# changelog

author: Michael Stead <mstead@redhat.com> 0.99.11-1
changelog:
  - 805906: fix missing imports for firstboot (jbowes@redhat.com)
  - Fix RHEL6 firstboot attribute error (dgoodwin@redhat.com)
  - 772218: throw an error if unparsed command line options exist
    (cduryee@redhat.com)
  - Add missing imports to rhsm_login for error dialogs (jbowes@redhat.com)
  - 803386: Display product ID in GUI and CLI. (awood@redhat.com)
  - Fix specfile for el5 firstboot (jbowes@redhat.com)
  - 804227,804076,804228: Handle 404's from old candlepin servers without
    /release (alikins@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for subscribe
    command (mstead@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for register
    command (mstead@redhat.com)
  - 803756,803762: Updated error message for service-level command
    (mstead@redhat.com)
  - fixups for strings from zanata (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 789007: Migration should fail early when attempted with non org admin user.
    (awood@redhat.com)
  - 805024: Hide extra separator along with redeem button. (awood@redhat.com)
  - 800999: Added --servicelevel arg to CLI list command (mstead@redhat.com)
  - 804227: Fix issues with repos --list (alikins@redhat.com)
  - Add proper back/forward logic for firstboot sla subscribe (jbowes@redhat.com)
  - 800933: Display service level and type in CLI list commands.
    (dgoodwin@redhat.com)
  - 789008: Print a more specific error message when Candlepin calls fail.
    (awood@redhat.com)
  - hook up sla firstboot to more registration cases (jbowes@redhat.com)
  - Define globals at module scope. (awood@redhat.com)
  - Remove firstboot subscriptions module (jbowes@redhat.com)
  - Fix broken tests for DST. Stop using time.time() (alikins@redhat.com)
  - Add error cases for firstboot autobind (jbowes@redhat.com)
  - Perform the actual entitlement bind on confirm subs screen
    (jbowes@redhat.com)
  - Set up shared state for AutobindController in firstboot (jbowes@redhat.com)
  - Extract a controller class for sla select logic (jbowes@redhat.com)
  - Break apart autobind first boot module (jbowes@redhat.com)
  - Add some autobind wizard button spacing. (dgoodwin@redhat.com)
  - Always update the icon and notification details on status change.
    (mstead@redhat.com)
  - Only add icon click listeners once. (mstead@redhat.com)
  - Adding notification nag icon support for Registration Required
    (mstead@redhat.com)
  - add firstboot rhsm_autobind to spec file (jbowes@redhat.com)
  - Autobind cancel during registration will now unregister you.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Move back/forward/cancel buttons in sla selection to parent
    (jbowes@redhat.com)
  - Revert "Update CLI to handle server that doesn't support service levels."
    (dgoodwin@redhat.com)
  - Update GUI to handle server that does not support service levels.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Add autobind screen to firstboot (jbowes@redhat.com)
  - Fix firstboot unregister import error. (dgoodwin@redhat.com)
  - Add missing spacers to main window toolbar. (dgoodwin@redhat.com)
  - Fix an error handling bug. (dgoodwin@redhat.com)
  - Get register screen working in el6 firstboot (jbowes@redhat.com)
  - Center wizard's error dialog on main window (mstead@redhat.com)
  - Removing commented out code in register dialog (mstead@redhat.com)
  - Add skip option instead of autobind in register dialog. (mstead@redhat.com)
  - Fix preferences dialog error when not registered. (dgoodwin@redhat.com)
  - Improved error handling for autobind wizard. (dgoodwin@rm-rf.ca)
  - Fix message window warnings. (dgoodwin@rm-rf.ca)
  - Fix alignment on select SLA screen. (dgoodwin@redhat.com)
  - Display the service level selected when confirming autobind subs (dgoodwin
    @rm-rf.ca)
  - Implement Cancel button on autobind wizard screens. (dgoodwin@redhat.com)
  - Allow setting service level from preferences dialog. (dgoodwin@redhat.com)
  - First cut at a preferences dialog. (dgoodwin@redhat.com)
  - Pack SLA's into a scrolled window. (dgoodwin@rm-rf.ca)
  - Handle any exception that happens when the autobind wizard is loaded.
    (mstead@redhat.com)
  - Setting parent window on AutobindDialog and add titles to screens.
    (mstead@redhat.com)
  - Integrating autobind wizard with register gui. (mstead@redhat.com)
  - Fix autobind wizard disappearing on window switch. (dgoodwin@redhat.com)
  - Do not set SLA until user hit's subscribe button. (dgoodwin@redhat.com)
  - Polish autobind glade UI (dgoodwin@redhat.com)
  - Set and use the system's service level. (dgoodwin@redhat.com)
  - Cleaning up Select SLA screen (mstead@redhat.com)
  - Added framework for back button support (mstead@redhat.com)
  - Handle no SLAs cover all installed products. (dgoodwin@rm-rf.ca)
  - Handle launching autobind when no entitlements needed. (dgoodwin@rm-rf.ca)
  - Set detected prod list in Select SLA screen (mstead@redhat.com)
  - Close autobind wizard once complete. (dgoodwin@redhat.com)
  - Hookup actual bind in autobind wizard. (dgoodwin@redhat.com)
  - SelectSLA now keeps track of selected SLA and pass to confirm dialog.
    (mstead@redhat.com)
  - Load the autobind glade file on wizard creation. (mstead@redhat.com)
  - Switch to more explicit screen switching. (dgoodwin@redhat.com)
  - Set screen title when screen is changed. (mstead@redhat.com)
  - Allow screens to pass custum data during wizard screen change.
    (mstead@redhat.com)
  - Hooking up button signals for selectsla (mstead@redhat.com)
  - Add callback to allow screen change in wizard (mstead@redhat.com)
  - Fixing broken tests due to leap year. (mstead@redhat.com)
  - Attempt to keep button bar right aligned. (mstead@redhat.com)
  - Removed the button bar form the wizard. (mstead@redhat.com)
  - Created AutobindWizardScreen to provide contract for AutobindWizard
    (mstead@redhat.com)
  - Display appropriate screen in SLA wizard. (mstead@redhat.com)
  - Fixed GtkWarning: IA__gtk_widget_reparent error when launchig dialog
    (mstead@redhat.com)
  - First cut at adding the Select SLA screen. (mstead@redhat.com)
  - Check if dry-run results cover required products. (dgoodwin@redhat.com)
  - Check dry run autobind results for each service level. (dgoodwin@redhat.com)
  - Sketch out an autobind wizard class. (dgoodwin@redhat.com)
  - Start sketching out the confirm subscriptions screen. (dgoodwin@redhat.com)


author: Doug Ledford <dledford@redhat.com> - 3.3-4
changelog:
  - Fix an issue in the ifup-ib script
  - Fix a problem with the setting of infiniband dev perms
  - Resolves: bz834428


author: Akira TAGOH <tagoh@redhat.com> - 20091215-1
changelog:
  - updates to 20091215.
  - apply some patches to correct typos:
    - man-pages-ja-486655-mkfs.8.patch
    - man-pages-ja-509048-less.1.patch
    - man-pages-ja-515467-strings.1.patch
    - man-pages-ja-527638-chgrp.1.patch
    - man-pages-ja-537103-ip.7.patch
    - man-pages-ja-fix-mdoc.patch
  - clean up the spec file.


author: Akira TAGOH <tagoh@redhat.com> - 20100115-3
changelog:
  - Get rid of manpages related to SysVinit. (#579647)
  - Add deprecated notice for the usage of PORT in sink directives. (#600324)
  - Revise echo(1) (#618934)
  - Add descriptions for the extended and device format fields. (#628891)


author: Akira TAGOH <tagoh@redhat.com> - 20100115-4
changelog:
  - Add manpages related to upstart. (#579641)
  - Fix a typo in getpriority(2) (#682122)
  - Revert a patch to correct wall(1) again (#699301)
  - Revise the outdated tar(1) (#710704)


author: Chrissie Caulfield <ccaulfie@redhat.com> - 3.0.12.1-53
changelog:
  - ccs_tool: Fix example fence device in "ccs_tool create" help
    Resolves: rhbz#871603
  - libccs: don't use uninitialized value in xpathlite
    Resolves: rhbz#874538
  - qdiskd: change log level for an error message
    Resolves: rhbz#888318
  - fenced/dlm_controld/gfs_controld: use cluster_dead for corosync connections
    Resolves: rhbz#888857
  - gfs_controld: avoid mismatching messages with old cgs
    Resolves: rhbz#889564
  - cman|fenced: Fix node killing in case of a 2node cluster that suffers brief network out
    Resolves: rhbz#893925
  - config: fix cluster.conf man page to reflect correct syslog_facility default
    Resolves: rhbz#896191
  - qdiskd: Do not count missed updates from offline nodes
    Resolves: rhbz#920358
  - cman: create and destroy lockfile on restart
    Resolves: rhbz#982670


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-55
changelog:
  - Remove .patch from some patch tmp file names
  - gfs2_edit: Fix bug and add functions from upstream (6 patches)
    Resolves: rhbz#987508


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-57
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts (3 patches)
    Resolves: rhbz#996233


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-59.1
changelog:
  - config: Add missing @ to logging path so logging changes are read correctly
    Resolves: rhbz#1037510


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-59.2
changelog:
  - fenced: keep manual ACk fifo open for longer and also make fenced_external()
    write to it.
    Resolves: rhbz#1079991


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.1
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917909, CVE-2012-1016)


author: Dave Brolley <brolley@redhat.com> - 3.9.2-1
changelog:
  - Improve pmdarpm(1) concurrency complications (BZ 1044297)
  - Fix pmconfig(1) shell output string quoting (BZ 1085401)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-1
changelog:
  - Merged pcp-gui and pcp-doc packages into core PCP.
  - Allow for conditional libmicrohttpd builds in spec file.
  - Adopt slow-start capability in systemd PMDA (BZ 1073658)
  - Resolve pmcollectl network/disk mis-reporting (BZ 1097095)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-3
changelog:
  - Backport PCP daemon signal handling fixes (BZ 847343).
  - Resolve potential signed integer overflow (ET rpmdiff 97915).
  - Update spec to ensure tutorial files live in pcp-doc package.


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-50
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength
  - replace expired testing certificates


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - disallow DH keys with less than 1024 bits in TLS client
  - remove support for weak and export ciphersuites
  - use correct digest when exporting keying material in TLS1.2 (#1376741)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.1.1.el6]
changelog:
  - [kernel] Prevent keyctl new_session from causing a panic (David Howells) [833433 827424] {CVE-2012-2745}
  - [net] ipv6/netfilter: fix null pointer dereference in nf_ct_frag6_reasm() (Petr Matousek) [833410 833412] {CVE-2012-2744}
  - [fs] nfs: Map minor mismatch error to protocol not support error (Steve Dickson) [832365 796352]
  - [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate() (Lukas Czerner) [833034 830209]
  - [ata] libata: Add 2GB ATA Flash Disk/ADMA428M to DMA blacklist (Prarit Bhargava) [832363 812904]
  - [netdrv] r8169: fix typo in firmware filenames (Ivan Vecera) [832359 829211]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.2.1.el6]
changelog:
  - [net] bonding: Fix up refcounting issues with bond/vlan config (Neil Horman) [837843 836164]
  - [net] bonding: Always add vid to new slave group (Neil Horman) [837227 834764]
  - [net] bonding: fix regression on vlan module removal (Neil Horman) [837218 823822]
  - [kernel] futex: Fix uninterruptible loop due to gate_area (Jerome Marchand) [836904 834038]
  - [kernel] futex: Fix regression with read only mappings (Jerome Marchand) [836904 834038]


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.2.el6
changelog:
  - Build only on x86_64
  - Resolves: bz#554863
    (gpxe should not be shipped on i686/ppc64/s390x, only on x86_64)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.3.el6
changelog:
  - gpxe-Don-t-use-lret-2-to-return-from-an-interrupt.patch [bz#579964]
  - Resolves: bz#579964
    (Keyboard cannot be used during pxe boot when using one kind of pxe server)


author: Luiz Capitulino <lcapitulino@redhat.com> - gpxe-0.9.7-6.4.el6
changelog:
  - gpxe-virtio-avoid-padding-for-len-64.patch [bz#672529]
  - Resolves: bz#672529
    (VMs with virtIO NIC can't access the PXE server)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.5.el6
changelog:
  - gpxe-Support-underlying-UNDI-devices-that-don-t-support-i.patch [bz#661840 bz#668005]
  - Resolves: bz#661840
    (undi polling fix for Emulex NICs)
  - Resolves: bz#668005
    ([RFE] gpxe should support polling NICs)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.6.el6
changelog:
  - gpxe-Revert-Support-underlying-UNDI-devices-that-don-t-su.patch [bz#661840]
    (patch is broken)
  - Related: bz#661840
    (undi polling fix for Emulex NICs)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.7.el6
changelog:
  - gpxe-Add-SUPPORTED_-constants-to-pxe_api.h.patch [bz#661840]
  - gpxe-Support-underlying-UNDI-devices-that-don-t-support-i-reapply.patch [bz#661840]
  - Resolves: bz#661840
    (undi polling fix for Emulex NICs)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.8.el6
changelog:
  - gpxe-Replace-virtio-net-with-native-gPXE-driver.patch [bz#743893]
  - gpxe-Fix-DEBUG-builds-for-filenames-with-hyphens.patch [bz#743893]
  - Resolves: bz#743893
    (Failed to PXE boot when using Virtio)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.10.el6
changelog:
  - gpxe-Provide-fetch_setting_origin.patch [bz#972671]
  - gpxe-Use-next-server-from-filename-s-settings-block.patch [bz#972671]
  - Resolves: bz#972671
    (pxe boot fails if next-server details come from a different dhcp server)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-55
changelog:
  - Resolves: #1372315 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-56
changelog:
  - Resolves: #1310582 - when ProxyErrorOverride is On, modcluster return
    503 status code on subsequent requests


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-58
changelog:
  - Resolves: #1349546 - comments no longer allowed at the end of Allow
    from statements and maybe other statements from mod_authz*


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-257
changelog:
  - Add fixes for sblim_sfcbd to make libvirt-cim working.
  - Allow keepalived stream connect to snmpd
  - Allow local_login_t and xdm_t to manage etc_t if authlogin_can_shadow boolean.
  - Allow prelink_transition_domain to send signal to prelink_mask_t.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-258
changelog:
  - Allow unlink lib_t located in /tmp for prelink_mask_t.
  Resolves:#1103674
  - Add support for pnp4nagios
  - Allow mysql to read all domain state
  - Allow sblim_sfcbd_t to search virt images
  - Revert "Remove shadow_t label from /etc/security/opasswd "


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260
changelog:
  - Add virt_getattr_images and call it for sblim_sfcbd_t.
  - We also need to call virt_search_images for sblim.
  Resolves:#1140614


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260.el6_6.1
changelog:
  - Allow osad to execute rhn_check
  - Make osad_t as unconfined domain
  - Allow osad connect to jabber client port
  Resolves:#1169688
  - Allow rhev-agentd to access /dev/.udev/db/block:sr0


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260.el6_6.3
changelog:
  - Allow passenger to accept connection.
  - Update passenger rules from RHEL7.
  Resolves:#1211706
  - Allow mysqld_t to use pam
  - Allow mysqld_t to send audit messages
  Resolves:#1214023
  - Back port labeling for /etc/my.cnf.d dir.
  Resolves:#1212976
  - Add labeling for mariadb log/pid files/dirs.
  Resolves:#1212846
  - Add support for mogos service.
  Resolves:#1212972


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#632442, RT#6773)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713342)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-3
changelog:
  - drop calls to pam_selinux from the gssftp PAM configuration (#713459)
  - reference password-auth instead of system-auth in the gssftp and kshell
    PAM configurations


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-4
changelog:
  - increase the size of the ftp client's command line input buffer (#665834)
  - incorporate patch to correct parsing errors with "restrict" lines in
    ftpusers (#713521, RT#6889)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-7
changelog:
  - add Siddhesh Poyarekar's patch to ensure that when performing an "mdir"
    or "mls" operation, that the FTP client always passes an actually-terminated
    string as the open mode for fopen() (#773538, RT#7079)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-1.el6
changelog:
  - Rebase to 3.32.2
  - Remove patch for RH bug #588457 (part of rebase)
  - Remove patch for RH bug #590877 (part of rebase)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-2.el6
changelog:
  - Add patch for some issues found by Coverity scan
  - Add patch for RH bug #577797 (Cursor misplaced after paste)
  - Add patch for RH bug #615969 (Whitespaces drop on paste)
  - Add patch for RH bug #627199 (Underline/strikeout misplaced in printout)
  - Add patch for RH bug #626690 (Paragraph style not drawn after font style change)


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953084


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.40.1.9.10
changelog:
  - Resolves: rhbz#744788
  - Bumped to IcedTea6 1.9.8
  -removed font copying
   Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: JSSE
    - S7070134, CVE-2011-3558: Hotspot unspecified issue
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
   NetX
    - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest


author: Doug Ledford <dledford@redhat.com> - 2.0.19-1
changelog:
  - Recompile against non-XRC libibverbs
  - Update to OFED 1.4.1 final bits
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 2.0.25-3.el6
changelog:
  - Update config directory for rhel6 (from /etc/ofed to /etc/rdma)
  - Remove compat-dapl and split it off to its own rpm
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 2.0.25-4.el6
changelog:
  - Clean up rpmlint warnings about unversioned obsoletes
  - Make setup quite
  - Include COPYING file in docs
  - Fix naked macro in changelog
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.1.el6
changelog:
  - dapl-2.0.25-signal-handler.patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel
  - dapl-2.0.25-new-providers.patch
    Resolves: bz636596
  - dapl-2.0.25-dat_ia_open_hang.patch
    Resolves: bz649360
  - dapl-2.0.25-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz626541
  - dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz637980


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.2.el6
changelog:
  - Actually install the signal-handler patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel


author: James Antill <james.antill@redhat.com> - 0.9.8-4
changelog:
  - Allow baseurl option to update, when doing updates.
  - Resolves: rhbz#552981
  - Convert stat mtime to int, so comparison can succeed (for update).
  - Resolves: rhbz#553030


author: James Antill <james.antill@redhat.com> - 0.9.9-13
changelog:
  - Rebase to upstream 0.9.9.
  - Createrepo should be multitasking (Rebase).
  - Resolves: rhbz#631989
  - Createrepo ignores umask for files in it's cache.
  - Resolves: rhbz#833350
  - Reduce memory usage for --update, by using sqlite instead of XML (Rebase).
  - Resolves: rhbz#716235
  - Support removing metadata from repodata, in modifyrepo.
  - Resolves: rhbz#714094
  - Fix createrepo to work with --split and --pkglist at the same time.
  - Resolves: rhbz#646644


author: James Antill <james.antill@redhat.com> - 0.9.9-15
changelog:
  - Tempfile ignores umask for files created in cache, use 666 not 777 as well.
  - Resolves: rhbz#833350


author: James Antill <james.antill@redhat.com> - 0.9.9-17
changelog:
  - Use .gz as the default compression for modifyrepo.
  - Document --compress-type in createrepo man page.
  - Resolves: rhbz#874682


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.141
changelog:
  - Fix infinite loop in nscd when netgroup is empty (#1085273).
  - Provide correct buffer length to netgroup queries in nscd (#1074342).
  - Return NULL for wildcard values in getnetgrent from nscd (#1085289).
  - Avoid overlapping addresses to stpcpy calls in nscd (#1082379).
  - Initialize all of datahead structure in nscd (#1074353).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.143
changelog:
  - [ppc] Add VDSO IFUNC for gettimeofday (#1028285).
  - [ppc] Fix ftime gettimeofday internal call returning bogus data (#1099025).


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-48
changelog:
  - Fixes for shorewall policy
  - Allow sssd chown capability
  - Fix label for /usr/bin/mutter
  - Label dead.letter as mail_home_t
  - Allow pcscd to read  hardware state information 
  - Fixes for ulogd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-49
changelog:
  - Add label for /var/cache/rpcbind directory
  - Add chrome_role for xguest
  - Fix amavis_read_spool_files interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-54.el6_0.1
changelog:
  - Remove allow_corosync_rw_tmpfs boolean
  Resolves: #636488
  - Add cluster_var_lib_t type and label for /var/lib/cluster
  Resolves: #636489


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-54.el6_0.2
changelog:
  - Allow mount to communicate with gfs_controld
  - Allow certmonger to search through directories that contain certs
  Resolves: #642607


author: Daniel Novotny <dnovotny@redhat.com> 5.0.0-4
changelog:
  - removed wxWidgets version of the administration frontend (#564091)
    please use bacula-console-bat instead


author: Jan Görig <jgorig@redhat.com> 5.0.0-6
changelog:
  - initscripts improvements
  - fixed consolehelper settings and menu entries
  - Resolves: rhbz#587254 rhbz#587924


author: Jan Görig <jgorig@redhat.com> 5.0.0-7
changelog:
  - fixed multilib issue (#594115)
  - removed hostnames from bconsole.config (#603052)
  - fixed desktop files (#603061)
  - unconfigured service now returns correct return code


author: Jan Görig <jgorig@redhat.com> 5.0.0-8
changelog:
  - added applybaculadate (#651776)
  - fixed umask in make_catalog_backup.pl (#651780)
  - added support for changing bacula user and group in syconfig files
    and changed privilegies of bacula-dir.conf (#651786)
  - fixed bscan alternatives links (#651787)
  - fixed tray monitor default config (#657297)
  - fixed showing wrong size of incremental backup (#689400)


author: Jan Görig <jgorig@redhat.com> 5.0.0-9
changelog:
  - upgrade scriptlet for (#651787)
  - added chkconfig dependency (#712804)
  - added shadow-utils dependency (#712794)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-47.1
changelog:
  - mod_proxy: fix regression caused inherited workers to use a different
    scoreboard slot then the original one (#1252574)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-50.P1
changelog:
  - Lease table overflow crash. (#1133917)
  - Add ignore-client-uids option. (#1196768)
  - dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
  - VLAN ID is only bottom 12-bits of TCI. (#1259552)
  - dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
  - dhclient-script: make_resolv_conf(): Keep old nameservers
    if server sends domain-name/search, but no nameservers. (#1269595)


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-55.P1
changelog:
  - Resolves: #1527995 - allow static route with a 0.0.0.0 next-hop address
  - Related: #1527995 -  install link-local static routes with correct scope


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6_1.3
changelog:
  - kvm-raw-posix-Linearize-direct-I-O-on-Linux-NFS.patch [bz#720999]
  - Resolves: bz#720999
    (QEMU should use pass preadv/pwritev a single vector when using cache=none and NFS)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6_1.4
changelog:
  - kvm-CVE-2011-2527-os-posix-set-groups-properly-for-runas.patch [bz#722582]
  - Resolves: bz#722582
    (CVE-2011-2527 qemu: when started as root, extra groups are not dropped correctly [rhel-6.1.z])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6_1.5
changelog:
  - kvm-Revert-CVE-2011-2527-os-posix-set-groups-properly-fo.patch [bz#722582]
  - Related: bz#722582
    (CVE-2011-2527 qemu: when started as root, extra groups are not dropped correctly [rhel-6.1.z])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6_1.6
changelog:
  - kvm-clarify-support-statement-in-KVM-help.patch [bz#725543]
  - Resolves: bz#725543
    (RHEL6.2: Clarify support statement in KVM help)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6_1.7
changelog:
  - kvm-vhost-fix-double-free-on-device-stop.patch [bz#726609]
  - kvm-report-serial-devices-created-with-device-in-the-PII.patch [bz#727896]
  - Resolves: bz#726609
    ([REG][6.1] After executing virsh dump with --live option and the completion, the subsequent virsh dump command to the same domain behaves abnormally)
  - Resolves: bz#727896
    (ACPI description of serial and parallel ports incorrect with -chardev/-device)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6_1.8
changelog:
  - kvm-device-assignment-handle-device-with-incorrect-PCIe-.patch [bz#727468]
  - Resolves: bz#727468
    (Unable to attach PCI device on a booted virt guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6_1.9
changelog:
  - kvm-ccid-Fix-buffer-overrun-in-handling-of-VSC_ATR-messa.patch [bz#751311]
  - CVE: CVE-2011-4111
  - Resolves: bz#751311
    (CVE-2011-4111 qemu: ccid: buffer overflow in handling of VSC_ATR message [rhel-6.1.z])


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Remove two unused patches and apply a needed one that was missed
  - Resolves: Bug 1112136 - Rebase nss in RHEL 6.5.Z to NSS 3.16.1


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-7
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1145431 - CVE-2014-1568


author: Milan Crha <mcrha@redhat.com> - 2.28.3-13.el6
changelog:
  - Add patch for RH bug #634949 (crash with google address book)
  - Add patch for RH bug #660356 (crash with calendar views and webcal)


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.12.1.el6]
changelog:
  - [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
  - [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
  - [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
  - [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
  - [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
  - [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
  - [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.13.1.el6]
changelog:
  - [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
  - [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
  - [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
  - [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
  - [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
  - [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [963564 886420]
  - [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [963564 886420]
  - [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [963564 886420]
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
  - [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
  - [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
  - [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
  - [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
  - [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
  - [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
  - [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
  - [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
  - [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
  - [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
  - [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
  - [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
  - [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.0
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Add RHEL version of b40 tarball.
  - Require mailcap at build time as well, so configure finds /etc/mime.types (PR2800)
  - Remove unneeded dependency on jakarta-commons-logging, as VisualVM is no longer included.
  - Resolves: rhbz#1350044


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-31
changelog:
  - ccpp: do not log to syslog while dumping syslog
  - daemon: harden against race conditions in DELETE
  - upload: validate and sanitize uploaded dump directories
  - a-a-i-d-t-a-cache: sanitize umask and arguments
  - ccpp: avoid overriding system files by coredump
  - make the dump directories owned by root by default
  - ccpp: emulate selinux for creation of compat cores
  - ccpp: do not override existing files by compat cores
  - ccpp: fix symlink race conditions
  - do not read data from root directories
  - ask for root's password in abrt-cli and abrt-gui
  - Resolves: #1199261, #1211967


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-32
changelog:
  - add usermode and pam used by abrt-(cli|gui) to Requires
  - correct the description of PrivateReports in abrt.conf
  - Related: #1211967


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-33
changelog:
  - ccpp: never remove user core files
  - suid debug info wrapper: do not open build_ids as root
  - abrtd: process only dump directories owned by root
  - Related: #1211967


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.8-37
changelog:
  - Add AllowedUsers and AllowedGroups feature
  - Add IgnoredPath option
  - Resolves: #1256705, #1208713


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-24
changelog:
  - switch ownership of new directories from "abrt:user" to "user:abrt"
  - fix a bug allowing libreport to read files outside dump directories
  - Related: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282144


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-29
changelog:
  - Change reporting workflow to enhance the quality of opened customer cases
  - Limit the description section for ABRT reported cases
  - Resolves: #1258474, #1261398


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-31
changelog:
  - Add pkg_vendor, reproducer and reproducible to description
  - Attach all dump dir's element to a new case
  - Change libreport-version to 2.0.9.1
  - Resolves: #1261398


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885310


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.3355.1.el5
changelog:
  - Update to final ofed 1.4.1 bits
  - Compile against non-XRC libibverbs
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.2.0-0.3562.2.el6
changelog:
  - Forward port to the Fedora MPI packaging guidelines and build for
    Red Hat Enterprise Linux 6
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.2.0-0.3562.3.el6
changelog:
  - Fix an issue with usage of _cc_name_suffix that caused a broken define in
    our module file
  - Related: bz543948


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-0.3563.rc1.1.el6
changelog:
  - Upgrade to rc1 from upstream
    Munge release value so it'll upgrade cleanly.
    Add -build patch and modify spec file so rc1 will build.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-0.3563.rc1.2.el6
changelog:
  - Fix psm RPM macros so that we can build a -psm variant of mpitests
  - Remove the mandesc files that rpmdiff doesn't like.
    Related: rhbz725016


author: Thomas Sailer <t.sailer@alumni.ethz.ch> - 1.37.0-1
changelog:
  - update to 1.37.0
  - actually tell the build system about the target os
  - build also boost DLL's that depend on other boost DLL's


author: Thomas Sailer <t.sailer@alumni.ethz.ch> - 1.37.0-2
changelog:
  - fix %defattr
  - fix description of static package
  - add comments that detail the failures linking the test framework / exec monitor DLL's


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.5.el6_3
changelog:
  - Bumped to 2.3.5
  - Changed BR to java7-devel >= 1:1.7.0 as required by CORBA changes in 2.3.5
  - Resolves: rhbz#906707


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.4.1.el6]
changelog:
  - [fs] proc: stats: Use arch_idle_time for idle and iowait times if available (Steve Best) [841579 841149]
  - [drm] i915: fix integer overflow in i915_gem_execbuffer2() (Jacob Tanenbaum) [824553 824555] {CVE-2012-2383}
  - [usb] core: change the memory limits in usbfs URB submission (Don Zickus) [841667 828271]
  - [usb] core: unify some error pathways in usbfs (Don Zickus) [841667 828271]
  - [netdrv] ixgbe: BIT_APP_UPCHG not set by ixgbe_copy_dcb_cfg() (Andy Gospodarek) [840156 814044]
  - [netdrv] ixgbe: driver fix for link flap (Andy Gospodarek) [840156 814044]
  - [net] bridge: Fix enforcement of multicast hash_max limit (Thomas Graf) [840023 832575]
  - [net] bluetooth: fix sco_conninfo infoleak (Jacob Tanenbaum) [681307 681308] {CVE-2011-1078}
  - [wireless] ipw2200: remove references to CFG80211_WEXT config option (John Linville) [841406 839311]
  - [netdrv] be2net: enable GRO by default (Ivan Vecera) [838821 837230]
  - [virt] kvm/vmx: Fix KVM_SET_SREGS with big real mode segments (Orit Wasserman) [841411 756044]
  - [fs] writeback: merge for_kupdate and !for_kupdate cases (Eric Sandeen) [832360 818172]
  - [fs] writeback: fix queue_io() ordering (Eric Sandeen) [832360 818172]
  - [fs] writeback: don't redirty tail an inode with dirty pages (Eric Sandeen) [832360 818172]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.5.2.el6]
changelog:
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12
changelog:
  - Fix spicevmc-related crash which could be triggered with older clients
    Resolves: rhbz#1163480
  - Fix crash when using VNC + QXL + rhel-6.0.0 machine type
    Resolves: rhbz#1135372


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12.1
changelog:
  - Avoid race conditions reading monitor configs from guest. This race could
    trigger memory corruption host-side
    Resolves: rhbz#1239124


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-13
changelog:
  - Fix " qemu-kvm: spicevmc.c:324: spicevmc_red_channel_alloc_msg_rcv_buf:
    Assertion `!state->recv_from_client_buf' failed." assertion during migration
    Resolves: rhbz#1264113


