard) [679927 679928] {CVE-2011-1013}
  - [pci] Enable ASPM state clearing regardless of policy (Alex Williamson) [694073 681017]
  - [pci] Disable ASPM if BIOS asks us to (Alex Williamson) [694073 681017]
  - [mm] do not keep kswapd awake for an unreclaimable zone (Johannes Weiner) [694186 633825]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.28.1.el6]
changelog:
  - [net] bonding: fix jiffy comparison issues (Andy Gospodarek) [698109 696337]
  - [drm] radeon/kms: check AA resolve registers on r300 + regression fix (Dave Airlie) [680001 680002] {CVE-2011-1016}
  - [infiniband] uverbs: Handle large number of entries in poll CQ (Eugene Teo) [688429 696137] {CVE-2011-1044 CVE-2010-4649}
  - [net] sctp: fix the INIT/INIT-ACK chunk length calculation (Thomas Graf) [695386 690743] {CVE-2011-1573}
  - [net] CAN: Use inode instead of kernel address for /proc file (Danny Feng) [664560 664561] {CVE-2010-4565}
  - [fs] inotify: fix double free/corruption of stuct user (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] netfilter: ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689341 689342]
  - [net] bonding: change test for presence of VLANs (Jiri Pirko) [696487 683496]
  - [scsi] scsi_dh: fix reference counting in scsi_dh_activate error path (Mike Snitzer) [696889 680140]
  - [net] enable VLAN NULL tagging (Neil Horman) [683810 633571]
  - [scsi] scsi_dh: propagate SCSI device deletion (Mike Snitzer) [698114 669411]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.29.1.el6]
changelog:
  - [mm] Revert "[mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode" (Larry Woodman) [695256 691310]


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-13
changelog:
  - Require matching arch for freshen on colored transactions (#553108, #479608)
  - Verify that generated signature can be used by rpm (#608599)
  - Fix broken pipe on font provide generation + better error message (#609117)
  - Fix find-debuginfo.sh behavior on cross-directory hardlinks (#618428)
  - Generate gdb index for debuginfos (#652787)
  - Fix verifyscript return code on failure (#668629)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-14
changelog:
  - Fix signature comparison on package resigning (#608608)
  - Let error messages from gpg through on passphrase checking (#607222)
  - Only enforce default umask during transaction (#565843)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-17
changelog:
  - Allow self conflicts (#651951)
  - Add support for xz compression in rpm2cpio.sh (#674348)
  - Don't error out on already imported GPG keys (#680889)
  - Fix file conflict handling for uncolored files (#705115)
  - Fix file attribute handling with %defattr(-) (#705993)
  - Don't error out when trying to add the same signature again (#707449)
  - Fix signature checking (#721363)


author: Andreas Schneider <asn@redhat.com> - 4.0.0-67.rc4
changelog:
  - resolves: #1290709 - CVE-2015-7540
  - related: #1290709 - CVE-2015-5299
  - related: #1290709 - CVE-2015-5296
  - related: #1290709 - CVE-2015-5252
  - related: #1290709 - CVE-2015-5330


author: David Howells <dhowells@redhat.com> - 1.3-1
changelog:
  - Fix compiler warnings in request-key.
  - Expose the kernel function to get a key's security context.
  - Expose the kernel function to set a processes keyring onto its parent.
  - Move libkeyutils library version to 1.3.


author: Parag Nemade <pnemade@redhat.com> -1.1.9-4
changelog:
  - Resolves: rh#494810-[indic][m17n-db][m17n-contrib] ibus .engine files no longer needed for new ibus


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.8.1.el6]
changelog:
  - [fs] GFS2: force a log flush when invalidating the rindex glock (Benjamin Marzinski) [717018 702263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.9.1.el6]
changelog:
  - [scsi] cciss: Annotate cciss_kdump_soft_reset and cciss_sent_reset as __devinit (Tomas Henzl) [715397 698268]
  - [scsi] cciss: Don't wait forever for soft reset to complete, give up after awhile (Tomas Henzl) [715397 698268]
  - [scsi] cciss: use cmd_alloc not cmd_special_alloc for the kdump soft reset command (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do not use bit 2 doorbell reset (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do not attempt PCI power management reset method if we know it won't work (Tomas Henzl) [715397 698268]
  - [scsi] cciss: increase timeouts for post-reset no-ops (Tomas Henzl) [715397 698268]
  - [scsi] cciss: remove superfluous sleeps around reset code (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do soft reset if hard reset is broken (Tomas Henzl) [715397 698268]
  - [scsi] cciss: clarify messages around reset behavior (Tomas Henzl) [715397 698268]
  - [scsi] cciss: increase time to wait for board reset to start (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out irq_request code (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out scatterlist allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out command pool allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] cciss: use new doorbell-bit-5 reset method (Tomas Henzl) [715397 698268]
  - [scsi] cciss: wait longer for no-op to complete after resetting controller (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do a better job of detecting controller reset failure (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do not attempt PCI PM reset if we know it will not work (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: remove superfluous sleeps around reset code (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do soft reset if hard reset is broken (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: clarify messages around reset behavior (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: factor out irq request code (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: factor out cmd_pool allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do not use bit 2 doorbell reset, it causes NMIs (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: wait longer for no-op to complete after resetting controller (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: use new doorbell-bit-5 reset method (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: adjust timing of post-reset sleeps (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do a better job of detecting controller reset failure (Tomas Henzl) [715397 698268]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.10.1.el6]
changelog:
  - [virt] ksm: fix race between ksmd and exiting task (Andrea Arcangeli) [710340 710341] {CVE-2011-2183}
  - [kernel] proc: signedness issue in next_pidmap() (Jerome Marchand) [697824 697825] {CVE-2011-1593}
  - [net] bluetooth: Prevent buffer overflow in l2cap config request (Jiri Pirko) [716809 716810] {CVE-2011-2497}
  - [fs] NLM: Don't hang forever on NLM unlock requests (Jeff Layton) [709548 709549] {CVE-2011-2491}
  - [fs] NFS: Fix NFSv3 exclusive open semantics (Jeff Layton) [719925 694210]
  - [fs] GFS2: Incorrect inode state during deallocation (Steven Whitehouse) [714982 712139]
  - [virt] KVM: Fix register corruption in pvclock_scale_delta (Avi Kivity) [719910 712102]
  - [netdrv] ehea: Fix memory hotplug oops (Steve Best) [720914 702036]
  - [net] Fix memory leak/corruption on VLAN GRO_DROP (Herbert Xu) [695175 695176] {CVE-2011-1576}
  - [md] Fix resync hang after surprise removal (James Paradis) [719928 707268]
  - GFS2: make sure fallocate bytes is a multiple of blksize (Benjamin Marzinski) [720863 695763] {CVE-2011-2689}
  - [kernel] Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code (Oleg Nesterov) [715521 690033] {CVE-2011-1182}
  - [redhat] config: enable parallel port printer support (Aristeu Rozanski) [713827 635968]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.11.1.el6]
changelog:
  - [mm] hold the page lock until after set_page_stable_node (Andrea Arcangeli) [726095 683658]
  - [netdrv] be2net: remove certain cmd failure logging (Ivan Vecera) [725329 719304]
  - [net] nl80211: missing check for valid SSID size in scan operation (Stanislaw Gruszka) [718157 718158] {CVE-2011-2517}
  - [net] bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace. (Thomas Graf) [703022 703023] {CVE-2011-2492}
  - [net] inet_diag: fix validation of user data in inet_diag_bc_audit() (Thomas Graf) [714540 714541] {CVE-2011-2213}
  - [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716829 716830] {CVE-2011-2495}
  - [fs] validate size of EFI GUID partition entries (Anton Arapov) [703029 703030] {CVE-2011-1776}
  - [fs] ext4: Fix max file size and logical block counting of extent format file (Lukas Czerner) [722568 722569] {CVE-2011-2695}
  - [virt] kvm: Disable device assignment without interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [virt] iommu-api: Extension to check for interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [netdrv] r8169: fix Rx checksum offloading bugs (Ivan Vecera) [723807 635596]
  - [netdrv] be2net: changes for BE3 native mode support (Ivan Vecera) [723820 695231]


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-70
changelog:
  -Release 1.2.11.15-70
  - Resolves: #1298095 - 1.2.11.15-68.el6_7 ns-slapd crash in ipa context - c_mutex lock memory corruption and self locks (DS 48406, revert DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-71
changelog:
  -Release 1.2.11.15-71
  - Resolves: #1306572 - slapd process crashes on entry modification (DS 47964)
  - Resolves: #1309962 - keep alive entries can break replication (DS 48445)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-72
changelog:
  -Release 1.2.11.15-72
  - Resolves: #1314241 - Double free while adding entries (DS 48287)
  - Resolves: #1314729 - change severity of some messages related to "keep alive" entries (DS 48420)


author: Harald Hoyer <harald@redhat.com> 004-316
changelog:
  - create the initramfs non-world readable
  - unset LD_LIBRARY_PATH and GREP_OPTIONS
  Resolves: rhbz#912299
  - add mkinitrd man page
  Resolves: rhbz#610462
  - add bonding
  Resolves: rhbz#851666
  - lvm: add "--yes" to lvchange
  Resolves: rhbz#720684
  - crypt: add support for keyfiles in the initramfs
  Resolves: rhbz#886194
  - start iscsi regardless of network, if requested
  Resolves: rhbz#813687
  - install multipath module only, when root is multipath in generic mode
  Resolves: rhbz#916144
  - fips: handle checksum checks for RHEV kernels
  Resolves: rhbz#947729
  - add xhci-hcd driver
  Resolves: rhbz#960729


author: Martin Stransky <stransky@redhat.com> - 60.7.2-3
changelog:
  - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
    with gmail with ssl/tls and OAuth2.


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.14-3
changelog:
  - prevent crmd crash after unexpected Pacemaker Remote connection takeover
   - ensure package URL is displayed correctly

    Resolves: rhbz#1252206


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.2
changelog:
  - Add patch to fix dmidecode detection of Hitachi Virtage
    (thanks Satoru Moriya, Masaki Kimura)
    resolves: rhbz#829427


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-634.el6]
changelog:
  - [scsi] cxgbi: Convert over to dst_neigh_lookup (Sai Vemuri) [1296461]
  - [netdrv] cxgb4: For T4, don't read the Firmware Mailbox Control register (Sai Vemuri) [1296469]
  - [netdrv] cxgb4: Use ACCES_ONCE macro to read queue's consumer index (Sai Vemuri) [1296484]
  - [netdrv] cxgb4: prevent simultaneous execution of service_ofldq (Sai Vemuri) [1296483]
  - [netdrv] cxgb4: Adds PCI device id for new T5 adapters (Sai Vemuri) [1296481]
  - [netdrv] cxgb4: Don't disallow turning off auto-negotiation (Sai Vemuri) [1296476]
  - [mm] check if section present during memory block registering (Xunlei Pang) [1297840]
  - [tty] ldisc: Close/Reopen race prevention should check tty->ldisc (Denys Vlasenko) [1312383]
  - [fs] proc-vmcore: wrong data type casting fix (Baoquan He) [1312206]
  - [infiniband] iw_cxgb3: Ignore positive return values from the ofld send functions (Sai Vemuri) [1296999]
  - [netdrv] cxgb4: Deal with wrap-around of queue for Work request (Sai Vemuri) [1296482]
  - [infiniband] iw_cxgb4: detect fatal errors while creating listening filters (Sai Vemuri) [1296480]
  - [md] dm snapshot: suspend merging snapshot when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: suspend origin when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: allocate a per-target structure for snapshot-origin target (Mike Snitzer) [1177389]
  - [md] dm: fix a race condition in dm_get_md (Mike Snitzer) [1177389]
  - [infiniband] iw_cxgb4: pass the ord/ird in connect reply events (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: fix misuse of ep->ord for minimum ird calculation (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: reverse the ord/ird in the ESTABLISHED upcall (Sai Vemuri) [1296478]
  - [usb] Revert "Revert 'Update USB default wakeup settings'" (Torez Smith) [1319081]
  - [netdrv] ibmveth: add support for TSO6 (Gustavo Duarte) [1318412]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-635.el6]
changelog:
  - [mm] backing-dev: ensure wakeup_timer is deleted (Jeff Moyer) [1318930]
  - [hv] vss: run only on supported host versions (Vitaly Kuznetsov) [1319813]
  - [sound] hda: Fix internal speaker for HP Z240 (Jaroslav Kysela) [1316673]
  - [perf] trace: Fix race condition at the end of started workloads (Jiri Olsa) [1302928]
  - [fs] nfsd: Combine decode operations for v4 and v4.1 (J. Bruce Fields) [1314536]
  - [hv] revert "vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: don't loose HVMSG_TIMER_EXPIRED messages" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: remove code duplication in message handling" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid wait_for_completion on crash" (Vitaly Kuznetsov) [1318882]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-636.el6]
changelog:
  - [netdrv] mlx4_en: Choose time-stamping shift value according to HW frequency (Kamal Heib) [1320448]
  - [fs] anon_inodes implement dname (Aristeu Rozanski) [1296019]
  - [net] packet: set transport header before doing xmit (John Greene) [1309526]
  - [net] tuntap: set transport header before passing it to kernel (John Greene) [1309526]
  - [netdrv] macvtap: set transport header before passing skb to lower device (John Greene) [1309526]
  - [net] ipv6: tcp: add rcu locking in tcp_v6_send_synack() (Jakub Sitnicki) [1312740]
  - [net] ipv6: sctp: add rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] ipv6: add complete rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] dccp: remove unnecessary codes in ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: remove unnecessary codes in tcp_ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: Refactor update of IPv6 flowi destination address for srcrt (RH) option (Jakub Sitnicki) [1312740]
  - [net] ipv6: protect flow label renew against GC (Sabrina Dubroca) [1313231]
  - [net] ipv6: fix possible deadlock in ip6_fl_purge / ip6_fl_gc (Sabrina Dubroca) [1313231]
  - [perf] annotate: Support full source file paths for srcline fix (Jiri Olsa) [1304472 1304479]
  - [perf] tools: Support full source file paths for srcline (Jiri Olsa) [1304472 1304479]
  - [perf] annotate: Fix -i option, which is currently ignored (Jiri Olsa) [1304472 1304479]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-637.el6]
changelog:
  - [netdrv] mlx4-en: add missing patch to init rss_rings in get_profile (Don Dutile) [1321164]
  - [netdrv] mlx4-en: disable traffic class queueing by default (Don Dutile) [1321164]
  - [netdrv] mlx4_core: Fix mailbox leak in error flow when performing update qp (Don Dutile) [1321164]
  - [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259581] {CVE-2015-5157}
  - [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259581] {CVE-2015-5157}


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.2-7
changelog:
  - Merge from F18 (#835257)
    - disable xorg.conf, enable HAL files instead
    - disable smooth scrolling
    - disable coasting by default to maintain RHEL6.0 behavior


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Put the udev rules file in the right place
    Resolves: rhbz866732
  - include a patch from upstream to fix undefined references
    Resolves: rhbz887730


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-66.1
changelog:
  - Resolves: rhbz#758696 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758713 - LDAP failover not working if server refuses
                            connections


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-5
changelog:
  - Builtins like echo and printf won't report errors
    when output does not succeed due to EPIPE
    Resolves: #664468


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-12
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - Enable system-wide bash_logout
    Resolves: #677439
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Karsten Hopp <karsten@redhat.com> 1.12-1
changelog:
  - update to wget-1.12
  - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate
    with NUL in name


author: Chris Feist <cfeist@redhat.com> - 3.9.2-20
changelog:
  - Update the rgmanager SAPInstance agent so resource limits configured in
    /usr/sap/services are properly applied.
  - Resolves: rhbz#869695


author: Chris Feist <cfeist@redhat.com> - 3.9.2-21
changelog:
  - Fixed missing '$' in lvm_by_vg.sh script
  - Retry VG shutdown to cope with udev collisions
  - Resolves: rhbz#729812


author: David Vossel <dvossel@redhat.com> - 3.9.2-21-8
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#1001519


author: Doug Ledford <dledford@redhat.com> - 1.1.6-1
changelog:
  - Update to latest upstream release (includes FDR link speed capability)
  - Related: bz751220, bz750609


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Don't print link state on iWARP links as it's always invalid
  - Don't try to do ud transfers in excess of port MTU
  - Resolves: bz822781


author: Doug Ledford <dledford@redhat.com> - 1.1.7-1
changelog:
  - Update to latest upstream release
  - Remove patches that are now part of upstream
  - Fix ibv_srq_pingpong with negative value to -s option
  - Resolves: bz879191


author: Robert Kuska <rkuska@redhat.com> - 2.6.6-59
changelog:
  - Let ConfigParse handle options without values
  - Add check phase to specfile, fix and skip relevant failing tests
  Resolves: rhbz#1031709


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-63
changelog:
  - Since -libs now provide python-ordered dict, added ordereddict
    dist-info to site-packages
  Resolves: rhbz#1199997


author: Tomas Orsava <torsava@redhat.com> - 2.6.6-65
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346354


author: Chris Feist <cfeist@redhat.com> - 0.9.26-6
changelog:
  - Added additional specific steps for configuring pcs on Red Hat Enterprise
    Linux 6
  - Resolves: rhbz#878682


author: Chris Feist <cfeist@redhat.com> - 0.9.26-9
changelog:
  - pcs now allows assigning constraints to group/clone/multistate resources
  - pcs no longer deletes resources from the lrm during resource removal
  - Resolves: rhbz#894174 rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.26-10
changelog:
  - Removed one extra place where pcs incorrectly deleted resources from the lrm
  - Resolves: rhbz#893221


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make 3des strength to be 128 bits instead of 168 (#1056616)
  - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits
  - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys)
  - FIPS mode: add DH selftest
  - FIPS mode: reseed DRBG properly on RAND_add()
  - FIPS mode: add RSA encrypt/decrypt selftest
  - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key
  - use the key length from configuration file if req -newkey rsa is invoked


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.13.2.el6]
changelog:
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}


author: Harald Hoyer <harald@redhat.com> 004-26
changelog:
  - wait for LVM and crypt devices to appear
  Resolves: rhbz#607699
  - add sleeps to fcoe-up and move it out of udev
  Resolves: rhbz#611976
  - fixed selinux return code handling
  Resolves: rhbz#615950


author: Kamil Dudka <kdudka@redhat.com> - 4.3.10-12
changelog:
  - avoid using uninitialised memory after lexer realloc (#1146119)
  - replace an incorrect comment in /etc/zshenv (#1103697)
  - optimize matching of multiple * in wildcards (#1131172)
  - use heap rather than stack allocation for variable length arrays (#567215)
  - prevent jobs -Z from destroying environment variables (#878324)
  - shell emulation doc addition (#1104021)


author: Jack Magne <jmagne@redhat.com> - 4.2.6-16
changelog:
  - bug 694661 - TKS instance crash during token enrollment.
    Back out of previous patch for #676083.


author: Christina Fu <cfu@redhat.com> - 4.2.6-17
changelog:
  - Bug 670980 - Cannot create system certs when using LunaSA HSM in FIPS Mode
    and ECC algorithms (support tokens that don't do ECDH)


author: Christina Fu <cfu@redhat.com> - 4.2.6-21
changelog:
  - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - support for PKCS5v2; support for secure PKCS12
  - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
    in-place upgrade( CS 8.0->8.1)


author: Christina Fu <cfu@redhat.com> - 4.2.6-23
changelog:
  - Bugzilla Bug #804838 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #797352 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #797353 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Jan Friesse <jfriesse@redhat.com> 1.4.0-1
changelog:
  - Resolves: rhbz#709758
  - Resolves: rhbz#722522
  - Resolves: rhbz#692620
  - Resolves: rhbz#529136
  - Resolves: rhbz#696883
  - Resolves: rhbz#707876
  - Resolves: rhbz#712115
  - Resolves: rhbz#722469
  - Resolves: rhbz#696887
  - Resolves: rhbz#707860
  - Resolves: rhbz#712126
  - Resolves: rhbz#712188
  - Resolves: rhbz#599327
  - Resolves: rhbz#667652
  - Resolves: rhbz#677583
  - Resolves: rhbz#688260
  - Resolves: rhbz#707862
  - Resolves: rhbz#707867
  - Resolves: rhbz#707873
  - Resolves: rhbz#707875
  - Resolves: rhbz#682813
  - Rebase to Corosync 1.4.0


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-2
changelog:
  - Resolves: rhbz#722469
  - Resolves: rhbz#732698
  - rrp: Handle endless loop if all ifaces are faulty (rhbz#722469)
  - merge upstream commit dc862e15cc084926eccc5e1ff3241611c0cb54f0 (rhbz#722469)
  - rrp: Higher threshold in passive mode for mcast (rhbz#722469)
  - merge upstream commit 4e32c3112a2f13a302709d72b0ae989287a48563 (rhbz#722469)
  - Ignore memb_join messages during flush operations (rhbz#732698)
  - merge upstream commit be608c050247e5f9c8266b8a0f9803cc0a3dc881 (rhbz#732698)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-3
changelog:
  - Resolves: rhbz#722469
  - totemconfig: change minimum RRP threshold
  - merge upstream commit b1aba94732edc2ff084b7dd559a08b687f464ed0 (rhbz#722469)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4
changelog:
  - Resolves: rhbz#722522

  - Deliver all messages from my_high_seq_recieved to the last gap (rhbz#722522)
  - merge upstream commit e530376a60dc862f135bd0d4c52aebb43d948423 (rhbz#722522)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-5
changelog:
  - Resolves: rhbz#743810
  - Resolves: rhbz#743812
  - Resolves: rhbz#743813
  - Resolves: rhbz#743815
  - Resolves: rhbz#752159
  - Resolves: rhbz#752951
  - Resolves: rhbz#758209
  - Resolves: rhbz#747628

  - coroipcc: use malloc for path in service_connect (rhbz#743810)
  - merge upstream commit 3cfb0792155448d592b043d0d05586c1b76c9499 (rhbz#743810)
  - cpg: Handle errors from totem_mcast (rhbz#743812)
  - merge upstream commit eef5827dbb01433583da7ad5382789c2f83b9696 (rhbz#743812)
  - cfg: Handle errors from totem_mcast (rhbz#743812)
  - merge upstream commit af1b122e68dfeb8a42cf9c682de061859d8077ec (rhbz#743812)
  - A CPG client can sometimes lockup if the local node is in the downlist (rhbz#743813)
  - merge upstream commit ac1d79ea7c14997353427e962865781d0836d9fa (rhbz#743813)
  - Resolve a deadlock between the timer and serialize locks. (rhbz#743815)
  - merge upstream commit 23112099e1c2b620e6976ca099d2b9afc80721aa (rhbz#743815)
  - Add calls to missing object_find_destroy() to fix mem leaks (rhbz#752159)
  - merge upstream commit 9ddb845f412531b6a2761f42823b6be43216a9c8 (rhbz#752159)
  - A rare condition can lead to fail to recv (rhbz#758209)
  - merge upstream commit c68fb0caa2e337c6fdebfe564402c6d06b7fb018 (rhbz#758209)
  - Free mem allocated by getaddrinfo (rhbz#752951)
  - merge upstream commit a973b7cfb0688cd667d32df714014bbf4cf0bc77 (rhbz#752951)
  - corosync and cman conflict on /var/log/cluster permissions (rhbz#747628)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-7.1
changelog:
  - Resolves: rhbz#849554

  - Fix dbus part of corosync-notifyd (rhbz#849554)
  - merge upstream commit 4ac9cd59e7873914fe5845e69fd79b7a2877c290 (rhbz#849554)
  - flatiron: Free outq items list on conn exit (rhbz#849554)
  - merge upstream commit 4cdaf8ef1e7676b179eaeb5bde18d4b63d17ce52 (rhbz#849554)


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-23
changelog:
  - resolve symbolic and hard link vulnerabilities
  - defend against directory traversal attack
  - Resolves: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282143


author: Doug Ledford <dledford@redhat.com> - 1.0-6
changelog:
  - Tweak init script for LSB compliance
  - Tweak ifup-ib script to work properly with bonded slaves that need their
    MTU set
  - Tweak ifup-ib script to properly change connected mode either on or off
    instead of only setting it on but not turning it off if the setting changes


author: Doug Ledford <dledford@redhat.com> - 1.0-7
changelog:
  - Require a version of udev that's known to contain udevadm and support
    usage of udevadm trigger and udevadm settle
  - Update rdma.init to use the proper udev commands
  - Resolves: bz586594


author: Doug Ledford <dledford@redhat.com> - 1.0-8
changelog:
  - Update udev rules syntax to eliminate warnings emitted via syslog (bz603264)
  - Add new init script for starting/stopping nfs over rdma support
  - Require that the nfs-rdma service be down before stopping the rdma
    service (bz613437)
  - Change ifup-ib to properly account for the fact that the [ test program
    does not process tests in order and fail immediately on first failing
    test, resulting in error messages due to unquoted environment variables
    that don't need quoting in the second test due to the fact that the
    first test guarantees they exist.  Or that's how things should be, but
    they aren't, so rewrite tests to accommodate this fact. (bz612284)
  - Use ip instead of ifconfig as ifconfig knows it doesn't handle infinband
    hardware addresses properly (even though we don't care, we aren't using
    it for that) and prints out copious warning messages (bz613086)
  - Related: bz612284, bz613086


author: Doug Ledford <dledford@redhat.com> - 1.0-9
changelog:
  - Minor tweak to rdma init script to do the udevadm trigger command in two
    seperate calls since we can no longer match on the same item twice and
    have the command succeed for both match types.
  - Resolves: bz612234


author: Doug Ledford <dledford@redhat.com> - 1.0-10
changelog:
  - Fix ifup-ib script to be compatible with change to core function
    expand_config
  - Fix renaming of ib? devices to the name given in the ifcfg-* file
  - Fix the fact that once you down the rdma stack and reload it, the
    HWADDR line in ifcfg-* files no longer matches the address of the
    ports.  We now match only on the part of the HWADDR that doesn't
    change.
  - Fix rdma init script to know about cxgb4 adapters
  - Fix rdma init script to find all InfiniBand interfaces whether they
    use an ib? name or a custom name
  - Fix rdma init script to down all InfiniBand interfaces on rdma shutdown
    regardless of interface name
  - Fix rdma init script to find all ifcfg-* files that apply to ipoib
    interfaces without requiring that they be named ib?
  - Fix rdma init script to know to unload ib_qib module on stop
  - Add an ifdown-ib file that fixes the HWADDR not matching on the second
    or later times you down the rdma subsystem
  - Related: bz725016
  - Resolves: bz678947, bz721101


author: Doug Ledford <dledford@redhat.com> - 1.0-13
changelog:
  - Default to not loading the RDS stack by default as it has some known
    issues at the moment.
  - Resolves: bz747378


author: Doug Ledford <dledford@redhat.com> - 1.0-14
changelog:
  - Clear the umask before loading kernel modules otherwise the kernel
    modules inherit our umask and don't create the /dev/infiniband
    files with the proper permissions.
  - Resolves: bz748087


author: Dan Williams <dcbw@redhat.com> - 0.8.1-25
changelog:
  - core: rebase bonding patch to latest upstream git master (rh #717475)
  - core: add support for VLAN interfaces (rh #712302)
  - docs/cli: fix some infiniband omissions (rh #685096)


author: Jiří Klimeš <jklimes@redhat.com> - 0.8.1-27
changelog:
  - core: add keyfile plugin support for InfiniBand (rh #685096)
  - core: use capital 'B' in InfiniBand name (rh #685096)
  - docs: fix some docs generation errors (rh #685096) (rh #717475) (rh #712302)


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-31
changelog:
  - core: fix carrier handling on devices that don't support carrier detection
  - core: fix handling of bond/VLAN enable config option (rh #804797)


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-9
changelog:
  - Update the man page and configuration generator to reflect the actual
    behavior of the default value for the "interface" option.
    Resolves: rhbz#809101


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-10
changelog:
  - Drop the fence-virtd-libvirt-qpid subpackage.
    Resolves: rhbz#859235
  - Add a delay option to fence_virt/fence_xvm
    Resolves: rhbz#823542
  - Return failure from fence_virtd when attempting to fence a nonexistent VM
    Resolves: rhbz#853927
  - Improve the documentation of the 'hash' parameter in fence_virt.conf
    Resolves: rhbz#843104


author: Daniel Vrátil <dvratil@redhat.com> 1.2.1-3
changelog:
  - Backport couple upstream patches to support running Akonadi when $HOME is on AFS (resolves #1073939)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-1
changelog:
  - Update to upstream version 2.12.0
    Resolves: #825471, #739118, #716474
  - Change post created symlinks group owner to 'pegasus'
    Resolves: #759064
  - Fix invocation of useradd without specifying a UID
    Resolves: #800319
  - Fix initscript is not world readable
    Resolves: #824297


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-2
changelog:
  - Fix local-or-remote-auth patch to work with IPv6 and with enabled
    privilege separation
    Resolves: #869664


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-4
changelog:
  - Backported and slightly modified sslBackwardCompatibility option for disabling
    unsafe SSLv3 protocol
    Resolves: #1238329


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-4
changelog:
  - Create a haldaemon group in the spec file as shadow-utils has been updated
    and no longer automatically creates a private group for UIDs < 200.
  - Resolves: #594305


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.8-1
changelog:
  - Update to 0.2.8 release (rhbz #717887)
  - Fixes missing VIR_DOMAIN_XML_SECURE binding (rhbz #705792)


author: Daniel P. Berrange <berrange@redhat.com> - 0.9.10-3
changelog:
  - Fix migration speed units (rhbz #800766)
  - Fix typed param string handling (rhbz #800734)
  - Fixed block stats ref counting


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-4
changelog:
  - resolves: #1051656 - Fix gecos field copy debug warning.
  - resolves: #1061301 - Add glusterfs vfs module.
  - resolves: #1087472 - Fix libsmbclient crash when HOME variable isn't set.
  - resolves: #1099443 - 'net ads testjoin' fails with IPv6.
  - resolves: #1100670 - Fix 'force user' with 'security = ads'.
  - resolves: #1096522 - Fix enabling SMB2 causes file operations to fail.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-6
changelog:
  - resolves: #1105500 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108841 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-8
changelog:
  - resolves: #1110733 - Fix write operations as guest with 'security = share'.
  - resolves: #1053886 - Fix receiving the gecos field with winbind.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.82-1
changelog:
  - Allow exclusive activation of snapshots in a cluster.
  - Add addnodeonresume and addnodeoncreate switch to dmsetup.
  - Add dm_tak_secure_data fn to libdevmapper to wipe all ioctl buffers in kernel.
  - Increase hash table size to 1024 LV names and 64 PV uuids.
  - Fix node and symlink operations in /dev for recent udev_sync optimalisation.
  - Remove unneeded checks for open_count in lv_info().
  - Synchronize with udev before checking open_count in lv_info().
  - Remove fs_unlock() from lv_resume path.
  - Allow CLVMD_CMD_SYNC_NAMES to be propagated around the cluster if requested.
  - Avoid rebuilding of uuid validation table.
  - Improve lvcreate "insufficient extents" errors to "insufficient free space".
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-9
changelog:
  - Handle non-existent dependency sets correctly in python (#593621)
  - Permit DOS-style line-endings in PGP armor headers (#532992)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-10
changelog:
  - Fix empty reply from server on url retrieve (#598988)
  - Drop suid/sgid bits and capabilities on upgrade/erase (#598832)


author: Doug Ledford <dledford@redhat.com> - 1.0.5-2
changelog:
  - Don't install the address file or config file, the config file isn't
    strictly needed and defaults will be used if it isn't installed, but
    with the address file we specifically need to build one based upon
    the machine where the program is installed, a default file is not only
    not helpful, but it messes up the daemon.
  - Related: bz700285


author: Doug Ledford <dledford@redhat.com> - 1.0.5-3
changelog:
  - Until the next upstream release, the pid file is in a wonky location.
    Make the init script know about that location so we can stop properly.
  - Resolves: bz808599


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.6
changelog:
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681564)


author: Jan Zeleny <jzeleny@redhat.com> - 1.4-2
changelog:
  - cleanup of spec file (mixed tabs-and-spaces, specific version
    for explicit obsoletes, file attributes)


author: Petr Stodulka <pstodulk@redhat.com> - 1.4-4
changelog:
  - Fixed troubles with SSl connection
  - Fixed adding of broken symlink when 'copy -A'
  - Fixed permissions for */hgk - Thanks to Dave Johanse <davejohansen@gmail.com>
    Resolves: #784079 #928301 #1006457


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-223
changelog:
  - Fix dovecot_rw_pipes() interface
  - Allow piranha_pulse_t to search tmpfs
  - Allow sysadm to stream connect to postfix-master process
  - Label /usr/sbin/fence_sanlockd as fenced_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-225
changelog:
  - Re-write rules to create tmpfs for all piranha tmpfs files/dirs
  - Allow piranha-lvs to manage piranha_tmpfs_t
  Resolves:#1018306


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-226
changelog:
  - Label /usr/sbin/fence_scsi as fenced_exec_t
  - Fix cluster domains to create dirs in /var/run/cluster as var_run_t to make resource scripts working
  Resolves:#915151


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-227
changelog:
  - Resource agents needs to manage /etc/cluster to place own config files
  Resolves:#915151
  - tgtd needs ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-228
changelog:
  - Add daemons_enable_cluster_mode boolean and turn on it by default until RHEL6.6
  Resolves:#915151
  - Add tcp/8893 as milter port
  - Allow antivirus domain to read localization without the boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-229
changelog:
  - Add bootloader_exec_t labeling for /sbin/grubby
  Resolves:#915729
  - Add etc_runtime_t label for zipl.conf
  - Allow daemons to manage cluster lib files if daemons_enable_cluster_mode is enabled


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231
changelog:
  - Add named_cache_t label for /var/lib/unbound
  - Fix puppet_domtrans_master() interface to make passenger working correctly if it wants to read puppet config files
  - Allow anitvirus domains to manage own log dirs


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
  - Resolves: rhbz#1350040


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.2
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350040


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.32.1.el6]
changelog:
  - [fs] nfs: Don't mark the data cache as invalid if it has been flushed (Benjamin Coddington) [1114406 1109365]
  - [fs] nfs: Clear NFS_INO_REVAL_PAGECACHE when we update the file size (Benjamin Coddington) [1114406 1109365]
  - [fs] nfs: Fix cache_validity check in nfs_write_pageuptodate() (Benjamin Coddington) [1114406 1109365]
  - [fs] bio: modify __bio_add_page to accept pages that dont start a new segment (Maurizio Lombardi) [1131137 885517]
  - [fs] bio: modify __bio_add_page() to accept pages that don't start a new segment (Maurizio Lombardi) [1131137 885517]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.33.1.el6]
changelog:
  - [net] openvswitch: fix panic with multiple vlan headers (Jiri Benc) [1134258 1122405]
  - [net] bridge: explictly tag vlan-accelerated frames destined to the host (Vlad Yasevich) [1131697 1121991]
  - [net] revert: bridge: Provide VLAN registration and GRO acceleration for ports (Jiri Pirko) [1131697 1121991]
  - Revert: [net] bridge: Correctly receive hw-accelerated vlan traffic (Vlad Yasevich) [1131697 1121991]
  - Revert: [net] vlan: Allow accelerated packets to flow through the bridge (Vlad Yasevich) [1131697 1121991]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.34.1.el6]
changelog:
  - [virt] revert "virtio-net: initialize vlan_features" (Petr Holasek) [1135393 1132588]
  - [fs] nfsd: allow turning off nfsv3 readdir_plus (J. Bruce Fields) [1133834 1117468]
  - [perf] x86: ignore CondChgd bit to avoid false NMI handling (Don Zickus) [1134696 1116947]
  - [s390] fix restore of invalid floating-point-control (Hendrik Brueckner) [1127580 1121962]
  - [net] bridge: unregister rtnl message types correctly (Jiri Benc) [1126681 1114445]
  - [drivers] platform: use always ->name for uevent (Prarit Bhargava) [1125980 1120675]
  - [scsi] lpfc: Add iotag memory barrier (Rob Evers) [1129994 1109274]
  - [s390] fix save and restore of the floating-point-control register (Hendrik Brueckner) [1110839 1034270]
  - [s390] signal: change return values to -EFAULT (Hendrik Brueckner) [1110839 1034270]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.35.1.el6]
changelog:
  - [netdrv] bnx2x: fix set_setting for some PHYs (Petr Holasek) [1138301 1009332]
  - [fs] nfs: Close another NFSv4 recovery race (Steve Dickson) [1138341 1093922]
  - [fs] nfs: Refactor _nfs4_open_and_get_state to set ctx->state (Steve Dickson) [1138341 1093922]
  - [fs] nfs: cleanup: pass the nfs_open_context to nfs4_do_open (Steve Dickson) [1138341 1093922]
  - [fs] ext3: Fix fdatasync() for files with only i_size changes (Eric Sandeen) [1135713 1127023]
  - [net] ipvs: Add missing locking during connection table hashing and unhashing (Jesper Brouer) [1141165 1069874]
  - [mm] hugetlb: add cond_resched_lock() in return_unused_surplus_pages() (Motohiro Kosaki) [1140163 1129085]
  - [mm] hugetlb: fix softlockup when a large number of hugepages are freed (Motohiro Kosaki) [1140163 1129085]
  - [net] ipv4: avoid parallel route cache gc executions (Hannes Frederic Sowa) [1131977 1121228]
  - [net] ipv4: move route garbage collector to work queue (Hannes Frederic Sowa) [1131977 1121228]
  - [fs] Add full_check test before calling add_to_tfile_check() to prevent panic in reverse_path_check_proc() (Larry Woodman) [1140352 1130730]
  - [fs] fsnotify: delay unmounting until all inode are fput (Eric Paris) [1130630 886723]
  - [fs] inotify: determine wd before races are possible (Eric Paris) [1130630 886723]
  - [fs] fsnotify: do not hold notification mutex when putting events (Eric Paris) [1130630 886723]
  - [fs] fsnotify: use GFP_NOFS when allocating event holders (Eric Paris) [1130630 886723]
  - [net] ipvs: extract race fixes for sync daemon setups (Jesper Brouer) [1139807 1117536]
  - [net] sctp: inherit auth_capable on INIT collisions (Daniel Borkmann) [1124336 1123760] {CVE-2014-5077}
  - [kernel] sched: Fix possible divide by zero in avg_atom() calculation (Mateusz Guzik) [1139345 1109489]
  - [kernel] add div64_ul() (Mateusz Guzik) [1139345 1109489]
  - [kernel] sched: Move idle_balance() stats back where they were instead of at the end of the sched_domain (Larry Woodman) [1141883 1119156]
  - [kernel] futex: avoid race between requeue and wake (Larry Woodman) [1122133 1118434]
  - [kernel] futex: revert back to the explicit waiter counting code (Larry Woodman) [1122133 1118434]
  - [kernel] futex: Avoid taking the hb->lock if there's nothing to wake up (Larry Woodman) [1122133 1118434]
  - [fs] epoll: do not take the nested ep->mtx on EPOLL_CTL_DEL (Larry Woodman) [1122134 1100855]
  - [fs] epoll: do not take global 'epmutex' for simple topologies (Larry Woodman) [1122134 1100855]
  - [fs] epoll: fix spurious lockdep warnings (Larry Woodman) [1122134 1100855]
  - [kernel] mutex: Unlock the mutex without the wait_lock (Larry Woodman) [1122134 1100855]
  - [kernel] mutex: Do not unnecessarily deal with waiters (Larry Woodman) [1122134 1100855]
  - [kernel] mutex: Introduce cancelable MCS lock for adaptive spinning (Larry Woodman) [1122134 1100855]
  - [kernel] mutex: Modify the way optimistic spinners are queued (Larry Woodman) [1122134 1100855]
  - [kernel] mutex: Queue mutex spinners with MCS lock to reduce cacheline contention (Larry Woodman) [1122134 1100855]
  - [kernel] mutex: Make more scalable & Back out architecture specific check (Larry Woodman) [1122134 1100855]
  - [redhat] prevent kabi breakage in kernel/sched.c: struct rq and include/linux/sched.h: struct sched_domain (Larry Woodman) [1122134 1100855]
  - [kernel] sched: Periodically decay max cost of idle balance (Larry Woodman) [1122134 1100855]
  - [kernel] sched: Consider max cost of idle balance per sched domain (Larry Woodman) [1122134 1100855]
  - [kernel] sched: Reduce overestimating rq->avg_idle (Larry Woodman) [1122134 1100855]
  - [kernel] futex: Increase hash table size for better performance (Larry Woodman) [1122134 1100855]
  - [fs] epoll: optimize EPOLL_CTL_DEL using rcu (Larry Woodman) [1122134 1100855]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-431.37.1.el6]
changelog:
  - [net] vlan: Allow accelerated packets to flow through the bridge (Vlad Yasevich) [1131697 1121991]
  - [net] bridge: Correctly receive hw-accelerated vlan traffic (Vlad Yasevich) [1131697 1121991]
  - Revert: [net] revert: bridge: Provide VLAN registration and GRO acceleration for ports (Jiri Pirko) [1131697 1121991]
  - Revert: [net] bridge: explictly tag vlan-accelerated frames destined to the host (Vlad Yasevich) [1131697 1121991]
  - [kernel] futex: Fix errors in nested key ref-counting (Denys Vlasenko) [1094457 1094458] {CVE-2014-0205}
  - Revert: [fs] epoll: optimize EPOLL_CTL_DEL using rcu (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] futex: Increase hash table size for better performance (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] sched: Reduce overestimating rq->avg_idle (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] sched: Consider max cost of idle balance per sched domain (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] sched: Periodically decay max cost of idle balance (Larry Woodman) [1122134 1100855]
  - Revert: [redhat] prevent kabi breakage in kernel/sched.c: struct rq and include/linux/sched.h: struct sched_domain (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] mutex: Make more scalable & Back out architecture specific check (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] mutex: Queue mutex spinners with MCS lock to reduce cacheline contention (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] mutex: Modify the way optimistic spinners are queued (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] mutex: Introduce cancelable MCS lock for adaptive spinning (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] mutex: Do not unnecessarily deal with waiters (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] mutex: Unlock the mutex without the wait_lock (Larry Woodman) [1122134 1100855]
  - Revert: [fs] epoll: fix spurious lockdep warnings (Larry Woodman) [1122134 1100855]
  - Revert: [fs] epoll: do not take global 'epmutex' for simple topologies (Larry Woodman) [1122134 1100855]
  - Revert: [fs] epoll: do not take the nested ep->mtx on EPOLL_CTL_DEL (Larry Woodman) [1122134 1100855]
  - Revert: [kernel] futex: Avoid taking the hb->lock if there's nothing to wake up (Larry Woodman) [1122133 1118434]
  - Revert: [kernel] futex: revert back to the explicit waiter counting code (Larry Woodman) [1122133 1118434]
  - Revert: [kernel] futex: avoid race between requeue and wake (Larry Woodman) [1122133 1118434]
  - Revert: [kernel] sched: Move idle_balance() stats back where they were instead of at the end of the sched_domain (Larry Woodman) [1141883 1119156]
  - Revert: [fs] Add full_check test before calling add_to_tfile_check() to prevent panic in reverse_path_check_proc() (Larry Woodman) [1140352 1130730]
  - Revert: [kernel] futex: Fix errors in nested key ref-counting (Denys Vlasenko) [1094457 1094458] {CVE-2014-0205}


author: Peter Jones <pjones@redhat.com> - 0.97-76
changelog:
  - [UEFI] Iterate PXE objects and try to find an active one instead
    of letting the firmware pick for us.
    Resolves: rhbz#670266
  - [UEFI] Handle tftp implementations that give invalid error codes
    from TFTP_GET_FILE_SIZE.
    Related: rhbz#670266


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Updated to IcedTea6 1.11.3
  - Removed upstreamed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828752


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828752


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-1
changelog:
  - Update to 2.16.2
  - Mark /etc/crond.d/mrtg file as "noreplace" to keep current setup
    during mrtg update
    Related: #391261
  - Fix mrtg complains of undefined subroutine AF_UNSPEC
    Resolves: #451783


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-7
changelog:
  - Fix kMG option with more number of values causes segmentation fault
    Resolves: #707188
  - Fix cfgmaker doesn't use ifHighSpeed on IBM FibreChannel switches
    Resolves: #836197


author: Adam Jackson <ajax@redhat.com> 1.1.1-3
changelog:
  - REVERT-libXdmcp-1.1.1-xalloc.patch: Restore definitions (but not
    declarations) of Xalloc and friends for RHEL6 ABI compat.


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: Doug Ledford <dledford@redhat.com> - 1.0.19.1-1
changelog:
  - Update to latest upstream release
  - Drop patches that upstream has folded in
  - Resolves: bz1119108


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.20-8.20091214hg736b6a
changelog:
  - Resolves #1196787 (System default CA bundle not set as default in compiled-in
    default or config)
  - Resolves #1212646 (mutt sends e-mail with broken "From" header, which has no
    host part)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.209.el6_2.1
changelog:
  - kvm-ccid-Fix-buffer-overrun-in-handling-of-VSC_ATR-messa.patch [bz#751312]
  - CVE: CVE-2011-4111
  - Resolves: bz#751312
    (CVE-2011-4111 qemu: ccid: buffer overflow in handling of VSC_ATR message [rhel-6.2.z])


author: Doug Ledford <dledford@redhat.com> - 1.1.4-3
changelog:
  - Bump version to something later than base libibverbs package
  - Enable valgrind support on most arches
  - Use versioned provides for our pseudo provides of libibverbs base
    packages
  - Related: bz603804


author: Doug Ledford <dledford@redhat.com> - 1.1.5-1
changelog:
  - Update to latest upstream version (1.1.4 to 1.1.5)
  - Drop libibverbs cow.patch as it is in 1.1.5 already
  - Drop ifnarch ia64 from valgrind usage as we don't build on ia64 any more
  - Make sure RPATH entries are removed from programs
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.1.6-1
changelog:
  - Update to latest upstream version (now includes native rocee support
    and FDR support)
  - Related: bz758498, bz750609


author: Marek Grac <mgrac@redhat.com> - 4.0.15-9
changelog:
  - fence_ipmilan no longer understands -i
    Resolves: rhbz#1254046
  - fence_ipmilan no longer understands 'timeout'
    Resolves: rhbz#1254700
  - fence_ilo: Improve negotiation of TLS protocol
    Resolves: rhbz#1256902
  - fence_rsa: Login process over telnet is not working
    Resolves: rhbz#1247062
  - fence_mpath: lose scsi keys after restart
    Resolves: rhbz#1254183


author: Marek Grac <mgrac@redhat.com> - 4.0.15-11
changelog:
  - fence_ipmilan: Revert power_wait values
    Resolves: rhbz#1273632
  - fence_apc: Support for firmware 6.x
    Resolves: rhbz#1259254
  - fence_ipmilan: Add 'diag' action
    Resolves: rhbz#1266600
  - fencing: Add '-list-status' action
    Resolves: rhbz#1183829


author: Ville Skyttä <ville.skytta@iki.fi> - 2.1.30-1
changelog:
  - Update to 2.1.30, see NEWS for details.
  - Improve summary and description.
  - Add MIT to License: for mailcap.4 man page.
  - Specfile cleanup.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-10
changelog:
  - Related: rhbz#631002 - Synchronize qpid-cpp build to MRG 1.3.
    This build synchronizes with RHEL-{4,5} qpid-cpp-mrg-0.7.946106-26.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-11
changelog:
  - Related: rhbz#631002 - Synchronize qpid-cpp build to MRG 1.3.
    This build synchronizes with RHEL-{4,5} qpid-cpp-mrg-0.7.946106-28 (MRG 1.3.2 RC2).
    Updated lib version numbers for RHEL 6.1.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-12
changelog:
  - Related: rhbz#659098 - QMFv2 API for C++
  - Related: rhbz#617260 - qmf agent crashes broker when queue limits exceeded
  - Related: rhbz#659100 - QMFv2 API for Python
  - Related: rhbz#662826 - Support for federated brokers in QMF
    This build adds QMF v.2 to the previous MRG 1.3.2 RC2 build, and a
    new python-qmf2 subpackage (rpm).


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.9.1073306-1
changelog:
  - Related: rhbz#675821 - Rebase qpid-cpp to 0.10 for snapshot 3
    Note that the current qpid trunk is still in 0.9, but will branch onto
    the 0.10 release branch soon. This is a test build only.


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-10
changelog:
  - revert previous patch (#1172296)
  - fix: crash in ldap_domain2hostlist when processing SRV record (#1164369)
  - support TLS 1.1 and later (#1160467)
  - enhancement: add ppolicy-check-password (#1155390)


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-3.el6
changelog:
  - Fix VNC reconnect error (bz 593326)
  - Fix remote VNC connection with zsh (bz 593328)
  - Fix VNC auto keymap detection (bz 593333)
  - Fix New VM customize option with no storage (bz 593336)


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-5.el6
changelog:
  - Allow setting cpuset automatically from NUMA config (bz 604205)
  - Update translations (bz 575681)
  - Fix pool building for LVM/disk pools (bz 597519)


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-1.el6
changelog:
  - Rebase to 0.8.6 (bz 658959)
  - SPICE support (requires spice-gtk) (Marc-André Lureau)
  - Option to configure CPU model
  - Option to configure CPU topology
  - Save and migration cancellation (Wen Congyang)
  - Save and migration progress reporting
  - Option to enable bios boot menu
  - Option to configure direct kernel/initrd boot


author: Matthias Clasen <mclasen@redhat.com> - 1.1.10-4
changelog:
  - Make default cursor theme inherit dmz-aa instead of Bluecurve
  - Also require the cursor theme package


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-91
changelog:
  - Release 1.2.11.15-91
  - Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11-15-92
changelog:
  - Release 1.2.11.15-92
  - Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11-15-93
changelog:
  - Release 1.2.11.15-93
  - Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
  - Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11-15-94
changelog:
  - Release 1.2.11.15-94
  - Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-11.el6
changelog:
  - Support vram specification for qxl graphics (rhbz#673578)
  - Fix parsing int options in virsh (rhbz#639587)
  - Use -o encryption=on instead of -e for qemu-img (rhbz#676984)
  - Support domain snapshots with current QMP (rhbz#589076)
  - Update auditing support (rhbz#642785)
  - Only request sound cgroup ACL when required (rhbz#680398)
  - Allow fine-tuning of device ACL permissions (rhbz#683163)
  - Support vhost in attach-interface (rhbz#683276)
  - Don't request cgroup ACL access for /dev/net/tun (rhbz#683305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-12.el6
changelog:
  - Fix vram settings for qxl graphics (rhbz#673578)
  - Free stream when domain shuts down while its console is open (rhbz#682741)
  - Use hardcoded python path in libvirt.py (rhbz#684204)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Eliminate potential null pointer deref when auditing macvtap devices (rhbz#642785)
  - Insert error messages to avoid a quiet abortion of commands (rhbz#605660)


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638839


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-18
changelog:
  - Do not use real domains in warnquota example (bug #680919)
  - Disable grace period/times remote setting (bug #683554)
  - Initialize v2r1 ddquot padding in dump (bug #692390)
  - Make dirname static to work with nss_db (bug #704216)
  - Do not report missing utmp record to syslog (bug #730057)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-19
changelog:
  - Report quotacheck failures by return code (bug #717948)
  - Improve quotacheck error message (bug #717948)
  - Do not fiddle with quota files on XFS and GFS (bug #846120)
  - Allow to set limits using multiplicative units (bug #890051)


author: Alex Wood <awood@redhat.com> 1.12.1.6-1
changelog:
  - 816364: Adding missing product cert for Red Hat Enterprise Virtualization on
    i386. (awood@redhat.com)
  - 816364: Adding missing mapping for Red Hat Enterprise Virtualization on i386.
    (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.12.1.7-1
changelog:
  - 816364: Adding corrected product cert for Red Hat Enterprise Virtualization
    on i386. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.12.1.8-1
changelog:
  - 816364: Correcting mapping for Red Hat Enterprise Virtualization on i386.
    (awood@redhat.com)
  - Adding product certs. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.12.2.1-1
changelog:
  - New product migration data for RHEL 6.4. (awood@redhat.com)
  - Updating mapping creation script for RHEL 6.4. (awood@redhat.com)
  - Add check to see if more than one certificate exists for a product ID.
    (awood@redhat.com)


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Luiz Capitulino <lcapitulino@redhat.com> - gpxe-0.9.7-6.3.el6_0.1
changelog:
  - gpxe-virtio-avoid-padding-for-len-64.patch [bz#680148]
  - Resolves: bz#680148
    (VMs with virtIO NIC can't access the PXE server)


author: Matthias Clasen <mclasen@redhat.com> - 2.18.9-5
changelog:
  - Update Gujarati translation
  - Fix a problem with the location entry in file choosers
  Resolves: #636476, #625440. #647922, #647923


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-7
changelog:
  - Set a wrap width on the type filter combobox to avoid overflowing
    the screen when a very long filter is set on the file chooser.
  Resolves: #689188


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-8
changelog:
  - Apply the show-size-column setting when switching from search to 
    browse mode.
  Resolves: #697437


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-10
changelog:
  - Backport a patch fixing GtkBuilder behavior with construct properties
    initialization.
  Resolves: #801620


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-12
changelog:
  - Additional filechooser patch to make sure the size column is shown
    when switching from Recent Files to Search
  Resolves: #889172


author: Josef Ridky <jridky@redhat.com> - 2:2.6.9-9
changelog:
  - fix bug with num_threads error message on gimp startup (#1150021)
  - fix bug with showing GLib warning message on startup from terminal (#1157037)
  - fix bug with incorrect thumb image text offset (#1158426)


author: Klaus Wenninger <kwenning@redhat.com> - 1.1.14-1.0
changelog:
  - Update to upstream release 1.1.14
   - added README_RGManager_porting to document replacement of
       ccs2cib, ccs_flatten & disable_rgmanager
   - added patchset (0100-0111) from master to implement graceful
       stop of pacemaker_remote
   - require minimum-version 0.17.0 of libqb

    Resolves: rhbz#1193499
    Resolves: rhbz#1195500
    Resolves: rhbz#1200853
    Resolves: rhbz#1215809
    Resolves: rhbz#1219103
    Resolves: rhbz#1235316
    Resolves: rhbz#1246490
    Resolves: rhbz#1246563
    Resolves: rhbz#1252206
    Resolves: rhbz#1257333
    Resolves: rhbz#1275223
    Resolves: rhbz#1287535
    Resolves: rhbz#1297564


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.10.0-1
changelog:
  - packaging enhacements (structure, redundancy, ownership, scriptlets, symlink)
  - version bump so as not to collide with python-clufter co-packaged with pcs


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.10.1-2
changelog:
  - packaging fixes (clufter-cli requires python-setuptools, adjust for
    older schema of Bash completions)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34.2
changelog:
  - Resolves: rhbz#716905 - sssd shuts down if inotify crashes
  - Resolves: rhbz#716909 - libsss_ldap segfault at login against OpenLDAP


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-9.el6
changelog:
  - Reorder nwfilter match extensions relative to state match (rhbz#678139)
  - Avoid overwriting error message in qemu driver (rhbz#678870)
  - Allow removing hash entries in virHashForEach (rhbz#681459)
  - Avoid double close on qemu domain restore (rhbz#672725)
  - Fix DomainObj refcounting/hashtable races in qemu driver (rhbz#670848)
  - Fix several memory leaks (rhbz#682249)


author: Steven Dake <sdake@redhat.com> 1.2.3-27
changelog:
  - Resolves: rhbz#680258
  - Resolves: rhbz#675099
  - Fix problem where corosync can't be built on an older
    installation. (rhbz#680258)
  - merge upstream commit 5ee4fe19db4b1e9c3984a9bf1645b8cf6d711f3d
  - Avoid abort if existing ring id file does not contain
    atleast 8 bytes.  (rhbz#675099)
  - merge upstream commit bb35b86fef4f256a21993f73b71fd512d4763e2f


author: Steven Dake <sdake@redhat.com> 1.2.3-28
changelog:
  - Resolves: rhbz#677975
  - Fix problem where objdb handle destroy is not called in
    clear_object.  (rhbz#677975)
  - merge upstream commit ea18c71936edf8cdc647245374f3a7932ac7e686
  - Fix problem where all items are not iterated in
    object_reload_notification.  (rhbz#677975)
  - merge upstream commit 7f2e1da84d5883176f0f95936b8a4bf21de12a0a


author: Steven Dake <sdake@redhat.com> 1.2.3-29
changelog:
  - Resolves: rhbz#675783
  - Fix problem that leads to abort when token lost in
    recovery sate.  (rhbz#675783)
  - merge upstream commit 6aa47fde953bf2179f5bd2dd07815fc7d80f47bb


author: Steven dake <sdake@redhat.com> 1.2.3-30
changelog:
  - Resolves: rhbz#684928
  - Resolves: rhbz#684930
  - Fix ttl defaults and range checking.  (rhbz#684928)
  - merge upstream commit c5ee8757eb2a7026b26a6410f3f068c4797abcf8 (rhbz#684928)
  - Remove the ttl option from the udpu code and rely on kernel
    ttl defaults (rhbz#684930)
  - merge upstream commit 48cbb33d11fed7ed9db5e7c723cf84eb35cd9d29 (rhbz#684930)


author: Steven Dake <sdake@redhat.com> 1.2.3-31
changelog:
  - Resolves: rhbz#688691
  - Remove assertion during corosync shutdown.  (rhbz#688691)
  - merge upstream commit 92a3a1aa9d07e769eb6bc59467454e0316549cf6 (rhbz#688691)


author: Steven Dake <sdake@redhat.com> 1.2.3-32
changelog:
  - Resolves: rhbz#629380
  - Resolves: rhbz#688691
  - Resolves: rhbz#675783
  - Only dispatch notification messages one message at a time. (rhbz#629380)
  - merge upstream commit fbae3de885843debe9ccccb363e9ca8e98d5afea. (rhbz#629380)
  - Send confdb notifications from the main thread.  (rhbz#629380)
  - merge upstream commit abeb02277ee374531b910ce793213e60addb0fb5. (rhbz#629380)
  - Remove recv_flush operations from totemsrp to remove recursion
    error.  (rhbz#688691)
  - merge upstream commit 336741ee96caf3ae435b609ee8a76788902c9edf. (rhbz#688691)
  - Only restore old ring id information once before operational
    state.  (rhbz#675783)
  - merge upstream commit 0eabeee63eca7a4cc1d907607057ac668fafbcae.  (rhbz#675783)
  - Free recovery messages during operational enter rather then
    via message_free() call.  (rhbz#675783)
  - merge upstream commit 0fcf760977a73ef78bacff47e61c30ba21929faa.  (rhbz#675783)


author: Steven Dake <sdake@redhat.com> 1.2.3-33
changelog:
  - Resolves: rhbz#629380
  - Fix retrieving application's parent name in notifyd.  (rhbz#629380)
  - merge upstream commit 1b7b4f0f888621aff2f8866ac81b4930b4b07c63 (rhbz#629380)
  - Remove duplicate quarote events (rhbz#629380)
  - merge upstream commit 821e031b925ad3a15ca057f816fecb3568c96cb9 (rhbz#629380)
  - Add the service name to the connection name in statistics (rhbz#629380)
  - merge upstream commit 78ae800f80fa9cd0fe593724f5c64138c205fec5 (rhbz#629380)
  - Fix shutdown when a confdb client is still connected (rhbz#629380)
  - merge upstream commit 8b1492b50b64725d72ae9c301682ad9a489de344 (rhbz#629380) 
  - Fix compiler error with previous commit (rhbz#629380)
  - merge upstream commit 5da31206bbb9bb0d1f80907e53a5798204eaf594 (rhbz#629380)


author: Steven Dak <sdake@redhat.com> 1.2.3-34
changelog:
  - Resolves: rhbz#629380
  - merge non-committed patch which fixes stack protector failure.  (rhbz#629380)


author: Steven Dake <sdake@redhat.com> 1.2.3-35
changelog:
  - Reverts: rhbz#599327
  - revert upstream commit 061b770b83a9533dad527eda5f7d41e763cb40da (rhbz#599327)
  - revert upstream commit 2f1b7a962911670493d0db3695fc9fb91ceb0c82 (rhbz#599327)
  - Display warning and add object database feature to indicate when system
    firewall is enabled. (rhbz#599327)


author: Steven Dake <sdake@redhat.com> 1.2.3-36
changelog:
  - Resolves: rhbz#629380
  - merge upstream commit fd78f27715be326c6fe5439fa7e8d8077642db64 (rhbz#629380)
  - Place statistics changes outside of IPC mutexes to avoid deadlocks (rhbz#629380)


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Ray Strode <rstrode@redhat.com> 2.28.1-29
changelog:
  - Put background.xml in ~/.config/gnome-control-center
    This makes it more easily admin relocatable
    Resolves: #524942


author: Jiri Skala <jskala@redhat.com> -7:3.1.10-2
changelog:
  - Resolves: #735448 - CVE-2011-3205 squid: buffer overflow flaw in Squid's Gopher reply parser
  - removed unused patch from cvs


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-7.2
changelog:
  - Resolves: rhbz#929100

  - Put handle to hdb in dispatch on unknown message (rhbz#929100)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#929100)
  - Properly check result of coroipcc_dispatch_put (rhbz#929100)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#929100)
  - coroipcs: Ensure rb data are not overwritten (rhbz#929100)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#929100)
  - Properly lock pending_semops (rhbz#929100)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#929100)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-36
changelog:
  - SAPDatabase: fix process count for SUSER
  - oracle: use monprofile parameter
  - send_arp: fix buffer overflow on infiniband devices
  - mysql: use replication_port variable
  - oracle: inform user that monprofile monuser must start with C##
    for container databases

    Resolves: rhbz#1260710
    Resolves: rhbz#1358892
    Resolves: rhbz#1351717
    Resolves: rhbz#1337146
    Resolves: rhbz#1374655


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-37
changelog:
  - lvm.sh: fix status clustered to check specific volume
  - netfs.sh: move defaults to metadata
  - nfsserver: use rpcpipefs_dir variable

    Resolves: rhbz#1320520
    Resolves: rhbz#1286291
    Resolves: rhbz#1382036


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-40
changelog:
  - SAPHana/SAPHanaTopology: update to version 0.152.17
  - Add netstat dependency

    Resolves: rhbz#1381891
    Resolves: rhbz#1395594


author: Rafael Schloming <rafaels@redhat.com> - 0.7.917717-4
changelog:
  - Changed defines to globals and moved them to the top.
  - Removed unnecessary python Requires/BuildRequires.


author: Steve Grubb <sgrubb@redhat.com> 2.0.6-1
changelog:
  resolves: #584981 - ausearch/report performance improvement needed
  resolves: #640948 - inodes display incorrectly when listing rules
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #647131 - Man page for audit_encode_nv_string() is incorrect
  resolves: #670938 - searching on auid = -1 results in all events


author: Steve Grubb <sgrubb@redhat.com> 2.1-1
changelog:
  resolves: #688664 - Logging does not resume from SYSLOG on full disk action
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #584981 - ausearch/report performance improvement needed


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Steve Dickson <steved@redhat.com> 1.2.3-8
changelog:
  - initscripts: just try to mount rpc_pipefs always (bz 692702) 
  - Rely on crypto module autoloading in init scripts
  - svcgssd: Document "-n" for svcgssd (bz 697359)
  - mount.nfs: anticipate RLIMIT_FSIZE (bz 697981)
  - exportfs manpage: Ipv6 update (bz 715078)
  - mountd: Stop segfault in mtab code (bz 723438)
  - exportfs: wilcards in exports can lead to unintended mounts (bz 715391)
  - umount: allow spaces in unmount paths (bz 702273)
  - specfile: reordered how libgssglue is linked in (bz 720479)


author: Steve Dickson <steved@redhat.com> 1.2.3-9
changelog:
  - umount.nfs: Got IPV6 unmounts working again (bz 732673)
  - mountd: return multiple hosts exporting the same directory (bz 726112) 
  - mount: Better error message for invalid version (bz 723780)


author: Steve Dickson <steved@redhat.com> 1.2.3-15
changelog:
  - mout.nfs: Don't roll back to IPv4 whe IPv6 fails (bz 744657)
  - rpcdebug: Added pNFS and FSCache debugging (bz 747400)


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-12
changelog:
  - Fixed localized state reasons (bug #587719).
  - Always use close_fds=True in subprocess.Popen calls (bug #590065).
  - cups-pk-helper support: FileGet requires a file it can write to (bug #592343).
  - Initialise auto_make to the empty string (bug #592346).


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - drop the shared library and python bindings, which so far as i can tell
    weren't being used, obsoleting them to avoid a mess on upgrades
  - move the mkhomedir helper from %{_libdir}/oddjob to %{_libexecdir}/oddjob
    to make the multilib configuration files agree (#559232)
  - use %global instead of %define


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-2
changelog:
  - backport patch to stop trying to close a stale connection to the bus,
    which used to generate a warning from libdbus, but which now causes an
    assertion failure (#634356)
  - when creating home directories, default to the UMASK setting from
    /etc/login.defs (part of #659681) and ensure the execute bit is set
    on any intermediate directories we create (the rest of #659681)
  - make sure the test helper has consistent permissions and make sure our
    self-tests verify them (#612617)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - make the init script exit with status 2 when given an unknown command, rather
    than with status 1 (#674534)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-5
changelog:
  - signal the system message bus to reload its configuration whenever we
    drop a new configuration file in place for it during package %post (#678345)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-6
changelog:
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#1150607)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-18
changelog:
  - python: Convert any iterable argument to a list.
    resolves: rhbz#693306
  - Renumber the RHEL 6.1-specific patches from 0500+.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-23
changelog:
  - Use git to manage patches.
  - Include all minor bugfixes from upstream stable-1.8 branch up to
    libguestfs 1.8.11.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-24
changelog:
  - inspect: Detect 32 bit applications running on WOW64 emulator
    resolves: rhbz#692394
  - perl: Binding and test for guestfs_last_errno
    resolves: rhbz#672491
  - New API: list-dm-devices
    fish: Show device mapper device in tab completion
    resolves: rhbz#688062
  - Document that fullvirt query only works for Linux guests
    resolves: rhbz#690358


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-25
changelog:
  - Fix 'unknown filesystem' warnings in old inspection code
    resolves: rhbz#678231
    resolves: rhbz#666578


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-26
changelog:
  - Document that remote run in cmd substitution context hangs.
    resolves: rhbz#730248
  - Note that additional memory may be required to typecheck Augeas lenses.
    resolves: rhbz#729887


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Add nss-util portion of a fix for pluggable ecc bug in nss and nss-util
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-4
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Fix the required nspr version to be 4.10.6


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.2
changelog:
  - added cache to hrSWRunTable to provide consistent results (#1085315)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086683)


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-52
changelog:
  - fsck.gfs2: Handle multiple occurrences of one leaf in a directory hash table (6 patches)
    Resolves: rhbz#984085
  - fsck.gfs2: Don't rely on cluster.conf when rebuilding sb
    resolves: rhbz#985796


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-3
changelog:
  - Add versioned Requires for glib2/gtk2 as spice-gtk is using symbols
    which were added in these versions
    Resolves: rhbz#980400
  - If software smartcard support is already initialized when creating a
    smartcard channel, don't consider this as a fatal error
    Resolves: rhbz#815639
  - Convert text line-endings if necessary
    Resolves: rhbz#752350


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-4
changelog:
  - Adjust BuildRequires to make sure new enough glib/gtk+ are used
    at build time as glib 2.26 is needed for proxy support
    Resolves: rhbz#948618


author: Milan Broz <mbroz@redhat.com> - 1.1.0-0.6
changelog:
  - Update to cryptsetup 1.1.0-rc4
  - Fix gcrypt initialisation.
  - Fix backward compatibility for hash algorithm (uppercase).


author: David Vossel <dvossel@redhat.com> - 1.1.10-15
changelog:
  - Fix: Removes unnecessary newlines in crm_resource -O output
      Resolves: rhbz#1038155
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
      Resolves: rhbz#1046131
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1046131


author: David Vossel <dvossel@redhat.com> - 1.1.10-16
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078954


author: Milan Crha <mcrha@redhat.com> - 0.28.0-1
changelog:
  - Update to 0.28.0
  - Add patch for Gnome bug #588453 (slow retrieval of message IDs).
  - Add patch for Gnome bug #595260 (crash in mapi_sync_deleted).
  - Add patch for Gnome bug #595355 (crash and incorrect header parsing).
  - Add patch for Gnome bug #595480 (crash on fetching GAL).


author: Milan Crha <mcrha@redhat.com> - 0.28.1-1
changelog:
  - Update to 0.28.1
  - Remove patch for Gnome bug #588453 (fixed upstream).
  - Remove patch for Gnome bug #595260 (fixed upstream).
  - Remove patch for Gnome bug #595355 (fixed upstream).
  - Remove patch for Gnome bug #595480 (fixed upstream).


author: Milan Crha <mcrha@redhat.com> - 0.28.3-5
changelog:
  - Bump openchange requirement to 0.9-7
  - Add patches for RH bug #605369, namely:
    - Exchange 2010 support (tags and encrypted connection)
    - Less debug output on console
    - GNOME bug #569631 (Hangs during the initial fetch of calendar items)
    - GNOME bug #581434 (Double free or corruption in calendar)
    - GNOME bug #593176 (winmail.dat sent in outgoing plaintext mail)
    - GNOME bug #595914 (Doesn't display the Cyrrilic symbols in folder names)
    - GNOME bug #598564 (Has problems encoding mails containing html)
    - GNOME bug #600386 (Do not use charset on messages with UNICODE body fetched)
    - GNOME bug #600389 (UTF8 characters not shown properly)
    - GNOME bug #602896 (CC field is shown twice in message)
    - GNOME bug #607384 (Replying causes the message to appear as garbage)
    - GNOME bug #607422 (Crash while importing a message without From header)
    - GNOME bug #610224 (Crash on a meeting forward notification mail)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.0-3
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix tab/space mixup.
  - Remove obsolete (and commented-out) keyboard_drv files.
  - Remove traces from building from git


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4.1
changelog:
  - Resolves: rhbz#791236

  - A rare condition can lead to fail to recv (rhbz#791236)
  - merge upstream commit c68fb0caa2e337c6fdebfe564402c6d06b7fb018 (rhbz#791236)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Access gnome bridge jar is forced to have 644 permissions
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906708


author: Jarod Wilson <jarod@redhat.com> 1.5-13
changelog:
  - Move startup prio so we start after syslog, so any notices during
    system startup actually get logged


author: Petr Sabata <psabata@redhat.com> - 1:1.5-14
changelog:
  - Init script: added the reload function
  - Init script: the service now stops when using p4-clockmod driver
  - Resolves: rhbz#607223


author: Marcela Mašláňová <mmaslano@redhat.com> 1:1.5-16
changelog:
  - Whenever PCC driver is loaded, it loads the “userspace” governor, instead 
    of the “ondemand” governor.
  - Resolves: rhbz#642838


author: Marcela Mašláňová <mmaslano@redhat.com> 1:1.5-17
changelog:
  - Cpuspeed init script still tries to adjust cpufreq sysfiles on a per core 
    basis 738463
  - IGNORE_NICE parameter does opposite of what it says (thanks to Minto Joseph)
    797055
  - Cpuspeed does not reset MIN/MAX values when config file is emptied 616976
  - Resolves: rhbz#738463, rhbz#797055, rhbz#616976


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-1
changelog:
  - Rebase to 0.9.16 to provide the version Samba4 needs
  - Resolves: rhbz#766336
  - Drop ABI compatibility patch (no longer needed)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-2
changelog:
  - Add BuildRequires on libxslt and docbook-style-xsl to enable
    building manual pages

  - Related: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.17-1
changelog:
  - Rebase to 0.9.17 to provide the version Samba4 needs
  - Drop EXCLUDE_PATTERNS workaround in specfile
  - Resolves: rhbz#766336


author: John Dennis <jdennis@redhat.com> - 2.1.8-1
changelog:
  - update to latest upstream
    Feature improvements
    * Print more descriptive error message for too many EAP sessions.
      This gives hints on what to do when "failed to store handler"
    * Commands received from radmin are now printed on stdout when
      in debugging mode.
    * Allow accounting packets to be written to a detail file, even
      if they were read from a different detail file.
    * Added OpenSSL license exception (src/LICENSE.openssl)

    Bug fixes
    * DHCP sockets can now set the broadcast flag before binding to a
      socket.  You need to set "broadcast = yes" in the DHCP listener.
    * Be more restrictive on string parsing in the config files
    * Fix password length in scripts/create-users.pl
    * Be more flexible about parsing the detail file.  This allows
      it to read files where the attributes have been edited.
    * Ensure that requests read from the detail file are cleaned up
      (i.e. don't leak) if they are proxied without a response.
    * Write the PID file after opening sockets, not before
      (closes bug #29)
    * Proxying large numbers of packets no longer gives error
      "unable to open proxy socket".
    * Avoid mutex locks in libc after fork
    * Retry packet from detail file if there was no response.
    * Allow old-style dictionary formats, where the vendor name is the
      last field in an ATTRIBUTE definition.
    * Removed all recursive use of mutexes.  Some systems just don't
      support this.
    * Allow !* to work as documented.
    * make templates work (see templates.conf)
    * Enabled "allow_core_dumps" to work again
    * Print better errors when reading invalid dictionaries
    * Sign client certificates with CA, rather than server certs.
    * Fix potential crash in rlm_passwd when file was closed
    * Fixed corner cases in conditional dynamic expansion.
    * Use InnoDB for MySQL IP Pools, to gain transactional support
    * Apply patch to libltdl for CVE-2009-3736.
    * Fixed a few issues found by LLVM's static checker
    * Keep track of "bad authenticators" for accounting packets
    * Keep track of "dropped packets" for auth/acct packets
    * Synced the "debian" directory with upstream
    * Made "unlang" use unsigned 32-bit integers, to match the
      dictionaries.


author: John Dennis <jdennis@redhat.com> - 2.1.8-2
changelog:
  - bug #526559 initial install should run bootstrap to create certificates
    running radiusd in debug mode to generate inital temporary certificates
    is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial
    rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file
  - bug #528493 use sha1 algorithm instead of md5 during cert generation
    the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files
    were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months


author: Kyle McMartin <kyle@redhat.com> - 1:1.17-2
changelog:
  - Don't use a CVS release for RHEL, otherwise it'll always be a branch
    and irritating.
  - Fix syntax error in microcode_ctl.init.
  - Resolves: rhbz#552246.