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-14
changelog:
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Victor Toso <victortoso@redhat.com> - 0.12.4-15
changelog:
  - Avoid spice assertion when changing sized stream
    Resolves: rhbz#1274575
  - Make red_client_{ref,unref} thread safe to avoid crash
    Resolves: rhbz#1361946


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-16
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-55
changelog:
  - daemon: Suppress logging of VIR_ERR_NO_DOMAIN_METADATA (rhbz#1260864)
  - Allow <source> for type=block to have no dev (rhbz#1220197)
  - qemu: event: Properly handle spice events (rhbz#1236581)
  - qemu: event: Clean up VNC monitor handling (rhbz#1236581)
  - qemu: split out cpuset.mems setting (rhbz#1263263)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1263263)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1251532)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1251532)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1251532)
  - qemu: fix hotplugging cpus with strict memory pinning (rhbz#1263263)
  - storage: Track successful creation of LV for removal (rhbz#1232170)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-56
changelog:
  - qemu: snapshot: Fix return value of external checkpoint with no disks (rhbz#1292312)
  - qemu: snapshot: Fix modification of vm object without job (rhbz#1290647)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachInterface (rhbz#1229128)
  - RHEL: virsh: remove duplicate --config for 'virsh update-device' (rhbz#1224037)
  - Update ESX driver to always use privateData (rhbz#1213348)
  - esx: Simplify VI (vSphere) API and VMware product version handling (rhbz#1213348)
  - conf: net: Correctly switch how to format address fields (rhbz#1299700)
  - qemu: Refuse to create snapshot of a disk without source (rhbz#1299411)
  - Build all binaries with PIE (rhbz#1242156)
  - Enable full RELRO mode (rhbz#1242156)
  - Don't duplicate compiler warning flags when linking (rhbz#1242156)
  - Simplify RELRO_LDFLAGS (rhbz#1242156)
  - Fix AM_LDFLAGS typo (rhbz#1242156)
  - Pass AM_LDFLAGS to driver modules too (rhbz#1242156)
  - RHEL: Enable RELRO for python modules (rhbz#1242156)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-57
changelog:
  - vmx: Relax virtualHW.version check (rhbz#1300574)
  - qemu: snapshot: Don't leak XML definition and forget to unlock job (rhbz#1305793)
  - qemu: Fix formatting flags in qemuDomainSaveImageOpen (rhbz#1307094)
  - network: Resolve some issues around vlan copying (rhbz#1300843)
  - network: fix connections count in case of allocate failure (rhbz#1300843)
  - network: consolidate connection count updates for device pool (rhbz#1300843)
  - network: consolidated info log for all network allocate/free operations (rhbz#1300843)
  - util: increase libnl buffer size (rhbz#1276478)
  - util: reduce debug log in virPCIGetVirtualFunctions() (rhbz#1276478)
  - util: improve error reporting in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: add missing newline (rhbz#1276478)
  - util: eliminate bogus error log in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: clean up and expand 802.1QbX negotiation logging (rhbz#1276478)
  - util: report the MAC address that couldn't be set (rhbz#1276478)
  - util: reset MAC address of macvtap passthrough physdev after disassociate (rhbz#1276478)
  - bitmap: add way to find next clear bit (rhbz#1276478)
  - Introduce virBitmapIsBitSet (rhbz#1276478)
  - util: Introduce flags field for macvtap creation (rhbz#1276478)
  - virnetdevmacvlan.c: Introduce mutex for macvlan creation (rhbz#1276478)
  - util: keep/use a bitmap of in-use macvtap devices (rhbz#1276478)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-61
changelog:
  - virsh: Properly display block job type (rhbz#1326653)
  - spec: proper soft static allocation of qemu uid (rhbz#1351792)
  - Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
  - qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
  - tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
  - configure: allow setting default TLS priority string (rhbz#1333415)
  - rpc: allow priority string to be passed to TLS context (rhbz#1333415)
  - libvirtd: add config option for TLS priority (rhbz#1333415)
  - remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
  - Pass config file object through to driver open methods (rhbz#1333415)
  - remote: allow TLS priority to be customized (rhbz#1333415)
  - qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-62
changelog:
  - qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
  - qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
  - migration: add support for migrateURI configuration (rhbz#1347389)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.5
changelog:
  - daemon: Fix leak after listing volumes (CVE-2013-1962)
  - Don't try to add non-existant devices to ACL (rhbz#958837)
  - Avoid spamming logs with cgroups warnings (rhbz#958837)
  - audit: Properly encode device path in cgroup audit (rhbz#958839)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.6
changelog:
  - qemu: Set correct migrate host in client_migrate_info (rhbz#966587)
  - qemu: Fix crash in migration of graphics-less guests. (rhbz#966587)
  - Fix F_DUPFD_CLOEXEC operation args (rhbz#966707)
  - cgroup: Be robust against cgroup movement races (rhbz#966710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.7
changelog:
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#966587)
  - qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#966587)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.9
changelog:
  - qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976543)
  - build: Fix build with -Werror (rhbz#976543)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.10
changelog:
  - qemu: Avoid leaking uri in qemuMigrationPrepareDirect (rhbz#984578)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#984578)
  - conf: Don't fail to parse <boot> when parsing a single device (rhbz#1003934)
  - Plug leak in virCgroupMoveTask (rhbz#984556)
  - Fix invalid read in virCgroupGetValueStr (rhbz#984561)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.12
changelog:
  - Introduce APIs for splitting/joining strings (rhbz#1006265)
  - Rename virKillProcess to virProcessKill (rhbz#1006265)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006265)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006265)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006265)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006265)
  - Include process start time when doing polkit checks (rhbz#1006265)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.19
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the 
  - parent namesspace.
  - restorecond -u needs to watch terminal for exit if run outside of dbus.
  - Fix unchecked return codes
  Related: #785678


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-37
changelog:
  - Add explicit dependency for KDM subpackage to require -libs subpackage
    at the same version
    Resolves: bz#1304735


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-17
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports MacroSurprise or SetuidMissingRELRO rhbz#812284
  - abrt missing dependency: libreport-plugin-bugzilla rhbz#828673
  - Same values for variables  'DumpLocation' & 'WatchCrashdumpArchiveDir'  stops mailx plugin rhbz#854668
  - abrt-vmcore repeats processing old vmcores on the service (re)start rhbz#885044
  - abrt-gui help menu item points to generic RHEL documentation rhbz#903195
  - Desktop file is named %{desk-vendor}-abrt.desktop rhbz#905822
  - 'post-create' on 'xxx' exited with 1 Corrupted or bad directory xxx, deleting rhbz#909617
  - abrt.pth prevents python virtualenv creation rhbz#912672
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - provide the python API for abrt rhbz#952704
  - abrtd marks problems having count > 1 as duplicates rhbz#886631
  - Resolves: #886631, #905429, #961231, #961231, #961231, #961231, #812284, #828673, #828673, #759443, #759443, #903195, #854668, #905822, #909617, #885044, #912672, #912672, #952704, #875260


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.71-5.b17
changelog:
  - returned jre_versionless_lnk/bin instead of jrebindir and
  -   and    sdk_versionless_lnk/bin isntead of sdkbindir
  - Resolves: rhbz#1295752


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.8-41
changelog:
  - Limit corefile dump to the value set as MaxCrashReportsSize
  - Correct Required-Start
  - Avoid infinite crash loops
  - Resolves: #1333068, #1324586, #1346198


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-73
changelog:
  - Fix failover backend options parsing (bug #1231322).
  - The socket backend could go into an infinite loop with certain printers
    (bug #1276772, STR #3622)
  - dnssd backend: don't crash if avahi gives a callback with no TXT record
    (bug #1269305)
  - Don't unload jobs that couldn't be saved (bug #1283003, STR #4742).


author: David Sommerseth <davids@redhat.com> - 1.28-9
changelog:
  - Added packaging of COPYING (#974147)
  - Removed packaging of INSTALL (info not needed for binary installs)


author: David Sommerseth <davids@redhat.com> - 1.28-11
changelog:
  - Avoid deletion of /dev/null (#1245302)
  - Fix sg_persist returns "Host_status=0x11 is invalid", backport of DID_TRANSPORT_*/DID_TARGET_/DID_NEXUS_FAILURE flags (#886611)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-15
changelog:
  - save backups of password files when toggling shadow support (#852997)
  - read and overwrite only the general ldap base (#912851)
  - use sss for automount
  - more robust initialization of SSSDConfig (#1016404)
  - output error message from write error
  - properly set IPAV2DOMAINJOINED and call ipa client uninstall
    when appropriate (#1023286)
  - add umask=0077 to initial pam_mkhomedir args (#1025065)
  - fix broken --help output (#1066811)
  - check whether ldap URI is valid (#707590)
  - restart only services affected by configuration changes (#1023293, #975203)
  - report error from winbind and ipa domain joins


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-1
changelog:
  - rebase to the latest upstream
  - partly fixed probles with suided cores
  - fixed confusing message about "moved copy"
  - properly enable daemons on update from previous version
  - added default config file for mailx
  - cli doesn't depend on python plugin
  - properly init i18n all plugins
  - added missing man page to abrt-cli
  - added warning when user tries to report already reported problem again
  - added vmcores plugin
  - Resolves: #759375, #783450, #773242, #771597, #770357, #751068, #749100, #747624, #727494


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-2
changelog:
  - updated translation
  - added man page for a-a-analyze-vmcore
  - minor fixes in kernel oops parser
  - Related: #759375


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-5
changelog:
  - removed the "report problem with ABRT btn" rhbz#809587
  - fixed double free
  - fixed ccpp-install man page
  - Resolves: #809587, #796216, #799027


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update to aarch64-jdk8u151-b12.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028).
  - Update RH1191652 (root) to accomodate 8151841 (GCC 6 support).
  - Update RH1163501 to accomodate 8181048 (crypto refactoring)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Fix premature shutdown of NSS in SunEC provider.
  - Move -ffp-no-contract fix to local fixes section.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
  - Resolves: rhbz#1499207


author: Jaroslaw Polok <Jaroslaw.Polok@cern.ch> - 3.2.0-0.beta77
changelog:
  - update to latest Beta
  - NOTE: Original developer stopped maintenance: http://www.1st-setup.nl/wordpress/?page_id=133


author: Jaroslaw Polok <Jaroslaw.Polok@cern.ch> - 3.2.2
changelog:
  - update to 3.2.2 and name change.
  - maintainer change: https://github.com/Ericsson/exchangecalendar/releases


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038985 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-14
changelog:
  - Update to upstream 2.0.0rc3 (#680993)
  - Set minimum version of sssd to 1.5.1-12
  - Remove SuitespotGroup patch
  - Rebase remove-pkinit patch


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-7.1
changelog:
  - resolves: #913282
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Florian Festi <ffesti@redhat.com> - 9.0.3-40
changelog:
  - Fix verrel in kmodtool when used with variants
  - Resolves: #795577
  - Add %_smp_ncpus_max macro to allow adjusting the number of processors used
  - Resolves: #669638
  - Fix brp-java-repack-jars for jar files that contain non-standard permissions
  - Resolves: #822073


author: Florian Festi <ffesti@redhat.com> - 9.0.3-43
changelog:
  - Adjust location of kabi-whitelists
  - Resolves: #842761
  - Be stricter with she bang lines in find-requires
  - Resolves: #1179521


author: Soren Sandmann <ssp@redhat.com> 1.13.0-23.1
changelog:
  * Wed Oct 23 2013 Adam Jackson <ajax@redhat.com> 1.13.0-23
  - Fix root window damage reports when Xinerama is active (#919165)


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.190
changelog:
  - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296029).
  - Update malloc free_list cyclic fix (#1264189).
  - Update tzdata-update changes (#1200555).


author: Miroslav Lichvar <mlichvar@redhat.com> 14:2.1a15-14
changelog:
  - update ethercodes.dat
  - mark ethercodes.dat as noreplace
  - include Debian arp2ethers and massagevendor man pages (#578201)
  - don't include massagevendor-old script anymore


author: Jarod Wilson <jarod@redhat.com> 0.2.11-8
changelog:
  - Don't touch transparent hugepage or cpufreq settings if not supported (#621877)
  - Add new enterprise-storage profile based on throughput-performance:
    * Disables barriers for all non-root non-/boot file systems (#624736)
    * Increases the default readahead value from 128kb to 512kb (#624828)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-1
changelog:
  - reduced FSB support on Asus EEE netbooks with Intel Atom
  - consolidate ktune script functions in tuning profiles
  - disable tuned daemon on s390/s390x architectures
  - set readahead by multiplying previous setting
  - udev rules and script for CFQ and multipath devices scheduler tuning
  - fix hal-disable-polling if no CD drives present
  - added support for architecture-specific configuration files
  - special sysctl setting for s390x arch in 'throughtput-performance' profile
  - overall profiles update
  - 'tuned-adm active' shows status of tuned and ktune services as well
  - proper configuration files setup after fresh instalation
  - tuned-utils: added license text
  - bash completion support
  - tuned-adm: profile validity check
  - Fixed 577983 - AttributeError: Nettool instance has no attribute 'interface'


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-2
changelog:
  - add missing man pages (#625850)
  - update profiles description (#619812)
  - fix typos in laptop-battery-profile script
  - disable tuned powersaving in disk-spindown, *-performance and enterprise-storage


author: Thomas Wörner <twoerner@redhat.com> 0.2.19-5
changelog:
  - fixed handling of stdin/stdout/stderr during daemon creation (rhbz#695480)
  - fixed device type determination (rhbz#707079)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-7
changelog:
  - fix: apply scheduler settings to vd* devices (#725497)
  - enhancement: add virtual-host profile (#740976)
  - enhancement: add virtual-guest profile (#740977)
  - fix: diskdevstat and netdevstat command line error handling (#747210)


author: Adam Tkac <atkac redhat com> 1.0.90-0.7.20100115svn3945
changelog:
  - make libvnc.so module working again (r4005, r4024, r4025)
  - vncviewer could crash on slow links (r4003, r4004)


author: Adam Tkac <atkac redhat com> 1.0.90-0.8.20100115svn3945
changelog:
  - fix memory leak in Xvnc (#603731)
  - update URL about SSH tunneling in the sysconfig file (#601996)
  - add pam-devel to BuildRequires, X server needs it


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20110117svn4237
changelog:
  - rebase to r4237
  - patches merged
    - tigervnc11-noexecstack.patch
    - tigervnc11-r3963.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch
    - tigervnc11-r4003.patch
    - tigervnc11-r4004.patch
    - tigervnc11-r4005.patch
    - tigervnc11-r4024.patch
    - tigervnc11-r4025.patch
    - tigervnc11-rh603731.patch
    - tigervnc11-options.patch
  - build with TLS support


author: Adam Tkac <atkac redhat com> 1.0.90-0.12.20110117svn4237
changelog:
  - tigervnc-server now requires perl (#634161)
  - use locales specified in sysconfig/i18n (#632530)
  - read password file correctly when fread is interrupted (#645755)


author: Adam Tkac <atkac redhat com> 1.0.90-0.15.20110314svn4359
changelog:
  - flush internal Xvnc event queue early to avoid overflowing
  - improve compatibility with viewers with wrong VeNCrypt implementation
    (vinagre)
  - link libvnc.so with "-z now" to catch all undefined symbols
  - fix undefined symbol "getvnchomedir" in libvnc.so


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1454804


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1259687 - sssd_nss memory usage keeps growing on
                              sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when
                              trying to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1264705 - Allow SSSD to notify user of denial due to AD
                             account lockout


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-15
changelog:
  - Require a newer selinux-policy to avoid issues when prompting for SC PIN
  - Related: rhbz#1299066 - smartcard login does not prompt for pin when
                            ocsp checking is enabled (default config)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-16
changelog:
  - Resolves: rhbz#1308939 - After removing certificate from user in IPA
                             and even after sss_cache, FindByCertificate
                             still finds the user


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.3-3
changelog:
  - allow 'Open Folder in Tabs' in Konsole to support SSH bookmarks (kde#177637)
    (upstream patch backported from 4.4)


author: Than Ngo <than@redhat.com> - 6:4.3.4-5
changelog:
  - Resolves: bz#631481, Undecodable sequence message starting konsole
  - Resolves: bz#609039, Password & User account becomes non responding


author: Ray Strode <rstrode@redhat.com> 2.30.4-15
changelog:
  - Drop 2 second delay when restarting conversations
  - Drop "Cancelling" message in all circumstances.  It's very
    fast out of the box, so we don't really need it, and we
    wouldn't want to slow canceling down just so the user can
    read the message
  - Add 2 second delay for all messages coming from pam modules
    Resolves: #563297


author: Ray Strode <rstrode@redhat.com> 2.30.4-16
changelog:
  - Fix some widget layout issues related to multi-stack
    Resolves: #614669
  - Make "Other..." item only run password stack
    Resolves: #615086
  - Add workaround for libc not handling nsswitch changes at runtime.
    Resolves: #621700


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-76
changelog:
  - 1344782 - Banner pages do not show time-at-creation or time-at-processing
  - 1219571 - Invalid memory accesses lead to crash when configured class has implicit class as first member


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-77
changelog:
  - 1099617 - Using "lp -o orientation-requested=6" with a PDF file has no effect.
  - 1268131 - Printing PDF with fit-to-page doesn't take printer HW margins into account


author: Lukáš Nykrýn <lnykryn@redhat.com> - 0.6.5-15
changelog:
  - fix issue with multiple nih_error_raise calls in previous patch
  - reset console only for console owners (#1046190)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b15
changelog:
  - Update to aarch64-jdk8u101-b15.
  - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching.
  - Drop additional hunk for 8147771 which is now applied upstream.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14
changelog:
  - Update to aarch64-jdk8u102-b14.
  - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  - Move 8158260 to 8u112 section following its backport to 8u.
  - Resolves: rhbz#1381990


author: David Knox <dknox@redhat.com> 0:6.0.24-20
changelog:
  - Resolves: rbz# 676922 
  - Resolves: init script LSB compliance
  - Resolves: multiple instances of tomcat.
  - Resolves: tomcat-juli missing symlink


author: David Knox <dknox@redhat.com> 0:6.0.24-23
changelog:
  - Resolves: rhbz#674601
  - Reverse - tomcat user requires login shell
  - Reverse - rhbz 611244 tomcat-juli missing symlink
  - PM/QE decision to include only the security fixes. The rhbzs
  - will be taken care of during the rebase to 6.0.33.
  - Did not Reverse - rhbz 676922 - additionally instancs of tomcat are broken
  - Too many users depend upon it.


author: David Knox <dknox@redhat.com> 0:6.0.24-24
changelog:
  - Resolves: rhbz#674601
  - Removed wildcard in main %files that caused duplicate ownership
  - of log4j.properties


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.30-3
changelog:
  - Force krb5 version that contains new build layout.
  - Add non-upstream patch to exclude iptables from the appliance.
    resolves: rhbz#858648


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-1
changelog:
  - initial import of rsyslog7
    changes since rsyslog-5.8.10-8:
    - rebase to 7.4.10
    - drop patches merged upstream
    - regenerate patches for rhbz820311, rhbz886117
    - add a patch to remove dependency on liblogging-stdlog
    - add a patch to fix compilation of omelasticsearch
      on platforms without atomic instructions
    - mark package as conlicting with rsyslog
    - update specification of dependencies
    - add the rsyslog-recover-qi.pl script
    - add new plugins
      imdiag, mmanon, mmjsonparse, mmsnmptrapd, omelasticsearch,
      pmaixforwardedfrom, pmcisconames, pmsnare
    - add new subpackage rsyslog-elasticsearch
    - make the build more verbose by adding 'V=1' to make
    - update conf file for new omusrmsg syntax
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - drop default compatibility mode from SYSLOGD_OPTIONS
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - fix typos in the spec file
    resolves: #869600


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-2
changelog:
  - amend rsyslog.conf man page with information on omitting file sync
    resolves: #994127
  - add a patch to support TCP KEEPALIVE in imrelp
    resolves: #1009048
  - add a patch to fix missing note about message repetition in imuxsock
    resolves: #1020431
  - add a patch to prevent division-by-zero errors
    resolves: #996862
  - add a patch to fix the name of the PID file in man page
    resolves: #1009882
  - add a patch to remove references to Google ads from the html docs
    resolves: #1030040
  - add missing image files referenced from the html docs
    resolves: #1031673
  - add a patch to backport the mmcount module
    resolves: #1030206
  - add a patch to support arbitrary number of listeners in imuxsock
    resolves: #1096732
  - remove clean section
    resolves: #869600
  - add a list of bugs fixed by rebasing to 7.4.10
    resolves: #996857, #1007409, #1029910, #1061614, #1070689


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-4
changelog:
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202455
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224335
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1184722
  - add a patch to remove a limit on number of sources in imfile
    resolves: rhbz#1122802
  - add an explicit, versioned requirement on librelp to work
    around an incorrect soname
    resolves: rhbz#1191680
  - make logrotate tolerate missing log files
    resolves: rhbz#1252909
  - replace bundled docs with updated upstream documentation
    remove reference to queue.spoolDirectory
    drop empty NEWS file
    resolves: rhbz#1238451
    resolves: rhbz#1243293


author: Radovan Sroka <rsroka@redhat.com> 7.4.10-7
changelog:
  - fix warning in net.c in debug mode
  - added rsyslog-7.4.10-fix-net-warning.patch
    resolves: rhbz#1388420


author: Jeff Law <law@redhat.com> - 2.12-1.47.el6_2.4
changelog:
  - Make implementation of ARENAS_TEST and ARENAS_MAX match
    documentation (#769594)
  - Check malloc arena atomically  (#769594)


author: Jeff Law <law@redhat.com> - 2.12-1.47.el6_2.9
changelog:
  - Always use another area after a failed allocation in the
      main arena (#795328)
    - Remove sse3 memcpy (#695812) changes (#799259)


author: Than Ngo <than@redhat.com> - 1.6.0-2
changelog:
  - fix #516339, allow to enable/disable timstamp to avoid the multilib issue
    HTMP_TIMESTAMP is disable by default


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-1
changelog:
  - Rebase to upstream e174ec84857e087210b9dacee3318f8203176129 (1.1.15)

    Resolves: rhbz#1253325
    Resolves: rhbz#1312040
    Resolves: rhbz#1322595
    Resolves: rhbz#1326350
    Resolves: rhbz#1356727


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-2
changelog:
  - Include upstream fixes to init scripts
   - ClusterMon resource should verify pid is crm_mon's
   - Fix CVE-2016-7035

    Resolves: rhbz#1322595
    Resolves: rhbz#1360234
    Resolves: rhbz#1374775


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-3
changelog:
  - Show correct help and error messages in attrd_updater
   - Preserve rolling upgrades involving Pacemaker Remote nodes
   - Update status of clufter in README_RGManager_porting

    Resolves: rhbz#1388558
    Resolves: rhbz#1389028


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-4
changelog:
  - crm_report should avoid grep on binary logs
   - document that clufter is now supported

    Resolves: rhbz#1405205


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-1
changelog:
  - Rebase to upstream bfe4e8042065eb61506cd3ff10fc5f02dd2f3bb7 (1.1.18 plus patches)
   - Resolves: rhbz#1388102
   - Resolves: rhbz#1427643
   - Resolves: rhbz#1500510
   - Resolves: rhbz#1513199


author: Richard W.M. Jones <rjones@redhat.com> - 2.19.1-4
changelog:
  - Switch to using upstream (GNU) binutils 2.19.1.  It's exactly the
    same as the MinGW version now.


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-6
changelog:
  - Bugzilla Bug #746365 - CRLS are not downloaded when mod_revocator module
    is loaded successfully. And no error was thrown in httpd error_log -
    mharmsen
  - Add 'autoreconf -fvi' to build section - mharmsen
  - Fix shutting down Apache if CRLUpdateCritical is on and a CRL
    is not available at startup (#654378) - rcritten@redhat.com
  - Updated mod_revocator-kill patch. The ownership of the semaphore used to
    control access to crlhelper was not always changed to the Apache user
    (#648546) - rcritten@redhat.com
  - Actually apply the patch (#648546) - rcritten@redhat.com
  - Fix killing the web server if updatecritical is set (#648546) -
    rcritten@redhat.com


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-8
changelog:
  - Bugzilla Bug #748577 - mod_revocator does not shut down httpd server if
    expired CRL is fetched
  - Bugzilla Bug #748579 - mod_revocator does not bring down httpd server if
    CRLUpdate fails


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-9
changelog:
  - Bugzilla Bug #749696 - httpd (32 bit) failed to start if mod_revocator
    (32 bit) is installed on ppc64


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-10
changelog:
  - Bugzilla Bug #861999 - mod_revocator exec CLR URIs fail to load: unable to
    load Revocation module, NSS error -8187 - stephen.capstick64@gmail.com
    (mod_revocator-waitpid.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-11
changelog:
  - Backported patch from Rob Crittenden
  - Clean up semaphore in crlhelper on shutdown (#1326841)
  - Update URL to https://fedorahosted.org/mod_revocator/
  - Respin to fix segfault in cleanup call. (#1326841)


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.12.1.el6]
changelog:
  - [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.13.1.el6]
changelog:
  - [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
  - [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.14.1.el6]
changelog:
  - [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.16.1.el6]
changelog:
  - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
  - [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
  - [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
  - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
  - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.17.1.el6]
changelog:
  - [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.1.el6]
changelog:
  - [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
  - [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
  - [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
  - [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
  - [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
  - [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
  - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.5.el6]
changelog:
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.6.el6]
changelog:
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.7.el6]
changelog:
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Tim Waugh <twaugh@redhat.com> 8.70-2
changelog:
  - Fix debugging output from gdevcups (CVE-2009-4270, bug #550293).
  - Harden ghostscript's debugging output functions (bug #550293).


author: Tim Waugh <twaugh@redhat.com> - 8.70-3
changelog:
  - Fixed summary.
  - Fixed macros in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING file.
  - Added comments for all patches.
  - Don't ship libtool la files (bug #542674).
  - Don't build static library for ijs (bug #556051).
  - Added comment next to /usr/lib/cups paths.
  - More consistent macro use.


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-3
changelog:
  - 831003 boot over VLAN support patches
  - 916007 replace iscsiuio with code merged upstream 0.7.8.1b
  - 884427 fix for db errors when vdsm creates static entries for
           target portals already setup through discovery
  - 983553 run target refresh in parallel so unreachable doesn't block others


author: Andy Grover <agrover@redhat.com> - 6.2.0.873-6
changelog:
  - Update bnx2i-vlan-boot-support.patch to check session != NULL
    before calling iscsi_sysfs_read_iface


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-638.el6]
changelog:
  - [mm] hugetlb: prevent BUG_ON in hugetlb_fault -> hugetlb_cow (Dave Anderson) [1303495]
  - [mm] hugetlb: fix race condition in hugetlb_fault (Dave Anderson) [1303495]
  - [s390] kdump: fix wrong BUG_ON statement (Hendrik Brueckner) [1321316]
  - [scsi] cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes (Sai Vemuri) [1320193]
  - [fs] nfs: fix a regression causing deadlock in nfs_wb_page_cancel() (Benjamin Coddington) [1135601]
  - [netdrv] cxgb4/ethtool: Get/set rx checksum (Sai Vemuri) [1225167]
  - [netdrv] cxgb4vf:The RX checksum feature was not completely ported to cxgb4vf driver (Sai Vemuri) [1225167]
  - [netdrv] cxgb4/cxgb4vf: Enable GRO (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Enable RX checksum offload flag (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Report correct link speed for unsupported ones (Sai Vemuri) [1296467]
  - [netdrv] cxgb4: Use vmalloc, if kmalloc fails (Sai Vemuri) [1296473]
  - [netdrv] cxgb4: Enhance driver to update FW, when FW is too old (Sai Vemuri) [1296472]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-642.4.2.el6]
changelog:
  - [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-15
changelog:
  - Fix shlibsign to return non-zero on failure
  - Resolves: Bug 587634 - shlibsign returns 0 although if fails


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1183448 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Daniel Veillard <veillard@redhat.com> - 2.7.4-1
changelog:
  - upstream release 2.7.4
  - symbol versioning of libxml2 shared libs
  - very large number of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-4.el6_2.1
changelog:
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771913


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-7.1
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709963


author: Ravishankar N <ranaraya@redhat.com> - 3.4.0.47.1u2rhs-1
changelog:
  - This build has fixes for bugs in glusterd, gNFS, dht, afr, gfapi, fuse,
    cli, gsyncd etc.
    1035519, 1028325, 1034547, 1037274, 1034238, 1027727, 1030443, 1024316,
    1028282, 1032359, 1030021, 1020995, 979861, 1032558, 929036, 1033469,
    916857


author: Ravishankar N <ranaraya@redhat.com> - 3.4.0.49rhs-1
changelog:
  - This build has fixes for bugs in cli, glusterd, fuse, dht etc.
    1023950, 1032081, 923809, 1028995, 1023921, 1037851, 956655, 1015630, 1010975,


author: Ravishankar N<ranaraya@redhat.com> - 3.4.0.52rhs-1
changelog:
  - fixes bugs in guota, gNFS, glusterd, afr etc.
    1024371, 1024316, 1021776, 1043535, 1019908, 965400, 1020816


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.53rhs-1
changelog:
  - fixes bug 916857 1005663 1032034 1046294 1046318 1042830 1045313
    1046571 1046604 1045991 1022822 1031687 1045374 972021


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-22
changelog:
  - Some Gemalto Card Managers silently ignore SELECT APDU's for applets 
    that don't exist. This makes coolkeys with this cards look like PIV.
    Check the data returned from select and make sure the PIV is for real.