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-36
changelog:
  - mod_ssl: Add a wildcard common name match (#1035666)
  - mod_cache: avoid thundering herd (#1094990)
  - mod_cgi: return error code 408 on timeout (#979129)


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: RHBZ#1154948


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17
changelog:
  - updated aarch64 sources
  - epoch synced to 1
  - all ppcs excluded from classes dump(1156151)
  - Resolves: rhbz#1173706


author: Tom Lane <tgl@redhat.com> 0.8.2-1
changelog:
  - Update to version 0.8.2.
  - Update License tag to match code.
  - Remove static library and .la file, per packaging guidelines.


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.123
changelog:
  - Backport GLIBC sched_getcpu and gettimeofday vDSO functions for ppc (#929302).
  - Fall back to local DNS if resolv.conf does not define nameservers (#928318).
  - Add systemtap probes to slowexp and slowpow (#905575).


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 2.9-19
changelog:
  - Update to 2.9.
  - Removed fakechroot-2.8-initsocketlen.patch (upstream now).
  - Removed int->ssize_t readlink type change (upstream testing for type
    now).
  - Removed permission fix for scripts/ldd.fake scripts/restoremode.sh
    scripts/savemode.sh (fixed upstream).


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-19.P1.1
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729883)


author: Jiri Popelka <jpopelka@redhat.com> - 0.7.0-2
changelog:
  - enable to specify disks with path to device file or
    with symbolic link to the device file (#766443)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.7.0-3
changelog:
  - fix the error message for '--gpfs-ops --gpfs' options (#989779)
  - fix the invalid syntax when '--mysql5-conn' is used (#766806)


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-17
changelog:
  - fix #841520 - do not try to change owner of log if it is not needed
  - fix #848131 - fix bad umask value while creating temp file
  - fix #920030 - set SELinux context before compress files creation
  - fix #922169 - remove temp files on error
  - fix #847338 - do not overwrite create directive value by ACL setting
  - fix #847339 - fix race condition between fchmod and acl_set_fd


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-18
changelog:
  - fix #722209 - do not redirect output of logrotate to /dev/null, mark
    logrotate.conf as config
  - fix #1117189 - sort logs according to dateformat when removing the old one
  - fix #625034 - update logrotate.status atomically
  - fix #984965 - fix possible overflow in "create" directive parsing
  - fix #1012485 - use permissions 0700 for cron.daily script


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-19
changelog:
  - fix #1047899 - add support for "maxsize" directive
  - fix #1125769 - add support for "createolddir" directive


author: Mauro Carvalho Chehab <mchehab@redhat.com> - 0.9-12
changelog:
  - Add improvements from upstream version 0.16, in order to support newer
    edac drivers. Also, sync edac labels with RHEL5 package


author: Doug Ledford <dledford@redhat.com> - 1.5.12-4
changelog:
  - Update the all_hcas patch to resolve several problems
  - Give a simple help message to the ibnodes script
  - Resolves: bz818606, bz847129


author: Doug Ledford <dledford@redhat.com> - 1.6.4-1
changelog:
  - Update to latest upstream release
  - Simplify and reduce spec file
  - Ship the various scripts we used to remove, they can be useful
  - Pick up changes from rhel7 and bring them to rhel6
  - Related: bz1082730


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-34
changelog:
  - core: always use Opportunistic Key Caching with WPA-Enterprise (rh #834444)
  - ifcfg-rh: fix handling of EAP-LEAP connections (rh #833199)
  - applet: preserve WPA protocol and ciphers when editing connections (rh #834349)
  - applet: show WPA protocol widget when GConf key is set (rh #813573)


author: Bastien Nocera <bnocera@redhat.com> 4.66-1
changelog:
  - Update to 4.66
  - Update cable pairing patch
  - Remove out-dated patches, including wacom pairing
  - Move hidd, pand and dund man pages to the -compat
    sub-package
  Resolves: rhbz#565586


author: Ondrej Vasik <ovasik@redhat.com> 2.10-7
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#571843)
  - comment patches


author: <dwalsh@redhat.com> - 3.0.47-3
changelog:
  - Sedispatch is not handling audit messages correctly, 
    this fix allows setroubleshoot to process alerts.
  Resolves: #575686


author: Miroslav Grepl <mgrepl@redhat.com> - 3.0.47-4
changelog:
  - Make sealert working if description contains parenthesis
  - Remove -H from man page
  Resolves:#788196


author: Doug Ledford <dledford@redhat.com> - 1.5.4-1.el6
changelog:
  - Update to latest upstream version, which cleans up some licensing issues
    found in the previous versions during review
  - Related: bz555835


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.13.20100108git669c991.el6
changelog:
  - seabios-smbios-allow-vendor-manufacturer-version-product-nam.patch [bz#593317]
  - seabios-smbios-set-bios-vendor-version-fields-to-Seabios-0.5.patch [bz#593317]
  - seabios-smbios-set-system-manufacturer-product-name-to-Red-H.patch [bz#593317]
  - seabios-smbios-set-Type-3-chassis-manufacturer-information-t.patch [bz#593317]
  - Resolves: bz#593317
    (seabios: SMBIOS data is different from that shown in RHEL5, even with -M rhel5.4.0)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.14.20100108git669c991.el6
changelog:
  - seabios-fix-resume-from-S3-with-QXL-device.patch [bz#603677]
  - Resolves: bz#603677
    (Windows7 hangs during resume from S3 when using QXL device)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-0.15.20100108git669c991.el6
changelog:
  - seabios-remove-acpi-dsdt.hex-file-from-source-tree.patch [bz#603677]
  - Add BuildRequires: iasl
  - Resolves: bz#603677
    (Windows7 hangs during resume from S3 when using QXL device)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-1.el6
changelog:
  - seabios-Update-version-to-0.5.1.patch [bz#606411]
  - Resolves: bz#606411
    (Update version info to match upstream 0.5.1)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-2.el6
changelog:
  - seabios-Support-USB-keyboard-auto-repeat.patch [bz#561324]
  - seabios-Support-USB-interrupt-schedules-on-OHCI-and-UHCI.patch [bz#561324]
  - Resolves: bz#561324
    (USB keyboard misbehaves with BIOS driver)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.5.1-3.el6
changelog:
  - seabios-add-write-support-to-virtio-blk.patch [bz#607500]
  - Resolves: bz#607500
    (An unexpected error occurs during winxp installation with virtio disk.)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1-1.el6
changelog:
  - Update to upstream seabios-0.6.1
  - Resolves: bz#666922
    (Rebase seabios to latest upstream version)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-1.el6
changelog:
  - Update to upstream seabios-0.6.1.2 (from git tag rel-0.6.1.2)
  - Resolves: bz#666922
    (Rebase seabios to latest upstream version)
  - Resolves: bz#668707
    (Guest moved used index from 0 to 580" occur when guest load to grub during reboot)


author: Luiz Capitulino <lcapitulino@redhat.com> - seabios-0.6.1.2-2.el6
changelog:
  - seabios-Create-separate-IPL-entry-for-each-CD-DVD-qemu-in-se.patch [bz#643688]
  - seabios-Provide-full-EDD-3.0-info-for-virtio-disk.patch [bz#643688]
  - seabios-Add-romfile_name-function.patch [bz#643688]
  - seabios-Add-strchr-function.patch [bz#643688]
  - seabios-Read-bootorder-file-into-memory.patch [bz#643688]
  - seabios-Add-romfile_loadfile-helper-function.patch [bz#643688]
  - seabios-Breakup-boot_setup-bootorder-code-into-its-own-funct.patch [bz#643688]
  - seabios-Support-qemu-based-romfile-wrappers-called-out-of-or.patch [bz#643688]
  - seabios-Track-the-source-of-each-optionrom-deployed.patch [bz#643688]
  - seabios-Populate-drive_g-desc-prior-to-calling-add_bcv_inter.patch [bz#643688]
  - seabios-Simplify-boot-ordering-by-building-an-inclusive-boot.patch [bz#643688]
  - seabios-Add-stubs-to-permit-devices-to-specify-their-boot-pr.patch [bz#643688]
  - seabios-Rename-add_ordered_drive-to-add_drive-and-use-in-map.patch [bz#643688]
  - seabios-Call-setup_translation-from-map_hd_drive.patch [bz#643688]
  - seabios-Simplify-keyboard-reading-code-in-the-interactive-bo.patch [bz#643688]
  - seabios-Don-t-access-drive_g-desc-from-boot_cdrom.patch [bz#643688]
  - seabios-Remove-Drives-global-struct-in-favor-of-independent-.patch [bz#643688]
  - seabios-Move-IPL.checkfloppysig-to-a-global-CheckFloppySig-i.patch [bz#643688]
  - seabios-Move-IPL.bev-to-static-variables-in-boot.c.patch [bz#643688]
  - seabios-Move-IPL.fw_bootorder-to-static-variables-in-boot.c.patch [bz#643688]
  - seabios-Minor-reorganization-of-some-of-the-boot_xxx-code-in.patch [bz#643688]
  - seabios-Remove-drive-desc-field.patch [bz#643688]
  - seabios-Use-bootprio_find_named_rom-for-ramdisk-and-cbfs-pay.patch [bz#643688]
  - seabios-Add-functions-for-boot-device-path-parsing.patch [bz#643688]
  - seabios-Extend-usb_pipe-to-track-the-controller-and-ports-of.patch [bz#643688]
  - seabios-Add-support-for-finding-the-boot-priority-of-USB-dri.patch [bz#643688]
  - seabios-re-nitialize-global-variables-on-reboot.patch [bz#643688]
  - seabios-Initialize-FloppyCount-and-CDCount-on-reboot.patch [bz#643688]
  - seabios-acpi-add-_RMV-control-method-for-PCI-devices.patch [bz#671544]
  - Resolves: bz#643688
    (Allow to specify boot order on qemu command line.)
  - Resolves: bz#671544
    (seabios: Too many devices are available for unplug in Windows XP (and we don't support that))


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-3.el6
changelog:
  - seabios-support-T13-EDD3.0-spec.patch [bz#673751]
  - seabios-lets-pretend-that-RTC-can-be-used-to-wakeup-from-S4.patch [bz#663240]
  - Resolves: bz#663240
    ([WHQL] pwrtest failed in the job "CHAOS-Concurrent Hardware And OS test")
  - Resolves: bz#673751
    (Provide EDD3.0 info in accordance with T13 spec.)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-9
changelog:
  - Fix scaling for spice (bz 750225)
  - Don't allow a busted iface to break other iface details page (bz
    786694)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-11
changelog:
  - Don't switch page every time lxc guest is updated (bz 796570)
  - Don't blacklist disk device if we grab stats for shutdown guest (bz
    796092)
  - Add QED to disk format list (bz 795323)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-12
changelog:
  - Fix reopening a remote graphical console (bz 811316)
  - Fix app crash when deleting multiple storage volumes (bz 803600)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.0-15
changelog:
  - Only reboot VM if it had an install phase (rhbz#824275)
  - Match usb device with vendorID, productID, bus, device (rhbz#820303)
  - Change Mbps to MB/s in migration dialog (rhbz#802639)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.32
changelog:
  - Add 0064-RHBZ-612173-fix-reverse-lookup.patch
      * don't terminate WWID at whitespace on reverse lookup.
  - Add 0065-RHBZ-635088-update-priority.patch
      * refresh all priorities when a new path comes online
  - Add 0066-RHBZ-636071-mpathconf-variable_names.patch
      * don't use DISPLAY variable name. It configs with X. Also, unset all
        the variable names, so this doesn't happen again.
  - Add 0067-RHBZ-622569-symmetrix-config.patch
  - Add 0068-RHBZ-632734-nvdisk-config.patch
  - Add 0069-RHBZ-636246-hp-open-config.patch
  - Add 0070-RHBZ-639037-hitachi-open-config.patch
  - Add 0071-RHBZ-611779-fix-whitespace-crash.patch
      * get_cmdvec wasn't setting the passed in vector to NULL, when
        there was no command.
  - Add 0072-RHBZ-651389-change-scsi-tmo-order.patch
      * Make multipath set fast_io_fail_tmo before dev_loss_tmo, so that
        you can set dev_loss_tmo above 600.
  - Resolves: bz #651389, #611779, #639037, #636246, #632734, #622569, #636071
  - Resolves: bz #635088, #612173


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.33
changelog:
  - Add 0073-RHBZ-650664-clarify-error-msg.patch
      * tell users to increase max_fds, if multipath gets EMFILE trying to
        open a file.
  - Add 0074-RHBZ-602883-dont-print-change.patch
      * don't print messages for every change uevent
  - Add 0075-RHBZ-576919-log-checker-err.patch
      * add log_checker_err default config option, to control the verbosity
        of repeated checker error messages
  - Add 0076-RHBZ-599690-update-multipath-conf.patch
  - Add 0077-RHBZ-622608-nvdisk-config.patch
  - Add 0078-RHBZ-628095-config-warnings.patch
      * print warning messages for invalid config parameters
  - Add 0079-RHBZ-650797-display-iscsi-tgt-name.patch
      * get tgt name for iscsi devices
  - Add 0080-RHBZ-622731-fix-no-config-value-segfault.patch
      * check that a config option has a value before trying to get the
        strlen of the value.
  - Resolves: bz #576919, #599690, #602883, #622608, #622731, #628095, #650664
  - Resolves: bz #650797


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.34
changelog:
  - Add 0081-RHBZ-623644-fix-sysfs-caching.patch
      * Remove attribute value caching, and free cached parent devices on remove
  - Resolves: bz #623644


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.35
changelog:
  - Add 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
      * Set DM_UDEV_DISABLE_DISK_RULES_FLAG in dm_simplecmd to stop blkid from
        running on reloads
  - Add 0083-RHBZ-636213-633643-new-configs.patch
      * Autoconfigs for HP P2000 family and NEC Storage M Series arrays
  - Resolves: bz #631009, #636213, #636213


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.36
changelog:
  - Add 0084-RHBZ-644111-read-only-bindings.patch
      * Add -B multipath and multipathd option, to make the bindings file
        read-only. This is to be used by the initramfs
  - Resolves: bz #644111


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.37
changelog:
  - Add 0085-RHBZ-645605-fix-offline-check.patch
     * Make path_offline return false if it can't deterime a paths state.
  - Rename 0080-RHBZ-622731-fix-no-config-value-segfault.patch to
           0080-RHBZ-662731-fix-no-config-value-segfault.patch
     * accidentally used the wrong bug number
  - Resolves: bz #645605, #662731


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.38
changelog:
  - Remove 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
     * This patch was causing a serious regression (677937), and resolving
       it requires changes in /etc/rc.sysinit, so I'm backing it out for
       now.
  - Resolves: bz #677937
  - Related: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.39
changelog:
  - Add 0086-RHBZ-681144-sysfs-device-cleanup.patch
     * Make sure to remove the sysfs device from cache when the path is
       removed. Also, only search the sysfs device cache under the vecs lock
  - Resolves: bz #681144


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.40
changelog:
  - Add 0087-RHBZ-680480-skip-if-no-sysdev.patch
     * Don't check the path if it has no sysdev, since it is about to
       be removed.
  - Resoves: bz# 680480


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.41
changelog:
  - Add 0088-RHBZ-693524-fix-prio-segfault.patch
     * Don't reuse the the path argument as a variable in the vector
       loop.
  - Resolves: bz# 696157


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-111
changelog:
  * Sync with 6.9
  - Resolves: rhbz#1498342 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws
  - Resolves: rhbz#1461291 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism
  - Resolves: rhbz#1441479 CVE-2017-5647 tomcat6: tomcat: Incorrect handling of pipelined requests when send file was used
  - Resolves: rhbz#1415824 The tomcat6 build is incompatible with the ECJ update


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-112
changelog:
  - Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-115
changelog:
  - Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence


author: Jana Fabrikova <jfabriko@redhat.com> - 1:1.6.0.13.2-1jpp.1
changelog:
  - time zone updater file changed from jtzu-1.6.12j.zip to jtzu-1.6.13b.zip
  - buildver changed from  13.0 to 13.2
  - service_release changed from 13.0 to 13.2
  - priority_minor_version changed from 0 to 2 
  - Resolves: rhbz#961823


author: Jana Fabrikova <jfabriko@redhat.com> - 1:1.6.0.14.0-1jpp.1
changelog:
  - Updated buildver, service_release, priority_major and minor version
    from 13.2 to 14.0
  - Resolves: rhbz#981211


author: Jana Fabrikova <jfabriko@redhat.com> - 1:1.6.0.15.0-1jpp.1
changelog:
  - automatic update by JavaRpmUpdater 1.3
  - buildver changed from 14.0 to 15.0
  - priority_major_version changed from 14 to 15
  - service_release changed from 14.0 to 15.0
  - time zone update file chenged form jtzu-1.6.13b.zip to jtzu-1.6.13f.zip
  - Resolves: rhbz#1021427


author: Jana Fabrikova <jfabriko@redhat.com> - 1:1.6.0.15.1-1jpp.1
changelog:
  - automatic update by JavaRpmUpdater 1.3
  - buildver changed from 15.0 to 15.1
  - priority_minor_version changed from 0 to 1
  - service_release changed from 15.0 to 15.1
  - time zone update file chenged form jtzu-1.6.13f.zip to jtzu-1.6.13i.zip
  - Resolves: rhbz#1059878


author: Jana Fabrikova <jfabriko@redhat.com> - 1:1.6.0.16.0-1jpp.1
changelog:
  - automatic update by JavaRpmUpdater 1.3
  - buildver changed from 15.1 to 16.0
  - priority_minor_version changed from 1 to 0
  - service_release changed from 15.1 to 16.0
  - time zone update file chenged form jtzu-1.6.13i.zip to jtzu-1.6.14b.zip
  - Resolves: rhbz#1096254


author: Omair Majid <omajid@redhat.com> - 1:1.6.0.16.1-1jpp.1
changelog:
  - buildver changed from 16.0 to 16.1
  - priority_minor_version changed from 0 to 1
  - service_release changed from 16.0 to 16.1
  - time zone update file chenged form jtzu-1.6.14b.zip to jtzu-1.6.14e.zip
  - Resolves: rhbz#1126969


author: Zdenek Zambersky <zzambers@redhat.com> - 1:1.6.0.16.2-1jpp.1
changelog:
  - buildver changed from 16.1 to 16.2
  - priority_minor_version changed from 1 to 2
  - service_release changed from 16.1 to 16.2
  - time zone update file chenged form jtzu-1.6.14e.zip to jtzu-1.6.14i.zip
  - Resolves: rhbz#1162491


author: Jana Drazanova <jfabriko@redhat.com> - 1:1.6.0.16.3-1jpp.2
changelog:
  - automatic update by JavaRpmUpdater 1.3
  - buildver changed from 16.2 to 16.3
  - service_release changed from 16.2 to 16.3
  - priority_minor version changed from 2 to 3
  - time zone update file changed form jtzu-1.6.14i.zip to jtzu-1.6.14j.zip
  - Resolves: rhbz#1188272


author: Jana Drazanova <jfabriko@redhat.com> - 1:1.6.0.16.3-1jpp.1
changelog:
  - automatic update by JavaRpmUpdater 1.3
  - buildver changed from 16.3 to 16.4
  - priority_minor version changed from 3 to 4
  - added priority length check (priority must have 6 digits)
  - time zone update file changed from jtzu-1.6.14j.zip to jtzu-1.6.15d.zip
  - Resolves: rhbz#1218908


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-1
changelog:
  - rebase to 2.4.39 (#923680)
    + drop a lot of upstreamed patches, backport the rest
    + compile in mdb
    + remove automatic slapd.conf -> slapd-config conversion


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - add another missing patch forgotten during the rebase
  - fix: enable dynamic linking - unresolved symbols in the smbk5pwd module


author: Andrew Beekhof <abeekhof@fedoraproject.org> 0.4.2-6
changelog:
  - Sync the windows package with the linux version:
    - Rebase on new upstream release: 325f740
    - Update patch level to: 6b5df25
  - Related: rhbz#730066, rhbz#727194, rhbz#728360, rhbz#730087,
  	rhbz#729516, rhbz#729331, rhbz#728977, rhbz#728988,
  	rhbz#728631, rhbz#729063, rhbz#727192, rhbz#714249,
  	rhbz#688191, rhbz#727961, rhbz#688193


author: Russell Bryant <rbryant@redhat.com> 0.4.2-9
changelog:
  - Sync the windows package with the linux version
    - Update patch level to: 468fc0b
  - Related: rhbz#732498, rhbz#730087, rhbz#731914. rhbz#731858, rhbz#731233
  - Related: rhbz#729332, rhbz#730044, rhbz#730066, rhbz#731534, rhbz#714249
  - Related: rhbz#728360, rhbz#733013


author: Russell Bryant <rbryant@redhat.com> 0.4.4-2
changelog:
  - Rebase to upstream release 0.4.4
  - Resolves: rhbz#735419, rhbz#735429, rhbz#733483. rhbz#734981
  - Resolves: rhbz#735426, rhbz#734536, rhbz#733468, rhbz#734522
  - Resolves: rhbz#733393, rhbz#736468
  - Resolves: rhbz#733384, rhbz#733393, rhbz#733451, rhbz#731858
  - Resolves: rhbz#733150, rhbz#714249


author: Russell Bryant <rbryant@redhat.com> 0.4.4-4
changelog:
  - Import all patches from matahari package
  - rebuild to include latest mingw32-sigar
  - Resolves: rhbz#737088, rhbz#737137, rhbz#737618, rhbz#739666
  - Resolves: rhbz#739952, rhbz#737541


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6
changelog:
  - Resolves: #556398
  - Directly included relevant patches, scripts and man pages from Debian
  - Removed rpath
  - rpmlint is silent now


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6.1
changelog:
  - Fixed CVE-2010-2642, CVE-2011-0433, CVE-2011-0764, CVE-2011-1552, CVE-2011-1553, CVE-2011-1554
    Resolves: rhbz#772900


author: Zdenek Zambersky <zzambers@redhat.com> - 1:1.6.0.16.2-1jpp.1
changelog:
  - buildver changed from 16.1 to 16.2
  - priority_minor_version changed from 1 to 2
  - service_release changed from 16.1 to 16.2
  - time zone update file chenged form jtzu-1.6.14e.zip to jtzu-1.6.14i.zip
  - Resolves: rhbz#1162492


author: Jana Drazanova <jfabriko@redhat.com> - 1:1.6.0.16.3-1jpp.2
changelog:
  - automatic update by JavaRpmUpdater 1.3
  - buildver changed from 16.2 to 16.3
  - service_release changed from 16.2 to 16.3
  - priority_minor version changed from 2 to 3
  - time zone update file changed form jtzu-1.6.14i.zip to jtzu-1.6.14j.zip
  - Resolves: rhbz#1188273


author: Jana Drazanova <jfabriko@redhat.com> - 1:1.6.0.16.3-1jpp.1
changelog:
  - automatic update by JavaRpmUpdater 1.3
  - buildver changed from 16.3 to 16.4
  - priority_minor version changed from 3 to 4
  - added priority length check (priority must have 6 digits)
  - time zone update file changed from jtzu-1.6.14j.zip to jtzu-1.6.15d.zip
  - Resolves: rhbz#1218909


author: Zdenek Zambersky <zzambers@redhat.com> - 1:1.6.0.16.7-1jpp.1
changelog:
  - buildver changed from 16.4 to 16.7
  - priority_minor_version changed from 4 to 7
  - service_release changed from 16.4 to 16.7
  - time zone update file chenged form jtzu-1.6.15d.zip to jtzu-1.6.15e.zip
  - adding answers for the installer (accepting licence, running in silent mode)
  - Resolves: rhbz#1244279


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.39.1-3
changelog:
  - extended smartctl man pages with examples how to use cciss
  - fix crash when starting selftest on megaraid controller


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.42-1
changelog:
  - updated to 5.42 (#698317)
  - improve 3ware raid controller support (#697235)
  - fix SCSI log page sanity check (#784925)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Resolves: rhbz#975489 - Additional flags might have no effect
                            on 32bit architectures


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-1
changelog:
  - Rebase libtevent to 0.9.26
  - Remove upstreamed or no longer applicable patches
  - Related: rhbz#1322688


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-2
changelog:
  - temporarily disable make check, which keeps failing in mock despite
    working correctly on a full system
  - Related: rhbz#1322688


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-102
changelog:
  - fixed statistics.c to use unsigned long long (instead of int) to handle 64 bit integers (Bug #580054)
  - fixed typo in statistics.c
  - interface slip: cast keepalive/outfill to unsigned long to fix warnings on 64bit hosts
  - interface: fix IPv6 parsing of interfaces with large indexes (> 255)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-103
changelog:
  - improved statistics-doubleword.patch (Bug #580054)
  - improved netstat(8) man page (#614931)
  - HFI support (#633506)
  - fixed memory leak in netstat when run with -c option (#634539)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-105
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since RHEL-6.1 network devices can have arbitrary names (#682368)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-106
changelog:
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#680837)
  - plipconfig man page and usage output fixes (#694766)
  - Add -A,--all-fqdns and -I,--all-ip-addresses options to hostname (#705110)
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (#708538)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-108
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).
    (#725348)


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-17
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports MacroSurprise or SetuidMissingRELRO rhbz#812284
  - abrt missing dependency: libreport-plugin-bugzilla rhbz#828673
  - Same values for variables  'DumpLocation' & 'WatchCrashdumpArchiveDir'  stops mailx plugin rhbz#854668
  - abrt-vmcore repeats processing old vmcores on the service (re)start rhbz#885044
  - abrt-gui help menu item points to generic RHEL documentation rhbz#903195
  - Desktop file is named redhat-abrt.desktop rhbz#905822
  - 'post-create' on 'xxx' exited with 1 Corrupted or bad directory xxx, deleting rhbz#909617
  - abrt.pth prevents python virtualenv creation rhbz#912672
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - provide the python API for abrt rhbz#952704
  - abrtd marks problems having count > 1 as duplicates rhbz#886631
  - Resolves: #886631, #905429, #961231, #961231, #961231, #961231, #812284, #828673, #828673, #759443, #759443, #903195, #854668, #905822, #909617, #885044, #912672, #912672, #952704, #875260


author: Jan Synáček <jsynacek@redhat.com> - 0.17-52
changelog:
  - Add listening timeout to avoid hanging up when ftp is executed in active mode
    and ftp-data port is blocked (#852636)
  - Plug memleaks in append, put and send commands (#786004)


author: Patsy Franklin <pfrankli@redhat.com> - 2.12-1.98
changelog:
  - Backport upstream glibc 4f031072a5055abd83717820b59efdaa463d5853
      locale/findlocale.c (_nl_find_locale): Return right away if
      _nl_explode_name failed.
      locale/programs/locarchive.c (add_locale_to_archive): Likewise. (#848082)


author: Jeff Law <law@redhat.com> - 2.12-1.99
changelog:
  - Allow broken code to avoid the 32 bit SSSE3 memcpy implementations
      by setting the environment variable
      32BIT_SSSE3_MEMCPY_VIA_32BIT_SSSE3_MEMMOVE to any value (#846342)


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-10
changelog:
  - Add a patch from upstream to ignore non CPU data from /proc/cpuinfo,
    which would lead to a spurious processor displayed in the application,
    under certain architectures
  Resolves: #682011


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-11
changelog:
  - Add a patch from upstream that looks for the "clock" line in the
    /proc/cpuinfo output. This fixes missing CPU speed for architectures
    that put such information in the "clock" line, such as Power6
  Resolves: #692956


author: Adrian Likins <alikins@redhat.com>
changelog:
  - Resolves: #702403
  - use z branch now (cduryee@redhat.com)
  - 700601: try really hard to set a meaningful locale (alikins@redhat.com)
  - 683553: subscription-manager-gui is displaying unlimited pools as -1
    (cduryee@redhat.com)
  - Write unique key.pem for each entitlement. (dgoodwin@redhat.com)
  - 700313: We were skipping the code that hides the activation button
    (alikins@redhat.com)
  - 700313: Tweaking activate dialog properties to show in firstboot.
    (jharris@redhat.com)
  - 699442: dates are being displayed incorrectly everywhere (alikins@redhat.com)
  - 696020: on x86, serial numbers do not like to be long's (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.13-1
changelog:
  - Resolves: #702403
  - 702403: rev the version to get ahead (alikins@redhat.com)
  - use z branch now (cduryee@redhat.com)
  - 700601: try really hard to set a meaningful locale (alikins@redhat.com)
  - 683553: subscription-manager-gui is displaying unlimited pools as -1
    (cduryee@redhat.com)
  - Write unique key.pem for each entitlement. (dgoodwin@redhat.com)
  - 700313: We were skipping the code that hides the activation button
    (alikins@redhat.com)
  - 700313: Tweaking activate dialog properties to show in firstboot.
    (jharris@redhat.com)
  - 699442: dates are being displayed incorrectly everywhere (alikins@redhat.com)
  - 696020: on x86, serial numbers do not like to be long's (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.15-1
changelog:
  - 711133: new fix for old style to new style key format migrations
    (alikins@redhat.com)
  - 701374: Don't show -1 for unlimited in contact_selection (alikins@redhat.com)
  - 712130: cli was using product names for ent cert-> product cert matching
    (alikins@redhat.com)
  - 703921: contract selection was not showing dates for pools
    (alikins@redhat.com)
  - 712128: fix bug showing the "you are registered to rhn" dialog
    (alikins@redhat.com)
  - 711133: Handle updates from old style key.pem certs (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.16-1
changelog:
  - Automatic commit of package [subscription-manager] release [0.95.15-1].
    (alikins@redhat.com)
  - 712409: new fix for old style to new style key format migrations
    (alikins@redhat.com)
  - 701374: Don't show -1 for unlimited in contact_selection (alikins@redhat.com)
  - 712130: cli was using product names for ent cert-> product cert matching
    (alikins@redhat.com)
  - 712408: contract selection was not showing dates for pools
    (alikins@redhat.com)
  - 712128: fix bug showing the "you are registered to rhn" dialog
    (alikins@redhat.com)
  - 712409: Handle updates from old style key.pem certs (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.17-1
changelog:
  - Automatic commit of package [subscription-manager] release [0.95.16-1].
    (alikins@redhat.com)
  - Automatic commit of package [subscription-manager] release [0.95.15-1].
    (alikins@redhat.com)
  - 712409: new fix for old style to new style key format migrations
    (alikins@redhat.com)
  - 712408: Don't show -1 for unlimited in contact_selection (alikins@redhat.com)


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-10
changelog:
  - support ACLs under skel directory
  - refer to PAM in /etc/login.defs
  - userdel option to remove Linux login <-> SELinux login mapping
  - useradd special exit value if SELinux user mapping is invalid
  - usermod special exit value if SELinux user mapping is invalid
  - fix gshadow functions from shadow utils
  - fix find_new_uid/gid for big UID/GID_MAX
  - don't show users who were not logged in lastlog
    Resolves: #586796 #629277 #639900 
    Resolves: #639975 #639976 #667593 #672510
    Resolves: #693377 #706321


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.31
changelog:
  - 749051 Sync iscsiuio to iscsiuio-0.7.0.14g to fix boot hang
    when connection is lost during startup.


author: Steve Grubb <sgrubb@redhat.com> 0.3.13-1
changelog:
  - New upstream bug fix release
  resolves: #633584 - Pick up latest TrouSerS package
  resolves: #1074634 - Buffer overflow detected in TrouSerS daemon


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Update to latest upstream release (which adds XRC support,
    infrastructure for verbs extensions, core support for usNIC
    nodes and transports, uverbs extensions, and receive flow
    steering extension)
  - The HPN channel in rhel6 is going away and the RoCE capability
    is being folded back into the base OS channel package (aka
    this one).  Provide an Obsoletes tag to cause this package
    to replace the older libibverbs-rocee package from the HPN
    channel
  - Resolves: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Add the RoCE IP Address GID support patches
  - Create our own tarball that is the three patches we needed
    then autoreconf run with an acceptable version of autotools
    as the version in the build system is too old
  - Resolves: bz1051211


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Fix a coverity found issue
  - Resolves: bz1119105


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.3
changelog:
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1180521)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1180521)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1180521)


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-4
changelog:
  - The hpijs sub-package no longer requires cupsddk-drivers (which no
    longer exists as a real package), but cups >= 1.4 (bug #829453).


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-1
changelog:
  - Re-based to 3.12.4 with fixes from Fedora (bug #731900).  No longer
    need no-system-tray, openPPD, addgroup, emit-SIGNAL, fab-root-crash,
    newline, hpaio-segfault, dbus-threads, or cups-web patches.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4
changelog:
  - Applied patch to fix CVE-2013-0200, temporary file vulnerability
    (bug #902163).
  - Fixed hpijs-marker-supply patch.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-5
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Tim Waugh <twaugh@redhat.com> 4.0-2.20090702
changelog:
  - Move foomatic-db-ppds symlink to ppds sub-package.
  - Use sed instead of perl in raster PPDs (bug #512739).
  - Removed code to convert old-style printer IDs (there are none).
  - Ship README file.


author: Tim Waugh <twaugh@redhat.com> 4.0-3.20090702
changelog:
  - License for ppds sub-package should include GPLv2+.
  - Ship COPYING file in main package.
  - Added filesystem sub-package for directory ownership.


author: Tim Waugh <twaugh@redhat.com> 4.0-5.20090819
changelog:
  - Updated to foomatic-db-4.0-20090819.
  - Removed deprecated foomatic-db-hpijs tarball.
  - Use buildroot macro throughout.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-32.1
changelog:
  - Resolves: rhbz#840089 -  sssd incorrectly sets shadowLastChange in seconds
                             not days


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-32.2
changelog:
  - Resolves: rhbz#867012 - SSSD does not auto renew kerberos credentials
                            when auth_provider is 'ipa'


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-32.3
changelog:
  - Resolves: rhbz#881460 - SSSD cannot cope with empty naming context coming
                            from Novell eDirectory


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.4
changelog:
  - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
  - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts


author: John Dennis <jdennis@redhat.com> - 2.1.0-1
changelog:
  - Resolves: Bug 643544
  - bump version to 2.1.0
    Bug #588323 - Failed to enable cipher 0xc001 (svn rev 105)
    Bug #634375 - Build tomcatjss against tomcat6 (svn rev 106)
    Bug #655915 - Disable socket timeouts when socket is first created. (svn rev 107)


author: Harald Hoyer <harald@redhat.com> 004-25
changelog:
  - mount live images to /dev/.initramfs/live and do not
    umount it, so that cdrom_id works in the real root
    and /dev/live is pointing to the correct device
  Resolves: rhbz#605356


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-642.14.1.el6]
changelog:
  - [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
  - [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
  - [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
  - [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
  - [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
  - [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
  - [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
  - [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
  - [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
  - [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
  - [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-642.15.1.el6]
changelog:
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.209.el6_2.2
changelog:
  - kvm-virtio-blk-refuse-SG_IO-requests-with-scsi-off.patch [bz#752375]
  - CVE: CVE-2011-4127
  - Resolves: bz#767721
    (EMBARGOED qemu-kvm: virtio-blk: refuse SG_IO requests with scsi=off (CVE-2011-4127 mitigation) [rhel-6.3])
  - Resolves: bz#767906
    (qemu-kvm should be built with full relro and PIE support)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.209.el6_2.3
changelog:
  - kvm-Revert-virtio-blk-refuse-SG_IO-requests-with-scsi-of.patch [for bz#767721]
  - kvm-virtio-blk-refuse-SG_IO-requests-with-scsi-off-v2.patch [bz#767721]
  - CVE: CVE-2011-4127
  - Resolves: bz#767721
    (qemu-kvm: virtio-blk: refuse SG_IO requests with scsi=off (CVE-2011-4127 mitigation) [rhel-6.2.z])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.209.el6_2.4
changelog:
  - kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch [bz#772081]
  - Resolves: bz#772081
    (EMBARGOED CVE-2012-0029 qemu-kvm: e1000: process_tx_desc legacy mode packets heap overflow [rhel-6.2.z])


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-10
changelog:
  - remove libtool hacks so that compat-db builds again
  - remove support for old BDBs: 4.3.29, 4.2.52, 4.1.25


author: Anton Arapov <anton@redhat.com> - 1:1.17-10
changelog:
  - Fix buffer overflow
  - Resolves: rhbz#768803
  - Update to microcode-20111110.dat
  - Resolves: rhbz#736266


author: Petr Machata <pmachata@redhat.com> - 2.0-2.20070927
changelog:
  - Review fixes
    - GCC 4.3 patchset
    - Add BR util-linux net-tools
    - Add full URL to Source0
    - Build in debug mode to work around problems with GCC 4.3


author: Petr Machata <pmachata@redhat.com> - 2.2-2.20090809
changelog:
  - Replace mfence instruction with xchg to make it run on ia32-class
    machines without SSE2.
  - Resolves: #600654


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-1
changelog:
  - Bump to newer release
  - Removed mkdosfs-ygg from Obsoletes/Provides tag as it looks really deprecated
  - Drop bounds patch - fixed upstream


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-4
changelog:
  - Fixed dosfsck and dosfslabel on s390x (s390x-unalign patch)
    Resolves: rhbz#624596
  - Fixed buffer overflow in alloc_rootdir_entry (fix-alloc-rootdir-entry patch)
    Resolves: rhbz#677789
  - Fixed dosfslabel on FAT32 (dosfslabel-fat32 patch)
    Resolves: rhbz#688128
  - Fixed device partitions detection (dev-detect-fix patch)
    Resolves: rhbz#709266


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-155
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #951175


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-156
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #980382


author: Ian Main <imain@redhat.com> 0.2.22-1
changelog:
  - Fix init script to return 2 when invoked with no arguments and add try-restart
    to usage list.  Resolves: #570492


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-1
changelog:
  - Change package name from libvirt-qpid to libvirt-qmf
  - Convert to QMFv2 API
  - Make libvirt-qmf a matahari agent
    Resolves: #688200
    Related: #688194


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-3
changelog:
  - Ensure all Domain properties are initialized immediately
  - Correct some erroneous error messages
  - Fix quoting of variables in init script
    Resolves: #729127


author: Harald Hoyer <harald@redhat.com> 004-231
changelog:
  - add more kernel modules for iSCSI
  Resolves: rhbz#696980
  - chown /var/lib/rpcbind to rpc user and make it 770
  Resolves: rhbz#698160
  - remove "--no-degraded" from mdadm arguments
  Resolves: rhbz#698165
  - remove script error in mdraid_start.sh
  Resolves: rhbz#698215
  - parse and mount fstab.sys
  Resolves: rhbz#701309
  - add "dm-mod" and "dm-crypt" to fips modules
  Resolves: rhbz#707609
  - set LANG=C for chrooted selinux operations
  Resolves: rhbz#712254
  - use "--partial" to assemble degraded lvm mirrors
  Resolves: rhbz#723548
  - spec file patch cleanup to resemble git repo at
  http://git.kernel.org/?p=boot/dracut/dracut.git;a=shortlog;h=refs/heads/RHEL-6


author: Harald Hoyer <harald@redhat.com> 004-234
changelog:
  - add broadcom iscsi offload support
  Resolves: rhbz#701864
  - fixed dm dracut module, to no require dmraid
  Resolves: rhbz#732686
  - fixed md raid assembly
  Resolves: rhbz#732967


author: Harald Hoyer <harald@redhat.com> 004-239
changelog:
  - fixed raid assembly with encrypted members
  Resolves: rhbz#737593
  - support bnx2fc for FCoE
  Resolves: rhbz#736094
  - fixed iscsi module loading
  Resolves: rhbz#737479


author: Harald Hoyer <harald@redhat.com> 004-244
changelog:
  - add dracut-fips-aesni subpackage
  Resolves: rhbz#740487 
  - add /var/log in initramfs
  Resolves: rhbz#701864


author: Harald Hoyer <harald@redhat.com> 004-247
changelog:
  - add "-F" to selinux restorecon 
  Resolves: rhbz#741430
  - kill iscsiuio before switching root
  Resolves: rhbz#701864


author: Harald Hoyer <harald@redhat.com> 004-248
changelog:
  - 95fcoe/fcoe-up: load 8021q module before fipvlan
  Resolves: rhbz#736094
  - modprobe iscsi_boot_sysfs
  Resolves: rhbz#737134


author: Harald Hoyer <harald@redhat.com> 004-254
changelog:
  - fixed killproc()
  Resolves: rhbz#701864
  - hardcode modprobe of various iscsi offload drivers
  Resolves: rhbz#737134


author: Harald Hoyer <harald@redhat.com> 004-256
changelog:
  - increase timeout to wait for dhcp connections
  Resolves: rhbz#742920
  - check /tmp/net.$netif.override before sourcing it
  Resolves: rhbz#696980


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.1
changelog:
  - Added flag so that debuginfo is built into classfiles (rhbz# 796400)
  - Updated rhino.patch to build scripting support (rhbz# 796398)


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.2
changelog:
  - Resolved rhbz#740762: java.library.path is missing some paths
  - Unified spec file for x86, x86_64, ARM and s390
    - Integrated changes from Dan Horák <dhorak@redhat.com> for Zero/s390
    - Integrated changes from Chris Phillips <chphilli@redhat.com> for Zero/ARM


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6
changelog:
  - Imported from Fedora into RHEL 6.3 branch
  - Removed unused macros
  - Removed rh740762 patch (removed from Fedora now too)
  - Disabled system lcms (not available in RHEL6)
  - Updated virtual provides to provide "7" specific items
  - Made exclusive arch for i686 and x86_64


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.1
changelog:
  - Synched with 7.0 branch
  - Removed unnecessary unsetting of USE_SYSTEM_LCMS
  - Added SystemTap fixes from Mark Wielaard


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.3
changelog:
  - Added ALT_STRIP_POLICY="no_strip" flag so that binaries are not stripped
  - Collapsed if cases for x86
  - Decreased priority
  - Removed xalan and xerces reqs in favor of libxslt which is what we use


author: Jan Kaluza <jkaluza@redhat.com> 5.04-12
changelog:
  - fix #758109 - detect ia64 swap
  - fix #760083 - print RPM packages names
  - fix #709846 - detect BIOS headers
  - fix #688136 - remove weak msdos patterns
  - fix #747999 - improve lzma detection
  - fix #733229 - magic pattern for python function detection


author: Jan Kaluza <jkaluza@redhat.com> 5.04-13
changelog:
  - fix #688136 - fixed the patch from previous commit
  - fix #719583 - support for local magic file in /etc/magic


author: Russell Bryant <rbryant@redhat.com> 0.4.3-1
changelog:
  - Rebase to upstream release 0.4.3
  - Resolves: rhbz#733384, rhbz#733393, rhbz#733451, rhbz#731858
  - Resolves: rhbz#733150, rhbz#714249


author: Russell Bryant <rbryant@redhat.com> 0.4.4-1
changelog:
  - Rebase to upstream release 0.4.4
  - Resolves: rhbz#735419, rhbz#735429, rhbz#733483. rhbz#734981
  - Resolves: rhbz#735426, rhbz#734536, rhbz#733468, rhbz#734522
  - Resolves: rhbz#733393, rhbz#736468
  - Related: rhbz#674578


author: Russell Bryant <rbryant@redhat.com> 0.4.4-4
changelog:
  - Sync with upstream spec file fixes.
  - add man pages (rhbz#737088)
  - fix some sysconfig issues (rhbz#737137)
  - ensure old processes get cleaned up after an upgrade (rhbz#737618)
  - fix agent crash on NULL UUIDs (rhbz#739666)
  - don't list "LSB" as a valid standard on windows (rhbz#739952)
  - Resolves: rhbz#737088, rhbz#737137, rhbz#737618, rhbz#739666
  - Resolves: rhbz#739952, rhbz#737541


author: Russell Bryant <rbryant@redhat.com> 0.4.4-5
changelog:
  - remove hard puppet dependency
  - fix sysconfig agent no response (rhbz#740038)
  - Resolves: rhbz#740038
  - Related: rhbz#737137


author: Russell Bryant <rbryant@redhat.com> 0.4.4-6
changelog:
  - resolve coverity warnings in broker wrapper (rhbz#735426)
  - add validation on sysconfig keys (rhbz#740090)
  - store sysconfig keys in a subdir (rhbz#740091)
  - Resolves: rhbz#740090, rhbz#740091
  - Related: rhbz#735426


author: Russell Bryant <rbryant@redhat.com> 0.4.4-7
changelog:
  - Validate sysconfig keys sooner (rhbz#741965)
  - Add man pages in a patch instead of generating during build (rhbz#737088)
  - Update sigar version dependency (rhbz#737541)
  - Resolves: rhbz#741965, rhbz#737088, rhbz#737541


author: Zane Bitter <zbitter@redhat.com> 0.4.4-9
changelog:
  - Read the CPU features on non-x86 architectures (rhbz#746288)
  - Add daemons to chkconfig after installation (rhbz#746084)
  - Resolves: rhbz#746084
  - Related: rhbz#746288


author: Chris Feist <cfeist@redhat.com> - 0.16.2-27
changelog:
  - More fixes for ccs
  - Ricci no longer sends non-SSL over an SSL connection
  - Resolves: rhbz#652837 rhbz#614647


author: Chris Feist <cfeist@redhat.com> - 0.16.2-30
changelog:
  - Added ability to configure unfence section in ccs
  - Fixed --setmulticast to properly remove multicast settings
  - Resolves: rhbz#683192 rhbz#681646


author: Chris Feist <cfeist@redhat.com> - 0.16.2-32
changelog:
  - Add validation logic when first looking at the config file and after
    changing it
  - Resolves: rhbz#682868


author: Chris Feist <cfeist@redhat.com> - 0.16.2-34
changelog:
  - Fixed several minor documentation issues
  - Fixed --status errors
  - Fixed missing --debug option
  - Fixed traceback when using --help as an argument
  - Related: rhbz#682868


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.149.7
changelog:
  - Fix invalid file descriptor reuse while sending DNS query
    (#1207995, CVE-2013-7423).
  - Fix buffer overflow in gethostbyname_r with misaligned buffer
    (#1209375, CVE-2015-1781).


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-8
changelog:
  - fix: poor ping latency in 'latency-performance' profile (#714180)
  - fix: ktune breaks disks when pecifying just the device for ELEVATOR_TUNE_DEVS (#784308)
  - fix: should not disable barriers on devices with write back cache (#801561)
  - fix: /var/run/tuned/tuned.pid created with insecure permissions (#845336)


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Lubomir Rintel <lkundrak@v3.sk> - 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author: Petr Pisar <ppisar@redhat.com> - 7.8-4
changelog:
  - Add license files to static subpackage (Resolves: #613690)
  - Fix typos in pcretest(1) manual page (Resolves: #676636)
  - Fix typos in pcregrep(1) manual page (Resolves: #676643)


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-68.1
changelog:
  - gfs_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1234442
  - dlm_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1233534


author: Matthew Booth <mbooth@redhat.com> - 0.8.7-5
changelog:
  - Disable serial console when converting to RHEV (RHBZ#785235)
  - Improve error detection in p2v-server
  - Replace augeas-libs dependency with libguestfs dependency for mdadm_conf lens


author: Hans de Goede <hdegoede@redhat.com> - 1.0.9-0.6.rc1
changelog:
  - Don't split bulk transfers unnecessary
  - Resolves: rhbz#830751
  - Don't let disconnect_kernel_driver detach the usbfs driver
  - Resolves: rhbz#820205


author: Patsy Franklin <pfrankli@redhat.com> - 2014c-1
changelog:
  - Rebase to 2014c
    - Egypt's government to re-apply daylight saving time.
    - zic now generates transitions for minimum time values
    - Port to Cygwin sans glibc.
    - Remove now-confusing comment about Jordan.


author: Patsy Franklin <pfrankli@redhat.com> - 2014d-1
changelog:
  - Rebase to 2014d
    - zic no longer generates files containing time stamps before
      the Big Bang.  This works around GNOME bug 730332


author: Patsy Franklin <pfrankli@redhat.com> - 2014e-1
changelog:
  - Rebase to 2014e
    - Morrocco suspends DTS for Ramadan 
         June 28 at 03:00 and August 2 at 02:00
    - Egypt suspends DTS for Ramadan
         June 26 and July 31 at 24:00


author: Patsy Franklin <pfrankli@redhat.com> - 2014f-1
changelog:
  - Rebase to 2014f
    - Several Russian time zone changes effective on 2014-10-26
      at 02:00 local time.  See NEWS file for additional details.


author: Patsy Franklin <pfrankli@redhat.com> - 2014g-1
changelog:
  - Rebase to 2014g
    - Turks & Caicos is switching from US eastern time to UTC-4
      year-round, modeled as a switch from EST/EDT to AST 
      on 2014-11-02 at 02:00.


author: Petr Machata <pmachata@redhat.com> - 2014h-1
changelog:
  - Rebase to 2014h
    - Changes to historical transitions in America/Jamaica and
      Asia/Novokuznetsk.
    - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
      Lusaka} now alias Africa/Maputo, because they don't differ in
      post-1970 stamps.
    - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
      the same reason.


author: Patsy Franklin <pfrankli@redhat.com> - 2014i-1
changelog:
  - Rebase to 2014i
    - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
    - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
      that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2014j-1
changelog:
  - Rebase to 2014j
    - Turks & Caicos' switch from US eastern time to UTC-4 year-round
      did not occur on 2014-11-02 at 02:00.  It's currently scheduled
      for 2015-11-01 at 02:00.


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-1
changelog:
  - Update to snapshot
  - Fix text subtitles causing hangs on startup
  - Fix missing plugins installation requiring a restart
  - Queue2 element moved to gstreamer core


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-2
changelog:
  - Fix theoradec bug with timestamps for Empathy video calls (#537170)
  - Fix text subtitle display regression (#537559)


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Filip Krska <fkrska@redhat.com> = 3.2-57
changelog:
  [policies] get package list without a timeout
    [policies/redhat] make missing 'filesystem' package non-fatal
    Resolves: bz1506596


author: Filip Krska <fkrska@redhat.com> = 3.2-63
changelog:
  [archive] compress tarball without a timeout
    Resolves: bz1439943
    [policies] stop execution on Ctrl+C during user input
    Resolves: bz1567054


author: Filip Krska <fkrska@redhat.com> = 3.2-63.1
changelog:
  [archive] Force decoding if content is bytes
    [reporting] deal with UTF-8 characters
    Resolves: bz1599234


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-1
changelog:
  - Update to sblim-sfcb-1.3.11
    Resolves: #633580
  - Compile with --enable-uds, i. e. enable unix domain socket local connect functionality
    Resolves: #620303
  - Create sfcb system group (used by basic authentication with PAM) in pre install scriptlet,
    remove it in post uninstall scriptlet
    Resolves: #618081
  - Fix default location where sfcbrepos is looking for schema files
    and simplify sfcbrepos command in post install sciptlet
    Resolves: #618080


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-2
changelog:
  - Checks for valid pointer before calling free() in providerDrv.c,
    result.c and support.c (backported from upstream)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-4
changelog:
  - Fix memory leak in sblim-sfcb
    Resolves: #1114798
  - Fix a zombie process of openwsmand (defunct) is left behind
    Resolves: #1110106


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-5
changelog:
  - Fix SIGSEGV in tool_mm_flush()
    Resolves: #907204
  - Fix minor init script inconsistencies
    Resolves: #805588


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Add the modprobe.d/mlx4.conf for user set module options that we
    don't replace on upgrade
  - Rename the dracut module to just mlx4 instead of -libmlx4 (dracut
    takes a dash between the number and the name literally)
  - Add obsoletes tag to make us replace libmlx4-rocee
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Actually use the right %source macro when installing the new
    mlx4.conf file this time
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-7
changelog:
  - Add compiler warnings patch
  - Rebuild against latest libibverbs and valgrind-devel
  - Move module init code to rdma package and require rdma package
  - Resolves: bz1142161, bz1163527


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-18
changelog:
  - add IPv6 support to comsat notification (#198403)
  - package man page for mailstat
  - change mail spool directory to /var/spool/mail


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-24
changelog:
  - rename getline to avoid conflict with glibc (#505977)
  - add -Wno-comments to CFLAGS
  - remove package name from summary


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163994
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163994


author: Milan Crha <mcrha@redhat.com> - 2.28.3-20.el6
changelog:
  - Add versioned evolution-conduits to evolution-devel Requires
  - Add nss/nspr libraries to LDAP_LIBS, because latest openldap requires it


author: David Cantrell <dcantrell@redhat.com> - 13.21.140-1
changelog:
  - Exclude Xen guests when configuring tboot (dcantrell)
    Resolves: rhbz#737094
  - Fix format.majorminor caching. (akozumpl)
    Related: rhbz#731973
  - Fix detection of RAW driverdisc partitions while in manual selection mode
    (msivak)
    Related: rhbz#732496
  - fcoe: handle Broadcom fcoe devices correctly. (akozumpl)
    Resolves: rhbz#641420
  - fcoe: the control path in sysfs is now /sys/module/libfcoe (akozumpl)
    Related: rhbz#641420
  - fcoe: load bnx2fc if relevant. (akozumpl)
    Related: rhbz#641420
  - Fix the list-harddrives test script (mgracik)
    Resolves: rhbz#706099
  - Fix loadkeys-test (mgracik)
    Resolves: rhbz#706099
  - Fix PartitionDevice.path to work with device-mapper disks. (dlehman)
    Related: rhbz#731973
  - Allow DeviceFormat.cacheMajorminor to fail without an exception. (akozumpl)
    Resolves: rhbz#731973
  - Set formats' device attr when associating the format with a device. (dlehman)
    Related: rhbz#731973
  - Cache the value of Format.majorminor(). (akozumpl)
    Related: rhbz#731973
  - More partition dialogs focusing after error (mgracik)
    Resolves: rhbz#679810


author: David Cantrell <dcantrell@redhat.com> - 13.21.141-1
changelog:
  - grub: write 'ip=eth0:dhcp,auto6' instead of 'ip=eth0:dhcp ip=eth0:auto6'
    (akozumpl)
    Resolves: rhbz#740222


author: David Cantrell <dcantrell@redhat.com> - 13.21.143-1
changelog:
  - Remove references to 'ku', 'lo', and 'my' languages. (dcantrell)
    Related: rhbz#744094
  - Ignore po/*.po (dcantrell)
    Related: rhbz#744094
  - Remove po/*.po files as we are using transifex now. (dcantrell)
    Related: rhbz#744094
  - Use transifex to pull translations for rhel6-branch (dcantrell)
    Related: rhbz#744094
  - Update ja translations (dcantrell)
    Resolves: rhbz#744094
  - fcoe: modprobe the VLAN layer module. (akozumpl)
    Related: rhbz#641420
  - Wait after udev settles in DD code as usb has hardcoded timeout in kernel
    module (msivak)
    Related: rhbz#732496
  - Fix intendation error (dcantrell)
    Resolves: rhbz#740870
  - Only check relevant devices for dirty filesystems. (dlehman)
    Resolves: rhbz#741206


author: David Cantrell <dcantrell@redhat.com> - 13.21.147-1
changelog:
  - Make sure to clean up temp vg paths after lvm edit. (dlehman)
    Resolves: rhbz#747606
  - Add xenfs module to initrd.img (dcantrell).
    Resolves: rhbz#747388


author: Chris Lumens <clumens@redhat.com> - 13.21.148-1
changelog:
  - Support prefix length in ipv6= cmdline option (rvykydal)
    Resolves: rhbz#679108
    Related: rhbz#679108


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.14.1.el6]
changelog:
  - [net] fix vlan gro path (Jiri Pirko) [810454 720611]
  - [virt] VMX: vmx_set_cr0 expects kvm->srcu locked (Marcelo Tosatti) [808206 807507] {CVE-2012-1601}
  - [virt] KVM: Ensure all vcpus are consistent with in-kernel irqchip settings (Marcelo Tosatti) [808206 807507] {CVE-2012-1601}
  - [scsi] fcoe: Move destroy_work to a private work queue (Neil Horman) [809388 806119]
  - [fs] jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [749727 748713] {CVE-2011-4086}
  - [net] af_iucv: offer new getsockopt SO_MSGSIZE (Hendrik Brueckner) [804547 786997]
  - [net] af_iucv: performance improvements for new HS transport (Hendrik Brueckner) [804548 786996]
  - [s390x] af_iucv: remove IUCV-pathes completely (Hendrik Brueckner) [807158 786960]
  - [x86] iommu/amd: Fix wrong shift direction (Don Dutile) [809376 781531]
  - [x86] iommu/amd: Don't use MSI address range for DMA addresses (Don Dutile) [809374 781524]
  - [fs] NFSv4: Further reduce the footprint of the idmapper (Steve Dickson) [802852 730045]
  - [fs] NFSv4: Reduce the footprint of the idmapper (Steve Dickson) [802852 730045]
  - [scsi] fcoe: Make fcoe_transport_destroy a synchronous operation (Neil Horman) [809372 771251]
  - [net] ipv4: Constrain UFO fragment sizes to multiples of 8 bytes (Jiri Benc) [809104 797731]
  - [net] ipv4: Don't use ufo handling on later transformed packets (Jiri Benc) [809104 797731]
  - [net] udp: Add UFO to NETIF_F_GSO_SOFTWARE (Jiri Benc) [809104 797731]
  - [fs] nfs: Try using machine credentials for RENEW calls (Sachin Prabhu) [806205 795441]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.15.1.el6]
changelog:
  - [net] SUNRPC: We must not use list_for_each_entry_safe() in rpc_wake_up() (Steve Dickson) [811299 809928]
  - [char] ipmi: Increase KCS timeouts (Matthew Garrett) [806906 803378]
  - [kernel] sched: Fix ancient race in do_exit() (Frantisek Hrbata) [805457 784758]
  - [scsi] sd: Unmap discard alignment needs to be converted to bytes (Mike Snitzer) [810322 805519]
  - [scsi] sd: Fix VPD buffer allocations (Mike Snitzer) [810322 805519]
  - [x86] Ivy Bridge kernel rdrand support (Jay Fenlason) [800268 696442]
  - [scsi] fix system lock up from scsi error flood (Frantisek Hrbata) [809378 800555]
  - [sound] ALSA: pcm midlevel code - add time check for (Jaroslav Kysela) [801329 798984]
  - [pci] Add pcie_hp=nomsi to disable MSI/MSI-X for pciehp driver (hiro muneda) [807426 728852]
  - [sound] ALSA: enable OSS emulation layer for PCM and mixer (Jaroslav Kysela) [812960 657291]
  - [scsi] qla4xxx: Fixed BFS with sendtargets as boot index (Chad Dupuis) [803881 722297]
  - [fs] nfs: Additional readdir cookie loop information (Steve Dickson) [811135 770250]
  - [fs] NFS: Fix spurious readdir cookie loop messages (Steve Dickson) [811135 770250]
  - [x86] powernow-k8: Fix indexing issue (Frank Arnold) [809391 781566]
  - [x86] powernow-k8: Avoid Pstate MSR accesses on systems supporting CPB (Frank Arnold) [809391 781566]
  - [redhat] spec: Add python-perf-debuginfo subpackage (Josh Boyer) [806859 806859]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.18.1.el6]
changelog:
  - [netdrv] iwlwifi: add option to disable 5Ghz band (Stanislaw Gruszka) [816226 812259]
  - [netdrv] iwlwifi: cancel scan before nulify ctx->vif (Stanislaw Gruszka) [816225 801730]
  - [netdrv] iwlwifi: do not nulify ctx->vif on reset (Stanislaw Gruszka) [816225 801730]
  - [net] mac80211: workaround crash at ieee80211_mgd_probe_ap_send (Stanislaw Gruszka) [814657 808095]
  - [net] bonding: 802.3ad - fix agg_device_up (Veaceslav Falico) [817466 806081]
  - [scsi] st: fix memory leak with 1MB tape I/O (David Milburn) [816271 811703]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.19.1.el6]
changelog:
  - [pci] Fix unbootable HP DL385G6 on 2.6.32-220 by properly disabling pcie aspm (Dave Wysochanski) [819614 769626]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.20.1.el6]
changelog:
  - [vhost] net: fix possible NULL pointer dereference of vq->bufs (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: validate zerocopy vectors before building skb (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: set SKBTX_DEV_ZEROCOPY only when skb is built successfully (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: put zerocopy page when fail to get all requested user pages (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: fix zerocopy offset calculation when building skb (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] bonding: remove entries for master_ip and vlan_ip and query devices instead (Andy Gospodarek) [816197 810299]
  - [virt] KVM: lock slots_lock around device assignment (Alex Williamson) [814154 811653] {CVE-2012-2121}
  - [virt] kvm: unmap pages from the iommu when slots are removed (Alex Williamson) [814154 811653] {CVE-2012-2121}
  - [virt] xenfv: fix hangs when kdumping (Andrew Jones) [812953 811815]
  - [s390x] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810125 808487]
  - [drm] i915: suspend fbdev device around suspend/hibernate (Dave Airlie) [818503 746169]
  - [fs] tmpfs: fix off-by-one in max_blocks checks (Eric Sandeen) [809399 783497]
  - [net] bonding: Allow Bonding driver to disable/enable LRO on slaves (Neil Horman) [818504 772317]
  - [virt] xen-blkfront: conditionally drop name and minor adjustments for emulated scsi devs (Laszlo Ersek) [818505 729586]
  - [virt] xen-blk: plug device number leak on error path in xlblk_init (Laszlo Ersek) [818505 729586]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.21.1.el6]
changelog:
  - [security] fix compile error in commoncap.c (Eric Paris) [806725 806726] {CVE-2012-2123}
  - [security] fcaps: clear the same personality flags as suid when fcaps are used (Eric Paris) [806725 806726] {CVE-2012-2123}
  - [net] rds: fix rds-ping inducing kernel panic (Jay Fenlason) [822757 803936] {CVE-2012-2372}
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816292 814504] {CVE-2012-2136}
  - [virt] kvm: Fix buffer overflow in kvm_set_irq() (Avi Kivity) [816154 816155] {CVE-2012-2137}
  - [drm] integer overflow in drm_mode_dirtyfb_ioctl() (Dave Airlie) [773249 773250] {CVE-2012-0044}
  - [net] netfilter: Fix ip_route_me_harder triggering ip_rt_bug (Jiri Benc) [824429 812108]
  - [net] netfilter/tproxy: do not assign timewait sockets to skb->sk (Jiri Benc) [824429 812108]
  - [virt] xenpv: avoid paravirt __pmd in read_pmd_atomic (Andrew Jones) [823903 822697]
  - [infiniband] mlx4: fix RoCE oops (Doug Ledford) [799946 749059]
  - [mm] read_pmd_atomic: fix pmd_populate SMP race condition (Andrea Arcangeli) [822824 820762] {CVE-2012-2373}
  - [infiniband] mlx4: check return code and bail on error (Doug Ledford) [799946 749059]
  - [infiniband] mlx4: use locking when walking netdev list (Doug Ledford) [799946 749059]
  - [mm] thp: fix pmd_bad() triggering in code paths holding mmap_sem read mode (Andrea Arcangeli) [803808 800328] {CVE-2012-1179}


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-8
changelog:
  - Cgconfig: parse other valid controllers (RHBZ#1112388)
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144652)
  - Services: permit colons in service name (RHBZ#1121263)
  - Shadow: add lens (RHBZ#1160261)
  - Syslog: parse TCP loghosts (RHBZ#1129508)


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-10
changelog:
  - Escape paths returned from aug_match (RHBZ#1186318)
  - Krb5: parse braces in values (RHBZ#1203597)
  - Properties: handle empty line in multi-line value (RHBZ#1209885)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.84
changelog:
  - Add 0228-RHBZ-1072081-delayed-reintegration.patch
    * Add "delay_watch_checks" and "delay_wait_checks" options to delay
      reintegration of flakey paths.
  - Add 0229-UPBZ-1168987-queue_if_no_path_issue.patch
    * Make sure no_path_retry is properly set even if there are no active paths.
  - Add 0230-RHBZ-880121-fix-double-free.patch
    * multipath was freeing the multipath alias twice if it failed to create the
      multipath device.
  - Add 0231-RHBZ-978947-dell-36xxi.patch
    * new builtin configurations.
  - Add 0232-RHBZ-997028-autodetect-clariion-alua.patch
    * configure multipath to automatically detect alua settings on clariion
      devices.
  - Resolves: bz #880121, #978947, #997028, #1072081, #1168987


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.85
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * Fix checker name printing issue
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.86
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * Change show config output
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.87
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * print "no" instead of "off"
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.88
changelog:
  - Add 0233-RHBZ-1215903-remove-pg-timeout.patch
  - Add 0234-RHBZ-818404-update-doc.patch
  - Add 0235-RHBZ-1033789-rdac-update.patch
    * Don't use trasntioning controllers
  - Add 0236-RH-per-path-prio.patch
    * Paths now store their own prio structure, instead of pointing
      to a global one
  - Add 0237-RHBZ-1081395-save-alua-info.patch
    * Save alua information in prioritizer to speed access
  - Add 0238-RHBZ-1153704-async-timeout.patch
    * Make directio use the checker_timeout in async mode
  - Add 0239-RHBZ-1201444-update-eternus-config.patch
  - Add 0241-RHBZ-1214127-fix-help.patch
  - Add 0242-RHBZ-1238507-kpartx-fix.patch
    * Don't overwrite already in use partitions
  - Add 0243-RHBZ-1248177-reset-alias.patch
    * Use existing alias on failed rename
  - Add 0244-RHBZ-1254692-kpartx-sync.patch
    * kpartx runs in sync mode by default
  - Add 0245-RHBZ-1273829-autodetect-readonly-devs.patch
    * auto-reload devices as RO when a path turns RO
  - Add 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * and raw output and more wildcards
  - Modify device-mapper Requires
    * Require version with deferred remove support
  - Resolves: bz #818404, #1033789, #1081395, #1145442, #1153704, #1187278
  - Resolves: bz #1201444, #1208521, #1214127, #1215903, #1238507, #1248177
  - Resolves: bz #1254692, #1273829