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.6.1.el6]
changelog:
  - [net] ipv4: add RCU protection to inet->opt (Jiri Pirko) [844274 829109]
  - [net] tun: allow tap iface in netconsole'd bridge (Jiri Benc) [842984 838025]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.8.1.el6]
changelog:
  - [netdrv] e1000e: prevent oops when adapter is being closed and reset simultaneously (Dean Nelson) [847045 826375]
  - [net] tcp: clear hints to avoid a stale one (Andy Gospodarek) [846832 807704]
  - [md] dm-raid1: Fix mirror crash when discard request is sent and sync is in progress (Mikulas Patocka) [846839 837607]
  - [netdrv] bond_alb: don't disable softirq under bond_alb_xmit (Jiri Pirko) [846216 841987]
  - [x86] ioapic: Fix kdump race with migrating irq (Don Zickus) [812962 783322]
  - [net] rds: set correct msg_namelen (Weiping Pan) [822729 822731] {CVE-2012-3430}
  - [x86] amd_iommu: Fix SRIOV and hotplug devices (Stefan Assmann) [846838 832009]
  - [mm] hugetlb: fix resv_map leak in error path (Motohiro Kosaki) [824350 824351] {CVE-2012-2390}
  - [netdrv] dl2k: fix unfiltered netdev rio_ioctl access by users (Jacob Tanenbaum) [818824 818825] {CVE-2012-2313}
  - [drm] i915: fix integer overflow in i915_gem_do_execbuffer() (Jacob Tanenbaum) [824561 824563] {CVE-2012-2384}
  - [virt] kvm: handle last_boosted_vcpu = 0 case (Rik van Riel) [847042 827031]
  - [md] raid5: Reintroduce locking in handle_stripe() to avoid racing (Jes Sorensen) [846836 828065]
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]
  - [fs] proc/stat: fix whitespace damage in use arch_idle_time patch (Steve Best) [841579 841149]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.9.1.el6]
changelog:
  - [md] raid1, raid10: avoid deadlock during resync/recovery. (Dave Wysochanski) [845464 835613]
  - [fs] dlm: fix deadlock between dlm_send and dlm_controld (David Teigland) [849051 824964]
  - [ata] libata: Add space to fix 2GB ATA Flash Disk/ADMA428M blacklist (Prarit Bhargava) [851445 843849]
  - [fs] nfs: nfs_attr_use_mounted_on_file() missing return value (Frantisek Hrbata) [847945 842312]
  - [fs] gfs2: Make gfs2_write_end not dirty the inode with every write (Robert S Peterson) [849551 844814]
  - [net] sched/act_mirred: do not drop packets when fails to mirror it (Jason Wang) [851444 846585]
  - [net] sched: fix race in mirred device removal (Jason Wang) [851444 846585]
  - [net] sched: printk message severity (Jason Wang) [851444 846585]
  - [net] sched: act_mirred cleanup (Jason Wang) [851444 846585]
  - [kernel] sched: Fix signed unsigned comparison in check_preempt_tick() (Frederic Weisbecker) [843102 835797]
  - [netdrv] be2net: reduce gso_max_size setting to account for ethernet header (Ivan Vecera) [842757 834185]
  - [powerpc] Fix wrong divisor in usecs_to_cputime backport (Steve Best) [847727 821374]
  - [fs] procfs: do not confuse jiffies with cputime64_t (Frantisek Hrbata) [847727 821374]
  - [kernel] time: Add nsecs_to_cputime64 interface for asm-generic (Steve Best) [847727 821374]
  - [powerpc] Fix wrong divisor in usecs_to_cputime (Steve Best) [847727 821374]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.10.1.el6]
changelog:
  - [mm] hugetlbfs: close race during teardown of hugetlbfs shared page tables (Rafael Aquini) [857334 856325]
  - [mm] hugetlbfs: Correctly detect if page tables have just been shared (Rafael Aquini) [857334 856325]
  - [kernel] sched: fix divide by zero at {thread_group,task}_times (Stanislaw Gruszka) [856703 843771]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.11.1.el6]
changelog:
  - [net] core: Fix napi_gro_frags vs netpoll path (Amerigo Wang) [857854 845347]
  - [netdrv] benet: disable BH in callers of be_process_mcc() (Amerigo Wang) [857854 845347]
  - [net] bonding: remove IFF_IN_NETPOLL flag (Amerigo Wang) [857854 845347]
  - [mm] fix contig_page_data kABI breakage and related memory corruption (Satoru Moriya) [857012 853007]
  - [net] sctp: backport sctp cache ipv6 source after route lookup (Michele Baldessari) [858284 855759]
  - [net] sctp: backport support of sctp multi-homing ipv6 source address selection (Michele Baldessari) [858284 855759]
  - [net] ipv6: backport RTA_PREFSRC ipv6 source route selection support (Michele Baldessari) [858285 851118]
  - [netdrv] sfc: Fix maximum number of TSO segments and minimum TX queue size (Nikolay Aleksandrov) [845556 845557] {CVE-2012-3412}
  - [s390] zfcp: No automatic port_rescan on events (Hendrik Brueckner) [856316 855131]
  - [fs] xfs: push the AIL from memory reclaim and periodic sync (Dave Chinner) [856686 855139]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.12.1.el6]
changelog:
  - [netdrv] mlx4: check promisc on proper port (Doug Ledford) [858955 854052]
  - [netdrv] mlx4: attach multicast with correct flag (Doug Ledford) [858956 854376]
  - [netdrv] mlx4: remove redundant adding of steering type to gid (Doug Ledford) [859436 854053]
  - [netdrv] Revert: Fix a merge issue (Doug Ledford) [859436 854053]


author: Jaroslav Reznik <jreznik@redhat.com> - 7:4.3.4-8
changelog:
  - Resolves: #591967,
      CVE-2010-1000, CVE-2010-1511: improper sanitization of metalink 
      attribute


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.el6_1.1
changelog:
  - backported GSSAPI delegation from upstream version 1.27.04 with strong attention
    to libxmlrpc++ client ABI backward compatibility (#729793)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.el6_1.2
changelog:
  - added Requires libcurl to the client/apps packages (.so libraries needed)
  - specified BuildRequires curl-devel version for CURLOPT_GSSAPI_DELEGATION option


author: Ryan O'Hara <rohara@redhat.com> - 1.4.24-1
changelog:
  - Rebase to upstream version 1.4.24.
    Resolves: rhbz#947987
  - Rewrite rules flaw can lead to arbitrary code execution (CVE-2013-1912).
    Resolves: rhbz#947701
  - Fix possible crash when using negative header occurrences (CVE-2013-2175).
    Resolves: rhbz#974263
  - Enable TPROXY support.
    Resolves: rhbz#921064


author: Vritant Jain <vrjain@redhat.com> 1.17.4-1
changelog:
  - 1346417: Allow users to set socket timeout. (awood@redhat.com)
  - Fix Flake8 Errors (bcourt@redhat.com)
  - Add Fedora 24 to the branch list. (awood@redhat.com)
  - Added basic SLES compatibilty. Tested against SLES 11 SP3
    (darinlively@gmail.com)


author: Alex Wood <awood@redhat.com> 1.18.2-1
changelog:
  - 1176219: Raise ProxyException in Restlib (khowell@redhat.com)
  - 1367243: Handle RestlibException 404 in refresh (khowell@redhat.com)
  - 1367243: Fix 404 check in regen entitlement funcs (khowell@redhat.com)
  - Revert "1367243: Fix 404 check in regen entitlement funcs"
    (khowell@redhat.com)
  - 1367243: Fix 404 check in regen entitlement funcs (khowell@redhat.com)
  - Ensure both cert regen methods succeed despite BadStatusLine from server
    (csnyder@redhat.com)
  - Update fix to include BadStatusLine responses from the server
    (csnyder@redhat.com)
  - 1366301: Entitlement regeneration no longer propagates server errors
    (crog@redhat.com)
  - 1365280: Update default_log_level to INFO (csnyder@redhat.com)
  - 1334916: Add rhsm.conf logging section defaults (csnyder@redhat.com)
  - 1360909: Added functionality for regenerating entitlement certificates
    (crog@redhat.com)
  - 1315901: Exception handling for PEM cert read (wpoteat@redhat.com)


author: Vritant Jain <adarshvritant@gmail.com> 1.18.3-1
changelog:
  - 1320371: Fix case of retry-after header handling (khowell@redhat.com)
  - Fedora 22 is end-of-life. (awood@redhat.com)
  - 1311429: Honor no_proxy environment variable (khowell@redhat.com)


author: Vritant Jain <adarshvritant@gmail.com> 1.18.5-1
changelog:
  - 1396405: Use an int for port on connections (csnyder@redhat.com)
  - 1393010: Correlate request ID, method and handler in logs
    (csnyder@redhat.com)
  - 1394776: Fix port, insecure, and handler options on M2Crypto wrapper
    (csnyder@redhat.com)
  - 1394351: Add httplib constants to m2cryptohttp (khowell@redhat.com)
  - 1390688: Add missing socket import (khowell@redhat.com)
  - Reduce usage of m2crypto (#184) (kevin@kahowell.net)


author: Vritant Jain <adarshvritant@gmail.com> 1.18.6-1
changelog:
  - 1400719: Proxy host not available for release command (wpoteat@redhat.com)
  - 1397201: Expose classes in m2crypto wrapper (khowell@redhat.com)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8 (fixes #654226), pigeonhole updated to 0.2.2
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.
  - mdbox: Fixed potential assert-crash when saving multiple messages
    in one transaction
  - dsync: a lot of fixes
  - fixed lda + sieve crash


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.410.el6
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#995341]
  - Resolves: bz#995341
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.411.el6
changelog:
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1009370]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1009370]
  - Resolves: bz#1009370
    (qemu-img refuses to open the vmdk format image its created)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.412.el6
changelog:
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#985205]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#985205]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#985205]
  - kvm-os-posix-block-SIGUSR2-in-os_setup_early_signal_hand.patch [bz#996814]
  - Resolves: bz#985205
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#996814
    (boot image with gluster native mode cant work with attach another device from local file system)


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3-0.1
changelog:
  - updated to 1.0pre3
  - added initscript for Predictive Failure Analysis (PFA) which does not
    run by default.


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20101112-0.7
changelog:
  - Updated to 1.0pre3 as of Jul 18 2011/cbd4da48 [BZ 699592]
  - chkconfig mcelogd on by default [BZ 699592]


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.220-1
changelog:
  - Fix wrong attribute name in swap ks line (bcl)
    Resolves: rhbz#1002924
    Related: rhbz#1002924
  - Look up MD arrays by MD UUID, not FS UUID. (dlehman)
    Related: rhbz#868182
  - Remove snapshots as needed when removing LVs. (dlehman)
    Resolves: rhbz#1043916
  - Let LVM determine alignment for PV data areas. (dlehman)
    Resolves: rhbz#962961
  - Correctly determine whether any partitioning has been done. (dlehman)
    Resolves: rhbz#842920
  - Fix handling of LUKS when using onpart. (dlehman)
    Resolves: rhbz#840890


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.221-1
changelog:
  - Add BuildRequires: gdk-pixbuf2-devel (sbueno+anaconda)
    Resolves: rhbz#1109298
  - If kernel-kdump is installed, don't set it as the default kernel.
    (sbueno+anaconda)
    Resolves: rhbz#734121
  - Close yum objects before running post scripts (bcl)
    Resolves: rhbz#1110148
  - Catch custom partitioning problems on UEFI (bcl)
    Resolves: rhbz#991620
  - Mark dracut-network for installation on mpath. (sbueno+anaconda)
    Resolves: rhbz#1007463
  - Write --percent to kickstart output even if --grow was used (mkolman)
    Resolves: rhbz#1046320


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.222-1
changelog:
  - Rm device from lvm reject filter if in action list. (sbueno+anaconda)
    Resolves: rhbz#885755
  - The boot menu entry should contain the RHEL major release number (mkolman)
    Resolves: rhbz#1001960


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.223-1
changelog:
  - Change pixbuf loaders path. (sbueno+anaconda)
    Resolves: rhbz#1110834
  - Remove unnecessary drivers to contain the size of ppc64.img.
    (sbueno+anaconda)
    Resolves: rhbz#1112405


author: Brian C. Lane <bcl@redhat.com> - 13.21.225-1
changelog:
  - Allow missing swap devices to be skipped during upgrade (dshea)
    Resolves: rhbz#1044716
  - Don't force installation of authconfig, chkconfig, or system-config-firewall.
    (clumens)
    Resolves: rhbz#1123481
  - Provide ways in kickstart to skip kernel and bootloader. (clumens)
    Related: rhbz#1123481
  - Implement %packages --instLangs. (clumens)
    Related: rhbz#1123481
  - Allow skipping installation of the core group, if asked for in kickstart.
    (clumens)
    Related: rhbz#1123481
  - Fix ks fetching on nfs via vlan (sbueno+anaconda)
    Resolves: rhbz#1067857
  - Fix traceback when rpm scriptlets fail during pkg install. (sbueno+anaconda)
    Resolves: rhbz#1122532


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.226-1
changelog:
  - Let tmp use more than 250M when there is more RAM (bcl)
    Resolves: rhbz#1123791
  - Move totalMemory into its own file (bcl)
    Related: rhbz#1123791
    Resolves: rhbz#1123791


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.229-1
changelog:
  - Revert "Use edd fcoe boot option instead of enumerating all ifaces"
    (rvykydal)
    Resolves: rhbz#1103920


author: Petr Pisar <ppisar@redhat.com> - 0.57-17
changelog:
  - Link to the ca-certificates ca-bundle.crt instead of shipping our own,
    outdated copy (bug #1059992)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775
changelog:
  - update to 20100428git73d775
  - replace initstepslew directive with makestep in default config
  - add NetworkManager dispatcher script
  - add dhclient script
  - retry server/peer name resolution at least once to workaround
    NetworkManager race condition on boot
  - don't verify chrony.keys


author: Miroslav Lichvar <mlichvar@redhat.com> 1.25-1
changelog:
  - update to 1.25
  - link with -Wl,-z,relro,-z,now options
  - use iburst, four pool servers, rtcsync, stratumweight in default config
  - suppress install-info errors


author: Miroslav Lichvar <mlichvar@redhat.com> 1.25-3
changelog:
  - fix buffer overflow when processing crafted command packets (CVE-2012-4502)
  - don't send uninitialized data in command replies (CVE-2012-4503)


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.7.1.el6]
changelog:
  - [s390] cio: update chpid descriptor after resource accessibility event (Hendrik Brueckner) [1574471]
  - [s390] af_iucv: enable control sends in case of SEND_SHUTDOWN (Hendrik Brueckner) [1559048]
  - [s390] qeth: repair SBAL elements calculation (Hendrik Brueckner) [1559021]
  - [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
  - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
  - [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
  - [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.14.2.el6]
changelog:
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-23
changelog:
  - Resolves: rhbz#805924 - SSSD should attempt to get the RootDSE after binding
  - Resolves: rhbz#814237 - sdap_check_aliases must not error when detects the
                            same user
  - Resolves: rhbz#812281 - autofs client: map name length used as key length
  - Related:  rhbz#784870 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Related:  rhbz#814269 - sssd-1.5.1-66.el6_2.3.x86_64 freezes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-24
changelog:
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-25
changelog:
  - Resolves: rhbz#816616 - group members are now lowercased in case insensitive
                            domains


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-26
changelog:
  - Resolves: rhbz#818642 - Auth fails for user with non-default attribute names
  - Resolves: rhbz#819063 - sssd fails to provide partial data till paged search
                            returns "Size Limit Exceeded"
  - Resolves: rhbz#820585 - Group enumeration fails in proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-27
changelog:
  - Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client
                            upgrade
  - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-28
changelog:
  - Resolves: rhbz#822236 - SSSD netgroups do not honor
                            entry_cache_nowait_percentage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-29
changelog:
  - Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in
                            _tevent_schedule_immediate()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-30
changelog:
  - Resolves: rhbz#824616 - sssd_nss crashes when configured with
                            use_fully_qualified_names = true


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-31
changelog:
  - Resolves: rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-32
changelog:
  - Fix protocol break for services map
  - Related:  rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.200.el6
changelog:
  - kvm-Introduce-the-RunState-type.patch [bz#617889]
  - kvm-RunState-Add-additional-states.patch [bz#617889]
  - kvm-runstate_set-Check-for-valid-transitions.patch [bz#617889]
  - kvm-Drop-the-incoming_expected-global-variable.patch [bz#617889]
  - kvm-Drop-the-vm_running-global-variable.patch [bz#617889]
  - kvm-Monitor-QMP-Don-t-allow-cont-on-bad-VM-state.patch [bz#617889]
  - kvm-QMP-query-status-Introduce-status-key.patch [bz#617889]
  - kvm-HMP-info-status-Print-the-VM-state.patch [bz#617889]
  - kvm-RunState-Rename-enum-values.patch [bz#617889]
  - kvm-runstate-Allow-to-transition-from-paused-to-postmigr.patch [bz#617889]
  - kvm-savevm-qemu_savevm_state-Drop-stop-VM-logic.patch [bz#617889]
  - kvm-runstate-Allow-user-to-migrate-twice.patch [bz#617889]
  - kvm-RunState-Don-t-abort-on-invalid-transitions.patch [bz#617889]
  - Resolves: bz#617889
    (QMP: provide VM stop reason)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.201.el6
changelog:
  - kvm-migration-s-dprintf-DPRINTF.patch [bz#669581]
  - kvm-migration-simplify-state-assignmente.patch [bz#669581]
  - kvm-migration-Check-that-migration-is-active-before-canc.patch [bz#669581]
  - kvm-Reorganize-and-fix-monitor-resume-after-migration.patch [bz#669581]
  - kvm-migration-add-error-handling-to-migrate_fd_put_notif.patch [bz#669581]
  - kvm-migration-If-there-is-one-error-it-makes-no-sense-to.patch [bz#669581]
  - kvm-buffered_file-Use-right-opaque.patch [bz#669581]
  - kvm-buffered_file-reuse-QEMUFile-has_error-field.patch [bz#669581]
  - kvm-migration-don-t-write-when-migration-is-not-active.patch [bz#669581]
  - kvm-migration-set-error-if-select-return-one-error.patch [bz#669581]
  - kvm-migration-change-has_error-to-contain-errno-values.patch [bz#669581]
  - kvm-migration-return-real-error-code.patch [bz#669581]
  - kvm-migration-rename-qemu_file_has_error-to-qemu_file_ge.patch [bz#669581]
  - kvm-savevm-Rename-has_error-to-last_error-field.patch [bz#669581]
  - kvm-migration-use-qemu_file_get_error-return-value-when-.patch [bz#669581]
  - kvm-migration-make-save_live-return-errors.patch [bz#669581]
  - kvm-qemu-kvm-fix-improper-nmi-emulation.patch [bz#738565]
  - kvm-scsi-fix-accounting-of-writes.patch [bz#744780]
  - kvm-scsi-disk-bump-SCSIRequest-reference-count-until-aio.patch [bz#744780]
  - Resolves: bz#669581
    (Migration Never end while Use firewall reject migration tcp port)
  - Resolves: bz#738565
    ([FJ6.2 Bug]: Failed to capture kdump due to redundant NMIs)
  - Resolves: bz#744780
    (use-after-free in QEMU SCSI target code)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.202.el6
changelog:
  - kvm-Revert-qemu-kvm-fix-improper-nmi-emulation.patch [bz#738565]
  - Related: bz#738565
    ([FJ6.2 Bug]: Failed to capture kdump due to redundant NMIs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.203.el6
changelog:
  - kvm-qemu-kvm-fix-improper-nmi-emulation-2.patch [bz#738565]
  - Resolves: bz#738565
    ([FJ6.2 Bug]: Failed to capture kdump due to redundant NMIs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.204.el6
changelog:
  - kvm-savevm-qemu_fille_buffer-used-to-return-one-error-fo.patch [bz#669581]
  - Resolves: bz#669581
    (Migration Never end while Use firewall reject migration tcp port)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.205.el6
changelog:
  - kvm-qxl-fix-guest-cursor-tracking.patch [bz#744518]
  - kvm-qxl-create-slots-on-post_load-in-vga-state.patch [bz#740547]
  - kvm-qxl-reset-update_surface.patch [bz#690427]
  - Resolves: bz#690427
    (qemu-kvm crashes when update/roll back of qxl driver in WindowsXP guest)
  - Resolves: bz#740547
    (qxl: migrating when not in native mode causes a "panic: virtual address out of range")
  - Resolves: bz#744518
    (qemu-kvm core dumps when qxl-linux guest migrate with reboot)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.206.el6
changelog:
  - kvm-Revert-savevm-qemu_fille_buffer-used-to-return-one-e.patch [bz#669581]
  - kvm-Revert-migration-make-save_live-return-errors.patch [bz#669581]
  - kvm-Revert-migration-use-qemu_file_get_error-return-valu.patch [bz#669581]
  - kvm-Revert-savevm-Rename-has_error-to-last_error-field.patch [bz#669581]
  - kvm-Revert-migration-rename-qemu_file_has_error-to-qemu_.patch [bz#669581]
  - kvm-Revert-migration-return-real-error-code.patch [bz#669581]
  - kvm-Revert-migration-change-has_error-to-contain-errno-v.patch [bz#669581]
  - kvm-Revert-migration-set-error-if-select-return-one-erro.patch [bz#669581]
  - kvm-Revert-migration-don-t-write-when-migration-is-not-a.patch [bz#669581]
  - kvm-Revert-buffered_file-reuse-QEMUFile-has_error-field.patch [bz#669581]
  - kvm-Revert-buffered_file-Use-right-opaque.patch [bz#669581]
  - kvm-Revert-migration-If-there-is-one-error-it-makes-no-s.patch [bz#669581]
  - kvm-Revert-migration-add-error-handling-to-migrate_fd_pu.patch [bz#669581]
  - kvm-Revert-Reorganize-and-fix-monitor-resume-after-migra.patch [bz#669581]
  - kvm-Revert-migration-Check-that-migration-is-active-befo.patch [bz#669581]
  - kvm-Revert-migration-simplify-state-assignmente.patch [bz#669581]
  - kvm-Revert-migration-s-dprintf-DPRINTF.patch [bz#669581]
  - Related: bz#669581
    (Migration Never end while Use firewall reject migration tcp port)
  - Fixes bz#749806
    (Migration segfault on migrate_fd_put_notify()/qemu_file_get_error())


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.207.el6
changelog:
  - kvm-migration-s-dprintf-DPRINTF-v2.patch [bz#669581]
  - kvm-migration-simplify-state-assignmente-v2.patch [bz#669581]
  - vm-migration-Check-that-migration-is-active-before-canc-v2.patch [bz#669581]
  - kvm-Reorganize-and-fix-monitor-resume-after-migration-v2.patch [bz#669581]
  - kvm-migration-add-error-handling-to-migrate_fd_put_notif-v2.patch [bz#669581]
  - kvm-migration-If-there-is-one-error-it-makes-no-sense-to-v2.patch [bz#669581]
  - kvm-buffered_file-Use-right-opaque-v2.patch [bz#669581]
  - kvm-buffered_file-reuse-QEMUFile-has_error-field-v2.patch [bz#669581]
  - kvm-migration-don-t-write-when-migration-is-not-active-v2.patch [bz#669581]
  - kvm-migration-set-error-if-select-return-one-error-v2.patch [bz#669581]
  - kvm-migration-change-has_error-to-contain-errno-values-v2.patch [bz#669581]
  - kvm-migration-return-real-error-code-v2.patch [bz#669581]
  - kvm-migration-rename-qemu_file_has_error-to-qemu_file_ge-v2.patch [bz#669581]
  - kvm-savevm-Rename-has_error-to-last_error-field-v2.patch [bz#669581]
  - kvm-migration-use-qemu_file_get_error-return-value-when--v2.patch [bz#669581]
  - kvm-migration-make-save_live-return-errors-v2.patch [bz#669581]
  - kvm-savevm-qemu_fille_buffer-used-to-return-one-error-fo-v2.patch [bz#669581]
  - kvm-Fix-segfault-on-migration-completion.patch [bz#669581 bz#749806]
  - Resolves: bz#669581
    (Migration Never end while Use firewall reject migration tcp port)
  - Resolves: bz#749806
    (Migration segfault on migrate_fd_put_notify()/qemu_file_get_error())


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.208.el6
changelog:
  - kvm-migration-flush-migration-data-to-disk.patch [bz#721114]
  - Resolves: bz#721114
    (qemu fails to restore guests that were previously suspended on host shutdown)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.209.el6
changelog:
  - kvm-hda-do-not-mix-output-and-input-streams-RHBZ-740493-v2.patch [bz#740493]
  - kvm-hda-do-not-mix-output-and-input-stream-states-RHBZ-740493-v2.patch [bz#740493]
  - kvm-intel-hda-fix-stream-search.patch [bz#740493]
  - Resolves: bz#740493
    (audio playing doesn't work when sound recorder is opened)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-73
changelog:
  - remove openssh-4.3p2-no-v6only.patch (#732955)
  - adjust Linux out-of-memory killer (#744236)
  - fix sshd init script - check existence of crypto (#797384)
  - add RequiredAuthentications[12] (#657378)
  - run privsep slave process as the users SELinux context (#798241)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.2
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #644825, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #644825, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.3
changelog:
  - pull up crypto changes made between 1.8.2 and 1.8.3 to fix upstream #6751,
    assumed to already be there for the next fix
  - incorporate candidate patch to fix various issues from MITKRB5-SA-2010-007
    (CVE-2010-1323, CVE-2010-1324, CVE-2010-4020, #651962)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error, and hang or crash in the KDC when using
    the LDAP kdb backend (CVE-2010-4022, CVE-2011-0281, CVE-2011-0282, #671101)


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-1
changelog:
  - Update to gcc 4.4.1 20090818 svn 150873.
  - Patches taken from native Fedora gcc-4.4.1-6.
  - Replaced %define with %global and updated %defattr.
  - Changed license to match native Fedora gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-2
changelog:
  - Update to gcc 4.4.1 20090902 svn 151328.
  - Patches taken from native Fedora gcc-4.4.1-8.
  - Another license update to keep it in sync with native gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.2-1
changelog:
  - Update to gcc 4.4.2 20091114 svn 154179, which includes
    VTA backport from 4.5 branch.
  - Patches taken from native Fedora gcc-4.4.2-10.


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301
changelog:
  - update to patch 20080301
  - provide libtermcap.so (#428898)
  - move all headers to /usr/include
  - move libncursesw out of /usr
  - make examples in documentation compilable (#436355)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628
changelog:
  - update to patch 20080628
  - move mlterm and screen.* entries to -base
  - change kbs to ^? in rxvt and screen entries


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.6
changelog:
  - kvm-qga-cast-to-int-for-DWORD-type.patch [bz#980758]
  - kvm-qga-remove-undefined-behavior-in-ga_install_service.patch [bz#980758]
  - kvm-qga-diagnostic-output-should-go-to-stderr.patch [bz#980758]
  - kvm-qa_install_service-nest-error-paths-more-idiomatically.patch [bz#980758]
  - kvm-qga-escape-cmdline-args-when-registering-win32-service.patch [bz#980758]
  - Resolves: bz#980758
    (qemu-kvm: CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path [rhel-6.4.z])


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - rebase to rsyslog-5.8.7
    - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
      http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
    - remove patches obsoleted by rebase
    - add patches for better sysklogd compatibility (taken from upstream)
    - update included files for the new major version
    Resolves: #672182
    Resolves: #727380
    Resolves: #756664
    Resolves: #767527
    Resolves: #769025
  - add several directories for storing auxiliary data
    Resolves: #740420
  - fix source package URL


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8.el6_5.1
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1172164
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-4.20090921gitdf3cb4.2
changelog:
  - add support for pcap_setdirection, -P commandline flag (#1099701)
  - add support for nano second timestamps, -J flag and --timestamp-preciosion (#1045601)
  - fix cdp dissector, allow zero-length data frames (#1130111)
  - allow specifying NIC names which start with number (#972396)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-5.20090921gitdf3cb4.2
changelog:
  - regenerate patch for pcap_setdirection support. Added detection of the needed
    libpcap functionality to configure script


author: Harald Hoyer <harald@redhat.com> 147-2.47
changelog:
  - add OPTIONS="log_priority=<loglevel>" for debugging purposes
  Resolves: rhbz#947067
  - limit default udevd maximum childs
  Resolves: rhbz#833172 rhbz#885978
  - add scm path_id support
  Resolves: rhbz#888647
  - header fix for C++
  Resolves: rhbz#909792
  - scsi_id: retry on EBUSY
  Resolves: rhbz#920961


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-2
changelog:
  - Silence unnecessary warning
    Resolves: rhbz#1201846
  - Access oVirt REST API through /ovirt-engine/api rather than /api
    Resolves: rhbz#1277447
  - Allow to cancel ovirt:// authentication dialog in virt-viewer
    Resolves: rhbz#1201604
  - Make sure 'cancelled' signal is disconnected when objects die
    Related: rhbz#1201604
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274355
  - Don't print ticket value to stdout
    Resolves: rhbz#1216118
  - Add support for accessing VMs behind proxies
    Resolves: rhbz#1292754


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-13.el6
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Handle DNS over IPv6 (rhbz#687896)
  - Start dnsmasq even if no dhcp ranges/hosts are specified (rhbz#687291)
  - Use a separate dhcp leases file for each network (rhbz#687551)
  - Fix a possible crash in storage driver (rhbz#684712)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-14.el6
changelog:
  - Fix delayed events when SASL is active (rhbz#624252)
  - Fix ref-counting bugs (rhbz#688774)
  - Log an error if on failure to connect to netlink socket (rhbz#689001)
  - Log error and abort network startup when radvd isn't found (rhbz#688957)
  - Add PCI sysfs reset access rights to qemu (rhbz#689002)
  - Fix regression with qemu:///session URI (rhbz#684655)
  - Avoid leaking PCI config fd into qemu (rhbz#687993)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-15.el6
changelog:
  - Fix return value for virJSONValueFromString if it fails (rhbz#688723)
  - Fix positioning to end of qemu log file (rhbz#689986)
  - Initialization error of qemuCgroupData in Qemu host usb hotplug (rhbz#690183)
  - 8021Qbh: Use preassociate-rr during the migration prepare stage (rhbz#684870)
  - Make error reporting in libvirtd thread safe (rhbz#689374)
  - Add missing dependencies (rhbz#690022)
  - Fix restoring a compressed save image (rhbz#691034)
  - Fix label restore bugs in qemu driver (rhbz#690737)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.1
changelog:
  - debug: Avoid null dereference on uuid lookup api (rhbz#728546)
  - Fix auditing of disk hotunplug operations (rhbz#728516)
  - storage: Fix regression with backing format (rhbz#726617)
  - Fix performance problem of virStorageVolCreateXMLFrom() (rhbz#715400)
  - qemu: Translate boot config into bootindex if possible (rhbz#715401)
  - remote: Protect against integer overflow (rhbz#717202)
  Resolves: rhbz#728546, rhbz#728516, rhbz#715400, rhbz#715401, rhbz#717202
  Resolves: rhbz#726617


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.4
changelog:
  - stream: Avoid use-after-free (rhbz#749531)
  - storage: Avoid memory leak (rhbz#749531)
  - Add missing error reporting when loading mac filter config for QEMU (rhbz#749531)
  - qemu: Avoid memory leaks (rhbz#749531)
  - storage: Plug iscsi memory leak (rhbz#749531)