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.89
changelog:
  - Add 0247-RHBZ-1283181-fix-remove-crash.patch
    * Check is sysdev is NULL before dereferencing
  - Resolves: bz #1283181


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.90
changelog:
  - Add 0248-RHBZ-1289353-alua-pref-arg.patch
    * add exclusive_pref_bit argument to the alua prioritizer
  - Resolves: bz #1289353


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.92
changelog:
  - Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * fix PAD and PRINT macros
  - Resolves: bz #1145442


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.93
changelog:
  - Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
    * make multipathd use uint64_t for tracking the interactive command
      fingerprint.
  - Resolves: bz #1316165


author: Ales Ledvinka <aledvink@redhat.com> - 1.8.11-23
changelog:
  - (#1194420) Fix DDR4 SDR crash.
  - (#1170266) Wrong version reported.
  - (#1162175) Extra dependency.
  - (#1126333) Very slow response from SDR owner type SW ID
  - (#903019)  SDR lists x4600m2 fan units as unspecified


author: Nalin Dahyabhai <nalin@redhat.com> - 1.6-1
changelog:
  - update to 1.6
  - add suggested summary, buildrequires, and modify install call as suggested
    by package review (#226021)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Frank Danapfel <fdanapfe@redhat.com> - 0.93
changelog:
  - replaced vhostmd with vm-dump-metrics for KVM guest installs
  - re-added function to set user/process limits
  - changed check_ntp to only check if ntpd is running


author: Nils Philippsen <nils@redhat.com> - 0.93-1
changelog:
  - remove obsolete tuned patch
  - fix changelog dates
  - require specific tuned version, prep for upcoming RHEL versions
  - clean up script header
  - don't mess around with SELinux settings, just report
  - use bzipped tarball


author: Nils Philippsen <nils@redhat.com> - 0.95-1
changelog:
  - ignore whitespace and empty lines when checking /etc/hosts
  - use mktemp to create temporary host file
  - add release numbers to changelog entries


author: Jan Grulich <jgrulich@redhat.com> - 0.98-1
changelog:
  - add Man-Page
  - correctly detect VMware virtual guest
  - do not write to /etc/security/limits.conf directly
  - correctly edit /etc/hosts


author: Jan Kaluza <jkaluza@redhat.com> 5.04-14
changelog:
  - fix #795425 - detect vdi images
  - fix #795761 - detect qed images
  - fix #801711 - uncompress bzip2 archives using -z parameter
  - fix #797784 - read patterns from ~/.magic.mgc


author: Jan Kaluza <jkaluza@redhat.com> 5.04-16
changelog:
  - fix #873997 - improve Minix detection pattern to fix false positives
  - fix #884396 - improve PBM pattern to fix misdetection with x86 boot sector
  - fix #980941 - improve Bio-Rad pattern to fix false positives
  - fix #849621 - tweak strength of XML, Latex and Python patterns to execute
    them in the proper order
  - fix #1067771 - detect qcow version 3 images
  - fix #1064463 - treat RRDTool files as binary files


author: Jan Kaluza <jkaluza@redhat.com> 5.04-17
changelog:
  - fix CVE-2014-3479 (cdf_check_stream_offset boundary check)
  - fix CVE-2014-3480 (cdf_count_chain insufficient boundary check)
  - fix CVE-2014-0237 (cdf_unpack_summary_info() excessive looping DoS)
  - fix CVE-2014-0238 (CDF property info parsing nelements infinite loop)
  - fix CVE-2014-2270 (out-of-bounds access in search rules with offsets)
  - fix CVE-2014-1943 (unrestricted recursion in handling of indirect type rules)
  - fix CVE-2012-1571 (out of bounds read in CDF parser)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Peter Hatina <phatina@redhat.com> 1.8.8-6
changelog:
  - security patches
  - Resolves: CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-3557


author: Jaroslaw Polok <jaroslaw.polok@cern.ch> 1-14
changelog:
  - moved passwd wrapper to separate package. (to avoid installation
    in cloud/docker images since it pulls in whole perl
    dependency chain)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-19
changelog:
  - cman: fix multicast address in cman.5 man page
    Resolves: rhbz#735906
  - cman: default to 2 different mcast addresses in RRP mode and set
    rrp_problem_count_threshold
    cman now requires corosync > 1.4.1-3 for RRP operations
    Resolves: rhbz#735912
  - cman: improve cman/qdisk interactions
    * cman: do better logging/error reports/checking of the quorum API usage
    * qdiskd: allow qdiskd to update device name in cman
    * qdiskd: perform better error checking at startup
    Resolves: rhbz#735917


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.10-43
changelog:
  - 630019 set correct (f)pie build flags
  - 615104 fix double echo in initscript
  - 589099 Wrong file permissions for atd configuration
  - Resolves: rhbz#630019, rhbz#615104, rhbz#589099


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885311


author: Doug Ledford <dledford@redhat.com> - 1.4-2.el6
changelog:
  - Update to tarball from URL instead of from OFED
  - Minor tweaks for pkgwrangler import
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Don't include mtcr.h as we don't really expect anything to need Mellanox
    card register definitions except this program, and we already have the
    file.
  - Change to ExcludeArch instead of ExclusiveArch so we build in all the right
    places.
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-6
changelog:
  - Turns out that the previous tarball was full of cruft that upstream should
    have never let make its way into the tarball.  I had to clean the tarball
    out in order to get the package to build properly.
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to newer tarball that resolves licensing issues with the last
    tarball
  - Related: bz818183


author: Marek Grac <mgrac@redhat.com> - 1.1.12-12
changelog:
  - Displays Logical Volumes without filesystem under 'Unitialized'
  - Resolves: rhbz#791153
  - s-c-lvm traceback on parsing "dmsetup ls" output 
  - Resolves: rhbz#815921


author: Marek Grac <mgrac@redhat.com> - 1.1.12-13
changelog:
  - s-c-lvm crash after startup on machine with many LV
  - Resolves: rhbz#840070
  - s-c-lvm crash when encounter RAID 1 created in LVM
  - Resolves: rhbz#852864
  - s-c-lvm crash on mirrored LV with mirrorlog
  - Resolves: rhbz#852864


author: Marek Grac <mgrac@redhat.com> - 1.1.12-14
changelog:
  - s-c-lv crash after startup on machine with many LV
    Resolves: rhbz#840070
  - s-c-lvm crash when encounter RAID1 created in LVM
    Resolves: rhbz#852864


author: Marek Grac <mgrac@redhat.com> - 1.1.12-17
changelog:
  - s-c-lvm crases with thin volumes
    Resolves: rhbz#878253
  - s-c-lvm GUI can not be opened from some OS
    Resolves: rhbz#953071
  - s-c-lvm does not allow online extend of ext3 fs
    Resolves: rhbz#1029755


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: rhbz#1154143


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17
changelog:
  - updated aarch64 sources
  - epoch synced to 1
  - all ppcs excluded from classes dump(1156151)
  - removed duplicated provides
  - Resolves: rhbz#1146622


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.499.el6
changelog:
  - kvm-rename-qemu_aio_context-to-match-upstream.patch [bz#876993]
  - kvm-block-stop-relying-on-io_flush-in-bdrv_drain_all.patch [bz#876993]
  - kvm-block-add-bdrv_drain.patch [bz#876993]
  - kvm-block-avoid-very-long-pauses-at-the-end-of-mirroring.patch [bz#876993]
  - Resolves: bz#876993
    (qemu-kvm: vm's become non-responsive during migrate disk load from 2 domains to a 3ed)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085009


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115580
  - Resolves: rhbz#1115867


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.0-7.1.13.4
changelog:
  - Add fix for ArrayIndexOutOfBoundsException when certain glyphs are processed
  - Resolves: rhbz#1132523


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-1
changelog:
  - build a split-out krb5-appl package by pruning out all of the non-appl
    parts and resetting the versioning to match the upstream version for the
    newly-split package


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-3
changelog:
  - when checking for pty-handling functions, do so with the benefit of the
    libutil library we think might include them (#595411)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713341)


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Upgrade to new upstream version
    This disables openib-ibcm, which is broken in 1.5.3
    This brings in esmtp and valgrind memchecker support from Fedora
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-1
changelog:
  - Conditionalize the psm and psm-devel subpackages, to keep rpmbuild
    from trying to build them on ppc
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-2
changelog:
  - Fix the rpm macros for the -psm subpackage, so we can build
    a -psm varient of mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-1
changelog:
  - Clean up provides and requires to close
    Resolves: rhbz768457
  - Remove and obsolete the -psm variants that have been folded into the main
    packages.
    Resolves: rhbz758618
  - New upstream version
    Resolves: rhbz768109
    Related: rhbz739138


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-2
changelog:
  - Fix the build process by getting rid of the -build patch
    and autogen to fix
    Resolves: rhbz749115


author: Olivier Fourdan <ofourdan@redhat.com> 1.17.4-3
changelog:
  - Add missing hw/xfree86/Xorg.sh.in to xorg-x11-server-source package.
    This is needed to build packages depending on xorg-x11-server-source
    (e.g. tigervnc), otherwise the build will fail.


author: Ben Skeggs <bskeggs@redhat.com> 0.0.16-9.20110107gitb795ca6
changelog:
  - rebase to today's git snapshot
  - nouveau-exa-no-pa_fa.patch: dropped, upstream
  - nouveau-zfill-fallback: dropped, upstream
  - nouveau-server-regen: dropped, upstream
  - Resolves: rhbz#633226


author: Steven Pritchard <steve@kspei.com> 0.16-1
changelog:
  - Update to 0.16.
  - Canonicalize Source0 URL.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Drop our copies of the license files.
  - BR ExtUtils::MakeMaker.
  - Drop LD_RUN_PATH filter.


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-20
changelog:
  - register and deregister: if there is an error registering or deregistering
    one or more collection, skip it but return non-zero return code
  - fix the problem with metapackage dependencies when BuildArch is specified


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-21
changelog:
  - fix an obscure segfault when listing collections on i386
  - fix registration to work with slash-ended paths
  - add the %scl_dependency_generators macro
  - drop recursive ownership of /usr/lib within SCL root


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-22
changelog:
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add capability to make collection nfs mountable using macro nfsmountable.
  - removed the dependency generators and all related changes
    (maintainers' demands)


author: Lubos Kardos <lkardos@redhat.com - 20120927-23
changelog:
  - Modified paths of state and conf files
  - Add owning and creating of state and conf files if nfsmountable is defined
  - Add printing file names in error messages


author: Lubos Kardos <lkardos@redhat.com> - 20120927-25
changelog:
  - Creating filelist in build subdirectory instead of build directory.
  - Removing filelist before build.


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.7.el6]
changelog:
  - [virt] x86: better fix for race between nmi injection and enabling nmi window (Aristeu Rozanski)
  - [virt] x86: revert "fix race between nmi injection and enabling nmi window" (Aristeu Rozanski)


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.8.el6]
changelog:
  - [scsi] mark bfa fc adapters tech preview (Rob Evers) [698384]
  - [virt] Revert pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Aristeu Rozanski) [691310]
  - [i686] nmi watchdog: Enable panic on hardlockup (Don Zickus) [677532]
  - [netdrv] Adding Chelsio Firmware for cxgb4 (Neil Horman) [691929]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.9.el6]
changelog:
  - [net] limit socket backlog add operation to prevent possible DoS (Jiri Pirko) [694396] {CVE-2010-4251}
  - [scsi] mpt2sas: prevent heap overflows and unchecked (Tomas Henzl) [694023] {CVE-2011-1494 CVE-2011-1495}
  - [fs] epoll: prevent creating circular epoll structures (Don Howard) [681683] {CVE-2011-1082}
  - [mm] Prevent page_fault at do_mm_track_pte+0xc when Stratus dirty page tracking is active (Larry Woodman) [693786]
  - [fs] GFS2 causes kernel panic in spectator mode (Steven Whitehouse) [696535]
  - [net] bonding: interface doesn't issue IGMP report on slave interface during failover (Flavio Leitner) [640690]
  - [scsi] isci: validate oem parameters early, and fallback (David Milburn) [698016]
  - [scsi] isci: fix oem parameter header definition (David Milburn) [698016]


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13
changelog:
  - updated to security u45
  - minor sync with 6.7
   - generate_source_tarball.sh
   - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
   - reworked (synced) zero patches (removed 103,11 added 204, 400-403)
   - added upstreamed patch 501 and 505
   - included removeSunEcProvider-RH1154143.patch
  - returned java (jre only) provides
  - repacked policies (source20)
  - removed duplicated NVR provides
  - added automated test for priority (length7)
  - Resolves: RHBZ#1209074


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235160


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.3-2.2.1.el6
changelog:
  - Used newly prepared tarball with security fixes
  - Bump to icedtea7-forest-2.2.1
  - _mandir/man1/jcmd-name.1 added to alternatives
  - Updated rhino.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Modified partially upstreamed patch302 - systemtap.patch
  - Temporarly disabled patch102 - java-1.7.0-openjdk-size_t.patch
  - Removed already upstreamed patches 104,108,109,301,110:
    - java-1.7.0-openjdk-arm-ftbfs.patch
    - java-1.7.0-openjdk-system-zlib.patch
    - java-1.7.0-openjdk-remove-mimpure-opt.patch
    - systemtap-alloc-size-workaround.patch
    - java-1.7.0-fix-gio-detection.patch
  - Access gnome bridge jar forced to be 644
  - Added patch303 - java-1.7.0-openjdk-jstack.patch which resolved RH804632 for openjdk6
  - Resolves: rhbz#828759


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-37.el6
changelog:
  - group-add-member command reported wrong error on duplicates (#970541)
  - ipa-client installation succeeding in ipa server instance (#1011044)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-38.el6
changelog:
  - ipa-server-install intermittently crashed with "Unable to find
    preop.pin" (#905064)
  - Disabled sudo rules were still active in the sudoers tree (#1022199)
  - Replica installation fails if forward zone is not present (#1034478)
  - Administrative password change did not respect user password
    policy (#1029921)
  - Re-initializing a winsync connection exits with "Can't contact
    LDAP server" (#1016042)
  - Server checked for unknown attributes before "ipa" tool version
    check (#1015481)
  - CA subsystem certificate renewal was broken on CA clones (#1040009)
  - Lockout plugin worked inconsistently compared to KDC lockout
    mechanism. Also, default user policy may not have been applied if
    krbPwdPolicyReference was missing (#1088772)
  - ipa-client-automount was not backwards compatible (#1082590)
  - Increase service timeout from 120s to 300s as some services are
    known to start for more than 120s (#1060639)
  - Proxy calls to /ca/ee/ca/profileSubmit to PKI to enable installation
    of replicas with Dogtag 10 PKI (#1083878)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-1
changelog:
  - update to 2.8.15
  - update cracklib-words to the current version (2008-05-07)
  - fixup URLs for various dictionary sources that we use
  - fix freeing-an-uninitialized-pointer in the python module (SF#2907102)
  - add a disttag


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-25
changelog:
  - gfs_controld: don't ignore dlmc_fs_register error
    Resolves: rhbz#753300
  - gfs2_edit savemeta: crosswrite four patches from upstream (4 patches)
    Resolves: rhbz#749864
  - gfs2_utils: gfs2_grow fails to grow a filesystem with less than 3 RGs
    Resolves: rhbz#742595
  - gfs2_utils: Improve error messages
    Resolves: rhbz#742293


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-26
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - config: make altname validation position indipendent
    Resolves: rhbz#740552
  - config: drastically improve cman RRP configuration handling
    Resolves: rhbz#733298
  - cman: Improve quorum timer handling how quorum timers work
    Resolves: rhbz#759603
  - qdiskd: Make multipath issues go away
    Resolves: rhbz#678372


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-27
changelog:
  - fenced: fix handling of startup partition merge
    dlm_controld: fix handling of startup partition merge
    Resolves: rhbz#750314


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-30
changelog:
  - config: update relax ng schema to include totem miss_count_const
    Resolves: rhbz#804938
  - cman init: fix start sequence error handling
    Resolves: rhbz#806002


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-32
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - cman notifyd: deliver cluster status on startup
    Resolves: rhbz#819787


author: Anton Arapov <anton@redhat.com> - 2.0.7-7
changelog:
  - numastat.c: fix bug preventing correct static huge page quantities
  - numastat.c: update version number
  - numastat.8: remove redundant "interleave hit" description
  - numastat.8: remove extraneous leading spaces and blank lines
  - numastat.8: enhance explanation of correct placement for "-s" option
  - Resolves: rhbz#987507


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3.0-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix indentation of Version and Release.


author: Ray Strode <rstrode@redhat.com> 2.28.2-7
changelog:
  - Hide randr events from "Detect Displays" button from g-s-d's
    autoconfiguration logic
    Resolves: #582564


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26.el6_2.3
changelog:
  - initialize NSS with no database if the selected database is broken (#800903)
  - use NSS_InitContext() to avoid a collision with OpenLDAP (#800904)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Xavier Bachelot <xavier@bachelot.org> - 0.2.903-11
changelog:
  - Update to latest snapshot (svn 751) :
    - Add support for VX800 integrated TMDS encoder.
    - Make sure Chrome9 chipsets use software rasterizer for 3D.
    - Various small fixes.
  - Add patch for VX855 support.
  - Add patch to fix cursor on secondary display.
  - Add patch to disable TMDS by default.


author: Xavier Bachelot <xavier@bachelot.org> - 0.2.903-12
changelog:
  - Update to latest snapshot (svn 758) :
    - Basic VX855 support.
    - Fix pci space corruption on P4M900 (RHBZ#506622).
    - Fix null pointer dereference in viaExaCheckComposite (RHBZ#449034).
  - Add patch to allow 1200x900 panel (X0-1.5).
  - Add patch to remove loader symbol lists, needed for xserver 1.7 (RHBZ#510206).
  - Add experimental patch for better VT1625 support.
  - Drop upstreamed patches.


author: Petr Machata <pmachata@redhat.com> - 2011k-0.1.20110921
changelog:
  - Upstream 2011i:
    - Add Africa/Juba (South Sudan) zone
    - Samoa skips over the date line on 2011-12-30
    - Use KALT as abbreviation for Europe/Kalinigrad
    - Canonical version of the Newfoundland patch
    - Change America/Resolute use of EST to 2006-2007 only
    - Assume Metlakatla abandoned use of daylight saving in 1983
    - Sync iso3166.tab and zone.tab with above
  - Upstream 2011j:
    - Fix the Samoa date line skip
    - Changes in past timestamp typos several Africa zones
  - Proposed upstream 2011k:
    - Belarus and Ukraine adopt permanent DST in 2011
    - Palestine suspends DST during Ramadan in 2011
    - Gaza and West Bank split in 2011.  West Bank is tracked in the
      timezone Asia/Hebron.  zone.tab update accordingly.
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22
  - Resolves: #740000


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.600.0-25
changelog:
  - When --cpu-host is specified use cpu-mode host-model (rhbz#1167072)
  - Do not fail when using a non sparse logical volume (rhbz#1167998)
  - Fix bridge interface creation (rhbz#1172407)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-1
changelog:
  - Resolves: #555321 - vsftpd segfaults with passive mode and SSL
  - updated to latest upstream version - fixes the bug #555321


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Marek Polacek <polacek@redhat.com> 4.4.7-5
changelog:
  - fix std::uncaught_exception (#1085442, PR c++/59224)
  - don't nuke gcov files if any is missing (#1008798)
  - don't ICE with missing template-header (#858351, PR c++/54653)
  - don't ICE when creating an epilog for reduction (#875472)
  - declare type_info (#1061435, PR libstdc++/56468)
  - check elements for error_mark_node (#1027003, PR c++/43028)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix incorrect max cpu frequency
    Resolves: #971053
  - Fix wrong UserModeTime and KernelModeTime
    Resolves: #974071
  - Fix restart of scfbd service in provider-register script
    Resolves: #1179878


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-1
changelog:
  - Update to latest upstream release with initial support for thinly-provisioned
    devices and scalable snapshots, improved support for RAID personalities,
    initial support for LVM metadata caching daemon and various other fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-2
changelog:
  - Fix a regression in handling of lvchange/lvcreate --major/--minor (2.02.95).
  - Fix name conflicts that prevent down-converting RAID1 when specifying a device.
  - Improve thin_check option passing and use configured path.
  - Add --with-thin-check configure option for path to thin_check.
  - Restart dmeventd on device-mapper-event package upgrade.
  - Do not run a new dmeventd instance on restart if there's no existing one.
  - Detect lvm binary path in lvmetad udev rules.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.2
changelog:
  - Allow cgred to use notify
  Resolves:#917966
  - Allow mount to transition to gluster
  Resolves:#917972


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-9
changelog:
  - regenerated patches so patch fuzz 3 is not needed (bz#513207)
  - mm_cfg.pyc and .pyo are now %verify(not md5 size mtime) (bz#512794)


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-17
changelog:
  - fix #703389 - fixed file permissions in /usr/lib/mailman
  - fix #636825 - fix #!/usr/bin/env python shebang in migrate-fhs
  - fix #704699 - fixed directories permissions in /usr/lib/mailman
  - fix #684622 - do not create and install /etc/mailman/mm_cfg.pyc and pyo files


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-14
changelog:
  - handle different usb scheme needed to support ReinerSCT Cyberjack
    readers. Patch was supplied by customer.


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-15
changelog:
  - unlock mutex on failure
  - clean up socket files after start at init time (allows restart after
    crash or hard fail of pcscd)


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-53.P1.3
changelog:
  - Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

  <* Wed Feb 28 2018 Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-53.P1.2
  - Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow


author: Lukáš Nykrýn <lnykryn@redhat.com> - 5.0.0-10
changelog:
  - put correct port in my.cnf (#756803)
  - shows correct job and file retention periods (#802158)
  - build with $RPM_OPT_FLAGS, show compiler commands in build log (#729008)
  - include /var/log/bacula.log and /var/log/bacula/ in logwatch (#728693)
  - ensure that /var/spool/bacula/log has correct selinux context (#728697)


author: Uri Lublin <uril@redhat.com> - 0.8.1-2
changelog:
  - Support for spice client semi-seemless migration.
  - Update to upstream spice-protocol 0.8.2 release without rebasing
  - Added "BuildRequires: autoconf automake" for using autoreconf
    Resolves: rhbz#738262


author: Christophe Fergeau <cfergeau@redhat.com> - 0.10.1-2
changelog:
  - Add controller message for smartcard support
    Related: rhbz#787447
  - Add controller messages for WAN support
    Resolves: rhbz#787447
  - Add controller messages for USB support
    Resolves: rhbz#807295


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Ted Ross <tross@redhat.com> - 0.14-3
changelog:
  - Fixed a dependency issue between qpid-jca-xarecovery and qpid-jca
  - Trimmed the size of the mrg.patch file to eliminate unused parts of the qpid tree


author: David Knox <dknox@redhat.com> 0:6.0.24-51
changelog:
  - Related: rhbz#955977 CVE-2013-1976 Changed location of 
  - TOMCAT_LOG to /var/log where only root can write to it. Touching
  - TOMCAT_LOG is no longer necessary


author: David Knox <dknox@redhat.com> 0:6.0.24-54
changelog:
  - Resolves: rhbz 845786 webapps-docs contained empty files. 
  - Build will fail of architectures ppc s390x ppc64. Use
  - target rhel-6.5-noarch-candidate
  - Resolves: rhbz 915447 can't start with group other than tomcat
  - changes in init script
  - Resolves: rhbz 950647 Error in checkpidfile of init script
  - Resolves: rhbz 977685 Full implementation of juli and juli
  - adapters. Jars placed in new extras directory
  - Resolves: 960225 Status script does not return proper PID


author: David Knox <dknox@redhat.com> 0:6.0.24-58
changelog:
  - Resolves: CVE-2012-3439
  - Resolves: CVE-2012-4534
  - Resolves: CVE-2012-3546
  - Increment build number to exceed 6_4 build number. Demanded
  - by rpmdiff


author: David Knox <dknox@redhat.com> 0:6.0.24-60
changelog:
  - Related: rhbz 915447 can't start with group other than tomcat
  - changes in init script. Added TOMCAT_GROUP to sysconfig and
  - tomcat6.conf. Also changed default to the group that user
  - tomcat belongs.


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add vino-2.8.1-sanity-check-fb-update.patch
    Fix for CVE-2011-0904 and CVE-2011-0904
    - Bugs #694456, #694455


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add reachability.patch
    Remove UI about whether the is only reachable locally or not.
    Fix for CVE-2011-1164
    - Bug #553477


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.5.1.el6]
changelog:
  - [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772870 772871] {CVE-2012-0207}
  - [fs] xfs: validate acl count (Eric Sandeen) [773282 773283] {CVE-2012-0038}
  - [fs] Fix sendfile write-side file position (Steven Whitehouse) [771870 770023]
  - [virt] kvm: x86: fix missing checks in syscall emulation (Marcelo Tosatti) [773390 773391] {CVE-2012-0045}
  - [virt] kvm: x86: extend "struct x86_emulate_ops" with "get_cpuid" (Marcelo Tosatti) [773390 773391] {CVE-2012-0045}
  - [fs] nfs: when attempting to open a directory, fall back on normal lookup (Jeff Layton) [771981 755380]
  - [kernel] crypto: ghash - Avoid null pointer dereference if no key is set (Jiri Benc) [749481 749482] {CVE-2011-4081}
  - [fs] jbd2: validate sb->s_first in journal_get_superblock() (Eryu Guan) [753344 693981] {CVE-2011-4132}
  - [net] fix unsafe pointer access in sendmmsg (Jiri Benc) [761668 760798] {CVE-2011-4594}
  - [scsi] increase qla2xxx firmware ready time-out (Mark Goodwin) [781971 731917]
  - [perf] powerpc: Handle events that raise an exception without overflowing (Steve Best) [767917 755737] {CVE-2011-4611}
  - [sched] x86: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [781974 765720]
  - [virt] x86: Prevent starting PIT timers in the absence of irqchip support (Marcelo Tosatti) [769634 769550] {CVE-2011-4622}
  - [virt] vmxnet3: revert hw features change (Neil Horman) [761536 759613]
  - [netdrv] qlge: fix size of external list for TX address descriptors (Steve Best) [783226 772237]
  - [netdrv] e1000e: Avoid wrong check on TX hang (Dean Nelson) [768916 751087]
  - [virt] KVM: Device assignment permission checks (Alex Williamson) [756092 756093] {CVE-2011-4347}
  - [virt] KVM: Remove ability to assign a device without iommu support (Alex Williamson) [756092 756093] {CVE-2011-4347}
  - [virt] kvm: device-assignment: revert Disable the option to skip iommu setup (Alex Williamson) [756092 756093] {CVE-2011-4347}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.6.1.el6]
changelog:
  - [scsi] qla2xxx: Module parameter to control use of async or sync port login (Chad Dupuis) [788003 769007]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.7.1.el6]
changelog:
  - [netdrv] tg3: Fix single-vector MSI-X code (John Feeney) [787162 703555]
  - [mm] export remove_from_page_cache() to modules (Jerome Marchand) [772687 751419]
  - [block] cfq-iosched: fix cfq_cic_link() race confition (Vivek Goyal) [786022 765673]
  - [fs] cifs: lower default wsize when unix extensions are not used (Jeff Layton) [789058 773705]
  - [net] svcrpc: fix double-free on shutdown of nfsd after changing pool mode (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: avoid memory-corruption on pool shutdown (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: destroy server sockets all at once (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: simplify svc_close_all (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: fix list-corrupting race on nfsd shutdown (J. Bruce Fields) [787580 753030]
  - [fs] xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink() (Carlos Maiolino) [749161 694702] {CVE-2011-4077}
  - [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749161 694702] {CVE-2011-4077}
  - [x86] hpet: Disable per-cpu hpet timer if ARAT is supported (Prarit Bhargava) [772884 750201]
  - [x86] Improve TSC calibration using a delayed workqueue (Prarit Bhargava) [772884 750201]
  - [kernel] clocksource: Add clocksource_register_hz/khz interface (Prarit Bhargava) [772884 750201]
  - [kernel] clocksource: Provide a generic mult/shift factor calculation (Prarit Bhargava) [772884 750201]
  - [block] cfq-iosched: fix a kbuild regression (Vivek Goyal) [769208 705698]
  - [block] cfq-iosched: rethink seeky detection for SSDs (Vivek Goyal) [769208 705698]
  - [block] cfq-iosched: rework seeky detection (Vivek Goyal) [769208 705698]
  - [block] cfq-iosched: don't regard requests with long distance as close (Vivek Goyal) [769208 705698]


author: Doug Ledford <dledford@redhat.com> - 1.2-11
changelog:
  - Upstream has updated the tarball without updating the version, so we
    grabbed the one from the OFED-1.3.2-20080728.0355 tarball
  - Resolves: bz451481


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15.1
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1081611)


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6_6.4
changelog:
  - kvm-pcnet-fix-Negative-array-index-read.patch [bz#1225886]
  - kvm-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch [bz#1225886]
  - Resolves: bz#1225886
    (EMBARGOED CVE-2015-3209 qemu-kvm: qemu: pcnet: multi-tmd buffer overflow in the tx path [rhel-6.6.z])


author: Alex Wood <awood@redhat.com> 1.10-1
changelog:
  - 771615: Remove a dependency on the Linux 'file' command from the linting
    script. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 1.12-1
changelog:
  - 773030: add subscription-manager-migration-data to RHEL 6.3
    (mstead@redhat.com)
  - Adding a quick and dirty script to help with mapping file updates.
    (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.12.1.2-1
changelog:
  - Altering version to reflect new branching strategy. (awood@redhat.com)
  - Add s390x and cf channels. (awood@redhat.com)
  - Moving RHEL 6 migration data to a separate branch. (awood@redhat.com)
  - Updating version number. (mstead@redhat.com)
  - Adding mapping file and certs for RHEL-6. (awood@redhat.com)
  - Adding a script to generate mapping files from product data.
    (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 1.12.1.3-1
changelog:
  - 799152: Adding missing product certificates and mappings. (awood@redhat.com)
  - Updating create-mapping.py (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 1.12.1.4-1
changelog:
  - 815433: Add sam-rhel-x86_64-server-6 channel mapping. (awood@redhat.com)
  - Dealt with certificate change for HPN. (awood@redhat.com)
  - 811633: Adding mapping for product 167 "Red Hat CloudForms"
    (awood@redhat.com)


author: Harald Hoyer <harald@redhat.com> 004-268
changelog:
  - fixed dracut manpage
  Resolves: rhbz#703164
  - fixed assembling of mdraid degraded arrays
  Resolves: rhbz#761584
  - fixed ifup to set broadcast address
  Resolves: rhbz#752584
  - fixed iscsiroot for multiple iscsi disks
  Resolves: rhbz#752066


author: Harald Hoyer <harald@redhat.com> 004-271
changelog:
  - no vconfig requirement anymore
  Resolves: rhbz#714039
  - new option --omit-drivers
  Resolves: rhbz#722879
  - suppress udevadm settle output
  Resolves: rhbz#747840
  - extend lsinitrd to cope with xz images
  Resolves: rhbz#752005
  - respect primary console setting
  Resolves: rhbz#752073


author: Harald Hoyer <harald@redhat.com> 004-273
changelog:
  - fixed option --omit-drivers
  Resolves: rhbz#722879
  - increase wait time for network interfaces to get UP to 10s
  Resolves: rhbz#794863


author: Doug Ledford <dledford@redhat.com> - 1.1-10
changelog:
  - Update to the OFED 1.3 version of libipathverbs-1.1.tar.gz (there is a 300k
    size difference between the libipathverbs-1.1.tar.gz in the OFED release
    and the file by the same name at openfabrics.org/downloads/...which is
    just insane, they should have different release numbers, but they don't,
    so for anyone to duplicate what I have here, you will need to get the
    libipathverbs-1.1.tar.gz file out of the libipathverbs-1.1-1.ofed1.3 src
    rpm out of the OFED-1.3.tar.gz download at the openfabrics site)
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.2-1.el6
changelog:
  - Update to latest upstream source
  - Change BuildRequires from valgrind to valgrind-devel for rhel6
  - Drop ppc64 build as it isn't officially supported upstream
  - Related: bz543948


author: Milind Changire <mchangir@redhat.com> - 3.7.5-11
changelog:
  - fixes bugs bz#1287532 bz#1288988 bz#1275751 bz#1289071 bz#1284834 
    bz#1287980 bz#1284387 bz#1287997


author: Milind Changire <mchangir@redhat.com> - 3.7.5-12
changelog:
  - fixes bugs bz#1285226 bz#1283940 bz#1291052 bz#1275751 bz#1288003 
    bz#1283035 bz#1285238 bz#1290401 bz#1262680 bz#1289893 bz#1289423 bz#1276227


author: Milind Changire <mchangir@redhat.com> - 3.7.5-13
changelog:
  - fixes bugs bz#1293240 bz#1275751 bz#1276273 bz#1285783 bz#1286218 
    bz#1289228 bz#1282729 bz#1291152 bz#1219794 bz#1293228 bz#1293237 bz#1292762 
    bz#1274334 bz#1291195 bz#1292751 bz#1285797 bz#1291560 bz#1291566 bz#1293286 
    bz#1286028


author: Milind Changire <mchangir@redhat.com> - 3.7.5-14
changelog:
  - fixes bugs bz#1294487 bz#1293903 bz#1294594 bz#1291386 bz#1294073 
    bz#1281946 bz#1282729 bz#1285797 bz#1272409 bz#1294478


author: Milind Changire <mchangir@redhat.com> - 3.7.5-15
changelog:
  - fixes bugs bz#1285226 bz#1285167 bz#1291969 bz#1277944 bz#1288509 
    bz#1293380 bz#1278798 bz#1294816 bz#1285797 bz#1288490 bz#1272409 bz#1219794


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271927


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271927


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271927


author: Petr Holasek <pholasek@redhat.com> - 2:0.55-32
changelog:
  - NUMA awareness bits were thrown away (from #673234 and #798648)
  - Mistake in sysconfig documentation was fixed (bz 732435)


author: Ken Dreyer <ktdreyer@ktdreyer.com> 0.4-5
changelog:
  - Use patches from upstream git, instead of my own from -4
  - Patch Makefile to use $LIBS
  - Patch to use krb5-config to automatically determine build flags
  - Bump Fedora version to F16 for /usr/include/et
  - Regenerate configure with autoconf


author: Ken Dreyer <ktdreyer@ktdreyer.com> 0.4-7
changelog:
  - Adjust conditionals for setting CPPFLAGS and KRB5_CONFIG
  - Use PATH_KRB5_CONFIG instead of KRB5_CONFIG when running configure,
    since the latter is used by the Kerberos libraries to specify an
    alternative path to krb5.conf. Thanks again Russ Allbery.


author: Ken Dreyer <ktdreyer@ktdreyer.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Remove all upstreamed patches
  - No need to regenerate configure with autoconf
  - New upstream URL


author: Jaroslaw Polok <jaroslaw.polok@cern.ch - 0.4.1-1
changelog:
  - added patches for this CERN version:
    http://code.google.com/p/msktutil/issues/detail?id=12
    http://code.google.com/p/msktutil/issues/detail?id=10
    and increased max samaccountname to 20.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Peter Schiffer <pschiffe@redhat.com> 6.5.1-1
changelog:
  - related: #996478
    mpo remove tracker
  - removed bug fixed in original component: #881779
  - resolves: #896700
    fixed missing text in auditd.conf(5) man page
  - resolves: #1002071
    updated description of extglob behavior in bash(1) man page
  - resolves: #807323
    added description of webm format to byzanz-record(1) man page
  - resolves: #885625
    fixed typo on cupsctl(8) man page
  - resolves: #905066
    fixed documentation regarding CA certificates in curl package
  - resolves: #896544
    fixed typos in curl package man pages
  - resolves: #913088
    fixed typo in security_compute_av(3) man page
  - resolves: #913191
    updated selinux(8) man page
  - resolves: #979460
    added clarification about setting variables on mailx(1) man page
  - resolves: #960281
    documented missing values in clock_getres(2) man page
  - resolves: #974697
    updated description of LD_PRELOAD variable in ld.so(8) man page
  - resolves: #953753
    documented /proc/[pid]/oom_score_adj on proc(5) man page
  - resolves: #953750
    documented /proc/sys/kernel/dmesg_restrict on proc(5) man page
  - resolves: #953539
    documented /proc/sys/kernel/kptr_restrict on proc(5) man page
  - resolves: #908295
    fixed typo on syslog(3) man page
  - resolves: #974685
    removed incorrect example from sched_setaffinity(2) man page
  - resolves: #988125
    documented MADV_DONTDUMP and MADV_DODUMP on madvise(2) man page
  - resolves: #903258
    documented FALLOC_FL_PUNCH_HOLE flag on fallocate(2) man page
  - resolves: #957010
    fixed return type of strtoul(3) and strtoull(3)
  - resolves: #928917
    updated description of O_DIRECT on open(2) man page
  - resolves: #979318
    described ipv6 on netstat(8) man page
  - resolves: #951826
    updated default settings of inet_protocols variable on postconf(5) man page
  - resolves: #872144
    backported fix for top(1) man page
  - resolves: #983066
    removed deprecated example from rhnreg_ks(8) man page
  - resolves: #904970
    fixed typos on rsync(1) man page
  - resolves: #907837
    fixed description of -u option on useradd(8) man page
  - resolves: #884699
    fixed typo in usb-devices(1) man page
  - resolves: #972764
    removed superfluous dots after "via" preposition in yum man pages


author: Peter Schiffer <pschiffe@redhat.com> 6.5.2-1
changelog:
  - related: #807323
    fixed typo on byzanz-record(1) man page
  - related: #896700
    fixed even more missing text in auditd.conf(5) man page
  - related: #913191
    fixed typo on selinux(8) man page
  - resolves: #1020432
    properly documented -Z option for passing principal
    list on ssh-keygen(1) man page
  - resolves: #1020417
    removed incorrect default values of KexAlgorithms on ssh_config(5) man page
  - resolves: #833868
    fixed dig(1) man page
  - resolves: #1018622
    updated description of "new station" message on arpwatch(8) man page


author: jchaloup <jchaloup@redhat.com> - 6.6.1-1
changelog:
  - resolves: #1074599
  - removed bug fixed in original component: #1011219
  - removed bug fixed in original component: #1023045
  - removed bug fixed in original component: #1011237
  - removed bug fixed in original component: #1011076
  - removed bug fixed in original component: #1011064
  - removed bug fixed in original component: #1011052
  - removed bug fixed in original component: #882952
  - removed bug fixed in original component: #1011230
  - resolves: #1039986
    vsftpd.conf man page typo
  - resolves: #1066537
    missing b emulate option in man pages
  - resolves: #1059828
    missing pthread mutex man pages (new file in tarball)
  - resolves: #1078319
    core(5) wrong default value for coredump_filter (new file in tarball)
  - resolves: #1058738
    nscd.conf netgroup caching information missing
  - resolves: #1058793
    curl wrong nss link
  - resolves: #735949
    DESTDIR removed from man page
  - resolves: #988713
    rsyncable option missing in gzip.1 man page
  - resolves: #1058100
    nscd.conf default settings
  - resolves: #1058349
    getgrnam.3 buffer size
  - resolves: #1075233
    mention pcresyntax.3 in pcregrep.1 description


author: jchaloup <jchaloup@redhat.com> - 6.6.2-1
changelog:
  - related: #1074599
  - removed bug fixed in original component: #809096
  - removed bug fixed in original component: #1011109
  - removed bug fixed in original component: #1011145
  - removed bug fixed in original component: #1011216
  - resolves: #1108028
    ciphers.1 missing description of ECC and TLSv1.2 suites
  - resolves: #1003511
    idmapd.8 man page options update
  - resolves: #953741
    proc.5 /proc/fs/ not empty directory
  - resolves: #964160
    cracklib-[un]packer.8 .so directive to cracklib-format.8
  - resolves: #1114785
    host.conf multi on by default
  - resolves: #1099335
    febootstrap-to-supermin.8 typo
  - resolves: #1099275
    mailx.1 environment variables conflict
  - resolves: #816252
    replacing unreadable russian mans for readable ones. For simplcity, all ru man pages replaced.
  - resolves: #903666
    tar.1 reference to info tar added to description
  - resolves: #1075152
    xinetd.1 xinetd reload termination handling information
  - resolves: #1017478
    flock.2 nfs locks
  - resolves: #818780
    oddjobd-mkhomedir.conf missing man page added
  - resolves: #1007865
    updating .so directive in various snmp man pages
  - resolves: #969502
    rpm --setperms and --setugids are mutually exclusive
  - resolves: #889049
    vhostmd man page configuration file path correction
  - resolves: #815680
    new man pages lvmcache.7 and lvmthin.7
  - resolves: #1087503
    update information about codeset for charsets.7 and nl_langinfo.3
  - resolves: #1112708
    bash.1 POSIX mode block size
  - resolves: #891928
    man man page missing -D option added
  - resolves: #781499
    makedeltarpm.8 missing attribute -l file and its description
  - related: #815680
    removing added man pages for lvm2


author: jchaloup <jchaloup@redhat.com> - 6.6.3-1
changelog:
  - resolves: #1011892
    new man page for iconv.1
    patch 1003511-mpo-6.6.2-nfs-utils-rpc-idmapd.patch adding man page removed, man page in new tar
    patch 815680-mpo-6.6.2-lvm2-remove-man-pages.patch removing lmv2 man pages removed
    patch 964160-mpo-6.6.2-cracklib-cracklib-format.patch adding man page removed, man page in new tar
  - related: #1058793
    url on a new line for both man pages
  - related: #988713
    mentioning --rsyncable in synopsis


author: jchaloup <jchaloup@redhat.com> - 6.6.3-2
changelog:
  - related: #903666
    adding gtar.1 with link to tar.1
  - related: #1099275
    removing mail.1, nail.1 and Mail.1


author: Kevin Fenzi <kevin@tummy.com> - 20090224-2
changelog:
  - Apply patch for python modules loading (fixes #489109)
  - use install -p to fix multiarch issue (fixes #480685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22
changelog:
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#746341)
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (MITKRB5-SA-2011-006, #740085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22.1
changelog:
  - add candidate patch to fix a NULL pointer dereference while processing TGS
    requests (MITKRB5-SA-2011-007, #754046)


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.15.1.el6]
changelog:
  - [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
  - [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
  - [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
  - [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
  - [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
  - [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
  - [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.16.1.el6]
changelog:
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559]
  - [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
  - [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
  - [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.17.1.el6]
changelog:
  - [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
  - [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
  - [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.18.1.el6]
changelog:
  - [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
  - [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
  - [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
  - [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
  - [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
  - [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
  - [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
  - [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
  - [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
  - [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
  - [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
  - [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
  - [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
  - [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
  - [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
  - [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
  - [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
  - [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
  - [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.19.1.el6]
changelog:
  - [fs] gfs2: Reserve journal space for quota change in do_grow (Robert S Peterson) [988384 976823]
  - [netdrv] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [995458 988460]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [996014 987426]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.20.1.el6]
changelog:
  - [fs] nfs: Add functionality to allow waiting on all outstanding reads to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Ensure that NFS file unlock waits for readahead to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Convert nfs_get_lock_context to return an ERR_PTR on failure (Dave Wysochanski) [996424 976915]
  - [x86] thermal: Disable power limit notification interrupt (Shyam Iyer) [999328 908990]
  - [x86] thermal: Delete power-limit-notification console messages (Shyam Iyer) [999328 908990]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.21.1.el6]
changelog:
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1000314 947275]
  - [net] sctp: Fix list corruption resulting from freeing an association on a list (Jiri Pirko) [1002184 887868]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.22.1.el6]
changelog:
  - [x86] Round the calculated scale factor in set_cyc2ns_scale() (Prarit Bhargava) [1001954 975507]
  - [x86] sched: Fix overflow in cyc2ns_offset (Prarit Bhargava) [1001954 975507]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.23.1.el6]
changelog:
  - [md] raid1, raid10: use freeze_array in place of raise_barrier in various places (Jes Sorensen) [1003765 997845]
  - [scsi] megaraid_sas: megaraid_sas driver init fails in kdump kernel (Nikola Pajkovsky) [1001963 833299]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (Nikola Pajkovsky) [988228 876778]
  - [net] bridge: Add multicast_querier toggle and disable queries by default (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Fix fatal typo in setup of multicast_querier_expired (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Restart queries when last querier expires (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Add br_multicast_start_querier (Flavio Leitner) [995334 905561]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1006932 1002765]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [1006956 998752]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [993547 867689]
  - [net] bridge: do not call setup_timer() multiple times (Amerigo Wang) [997746 994430]
  - [fs] lockd: protect nlm_blocked list (David Jeffery) [993544 967095]
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Jiri Benc) [987649 987651] {CVE-2013-4162}
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988708 981741]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988708 981741]
  - [fs] cifs: fix issue mounting of DFS ROOT when redirecting from one domain controller to the next (Sachin Prabhu) [994866 976535]
  - [fs] nfs: Make nfs_readdir revalidate less often (Scott Mayhew) [994867 976879]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Scott Mayhew) [994867 976879]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Scott Mayhew) [994867 976879]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Scott Mayhew) [987262 983288]
  - [fs] nfs: fix a leak at nfs_lookup_revalidate() (Dave Wysochanski) [987261 975211]
  - [acpi] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [993547 867689]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [993547 867689]
  - [acpi] Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [993547 867689]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [997745 952012]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [997745 952012]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [997745 952012]
  - [net] bridge: Replace mp->mglist hlist with a bool (Amerigo Wang) [997745 952012]
  - [mm] fadvise: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages (Larry Woodman) [994140 957821]
  - [net] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1003931 955712]
  - [virt] xen-netfront: reduce gso_max_size to account for max TCP header (Andrew Jones) [1004657 957231]
  - [pps] Fix a use-after free bug when unregistering a source (Jiri Benc) [997916 920155]
  - [scsi] fnic: Fix SGEs limit (Chris Leech) [991346 829506]


author: Daniel Veillard <veillard@redhat.com> - 0.5.4-1
changelog:
  - update to new version to fix problems in libvirt-cim rebase
  - Resolves: rhbz#633332
  - fix a packaging naming problem on previous build
  - Resolves: rhbz#604551


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.7
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696341,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Petr Sabata <psabata@redhat.com> - 0.9.38-4
changelog:
  - patch to resolve hang observed during FCoE boot due to dcbx failing to initiate PFC and FCoE app priority negotiations
  - Resolves: rhbz#631587


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901380


author: Martin Sivak <msivak@redhat.com> - 0.3.1-1
changelog:
  - OpenSCAP plugin adapted to the updated OpenSCAP API
  - Big improvements to remote mode GUI usability


author: Bala FA <barumuga@redhat.com> - v3.6.0.24-1
changelog:
  - fixes bugs bz#1104153 bz#1109149 bz#1112582 bz#1113961 bz#1114008 
    bz#1114592 bz#1115266 bz#1115267


author: Bala FA <barumuga@redhat.com> - v3.6.0.25-1
changelog:
  - fixes bugs bz#1007033 bz#1101910 bz#1104121 bz#1104921 bz#1109150 
    bz#1116376 bz#1116703 bz#1116992 bz#1117135 bz#1120198 bz#1120245 bz#BUG:


author: Bala FA <barumuga@redhat.com> - v3.6.0.26-1
changelog:
  - fixes bugs bz#1111029 bz#1111577 bz#1113852 bz#1116761 bz#1117135 
    bz#1117283 bz#1119223 bz#1120830 bz#1121059 bz#1121603


author: Bala FA <barumuga@redhat.com> - v3.6.0.28-1
changelog:
  - fixes bugs bz#1110694 bz#1116150 bz#1121099 bz#1124692 bz#1127234 
    bz#1136711 bz#921528 bz#969298


author: Bala FA <barumuga@redhat.com> - v3.6.0.29-2
changelog:
  - fixes bugs bz#1136711 bz#1138288 bz#1139213 bz#1139273 bz#1139473 
    bz#1140643 bz#1143960
  - build to make higher release with rhs-3.0-client to avoid build
    collision


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.6
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Jan Rybar <jrybar@redhat.com> - 3.2.8-43
changelog:
  - Rework of patch 91 from 3.2.8-37, stripping removed permanently, no new option
  - Resolves: rhbz#1322111


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.17.1.el6]
changelog:
  - [x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal() (Oleg Nesterov) [1199900 1196262]
  - [x86] fpu: change save_i387_xstate() to rely on unlazy_fpu() (Oleg Nesterov) [1199900 1196262]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.18.1.el6]
changelog:
  - [fs] cifs: Use key_invalidate instead of the rh_key_invalidate() (Sachin Prabhu) [1203366 885899]
  - [fs] KEYS: Add invalidation support (Sachin Prabhu) [1203366 885899]
  - [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181173 1179327] {CVE-2014-8159}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.20.1.el6]
changelog:
  - [fs] exec: do not abuse ->cred_guard_mutex in threadgroup_lock() (Petr Oros) [1208620 1169225]
  - [kernel] cgroup: always lock threadgroup during migration (Petr Oros) [1208620 1169225]
  - [kernel] threadgroup: extend threadgroup_lock() to cover exit and exec (Petr Oros) [1208620 1169225]
  - [kernel] threadgroup: rename signal->threadgroup_fork_lock to ->group_rwsem (Petr Oros) [1208620 1169225]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.21.1.el6]
changelog:
  - [netdrv] ixgbe: Fix memory leak in ixgbe_free_q_vector, missing rcu (John Greene) [1210901 1150343]
  - [netdrv] ixgbe: Fix tx_packets and tx_bytes stats not updating (John Greene) [1210901 1150343]
  - [netdrv] qlcnic: Fix update of ethtool stats (Chad Dupuis) [1210902 1148019]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.22.1.el6]
changelog:
  - [kernel] hrtimer: Prevent hrtimer_enqueue_reprogram race (Prarit Bhargava) [1211940 1136958]
  - [kernel] hrtimer: Preserve timer state in remove_hrtimer() (Prarit Bhargava) [1211940 1136958]
  - [crypto] testmgr: fix RNG return code enforcement (Herbert Xu) [1212695 1208804]
  - [net] netfilter: xtables: make use of caller family rather than target family (Florian Westphal) [1212057 1210697]
  - [net] dynticks: avoid flow_cache_flush() interrupting every core (Marcelo Leitner) [1210595 1191559]
  - [tools] perf: Fix race in build_id_cache__add_s() (Milos Vyletel) [1210593 1204102]
  - [infiniband] ipath+qib: fix dma settings (Doug Ledford) [1208621 1171803]
  - [fs] dcache: return -ESTALE not -EBUSY on distributed fs race (J. Bruce Fields) [1207815 1061994]
  - [net] neigh: Keep neighbour cache entries if number of them is small enough (Jiri Pirko) [1207352 1199856]
  - [x86] crypto: sha256_ssse3 - also test for BMI2 (Herbert Xu) [1204736 1201560]
  - [scsi] qla2xxx: fix race in handling rport deletion during recovery causes panic (Chad Dupuis) [1203544 1102902]
  - [redhat] configs: Enable SSSE3 acceleration by default (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Create module providing optimized SHA512 routines using SSSE3, AVX or AVX2 instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Optimized SHA512 x86_64 assembly routine using AVX2 RORX instruction (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Optimized SHA512 x86_64 assembly routine using AVX instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Optimized SHA512 x86_64 assembly routine using Supplemental SSE3 instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha512: Expose generic sha512 routine to be callable from other modules (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Create module providing optimized SHA256 routines using SSSE3, AVX or AVX2 instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Optimized sha256 x86_64 routine using AVX2's RORX instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Optimized sha256 x86_64 assembly routine with AVX instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Optimized sha256 x86_64 assembly routine using Supplemental SSE3 instructions (Herbert Xu) [1201668 1036216]
  - [crypto] sha256: Expose SHA256 generic routine to be callable externally (Herbert Xu) [1201668 1036216]
  - [crypto] rng: RNGs must return 0 in success case (Herbert Xu) [1201669 1199230]
  - [fs] isofs: infinite loop in CE record entries (Jacob Tanenbaum) [1175243 1175245] {CVE-2014-9420}
  - [x86] vdso: ASLR bruteforce possible for vdso library (Jacob Tanenbaum) [1184896 1184897] {CVE-2014-9585}
  - [kernel] time: ntp: Correct TAI offset during leap second (Prarit Bhargava) [1201674 1199134]
  - [scsi] lpfc: correct device removal deadlock after link bounce (Rob Evers) [1211910 1194793]
  - [scsi] lpfc: Linux lpfc driver doesn't re-establish the link after a cable pull on LPe12002 (Rob Evers) [1211910 1194793]
  - [x86] switch_to(): Load TLS descriptors before switching DS and ES (Denys Vlasenko) [1177353 1177354] {CVE-2014-9419}
  - [net] vlan: Don't propagate flag changes on down interfaces (Jiri Pirko) [1173501 1135347]
  - [net] bridge: register vlan group for br ports (Jiri Pirko) [1173501 1135347]
  - [netdrv] tg3: Use new VLAN code (Jiri Pirko) [1173501 1135347]
  - [netdrv] be2net: move to new vlan model (Jiri Pirko) [1173501 1135347]
  - [net] vlan: mask vlan prio bits (Jiri Pirko) [1173501 1135347]
  - [net] vlan: don't deliver frames for unknown vlans to protocols (Jiri Pirko) [1173501 1135347]
  - [net] vlan: allow nested vlan_do_receive() (Jiri Pirko) [1173501 1135347]
  - [net] allow vlan traffic to be received under bond (Jiri Pirko) [1173501 1135347]
  - [net] vlan: goto another_round instead of calling __netif_receive_skb (Jiri Pirko) [1173501 1135347]
  - [net] bonding: fix bond_arp_rcv setting and arp validate desync state (Jiri Pirko) [1173501 1135347]
  - [net] bonding: remove packet cloning in recv_probe() (Jiri Pirko) [1173501 1135347]
  - [net] bonding: Fix LACPDU rx_dropped commit (Jiri Pirko) [1173501 1135347]
  - [net] bonding: don't increase rx_dropped after processing LACPDUs (Jiri Pirko) [1173501 1135347]
  - [net] bonding: use local function pointer of bond->recv_probe in bond_handle_frame (Jiri Pirko) [1173501 1135347]
  - [net] bonding: move processing of recv handlers into handle_frame() (Jiri Pirko) [1173501 1135347]
  - [netdrv] revert "bonding: fix bond_arp_rcv setting and arp validate desync state" (Jiri Pirko) [1173501 1135347]
  - [netdrv] revert "bonding: check for vlan device in bond_3ad_lacpdu_recv()" (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Always untag vlan-tagged traffic on input (Jiri Pirko) [1173501 1135347]
  - [net] Make skb->skb_iif always track skb->dev (Jiri Pirko) [1173501 1135347]
  - [net] vlan: fix a potential memory leak (Jiri Pirko) [1173501 1135347]
  - [net] vlan: fix mac_len recomputation in vlan_untag() (Jiri Pirko) [1173501 1135347]
  - [net] vlan: reset headers on accel emulation path (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Fix the ingress VLAN_FLAG_REORDER_HDR check (Jiri Pirko) [1173501 1135347]
  - [net] vlan: make non-hw-accel rx path similar to hw-accel (Jiri Pirko) [1173501 1135347]
  - [net] allow handlers to be processed for orig_dev (Jiri Pirko) [1173501 1135347]
  - [net] bonding: get netdev_rx_handler_unregister out of locks (Jiri Pirko) [1173501 1135347]
  - [net] bonding: fix rx_handler locking (Jiri Pirko) [1173501 1135347]
  - [net] introduce rx_handler results and logic around that (Jiri Pirko) [1173501 1135347]
  - [net] bonding: register slave pointer for rx_handler (Jiri Pirko) [1173501 1135347]
  - [net] bonding: COW before overwriting the destination MAC address (Jiri Pirko) [1173501 1135347]
  - [net] bonding: convert bonding to use rx_handler (Jiri Pirko) [1173501 1135347]
  - [net] openvswitch: use rx_handler_data pointer to store vport pointer (Jiri Pirko) [1173501 1135347]
  - [net] add a synchronize_net() in netdev_rx_handler_unregister() (Jiri Pirko) [1173501 1135347]
  - [net] add rx_handler data pointer (Jiri Pirko) [1173501 1135347]
  - [net] replace hooks in __netif_receive_skb (Jiri Pirko) [1173501 1135347]
  - [net] fix conflict between null_or_orig and null_or_bond (Jiri Pirko) [1173501 1135347]
  - [net] remove the unnecessary dance around skb_bond_should_drop (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: fix receiving of dups due vlan hwaccel" (Jiri Pirko) [1173501 1135347]
  - [net] uninline skb_bond_should_drop() (Jiri Pirko) [1173501 1135347]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Jiri Pirko) [1173501 1135347]
  - [net] bridge: convert br_features_recompute() to ndo_fix_features (Jiri Pirko) [1173501 1135347]
  - [net] revert "bridge: explictly tag vlan-accelerated frames destined to the host" (Jiri Pirko) [1173501 1135347]
  - [net] revert "fix vlan gro path" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bridge: do not learn from exact matches" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bridge gets duplicate packets when using vlan over bonding" (Jiri Pirko) [1173501 1135347]
  - [net] llc: remove noisy WARN from llc_mac_hdr_init (Jiri Pirko) [1173501 1135347]
  - [net] bridge: stp: ensure mac header is set (Jiri Pirko) [1173501 1135347]
  - [net] vlan: remove reduntant check in ndo_fix_features callback (Jiri Pirko) [1173501 1135347]
  - [net] vlan: enable soft features regardless of underlying device (Jiri Pirko) [1173501 1135347]
  - [net] vlan: don't call ndo_vlan_rx_register on hardware that doesn't have vlan support (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Fix vlan_features propagation (Jiri Pirko) [1173501 1135347]
  - [net] vlan: convert VLAN devices to use ndo_fix_features() (Jiri Pirko) [1173501 1135347]
  - [net] revert "vlan: Avoid broken offload configuration when reorder_hdr is disabled" (Jiri Pirko) [1173501 1135347]
  - [net] vlan: vlan device is lockless do not transfer real_num_<tx|rx>_queues (Jiri Pirko) [1173501 1135347]
  - [net] vlan: consolidate 8021q tagging (Jiri Pirko) [1173501 1135347]
  - [net] propagate NETIF_F_HIGHDMA to vlans (Jiri Pirko) [1173501 1135347]
  - [net] Fix a memmove bug in dev_gro_receive() (Jiri Pirko) [1173501 1135347]
  - [net] vlan: remove check for headroom in vlan_dev_create (Jiri Pirko) [1173501 1135347]
  - [net] vlan: set hard_header_len when VLAN offload features are toggled (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Calling vlan_hwaccel_do_receive() is always valid (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Centralize handling of hardware acceleration (Jiri Pirko) [1173501 1135347]
  - [net] vlan: finish removing vlan_find_dev from public header (Jiri Pirko) [1173501 1135347]
  - [net] vlan: make vlan_find_dev private (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Avoid hash table lookup to find group (Jiri Pirko) [1173501 1135347]
  - [net] revert "vlan: Add helper functions to manage vlans on bonds and slaves" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: assign slaves their own vlan_groups" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: fix regression on vlan module removal" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: Always add vid to new slave group" (Jiri Pirko) [1173501 1135347]
  - [net] revert "bonding: Fix up refcounting issues with bond/vlan config" (Jiri Pirko) [1173501 1135347]
  - [net] revert "8021q/vlan: filter device events on bonds" (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Use vlan_dev_real_dev in vlan_hwaccel_do_receive (Jiri Pirko) [1173501 1135347]
  - [net] gro: __napi_gro_receive() optimizations (Jiri Pirko) [1173501 1135347]
  - [net] vlan: Rename VLAN_GROUP_ARRAY_LEN to VLAN_N_VID (Jiri Pirko) [1173501 1135347]
  - [net] vlan: make vlan_hwaccel_do_receive() return void (Jiri Pirko) [1173501 1135347]
  - [net] vlan: init_vlan should not copy slave or master flags (Jiri Pirko) [1173501 1135347]
  - [net] vlan: updates vlan real_num_tx_queues (Jiri Pirko) [1173501 1135347]
  - [net] vlan: adds vlan_dev_select_queue (Jiri Pirko) [1173501 1135347]
  - [net] llc: use dev_hard_header (Jiri Pirko) [1173501 1135347]
  - [net] vlan: support "loose binding" to the underlying network device (Jiri Pirko) [1173501 1135347]
  - [net] revert "net: don't set VLAN_TAG_PRESENT for VLAN 0 frames" (Jiri Pirko) [1173501 1135347]
  - [net] bridge: Add support for TX vlan offload (Jiri Pirko) [1173562 1146391]
  - [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.2.el6]
changelog:
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1202860 1185166] {CVE-2015-1805}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.3.el6]
changelog:
  - [netdrv] bonding: fix locking in enslave failure path (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: primary_slave & curr_active_slave are not cleaned on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: vlans don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: mc addresses don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: IFF_BONDING is not stripped on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: fix error handling if slave is busy v2 (Nikolay Aleksandrov) [1222483 1221856]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.4.el6]
changelog:
  - [crypto] drbg: fix maximum value checks on 32 bit systems (Herbert Xu) [1225950 1219907]
  - [crypto] drbg: remove configuration of fixed values (Herbert Xu) [1225950 1219907]


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-29
changelog:
  - run sosreport with boot plugin instead of bootloader
  - fix minor bugs 'abrt-cli status' and 'abrt-action-notify'
  - Resolves: #1208154
  - Related: #1150197


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Update to latest upstream version
  - Compile three times against the three mpi stacks and make three packages
  - Resolves: bz451474


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Add pseudo provides of libibverbs-driver
  - Update buildrequires for libibverbs API change


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Update to latest upstream release (1.0.1 -> 1.0.2)
  - Remove 5 patches rolled into upstream release
  - Drop ifnarch ia64 use around valgrind as we don't build on ia64 any more
  - Fix broken libmlx4-modprobe.conf
  - Related: bz725016


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #982610


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032485 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-1
changelog:
  - Resolves: Bug 744070 - Update to 3.13.1
  - nss should protect against being called before nss_Init [784674]
  - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) [784490]


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-24
changelog:
  - mark catalog files as (not md5 size mtime) for verify to
    prevent info about changed files (#453271)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-25
changelog:
  - mark xmlcatalog config(noreplace) to prevent overwriting
    of the content, move it to sysconfdir and make symlink for
    it to silence rpmlint


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-28
changelog:
  - do not provide explicit url for xml-common subpackage,
    fix trailing spaces
  - add Requires: /bin/basename (#501360)


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.7.3.el6
changelog:
  - bumped release
  - changed  buildoutputdir to contains "-debug" in case of debug on
  - rewritten (long unmaintained) java-1.7.0-openjdk-debugdocs.patch and 
    java-1.7.0-openjdk-debuginfo.patch
  - debug turned on (1)
  - Resolves: rhbz#1092063


author: Marek Kasik <mkasik@redhat.com> - 2.24.1-2
changelog:
  - Import gdk-pixbuf2 package from F16
  - Disable introspection
  - Add update-gdk-pixbuf-loaders
  - Resolves: #1103734


author: Miloslav Trmač <mitr@redhat.com> - 0.20.2-5
changelog:
  - Make test suite pass with OpenSSL 1.0.0
  - Don't ship patch backup files in %doc
    Resolves: #565660


author: Roland McGrath <roland@redhat.com> - 0.146-1
changelog:
  - Update to 0.146
    - libdwfl: New function dwfl_core_file_report.
    - libelf: Fix handling of phdrs in truncated file. (#577310)
    - libdwfl: Fix infinite loop handling clobbered link_map. (#576379)
  - Package translations.


author: Roland McGrath <roland@redhat.com> - 0.148-1
changelog:
  - Update to 0.148
    - libdw: Accept DWARF 4 format: new functions dwarf_next_unit,
             dwarf_offdie_types.
             New functions dwarf_lineisa, dwarf_linediscriminator,
             dwarf_lineop_index.
    - libdwfl: Fixes in core-file handling, support cores from PIEs. (#588818)
               When working from build IDs, don't open a named file
               that mismatches.
    - readelf: Handle DWARF 4 formats.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-82
changelog:
  - Release 1.2.11.15-82
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-83
changelog:
  - Release 1.2.11.15-83
  - Resolves: #1327065 - After updating server, component nss-3.21.0-0.3.el6_7.x86_64, some client applications cannot connect to server (DS 48798)
  - Resolves: #1266920 - invalid message about write_changelog_and_ruv on consumers (DS 47801)
  - Resolves: #1330758 - add a nsTLS1.0 on or off new configuration parameter to cn=encryption,cn=config in RHEL 6 389-ds-base (DS 48816)
  - Resolves: #1369572 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: #1371706 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: #1371678 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)
  - Resolves: #1370145 - cannot reindex retrochangelog (DS 47619)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-84
changelog:
  - Release 1.2.11.15-84
  - Resolves: #1352109 - Replication stops working only when fips mode is set to true  (DS 48909)
  - Resolves: #1372420 - DES to AES backport issues (DS 47462)
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)
  - Resolves: #1382386 - Directory Server accepts a wrong userdn macro ACI (DS 449)
  - Resolves: #1382519 - 1.2.11 only -- coverity fixes (DS 49004)
  - Resolves: #1387022 - specific search with sizelimit=1 sometimes returns no entry (DS 47703)
  - Resolves: #1387772 - trace args debug logging must be more restrictive (DS 49009)


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-270
changelog:
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket instead of afs_t.
  - Allow smbd to access /var/lib/ctdb/persistent/secrets.tdb.0.
  - Allow glusterd to execute consoletype.
  - Glusterd wants to manage samba config files if they are setup together.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-271
changelog:
  - Remove ctdbd_manage_var_files() interface which is not used and is declared for the wrong type.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-272
changelog:
  - Allow hypervkvp to read default SELinux contexts.
  - Allow hypervkvp to write to /etc directories.
  - Update all man pages for RHEL6.7 SELinux domains/roles using the latest sepolicy-manpage from RHEL7.
  - Fix labeling for /var/lib/graphite-web
  - ALlow kpropd to connect to tcp/754 port.
  Resolves:#1220691
  - Allow php-fpm write access to /var/run/redis/redis.sock
  - Update fs_rw_inherited_nfs_files() to allow search auto mountpoints.
  - Dontaudit rpm leaks for prelink_mask_t.
  - Allow sysctl to have running under hypervkvp_t domain.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-273
changelog:
  - Fix redis_stream_connect interface.
  Resolves:#1220691
  - Allow kadmind to bind to kprop port.
  - Add new man pages for bacula


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.1
changelog:
  - add candidate patch from upstream to fix freeing uninitialized pointer in
    the KDC (MITKRB5-SA-2012-001, CVE-2012-1015, #839859)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.2
changelog:
  - pull up the patch to correct a possible NULL pointer dereference in
    kadmind (CVE-2012-1013, #827517)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport changes to how and when we read and make use of SELinux labeling
    configuration (#852455)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.3
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (#852455)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.470.el6
changelog:
  - kvm-vnc-sanitize-bits_per_pixel-from-the-client.patch [bz#1157644]
  - Resolves: bz#1157644
    (CVE-2014-7815 qemu-kvm: qemu: vnc: insufficient bits_per_pixel from the client sanitization [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.471.el6
changelog:
  - kvm-aio-switch-aiocb_size-type-int-size_t.patch [bz#1069519]
  - kvm-aio-use-g_slice_alloc-for-AIOCB-pooling.patch [bz#1069519]
  - kvm-aio-rename-AIOPool-to-AIOCBInfo.patch [bz#1069519]
  - kvm-ide-ahci-Check-for-ECANCELED-in-aio-callbacks.patch [bz#1069519]
  - kvm-block-Add-refcnt-in-BlockDriverAIOCB.patch [bz#1069519]
  - kvm-block-Add-bdrv_aio_cancel_async.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_co_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-bdrv_em_aiocb_info.cancel.patch [bz#1069519]
  - kvm-posix-aio-Remove-raw_aiocb_info.cancel.patch [bz#1069519]
  - kvm-linux-aio-Convert-laio_aiocb_info.cancel-to-.cancel_.patch [bz#1069519]
  - kvm-dma-Convert-dma_aiocb_info.cancel-to-.cancel_async.patch [bz#1069519]
  - kvm-blkdebug-Drop-blkdebug_aiocb_info.cancel.patch [bz#1069519]
  - kvm-curl-Drop-curl_aiocb_info.cancel.patch [bz#1069519]
  - kvm-qed-Drop-qed_aiocb_info.cancel.patch [bz#1069519]
  - kvm-rbd-Drop-rbd_aiocb_info.cancel.patch [bz#1069519]
  - kvm-vdi-Drop-vdi_aio_cancel.cancel.patch [bz#1069519]
  - kvm-gluster-Drop-gluster_aiocb_info.cancel.patch [bz#1069519]
  - kvm-block-Drop-AIOCBInfo.cancel.patch [bz#1069519]
  - kvm-block-Rename-qemu_aio_release-qemu_aio_unref.patch [bz#1069519]
  - kvm-scsi-Drop-scsi_req_abort.patch [bz#1069519]
  - kvm-scsi-generic-Handle-canceled-request-in-scsi_command.patch [bz#1069519]
  - kvm-scsi-Unify-request-unref-in-scsi_req_cancel.patch [bz#1069519]
  - kvm-scsi-Drop-SCSIReqOps.cancel_io.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_complete.patch [bz#1069519]
  - kvm-scsi-Introduce-scsi_req_cancel_async.patch [bz#1069519]
  - kvm-virtio-scsi-Handle-TMF-request-cancellation-asynchro.patch [bz#1069519]
  - kvm-scsi-fix-cancellation-when-I-O-was-completed-but-DMA.patch [bz#1069519]
  - kvm-block-Fix-bdrv_aio_co_cancel_em-RHEL-only.patch [bz#1069519]
  - kvm-qcow2-Zero-write-support.patch [bz#1130014]
  - Resolves: bz#1069519
    ([FJ6.5 Bug] A KVM guest hangs up for about 30 seconds after issuing SG_IO ioctl to a virtio-scsi device.)
  - Resolves: bz#1130014
    (test case 033 and 034 of qemu-iotests fail for vmdk)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.472.el6
changelog:
  - kvm-virtio-pci-avoid-repeatedly-deassigning-notifers-of-.patch [bz#1124311]
  - Resolves: bz#1124311
    (Qemu-kvm aborted when boot with 232 virtio NICs (multiple function is on))