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add Group: to -devel
  - Split into subpackages as required by packaging guidelines
  - cleanup BuildRequires
  - attempt to build on ppc
  - cleanup spec file
  - cleanup mvapich2.pc, still not correct, but closer
    Related: bz543948


author: Jay Fenlason <fenlason@redhat.com> 1.4-2.el6
changelog:
  - Add BuildRequires: python
  - Add BuildRequires: java
  - Remove the pkgconfig file entirely
    Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Fix an issue with usage of _cc_name_suffix that caused a broken define in
    our module file
    Related: bz543948


author: Jay Fenlason <fenlason@redhat.com> 1.4-4.el6
changelog:
  - Move -devel requires to the -devel subpackage.
    Resolves: bz568450
  - Add defattr as required by packaging guidelines
    Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 1.6-1.el6
changelog:
  - New upstream release, with different build process, and without
    man pages, because we don't have the sowing package, and its
    licensing status is unclear (no licence description of any kind in
    the tarball).
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.6-2.el6
changelog:
  - Fix the psm RPM macros so that we can build a -psm variant of
    mpitests
  - remove the osu-micro-benchmarks, which are being installed with a
    bogus rpath, and which are included in mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.6-3.el6
changelog:
  - Change the requires on mvapich2-psm-devel to mvapich2-psm from mvapich2
    so that mpitests will build
  - clean up the build to not use .{non-}psm directories.
    Related: rhbz725016


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1206180 - Opening a terminal in Konqueror / Dolphin does not 
    inherit environment variables


author: Robin Norwood <rnorwood@redhat.com> - 0.07b4-3
changelog:
  - Various fixes from package review:
  - Remove BR: perl
  - Use dist tag in release
  - Resolves: bz#226258


author: Harald Hoyer <harald@redhat.com> 004-322
changelog:
  - fixed crypt: add support for keyfiles in the initramfs
  Resolves: rhbz#886194
  - fixed FIPS module checking
  Resolves: rhbz#947729


author: Harald Hoyer <harald@redhat.com> 004-327
changelog:
  - fixed crypt: add support for keyfiles in the initramfs
  Resolves: rhbz#886194
  - fixed booting with iSCSI and without network config
  Resolves: rhbz#910605


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.15.1.el6]
changelog:
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1083350 844450]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.2.el6]
changelog:
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [fs] vfs: fix autofs/afs/etc magic mountpoint breakage (Frantisek Hrbata) [1094370 1079347] {CVE-2014-0203}
  - [char] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094236 1094237] {CVE-2014-0196}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.3.el6]
changelog:
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - Revert: [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]


author: David Zeuthen <davidz@redhat.com> - 2.29.90-1.el6
changelog:
  - Update to new release for LVM2/Multipath support
  - Don't include support for connecting to remote udisks instances
  - Related: rhbz#548874
  - Related: rhbz#548870


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-63
changelog:
  - Release 1.2.11.15-63
  - Resolves: #1268204 - ns-slapd crashing frequently cause is unknown (DS 48192)
  - Resolves: #1265972 - Fractional replication evaluates several times the same CSN (DS 48266 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-64
changelog:
  -Release 1.2.11.15-64
  - Resolves: #1268204 - ns-slapd crashing frequently cause is unknown (DS 48192)
  - Resolves: #1268772 - pagedresults - when timed out, search results could have been already freed. (DS 48299)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-65
changelog:
  -Release 1.2.11.15-65
  - Resolves: #1265972 - Fractional replication evaluates several times the same CSN (DS 48266)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-66
changelog:
  -Release 1.2.11.15-66
  - Resolves: #1272327 - CleanAllRUV should completely clean changelog (DS 48208)
  - Resolves: #1273132 - many attrlist_replace errors in connection with cleanallruv (DS 48283)
  - Resolves: #1278696 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-68
changelog:
  -Release 1.2.11.15-68
  - Resolves: #1278696 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.2.11.15-68 (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-69
changelog:
  -Release 1.2.11.15-69
  - Resolves: #1289844 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation (DS 48370)
  - Resolves: #1290722 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.32-1
changelog:
  - check an IP address for existence in ifup-alias
  - remount /dev/shm in sysinit to apply attributes from fstab
  - sets BONDING_OPTS before interface is brougth up and checks if it is not already added
  - Add support for setting random bridge options via BRIDGING_OPTS
  - use vgchange -aay in rc.sysinit and netfs init script
  - script should not kill itself during shutdown
  - fix the NIS domain setting
  - be less strict about VLAN name
  - clarification of work with white spaces in crypttab manpage
  - re-read sysctl values for VLANs on ifup
  - pass useful arguments to halt.local
  - start serial console when we return from runlevel1
  - move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network.
  - don't accidentally match other bonding devices
  - add usage stanzas for tty.conf and serial.conf
  - rename_device: skip VLAN=yes configuration files
  - allow duplicate address dectection to be disabled


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.14-8
changelog:
  - fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
  - add missing initialization of libgcrypt in gpgv
  - properly encode s2k iteration count in gpg-agent (#638635)


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768831


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-0.3563.rc1.4.el6
changelog:
  - -psm-devel and -psm-static need to depend on the psm variants, not the
    base packages.
  - Fix up the build to not use .{non-,}psm directories
  - Fix up the -psm subpackage descriptions.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-0.3563.rc1.5.el6
changelog:
  - Include psm config files only in the -psm packages.  Do not include
    non-psm config files in the -psm packages.
    Resolves: rhbz725864


author: Harald Hoyer <harald@redhat.com> 147-2.58
changelog:
  - do not print error, if /sys/class/firmware/timeout does
    not exist (yet)
  Resolves: rhbz#1140336
  - always call modprobe, even when a driver is bound to the device
  Resolves: rhbz#1084513
  - fixed for every modprobe locked worker, increase max_childs
    use ncnt instead of zcnt
  Resolves: rhbz#1164960
  - print warning in start_udev, if udevlog is used
  Resolves: rhbz#876535


author: Harald Hoyer <harald@redhat.com> 147-2.60
changelog:
  - ata_id - fixup all 8 not only 6 bytes of the fw_rev string
  Resolves: rhbz#794561
  - udev: properly handle symlink removal by 'change' event
  Resolves: rhbz#1018171


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.22-2
changelog:
  - updated to 1.0.22 final
  - added alsaloop utility and alsa-delay script
  - updated the alsa-info.sh script
  - Resolves: rhbz#650113


author: Jaroslav Kysela <jkysela@redhat.com> 1.1.0-3
changelog:
  - updated to 1.1.0 final
  - alsa-info.sh is part of alsa-utils package now
  - Resolves: rhbz#1245602
  - Resolves: rhbz#1248512
  - Resolves: rhbz#1006466
  - Resolves: rhbz#881734
  - Resolves: rhbz#894032


author: Jaroslav Kysela <jkysela@redhat.com> 1.1.0-8
changelog:
  - A small fix for alsa-delay script
  - Fix for ca0106 alsactl init
  - Resolves: rhbz#894032
  - Resolves: rhbz#1320099


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-57
changelog:
  - Resolves: rhbz#1438360 - The originalMemberOf attribute disappears from
                             the cache, causing intermittent HBAC issues


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-58
changelog:
  - Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                             function is provided by the client app
  - Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                             failed user logins
  - Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
  - Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                             Global scope


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-59
changelog:
  - Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
  - Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
  - Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
  - Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-60
changelog:
  - Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
  - Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.2
changelog:
  - Add 0066-RHBZ-672151-fix-sysfs-caching.patch
      * Remove attribute value caching, and free cached parent devices on remove
  - Resolves: bz #672151


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.2-3
changelog:
  - Drop xorg-x11-util-macros build requires, not needed anymore
  - Don't build on s390 (or ppc, if on RHEL)
  - Force autoreconf to avoid libtool errors


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.1
changelog:
  - Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
  - Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.2
changelog:
  - Resolves: rhbz#1289498 keyingtries=0 is broken
  - Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
  - Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
  - Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1345959 openswan - libreswan migration issues
  - Resolves: rhbz#1360134 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1313709 ipsec pluto returns zero even if it fails [doc change only]
  - Resolves: rhbz#1315415 ipsec.conf manpage does not contain any mention about crl-strict option


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.1
changelog:
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort when ' auto --up --asynchronous' is used
  - Resolves: rhbz#1335896 ipsec initnss/checknss custom directory not recognized


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.2
changelog:
  - Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort [extended patch]
  - Resolves: rhbz#1369990 Libreswan connection sometimes does not get re-established after one side restarts


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.3
changelog:
  - Resolves: rhbz#1403201 pluto uses up available memory and fails with 'unable to popen'
  - Resolves: rhbz#1311360 When IKE rekeys [...] (updated for IKEv1 responder side)


author: Paul Wouters <pwouters@redhat.com> - 3.15-9
changelog:
  - Resolves: rhbz#1781903 ipsec newhostkey fails with ipsec rsasigkey: key pair generation failed: -8187


author: Till Maas <opensource@till.name> - 1.2.5-6
changelog:
  - filesystem subpackage contents are now provided by filesystem (Red Hat
    Bugzilla 515362) filesystem-2.4.28-1.fc12


author: Adam Jackson <ajax@redhat.com> 1.2.5-6.2
changelog:
  - Drop vbetool, should not be needed.  Video resume is supported through
    KMS or not at all. (#545808)
  - Drop radeontool, same logic.


author: Paul Howarth <paul@city-fan.org> - 1.7.0.45-1.0.cf
changelog:
  - update to 1.7.0.45 (multiple security and other fixes; see release notes at
    http://www.oracle.com/technetwork/java/javase/7u45-relnotes-2016950.html)
  - update tzupdater to 1_3_60-2013g


author: Paul Howarth <paul@city-fan.org> - 1.7.0.51-1.0.cf
changelog:
  - update to 1.7.0.51 (cumulative bugfix, enhancement and security update; see
    release notes at
    http://www.oracle.com/technetwork/java/javase/7u51-relnotes-2085002.html)
  - update tzupdater to 1_3_62-2013i
  - added alternatives slaves for jmc and its man page
  - drop redundant %pre scriptlet


author: Adam Jackson <ajax@redhat.com> 1.4.13-6
changelog:
  - Fix rendering corruption on RANDR-enabled setups (#814381)
  - Fix display setup on G200ER (#810224)


author: Adam Jackson <ajax@redhat.com> 1.6.1-10
changelog:
  - mga-1.6.1-char-cell-modes.patch: Filter out modes whose horizontal timings
    aren't character-cell aligned on G200SE and friends (#894959)


author: Honza Horak <hhorak@redhat.com> - 2.9-11
changelog:
  - Added YP_PASSWD_HASH environment variable to set default 
    algorithm for hashing a new password
    Resolves: #699666


author: Honza Horak <hhorak@redhat.com> - 2.9-12
changelog:
  - Fixed -hash patch to omit an old password check when shadow 
    passwords or passwd.adjunct enabled and use correct password length
    Resolves: #699666


author: Petr Lautrbach <plautrba@redhat.com> 9.03.24-1
changelog:
  - add support for sysctl.d (#680527)
  - log network messages via syslog (#653630, #672202)
  - document NM_CONTROLLED (#692123)
  - don't explictly disallow IPv6 aliases (#692240)
  - make sure the bond exists when we bring up the slaves. (#694501)
  - properly add and remove arp_ip_target's (#675079)
  - load static arp entries from ethers file (#696788)
  - fix logic error in rc.sysinit (#698520, <jlau@redhat.com>)
  - handle IPADDRx correctly for static addresses (#700184)
  - don't match filesystem types in hostnames (#703210, <jmueller@data-tronics.com>)
  - check for VLAN interfaces is being slave first (#703475)
  - override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - allow multiple ETHTOOL_OPTS option types (#692410, #693583)
  - don't mount gfs2 in netfs (#689593)
  - fix pid file usage for IPv6. (#729292, <daveg@dgit.ndo.co.uk>)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.26-1
changelog:
  - add 'emergency' mode (#681357)
  - kexec - free reservation memory only for crashkernel=auto (#734987)


author: Lukas Nykryn <lnykryn@redhat.com> 9.03.28-1
changelog:
  - sysconfig support for IPv6 policy based routing (#781493)
  - fix typo in translation (#757637)
  - fix logic error with removing arp_ip_target (#787107, #746045)
  - don't set primary before we enslave devices. (#749610, <agospoda@redhat.com>)
  - do not check mounted filesystems (#745224)
  - eviscerate ifconfig uses from ip-aliases (#721010, #588993)
  - improve comment in init/serial.conf (#746808)
  - turn off UPS in powerfail situation (#754984, <robert@fedoraproject.org>)
  - netconsole exit arping on first response (#765835)
  - add cifs to check for network filesystem (#760018)
  - fix comments in sysctl.conf (#755175)
  - rc.sysinit - use rcS-emergency job instead of sulogin (#582002)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.4-1
changelog:
  - update to 0.7.4 (#592385)
  - stop trying to migrate retry timeout parameters from old ldap.conf files
  - add an explicit requires: on nscd to make sure it's at least available
    on systems that are using nss-pam-ldapd; otherwise it's usually optional
    (#587306)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-2
changelog:
  - don't return an uninitialized buffer as the value for an optional attribute
    that isn't present in the directory server entry (#592965)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-4
changelog:
  - tweak the pre-generated man pages to avoid a syntax error warning with older
    versions of groff (#676483)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-5
changelog:
  - backport support for the "validnames" option from SVN and use it to allow
    parentheses characters by modifying the default setting (#690870)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-6
changelog:
  - backport patches from 0.7.10 to interpret more types of errors as indicators
    that we need to ask a different server (#692817) and from 0.7.12 to not
    get stuck while cleaning up SSL/TLS encrypted connections


author: Phillip Lougher <plougher@redhat.com> [2.6.32-691.el6]
changelog:
  - [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
  - [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
  - [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
  - [net] ipv6: stop sending PTB packets for MTU < 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
  - [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-692.el6]
changelog:
  - [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
  - [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-693.el6]
changelog:
  - [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
  - [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
  - [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
  - [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
  - [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
  - [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
  - [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
  - [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
  - [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-694.el6]
changelog:
  - [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
  - [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
  - [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
  - [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
  - [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
  - [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
  - [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
  - [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
  - [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
  - [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
  - [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
  - [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
  - [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
  - [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
  - [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
  - [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
  - [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
  - [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
  - [block] ensure request->part is valid (Jeff Moyer) [1416341]
  - [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-1
changelog:
  - new upstream release
  - fixed typos in man
  - fixed handling of anaconda-tb file
  - generate valid xml file
  - Resolves: #759377, #758366, #746727


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831561
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Ray Strode <rstrode@redhat.com> - 2.30.4-69
changelog:
  - require ReadDmrcFromHomeDir=true in [daemon] before
    reading ~/.dmrc
    Resolves: #1417219
    Related: 795920


author: Parag <paragn@fedoraproject.org> - 4.0.3-9
changelog:
  - Merge-Review #226071
  - Removed XFree86-libs, xorg-x11-libs, XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - spec cleanups


author: Radek Vokal <rvokal@redhat.com> - 1.2.5-1
changelog:
  - upgrade to 1.2.5
  - fixes security vulnaribilities, see http://www.wireshark.org/security/wnpa-sec-2009-09.html


author: Radek Vokal <rvokal@redhat.com> - 1.2.6-1
changelog:
  - upgrade to 1.2.6
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.6.html 
  - minor spec file tweaks for better svn checkout support (#553500)
  - init.lua is present always and not only when lua support is enabled
  - fix file list, init.lua is only in -devel subpackage (#552406)
  - Autoconf macro for plugin development.


author: Radek Vokal <rvokal@redhat.com> - 1.2.8-1
changelog:
  - upgrade to 1.2.8
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.8.html
  - use sitearch instead of sitelib to avoid pyo and pyc conflicts 
  - bring back -pie
  - add patch to allow decode of NFSv4.0 callback channel
  - add patch to allow decode of more SMB FIND_FILE infolevels


author: Radek Vokal <rvokal@redhat.com> - 1.2.9-1
changelog:
  - upgrade to 1.2.9
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.9.html
  - Resolves: #604312


author: Jan Safranek <jsafrane@redhat.com> 1.2.10-1
changelog:
  - upgrade to 1.2.10
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.10.html
  - Resolves: #604312 (proper fix for CVE-2010-2284)


author: Jan Safranek <jsafrane@redhat.com> 1.2.13-1
changelog:
  - upgrade to 1.2.13
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.11.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.12.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.13.html
  - Resolves: #657534 (CVE-2010-4300 CVE-2010-3445)


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-4.1
changelog:
  Resolves: #718078: zstream clone of 711975
  Resolves: #712114: zstream clone of 703985
  Resolves: #712112: zstream clone of 703473
  Resolves: #712168: zstream clone of 704548


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28.4-19
changelog:
  - Fix segfault on startup when showing homedir as desktop (#755561)
  - Rearrange icons on desktop when screen size changes (#600260)
  - Fix free space display in Properties window (#772103)
  - Fall back to regular file rename when updating desktop file contents fails (#782467)


author: Carlos Soriano <csoriano@redhat.com> - 2.28.4-20
changelog:
  - Fix crashes accessing files over sftp (#1072272)
  - Fix crashes on folder removal in browser mode (#1026561)
  Resolves: #1072272 #1026561


author: Marc-André Lureau <marcandre.lureau@redhat.com> 0.6.0-2
changelog:
  - Use a USB icon instead of a generic settings icon
    Resolves: rhbz#804184
  - Remove menu item "Automatically resize"
    Resolves: rhbz#1007649
  - Client doesn't send monitor config when launched via browser plugin
    Resolves: rhbz#1038726
  - Screen is blurry for some resolutions when spice window is maximized
    Resolves: rhbz#1056041
  - Remove some couldn't load configuration messages
    Resolves: rhbz#1006737


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.6.0-4
changelog:
  - Fixed coverity errors discovered in 0.6.0-1 build
    Related:  rhbz#1097038
  - Remote-Viewer: Zoom Out Behavior Is Not Consistent
    Resolves: rhbz#1004051


author: Christophe Fergeau <cfergeau@redhat.com> 0.6.0-5
changelog:
  - Fix authentication after failed attempt with VNC
    Resolves: rhbz#1007295
  - Fix broken 'release-cursor' accel when not specified in --hotkeys
    Resolves: rhbz#1029108


author: Marc-André Lureau <marcandre.lureau@redhat.com> 0.6.0-6
changelog:
  - Remove some warnings in kiosk mode
    Resolves: rhbz#1107518
  - Register remote-viewer.desktop as a handler for application/x-virt-viewer
    Resolves: rhbz#1063238
  - New display will be zoomed out to a very small display size
    Resolves: rhbz#1104064
  - Guest can not be resized to expected window size after zoom out
    Resolves: rhbz#1105528


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.1-6
changelog:
  - Fix man page references: fence_virtd.conf -> fence_virt.conf
    (fix_man_page_references_fence_virtd_conf_fence_virt_conf.patch)
    Resolves: rhbz#667170


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.3-1
changelog:
  - Zap patch queue
  - Add post call to fence-virt to integrate with cluster 3.1.4
  - Rebase to latest upstream
  - Provide 'domain' in metadata output for compatibility
  - Fix input parsing to allow domain again
    Resolves: rhbz#719645


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.3-3
changelog:
  - Fix error getting status from libvirt-qpid plugin
    Convert libvirt-qpid plugin to QMFv2
    Add libvirt-qmf support to the libvirt-qpid plugin
    Resolves: rhbz#691200


author: Petr Hracek <phracek@redhat.com> - 3.9.4-10
changelog:
  - This resolves several CVEs
  - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
  - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
  - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
  - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668
  - Resolves: #1299919


author: Yonit Halperin <yhalperi@redhat.com> - 0.12.0-12.el6_4.1
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#956984
    Resolves: rhbz#961427


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-40.el6
changelog:
  - Explicitly specify auth mechanism when calling ldapmodify in
    the installers (#1108661)
  - Add support for DNS classless reverse domains (#1095250)
  - Multiple nsDS5ReplicaId attributes created in
    cn=replication,cn=etc (#1109050)
  - ipa-client-install should configure sudo automatically (#1111121)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-41.el6
changelog:
  - ipasam does not support deleting multiple child trusted domains due
    to LDAP delete operation (#1110664)
  - Excessive LDAP calls by ipa-sam during file operations to samba file
    share on freeipa master cause high CPU and slow performance (#1074314)


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-47.el6.1
changelog:
  - Resolves: #1280207 Unable to resolve group memberships for AD users when
    using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
    ipa-server-3.0.0-42.el6.x86_64 with AD Trust
    - Do not lookup up the domain too early if only the SID is known
    - Do not store SID string in a local buffer
    - Allow ID-to-SID mappings in the extdom plugin
  - Resolves: #1280208 ipa-server-install with externally signed CA fails with
    NSS error (SEC_ERROR_BUSY)
    - Free NSS objects in --external-ca scenario


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-14.el6_5.1
changelog:
  - Improve handling of xmlStopParser(CVE-2013-2877)
  - Do not fetch external parameter entities (CVE-2014-0191)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.7.6-1
changelog:
  - Update to 2.7.6
  - Updated the configure arguments so that the native Win32 thread API
    will be used instead of pthreads


author: Andrew Beekhof <abeekhof@redhat.com> - 2.7.6-1.3
changelog:
  - The use of ExclusiveArch conflicts with noarch, using an alternate COLLECTION to limit builds
    Related: rhbz#658833


author: Remi Collet <Fedora@famillecollet.com> 1.1-1
changelog:
  - update to 1.1
  - add missing modules.conf
  - new Requires perl(Net::SSLeay), perl(Crypt::SSLeay), smartmontools
  - download URL to launchpad


author: Remi Collet <Fedora@famillecollet.com> 1.1.2-2
changelog:
  - remove perl-XML-SAX optional dep, which is broken on EL5
    and cause overload when installed on the OCS server


author: Remi Collet <Fedora@famillecollet.com> 1.1.2.1-1
changelog:
  - security update for CVE-2009-0667
    http://bugs.debian.org/590879
    http://www.debian.org/security/2009/dsa-1828


author: Matthias Schroder <Matthias.Schroder@cern.ch> 1.1.2.1-4..slc6
changelog:
  - Remove Ocsinventory/Agent/Backend/OS/Generic/Users.pm and Processes.pm
  - Change logrotate to weekly, keep 9


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-20
changelog:
  - -D is for --define, not --predefine (#785236)
  - Add runtime detection for /usr move (#761000)
  - Fix brace matching on multiline constructs in perl.req (#752119)
  - Make pretrans scriptlet failure fail the package installation (#736960)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-22
changelog:
  - Proper region tag validation on package/header read (CVE-2012-0060)
  - Double-check region size against header size (CVE-2012-0061)
  - Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-25
changelog:
  - Fix Lua script current directory behavior (#746190)
  - Copy rpmpkgs "log" into place instead of moving (#746637)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-12
changelog:
  - incorporate a fix to teach the file labeling patch about when replay caches
    are expunged (#714217)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-13
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-14
changelog:
  - krb5kdc init script: pull in some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (#651466)
  - don't use %{?_smp_mflags} -- the build machinery doesn't always work
    right for those cases
  - tag the application of patches which we use to fix compile problems with
    %{_rawbuild} so that minimum-patches builds can be done (#711032)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-15
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-16
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#724033)
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-17
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-19
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-21
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth with AD KDCs (#734341)


author: Jakub Jelinek <jakub@redhat.com> 4.4.4-11
changelog:
  - update from gcc-4_4-branch
    - PRs target/44597, target/44705
  - VTA backports
    - PR c++/44808
    - avoid outputting invalid registers in debug info (#610455)
  - -Wunused-but-set-* vector assignment fix (PR c++/44780)
  - fix PowerPC address reloading for inline-asms (#608768, PR target/44707)
  - fix predictive commoning (#609488, PR tree-optimization/40421)
  - fix SRA not to do useless sign-extensions that confuses ivopts (#610785)
  - fix IPP handling in libgcj (#578382)


author: Jakub Jelinek <jakub@redhat.com> 4.4.4-12
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/44582, fortran/44773, fortran/44847, pch/14940, target/33743
  - fix inline-asm check for auto-inc-dec operands (PR testsuite/44701)
  - use DW_OP_const[48]u instead of DW_OP_addr for DW_OP_GNU_push_tls_address
    operand


author: Jakub Jelinek <jakub@redhat.com> 4.4.4-13
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/45019, target/42869, target/44942, testsuite/38946
  - VTA backports
    - PRs debug/45015, bootstrap/45028
    - var-tracking improvements (#616050, PR debug/45003, PR debug/45006)
  - fix fortran SELECT CASE handling with CHARACTER type (PR fortran/40206)
  - small OpenMP debug info improvements (#533181)


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-7.1
changelog:
  - port the rhel-7 package version to rhel-6
  - enabled ECDSA due to Unbound
  - Fix issue in DSA algorithm (#1077799)


author: Daniel Veillard <veillard@redhat.com> - 0.6.1-2.el6
changelog:
  - do not require specifically tog-pegasus server (rhbz#799037)
  - (de)register the schemas with sblim-sfcb if found


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.1-4.el6
changelog:
  - Fix an incomplete substitution in Makefile (rhbz#805892)
  - Only deregister cim classes on uninstall (rhbz#864096)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-5
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#908083)


author: Michal Privoznik <mprivozn@redhat.com> - 0.6.1-7.el6
changelog:
  - libvirt-cim-get_dominfo-Use-VIR_DOMAIN_XML_SECURE-more-wisely.patch (rhbz#826179)
  - Don't install open-pegasus' specific providers (rhbz#859122)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1000937)
  - Update spec file to more closely match upstream
  - Fixed dates in changelog


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6_5.1
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1055626)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Tomas Popela <tpopela@redhat.com> 42.0.2311.90-1
changelog:
  - Update to 42.0.2311.90
  - Resolves: rhbz#1211872
  - [RFE] chromium-browser rpm creates specified directories on install
  - Resolves: rhbz#1211903


author: Tomas Popela <tpopela@redhat.com> 42.0.2311.135-1
changelog:
  - Update to 42.0.2311.135
  - Resolves: rhbz#1216924
  - Chromium-browser not accepting gnome system proxy settings in RHEL6.
  - Resolves: rhbz#1217065


author: Tomas Mraz <tmraz@redhat.com> 0.75-1
changelog:
  - fix disabling SELinux and audit in spec (#433284)
  - remove obsolete no.po (#332121)
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> 0.77-4.2
changelog:
  - add -e option to expire the password for user
  - compile the binary with PIE and full RELRO options


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.4
changelog:
  - Fix regression in cache causing some PVs to bypass filters (2.02.105).
  - Fix incorrect persistent .cache after report with label fields only (2.02.106).
  - Reinstate PV tag recognition for pvs if reporting label fields only (2.02.105).