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.473.el6
changelog:
  - kvm-blockdev-preserve-I-O-throttling-across-drives_reope.patch [bz#1211513]
  - Resolves: bz#1211513
    (IO throttling doesn't work after migration)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.474.el6
changelog:
  - kvm-block-avoid-useless-checks-on-acb-bh.patch [bz#1130014]
  - kvm-clean-unnecessary-code-don-t-check-g_strdup-arg-for-.patch [bz#1205288]
  - kvm-Drop-superfluous-conditionals-around-g_strdup.patch [bz#1205288]
  - kvm-util-Drop-superfluous-conditionals-around-g_free.patch [bz#1205288]
  - kvm-util-Fuse-g_malloc-memset-into-g_new0.patch [bz#1205288]
  - kvm-util-uri-uri_new-can-t-fail-drop-dead-error-handling.patch [bz#1205288]
  - kvm-util-uri-realloc2n-can-t-fail-drop-dead-error-handli.patch [bz#1205288]
  - kvm-util-uri-URI-member-path-can-be-null-compare-more-ca.patch [bz#1205288]
  - kvm-util-uri-Add-overflow-check-to-rfc3986_parse_port.patch [bz#1205288]
  - Resolves: bz#1130014
    (test case 033 and 034 of qemu-iotests fail for vmdk)
  - Resolves: bz#1205288
    (Coverity-detected defect: buffer overrun at uri.c:2035)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.475.el6
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219268]
  - Resolves: bz#1219268
    (EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.476.el6
changelog:
  - kvm-block-Fix-bdrv_aio_cancel-RHEL-only.patch [bz#1220674]
  - Resolves: bz#1220674
    (Received no response to QMP command 'system_reset')


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.477.el6
changelog:
  - kvm-pcnet-fix-Negative-array-index-read.patch [bz#1225887]
  - kvm-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch [bz#1225887]
  - Resolves: bz#1225887
    (EMBARGOED CVE-2015-3209 qemu-kvm: qemu: pcnet: multi-tmd buffer flow in the tx path [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.478.el6
changelog:
  - kvm-vdi-Avoid-direct-AIO-callback.patch [bz#1130046]
  - kvm-vdi-Initialize-acb-bh-in-vdi_aio_setup.patch [bz#1130046]
  - Resolves: bz#1130046
    (test case 084 of qemu-iotests fail for vdi)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.479.el6
changelog:
  - kvm-posix-aio-compat-fix-acb-ev_signo-race-condition.patch [bz#1233292]
  - Resolves: bz#1233292
    ()


author: Steve Dickson <steved@redhat.com> 1.2.3-35
changelog:
  - Fixed a regession in mountd that cause a localhost mounts to hang (bz 797209)
  - Make sure mount tries all the addresses returned by getaddrinfo (bz 876847)


author: Steve Dickson <steved@redhat.com> 1.2.3-38
changelog:
  - Fixed typo in nfsstat's output (bz 890146)
  - Fixed retrans defaults in nfs(5) man page (bz 952560)
  - Clean rpc.idmapd messages when nfsd starts (bz 892235)
  - Fixed sm-notify to work with localhost (bz 950324)
  - Fixed pNFS stats (bz 962602)
  - Remove no_acl from exports(5) man page (bz 991302)
  - Improve nfsmount.conf configuration parsing (bz 889272)
  - Fixed sm-notify -v (bz 995484)


author: Steve Dickson <steved@redhat.com> 1.2.3-39_5.4
changelog:
  - exportfs: added ipv6 bracket support (bz 1133837)
  - exportfs: disable READERPLUS for v3  (bz 1133835)


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.2.1.el6]
changelog:
  - [netdrv] bonding: Remove redundant VLAN tag insertion logic (Nikolay Aleksandrov) [1039562 1025224]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.3.1.el6]
changelog:
  - [net] don't drop TSO features for NO_CSUM devices (Ivan Vecera) [1037812 1030631]
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Martin Stransky <stransky@redhat.com> - 17.0.6-4
changelog:
  - Added a workaround for rhbz#961687 - Prelink throws message 
    "Cannot safely convert .rel.dyn' section from REL to RELA"


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-3
changelog:
  - Bump spec rev to 3
  - Remove unneeded buildrequires perl, gawk, sed
  - Remove leading / from path macros
  - Remove provides for package name - done automatically
  - Move pkgconfig file stuff under install
  - Added LICENSE and README under docs


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.3.01-0
changelog:
  - Fixed support for windows build by moving old makefile to src/Makefile.win
  - and updating instructions - I could not get configure/libtool to work
  - with cygwin and the msvc compiler
  - Added support for --with-nspr and --with-nss and finding nspr/nss
  - "in-tree" when building with other mozilla components
  - Use PK11_TokenKeyGenWithFlags instead of PK11_KeyGen


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.4-1
changelog:
  - Removed some autoconf generated files which were GPL only - all
  - code needs to be tri-licensed
  - updated version to 4.0.4
  - added empty COPYING file - do not use the one generated by autoreconf
  - use bz2 for source tarball instead of gz


author: Harald Hoyer <harald@redhat.com> 147-2.53
changelog:
  - add rule for idrac interface renaming
  Resolves: rhbz#1054482
  - for every modprobe locked worker, increase max_childs
  Resolves: rhbz#1028174
  - increase firmware timeout to 600 seconds
  Resolves: rhbz#1077186
  - add nvme pcie ssd scsi_id ENV
  Resolves: rhbz#1020856
  - scsi_id: add short option "-b" parsing
  Resolves: rhbz#910168
  - add  by-id (hardware serial number) for Micron PCIe SSDs
  Resolves: rhbz#839172
  - 80-iosched.rules: check for attributes
  Resolves: rhbz#1008341


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.3.2.el6]
changelog:
  - [md] dm-thin: fix pool_io_hints to avoid looking at max_hw_sectors (Mike Snitzer) [1161420 1161421 1142773 1145230]


author: Patsy Franklin <pfrankli@redhat.com> - 2015b-1
changelog:
  - Rebase to 2015b
    - Mongolia will start observing DST again this year, from the last
      Saturday in March at 02:00 to the last Saturday in September at 00:00.
    - Palestine will start DST on March 28, not March 27.  Also,
      correct the fall 2014 transition from September 26 to October 24.
      Adjust future predictions accordingly.


author: Patsy Franklin <pfrankli@redhat.com> - 2015c-1
changelog:
  - Rebase to 2015c
    - Egypt's spring-forward transition is at 24:00 on April's last Thursday,
      not 00:00 on April's last Friday.  2015's transition will therefore be on
      Thursday, April 30 at 24:00, not Friday, April 24 at 00:00.  Similar fixes
      apply to 2026, 2037, 2043, etc.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-1
changelog:
  - Rebase to 2015d:
    - The Egyptian Cabinet announced that DST will be cancelled for 2015.
    - The abbreviations for Hawaii-Aleutian standard and daylight times
      have been changed from HAST/HADT to HST/HDT, as per US Government
      Printing Office style. This affects only America/Adak since 1983,
      as America/Honolulu was already using the new style.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-3
changelog:
  -  Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
     not 06-13 and 07-18 as we had guessed.


author: Patsy Franklin <pfrankli@redhat.com> - 2015e-1
changelog:
  - Rebase to 2015e:
    - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
      not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
    - Assume Cayman Islands will observe DST starting next year, using US rules.
      Although it isn't guaranteed, it is the most likely.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 733443 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 734267 - upgradednformat failed to add RDN value - subtree and user account lockout policies implemented?
  - Bug 733434 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 733442 - Ignore an error 32 in this case since we're adding a new AutoMember definition
  - Bug 733440 - RFE: add option to allow server to start with an expired certificate


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.11-1
changelog:
  - Bug 739196 - Consolidate DS and DS replication bits in one package in RHEL 6.2
  - There were two patches in ds-replication for RHEL 6.2 that were added post
  - rebase - the two patches for 722292 - these are now in the 389-ds-base package
  - and have been cherry-picked to the RHEL-6 internal branch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.12-1
changelog:
  - Bug 742661 - allow resource limits to be set for paged searches
  -  independently of limits for other searches/operations
  - Bug 742381 - part2 - MOD operations with chained delete/add get
  -  back error 53 on backend config
  - Bug 742382 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
  - Bug 742381 - MOD operations with chained delete/add get back
  -  error 53 on backend config
  - Bug 739959 - Allow separate fractional attrs for incremental and total protocols


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.13-1
changelog:
  - Bug 742381 - part3 - MOD operations with chained delete/add get
  -  back error 53 on backend config


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Justin Ross <jross@redhat.com> - 0.14-1
changelog:
  - Rebase to 0.14
  - rhbz#743657 - The pure-python QMF console unnecessarily retains
    references to query results
  - rhbz#699499 - [RFE] qmfv2 must provide mainloop integration
  - rhbz#681680 - QMF agents wake up several times a second
  - rhbz#663461 - Enable new architectures
  - Remove python-qpid-qmf and ruby-qpid-qmf from ppc and s390 architectures


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-50
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073223)
  - added cache to hrSWRunTable to provide consistent results (#1007634)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1073237)
  - fixed snmptrapd crashing on forwarding SNMPv3 traps (#1131844)


author: Juan Antonio Lopez Perez
changelog:
  - Solaris porting taking into account the different paths of the
  	cern-config-srvtab and aksrvutil executables in Linux and Solaris
  	- Extended the check of utilities also to the aksrvutil tool
  	- Changed error message of the -x execution test from 'not found' 
  	to 'cannot execute'


author: Jan Iven
changelog:
  - various "enforced" things added (config.tpl, README, pos.cin file..)
  - new "verbose" option, default=0ff
  - no longer insist on aksrvutil being there


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15.1
changelog:
  - Resolves: rhbz#929101

  - Put handle to hdb in dispatch on unknown message (rhbz#929101)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#929101)
  - Properly check result of coroipcc_dispatch_put (rhbz#929101)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#929101)
  - coroipcs: Ensure rb data are not overwritten (rhbz#929101)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#929101)
  - Properly lock pending_semops (rhbz#929101)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#929101)


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Recreate lost spec file and patches from memory
  - Add dist tag to release
  - Turn off FORTIFY_SOURCE when building


author: Laine Stump <laine@redhat.com> - 0.2.4-2
changelog:
  - resolves rhbz#1113978
   - Fix name of DHCPV6C variable in ifcfg files
   - resolves rhbz#1116314
   - Fix netmask for prefix == 32
   - apply patches to source with git rather than patch


author: Laine Stump <laine@redhat.com> - 0.2.4-3
changelog:
  - resolves rhbz#1208894
   - Remove extraneous single quotes from IPV6ADDR_SECONDARIES
   - resolves rhbz#1208897
   - Bad parsing of network-scripts/ifcfg-xxxx files
   - resolves rhbz#1165966
   - resolves CVE-2014-8119
   - augeas path expression injection via interface name


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-33
changelog:
  - su: don't terminate parent process upon SIGTERM(#1063887)
  - tail: do not show "reverting to polling" warning when not
    necessary (#1046818)
  - chcon: document default behaviour for symlink (#1064621)
  - fix dd sparse test failure on XFS (#1075679)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-34
changelog:
  - tail: disable inotify in --follow for vxfs (#1104244)
  - df: dereference symlinks to disk device nodes (#812449)
  - dd: add support for count_bytes iflag (#1098078)


author: Ondrej Oprala <ooprala@redhat.com> - 8.4-39
changelog:
  - du: improve du error message of coreutils commands in a chrooted environment
    (patch by Boris Ranto) (#1086916)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-40
changelog:
  - ls: improve efficiency on filesystems without support for ACLs,
    xattrs or SELinux (#1248141)
  - su: suppress PAM info messages for -c or non-login sessions (#1267588)
  - tail, stat: recognize several new filesystems - up2date by Jan 1st 2016 (#1280333)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-41
changelog:
  - colorls.sh,colorls.csh - call utilities with complete path (#1222140)
  - mkdir, mkfifo, mknod - respect default umask/acls when 
    COREUTILS_CHILD_DEFAULT_ACLS envvar is set (to match rhel 7 behaviour,


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.4-10
changelog:
  - Add patches to change the screen crossing behaviour for multiple
    ScreenRecs (#732467)
  - remove the xorg.conf.man page from our .gitignore - we need to patch it
    now and it's part of the upstream distribution


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.4-11
changelog:
  - xserver-1.10.4-dix-when-rescaling-from-master-rescale-from-desktop-.patch:
    fix rescaling from master to slave if the pointer (#732467)


author: Adam Jackson <ajax@redhat.com> 1.10.4-13
changelog:
  - xserver-1.10.4-randr-corner-case.patch: Fix a corner case in initial
    mode selection. (#657580)
  - xserver-1.10.4-vbe-no-cache-ddc-support.patch: Only interpret complete
    non-support for DDC extension as "DDC unavailable". (#657580)


author: Adam Jackson <ajax@redhat.com> 1.10.4-14
changelog:
  - xserver-1.10.4-sync-revert.patch: Revert an edge-case change in IDLETIME
    that appears to be more wrong than right. (#748704)


author: Adam Jackson <ajax@redhat.com> 1.10.6-1
changelog:
  - xserver 1.10.6
  - Use git-style patch names
  - compsize.h, glxcmds.h: Copy from upstream git since they fell out of the
    upstream tarball


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289890


author: Marc-Andre Lureau <marcandre.lureau@gmail.com> 0.20-11.1
changelog:
  - Fix crash when audio stream isn't started yet.
    Resolves: rhbz#1090000
  - Fix memory leak of primary surface.
    Resolves: rhbz#1090001


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.4-51
changelog:
  - check malloc success (#473488)
  - fix few compiler warnings, free malloc memory before exit
  - new URL


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-6
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments (#684933)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-7
changelog:
  - Use portreserve to protect rsync/tcp port (#786076)
  - Truncate a copied sparse file at the end of transaction
    (-S, --sparse option) (#737539)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-9
changelog:
  - Revert portreserve, as portrelease functionality needs to be
    implemented first in the rsync binary (#786076)


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
    Resolves: bz600813
  - Add basic Infiniband plugin
    Resolves: bz673244
  - Add plugin for scsi-target-utils iSCSI target
    Resolves: bz677124
  - Fix autofs plugin LC_ALL usage
    Resolves: bz683404
  - Fix collection of lsusb and add collection of -t and -v outputs
    Resolves: bz691477
  - Extend data collection by qpidd plugin
    Resolves: bz726360
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin
    Resolves: bz726427


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
    Resolves: bz704383
  - Add /proc/vmmemctl collection to vmware plugin
    Resolves: bz709491


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
    Resolves: bz683219
  - Add support for collecting Red Hat Subscrition Manager configuration
    Resolves: bz714293
  - Collect /etc/init on systems using upstart
    Resolves: bz694813
  - Don't strip whitespace from output of external programs
    Resolves: bz713449
  - Collect ipv6 neighbour table in network module
    Resolves: bz721163
  - Collect basic cgroups configuration data
    Resolves: bz729455


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-14
changelog:
  - Collect brctl show and showstp output
    Resolves: bz697899
  - Collect nslcd.conf in ldap plugin
    Resolves: bz682124


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
    Resolves: bz697899
  - Fix up2dateclient path in hardware plugin
    Resolves: bz736718


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
    Resolves: bz736718
  - Fix hardware plugin to support new lsusb path
    Resolves: bz691477


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-17.el6_2.1
changelog:
  - Add forbidden paths for new location of gluster private keys
  - Update gluster module for gluster-3.3
  - Add additional command output to gluster module
  - Add support for collecting gluster configuration and logs
    Resolves: bz801328


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-17.el6_2.3
changelog:
  - Add nfs statedump collection to gluster module
    Resolves: bz801328
  - Use wildcard to match possible libvirt log paths
    Resolves: bz817921


author: Mark Wielaard <mjw@redhat.com> 3.8.1-3.3
changelog:
  - Add valgrind-3.8.1-mmxext.patch (#828341)
  - Add valgrind-3.8.1-s390-STFLE.patch (#881893)
    s390 message-security assist (MSA) instruction extension not implemented.
  - Add valgrind-3.8.1-ppc-setxattr.patch (#1007400)
  - Implement SSE4 MOVNTDQA insn (valgrind-3.8.1-movntdqa.patch) (#1012932)
  - Add valgrind-3.8.1-amd64-sigstack.patch (#1024162)


author: Mark Wielaard <mjw@redhat.com> 3.8.1-4
changelog:
  - Add valgrind-3.8.1-ppc32-instr-magic.patch. (#1142151)
  - Add valgrind-3.8.1-hwcaps-no-lzcnt.patch. (#1158802)
  - Add valgrind-3.8.1-llcache-size.patch. (#1163777)


author: Mark Wielaard <mjw@redhat.com> 3.8.1-5
changelog:
  - Add tests filter to valgrind-3.8.1-llcache-size.patch. (#1163777)
  - Add valgrind.h update to valgrind-3.8.1-ppc32-instr-magic.patch. (#1142151)


author: Mark Wielaard <mjw@redhat.com> - 3.8.1-7
changelog:
  - Add valgrind-3.8.1-ethtool.patch. (#1191404)
  - Add valgrind-3.8.1-ppc64-priority.patch. (#1191414)


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 0.12.1.2-2.506.el6_10.7
changelog:
  - kvm-slirp-disable-tcp_emu.patch [bz#1791680]
  - kvm-slirp-add-slirp_fmt-helpers.patch [bz#1798966]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798966]
  - Resolves: bz#1791680
    (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-6])
  - Resolves: bz#1798966
    (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-6.10.z])


author: Adam Tkac <atkac redhat com> 0.4b41-13
changelog:
  - display dump level correctly in all cases (#493635)
  - -A option is not valid when -P is specified, correct manual page (#490627)
  - fix typos in manual pages (#489853)


author: Adam Tkac <atkac redhat com> 0.4-0.1.b42
changelog:
  - update to 0.4b42
  - patches merged
    - dump-selinux.patch
    - dump-dmfix.patch
    - dump-immutable.patch
    - dump-0.4b41-libtinfo.patch
    - dump-rh356121.patch
    - dump-rh493635.patch
    - dump-rh490627.patch
    - dump-rh489853.patch
  - fix NVR to conform to Fedora policies


author: Adam Tkac <atkac redhat com> 0.4-0.5.b42
changelog:
  - dump: write EA metadata to tape correctly (#599680)
  - restore: add a workaround to read incorrectly written EA metadata (#599680)


author: Adam Tkac <atkac redhat com> 0.4-0.6.b42
changelog:
  - call clone(2) syscall with correct args on s390
  - `dump -w` didn't recognize ext4 filesystems as supported (#658890)
  - fix incorrect hole handling (#691434)


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb8-1
changelog:
  - Update to latest upstream release
  - Remove all patches
  - Executable renamed targetadmin->targetcli to match upstream


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb10-4
changelog:
  - Add patches:
   * fcoe-target-utils-handle-no-acl-auth.patch
   * fcoe-target-utils-no-rdmcp.patch
   * fcoe-target-utils-message-deprecated.patch


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb10-5
changelog:
  - Update fcoe-target.init to handle start and shutdown properly
  - Add patch fcoe-target-utils-no-msg-if-no-config.patch


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb16-1
changelog:
  - Update to latest upstream version
  - Remove patches:
   * fcoe-target-utils-handle-no-acl-auth.patch
   * fcoe-target-utils-message-deprecated.patch


author: KELEMEN Peter <Peter.Kelemen@cern.ch> - 4-0
changelog:
  - unified SLC4/SLC5 handling
  - cleaned up dependencies
  - got rid of obsolete apt->yum transition triggers


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1267501)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Robert Scheck <robert@fedoraproject.org> 0.9.3-1
changelog:
  - Upgrade to 0.9.3 (#466825, thanks to Hans de Goede)
  - Enabled libv4l support for the new gspca kernel driver


author: Kamil Dudka <kdudka@redhat.com> - 0.9.5-5
changelog:
  - fix provides for libunicap, libunicapgtk and libucil (#612693)
  - fix SIGSEGV in ucil_alsa_fill_audio_buffer (#635644)
  - check return value of theora_encode_init() (#635645)
  - avoid a multilib conflict on unicap-devel (#658059)


author: Dave Anderson <anderson@redhat.com> - 7.1.0-4.el6
changelog:
  - Fixes for the handling of truncated/incomplete flat-format vmcores, which
    may cause the session to hang during initialization.
    Resolves: rhbz#1231976
  - Fix for the "timer" command, which may fail with the error message
    "timer: cannot allocate any more memory!" when run on a kernel with
    an extremely large number of cpus.
    Resolves: rhbz#1238403


author: Dave Anderson <anderson@redhat.com> - 7.1.0-5.el6
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1283000


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-97
changelog:
  - Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
  - Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
  - Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
  - Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-98
changelog:
  - Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1368119


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-102
changelog:
  - Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
  - Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-105
changelog:
  - Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
  - Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816


author: Eduardo Habkost <ehabkost@redhat.com> - sgabios-0-0.3.20110621svn.el6
changelog:
  - Change package summary to not mention trademarks unnecessarily
  - Update info about tarball-generation command
  - Related: bz#712993


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-10
changelog:
  - Fix possible exception path in the luci cluster model object related to bz624558 (replace broadcast option with udpu)
  - Correct duplication of the fence brocade menu item in the fence devices section related to bz681506 (readd urgently fence_brocade to the list of shipped fence_agents in luci)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-11
changelog:
  - Additional fix for bz613871 (luci should not give ungraceful error messages when encountering fence devices that it does not recognize/support)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-12
changelog:
  - Fix bz617587 (Luci doesn't display underlying errors)
  - Fix bz617586 (Implement progress dialog for long-running operations)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-13
changelog:
  - More fixes for bz617586 (Implement progress dialog for long-running operations)
  - More fixes for bz616239 (Need option to completely destroy cluster)
  - More fixes for bz557234 ([RFE] luci update to handle private network/hostnames for cluster create/config)


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038987 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Nikola Forró <nforro@redhat.com> - 1.3-16
changelog:
  - Revert previous changes in patch for CVE-2016-5159
  - Fix double free in patch for CVE-2016-5139
  - Fix memory leaks and invalid read in cio_bytein
    Related: #1419775


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-36
changelog:
  - Release 1.2.11.15-36
  - Resolves: bug 1088171 - revert - 7-bit check plugin does not work for userpassword attribute (DS 47423)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-37
changelog:
  - Release 1.2.11.15-37
  - Resolves: bug 1113606 - server restart wipes out index config if there is a default index (DS 47831)
  - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47821)
  - Resolves: bug 1080185 - Creating a glue fails if one above level is a conflict or missing (DS 47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-38
changelog:
  - Release 1.2.11.15-38
  - Resolves: bug 1080185 - revert - Creating a glue fails if one above level is a conflict or missing (DS 47750;Patch233)


author: Kamil Dudka <kdudka@redhat.com> 2.4.44-5
changelog:
  - encode NULs properly with getfattr --encoding=text (#651119)
  - return non-zero exit code on failure of getfattr (#665050)
  - document supported encodings of values (#674870)
  - update project URL in package specification (#702639)


author: Andrew Overholt <overholt@redhat.com> 1:3.4.1-1
changelog:
  - 3.4.1
  - Don't conditionalize building of gcj AOT bits (we're only building
    this for gcj and IcedTea bootstrapping).


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-1
changelog:
  - Update to upstream 4.5.2 release.
  - Add eclipse-gcj-compat-4.2.1.patch and eclipse-gcj-nodummysymbol.patch
    from rhel-7.3 branch.
  - Add ecj-convertto1.5.patch.
  - Remove ClasspathJsr199.java for 1.5 compatibility.
  - Add man page.
  - Resolves: rhbz#1336481


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-3
changelog:
  - Update to a newer GCCMain.
  - Add a timestamp qualifier to ecj-gcj.tar.bz2.
  - Remove eclipse-gcj-compat-4.2.1.patch, no longer necessary. 
  - Restore versioned jar.
  - Resolves: rhbz#1336481


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-3
changelog:
  - Resolves: rhbz#524662 Implement new Gnome XDG Config Folders for planner
      + gnome#596171 change recently used to use new recently used backend
      + gnome#XXXXXX split config/data setting into xdg dirs


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-4
changelog:
  - Resolves: rhbz#526295 automatically go to edit mode on insert task
  - Resolves: rhbz#537854 fix zoom to fit


author: Matthew Barnes <mbarnes@redhat.com> - 0.14.4-10
changelog:
  - Resolves: rhbz#973289 rebuild against newer evolution-data-server
  - Also add planner-0.14.4-edsapi.patch from Fedora 14 package.


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix bad dates in changelog
    Resolves: rhbz#1038670
  - Fix crash on migration during reboot
    Resolves: rhbz#1004443
  - Use TLS 1.0 or better
    Resolves: rhbz#1035695


author: Jarod Wilson <jarod@redhat.com> 2.6-3
changelog:
  - Add hopefully-about-to-be-merged-upstream hugeadm enhancements
  - Add huge pages setup helper script, using new hugeadm enhancements


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.8.1.el6
changelog:
  - Added and applied patch 116 - patch 116 rh905128-non_block_ciphers.patch
  - Added and applied patch 117 - patch 117 java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
   - to enable handleStartupErrors = ignoreMultipleInitialisation in icedtea 2.3
  - Restorered removed nss support
  - Fixed java-1.7.0-openjdk-nss-config-{1,2} patches to be valid for icedtea 2.3.x
  - enable_nss switch to 0 - disabled
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.8.2.el6
changelog:
  - Added latest Fedora spec changes
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - classes.jsa marked as ghost on full path
    - see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
  - nss.cfg was marked as config(noreplace)
  - Add symlink to default soundfont (see 541466)
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.9.0.el6
changelog:
  - updated to IcedTea  2.3.9 with latest security patches
  - buildver sync to b19
  - rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.1.el6
changelog:
  - updated to updated IcedTea  2.3.9 with fix to one of security fixes
    -  fixed font glyph offset
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.el6
changelog:
  - Updated to latest IcedTea7-forest 2.3.10
  - patch 107 renamed to 500 for cosmetic purposes
  - improved handling of patch111 - nss-config-2.patch
  - removed patch 117, java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
    duplicated with patch 108 (java-1.7.0-openjdk-nss-icedtea-e9c857dcb964)
  - Added client/server directories so they can be owned
  - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.el6
changelog:
  - added patch1000 MBeanFix.patch to fix regressions caused by security patches
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.3.el6
changelog:
  - removed upstreamed patch1000 MBeanFix.patch
  - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
  - Resolves: rhbz#973119


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.25-2.3.10.4.el6
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.3.el6:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - Related: rhbz#973119


author: Simo Sorce <simo@redhat.com> 2.3.6-0.20131125.3
changelog:
  - Initial packaging
  - Based on the spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>
  - Code is updated to latest master via a jumbo patch while waiting for
    official upstream release.
  - Jumbo patch includes also additional patches sent to upstream list)
    to build on Fedora 20
  - Perl bindings are disabled as they fail to build
  - Disable doc building as it doesn't ork correctly for now


author: Simo Sorce <simo@redhat.com> 2.4.0-0
changelog:
  - Update to final 2.4.0 version
  - Drop all patches, they are now included in 2.4.0
  - Change Source URI


author: Simo Sorce <simo@redhat.com> - 2.4.0-5
changelog:
  - Add various fixes from upstream master, mostly memory leaks
  - Change to final covscan fixes as applied upstream


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el6
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Petr Pisar <ppisar@redhat.com> - 7.8-5
changelog:
  - Reintroduce RE::Init(const char*) to restore ABI with pcre-6
    (Resolves: #842000)
  - Fix spelling formfeed, runtime, whitespace in manual pages
    (Resolves: #799003)


author: Petr Pisar <ppisar@redhat.com> - 7.8-6
changelog:
  - Fix repeated forward reference needing a character (Resolves: #756105)
  - Fix caseless match if cases differ in encoding length (Resolves: #759475)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-11
changelog:
  - add cifs.idmap, binaries and autoconf goop (bz 843617)
  - add getcifsacl and setcifsacl tools (bz 843612)
  - add more missing mount.cifs options to manpage (bz 843596)
  - enable PIE and RELRO (bz 838606)
  - mount.cifs: handle usernames differently for sec=krb5 (bz 826825)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-15
changelog:
  - fix several issues in cifs.idmap (bz 843617)
  - fix several issues in getcifsacl/setcifsacl (bz 843612)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-16
changelog:
  - fix even more issues in cifs.idmap (bz 843617)
  - fix even more issues in getcifsacl/setcifsacl (bz 843612)
  - fixes for problems in setcifsacl found by coverity (bz 873683)


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-3.el6.1
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639859


author: Milan Crha <mcrha@redhat.com> - 2.20.1-3
changelog:
  - Add patch for RH bug #970594 (a11y combo names not shown without string column in model)
  Resolves: #970594


author: Milan Crha <mcrha@redhat.com> - 2.20.1-4
changelog:
  - Add patch for RH bug #979049 (GtkTreeView: make tree expanding/collapsing more robust)
  Resolves: #979049


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-1
changelog:
  - Rebase to 2.24.23
  - Make immodule cache handling the same as in gtk3. The cache
    file is now in $libdir, no longer in /etc
  - Disable tracker explicitly
  - Initialize variable "key" in gtk_print_backend_cups_set_password()
  - Modify fresh-tooltips.patch so the "new-tooltip-style" property
    is still accepted
  - Revert deprecations added between 2.20 and 2.24 so that building
    of dependent packages don't fail
  - Update relevant patches so that they apply correctly
  - Resolves: #1100886


author: Ray Strode <rstrode@redhat.com> - 2.24.23-5
changelog:
  - Don't crash if enumeration finishes just as it gets cancelled
    in file selector. Fixes crash in libreoffice when saving to
    SFTP mounts.
    Resolves: #1129605


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-6
changelog:
  - Set "entry-text-column" property in constructor of GtkComboBoxText.
  - Fixes crash in evolution when creating new appointment.
  - Resolves: #1126916


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.1.2.el6]
changelog:
  - [x86] kvm: fix PIT timer race condition (mguzik) [1149592 1149593] {CVE-2014-3611}
  - [x86] kvm: vmx: handle invept and invvpid vm exits gracefull (mguzik) [1144826 1144837 1144827 1144838] {CVE-2014-3646 CVE-2014-3645}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.1.3.el6]
changelog:
  - Revert: [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    * rgmanager: fix compiler warning in clulog.c
    * rgmanager: Add resource-defaults section
    * rgmanager: Fix clustat help & version operations
    * rgmanager: Make clustat -f not query CCS/objdb
    * rgmanager: Pause during exit if we stopped services
    * rgmanager: Fix reference count handling
  - spec file update:
    * update spec file copyright date
    * drop all patches
    * update and clean configure and build section.
    * resync with fedora spec file
    Resolves: rhbz#707118
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Requires/Obsoletes on resource-agents to avoid file conflicts
    Resolves: rhbz#693517


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-2
changelog:
  - Improve rgmanager's exclusive prioritization handling
    Resolves: rhbz#690191
  - Fix bad passing of SFL_FAILURE up
    Resolves: rhbz#716231
  - Fix segfault on config reload
    Resolves: rhbz#692895
  - Make handling of failed services consistent
    Resolves: rhbz#673167


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-3
changelog:
  - rgmanager: Fix race in shutdown vs. notification
    Resolves: rhbz#697446
  - rgmanager: Add 'disabled' configuration option
    Resolves: rhbz#723925


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-4
changelog:
  - rgmanager: Fix segfault caused by unref race
    Resolves: rhbz#697446
  - rgmanager: Fix uninitialized variable
    Resolves: rhbz#734730


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-5
changelog:
  - rgmanager: Clean up DBus concurrency
    rgmanager: Block signals when dealing with dbus
    Resolves: rhbz#741607


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.2.29-23
changelog:
  - Chdir to "/" if "." not readable, or CWD unlinked.
  - Chdir to "/" if CWD unlinked.
  - Resolves: rhbz#711358 rhbz#698795
  - Catch PackageSackError from _rpmdb_warn_checks
  - Resolves: rhbz#735234
  - With no arg. to clean, give the error and then fail.
  - Resolves: rhbz#735333
  - Report transaction verification progress
  - Resolves: rhbz#737826
  - Add reset nice config option
  - Resolves: rhbz#742363
  - 'yum makecache' honours skip_if_unavailable=1
  - Resolves: rhbz#769864
  - quote proxy username and password
  - resolves: rhbz#770117


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.2.29-29
changelog:
  - Ignore time skew when ordering transactions.
  - Resolves: rhbz#809373
  - Fix _conv_pkg_state
  - Resolves: rhbz#809392


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, CVE-2011-0281,
    CVE-2011-0282, #671102, CVE-2011-0283, #669423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - switch to revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - add backported patch to not fail receipt of an AP-REQ if the signature check
    on the included PAC (if there is one) fails (#679612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696342,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9.1
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#714866)


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-3
changelog:
  - Resolves: Bug 870158 - slapd entered to infinite loop during new index addition
  - Resolves: Bug 870162 - Cannot abandon simple paged result search
  - c970af0 Coverity defects
  - 1ac087a Fixing compiler warnings in the posix-winsync plugin
  - 2f960e4 Coverity defects
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes


author: Noriko Hosoi <nhoso@redhat.com> - 1.2.11.15-4
changelog:
  - Resolves: Bug 868841 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Resolves: Bug 868853 - Winsync: DS error logs report wrong version of Windows AD when winsync is configured.
  - Resolves: Bug 875862 - crash in DNA if no dnamagicregen is specified
  - Resolves: Bug 876694 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Resolves: Bug 876727 - Search with a complex filter including range search is slow
  - Ticket #495 - internalModifiersname not updated by DNA plugin (Bug 834053)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-9.el6
changelog:
  - seabios-mask-interrupts-on-S3-resume.patch [bz#771946]
  - Resolves: bz#771946
    (mask interrupts on S3 resume)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-10.el6
changelog:
  - seabios-Remove-HPET-from-DSDT.patch [bz#786142]
  - Resolves: bz#786142
    (Windows guest shows HPET device, but qemu has none.)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-12.el6
changelog:
  - seabios-usb-fix-boot-paths.patch [bz#782028]
  - seabios-usb-uhci-reorganize-wait_qh-into-wait_pipe.patch [bz#782028]
  - seabios-usb-uhci-Be-sure-to-wrap-pipe-iobase-in-GET_FLATPTR.patch [bz#782028]
  - seabios-usb-uhci-fix-race-against-host-controller.patch [bz#782028]
  - seabios-usb-ehci-Fix-races-with-controller-on-updates-to-QH.patch [bz#782028]
  - seabios-usb-msc-support-commands-without-payload.patch [bz#782028]
  - seabios-usb-msc-add-usb_msc_send.patch [bz#782028]
  - seabios-usb-msc-move-READ-CAPACITY-to-usb_msc_init-fix-off-b.patch [bz#782028]
  - seabios-usb-msc-pass-drive-to-setup_drive_.patch [bz#782028]
  - seabios-usb-msc-support-WRITE-commands.patch [bz#782028]
  - seabios-Extract-space-trimming-code-from-ATA-and-use-in-USB-.patch [bz#782028]
  - seabios-usb-msc-rename-INQUIRY-types.patch [bz#782028]
  - seabios-cdrom-use-TEST-UNIT-READY-to-detect-ready-medium.patch [bz#782028]
  - seabios-usb-msc-go-through-TEST-UNIT-READY-for-hard-disks.patch [bz#782028]
  - seabios-usb-msc-move-common-scsi-code-to-blockcmd.c.patch [bz#782028]
  - seabios-usb-msc-move-cdb-dispatch-to-block.c.patch [bz#782028]
  - seabios-scsi-get-physical-chs-geometry-from-mode-page-0x04.patch [bz#782028]
  - seabios-always-specify-virtio-blk-rather-than-virtio.patch [bz#782028]
  - seabios-virtio-pci-include-pci.h-and-pci_regs.h.patch [bz#782028]
  - seabios-virtio-pci-introduce-vp_init_simple.patch [bz#782028]
  - seabios-virtio-pci-allocate-vq-in-vp_find_vq.patch [bz#782028]
  - seabios-add-virtio-scsi-driver.patch [bz#782028]
  - Resolves: bz#782028
    ([RFE] virtio-scsi boot support in SeaBIOS)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-13.el6
changelog:
  - seabios-enable-S3-S4.patch [bz#761586]
  - Resolves: bz#761586
    (Patch bios to restore S3/S4)
  - Resolves: bz#804603
    (specfile: Put seabios version into banner)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-14.el6
changelog:
  - seabios-Halt-if-number-of-started-cpus-are-more-then-expecte.patch [bz#802033 bz#805168]
  - seabios-Drop-FIX_RTC-flag-from-FADT.patch [bz#804933]
  - Resolves: bz#802033
    (kvm guest hangs on reboot after cpu-hotplug)
  - Resolves: bz#804933
    (RTC wake up does not work with windows guests)
  - Resolves: bz#805168
    (seabios should not spin on cpu if started cpu count != cmos value at 0x5f)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-15.el6
changelog:
  - seabios-scsi-do-not-send-MODE-SENSE-except-to-QEMU-disks.patch [bz#801293]
  - seabios-Use-OUT-mode-for-all-zero-byte-scsi-transfers.patch [bz#801293]
  - seabios-virtio-scsi-Fix-virtio-scsi-after-cdb_is_read-change.patch [bz#801293]
  - seabios-ata-send-TEST-UNIT-READY-correctly.patch [bz#801293]
  - Resolves: bz#801293
    (fix boot from host or redirected USB pen drives)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-16.el6
changelog:
  - Restore seabios-Drop-FIX_RTC-flag-from-FADT.patch [bz#804933]
  - Resolves: bz#804933
    (RTC wake up does not work with windows guests)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-17.el6
changelog:
  - seabios-Replace-level-gpe-event-with-edge-gpe-event-for-hot-.patch [bz#808033]
  - Resolves: bz#808033
    (kvm guest doesn't see all hotplugged vcpus when 'virsh setvcpus 64 --live ' or hot-plugged devices when they added fast enough)


author: Eduardo Habkost <ehabkost@redhat.com> - seabios-0.6.1.2-18.el6
changelog:
  - seabios-Revert-enable-S3-S4.patch [bz#809797]
  - add S3/S4 seabios binary [bz#809797]
  - Resolves: bz#809797
    (Create a seabios binary that supports s3/s4)


author: Michal Novotny <minovotn@redhat.com> - seabios-0.6.1.2-19.el6
changelog:
  - seabios-increase-f-segment-memory-pool.patch [bz#810471]
  - Resolves: bz#810471
    (boot fails while starting guest with sockets>62 and cores=1 and threads=1 option  and 10 virtio disks)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-6
changelog:
  - do not overwrite /var/log/tallylog on package update (#614766)
  - add support for uid and gid ranges in limits.conf (#622847)
  - add new pam_faillock module (#644971)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-7
changelog:
  - fix a few memory leaks in error paths and other mistakes
    found by a code review
  - add rhost and tty to auditing data in modules (#677664)


author: Paul Howarth <paul@city-fan.org> - 1.7.0.40-1.0.cf
changelog:
  - update to 1.7.0.40 (bug-fix and enhancement update; see release notes at
    http://www.oracle.com/technetwork/java/javase/7u40-relnotes-2004172.html)
  - update tzupdater to 1_3_57-2013d (not used in this build)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.1
changelog:
  - refresh expired cookie in test172 from upstream test-suite (#1092486)
  - fix a memory leak caused by write after close (#1092479)
  - nss: implement non-blocking SSL handshake (#1092480)


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-24
changelog:
  - fix for #851664 - vmstat -S M 1' and 'vmstat -S m 1' erronously
  - ... output constant 'si' and 'so' value of 0
  - Resolves: rhbz#851664


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-20
changelog:
  - qemu: Don't force port=0 for SPICE (rhbz#975751)
  - qemu: Refactor graphics code to not hardcode a single display (rhbz#975751)
  - qemu: Graphics support for simultaneous one of each sdl, vnc, spice (rhbz#975751)
  - qemu: Don't miss errors when changing graphics passwords (rhbz#975751)
  - qemu: Allow seamless migration for domains with multiple graphics (rhbz#975751)
  - qemu_migration: Move waiting for SPICE migration (rhbz#920205)
  - util: Refactor iptables command construction into multiple steps (rhbz#851455)
  - net: Support set public ip range for forward mode nat (rhbz#851455)
  - net: Add support for specifying port range for forward mode nat (rhbz#851455)
  - qemu_migrate: Dispose listen address if set from config (rhbz#971485)
  - qemu: Remove maximum cpu limit when setting processor count using the API (rhbz#855296)
  - qemu_agent: Introduce helpers for agent based CPU hot(un)plug (rhbz#924400)
  - virsh-domain: Refactor cmdVcpucount and fix output on inactive domains (rhbz#924400)
  - API: Introduce VIR_DOMAIN_VCPU_AGENT, for agent based CPU hot(un)plug (rhbz#924400)
  - qemu: Implement request of vCPU state using the guest agent (rhbz#924400)
  - qemu: Implement support for VIR_DOMAIN_VCPU_AGENT in qemuDomainSetVcpusFlags (rhbz#924400)
  - qemuDomainGetVcpusFlags: Initialize ncpuinfo (rhbz#924400)
  - Fix commit 29c1e913e459058c12d02b3f4b767b3dd428a498 (rhbz#924400)
  - qemu: Make qemuMigrationIsAllowed more reusable (rhbz#972675)
  - qemu: Cancel migration if guest encoutners I/O error while migrating (rhbz#972675)
  - qemu: Forbid migration of machines with I/O errors (rhbz#972675)
  - migration: Make erroring out on I/O error controllable by flag (rhbz#972675)
  - migration: Don't propagate VIR_MIGRATE_ABORT_ON_ERROR (rhbz#972675)
  - Paused domain should remain paused after migration (rhbz#972675)
  - qemu: New vnc display sharing policy caps flag (rhbz#803602)
  - conf: Add 'sharePolicy' attribute to graphics element for vnc (rhbz#803602)
  - qemu: Add ', share=<policy>' to qemu commandline (rhbz#803602)
  - virsh: Distinguish errors between missing argument and wrong option (rhbz#924596)
  - virsh: Fix incorrect argument errors for long options (rhbz#924596)
  - virsh: Resolve Coverity 'MISSING_BREAK' (rhbz#924596)
  - virnetdev: Need to initialize 'pciConfigAddr' (rhbz#980339)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961)
  - sec_manager: Refuse to start domain with unsupported seclabel (rhbz#947387)
  - usb: Don't spoil decimal addresses (rhbz#981503)
  - storage: Return -1 when fs pool can't be mounted (rhbz#983539)


author: Jaroslaw Polok <jaroslaw.polok@cern.ch> 3.5.4
changelog:
  - added alternative search pattern for building/office
  - added the wrapper for deprecating phone:
    http://cern.ch/ssb/ServiceChangeArchive/091130-Linux-Phonebook.htm


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.4
changelog:
  - conf: Don't format actual network definition in migratable XML (rhbz#1203367)
  - util: more verbose error when failing to create macvtap device (rhbz#1203367)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.5
changelog:
  - Create directory for lease files if it's missing (rhbz#1208619)
  - qemu: cgroup: Properly set up vcpu pinning (rhbz#1209891)


author: Honza Horak <hhorak@redhat.com> - 7.1-6
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16,
    even in case of DAO writing
    Resolves: #807474


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.2
changelog:
  - Fixed bug causing an issue when adding stonith level without --force
  - Added ability to create/edit/remove uidgid for corosync in cluster.conf
  - Fixed bug which wouldn't allow a user to standby nodes
  - Resolves: rhbz#1038479 rhbz#1038478 rhbz#1032161


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.3
changelog:
  - When creating a resource using --group/--clone/--master put the group
    inside the master/clone/group before putting it into the live CIB
  - Resolves: rhbz#1099314


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta6.20100515
changelog:
  - use reserved uid and gid for dovecot user and group
  - create /var/run/dovecot/empty in advance in rpm


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta6.20100630
changelog:
  - dovecot and pigeonhole updated
  - moved disable_plaintext_auth to 10-auth.conf
  - moved ACL and quota settings to a separate .conf files


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-19
changelog:
  - Resolves: Bug 834096 - slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.6-1
changelog:
  - avoid potential use-after-free and read overrun after a CA is added
    dynamically (thanks to Jan Cholasta)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-1
changelog:
  - fix an inconsistency in how we parse cookie values returned by CA helpers,
    in that single-line values would lose the end-of-line after a daemon
    restart, but not before
  - handle timeout values and exit status values when calling CA helpers
    in non-SUBMIT, non-POLL modes (#1118468)
  - rework how we save CA certificates so that we save CA certificates associated
    with end-entity certificates when we save that end-entity certificate, which
    requires running all of the involved pre- and post-save commands
  - drop package Requires: on systemd-sysv (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-2
changelog:
  - reintroduce package Requires: on systemd-sysv on F19 and EL6 and older,
    conditionalized it so that it's ignored on newer releases, and make
    whether or not we call systemd-sysv-convert in triggers depend on that,
    too (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.8-1
changelog:
  - add a 'refresh' option to the getcert command
  - add a '-a' flag to the getcert command's 'refresh-ca' option


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.9-1
changelog:
  - avoid potential use-after-free after a CA is removed dynamically (thanks to
    Keenan Brock) (#1125342)
  - add a "external-helper" property to CA objects


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.10-1
changelog:
  - when attempting to contact an IPA LDAP server, if no "ldap_uri" is set in
    default.conf, and no "host" is set either, try to construct the server URI
    using the "server" setting (#1126985)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.11-1
changelog:
  - when getcert is passed a -a flag, to indicate that CA root certificates
    should be stored in the specified database, don't ignore locations which
    don't include a storage scheme (#1129537)
  - when called to 'start-tracking' with the -a or -F flags, if we have
    applicable certificates on-hand for a CA that we're either told to use
    or which we decide is the correct one, save the certificates (#1129696)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.3-4
changelog:
  - libwacom-0.3-add-list-devices.patch: add API to list devices
  - libwacom-0.3-add-udev-generator.patch: add a udev rules generater tool
  - libwacom-0.3-add-bamboo-one.patch: add Bamboo One definition


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-13
changelog:
  - rgmanager: Fix a crash when dbus notifications are
    Resolves: rhbz#825375
  - rgmanager: Fix for deadlock
    Resolves: rhbz#861157


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-15
changelog:
  - rgmanager: Randomize node list when relocating with no
    Resolves: rhbz#831648
  - rgmanager: Fix return code when a service would deadlock
    Resolves: rhbz#861157


author: Rich Megginson <rmeggins@redhat.com> - 1.5.2-6.2
changelog:
  - fixes for RHEL-6 pkgwrangler review
  - Makefile.PL.rpm is not an upstream source
  - Source URL was pointing to the wrong location
  - change Release so dist tag is last


author: Rich Megginson <rmeggins@redhat.com> - 1.5.3-1
changelog:
  - new version 1.5.3 with openldap support
  - Resolves: bug 610902 - Modify perl-Mozilla-LDAP to use open ldap library


author: Dan Horák <dhorak@redhat.com> - 0.23-2
changelog:
  - fix path separator for FC devices (#589327)
  - fix for kernels with unified string representation of NULL (#589860)
  - Resolves: #589327, #589860


author: Dave Airlie <airlied@redhat.com> 7.7-1
changelog:
  - rebase to 7.7 release - the best base to move forward at this point in time.
  - bump libdrm requires


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-18
changelog:
  - another quoted variable fixes for spaces in filenames
  - use SGML_INCLUDE in man backend(upstream)
  - change upstream URL to something useful
  - escape dots and single quotes in column 1 in docbook2man-spec.pl


author: Patsy Franklin <pfrankli@redhat.com> - 2016f-1
changelog:
  - Rebase to 2016f
    - Egypt cancelled DST.
    - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.2.1.el6]
changelog:
  - [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
  - [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
  - [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
  - [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
  - [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
  - [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
  - [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.3.1.el6]
changelog:
  - [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
  - [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.4.1.el6]
changelog:
  - [firmware] add iwlwifi-8000C-13 ucode (Stanislaw Gruszka) [1242969 1134603]
  - [net] Always propagate flag changes to interfaces (Jarod Wilson) [1253734 1222823]
  - [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1253729 1238308]
  - [scsi] zfcp: Use correct length for FCP_RSP_INFO (Hendrik Brueckner) [1253728 1223105]
  - [tools] perf: avoid possible race condition in copyfile (Milos Vyletel) [1253733 1229673]
  - [tools] perf: Introduce copyfile_offset function (Milos Vyletel) [1253733 1229673]
  - [tools] perfs: Add rm_rf utility function (Milos Vyletel) [1253733 1229673]
  - [net] vlan: restore VLAN_GROUP_ARRAY_LEN definition (Michal Schmidt) [1246102 1242145]
  - [md] dm btree remove: fix bug in redistribute3 (Mike Snitzer) [1246105 1242023]
  - [netdrv] vmxnet3: prevent receive getting out of sequence on napi poll (Neil Horman) [1246092 1236564]
  - [kernel] sched, cgroup: replace signal_struct->group_rwsem with a global percpu_rwsem (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu_rw_semaphore: add lockdep annotations (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu_rw_semaphore: kill ->writer_mutex, add ->write_ctr (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu_rw_semaphore: reimplement to not block the readers unnecessarily (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu-rwsem: use synchronize_sched_expedited (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu-rw-semaphores: use rcu_read_lock_sched (Oleg Nesterov) [1246081 1198732]
  - [kernel] percpu-rw-semaphores: use light/heavy barriers (Oleg Nesterov) [1246081 1198732]
  - [kernel] blockdev: turn a rw semaphore into a percpu rw semaphore (Oleg Nesterov) [1246081 1198732]
  - [kernel] softirq: Add softirq_2ms_loop and default to existing RHEL6 behaviour (Prarit Bhargava) [1246064 970263]
  - [kernel] softirq: reduce latencies (Prarit Bhargava) [1246064 970263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.7.1.el6]
changelog:
  - Revert: [kernel] softirq: reduce latencies (Prarit Bhargava) [1246064 970263]
  - Revert: [kernel] softirq: Add softirq_2ms_loop and default to existing RHEL6 behaviour (Prarit Bhargava) [1246064 970263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.8.1.el6]
changelog:
  - [netdrv] bonding: fix LACP PDU not sent on slave port sometimes (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: fix incorrect lacp mux state when agg not active (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: fix bond_open don't always set slave active flag (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: update bond carrier state when min_links option changes (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: change AD_LINK_SPEED_BITMASK to enum to suport more speed (Jarod Wilson) [1266366 1258446]
  - [virt] kvm: ioapic: conditionally delay irq delivery duringeoi broadcast (Fam Zheng) [1266369 1199155]
  - [kernel] ipc, sem: fix use after free on IPC_RMID after a task using same semaphore set exits (Herton R. Krzesinski) [1266373 1233300]
  - [fs] xfs: extent size hints can round up extents past MAXEXTLEN (Leonardo Menezes Vaz) [1266372 1211110]
  - [fs] Remove BUG_ON in nfs_clear_inode (Frank Sorenson) [1266364 1224343]
  - [net] use address assign type "SET" (Jarod Wilson) [1266374 1225359]
  - [net] ethtool: set addr_assign_type to NET_ADDR_SET when addr is passed on create (Jarod Wilson) [1266374 1225359]
  - [net] rtnl: use dev_set_mac_address() instead of plain ndo_ (Jarod Wilson) [1266374 1225359]
  - [net] ipv4: inet_fragmentation: compute work more accurate (Hannes Frederic Sowa) [1246088 1235465]
  - [netdrv] bna: fix interrupts storm caused by erroneous packets (Ivan Vecera) [1260535 1241287]
  - [edac] pci: avoid negative reference count of edac_class (Herton R. Krzesinski) [1255492 1227845]
  - [kernel] percpu_counter: batch size aware __percpu_counter_compare (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: make percpu_counters_lock irq-safe (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: fix bad percpu counter state during suspend (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: unbreak __percpu_counter_add (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: fix __percpu_counter_add (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: make APIs irq safe (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: __this_cpu_write doesn't need to be protected by spinlock (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: enclose hotplug only variables in hotplug ifdef (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpucounter: Optimize __percpu_counter_add a bit through the use of this_cpu options (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: use this_cpu_ptr instead of per_cpu_ptr (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu: fix list_head init bug in __percpu_counter_init (Hannes Frederic Sowa) [1246088 1235465]


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1
changelog:
  - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
  - Obsolete old PolicyKit packages


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.4-13
changelog:
  - fixed typo in ccpp_event.conf rhbz#744784
  - fixed return codes in abrt-cli rhbz#742474
  - Resolves: #744784, #742474


author: Ray Strode <rstrode@redhat.com> 2.30.4-24
changelog:
  - defuzz patches so they're easier to update for upcoming
    errata.
    Related: #670619, #661618, #708430, #688158, #645453, #628462, #622561
  - escape id calls so they don't fail with fully qualified
    network logon ids
    Resolves: #688158


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.385.el6_4.7
changelog:
  - kvm-qcow2-Reinitialise-counter-when-restarting-alloc-r64.patch [bz#996151]
  - Resolves: bz#996151
    (qcow2 corruption bug in cluster allocation code)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.8
changelog:
  - kvm-ccid-card-emul-do-not-crash-if-backend-is-not-provid.patch [bz#965152]
  - kvm-ccid-make-backend_enum_table-static-const-and-adjust.patch [bz#965152]
  - kvm-ccid-declare-DEFAULT_ATR-table-to-be-static-const.patch [bz#965152]
  - kvm-libcacard-vscclient-fix-error-paths-for-socket-creat.patch [bz#965152]
  - kvm-libcacard-Use-format-specifier-u-instead-of-d-for-un.patch [bz#965152]
  - kvm-Spelling-fixes-in-comments-it-s-its.patch [bz#965152]
  - kvm-libcacard-Fix-unchecked-strdup-by-converting-to-g_st.patch [bz#965152]
  - kvm-libcacard-split-vscclient-main-from-socket-reading.patch [bz#965152]
  - kvm-libcacard-vscclient-to-use-QemuThread-for-portabilit.patch [bz#965152]
  - kvm-libcacard-teach-vscclient-to-use-GMainLoop-for-porta.patch [bz#965152]
  - kvm-libcacard-use-system-config-directory-for-nss-db-on-.patch [bz#965152]
  - kvm-libcacard-remove-sql-prefix.patch [bz#965152]
  - kvm-libcacard-remove-default-libcoolkey-loading.patch [bz#965152]
  - kvm-dev-smartcard-reader-nicer-debug-messages.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-remove-aborts-never-tr.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader-support-windows-guest.patch [bz#965152]
  - kvm-libcacard-change-default-ATR.patch [bz#965152]
  - kvm-hw-ccid-card-passthru.c-add-atr-check.patch [bz#965152]
  - kvm-ccid-card-passthru-dev-smartcard-reader-add-debug-en.patch [bz#965152]
  - kvm-usb-ccid-Drop-unused-CCIDCardInfo-callback-print.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-define-structs-for-CCI.patch [bz#965152]
  - kvm-dev-smartcard-reader-change-default-protocol-to-T-0.patch [bz#965152]
  - kvm-dev-smartcard-reader-copy-atr-protocol-to-ccid-param.patch [bz#965152]
  - kvm-libcacard-vreader-add-debugging-messages-for-apdu.patch [bz#965152]
  - kvm-dev-smartcard-reader-empty-implementation-for-Mechan.patch [bz#965152]
  - kvm-libcacard-cac-change-big-switch-functions-to-single-.patch [bz#965152]
  - kvm-usb-smartcard-reader-Properly-NAK-interrupt-eps-when.patch [bz#965152]
  - kvm-uhci-Don-t-allow-the-guest-to-set-port-enabled-when-.patch [bz#965152]
  - kvm-usb-ccid-remote-wakeup-support.patch [bz#965152]
  - kvm-uhci-egsm-fix.patch [bz#965152]
  - Resolves: bz#965152
    (Smartcard emulation with Windows guest fails)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.9
changelog:
  - kvm-Fix-off-by-one-error-in-page_l1_map.patch [bz#996791]
  - Resolves: bz#996791
    (Off-by-one error in page_l1_map() can lead to out-of-bounds access)


author: Pravin Satpute <psatpute@redhat.com> - 2.4.4-1
changelog:
  - upstream release of 2.4.4
  - updated url for upstream tarball
  - added Makefile in upstream tar ball


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-5
changelog:
  - Include just one sample plugin in the documentation for the -devel
    subpackage. Don't include architecture specific files.
  - patch: Do not inform the user that the command was not permitted by
    the policy if they do not successfully authenticate.
    Resolves: rhbz#759480
    Resolves: rhbz#871303
    Resolves: rhbz#872740


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-6
changelog:
  - added patches to address a number of issues in ldap & sssd plugins
  - fixed README.LDAP updating in the spec file
    Resolves: rhbz#860397
    Resolves: rhbz#876208
    Resolves: rhbz#876578
    Resolves: rhbz#879675
    Resolves: rhbz#879633


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-8
changelog:
  - updated man-page
  - fixed handling of RLIMIT_NPROC resource limit
  - fixed alias cycle detection code
  - added debug messages for tracing of netgroup matching
  - fixed aborting on realloc when displaying allowed commands
  - show the SUDO_USER in logs, if running commands as root
  - sssd: filter netgroups in the sudoUser attribute
    Resolves: rhbz#856901
    Resolves: rhbz#947276
    Resolves: rhbz#886648
    Resolves: rhbz#994563
    Resolves: rhbz#848111
    Resolves: rhbz#994626
    Resolves: rhbz#973228
    Resolves: rhbz#880150


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-9
changelog:
  - sssd: match against ipa_hostname from sssd.conf too when
    checking sudoHost
    Resolves: rhbz#853542


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-1.el6
changelog:
  - Update to upstream 2.1.3 release (#736170)
  - Additional branding (#742264)
  - Disable automember cli (#746717)
  - ipa-client-install sometimes fails to start sssd properly (#736954)
  - ipa-client-install adds duplicate information to krb5.conf (#714597)
  - ipa-client-install should configure hostname (#714919)
  - inconsistency in enabling "delete" buttons (#730751)
  - hbactest does not resolve canonical names during simulation (#740850)
  - Default DNS Administration Role - Permissions missing (#742327)
  - named fails to start after installing ipa server when short (#742875)
  - Duplicate hostgroup and netgroup should not be allowed (#743253)
  - named fails to start (#743680)
  - Global password policy should not be able to be deleted (#744074)
  - Client install fails when anonymous bind is disabled (#744101)
  - Internal Server Error adding invalid reverse DNS zone (#744234)
  - ipa hbactest does not evaluate indirect members from groups. (#744410)
  - Leaks KDC password and master password via command line arguments (#744422)
  - Traceback when upgrading from ipa-server-2.1.1-1 (#744798)
  - IPA User's Primary GID is not being set to their UPG's GID (#745552)
  - --forwarder option of ipa-dns-install allows invalid IP addr (#745698)
  - UI does not grant access based on roles (#745957)
  - Unable to add external user for RunAs User for Sudo (#746056)
  - Typo in error message while adding invalid ptr record. (#746199)
  - Don't use python 2.7-only syntax (#746229)
  - Error when using ipa-client-install with --no-sssd option (#746276)
  - Installation fails if sssd.conf exists and is already config (#746298)
  - External hosts are not removed properly from sudorule (#709665)
  - Competely remove entitlement support (#739060)
  - Add winsync section to ipa-replica-manage man page (#744306)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-2.el6
changelog:
  - ipa-client-install hangs if the discovered server is unresponsive (#745392)
  - Fix minor problems in help system (#747028)
  - Remove help fix from Disable automember patch (#746717)
  - Update minimum version of sssd to 1.5.1-60 to pick up SELinux fix (#746265)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-3.el6
changelog:
  - hbactest fails while you have svcgroup in hbacrule (#746227)
  - Add Kerberos domain mapping for system hostname (#747443)
  - Format certificates as PEM in browser (#701325)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-8.el6
changelog:
  - Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
    xmlrpc-c in RHEL-6 doesn't suppose the dont_advertise option so that is
    not set any more. Another fake header, X-Original-User_Agent, is added
    so there is no more trailing junk after the Referer header.  (#749870)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-9.el6
changelog:
  - Add current password prompt when changing own password in web UI (#751179)
  - Remove extraneous trailing ' from netgroup patch (#749352)


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.49.1.11.5
changelog:
  - Updated to IcedTea6 1.11.5
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-82
changelog:
  - check return value of PK11_Authenticate in ssh-add -n (#782912)
  - document available methods to RequiredAuthentications[12] (#821641)
  - fix ssh-copy-id (#836650)
  - fix segmentation fault in ssh client (#836655)
  - update pam_ssh_agent_auth to 0.9.3 upstream version
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running (#834404)


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-1
changelog:
  - Rebuild for upstream 1.1.8 release
  - Resolves: rhbz#816875 

  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

    + New IPC implementation from libqb
    + New logging implementation from libqb
    + Quieter - info, debug and trace logs are no longer sent to syslog
    + Dropped dependancy on cluster-glue
    + Config and core directories no longer located in heartbeat directories
    + Support for managing systemd services
    + Rewritten local resource management daemon
    + Version bumps for every shared library due to API cleanups
    + Removes crm shell, install/use pcs shell and GUI instead


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested 
    + Warn about node names containing a capital letter 
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21
changelog:
  - Bumped version build/runtime requirements for 'nspr' and 'nss'
  - Added runtime dependency for 'nss-softokn'
  - Bugzilla Bug #1002733 - Apache core generated with sig 5
  - Bugzilla Bug #1016628 - mod_nss httpd segfaulting regularly
  - Bugzilla Bug #866703 - Memory error in mod_nss (eol_memmove.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-3
changelog:
  - Resolves: rhbz #1288477 - mod_nss: detect and fail for colons in
    credentials with FakeBasicAuth 
  - Patch created by jkaluza@redhat.com for 'mod_ssl' in rhbz #1027442 -
    mod_ssl: detect and fail for colons in credentials with FakeBasicAuth


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-4
changelog:
  - Resolves: rhbz #1280276 - Relocate and downgrade NSSProxyNickname error
    message to a warning (removed error message)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.10-5
changelog:
  - Resolves: rhbz #1295490 - Add server-side Server Name Indication
    (SNI) support
  - Resolves: rhbz #1277613, #1295976 - Always shut down the SSL
    session cache when killing the module. This was the source of a
    rather large memory leak and potential crash in the case of
    SIGHUP or service reload.


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-7
changelog:
  - Backported patch from Rob Crittenden
  - Clean up semaphore in nss_pcache on shutdown (#1364561)
  - Update clean semaphore patch to not close pipe twice and to
    shutdown NSS database (#1364561)
  - Update clean semaphore patch to not free the pinList twice.
    (#1364561)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-9
changelog:
  - Backported patch from Rob Crittenden
  - Bugzilla Bug #1390359 - foward port NSS OCSP cache settings (rcritten)


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721306


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-17.el6_3.1
changelog:
  - Fix changelog issue. The dist tag was in each entry and changing the
    build release changed history. (#878219)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.2.19-3
changelog:
  - Fix duplicate documentation (#1001250)
  - Turn on verbose build output via V=1 make
  - Use %?_isa in explicit package deps
  - Fix base package Group tag to "System Environment/Libraries"
  - Remove %defattr


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - New upstrema version with memleaks, crl checks and other fixes
  - enable make check during build
  - drop ecdsa patch as it has been included upstream


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-101
changelog:
  - wifi: support locking connections to a band (5GHz or 2GHz) (rh #1254070)
  - editor: allow VLAN id <0-4095> (rh #1258218)
  - wifi: disable Ad-Hoc WPA connections (rh #787733)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-103
changelog:
  - libnm-util/editor: recognize PKCS#8 private keys and check passwords (rh #1212553)
  - wifi: show certificate files with the *.key extension (rh #1212553)


author: Karsten Hopp <karsten@redhat.com> 1.1.6-15
changelog:
  - disable sane subpackage and sane requirements for mainframes, we don't have
    sane on s390 and s390x


author: Joel Granados <jgranado@redhat.com> - 1.1.6-17
changelog:
  - Fix the shebang issue.  See https://fedoraproject.org/wiki/Features/SystemPythonExecutablesUseSystemPython


author: Steve Dickson <steved@redhat.com> 1.2.3-71
changelog:
  - rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
  - nfsidmap: Clean up other exit status cases (bz 1313603)
  - gssd: Fix inner-loop variable reuse (bz 1313090)
  - mount.nfs manpage: Add nfsmount.conf (bz 1302981)
  - nfs.init: Set exit code on restarts (bz 1205055)


author: Steve Dickson <steved@redhat.com> 1.2.3-73
changelog:
  - mountd: fix is_subdirectory to understand '/' (bz 1331207)
  - mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
  - mount.nfs: Removed supported flag from usage string (bz 1000990)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037926)
  - exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-29
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121510)
  - gssapi: pull in proposed-and-accepted fix for a double free in initiators
    (David Woodhouse, CVE-2014-4343, #1121510)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-30
changelog:
  - ksu: when evaluating .k5users, treat lines with just a principal name as if
    they contained the principal name followed by '*', and don't throw away data
    from .k5users when we're not passed a command to run, which implicitly means
    we're attempting to run the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-34
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.4.1.el6]
changelog:
  - [powerpc] signals: Improved mark VSX not saved with small contexts fix (Seth Jennings) [1044566 1044117]
  - [powerpc] signals: Mark VSX not saved with small contexts (Seth Jennings) [1044566 1044117]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.5.1.el6]
changelog:
  - [net] sctp: fix checksum marking for outgoing packets (Daniel Borkmann) [1046041 1040385]
  - [kernel] ptrace: Cleanup useless header (Aaron Tomlin) [1046043 1036312]
  - [kernel] ptrace: kill BKL in ptrace syscall (Aaron Tomlin) [1046043 1036312]
  - [fs] nfs: Prevent a 3-way deadlock between layoutreturn, open and state recovery (Steve Dickson) [1045094 1034487]
  - [fs] nfs: Ensure that rmdir() waits for sillyrenames to complete (Steve Dickson) [1051395 1034348]
  - [fs] nfs: wait on recovery for async session errors (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Re-use exit code in nfs4_async_handle_error() (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Update list of irrecoverable errors on DELEGRETURN (Steve Dickson) [1051393 1030049]
  - [exec] ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039486 1039487] {CVE-2013-2929}
  - [net] ipv6: router reachability probing (Jiri Benc) [1043779 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1043779 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1043779 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1043779 1029585]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Jiri Benc) [1040826 1030094]
  - [net] ndisc: Update neigh->updated with write lock (Jiri Benc) [1040826 1030094]
  - [net] ipv6: prevent fib6_run_gc() contention (Jiri Benc) [1040826 1030094]
  - [net] netfilter: push reasm skb through instead of original frag skbs (Jiri Pirko) [1049590 1011214]
  - [net] ip6_output: fragment outgoing reassembled skb properly (Jiri Pirko) [1049590 1011214]
  - [net] netfilter: nf_conntrack_ipv6: improve fragmentation handling (Jiri Pirko) [1049590 1011214]
  - [net] ipv4: fix path MTU discovery with connection tracking (Jiri Pirko) [1049590 1011214]
  - [net] ipv6: Make IP6CB(skb)->nhoff 16-bit (Jiri Pirko) [1049590 1011214]
  - [edac] Add error decoding support for AMD Fam16h processors (Prarit Bhargava) [1051394 1020290]
  - [netdrv] bnx2x: correct VF-PF channel locking scheme (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: handle known but unsupported VF messages (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: Lock DMAE when used by statistic flow (Michal Schmidt) [1040497 1029200]
  - [net] ipv6: fix leaking uninitialized port number of offender sockaddr (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: fix addr_len/msg->msg_namelen assignment in recv_error functions (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: prevent leakage of uninitialized memory to user in recv syscalls (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] ipvs: Add boundary check on ioctl arguments (Denys Vlasenko) [1030817 1030818] {CVE-2013-4588}
  - [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) [1038935 1034266]
  - [md] fix calculation of stacking limits on level change (Jes Sorensen) [1035347 1026864]
  - [ata] ahci: fix turning on LEDs in ahci_start_port() (David Milburn) [1035339 1017105]
  - [ata] libata: implement cross-port EH exclusion (David Milburn) [1035339 1017105]
  - [ata] libata add ap to ata_wait_register and intro ata_msleep (David Milburn) [1035339 1017105]
  - [netdrv] igb: Update link modes display in ethtool (Stefan Assmann) [1032389 1019578]