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-10.1
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#971698)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#976217)


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Decrease debuginfo verbosity for s390 reduce memory consumption
  - Resolves: rhbz#1033151


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-2
changelog:
  - Create symlinks to the libwebkitgtk library with the old name (libwebkit)
  - Resolves: rhbz#1033151


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-3
changelog:
  - Compile with --disable-geolocation
  - Resolves: rhbz#1119647
  - Restore symlinks after ldconfig call in post to avoid their removal
  - Resolves: rhbz#1118424


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-8
changelog:
  - Fix more of the wrongly aligned memory commits on ppc64
  - Fix crash in Yarr JIT
  - Resolves: rhbz#1136299


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-78
changelog:
  - Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning
                            value is higher than passwordWarning LDAP attribute.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-79
changelog:
  - Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh
                            on ppc64 and s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-80
changelog:
  - Resolves: rhbz#903078 - Out-of-bounds read flaws in
                            autofs and ssh services responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-81
changelog:
  - Resolves: rhbz#903078 - TOCTOU race conditions by copying
                            and removing directory trees


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed
                            database update


author: Angus Salkeld <asalkeld@redhat.com> - 0.9.0-2
changelog:
  - Disable loop and ipc tests as they use features not availble on brew.
  - Get the tests to print out (disable parallel-tests).
  - Call autogen.sh to get the no parallel-tests
  - Disable ppc arch as the "make check" fails.


author: David Vossel <dvossel@redhat.com> - 0.14.2-2
changelog:
  - Fixes issue with qb_ipcc_recv() that resulted in nearly 100%
    cpu usage during certain situations. (#869446)


author: David Vossel <dvossel@redhat.com> - 0.14.2-3
changelog:
  - Additional upstream work to address 100% cpu usage bug in
    realtime environment.
    cpu usage during certain situations. (#869446)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Require tzdata 2020a so system tzdata matches resource updates in b07
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b09.
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u265-b01.
  - Update release notes for 8u265 release.
  - Resolves: rhbz#1860462


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-6
changelog:
  - Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode
  -   use perl-Socket6 on RHEL6


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-7
changelog:
  - Resolves: Bug 830355 - [RFE] improve cleanruv functionality 
  - Resolves: Bug 876650 - Coverity revealed defects 
  - Ticket #20 - [RFE] Allow automember to work on entries that have already been added (Bug 768084)
  - Resolves: Bug 834074 - [RFE] Disable replication agreements
  - Resolves: Bug 878111 - ns-slapd segfaults if it cannot rename the logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-8
changelog:
  - Resolves: Bug 887855 - RootDN Access Control plugin is missing after upgrade from RHEL63 to RHEL64


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-10
changelog:
  - Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-12
changelog:
  - Resolves: Bug 910994 - PamConfig schema not updated during upgrade
  - Resolves: Bug 910995 - Valgrind reports memleak in modify_update_last_modified_attr
  - Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
  - Resolves: Bug 911467 - DNA: use event queue for config update only at the start up
  - Resolves: Bug 911468 - Error messages encountered when using POSIX winsync
  - Resolves: Bug 911469 - dse.ldif is 0 length after server kill or machine kill
  - Resolves: Bug 911474 - Invalid chaining config triggers a disk full error and shutdown
  - Resolves: Bug 914305 - ns-slapd segfaults while trying to delete a tombstone entry
  - Resolves: Bug 913228 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-13
changelog:
  - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)
  - Resolves: Bug 929111 - Coverity issue 13091
  - Resolves: Bug 929196 - Deadlock in DNA plug-in (ticket 634)
  - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 929115 - crash in aci evaluation (ticket 628)
  - Resolves: Bug 923240 - unintended information exposure when anonymous access is set to rootdse (ticket 47308)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-14
changelog:
  - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)


author: Hans de Goede <hdegoede@redhat.com> 2.1-3
changelog:
  - Don't crash when reading a DASD disk with PV's on there (#563419)
    Resolves: #563419
  - Don't overwrite the pmbr when merely printing a gpt table (#563211)
    Resolves: #563211


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Petr Lautrbach <plautrba@redhat.com> 2.0.43-5.1
changelog:
  - Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions
  Resolves: rhbz#872700
  - Fix sources to pass all tests
  Rsolves: rhbz#591451


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-7
changelog:
  - Add patch to check if hash algorithms are backed by a token
  - Add patch to disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256,
    which have never enabled in the past


author: Eric Sandeen <sandeen@redhat.com> - 1.0.1-2
changelog:
  - Upstream respun the release tarball to re-include top-level dir
  - drop exclude of bno_plot.py[co], not getting built now?


author: Edward Shishkin <edward@redhat.com> - 1.0.1-4
changelog:
  - blktrace doesn't run when device name is duplicated (#583615)
  - blktrace prints incorrect usage when running w/o parameters (#619201)
  - btreplay cannot work for /dev/cciss/c0d0 device (#650229)
  - option -k doesn't kill running trace (#583624)
  - blkiomon prints nothing when blktrace works with logical volume (#650243)
  - blkparese exit with non-zero status when tracefile doesn't exist (#583695)
  - run time went but blktrace is still running (#595356)
  - inconsistencies in btrecord man page (#595413)
  - undocumented options in blkiomon (#595419)
  - undocumented options in blkparce (#595615)
  - undocumented options in blktrace (#595620)
  - undocumented options in btreplay (#595623)
  - undocumented options in btt (#595628)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 2.02-5
changelog:
  - Fix configure failure with -Werror-implicit-function-declaration in CFLAGS
  - Add a minilzo subpackage which contains a shared version of minilzo, to be
    used by all applications which ship with their own copy of it (bz 439979)


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740735


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - 573591: Fix the permissions on some directories (bkearney@redhat.com)
  - 678049: Fix status after CLI register with --autosubscribe.
    (dgoodwin@redhat.com)
  - 676349: python deprecation fixups (jbowes@redhat.com)
  - 676363 - rhsm-compliance-icon has no icon image (cduryee@redhat.com)
  - 672562 - request for subscription-manager list --available --ondate option
    (cduryee@redhat.com)
  - 672562 - request for subscription-manager list --available --ondate option
    (cduryee@redhat.com)
  - 676371 - Compliance Assistant closes when you're not done
    (cduryee@redhat.com)
  - 676348: make config file and runtime dirs/logs only readable by root
    (jbowes@redhat.com)
  - 676534 - Got message “unable to read /var/lib/rhsm/facts/facts.json” at
    first time register to stage (cduryee@redhat.com)
  - 675777 Date search field has no accessibility handler (cduryee@redhat.com)
  - 675817 - Compliance Assistant needs an Update button for the date
    (cduryee@redhat.com)
  - 675812 - Some tracebacks while beating on subscription-manager-gui
    (cduryee@redhat.com)
  - 675951 compliance asst doesn't word wrap label (cduryee@redhat.com)
  - 670655 can't dismiss error dialog when subscribing to personal subscriptions
    (cduryee@redhat.com)
  - 673050: Using strftime to format update time. (jharris@redhat.com)
  - 674078: send 'right now' for compliance today, too (jbowes@redhat.com)


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - 678003: Write proxy info for yum repositories we manage.
    (dgoodwin@redhat.com)
  - 678003: Fix a certlib cached connection. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.95.4-1
changelog:
  - Add support for tags. (dgoodwin@redhat.com)
  - 682311: rhsm-compliance icon pegs the cpu at 100% (cduryee@redhat.com)
  - 672821: Latest man pages from deon (bkearney@redhat.com)
  - 679961:  Clearing out all fields in subscription details widget.
    (jharris@redhat.com)
  - 629670: check for warning periods in valid certs, not expired ones
    (jbowes@redhat.com)
  - 676017: Configure the release branch to use production (bkearney@redhat.com)
  - 676371: Better Compliance Assistant refreshing after bind.
    (dgoodwin@redhat.com)
  - Move the translations to be language only, not language plus country
    (bkearney@redhat.com)
  - 678151: prompt for credentials if not supplied as cli args
    (jbowes@redhat.com)
  - 680399: add --auto to subscribe (jbowes@redhat.com)
  - 676377: rhsm-compliance-icon's status can be a day out of sync
    (cduryee@redhat.com)
  - 672562: request for subscription-manager list --available --ondate option
    (cduryee@redhat.com)
  - Add in the translated po files (bkearney@redhat.com)
  - 677756 add accesibility names to compliance assistant tables
    (alikins@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.95.5-1
changelog:
  - Resolves: #688192,#688469,#683968,#688550,#685086,#685099,#685145,#685108,#684680,#684285,#676377,#681925,#614453,#682331
  - 688192: don't look for dmi info on machines without dmi (jbowes@redhat.com)
  - 688469: workaround for optparse's lack of i18n/l10n (jbowes@redhat.com)
  - 683968: ensure yum plugins don't log to stdout (jbowes@redhat.com)
  - 688550: ensure i18n configuration is the first thing to happen
    (jbowes@redhat.com)
  - 685086: Fact times were read from the file but not localized before putting
    on the ui (bkearney@redhat.com)
  - 685099: Add in missed translations to the compliance assistant string
    (bkearney@redhat.com)
  - 685145: Remove rogue use of pyOpenSSL (jbowes@redhat.com)
  - 685108: Translation missed for the import dialog (bkearney@redhat.com)
  - 684680: Remove unnecessary gettext text domain calls, and ensure only using
    the rhsm domain (bkearney@redhat.com)
  - 684285: Add a svg library dependency (bkearney@redhat.com)
  - 676377: rhsm-compliance-icon's status can be a day out of sync
    (cduryee@redhat.com)
  - 681925: subscription-manager masks SIGPIPE when running virt-what, resulting
    in errors in shell commands (cduryee@redhat.com)
  - 614453: fix list cli command for multi entitled products (jbowes@redhat.com)
  - 682331: Latest man pages from Deon (bkearney@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.95.6-1
changelog:
  - Resolves: #691137,#691536,#684647,#688592
  - Add the latest l10n strings (jbowes@redhat.com)
  - 691137: set return code from main() for rhsmcertd (jbowes@redhat.com)
  - latest l10n strings (jbowes@redhat.com)
  - 691536: More string updates (jbowes@redhat.com)
  - 691536: update strings replacing compliance with valid (jbowes@redhat.com)
  - 684647: i18n/l10n our .desktop files (jbowes@redhat.com)
  - 688592: Latest strings from the i18n team (bkearney@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.95.7-1
changelog:
  - Resolves: #691784, #688419, #691480, #691536, #691788
  - 691784: fix entitlement failure that throws sequence error
    (alikins@redhat.com)
  - 688419: Latest japanese strings (bkearney@redhat.com)
  - 691784: Fix a bug when bare strings were passed to handle_gui_exception
    (alikins@redhat.com)
  - 691784: Fix handling of unsubscribing imported certs while unregistered
    (alikins@redhat.com)
  - 691480: syslog non-compliance on the proper status code (jbowes@redhat.com)
  - 691480: update syslog message for proper cli command name (jbowes@redhat.com)
  - 691536: remove 'compliance' from a11y string, and remove useless glade string
    (jbowes@redhat.com)
  - 691788: Check if entitlement cert is valid before allowing manual import.
    (dgoodwin@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.9-1
changelog:
  - 700313: We were skipping the code that hides the activation button
    (alikins@redhat.com)
  - 700313: Tweaking activate dialog properties to show in firstboot.
    (jharris@redhat.com)


author: Doug Ledford <dledford@redhat.com> - 1.1.3-2
changelog:
  - Add Requires of -devel package to -devel-static package
  - Add Requires of libibverbs-driver (this pulls in the various driver packages
    automatically when the libibverbs package is installed)


author: Doug Ledford <dledford@redhat.com> - 1.1.5-1
changelog:
  - Update to latest upstream version (1.1.4 to 1.1.5)
  - Drop libibverbs cow.patch as it is in 1.1.5 already
  - Enable valgrind support so memory corruption is easier to debug
  - Make sure RPATH entries are removed from programs
  - Related: bz725016


author: Jan Safranek <jsafrane@redhat.com> 1.2.13-1
changelog:
  - upgrade to 1.2.13
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.11.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.12.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.13.html
  - Resolves: #657535 (CVE-2010-4300 CVE-2010-3445)


author: Jan Safranek <jsafrane@redhat.com> 1.2.15-1
changelog:
  - upgrade to 1.2.15
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.14.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html
  - Resolves: CVE-2011-0444 CVE-2011-0538 CVE-2011-0713 CVE-2011-1139
    CVE-2011-1140 CVE-2011-1141 CVE-2011-1143


author: Jan Synáček <jsynacek@redhat.com> 1.2.15-2.1
changelog:
  - security patches
  - Resolves: CVE-2011-1143
              CVE-2011-1590
              CVE-2011-1957
              CVE-2011-1959
              CVE-2011-2174
              CVE-2011-2175 CVE-2011-1958
              CVE-2011-2597 CVE-2011-2698
              CVE-2011-4102
              CVE-2012-0041 CVE-2012-0066 CVE-2012-0067
              CVE-2012-0042
              CVE-2012-1595


author: Michal Toman <mtoman@redhat.com> - 3.4.0-1
changelog:
  - rebase to 3.4.0 - #1127907
  - remove ipv6 patch - it is a part of 3.4.0
  - fix "strmsock.cpp:558: accept failed" - #1105679


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.39-1
changelog:
  - remount /proc to set attributes from fstab #984003
  - print something when arping is detecting colliding ip addresses
  - try dhcpv6 after v4 failed
  - Allow dhclient configuration files for DHCPv6 as well. (#815676)
  - ifdown: don't call nmcli on interface that is alread down
  - call flush addresses with scope global
  - init: inform users about .override files in .conf files
  - netfs: do not force NFS exports to be mounted before _netdev mounts
  - set net.ipv6.conf..autoconf in ifup-ipv6
  - mention rule6 files
  - securetty: check if the device is in the file before attempting to write to it
  - Process rule6-* for sit devices (#840009)
  - Killproc -d should parse same values as sleep
  - Make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - bonding: set master up before slaves
  - Fix greps to correctly handle comments and quotation (#915659)


author: Lukas Nykryn <lnykryn@redhat.com> - 9.03.40-1
changelog:
  - sync disks before halt (#1006294)
  - provide KVM guest count and limit info message (#1014731)
  - add ability to disable LVM activation on boot (#1015065)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-10
changelog:
  - fix: virtual-guest profile should not deploy the nobarrier option
    resolves: rhbz#886956
  - fix: disable transparent hugepages in latency-performance profile
    resolves: rhbz#887355


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-12
changelog:
  - fix: tuned incorrectly sets readahead values when new device is inserted
    resolves: rhbz#905077
  - fix: there is a race when multiple devices are inserted
    resolves: rhbz#904062


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-13
changelog:
  - add support for upstream THP
    resolves: rhbz#912788
  - added sap profile, backported features it needs
    resolves: rhbz#910838
  - made elevator settings customizable
    resolves: rhbz#987547
  - fixed usb_autosuspend and bluetooth functions
    resolves: rhbz#982756
  - increased kernel.sched_migration_cost in virtual-host profile
    resolves: rhbz#969491
  - documented virtual-guest and virtual-host profiles
    resolves: rhbz#964187
  - fixed typo in tuned-adm help
    resolves: rhbz#963821
  - modified latency-performance profile to lock CPU to C1
    resolves: rhbz#961792
  - added support for /etc/sysctl.d
    resolves: rhbz#959732
  - fixed permissions of /var/run/tuned/pmqos-static.pid
    resolves: CVE-2013-1820
  - fixed diskdevstat labels
    resolves: rhbz#885080
  - quiet errors when remounting FS with nobarriers
    resolves: rhbz#838512


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-15
changelog:
  - dynamically changing symlinks excluded from the RPM verification
    resolves: rhbz#1017366
  - reversed reading of sysctl configuration in SYSCTL_POST to follow
    RHEL-6 behavior
    resolves: rhbz#1036049
  - fixed typo in latency-performance profile regarding SYSCTL_POST
    resolves: rhbz#1064062
  - added support for s390 block devices (/dev/dasd)
    resolves: rhbz#1129936
  - added support for Xen VS devices (/dev/xvd)
    resolves: rhbz#1159963
  - increased vm.max_map_count in sap-netweaver profile
    resolves: rhbz#1174253


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-16
changelog:
  - added oracle profile
    resolves: rhbz#1196294
  - ktune now doesn't revert sysctl settings if not explictly requested
    resolves: rhbz#1111416


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-18
changelog:
  - switched to sysfs for governor switching, cpuspeed config is still patched
    for compatibility
    related: rhbz#1313489


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-19
changelog:
  - fixed exit code of snmp utilities when wrong argument to '-A' option
    is specified (#574061)
  - fixed BER parsing of incoming packets - siletnly discard the invalid ones
    according to RFC (#568651)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-21
changelog:
  - fixed hrFSTable and hrStorageTable to provide persistent table indexes
    according to RFS 2790 (#595325)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-22
changelog:
  - fixed value of ipIfStatsTable.Ip6ReasmReqds (#597265)
  - added missing include files from util_funcs directory (#604636)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-27.1
changelog:
  - fixed truncation of sysObjectID (#652223)
  - fixed assertions in calculating of statistics in IF-MIB (#652551)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-3
changelog:
  - prevent setfacl --restore from SIGSEGV on malformed restore file (#576512)
  - run the test-suite if possible


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-5
changelog:
  - clarify that removing a non-existent acl entry is not an error (#674883)
  - update project URL in package specification (#702638)


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-1
changelog:
  - Related: rhbz#675821 - Rebase to upstream 0.10 rev 1083082 (store rev
    remains 4446)
  - Removing svn rev no. from the package names


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-4
changelog:
  - Related rhbz#711834
  - MRG 2.0 GA build for RHEL 6.1.z, equates to 0.10-8.el5 build
  - The mrg-2.0.x patch file was updated to include:
    - BZ 707023: RPMdiff failure (multilib regressions) in qpid-qmf
    - BZ 709343: Packaging problem in qpid-qmf-devel (qmf-gen templates)
    - BZ 709862: dash-7 source RPM does not build
    - BZ 671369: RDMA client can segfault when no SASL mechanism specified
  - Catch-up build corresponding to RHEL-5 builds 0.10-4 -5 -6 and -7:
  - RHEL-5 0.10-4:
    - 2.0 RC build 1
    - BZs: 690261,693407,695263,695716,696637,696655,696698
  - RHEL-5 0.10-5:
    - Intermediate build to address rpmdiff/multilib problems
    - BZs: 689907
    - Now sourcing the doxygen-generated HTML from distcvs
  - RHEL-5 0.10-6:
    - 2.0 RC build 2
    - BZs: 675921,681313,689907,698254,700822,701709,701777,701786,701804
  - RHEL-5 0.10-7:
    - 2.0 RC build 3
    - BZs: 693895,698721


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307.1
changelog:
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  Resolves: rhbz#1462824
  - Disable mysqld_safe_t secure mode environment cleansing.
  Resolves: rhbz#1464145


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-11
changelog:
  - Add support for 64-bit vfsv1 quota format (bugs #609795, #669598)
  - Use /proc/mounts for mountpoint scanning (#623656)
  - Add quota_nld deamon init script (bug #634137)
  - Comment example quotatab to silent warnquota (bug #663027)
  - Add GFS2 query support via RPC (bug #547748)
  - Document --always-resolve option (bug #662997)
  - Use rq_bsize to convert quotas transferred by RPC (bug #667755)
  - Make RPC block factor dynamic (bug #667755)
  - Check whether set limits fit into the range supported by quota format
    (bug #668709)
  - Check set limits fit into the range supported by RPC transport (bug #668710)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-12
changelog:
  - Do not own common directories under /etc (bug #634137)
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-13
changelog:
  - Correct spec file comment (bug #634137)
  - Add quotasync tool (bug #658586)
  - Implement quotacheck for GFS2 (bug #658586)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-14
changelog:
  - Fix vfsv0 format detection (bug #609795)
  - Initialize vfsold block and inode value boundries for new quota file
    (bug #668709)


author: Marek Kasik <mkasik@redhat.com> 2.28.1-2
changelog:
  - Don't crash when the history file is empty (#552076)
  - Fix mixed use of spaces and tabs in spec file
  - Set %defattr for devel subpackage
  - Add ChangeLog to docs of devel subpackage
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> 2.28.1-8
changelog:
  - Backport RDP support
  - Backport scaling of RDP sessions
  - Backport Minimize button
  - Backport storing of credential to keyring
  - Backport translations for new strings
  - Resolves: #1215093


author: Marek Kasik <mkasik@redhat.com> 2.28.1-10
changelog:
  - Don't capture key events of other tabs
  - Allow different logins to the same host
  - Ignore active-plugins GConf key
  - Related: #1215093


author: Roland McGrath <roland@redhat.com> - 0.149-1
changelog:
  - Update to 0.149
    - libdw: Decode new DW_OP_GNU_implicit_pointer operation;
             new function dwarf_getlocation_implicit_pointer.
    - libdwfl: New function dwfl_dwarf_line.
    - eu-addr2line: New flag -F/--flags to print more DWARF line info details.
    - eu-readelf: better .debug_loc processing (#627729)
    - eu-strings: Fix non-mmap file reading. (#609468)
    - eu-strip: -g recognizes .gdb_index as a debugging section. (#631997)


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-3
changelog:
  - Resolves: rhbz#590667
  - Rebase on new upstream release
    + High: Core: Bug lf#2401 - Backed out changeset 6e6980376f01


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-5
changelog:
  - Resolves: rhbz#594296 - rpmdiff checks
    + Remove legacy scripts
    + Add missing man pages
    + Fix sub-package version requires


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-6
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: cib: Also free query result for xpath operations that return more than one hit
    + High: cib: Fix the application of unversioned diffs
    + High: Core: Correctly unpack HA_Messages containing multiple entries with the same name
    + High: Core: Resolve coverity RESOURCE_LEAK defects
    + High: crmd: All nodes should see status updates, not just he DC
    + High: crmd: Allow non-DC nodes to clear failcounts too
    + High: crmd: Base DC election on process relative uptime
    + High: crmd: Make sure the membership cache is accurate after a sucessful fencing operation
    + High: crmd: Make sure we always poke the FSA after a transition to clear any TE_HALT actions
    + High: crmd: Prevent segmentation fault
    + High: PE: Avoid creating invalid ordering constraints for probes that are not needed
    + High: PE: Bug lf#1959 - Fail unmanaged resources should not prevent other services from shutting down
    + High: PE: Bug lf#2422 - Ordering dependencies on partially active groups not observed properly
    + High: PE: Bug lf#2424 - Use notify oepration definition if it exists in the configuration
    + High: PE: Bug lf#2433 - No services should be stopped until probes finish
    + High: PE: Correctly detect when there is a real failcount that expired and needs to be cleared
    + High: PE: Correctly handle pseudo action creation
    + High: PE: Fix colocation for interleaved clones
    + High: PE: Fix colocation with partially active groups
    + High: PE: Fix potential use-after-free defect from coverity
    + High: PE: Fix use-after-free in order_actions() reported by valgrind
    + High: PE: Prevent endless loop when looking for operation definitions in the configuration
    + High: stonith: Correctly parse pcmk_host_list parameters that appear on a single line
    + High: tools: crm_simulate - Resolve coverity USE_AFTER_FREE defect


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-7
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: ais: Use service slot 10 to avoid conflicting with cman


author: Andrew Beekhof <andrew@beekhof.net> 1.1.4-1
changelog:
  - Resolves: rhbz#668466
  - Update tarball to upstream version: 3ac6ac993d6d
    + Performance improvements for larger clusters
    + Miscellaneous bug fixes


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-1
changelog:
  - Fix rpmlint warnings
  - Rebase on new upstream release 
    See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details
    + Bugs lf#2445, lf#2493, lf#2508, lf#2518, lf#2527, lf#2544, 
  	 lf#2545, lf#2550, lf#2551, lf#2554, lf#2558, bnc#665131
  - Resolves: rhbz#676286 - Add per device 'diag' option to pacemaker stonith action


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-564.el6]
changelog:
  - [tools] perf trace: Handle legacy syscalls tracepoints (Jiri Olsa) [1212402]
  - [scsi] qla2xxx: fix busy wait regression (Chad Dupuis) [1207270]
  - [fs] eCryptfs: Remove buggy and unnecessary write in file name decode routine (Mateusz Guzik) [1202156] {CVE-2014-9683}
  - [net] ipv4: Missing sk_nulls_node_init in ping_unhash (Denys Vlasenko) [1218103] {CVE-2015-3636}
  - [s390] dasd: disable CUIR support for z/VM (Hendrik Brueckner) [1223721]
  - [ata] ahci: avoton port-disable reset-quirk (David Milburn) [1223187]
  - [inifinband] iw_cxgb4: don't call neigh_release (Sai Vemuri) [1215835]
  - [fs] sunrpc: Set alloc_slot for backchannel tcp ops (Sachin Prabhu) [1208339]
  - [fs] epoll: convert max_user_watches to long (George Beshers) [741705]
  - [firmware] cxgb4: add missing Makefile invocation for 1.13.32.0 images (Jarod Wilson) [1189255]
  - [fs] proc: make proc_fd_permission() thread-friendly (Carlos Maiolino) [1201593]
  - [acpi] scan: reduce log level of "ACPI: \_PR_.CPU4: failed to get CPU APIC ID" (Charles Rose) [1222466]
  - [netdrv] mlx5: wrong page mask if CONFIG_ARCH_DMA_ADDR_T_64BIT enabled for 32Bit architectures (Doug Ledford) [1141604]
  - [netdrv] vmxnet3: Receive vlan stripped frames in hwaccel path (Neil Horman) [1218404]
  - [fs] NFSv4.1: Deal effectively with interrupted RPC calls (Steve Dickson) [1200956]
  - [fs] NFSv4.1: Try to deal with NFS4ERR_SEQ_MISORDERED (Steve Dickson) [1200956]
  - [fs] NFSv4.1: Handle NFS4ERR_BADSLOT errors correctly (Steve Dickson) [1200956]
  - [kernel] cgroup: fix cgroup_rmdir vs close<eventfd> race (Johannes Weiner) [1167772]
  - [thermal] intel_powerclamp: add id for Avoton SoC (Steve Best) [1225544]
  - [kernel] tracing: Buffer the output of seq_file in case of filled buffer (Jiri Olsa) [1123102]
  - [kernel] tracing: Consolidate protection of reader access to the ring buffer (Jiri Olsa) [1123102]
  - [kernel] tracing: Fix ring_buffer_read_page reading out of page boundary (Jiri Olsa) [1123102]
  - [kernel] ring-buffer: Check for end of page in iterator (Jiri Olsa) [1123102]
  - [netdrv] be2net: use PCI MMIO read instead of config read for errors (Ivan Vecera) [1216088]
  - [thermal] powerclamp: add ids for future xeon cpus (Steve Best) [1183181]
  - [powercap] RAPL: add IDs for future Xeon CPUs (Steve Best) [1183177]
  - [net] flow_dissector: fail on evil iph->ihl (Jason Wang) [1179559]
  - [netdrv] hyperv: Add IPv6 into the hash computation for vRSS (Jason Wang) [1179559]
  - [netdrv] hyperv: Add handling of IP header with option field in netvsc_set_hash (Jason Wang) [1179559]
  - [net] bridge: check return value of ipv6_dev_get_saddr() (Thadeu Lima de Souza Cascardo) [765987]
  - [net] bridge: Fix possibly wrong MLD queries' ethernet source address (Thadeu Lima de Souza Cascardo) [765987]
  - [net] bridge: Use IPv6 link-local address for multicast listener queries (Thadeu Lima de Souza Cascardo) [765987]
  - [net] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition (Jesper Brouer) [1200541 1212801]
  - [net] tcp: Restore RFC5961-compliant behavior for SYN packets (Jesper Brouer) [1200541 1212801]
  - [crypto] drbg - fix maximum value checks on 32 bit systems (Herbert Xu) [1219907]
  - [crypto] drbg - remove configuration of fixed values (Herbert Xu) [1219907]
  - [netdrv] iwlwifi: mvm: protect rate scaling against non-mvm IBSS stations (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: send AP probe as unicast again (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: count interfaces correctly for combination checks (Stanislaw Gruszka) [1206103]
  - [netdrv] wl18xx: show rx_frames_per_rates as an array as it really is (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: fix RX A-MPDU session reorder timer deletion (Stanislaw Gruszka) [1206103]
  - [netdrv] ath9k: fix tracking of enabled AP beacons (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: dvm: run INIT firmware again upon .start() (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: rs: fix BT Coex check to look at the correct ant (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: Fix ROC removal (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: BT Coex - fix a NULL pointer exception (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: fix max_ht_ampdu_exponent for older devices (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: drop unencrypted frames in mesh fwding (Stanislaw Gruszka) [1206103]
  - [netdrv] b43: fix support for 5 GHz only BCM43228 model (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: disable u-APSD queues by default (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: notify channel switch at the end of ieee80211_chswitch_post_beacon() (Stanislaw Gruszka) [1206103]
  - [netdrv] nl80211: ignore HT/VHT capabilities without QoS/WMM (Stanislaw Gruszka) [1206103]
  - [netdrv] ath5k: fix spontaneus AR5312 freezes (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: Send EAPOL frames at lowest rate (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: always use mac color zero (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: fix failure path when power_update fails in add_interface (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: validate tid and sta_id in ba_notif (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: pcie: disable the SCD_BASE_ADDR when we resume from WoWLAN (Stanislaw Gruszka) [1206103]
  - [x86] perf: Don't use -ENOSPC for out of PMU resources (Jiri Olsa) [1215827]
  - [x86] perf: Blacklist all MEM_*_RETIRED events for Ivy Bridge (Jiri Olsa) [1215827]
  - [x86] perf: Add Intel IvyBridge event scheduling constraints (Jiri Olsa) [1215827]
  - [firmware] iwlwifi: update -12.ucode for 3160 / 7260 / 7265 / 7265D (Stanislaw Gruszka) [1194517]
  - [firmware] iwlwifi: update -10.ucode for 3160 / 7260 / 7265 / 7265D (Stanislaw Gruszka) [1194517]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-565.el6]
changelog:
  - [x86] perf/intel: Add INST_RETIRED.ALL workarounds (Jiri Olsa) [1189949]
  - [x86] perf/intel: Add Broadwell core support (Jiri Olsa) [1189949]
  - [x86] perf/intel: Add new cache events table for Haswell (Jiri Olsa) [1189949]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-566.el6]
changelog:
  - [netdrv] iwlwifi: use custom workqueue (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove not used *bt-coex* files (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: avoid use-after-free on iwl_mvm_d0i3_enable_tx() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clean net-detect info if device was reset during suspend (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: take the UCODE_DOWN reference when resuming (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - duplicate the command if sent ASYNC (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: nvm: force mac from otp in case nvm mac is reserved (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Free fw_status after use to avoid memory leak (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix MLME trigger (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: don't disable the busmaster DMA clock for family 8000 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: 7000: modify the firmware name for 3165 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: forbid MIMO on devices that don't support it (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: force quota update update after FW restart (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix typo in CONFIG option (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't power off the device between INIT and OPER firmwares (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: prevent using unmapped memory in fw monitor (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Avoid signal based decisions if ave beacon RSSI is 0 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix scan iteration complete notification handling (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't stop the FW monitor too early (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix Tx Power firmware API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: capture connection loss as part of MLME trigger (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for time events (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: do string formatting in debug triggers (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: fix spelling errors (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't return uninitialized value in get_survey() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove unused arguments (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Fix wrongfully flushing frames in the roc/off channel queue (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add debugfs entry with the number of net-detect scans (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: refactor rs_update_rate_tbl (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: check the size of the trigger struct from the firmware file (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon MLME failures (Stanislaw Gruszka) [1134606]
  - [net] mac80211: Fix mac80211.h docbook comments (Stanislaw Gruszka) [1134606]
  - [net] mac80211: notify the driver about deauth (Stanislaw Gruszka) [1134606]
  - [net] mac80211: notify the driver about association status (Stanislaw Gruszka) [1134606]
  - [net] mac80211: notify the driver about authentication status (Stanislaw Gruszka) [1134606]
  - [netdrv] mac80211: convert rssi_callback() to event_callback() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: fix comment indentation (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Clean up UMAC scan UIDs in the reset and drv_stop flows (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: 8000: change PNVM in case it doesn't match to the HW step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix debug print in the RSA ownership workaround (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow to configure the timeout for the Tx queues (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: drop support for early versions of 8000 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use debugfs_create_bool() for enable_scan_iteration_notif (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: initialize trans_pcie->ref_count on configure() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: inform mac80211 about umac scans that was aborted by restart (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove d0i3 ref correctly during AP start (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: Fix memory leak in iwl_req_fw_callback() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove WARN_ON for invalid BA notification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: take IWL_MVM_REF_UCODE_DOWN before restarting hw (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't wait for firmware verification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new 3165 series PCI IDs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove time-event start/end failure warning (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add iccm data to 8000 b-step data dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: add rx packet sequence number to dbg print (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: properly flush the queues for buffering transport (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: assign new TLV bit for multi-source LAR (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: continue (with error) CSA on GO time event failure (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: simplify iwl_mvm_get_wakeup_status() return (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't double unlock the mutex in __iwl_mvm_resume() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clarify time event end handling (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Always enable the smart FIFO (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: update copyright to include 2015 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add more new 8260 series PCI IDs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - update the new API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix force NMI for 8000 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: freeze the non-shared queues when a station goes to sleep (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: allow the op_mode to freeze the stuck queue timer (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: update Tx statistics when using fixed rate (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't init MCC during CT-kill (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove warning on station exhaustion (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: trans: Take ownership on secure machine before FW load (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new 8260 series PCI IDs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: improve ss_params debug print (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: don't allow the FW to return invalid ch indices (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: reflect TDLS pm state in mvmvif->pm_enabled (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix identation (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove unneeded include iwl-fw-error-dump.h (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: use correct NVM offset for LAR enable for new NVMs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: fix smatch warning: warn: inconsistent indenting (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: include more registers in the prph dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: speed up the Tx DMA stop flow (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support family 8000 B2/C steps (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: always update the quota after association (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - disable RRC by default (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove IWL_UCODE_TLV_API_SF_NO_DUMMY_NOTIF (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove IWL_UCODE_TLV_API_DISABLE_STA_TX (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: bump API to 13 for devices that use iwlmvm (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: set LAR MCC on D3/D0 transitions (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support LAR updates from BIOS (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: take the MAC address from HW registers (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: allow disabling LAR via module param (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support new PHY_SKU nvm section for family 8000 B0 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: disable 11ac if 11n is disabled (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: iwlmvm: LAR: disable LAR support due to NVM vs TLV conflict (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: change last 5ghz channel to 165 & add support for 8000 family (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: use IWL_DEFAULT_MAX_TX_POWER for max_eirp (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: nvm: init correct nvm channel list for 8000 devices (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: LAR: Add chub mcc change notify command (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: don't declare support for 5ghz if not supported (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: ignore IBSS flag as regulatory NO-IR indication (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: consider LAR support during NVM parse (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: create regdomain from mcc_update_cmd response (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: init country code on init/recovery (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add MCC update FW API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: disconnect if CSA time event fails scheduling (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: dvm: drop VO packets when mac80211 tells us to (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix compilation with IWLWIFI_DEBUGFS not set (Stanislaw Gruszka) [1134606]
  - [netdrv] wireless: Use eth_<foo>_addr instead of memset (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't override passive dwell in case of fragmented scan (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon low RSSI (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon statistics (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: restart firmware recording when no configuration is set (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon command response (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon channel switch (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon missed beacons (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add the cause of the firmware dump in the dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add framework for triggers for fw dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use only 40 ms for fragmented scan (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow to force the Rx chains from debugfs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new TLV capability flag for BT PLCR (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't iterate interfaces to disconnect in net-detect (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: new Alive / error table API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support beacon statistics for BSS client (Stanislaw Gruszka) [1134606]
  - [net] cfg80211: add nl80211 beacon-only statistics (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't write to DBGC_OUT_CTRL when stopping the recording (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove deprecated scan API code (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: deprecate -9.ucode for 3160 / 7260 / 7265 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support radio statistics as global survey (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add statistics API version 10 (Stanislaw Gruszka) [1134606]
  - [net] cfg80211: add scan time to survey data (Stanislaw Gruszka) [1134606]
  - [netdrv] cfg80211: remove "channel" from survey names (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: apply destination before releasing reset (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove unused function in BT coex (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix BT coex shared antenna activity check (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: print single stream params via debugfs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: avoid ss_force from being reset after tx idle (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: increase the number of PAPD channel groups to 9 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: consider TDLS queues as used during drain (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: disable MIMO for low latency P2P (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: adapt rate matching to new STBC/BFER (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: disable beamformer unless FW supports it (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't try to stop scans that are not running anymore (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: better match tx response rate to the LQ table (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: call ieee80211_scan_completed() even if scan abort fails (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: reduce quota threshold (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't send a command the firmware doesn't know (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Fix building channels in scan_config_cmd (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Enable EBS also in single scan on umac interface (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Fix a few EBS error handling bugs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: allow to define the stuck queue timer per queue (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: enable watchdog on Tx queues for mvm (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: ignore stale TDLS ch-switch responses (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: improve TDLS ch-sw state machine (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: prepare the enablement of 31 TFD queues (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: enable forcing single stream Tx decision (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove space padding after sysassert description (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add beamformer support (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: don't dump useless data when a TFD queue hangs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't reprobe if we fail during reconfig and fw_restart is false (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: check IWL_UCODE_TLV_API_SCD_CFG in API and not in capa (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix rx chains configuration in phy ctxt cmd (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: support secured boot flow for family 8000 B step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use a new API for enabling STBC (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: refactor ht/vht init (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: remove stats argument from functions (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: really disable TDLS queues (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - set all the co-running values to 0 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Do not consider invalid HW queues in queue mask (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support family 8000 C step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: init ref_lock (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: document switch case fall-through in iwl_mvm_send_sta_key (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: use STBC regardless of power save mode (Stanislaw Gruszka) [1134606]
  - [netdrv] Revert "iwlwifi: mvm: drop non VO frames when flushing" (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add support for new LTR command (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - fine tune the MPLUT register (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: move U-APSD decision to authentication (Stanislaw Gruszka) [1134606]
  - [netdrv] mac80211: move U-APSD enablement to vif flags (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: ignore temperature updates in the RX statistics notification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: cleanup unuseful and overflowing traces (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: generate statistics debugfs code (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: move statistics API to new header file (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: sync statistics firmware API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: correctly set the NMI register (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add rxf and txf to dump data (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add support for dumping a secondary SRAM (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add debugfs file for misbehaving U-APSD AP (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: let the firmware configure the scheduler (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove unused TLV capability flags (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add print of he nvm version (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: set max_out_time equal to frag_passive_dwell in fragmented scan (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: allow to disable MIMO for P2P only (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow to collect debug data from non-sleepable context (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: make sure state isn't in d0i3 when stopping fw monitor (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Add debugfs entry to enable scan offload notification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new config and PCI IDs for 4165 series (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: make sure state isn't in d0i3 when collecting fw dbg (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: repeat initial legacy rates in LQ table (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't indicate no BA if STA was in powersave (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: organize and cleanup consts (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Alter passive scan fragmentation parameters in case of multi-MAC (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: call to pcie_apply_destination also on family 8000 B step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: ask the fw to wakeup (from d0i3) on sysassert (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: tlv: add support for IWL_UCODE_TLV_SDIO_ADMA_ADDR TLV (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use iwl_mvm_sta_from_mac80211() consistently (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use iwl_mvm_vif_from_mac80211() consistently (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove useless extern definition of iwl4265_2ac_sdio_cfg (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clean refs before stop_device() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: dvm: main: Use setup_timer (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: dvm: tt: Use setup_timer (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support 2 different channels (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: wait for d0i3 exit on hw restart (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: consider d0i3_disable in iwl_mvm_is_d0i3_supported() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: support multiple d0i3 modes (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support IWL_D0I3_MODE_ON_SUSPEND d0i3 mode (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow both d0i3 and d3 wowlan configuration modes (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: add basic reference accounting (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: convert the SRAM dump to the generic memory dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: change SMEM dump to general purpose memory dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add smem content to dump data (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support additional nvm_file in family 8000 B step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: fix max rate allowed if no rate is allowed (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clear tt values when entering CT-kill (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Set the HW step in the core dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow RSSI compensation (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add debugfs to trigger fw debug logs collection (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: let the Manageability Engine know when we leave (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support LnP 1x1 antenna configuration (Stanislaw Gruszka) [1134606]
  - [netdrv] Revert "iwlwifi: use correct fw file in 8000 b-step" (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add fw runtime stack to dump data (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove MODULE_VERSION (Stanislaw Gruszka) [1134606]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-567.el6]
changelog:
  - [serial] add ability to set IRQ via module parameter (Prarit Bhargava) [1210848]
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1185166] {CVE-2015-1805}
  - [netdrv] macvlan: add VLAN filters to lowerdev (Ivan Vecera) [1213846]
  - [x86] Mark Intel Broadwell-DE processor as unsupported (Steve Best) [1226904]
  - [net] ipv6: reallocate addrconf router for ipv6 address when lo device up (Hannes Frederic Sowa) [1223610]
  - [mm] memory-failure: move refcount only in !MF_COUNT_INCREASED (Rafael Aquini) [1222832]
  - [mm] memory-failure: shift page lock from head page to tail page after thp split (Rafael Aquini) [1222832]
  - [mm] memory-failure: transfer page count from head page to tail page after split thp (Rafael Aquini) [1222832]
  - [scsi] lpfc: Correct loss of target discovery after cable swap (Rob Evers) [1226779]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-568.el6]
changelog:
  - [base] reduce boot delay on large memory systems (Seth Jennings) [1221389]
  - [md] dm: run queue on re-queue (Mike Snitzer) [1225158]
  - [fs] take i_mutex during prepare_binprm for set<u,g>id executables (Mateusz Guzik) [1216269] {CVE-2015-3339}
  - [netdrv] i40e: Make sure to be in VEB mode if SRIOV is enabled at probe (Stefan Assmann) [1206000]
  - [netdrv] i40e: start up in VEPA mode by default (Stefan Assmann) [1206000]
  - [netdrv] e1000e: Bump the version to 3.2.5 (John Greene) [1211531]
  - [netdrv] e1000e: fix unit hang during loopback test (John Greene) [1211531]
  - [netdrv] e1000e: fix systim issues (John Greene) [1211531]
  - [netdrv] e1000e: fix legacy interrupt handling in i219 (John Greene) [1211531]
  - [netdrv] e1000e: fix flush_desc_ring implementation (John Greene) [1211531]
  - [netdrv] e1000e: fix logical error in flush_desc_rings (John Greene) [1211531]
  - [netdrv] e1000e: remove call to do_div and sign mismatch warning (John Greene) [1211531]
  - [netdrv] e1000e: i219 execute unit hang fix on every reset or power state transition (John Greene) [1211531]
  - [netdrv] e1000e: i219 fix unit hang on reset and runtime D3 (John Greene) [1211531]
  - [netdrv] e1000e: fix call to do_div to use u64 arg (John Greene) [1211531]
  - [netdrv] e1000e: Cleanup handling of VLAN_HLEN as a part of max frame size (John Greene) [1211531]
  - [netdrv] e1000e: Correctly include VLAN_HLEN when changing interface MTU (John Greene) [1211531]
  - [netdrv] e1000e: call netif_carrier_off early on down (John Greene) [1211531]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-569.el6]
changelog:
  - [gpu] drm/radeon: fix freeze for laptop with Turks/Thames GPU (Jerome Glisse) [1213297]
  - [md] dm: fix casting bug in dm_merge_bvec (Mike Snitzer) [1226453]
  - [fs] nfs: Send the size attribute on open(O_TRUNC) (Benjamin Coddington) [1208065]
  - [net] inet: fix processing of ICMP frag_needed messages (Sabrina Dubroca) [1210321]
  - [net] tcp: double default TSQ output bytes limit (Hannes Frederic Sowa) [1140590]
  - [hv] hv_balloon: correctly handle num_pages>INT_MAX case (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: correctly handle val.freeram<num_pages case (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: survive ballooning request with num_pages=0 (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: eliminate jumps in piecewiese linear floor function (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: do not online pages in offline blocks (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: don't lose memory when onlining order is not natural (Vitaly Kuznetsov) [1006234]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-570.el6]
changelog:
  - [block] fix ext_dev_lock lockdep report (Jeff Moyer) [1230927]
  - [md] Revert "md dm: run queue on re-queue" (Mike Snitzer) [1232007]
  - [firmware] another cxgb4 firmware load fixup (Sai Vemuri) [1189255]
  - [char] tty: Don't protect atomic operation with mutex (Aristeu Rozanski) [1184182]
  - [edac] i5100 add 6 ranks per channel (Aristeu Rozanski) [1171333]
  - [edac] i5100 clean controller to channel terms (Aristeu Rozanski) [1171333]
  - [crypto] rng - Remove krng (Herbert Xu) [1226418]
  - [crypto] drbg - Add stdrng alias and increase priority (Herbert Xu) [1226418]
  - [crypto] seqiv - Move IV seeding into init function (Herbert Xu) [1226418]
  - [crypto] eseqiv - Move IV seeding into init function (Herbert Xu) [1226418]
  - [crypto] chainiv - Move IV seeding into init function (Herbert Xu) [1226418]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-571.el6]
changelog:
  - [netdrv] bnx2x: Move statistics implementation into semaphores (Michal Schmidt) [1231348]
  - [scsi] storvsc: Set the SRB flags correctly when no data transfer is needed (Vitaly Kuznetsov) [1221404]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-573.el6]
changelog:
  - [security] selinux: don't waste ebitmap space when importing NetLabel categories (Paul Moore) [1130197]
  - [x86] Revert "Add driver auto probing for x86 features v4" (Prarit Bhargava) [1231280]
  - [net] bridge: netfilter: don't call iptables on vlan packets if sysctl is off (Florian Westphal) [1236551]
  - [net] ebtables: Allow filtering of hardware accelerated vlan frames (Florian Westphal) [1236551]


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.2-4
changelog:
  - Fix problem where mdadm allowed the creation of more arrays than
    supported by the BIOS.
  - Resolves bz1211564


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-4
changelog:
  - Fix problem with mdadm large device names overflowing an internal buffer,
    potentially leading to segfaults.
  - Resolves bz1343809


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-5
changelog:
  - Retry reading sync_completed state to avoid a reshape not continuing after
    restarting a reshape
    This is an additional patch to resolve this bug, which was identified
    during the z-stream backport of this bug.
  - Resolves bz1322317


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-6
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1340768


author: Xiao Ni <xni@redhat.com> - 3.3.4-8
changelog:
  - Cannot assemble IMSM array with domain policy in mdadm.conf and
    RAID level migration in container with 2 arrays breaks both arrays 
  - Resolves bz1413937 and bz1413615


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-42.fc14
changelog:
  - Fix occasionall unfound source lines (affecting at least glibc debugging).
  - Fix const/volatile qualifiers of C++ types (PR c++/12328).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-45.el6
changelog:
  - [vla] Disable the unfinished types garbage collector (BZ 682891).
  - [vla] New testcase for the unfinished types garbage collector (for BZ 682891).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-47.el6
changelog:
  - [ifunc] Fix ppc64 function descriptors compatibility.
  - detach-as-stopped kernel workaround is now always active, not just on RHEL-5.


author: Paul Howarth <paul@city-fan.org> - 1:1.7.0.2-1.0.cf
changelog:
  - update to 1.7.0.2
    - new JVM (Java HotSpot Virtual Machine, version 22) that improves
      reliability and performance
    - support for Firefox 5 and later
    - JavaFX is included with Java SE
  - update tzupdater to 1_3_45-2011n
  - demo and sample files now released separately upstream and not included in
    this package


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.26.0-1
changelog:
  - Updated to latest release
  - Removed patches that have been applied upstream
  - Fixed man page paths (mann -> man3)
  - Disabled mono and ocaml for ARM (Jitesh Shah, BZ#532047)
  - Disabled regression tests on sparc64 as well as ppc/ppc64 (Dennis Gilmore)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-5
changelog:
  - Fixed broken links in index.html (doc-index-fix patch)
    Resolves: rhbz#624658
  - Enabled and fixed testsuite (testsuite-sigsegv-fix, rtest-errout-fix patches)
    Resolves: rhbz#624690
  - Fixed rpmlint warnings on spec file
  - Rebuilt with updated swig
    Resolves: rhbz#679715
  - Fixed gtk plugin program-name (gtk-progname patch)
    Resolves: rhbz#640247
  - Added urw-fonts to BuildRequires
  - Compiled with -fno-strict-aliasing


author: Martin Kutlak <mkutlak@redhat.com> - 2.0.9-34
changelog:
  - Correctly trim spaces before values with augeas
  - Prevent creating of customer case without reproducing knowledge
  - Rely on configurated email
  - Change URL in config for bug-report server
  - Fix segfaulting abrt-cli
  - Related #1422030, #1328768, #1323625, #1463316, #1421754


author: Dave Anderson <anderson@redhat.com> - 5.0.0-21.el6
changelog:
  - Implement support for x86 and x86_64 RHEL6 xen/pvops kernels, both live
    and xendumps.
    Resolves: rhbz#608779


author: Dave Anderson <anderson@redhat.com> - 5.0.0-23.el6
changelog:
  - Additional support for QEMU/savevm ram device version 4 to only use
    "pc.ram" segments and to handle the 512MB I/O hole at e0000000.
    Resolves: rhbz#619758


author: Dave Anderson <anderson@redhat.com> - 5.1.1-1.el6
changelog:
  - Add support for s390x ELF dumpfile format.  
    Resolves: rhbz#633449
  - Add support for s390x compressed/filtered dumpfiles generated by 
    makedumpfile.
    Resolves: rhbz#637197
  - Fix for the "bt" command with 2.6.27 and later x86_64 kernels to
    prevent the possible display of a an invalid "vgettimeofday" frame
    above the topmost "system_call_fastpath" frame, followed by two
    read errors indicating "bt: read error: kernel virtual address:
    ffffffffff600000  type: gdb_readmem_callback".
    Resolves: rhbz#637735
  - Save the per-cpu register contents stored in the "cpu" devices of 
    x86_64 KVM dumpfiles, and use their contents for x86_64 backtrace RSP
    and RIP hooks in the case of KVM "live dumps" where the guest system 
    was not in a crashed state when the "virsh dump" operation was done
    on the KVM host.  If an active task was running in user space when 
    a live dump was taken, that will be indicated by the "bt" output, 
    along with the user-space register contents.  The x86_64 register set 
    saved for each cpu may be displayed with the "help -[D|n]" command.
  - Fix for the x86_64 "bt" command to more correctly find the starting
    backtrace RIP and RSP hooks in KVM dumpfiles.  Without the patch,
    backtraces that should start in the interrupt or exception stacks
    were not being detected correctly.
    Resolves: rhbz#649050
  - Fix to utilize the correct "cpu" device format in x86 KVM dumpfiles
    Without the patch, the x86 registers were read in a 32-bit format, 
    which is only true if the host machine was running a 32-bit kernel.
    With the patch, the format defaults to the 64-bit format, and is
    switched to the 32-bit format if it can be determined that the host
    machine was running a 32-bit kernel.
  - Save the per-cpu register contents stored in the "cpu" devices of
    x86 KVM dumpfiles, and use their contents for x86 backtrace ESP and
    EIP hooks in the case of KVM "live dumps", i.e., where the guest
    system was not in a crashed state when the "virsh dump" operation
    was done on the KVM host.  If an active task was running in user
    space when a live dump was taken, that will be indicated by the
    "bt" output, along with the user-space register contents.  The saved
    x86 register set for each cpu may also be displayed with the
    "help -[D|n]" command.
  - Fix for the x86 "bt" command to correctly find the starting backtrace
    EIP and ESP hooks for the active tasks in KVM dumpfiles where the
    kernel had crashed.
    Resolves: rhbz#649051
  - Fix for the cpu count determination in crashed x86 KVM dumpfiles, 
    where the non-crashing cpus are marked offline in the kernel's
    cpu_online_mask by smp_stop_cpu().  Depending upon the cpu number
    of the crashing task, the cpu count may be set to a value that is
    less than the number of present cpus.
  - Change to the manner in which the cpu count is determined for x86_64
    kernels.  SLES11 2.6.32 kernels delay the call to crash_kexec() until
    after smp_send_stop() is called by panic(), and so the cpu_online_map
    cannot be used for determining the cpu count.  With the patch, the
    cpu_present_map is used.
    Resolves: rhbz#649053
  - Rebase to upstream version 5.1.1.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.1-2.el6
changelog:
  - Fix for x86 "bt" command to account for movement of ia32_sysenter_target()
    assembly function to a separate text section, and for the failure to
    resolve the backtrace of a non-active swapper task.
    Resolves: rhbz#682129
  - Upstream equivalency with 5.1.3 patch.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.7-1.el6
changelog:
  - Fix for "kmem -[sS]" if NUMA node 0 has no memory associated with it.
    Resolves: rhbz#716931
  - Fix for the x86_64 "bt" command stack transition error when a non-crashing
    CPU receives a NMI immediately after receiving an interrupt from another 
    source. 
    Resolves: rhbz#712214
  - Fix for the handling of x86_64 compressed kdump dumpfiles where
    the crashing system contains more than 454 cpus.
    Resolves: rhbz#705142
  - Added a new "--osrelease <dumpfile>" command line option that
    displays the OSRELEASE vmcoreinfo string from a kdump dumpfile.
    Resolves: rhbz#703467
  - Update to the crash(8) man page and the associated "crash -h" output.
    Resolves: rhbz#695413
  - Rebase to upstream version 5.1.7.
    Resolves: rhbz#710193


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-20
changelog:
  - Install tmpfiles configuration into /usr/lib/tmpfiles.d (#1180995)
  - Fix root key management to comply to RFC5011 (#1180267)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-43
changelog:
  - fix manpage typos found using aspell (#1011101)
  - fix comments about loading CA certs with NSS in man pages (#1011083)
  - fix handling of DNS cache timeout while a transfer is in progress (#835898)
  - eliminate unnecessary inotify events on upload via file protocol (#883002)
  - use correct socket type in the examples (#997185)
  - do not crash if MD5 fingerprint is not provided by libssh2 (#1008178)
  - fix SIGSEGV of curl --retry when network is down (#1009455)
  - allow to use TLS 1.1 and TLS 1.2 (#1012136)
  - docs: update the links to cipher-suites supported by NSS (#1104160)
  - allow to use ECC ciphers if NSS implements them (#1058767)
  - make curl --trace-time print correct time (#1120196)
  - let tool call PR_Cleanup() on exit if NSPR is used (#1146528)
  - ignore CURLOPT_FORBID_REUSE during NTLM HTTP auth (#1154747)
  - allow to enable/disable new AES cipher-suites (#1156422)
  - include response headers added by proxy in CURLINFO_HEADER_SIZE (#1161163)
  - disable libcurl-level downgrade to SSLv3 (#1154059)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-44
changelog:
  - use only full matches for hosts used as IP address in cookies (CVE-2014-3613)
  - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)


author: Gavin Romig-Koch <gavin@redhat.com> 0.17-1
changelog:
  - better fix for bug in localsave to /tmp
      (Fedora 595854)(RHEL 595855)(RHEL 607507)
  - Revert "fix bug in localsave to /tmp (Fedora 595854)(RHEL 595855)"
  - correct SyntaxWarning: name 'HAVE_gnomekeyring' is used prior to
      global declaration. (Fedora 604235)
      Author: Ales Kozumplik <akozumpl@redhat.com>
  - l10n: Updates to Polish (pl) translation
      Author: raven <raven@fedoraproject.org>
  - l10n: Updates to Ukrainian (uk) translation
      Author: yurchor <yurchor@fedoraproject.org>


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-1
changelog:
  - strata plugin buttonURLXxxx (RHEL 589704)
  - improve strata server testing scripts
  - reorg functions in strata_client_lib (RHEL 591922 related)
  - improved error checking of C compiler
  - Eliminate crash in DisplayXXXMessage


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-2
changelog:
  - fix crash in ftp plugin (Fedora 610870)(RHEL 609480)
  - Production/GA configuration of report, enable Strata plugin (RHEL 567972)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-3
changelog:
  - correct Obsoletes for report-*-RHEL-*
  - strata: handle self signed certs
  - strata-test.conf: setup URL translation
  - add html and xml response translation to strata_client_lib


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-5
changelog:
  - scp plugin: force password auth (RHEL 589702)
  - fix known hosts bug for strata scp target (RHEL 589702)
  - GTKIO: only show 'clickable' button if displaying the link is possible (RHEL 594827)
  - strata client needs to attach each file as separate file (RHEL 591922)
  - report cmd: check access to file immediatly (RHEL 614274)
  - Report throws traceback when there is a configuration for a non-present plugin (RHEL 614139)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-6
changelog:
  - Correct the order of target choices
  - remove http headers from user display (RHEL 621354)
  - correct GTKIO success dialog box (partial RHEL 621354)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-8
changelog:
  - honor the options in [main]  (RHEL 624676) (Fedora 635107)
  - Allow Strata plugin to send original filenames from report to server (Fedora 635118)(RHEL 626994)
  -  add _isa macro to spec file. (RHEL 672647)(Fedora 670215)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-9
changelog:
  - Correct the patch for Allow Strata plugin to send original filenames from report to server (RHEL 626994)


author: Petr Sabata <psabata@redhat.com> - 2.6.32-13
changelog:
  - Do not segfault when creating veth with peer option without any name provided
  - link_veth_segv.patch
  - Resolves: rhbz#636943


author: Petr Sabata <psabata@redhat.com> - 2.6.32-14
changelog:
  - Fix'd to properly build against xtables interface
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986


author: Petr Sabata <psabata@redhat.com> - 2.6.32-16
changelog:
  - Link and install m_xt.so properly
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986
  - Related: rhbz#678986


author: Petr Sabata <contyk@redhat.com> - 2.6.32-17
changelog:
  - Fix GRED options clearing
  - Resolves: rhbz#709652
  - Add macvlan/macvtap passtru support
  - Resolves: rhbz#692867
  - Resolves: rhbz#693878


author: Petr Šabata <contyk@redhat.com> - 2.6.32-18
changelog:
  - Fix changing of ip6ip6 tunnel hoplimit
  - Resolves: rhbz#730627
  - lnstat -d should dump to stdout
  - Resolves: rhbz#736106


author: Petr Šabata <contyk@redhat.com> - 2.6.32-19
changelog:
  - Adding mqprio qdisc support (#748767)
  - Adding QFQ discipline support (#788120)
  - A required update of include/linux/pkt_sched.h


author: Petr Šabata <contyk@redhat.com> - 2.6.32-20
changelog:
  - Add support for multicast rules, IPv4 only due to kernel limitations;
    see #631984, comment 14 for details (#812779)


author: Daniel Veillard <veillard@redhat.com> - 0.6.0-1.el6
changelog:
  - Rebase to libvirt-cim 0.6.0 rhbz#739154
  - Support libvirt domain events rhbz#739153
  - Network QoS support rhbz#633338
  - cpu cgroup support rhbz#739156


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.1
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#951402)
  - Need to initialize domain->type to UNKNOWN (rhbz#951402)


author: KELEMEN Peter <lxdistcc-admins@cern.ch> 1-1
changelog:
  - renamed package to cern-lxdistcc-wrappers
  - support for LCG compiler versions: 4.3.2, 4.3.5, 4.5.2


author: Rafael Schloming <rafaels@redhat.com> - 0.1.897961-1
changelog:
  - Added groups to subpackages.
  - Replaced python_sitelib with python_sitearch, use %global instead of %define, and killed unused ruby_sitelib.


author: Marek Grac <mgrac@redhat.com> - 3.0.15-20
changelog:
  - fence_ipdu: New fence agent for IBM iPDU
    Resolves: rhbz#740869
  - fence_hpblade: New fence agent for HP blades
    Resolves: rhbz#818337
  - Add fence symlinks for most used fence agents
    Resolves: rhbz#800650
  - Fix unique attributes in XML output
    Resolves: rhbz#822507
  - Automatic detection of EOL in telnet sessions
    Resolves: rhbz#823430


author: Marek Grac <mgrac@redhat.com> - 3.0.15-21
changelog:
  - fence_vmware_soap: Faster fencing and fix issue with VM without valid UUID
    Resolves: rhbz#769798
  - fence_rhevm: Support new RHEV-M API
    Resolves: rhbz#863568


author: Marek Grac <mgrac@redhat.com> - 3.0.15-25.2
changelog:
  - fence_drac5: fix regression due to invalid EOL
    Resolves: rhbz#908401
  - fence_vmware_soap: traceback when hostname cannot be resolved
    Resolves: rhbz#908409


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911525


author: Aristeu S. Rozanski F. <arozansk@redhat.com> 0.10-2
changelog:
  - Fixing the problems found by Jarod Wilson:
  - Fixing make install target
  - Fixing Makefile so it honors the provided CFLAGS
  - not using makeinstall macro
  - installing is_uinput.sh as 755 instead of changing later with attr


author: Aristeu S. Rozanski F. <arozansk@redhat.com> 0.10-3
changelog:
  - More problems found by Jarod Wilson fixed:
  - Removing exclusive architectures, it used to be in sync with linuxwacom
    package
  - marking udev rules as non-replaceable config files
  - using install on makefile


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-6
changelog:
  - Enable deprecated GLib/GTK+ symbols since Devhelp uses some of them
    since the GLib rebase. Apps should not be shipping with these build
    flags anyway.
  - Resolves: rhbz#1136304


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.11.el6
changelog:
  - gpxe-Avoid-setting-PSH-flag-when-SYN-flag-is-set.patch [bz#1105189]
  - gpxe-Set-PSH-flag-only-on-packets-containing-data.patch [bz#1105189]
  - Resolves: bz#1105189
    (HTTP request generated by gPXE has wrong TCP flag (SYN & PSH) in first packet in session)


author: Jeff E. Nelson <jenelson@redhat.com> - gpxe-0.9.7-6.12.el6
changelog:
  - gpxe-Add-init_pci_busdevfn.patch [bz#1057249]
  - gpxe-Enable-infrastructure-to-specify-an-autoboot-device-lo.patch [bz#1057249]
  - gpxe-Allow-prefix-to-specify-a-PCI-autoboot-device-location.patch [bz#1057249]
  - gpxe-Store-boot-bus-dev.fn-address-as-autoboot-device-locat.patch [bz#1057249]
  - gpxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00.0.patch [bz#1057249]
  - Resolves: bz#1057249
    (NIC boot order use device PCI address order instead of device boot order)


author: David Zeuthen <davidz@redhat.com> - 1.0.0-0.git20100223.1.el6_5
changelog:
  - Update to git snapshot for LVM2/Multipath support
  - Bump lvm2 version requirement to 2.02.61
  - Don't include compat devkit-disks symlinks
  - Don't advertise remote access support via Avahi
  - Related: rhbz#548874
  - Related: rhbz#548870


author: David Zeuthen <davidz@redhat.com> - 1.0.0-1.el6_5
changelog:
  - Update to release 1.0.0
  - Build without LVM2 and Multipath support for now (#548870, #548874)
  - Related: rhbz#575889


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-62.el6_9.1
changelog:
  - util: Implement virFileReadHeaderFD (CVE-2017-5715)
  - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
  - util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
  - conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
  - cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)


author: Carlos O'Donell <carlos@redhat.com> -2.12-1.166.1
changelog:
  - The malloc deadlock avoidance support has been temporarily removed since it
    triggers deadlocks in certain applications (#1244002).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.166.2
changelog:
  - Unlock main arena after allocation in calloc (#1256812).
  - Enable robust malloc change again (#1256812).
  - Fix perturbing in malloc on free and simply perturb_byte (#1256812).
  - Don't fall back to mmap prematurely (#1256812).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.166.3
changelog:
  - Check for NULL arena pointer in _int_pvalloc (#1256890).
  - Don't change no_dyn_threshold on mallopt failure (#1256891).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.43.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787144
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed upstreamed patch7 - java-1.6.0-openjdk-6_2-Z-rmi-fix.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Sync with 6.3:
  - Bump to IcedTea6 1.11.3
  - With removed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Including patch7 - java-1.6.0-openjdk-jstack.patch
  - Including patch3, java-1.6.0-openjdk-java-access-bridge-security.patch modification
  - Resolves: rhbz#828751


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828751


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-42
changelog:
  - Add an explicit RPATH to _elementtree.so pointing at the directory
  containing system expat
  Resolves: rhbz#962779


author: Florian Festi <ffesti@redhat.com> - 4.8.0-38
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163056)


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-31
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (web interface CSRF, STR #2398),
    including cancel-RSS fix (bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-36
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-37
changelog:
  - Fixed cupsSNMPQuirks parsing code in cups-snmp-quirks.patch (bug #580604).
  - lpstat -p reported current job as job id zero (STR #3627, bug #614908).
  - Set the default RIPCache to 128m (STR #3535, bug #616864).
  - Scheduler tracks whether we are shutting down and doesn't start
    new jobs if so (STR #3679, bug #624441).
  - Added 'restartlog' action to initscript usage output (bug #632180).
  - Fixed following rpmlint errors and warnings (bug #634931):
    - Fix character encoding in CREDITS.txt.
    - Mark D-Bus configuration file as config file.
    - Don't mark MIME types and convs files as config files.  Overrides
      can be placed as new *.types/*.convs files in /etc/cups.
    - Don't mark banners as config files.  Better is to provide new banners.
    - Don't mark initscript as config file.
    - Don't mark templates and www files as config files.  A better way to
      provide local overrides is to use a different ServerRoot setting.
      Note that a recent security fix required changed to template files.
    - Provide versioned LPRng symbol for rpmlint.
    - Use mode 0755 for binaries and libraries where appropriate.
    - Move /etc/cups/pstoraster.convs to /usr/share/cups/mime/.
    - Move cups-config man page to the devel sub-package.
  - Revert STR #2537 so non-UTF-8 clients continue to be accepted (bug #642448).
  - The php sub-package now explicitly requires the libs package with
    the same version and release (bug #646814).
  - Added tolerance for DNS failures (bug #654667).
  - Fixed initscript to stop service on reboot/halt (bug #659692).


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-90
changelog:
  - editor: improve navigation in address/route treeview (rh #1201412)
  - editor: fix on-the-fly color validation for 0.0.0.0/:: (rh #1201416)


author: Lubomir Rintel <lrintel@redhat.com> - 1:0.8.1-91
changelog:
  - Add support for vlans over bonds and fix associated issues:
  - rh1113996-ifcfg-rh-writer-ip4-fix.patch: canonicalize paths (rh #1063661)
  - rh558983-bridging.patch: fix NM_BOND_BRIDGE_VLAN_ENABLED parsing (rh #1063661)
  - rh919242-editor-indicate-bond-bridge-vlan-disabled.patch: fix dbus call (rh #1063661)
  - system-settings: for non-ethernet devices, lacking BOOTPROTO implies no L3 configuration (rh #1063661)
  - device: allow vlans on bond and bridges (rh #1063661)
  - ifcfg-rh: always signal connection added when loading a connection (rh #1063661)
  - manager: try to create virtual devices on device state changes (rh #1063661)
  - connection-editor,vlan: don't disable the system connection checkbox if the connection is not valid (rh #1063661)
  - device: make the activation succeed if no L3 configuration is desired (rh #1063661)


author: Lubomir Rintel <lrintel@redhat.com> - 1:0.8.1-95
changelog:
  - ip6-manager: ensure we don't get past GOT_LINK_LOCAL if we don't have a link-local address (rh #1197154)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-96
changelog:
  - ifcfg-rh: don't remove base connection if an alias file is removed (rh #1157867)
  - editor: fix mnemonic collisions (rh #896200)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-97
changelog:
  - vpn: let plugins forbid VPN connections from getting the default route (rh #1069313)
  - core: don't duplicate addresses (and other) info in IP configs (rh #1207599)
  - editor: check gateway to be in the network specified by addr/prefix (rh #1167491)
  - cli: fix 'nmcli con' hang if both NetworkManager and nm-applet are stopped (rh #1213327)


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch,
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-2
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196133 #1196121 #1196125 #1196129


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-3
changelog:
  - Fix problem with symlink errors in archive with many files
  - add support of non-latin and non-unicode encodings for filenames
    Resolves: rhbz#740012 rhbz#885540


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-4
changelog:
  - Added patch for build option "-Werror=format-security"
  - Fix print of non-ascii filenames
    Resolves: rhbz#1284896


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-2.b11
changelog:
  - Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546)
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-2.b11
changelog:
  - Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-0.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-5
changelog:
  - Move removal of directories to the end of the %prep section
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-6
changelog:
  - Update pem sources to the same ones used on rhel-7
  - Remove no longer needed patches on account of this update
  - Resolves: Bug 1002205


author: David Knox <dknox@redhat.com> 0:6.0.24-68
changelog:
  - Related: CVE-2013-4322. arches needs to be specified
  - as in arches noarch, so docs/webapps will produce
  - full files. building for ppc will generate empty
  - javadoc.


author: David Knox <dknox@redhat.com> 0:6.0.24-72
changelog:
  - Related: CVE-2014-0075 - rebuild to generate javadoc
  - correctly. previous build generated 0-length javadoc


author: David Knox <dknox@redhat.com> 0:6.0.24-76
changelog:
  - Related: CVE-2013-4590 incrementing release. added 
  - excludearch to the spec file for ppc and ppc64. building
  - on ppc produces empty javadoc files.


author: David Knox <dknox@redhat.com> 0:6.0.24-78
changelog:
  - Related: CVE-2013-4590  - remove xml schema names javaee_5,
  - javaee_web_services_1_2, and javaee_web_services_1_2_client
  - from descriptor.DigesterFactory initialization. These
  - schema definitions are not relevant to 6.0.24 as the version
  - of their spec did not exist at the time.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-2
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-10
changelog:
  - compile coreutils su with RELRO and PIE again(#630017)
  - document rare usefulness of tail options --sleep-interval
    and --max-unchanged-stats with inotify support(#662900)
  - fix double free error in tac for input line longer
    than 16KiB(#628212)
  - fix segfault in sort if LC_TIME differs from the rest
    of locales(#649224)
  - fix support for DTR/DSR control flow in stty(#598631)
  - clarify mkdir --mode behaviour in info documentation
    (#609262)
  - inform about dropped ninth bit of 3-digit octal values in byte
    representations in info documentation(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-11
changelog:
  - adjust the wording in the octal value byte representation
    documentation to match with upstream(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-12
changelog:
  - document that dd's iflag=fulblock prevents dd's oflag=direct
   automatic turn off when reading via pipe(#614605)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-14
changelog:
  - tweak documentation of tail --sleep-interval (#725618)
  - prevent build failure on system with mock>=1.1.9 (#691292)
  - su: fix shell suspend in tcsh (#703712)
  - ls: use acl_extended_file_nofollow() to prevent unnecessary
    autofs mounts(#720325)
  - fix cp -Z functionality if the destination exists(#715557)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-17
changelog:
  - fix memory leak in ls -l (#751974)
  - document difference between ls -lZ and ls -Zl (#771843)
  - fix various i18n patch related issues in pr (#772172)
  - df should display target device information when
    a symbolic link is specified as a parameter(#766461)
  - su no longer hangs when a program set itself to ignore
    SIG_CHLD signal, and fork a child to exec su(#754029)
  - stat recognizes few new filesystems, tail -f recognizes
    FhGFS and GPFS as remote (disables inotify) (#769874)


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-24
changelog:
  - resolves: #921612
    fix issues when sa data files weren't correctly overwritten in some cases.
    Part of this fix is lowering the line when the sa data files are kept
    in subfolders (from 28 to 25 days), and because of this, the default history
    value was also lowered from 28 to 25 days.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-25
changelog:
  - related: #921612
    reverted the boundary when the sa data files are stored in directories
    and default history value back to 28. Without the revert, backward
    compatibility could be broken in some cases.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-26
changelog:
  - resolves: #1110851
    added sysstat(5) man page describing /etc/sysconfig/sysstat file
  - resolves: #1102603
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-27
changelog:
  - resolves: #1124180
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-28
changelog:
  - resolves: #1224878
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #887231
    fixed segfaults on bogus localtime input
  - resolves: #1185057
    added two new columns to iostat: r_await and w_await
  - resolves: #1188612
    fixed description of %util field in sar(1) and iostat(1) man pages


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-31
changelog:
  - related: #1224878
    in some corner cases, pidstat could still output values for % CPU bigger
    than 100; this commit fixes the issue


author: Michal Sekletar <msekleta@redhat.com> - 9.0.4-32
changelog:
  - cifsiostat: report correct number of open/closed files (#1346844)
  - sar: output timestamps when running with ko_KR.UTF-8 locale (#1363947)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-3
changelog:
  - 624043 selinux issue done by leaking file decriptor
  - crontab has wrong permission 676081 & fix in files section 6755->4755
  - 615107 echos twice OK in init script
  - 677364 common criteria - freeing, cleaning code
  - 676040 add relro and PIE into compiler flags
  - Resolves: rhbz#624043, rhbz#676081, rhbz#615107, rhbz#677364, rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-4
changelog:
  - 675077 anacron runs hourly instead of daily=>wrong option in bash script
  - fix common criteria patch 677364
  - Resolves: rhbz#675077


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-6
changelog:
  - apply relro (CFLAGS&DFLAGS) in specfile, because in configure we
   need to call autoreconf.
  - Resolve: rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-7
changelog:
  - switch off --enable-pie, because it's overloaded with flags in spec
  - added RPM_OPT_FLAGS into CFLAGS
  - Related: rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-9
changelog:
  - during spring DST change are jobs executed 61 times if they are set
    for 2:00 or 3:00 am.
  - 995089 - incorrectly running jobs when time difference is negative
  - cronie doesn't drop privileges before popen
  - adoptions at the crontab orphanage needed
  - config file permissions are world readable
  - 733697 - Service restart needlessly reports failure
  - 743473 - Confusing comments in /etc/cron.hourly/0anacron
  - 887859 - Incorrect example in anacrontab manpage
  - 990710 - cron disallows setting PATH via PAM
  - 985893 - do not use putenv
  - 985888 - cronie drops $LANG and never passes it on to jobs run
  - 829910 - random prefix in crontables for running jobs
  - 922829 - crond generating invalid emails 
  - 919440 - prevent new crond process when already running 
  - Resolves: rhbz#821046, rhbz#697485, rhbz#738232, rhbz#706979, rhbz#733697
  - Resolves: rhbz#743473, rhbz#887859, rhbz#990710, rhbz#985893, rhbz#985888
  - Resolves: rhbz#829910, rhbz#922829, rhbz#995089, rhbz#919440


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.4-14
changelog:
  - fix segfault on null dereference in anacron (#1031383)
  - do not remove daemon pid file in the child process
  - add log message about crond shutdown (#1108384)
  - add log message when getpwnam fails


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-9
changelog:
  - Fix potential infinite loop on long running VMs (> 46 days)
    Resolves: rhbz#1072700
  - Fix assertion in video streaming code
    Resolves: rhbz#1086820


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.8.1.el6]
changelog:
  - [crypto] crc32c: Kill pointless CRYPTO_CRC32C_X86_64 option (Jarod Wilson) [1175509 1036212]
  - [crypto] testmgr: add larger crc32c test vector to test FPU path in crc32c_intel (Jarod Wilson) [1175509 1036212]
  - [crypto] tcrypt: Added speed test in tcrypt for crc32c (Jarod Wilson) [1175509 1036212]
  - [crypto] crc32c: Optimize CRC32C calculation with PCLMULQDQ instruction (Jarod Wilson) [1175509 1036212]
  - [crypto] crc32c: Rename crc32c-intel.c to crc32c-intel_glue.c (Jarod Wilson) [1175509 1036212]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.9.1.el6]
changelog:
  - [net] ipv6: increase ip6_rt_max_size to 16384 (Hannes Frederic Sowa) [1177581 1112946]
  - [net] ipv6: don't set DST_NOCOUNT for remotely added routes (Hannes Frederic Sowa) [1177581 1112946]
  - [net] ipv6: don't count addrconf generated routes against gc limit (Hannes Frederic Sowa) [1177581 1112946]
  - [net] ipv6: Don't put artificial limit on routing table size (Hannes Frederic Sowa) [1177581 1112946]
  - [scsi] bnx2fc: fix tgt spinlock locking (Maurizio Lombardi) [1179098 1079656]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.11.1.el6]
changelog:
  - [virt] kvm: excessive pages un-pinning in kvm_iommu_map error path (Jacob Tanenbaum) [1156520 1156521] {CVE-2014-8369}
  - [x86] crypto: Add support for 192 & 256 bit keys to AESNI RFC4106 (Jarod Wilson) [1184332 1176211]
  - [block] nvme: Clear QUEUE_FLAG_STACKABLE (David Milburn) [1180555 1155715]
  - [net] netfilter: conntrack: disable generic tracking for known protocols (Daniel Borkmann) [1182071 1114697] {CVE-2014-8160}
  - [xen] pvhvm: Fix vcpu hotplugging hanging (Vitaly Kuznetsov) [1179343 1164278]
  - [xen] pvhvm: Don't point per_cpu(xen_vpcu, 33 and larger) to shared_info (Vitaly Kuznetsov) [1179343 1164278]
  - [xen] enable PVHVM VCPU placement when using more than 32 CPUs (Vitaly Kuznetsov) [1179343 1164278]
  - [xen] support large numbers of CPUs with vcpu info placement (Vitaly Kuznetsov) [1179343 1164278]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.13.1.el6]
changelog:
  - [netdrv] enic: fix rx skb checksum (Stefan Assmann) [1189068 1115505]
  - [scsi] Revert "fix our current target reap infrastructure" (David Milburn) [1188941 1168072]
  - [scsi] Revert "dual scan thread bug fix" (David Milburn) [1188941 1168072]
  - [net] tcp: do not copy headers in tcp_collapse() (Alexander Duyck) [1188838 1156289]
  - [net] tcp: use tcp_flags in tcp_data_queue() (Alexander Duyck) [1188838 1156289]
  - [net] tcp: use TCP_SKB_CB(skb)->tcp_flags in input path (Alexander Duyck) [1188838 1156289]
  - [net] tcp: remove unused tcp_fin() parameters (Alexander Duyck) [1188838 1156289]
  - [net] tcp: rename tcp_skb_cb flags (Alexander Duyck) [1188838 1156289]
  - [net] tcp: unify tcp flag macros (Alexander Duyck) [1188838 1156289]
  - [net] tcp: unalias tcp_skb_cb flags and ip_dsfield (Alexander Duyck) [1188838 1156289]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.14.1.el6]
changelog:
  - [s390] crypto: kernel oops at insmod of the z90crypt device driver (Hendrik Brueckner) [1191916 1172137]
  - [sound] alsa: usb-audio: Fix crash at re-preparing the PCM stream (Jerry Snitselaar) [1192105 1167059]
  - [usb] ehci: bugfix: urb->hcpriv should not be NULL (Jerry Snitselaar) [1192105 1167059]
  - [mm] mmap: uncached vma support with writenotify (Jerry Snitselaar) [1192105 1167059]
  - [kernel] futex: Mention key referencing differences between shared and private futexes (Larry Woodman) [1192107 1167405]
  - [kernel] futex: Ensure get_futex_key_refs() always implies a barrier (Larry Woodman) [1192107 1167405]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.15.1.el6]
changelog:
  - [netdrv] ixgbe: remove CIAA/D register reads from bad VF check (John Greene) [1196312 1156061]
  - [pci] Make FLR and AF FLR reset warning messages different (Myron Stowe) [1192365 1184540]
  - [pci] Fix unaligned access in AF transaction pending test (Myron Stowe) [1192365 1184540]
  - [pci] Merge multi-line quoted strings (Myron Stowe) [1192365 1184540]
  - [pci] Wrong register used to check pending traffic (Myron Stowe) [1192365 1184540]
  - [pci] Add pci_wait_for_pending() -- refactor pci_wait_for_pending_transaction() (Myron Stowe) [1192365 1184540]
  - [pci] Use pci_wait_for_pending_transaction() instead of for loop (Myron Stowe) [1192365 1184540]
  - [pci] Add pci_wait_for_pending_transaction() (Myron Stowe) [1192365 1184540]
  - [pci] Wait for pending transactions to complete before 82599 FLR (Myron Stowe) [1192365 1184540]
  - [scsi] storvsc: fix a bug in storvsc limits (Vitaly Kuznetsov) [1196532 1174168]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.16.1.el6]
changelog:
  - [fs] gfs2: Move gfs2_file_splice_write outside of #ifdef (Robert S Peterson) [1198329 1193559]
  - [security] keys: close race between key lookup and freeing (Radomir Vrbovsky) [1179849 1179850] {CVE-2014-9529}
  - [net] sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann) [1196587 1135425] {CVE-2015-1421}
  - [fs] gfs2: Allocate reservation during splice_write (Robert S Peterson) [1198329 1193559]
  - [fs] nfs: Be less aggressive about returning delegations for open files (Steve Dickson) [1196314 1145334]
  - [fs] nfs: Avoid PUTROOTFH when managing leases (Benjamin Coddington) [1196313 1143013]
  - [crypto] testmgr: mark rfc4106(gcm(aes)) as fips_allowed (Jarod Wilson) [1194983 1185395]
  - [crypto] Extending the RFC4106 AES-GCM test vectors (Jarod Wilson) [1194983 1185395]
  - [char] raw: Return short read or 0 at end of a raw device, not EIO (Jeff Moyer) [1195747 1142314]
  - [scsi] hpsa: Use local workqueues instead of system workqueues - part1 (Tomas Henzl) [1193639 1134115]
  - [x86] kvm: vmx: invalid host cr4 handling across vm entries (Jacob Tanenbaum) [1153326 1153327] {CVE-2014-3690}
  - [fs] isofs: Fix unchecked printing of ER records (Radomir Vrbovsky) [1180481 1180492] {CVE-2014-9584}
  - [fs] bio: fix argument of __bio_add_page() for max_sectors > 0xffff (Fam Zheng) [1198428 1166763]
  - [media] ttusb-dec: buffer overflow in ioctl (Alexander Gordeev) [1170971 1167115] {CVE-2014-8884}
  - [kernel] trace: insufficient syscall number validation in perf and ftrace subsystems (Jacob Tanenbaum) [1161567 1161568] {CVE-2014-7826 CVE-2014-7825}
  - [fs] nfs: Fix a delegation callback race (Dave Wysochanski) [1187639 1149831]
  - [fs] nfs: Don't use the delegation->inode in nfs_mark_return_delegation() (Dave Wysochanski) [1187639 1149831]
  - [infiniband] ipoib: don't queue a work struct up twice (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: make sure we reap all our ah on shutdown (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: cleanup a couple debug messages (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: flush the ipoib_workqueue on unregister (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: fix ipoib_mcast_restart_task (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: fix race between mcast_dev_flush and mcast_join (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: remove unneeded locks (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: don't restart our thread on ENETRESET (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: Handle -ENETRESET properly in our callback (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: make delayed tasks not hold up everything (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: Add a helper to restart the multicast task (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: fix IPOIB_MCAST_RUN flag usage (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: Remove unnecessary port query (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [x86] kvm: Avoid pagefault in kvm_lapic_sync_to_vapic (Paolo Bonzini) [1192055 1116398]
  - [s390] kernel: fix cpu target address of directed yield (Hendrik Brueckner) [1188339 1180061]
  - [mm] memcg: do not allow task about to OOM kill to bypass the limit (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: do not declare OOM from __GFP_NOFAIL allocations (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [fs] buffer: move allocation failure loop into the allocator (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: handle non-error OOM situations more gracefully (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: do not trap chargers with full callstack on OOM (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: rework and document OOM waiting and wakeup (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: enable memcg OOM killer only for user faults (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [x86] mm: finish user fault error path with fatal signal (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] pass userspace fault flag to generic fault handler (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [s390] mm: do not invoke OOM killer on kernel fault OOM (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [powerpc] mm: remove obsolete init OOM protection (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [powerpc] mm: invoke oom-killer from remaining unconverted page fault handlers (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [security] selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID (Denys Vlasenko) [1104567 1104568] {CVE-2014-3215}
  - [security] Add PR_<GET, SET>_NO_NEW_PRIVS to prevent execve from granting privs (Denys Vlasenko) [1104567 1104568] {CVE-2014-3215}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.16.2.el6]
changelog:
  - [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181173 1179327] {CVE-2014-8159}


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-58
changelog:
  - Applied patch to fix 'Bad request' errors as a result of adding in
    httpSetTimeout (STR #4440, also part of svn revision 9967).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-60
changelog:
  - CVE-2014-2856: cross-site scripting flaw (bug #1117798)
  - CVE-2014-3537: insufficient checking leads to privilege escalation (bug #1117794)


author: Doug Ledford <dledford@redhat.com> - 0.5-3
changelog:
  - Upstream has updated the libnes tarball without changing the version.  Pick
    up the libnes-0.5.tar.gz tarball that's dated 13-Jun-2008
  - Resolves: bz451470


author: Doug Ledford <dledford@redhat.com> - 0.5-5.el5
changelog:
  - Fix a minor memleak (from upstream)
  - Rebuild against libibverbs that has xrc support
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 0.6-1.el5
changelog:
  - Build against non-XRC libibverbs
  - Update to ofed 1.4.1 final bits
  - Remove no longer needed memleak patch
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Rebuild against latest libibverbs
  - Add psuedo provide of libibverbs-driver.%{_arch}
  - Fix exclusivearch to work on i686
  - Related: bz725016, bz724900


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.2
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950342)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.4
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#978312)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.5
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #1000313)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.6
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #1002179)


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.4
changelog:
  - Allow dirsrv-admin server to be restarted from console 
  Resolves:#955703
  - Allow dac_override for openshift-cron


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.6
changelog:
  - Allow myslqd-safe to execute shell_exec_t
  Resolves:#966997
  - Allow openshift-cron to read openshift link files in /var/lib


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.7
changelog:
  - Make Quantum 2013.1.1 working with netns
  - Make SSHing into an Openshift Enterprise Node working
  Resolves:#969043


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.8
changelog:
  - Allow dnsmasq to stream connect to quantum
  - Allow ifconfig domtrans to iptables and execute ldconfig
  Resolves:#969043


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.9
changelog:
  - Allow iptables to read and write quantum inherited pipes
  - Allow iptables to send sigchld to quantum
  Resolves:#969043


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.13
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  Resolves:#1015117
  - Allow virt_domain to read virt_var_run_t symlinks
  Resolves:#1015068


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-3
changelog:
  - Restart clvmd daemon on lvm2-cluster package upgrade.
  - Keep exclusive activation in pvmove if LV is already active.
  - Disallow pvmove for exclusive LV if some affected LVs are not exclusively activated.
  - Remove unused and wrongly set cluster VG flag from clvmd lock query command.
  - Fix pvmove for exclusively activated LV pvmove in clustered VG (2.02.86).
  - Detect VG name being part of the LV name in lvconvert --splitmirrors -n.
  - Add 'vgscan --cache' functionality for consistency with 'pvscan --cache'.
  - Use 'pvscan --cache' instead of vgscan in lvmetad init script.
  - Exit immediately if LISTEN_PID env var incorrect during systemd handover.
  - Update and fix monitoring of thin pool devices.
  - Fix initializiation of thin monitoring (2.02.92).
  - Remove watch udev rule from 13-dm-disk.rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-4
changelog:
  - Fix lvresize of thin pool for striped devices.
  - Round upwards when specifying number of extents for lvresize.
  - Round downwards strip alignment for lvcreate with %FREE.
  - Fix problems when specifying PVs during RAID down-converts.
  - Fix ability to handle failures in mirrored log (2.02.89).
  - Change message severity to log_very_verbose for missing dev info in udev db.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-5
changelog:
  - Add lvmetad man page.
  - Fix RAID device replacement code so that it works under snapshot.
  - Fix inability to split RAID1 image while specifying a particular PV.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-6
changelog:
  - Allow subset of failed devices to be replaced in RAID LVs.
  - Prevent resume from creating error devices that already exist from suspend.
  - Fix lvconvert error message for non-mergeable volumes.
  - Fix volume group unlocking in vgreduce error path.
  - Update and correct lvs man page with supported column names.
  - Rename (Blk)DevNames/DevNos dmsetup header to (Blk)DevNamesUsed/DevNosUsed.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-7
changelog:
  - Disallow snapshots of mirror segment type.
  - Fix bug in cmirror that caused incorrect status info to print on some nodes.
  - Disallow changing cluster attribute of VG while RAID LVs are active.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-8
changelog:
  - Fix up-convert when mirror activation is controled by volume_list and tags.
  - Add a note for global/mirror_segtype_default setting that RAID1 is not cluster-aware.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-9
changelog:
  - Re-enable partial activation of non-thin LVs until it can be fixed (2.02.90).
  - Reinstate snapshots of mirror segment type.
    Warn of deadlock risk when using snapshots of mirror segment type.
  - Set delay_resume_if_new on deptree snapshot origin.
  - Add Conflicts: vdsm < 4.9-113.0 (new 'target' and 'zero' LV attr breaks vdsm).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.1
changelog:
  - Fix test for PV with unknown VG in process_each_pv to ignore ignored mdas.
  - Fix _alloc_parallel_area to avoid picking already-full areas for raid devices.
  - Fix extending RAID 4/5/6 logical volumes.
  - Never issue discards when LV extents are being reconfigured, not deleted.
  - Allow release_lv_segment_area to fail as functions it calls can fail.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.2
changelog:
  - Make lvremove ask before discarding data areas.
  - Don't try to issue discards to a missing PV to avoid segfault.


author: Phillip Lougher <plougher@redhat.com> [2.6.32-687.el6]
changelog:
  - [netdrv] sfc: reduce severity of PIO buffer alloc failures (Jarod Wilson) [1410750]
  - [netdrv] sfc: avoid division by zero (Jarod Wilson) [1410750]
  - [netdrv] sfc: Insert multicast filters as well as mismatch filters in promiscuous mode (Jarod Wilson) [1410750]
  - [netdrv] sfc: get timer configuration from adapter (Jarod Wilson) [1410750]
  - [netdrv] sfc: warn if other functions have been reset by MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: add output flag decoding to efx_mcdi_set_workaround (Jarod Wilson) [1410750]
  - [netdrv] sfc: get PIO buffer size from the NIC (Jarod Wilson) [1410750]
  - [netdrv] sfc: set interrupt moderation via MCDI (Jarod Wilson) [1410750]
  - [netdrv] sfc: allow asynchronous MCDI without completion function (Jarod Wilson) [1410750]
  - [netdrv] sfc: on MC reset, clear PIO buffer linkage in TXQs (Jarod Wilson) [1410750]
  - [netdrv] sfc: Downgrade EPERM messages from MCDI to debug (Jarod Wilson) [1410750]
  - [netdrv] sfc: cope with ENOSYS from efx_mcdi_get_workarounds() (Jarod Wilson) [1410750]
  - [netdrv] sfc: enable cascaded multicast filters in MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: work around TRIGGER_INTERRUPT command not working on SFC9140 (Jarod Wilson) [1410750]
  - [dm] raid: fix transient device failure processing (Mike Snitzer) [1404425]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-690.el6]
changelog:
  - [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
  - [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]


author: Harald Hoyer <harald@redhat.com> 004-43
changelog:
  - fixed "fips=0"
  - fixed .hmac file installation for hostonly mode
  - hardcode to include libssl.so* in fips
  Resolves: rhbz#670925


author: Harald Hoyer <harald@redhat.com> 004-44
changelog:
  - fixed die() and emergency mode for fips
  Resolves: rhbz#670925
  - added dracut-caps with caps module
  Resolves: rhbz#677340


author: Harald Hoyer <harald@redhat.com> 004-48
changelog:
  - removed rd.fips.skipkernel and move fipscheck to a later
    point of time, where root is already mounted
  Resolves: rhbz#692843


author: Harald Hoyer <harald@redhat.com> 004-52
changelog:
  - fips: support /boot on LVM Volume for non-encrypted root
  - preunlink binaries in fips mode
  Resolves: rhbz#696131
  - Fixed FCoE booting with EDD information


author: Harald Hoyer <harald@redhat.com> 004-53.1
changelog:
  - add subpackage dracut-fips-aesni
  - add "dm-mod" and "dm-crypt" to fips modules
  Resolves: rhbz#728549


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-21
changelog:
  - conf: Avoid NULL deref for pmsuspended domain state (rhbz#822306)
  - libvirt: Define domain crash event types (rhbz#822306)
  - qemu: Refactor processWatchdogEvent (rhbz#822306)
  - qemu: Expose qemuProcessShutdownOrReboot() (rhbz#822306)
  - qemu: Implement 'oncrash' events when guest panicked (rhbz#822306)
  - qemu: Implement 'oncrash' coredump events when guest panicked (rhbz#822306)
  - conf: Fix a memory leak when parsing nat port XML nodes (rhbz#851455)
  - security_manager: Fix comparison (rhbz#984793)
  - qemu: Prevent crash of libvirtd without guest agent configuration (rhbz#984821)
  - qemu: Fix double free of returned JSON array in qemuAgentGetVCPUs() (rhbz#984821)
  - qemu_agent: Add support for appending arrays to commands (rhbz#924400)
  - Add support for locking domain's memory pages (rhbz#947118)
  - qemu: Implement support for locking domain's memory pages (rhbz#947118)
  - qemu: Check for -realtime mlock=on|off support (rhbz#947118)
  - qemu: Move memory limit computation to a reusable function (rhbz#947118)
  - util: New virCommandSetMax(MemLock|Processes|Files) (rhbz#947118)
  - qemu: Set RLIMIT_MEMLOCK when memoryBacking/locked is used (rhbz#947118)
  - Add Gluster protocol as supported network disk backend (rhbz#849796)
  - qemu: Add support for gluster protocol based network storage backend. (rhbz#849796)
  - tests: Add tests for gluster protocol based network disks support (rhbz#849796)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-22
changelog:
  - virsh: Fix change-media bug on disk block type (rhbz#923053)
  - Fix patches for multiple graphics and spice migration (rhbz#975751)
  - Revert "qemu: Remove maximum cpu limit when setting processor count using the API" (rhbz#855296)
  - Remove VIR_DOMAIN_SHUTDOWN_CRASHED from public API (rhbz#822306)
  - Rename VIR_DOMAIN_PAUSED_GUEST_PANICKED to VIR_DOMAIN_PAUSED_CRASHED (rhbz#822306)
  - Improve LXC startup error reporting (rhbz#903092)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#928661)
  - util: Improve user lookup helper (rhbz#964359)
  - util: Add virGetGroupList (rhbz#964359)
  - util: Make virSetUIDGID async-signal-safe (rhbz#964359)
  - Fix potential deadlock across fork() in QEMU driver (rhbz#964359)
  - security: Framework for driver PreFork handler (rhbz#964359)
  - security_dac: Compute supplemental groups before fork (rhbz#964359)
  - security: Fix deadlock with prefork (rhbz#964359)
  - Split TLS test into two separate tests (rhbz#975201)
  - Avoid re-generating certs every time (rhbz#975201)
  - Change data passed into TLS test cases (rhbz#975201)
  - Fix validation of CA certificate chains (rhbz#975201)
  - Fix parallel runs of TLS test suites (rhbz#975201)
  - tests: Fix parallel runs of TLS test suites (rhbz#975201)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-23
changelog:
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#975201)
  - Fix qemuProcessReadLog with non-zero offset (rhbz#991334)
  - virSecurityManagerGenLabel: Skip seclabels without model (rhbz#997818)
  - bitmap: Add virBitmapCountBits (rhbz#997367)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997367)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997367)
  - network: Allow <vlan> in type='hostdev' networks (rhbz#999107)
  - python: Fix bindings that don't raise an exception (rhbz#912170)
  - storage: Update pool metadata after adding/removing/resizing volume (rhbz#965442)
  - storage: Fix coverity warning (rhbz#965442)
  - storage: Fix the use-after-free memory bug (rhbz#965442)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#928638)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-24
changelog:
  - security: Provide supplemental groups even when parsing label (rhbz#964359)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1000973)
  - virsh: Correct DESCRIPTION for virsh help blockcopy (rhbz#1002790)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004365)
  - build: More workarounds for if_bridge.h (rhbz#1002735)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-25
changelog:
  - migration: Do not restore labels on failed migration (rhbz#895826)
  - qemu: Use default machine type if missing it in qemu command line (rhbz#995312)
  - qemu: Don't leak vm on failure (rhbz#995312)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006710)
  - tests: Files named '.*-invalid.xml' should fail validation (rhbz#1006710)
  - tests: Use portable shell code (rhbz#1006710)
  - Add test for the nodemask double free crash (rhbz#1006710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-26
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - Introduce APIs for splitting/joining strings (rhbz#1006266)
  - Rename virKillProcess to virProcessKill (rhbz#1006266)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006266)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006266)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006266)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006266)
  - Include process start time when doing polkit checks (rhbz#1006266)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-28
changelog:
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1011981)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1013758)
  - docs: Discourage users to set hard_limit (rhbz#1013758)
  - docs: Clean 09adfdc62de2b up (rhbz#1013758)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1013758)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1013758)


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-18
changelog:
  - Don't leave symlinks in /tmp after adding a printer (bug #556548).
  - Fixed probe-printer-typo.patch (bug #579864).
  - Fixed stack overflow in pycups (bug #584991).
  - Moved COPYING file from main package to libs subpackage (bug #613708).
  - Fixed gtk_label_autowrap.py by updating it to latest version (bug #633595).
  - Set D-Bus timeout when calling asynchronously (bug #634252).
  - More translatable strings marked as such (bug #634436).
  - Backport translations from upstream (bug #634436).
  - Don't rename when names differ only in size of characters (bug #636523).
  - Stub out getJockeyDriver_thread() (bug #639624).
  - Applet could cause high cupsd CPU usage (bug #645426).
  - Don't crash when DISPLAY is unset (bug #676339, bug #676343).
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (bug #708519).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-23
changelog:
  - Use thread-local storage for password callback function (bug #744519).
  - Don't handle tooltips during mainloop recursion (bug #739745).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-24
changelog:
  - Fixed pycups documentation (bug #854937).
  - Prevent pycups segmentation fault when handling UTF-8 input (bug #1063224).


author: Doug Ledford <dledford@redhat.com> - 1.1.2-2
changelog:
  - Obsolete the old -devel package (which really was just a static
    lib, no real devel environment, hence the name change to -static)
  - Resolves: bz432769


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to 1.1.4 to match OFED 1.3
  - Add a modprobe conf file in /etc/modprobe.d so that the iw_cxgb3 module
    will always be loaded after the cxgb3 net module
  - Related: bz428197


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-39.1
changelog:
  - The scheduler might leave old job data files in the spool directory
    (STR #3795, STR #3880, bug #736304).


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.1
changelog:
  - Add 0168-RHBZ-988704-fix_cli_resize.patch
    * deal with resize happening while path device is being removed.
  - Resolves: bz #988704


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.2
changelog:
  - Add 0169-RHBZ-993545-rw-change.patch
    * reload a readonly multipath device if a path device has become
      read/write
  - Resolves: bz #993545


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1
changelog:
  - initscript LSB related fixes (#523435)
  - revert the "DEBUG" feature (#510283), it causes too many problems (#545128)


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P1
changelog:
  - fix occassional crash on keytable.c:286 (#554316)
  - active query might be destroyed in resume_dslookup() which triggered REQUIRE
    failure (#507429)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Apply the patch for the pluggable ecc fix
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - nssutil_growList and nssutil_ReadSecmodDB cleanup
  - Resolves: Bug 1019529 - New defect found in nss-util-3.14.0.0-2.el6


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.1
changelog:
  - revert to polling for unknown filesystems, update
    known fs for tail and stat based on coreutils-8.21 (#924711)


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.0.el6_3
changelog:
  - Removed patch1000 sec-2013-02-01-8005615.patch
  - Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
  - Removed patch1010 sec-2013-02-01-7201064.patch
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.3.7
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911529


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-61.rc4
changelog:
  - resolves: #1073913 - Fix CVE-2012-6150.
  - resolves: #1073913 - Fix CVE-2013-4496.
  - resolves: #1073913 - Fix CVE-2013-6442.


author: Ray Strode <rstrode@redhat.com> 2.28.0-21
changelog:
  - Add a close button in the session selector save dialog, to
    provide a way to close the dialog without saving.
    Resolves: #786573


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py
  - Make work on RHEL6
  Resolves: #541634
  - Ignore errors from disabled IPv6
  Resolves: #674770


author: <dwalsh@redhat.com> - 3.0.38-1
changelog:
  - Remove dependancy on X from sedispatch
  - Setroubleshoot-server no longer requires X
  Resolves: #541634


author: Miroslav Grepl <mgrepl@redhat.com> - 3.0.38-2
changelog:
  - Needs to require libreport-gtk and pygtk2-libglade
  - sealert analyze option can not be used with another option
  - Fix setroubleshootd man page


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-252
changelog:
  - Allow aide_t to read /dev/random and /dev/urandom.
  - Allow sysadm to talk with lldpad over unix dgram socket.
  - Allow sysadm to send/recv with unix dgram socket.
  - Allow crond_t to read lastlog.
  - Allow xdm_t to read plymouthd_spool_t files
  Resolves:#1131195
  - Allow hald to rpm dbus chat
  - Additional dontaudits for prelink_mask_t.
  - Add samba_domain attribute also for smbcontrol_t and winbind_helper_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-253
changelog:
  - Add additional dontaudits for prelink_mask_t
  Resolves:#1103674
  - Allow local_login_t and xdm_t to manage shadow_t because of PAM


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-254
changelog:
  - Dontaudit to read/write all dev nodes for prelink_mask_t.
  - Add label for path /var/lib/ctdb
  - Allow escd access to /var/run/pcscd.events directory
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-255
changelog:
  - Allow couriertcpd to read /var/spool/courier dir.
  - Allow prelink domain to rea /dev/mem.
  - ALlow transition to prelink_t instead of prelink_mask_t to ABRT domains/rpm.
  Resolves:#1103674


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050190


author: Milan Crha <mcrha@redhat.com> - 2.32.3-14.el6
changelog:
  - Add patch for RH bug #1009470 (evolution-ews crash when GAL not marked for offline sync)
  - Add patch for RH bug #1005888 (evolution-ews add 'no-alarm-after-start' calendar capability)


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-1
changelog:
  - Rebase to NSS 3.18
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]
  - Keep the same cipher suite order as we had in NSS_3_15_3_RTM
  - Resolves: Bug 1202488 - openldap-2.4.23-34.el6_5.1.i686 fails after updating nss to nss-3.16.1-4.el6_5.i686
  - Resolves: Bug 1182902 - rhel65 ns-slapd crash, segfault error 4 in libnss3.so in PK11_DoesMechanism at pk11slot.c:1824


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b09 (EA).
  - Switch to EA mode.
  - Add debugging output for build.
  - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default.
  - Update tarball generation script to use PR3795, following inclusion of JDK-8177334
  - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Resolves: rhbz#1895064


author: Marek Grac <mgrac@redhat.com> - 4.0.15-4
changelog:
  - fence_ilo_moonshot: New fence agent for HP Moonshot
    Resolves: rhbz#1099551
  - fence_mpath: New fence agent for multipath devices
    Resolves: rhbz#1118008


author: Marek Grac <mgrac@redhat.com> - 4.0.15-5
changelog:
  - fence_ilo_ssh: New fence agent
    Resolves: rhbz#1111482
  - fence_kdump: Update metadata for 'monitor'
    Resolves: rhbz#1094515


author: Marek Grac <mgrac@redhat.com> - 4.0.15-7
changelog:
  - fence_scsi: remove new pythonic version
  - fence_ipmilan: unset default cipher
  - fence_ilo2: add options --tls1.0
  - fence_bladecenter: fix login process
    Resolves: rhbz#1049805


author: Peter Jones <pjones@redhat.com> - 0.97-74
changelog:
  - Fix error on invocation of "grub-install /dev/cciss/c0d0" (patch from jnevill)
    Resolves: rhbz#736833


author: David Sommerseth <davids@redhat.com> - 3.10.7-3
changelog:
  - Fixed even more .spec file issues and removed explicit mentioning
    of /usr/share/python-dmidecode/pymap.xml


author: Nima Talebi <nima@it.net.au> - 3.10.8-1
changelog:
  - New Upstream release.
  - Big-endian and little-endian approved.
  - Packaged unit-test to tarball.
  - Rewritten unit-test to be able to run as non-root user, where it will not
    try to read /dev/mem.
  - Added two dmidump data files to the unit-test.


author: Roman Rakus <rrakus@redhat.com> - 3.10.12-1.1
changelog:
  - Fixed an issue causing SEGV on some hardware when dmi_processor_id()
    is called
    Resolves: #726614


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6-3
changelog:
  - xkeyboard-config-1.6-caps-super.patch: add caps:super option (#505187)
  - xkeyboard-config-1.6-caps-hyper.patch: add caps:hyper option (#505187)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.3-1
changelog:
  - xkeyboard-config 2.3 (#713863)
  - Revert 2.3 Sinhala (lk) changes, they require newer x11proto/libX11
    updates
  - update Source0 line to ftp.x.org


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - drop EXPORT, RC2, and DES from the default cipher list (#1057520)
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - properly detect encryption failure in BIO (#1100819)
  - fail on hmac integrity check if the .hmac file is empty (#1105567)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.26.0
  - Remove upstreamed patch for CVE-2016-1950
  - Remove p-disable-md5-590364-reversed.patch for bug 1335915


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-53
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1301758)


author: Jan Synáček <jsynacek@redhat.com> - 20071127-20
changelog:
  - Resolves: #1149574 - Ping produces "WARNING: kernel is not very fresh, upgrade is recommended."
  - Resolves: #829998 - The arping command may have return value of 0.
  - Resolves: #1099426 - Count of "back" is not correct in tracepath
  - Resolves: #1113082 - ping returns odd results with options inet6 in resolv.conf


author: Jan Synáček <jsynacek@redhat.com> - 20071127-22
changelog:
  - Resolves: #1351720 - documentation inconsistency on arping
  - Resolves: #1334775 - backport upstream ping change unmasking signals
  - Resolves: #1298344 - Ping assumes EACCESS errors are due to broadcast addresses


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.3-3
changelog:
  - Imported from Fedora
  - Resolves: rhbz#726463 - Add libunistring as a separate component/package
                            into RHEL


author: Tim Waugh <twaugh@redhat.com> 1.1.0-9
changelog:
  - Init script fixes:
    - Attempt to start all configured servers (bug #562669, bug #768405).
    - Avoid problems when user's configured shell is not bash (bug #949522).
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #958988, bug #920373).
  - Avoid initializing the vnc extension twice (bug #1004093).
  - Use exceptions instead of asserts for ZRLE decoding boundary checks
    (bug #1078508).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-13
changelog:
  - Added versioned pixman and libX11 dependencies (bug #917717,
    bug #991285).
  - Link against system-wide libjpeg-turbo (bug #956779).
  - Describe -SecurityTypes option in man pages (bug #882952).
  - Fixed kbase URL in sysconfig file (bug #728981).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-16
changelog:
  - Unknown pseudo-encodings (those with negative values) would cause
    vncviewer to crash (bug #1121041).
  - Set source as well as target when building java as some JDKs require
    this (bug #1078427).


author: Jan Grulich <jgrulich@redhat.com> 1.1.0-17
changelog:
  - Rebuild against xorg-x11-server-1.17
    Resolves: bz#1248637
  - Added Requires: libXfont
    Resolves: bz#1011315
  - Remove lock file after stopping vncserver service
    Resolves: bz#1236559


author: Phillip Lougher <plougher@redhat.com> [2.6.32-745.el6]
changelog:
  - [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [scsi] lpfc: Fix crash from memory alloc at interrupt level with GFP_KERNEL set (Dick Kennedy) [1540706]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-746.el6]
changelog:
  - [dm] fix race between dm_get_from_kobject() and __dm_destroy() (Mike Snitzer) [1551999] {CVE-2017-18203}
  - [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1557562]
  - [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1550599] {CVE-2017-5754}
  - [ipmi] pick up slave address from SMBIOS on an ACPI device (Tony Camuso) [1484525]
  - [ipmi] fix watchdog timeout set on reboot (Tony Camuso) [1484525]
  - [ipmi] fix watchdog hang on panic waiting for ipmi response (Tony Camuso) [1484525]
  - [ipmi] use smi_num for init_name (Tony Camuso) [1484525]
  - [ipmi] move platform device creation earlier in the initialization (Tony Camuso) [1484525]
  - [ipmi] clean up printks (Tony Camuso) [1484525]
  - [ipmi] cleanup error return (Tony Camuso) [1484525]
  - [md] raid0: apply base queue limits *before* disk_stack_limits (Xiao Ni) [1417294]
  - [md] raid0: update queue parameter in a safer location (Xiao Ni) [1417294]
  - [md] raid0: conditional mddev->queue access to suit dm-raid (Xiao Ni) [1417294]
  - [md] raid0: access mddev->queue (request queue member) conditionally because it is not set when accessed from dm-raid (Xiao Ni) [1417294]


author: Ray Strode <rstrode@redhat.com> 0.5.8-10
changelog:
  - Authorize operation in remote VNC sessions after administrator
    authentication.
    Resolves: #528511


author: Jan Görig <jgorig@redhat.com> 3.2.8-15
changelog:
  - fix #622389 - The sysctl command's man page doesn't describe the option -A correctly
  - minor changelog fix


author: Jan Görig <jgorig@redhat.com> 3.2.8-17
changelog:
  - fixed bugs in procps-3.2.7-ps-cgroup.patch and procps-3.2.8-pmap-smaps.patch
  - fixed memory leaks in vmstat
  - Resolves: rhbz#684031


author: Jan Görig <jgorig@redhat.com> 3.2.8-18
changelog:
  - fix #692397 - wrong formatting of ps man page
  - fix #709684 - procps/top SWAP statistics makes no sense
    patch by KOSAKI Motohiro
  - fix #690078 - replace dlopen with build time linking
    - dropped procps-3.2.7-libselinux.patch and procps-3.2.7-ps-libselinux.patch
  - fix #690078 - nullifying variables in procps-3.2.8-pmap-smaps.patch


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-20
changelog:
  - fix #701710 - vmstat does not print out correct free page count on 8TB SGI system
  - Resolves: rhbz#701710


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-21
changelog:
  - fix #736023 - Common realloc mistake: 'screen' nulled but not freed upon failure
  - Resolves: rhbz#736023


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-22
changelog:
  - fix #751475 - top displays incorrect CPU summary the first time with CPULOOP=1
  -   Patch15: procps-3.2.7-top-env-cpuloop.patch altered
  - fix #746997 - top utility can't sort by memory usage in batch mode
  - fix #766792 - No devel headers for procps
  - Resolves: rhbz#751475 rhbz#746997 rhbz#766792


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-23
changelog:
  - fix for #757734 - top: Sorting by memory usage is not documented
  - additionally introduces other missing switches in the top man-page
  - Resolves: rhbz#746997


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-48
changelog:
  - core: backport NoDecode option of AllowEncodedSlashes (#1002658)
  - mod_authz_host: disallow the '#' character in allow, deny (#1179911)
  - mod_ssl: fix memory leak on httpd reloads (#1236515)
  - mod_proxy: fix regression caused inherited workers to use a different
    scoreboard slot then the original one (#1252574)
  - mod_rewrite: allow running external mapping program as non-root (#1035230)
  - mod_reqtimeout: fix a timed out connection going into the keep-alive state
    after a timeout when discarding a request body (#1213967)
  - core: fix possible crash in SIGINT handling (#1233109)
  - mod_ssl: extend SSLSessionCacheTimeout to sessions resumed by TLS (#1190509)
  - initscript: do not print error when stopping stopped httpd (#1189941)
  - mod_ssl: fail for colons in credentials with FakeBasicAuth (#1027442)
  - mod_proxy: add "proxy-flushall" env variable which reduces the impact
    of caching 16K of the request body. (#952395)
  - mod_ssl: Do not send SSL warning when SNI hostname is not found as per
    RFC 6066 (#1289096)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-54.1
changelog:
  - Resolves: #1374729 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-54.2
changelog:
  - Resolves: #1391517 - when ProxyErrorOverride is On, modcluster
    return 503 status code on subsequent requests


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-14
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1066589)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-16
changelog:
  - do not resend signal on termination (#1075635)
  - fix argv rewrite (#1047506)
  - fix brace expansion on/off (#1078698)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070350)
  - fix parser errors related to the end of the here-document marker (#1036931)
  - ksh hangs when command substitution fills out the pipe buffer (#1062296)
  - using typeset -l with a restricted variabled caused segmentation fault (#1083713)
  - ksh stopped on read when monitor mode was enabled (#1023109)
  - monitor mode was documented incorrectly (#1019334)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-17
changelog:
  - do not crash when unsetting running function from another one (#1105138)
  - should report an error when trying to cd into directory without execution bit (#1102627)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-18
changelog:
  - job locking mechanism did not survive compiler optimization (#1112306)
  - wrong return code from a pipe in command substitution (#1117316)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-38
changelog:
  - refresh expired cookie in test172 from upstream test-suite (#1069271)
  - fix a memory leak caused by write after close (#1078562)
  - nss: implement non-blocking SSL handshake (#1083742)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-40
changelog:
  - fix re-use of wrong HTTP NTLM connection (CVE-2014-0015)
  - fix connection re-use when using different log-in credentials (CVE-2014-0138)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-42
changelog:
  - do not force connection close after failed HEAD request (#1168137)
  - fix occasional SIGSEGV during SSL handshake (#1168668)


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct %changelog
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-4
changelog:
  - Fix text selection
  - Add patch poppler-0.12.3-text-selection.patch by Brian Ewins
  - Add patch poppler-0.12.3-text-selection-tables.patch by Marek Kasik
  - Make Provides/Obsoletes versioned
  - Add requirement of poppler-data
  - Resolves: #557812


author: Ray Strode <rstrode@redhat.com> 2.30.4-30
changelog:
  - Add small delay between consecutive messages,
    instead of immediately overwriting any previous messages.
    Resolves: #661618, #708430


author: Ray Strode <rstrode@redhat.com> 2.30.4-31
changelog:
  - Rebuild with -fno-strict-aliasing to quiet rpmdiff
    Related: #670619, #661618, #708430, #688158, #645453, #628462, #622561


author: Ray Strode <rstrode@redhat.com> 2.30.4-33
changelog:
  - Increase X server verbosity by default, and increase it even
    more when debug is enabled.
    Resolves: #738462


author: Doug Ledford <dledford@redhat.com> - 6.6_3.15-1
changelog:
  - Change numbering scheme to be clearer: first number is redhat
    release this package is for (aka rhel6.6), second number is the
    upstream kernel that our kernel code comes from, aka 3.15.
  - Minor fix to init script to support cxgb4 and ocrdma and mlx5
    drivers properly
  - Add a dracut module to make sure all the needed InfiniBand
    kernel modules and support files make it on to the initrd
  - Resolves: 1064308


author: Doug Ledford <dledford@redhat.com> - 6.7_3.15-2
changelog:
  - Fix ipoib MTU issue
  - Fix shutdown ordering of NFSoRDMA code
  - Absorb mlx4/cxgb3/cxgb4 setup/module init code into our package
  - Resolves: bz1186498, bz1163527


author: Doug Ledford <dledford@redhat.com> - 6.7_3.15-4
changelog:
  - Fix modprobe file so command line opts passed to modprobe mlx4_core will
    work again
  - Resolves: bz1215857


author: Dan Horák <dhorak@redhat.com> - 2.14.1-4
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#891626),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #891626


author: Dan Horák <dhorak@redhat.com> - 2.14.1-5
changelog:
  - add mssing sensor RDRs for the fan resource (#924852)
  - fix openhpi connection failures with redundant OAs (#948386)
  - fix segfaults when retrieving thermal info (#953515)
  - add missing thermal sensors (#953525)
  - Resolves: #924852, #948386, #953515, #953525


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.11
changelog:
  - Resolves: #1022708 - RHEL6 sssd upgrade restorecon workaround for
                         /var/lib/sss/mc context


author: Bill Nottingham <notting@redhat.com> 1.3.49.1-1
changelog:
  - backport LSB fixes from head
  - fixes: #693202/#771455, #649227/#771452, #750446/#771454, #701573/#771741, #696305 (<jbastian@redhat.com>)


author: Joe Orton <jorton@redhat.com> - 2.2.15-2
changelog:
  - init script fixes for LSB compliance (#546252)
   * exit code 2 for an unknown script argument
   * exit code 6 for a reload if config-test fails
   * exit code 7 for a reload on a stopped service
   * fixed help output to cover all options
  - mod_dav: handle PUT failure more cleanly (#572911)


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - add "Satisfy All" for .htaccess in httpd.conf (#594981)
  - adjust user/group creation in %pre (#594395)
  - mod_ssl: tweak OID() evaluation of unknown exts (#594980)


author: Joe Orton <jorton@redhat.com> - 2.2.15-4
changelog:
  - use init script to rotate logs (#606955)
  - disable keepalive for 100-continue and error response (#606964)


author: Angus Salkeld <asalkeld@redhat.com> - 0.6.0-1
changelog:
  - Rebased to 0.6.0 which includes (#734457):
  - Add a stop watch
  - LOG: serialize the va_list, don't snprintf
  - LOG: change active list into array access
  - atomic: fix qb_atomic_pointer macros
  - LOG: allow the thread priority to be set.
  - Fix splint warning on ubuntu 11.04


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-11
changelog:
  - mention it in config file, that we disabled SSLv2 and SSLv3
    by default (#1153041)
  - add ssl_protocols configuation option and disable SSLv2 and SSLv3
    by default (#1153041)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-17
changelog:
  - fix race condition when creating INBOX (#1184865)
  - close stderr if it's not used for logging (#730746)
  - login proxy should not fail connection if CRL isn't found for some certificate (#813957)
  - fix crash in list-status (#961466)
  - installation of dovecot hangs if there is no /dev/urandom (#1026790)


author: Michal Nowak <mnowak@redhat.com> - 0.3.2-1
changelog:
  - 0.3.2
  - remove rpath (x86-64)
  - xcb_keysyms: remove xcb_lookup_t
  - Revert "keysyms: use xcb_key_lookup_t type for col paramter"
  - temporary disabled %check due to RPATH regression


author: Adam Jackson <ajax@redhat.com> 0.3.6-5
changelog:
  - Add <xcb/xcb_util.h> and xcb-util.pc for source compat with >= 0.3.8
  - Backport pkgconfig fix from upstream
  - Don't install -{icccm,image,keysyms}, they live in their own srpms now


author: Ding-Yi Chen <dchen at redhat.com> 3.23-5
changelog:
  - According to the comment from Sebastien Aime, following are also removed:
    c.1.gz
    switchdesk.1.gz
    bosskill.8.gz


author: Mike FABIAN <mfabian@redhat.com> 3.23-10
changelog:
  - fix Makefile in man-pages-extras-fr-0.8.1.tar.bz2 to install missing man-pages
  - Resolves: #903048 - [fr_FR] man echo manuals are still English.


author: Mike FABIAN <mfabian@redhat.com> 3.23-10
changelog:
  - Add a warning to the xinetd man-page, warning the user that it is
    severely out of date and one should consult the English man-page
    instead for up-to-date information.
  - Resolves: rhbz#891278


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090630-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090630.
  - Reconverted from original TTF with better procedures of data conservation.


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090706-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090706.
  - Reconverted from original TTF with traditional kern table. (rh#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090713-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090713.
  - Generate TTFs with traditional kern table via fontforge scripts. (rh#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090713-2.fc12
changelog:
  - Required fontforge ver 20090408 which supports generation with traditional
    kern table. (rhbz#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090721-1.fc12
changelog:
  - Fixed fontforge scripting of sfd -> ttf generation.
  - Checked existance of traditionat kern table in Sans and Serif.


author: Patsy Franklin <pfrankli@redhat.com> 2013i-1
changelog:
  - Rebase with early release of 2013i from Paul Eggert github.
    - Jordan switches back to standard time at 00:00 on December 20,2013.
    - The 2006-2011 transition schedule is planned to resume in 2014.
    - The compile-time flag NOSOLAR has been removed.
    - The files solar87, solar88, and solar89 are no longer distributed.
    - tz-link.htm now mentions Noda Time.


author: Patsy Franklin <pfrankli@redhat.com> - 2014b-1
changelog:
  - Rebase to 2014b
    - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
    - New entry for Troll station, Antarctica.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-8
changelog:
  - All docs are now installed into /usr/share/doc/graphviz-%{version}
  - Demos packaged as docs not to automatically bring in unnecessary deps
    Resolves: rhbz#821920
  - Removed -ffast-math, added -ffloat-store (on i386) to fix arithmetic on i386
    Resolves: rhbz#772637
  - Fixed build failure due to change in php_zend_api macro type


author: Devrim GUNDUZ <devrim@commandprompt.com> - 0:3.2.1-1
changelog:
  - Updated to 3.2.1
  - Updated patch #1 and #4
  - Own %dir /usr/lib64/gcj/jakarta-commons-collections, per #473612.


author: Paul Howarth <paul@city-fan.org> - 1.35-7
changelog:
  - update to svn trunk (rev 252), needed due to omission of MD2 functionality
    from OpenSSL 1.0.0 (CPAN RT#48916)


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-91
changelog:
  - Fix side navigation panel displayed unexpectedly when accessing index page
    without prior logging in after luci start
    Resolves: rhbz#853462
  - Rectify suboptimal logrotate arrangement imposing server restarts
    Resolves: rhbz#887340


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-92
changelog:
  - Further fixes for rhbz#853462, rhbz#877999 and rhbz#885028
    Resolves: rhbz#853462, rhbz#877999, rhbz#885028


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.10.1.el6]
changelog:
  - [fs] xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (Brian Foster) [1067775 1059334]
  - [x86] apic: Map the local apic when parsing the MP table (Prarit Bhargava) [1063507 1061873]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.1.el6]
changelog:
  - [net] netpoll: take rcu_read_lock_bh() in netpoll_send_skb_on_dev() (Florian Westphal) [1063271 1049052]
  - [fs] cifs: sanity check length of data to send before sending (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [fs] cifs: ensure that uncached writes handle unmapped areas correctly (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [infiniband] ipoib: Report operstate consistently when brought up without a link (Michal Schmidt) [1064464 995300]
  - [security] selinux: fix broken peer recv check (Paul Moore) [1059991 1043051]
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064913 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064913 1024024]
  - [fs] nfs: always make sure page is up-to-date before extending a write to cover the entire page (Scott Mayhew) [1066942 1054493]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058418 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062113 1043353]
  - [security] selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: look for IPsec labels on both inbound and outbound packets (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() (Paul Moore) [1055364 1024631]
  - [edac] e752x_edac: Fix pci_dev usage count (Aristeu Rozanski) [1058420 1029530]
  - [s390] mm: handle asce-type exceptions as normal page fault (Hendrik Brueckner) [1057164 1034268]
  - [s390] mm: correct tlb flush on page table upgrade (Hendrik Brueckner) [1057165 1034269]
  - [net] fix memory information leaks in recv protocol handlers (Florian Westphal) [1039868 1039869]
  - [usb] cdc-wdm: fix buffer overflow (Alexander Gordeev) [922000 922001] {CVE-2013-1860}
  - [usb] cdc-wdm: Fix race between autosuspend and reading from the device (Alexander Gordeev) [922000 922001] {CVE-2013-1860}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.12.1.el6]
changelog:
  - [mm] vmscan: re-introduce the ZONE_RECLAIM_NOSCAN bailout for zone_reclaim() (Rafael Aquini) [1073562 1039534]
  - [mm] vmscan: compaction works against zones, not lruvecs (Johannes Weiner) [1073564 982770]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-431.13.1.el6]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (J. Bruce Fields) [1063201 1042731]
  - [net] sctp: fix sctp_connectx abi for ia32 emulation/compat mode (Daniel Borkmann) [1076242 1053547]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.14.1.el6]
changelog:
  - [net] ip_tunnel: (revert old)/fix ecn decapsulation behaviour (Jiri Pirko) [1078011 1059402]
  - [net] ipv6: del unreachable route when an addr is deleted on lo (Vivek Dasgupta) [1078798 1028372]
  - [net] ipv6: add ip6_route_lookup (Vivek Dasgupta) [1078798 1028372]
  - [net] packet: improve socket create/bind latency in some cases (Daniel Borkmann) [1079870 1045150]


author: Caolán McNamara <caolanm@redhat.com> - 2.00-6
changelog:
  - --with-spellcheck-prog isn't a configure option use
    --with-simple-spellcheck/--with-interactive-spellcheck and patch
    to prefer hunspell to aspell (#509387)


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-2.20100411git
changelog:
  Resolves: #609595
  - Fix to read connection configuration from stdin, so no conf file is stored now
  - Fix to read Xauth user password from stdin
  - Fix to delete the secret file as soon as read by Openswan
  - Fixed the issue of world readable conf and secret files
  - Modifed GUI to remove unused configuration boxes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-3.20100411git
changelog:
  Resolves: #609595
  - Due to changes in NMVpnPluginUiInterface struct in NM, import and export
    fields had to be changed to import_from_file and export_to_file, respectively
  - Rebuilding as build was failing due to the above changes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-5.20100411git
changelog:
  Resolves: #617016
  - Support for reading phase1 and phase2 algorithms through GUI
  - Fixed chanelog to reference correct bz 617016, and bumped release number.


author: Jan Safranek <jsafrane@redhat.com> - 0.7.12-3
changelog:
  - Fix init scripts to be LSB compliant and return correct exit codes
    and provide mandatory actions (#523169, #523177)


author: Jan Safranek <jsafrane@redhat.com> - 0.7.16-2
changelog:
  - Fix the ipmievd initscript to actually start the service and better
    LSB compatibility (#578172). As consequence, the init scripts were
    renamed to ipmidetectd and bmc-watchdog (was: freeipmi-ipmidetectd
    and freeipmi-bmc-watchdog).


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-1
changelog:
  - Rebase to upstream except changes in /etc/freeipmi/ config dir.
    preserving original locations.
  - 1.2.1:
  - Add ipmiseld daemon and subpackage.
  - Update paths for libfreeipmi changes.
  - Remove bmc-watchdog logrotate file.
  - 1.1.1:
  - Add contrib and ipmi-pet files.
  - Make main package own logdir.
  - 1.0.4:
  - Add pkgconfig files.
  - 0.9.0:
  - Add interpret sub-library.
  - Support new config files.
  - Support new ipmi_monitoring*.h files.
  - Support new manpages.
  - Support new compatability symlinks/manpages.
  - 0.8.0:
  - Update for dcmi.
  - Update for renaming of pef-config.
  - Update for new .h files.
  - Add new ipmimonitoring config manpages.


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-6
changelog:
  - Kernel module aliases configuration for kmod. (#1032965)
  - Big-Endian authentication fix. (#1032963)
  - Revert short options removal to preserve 0.7.16 command line parameters.


author: Jaroslaw Polok <jaroslaw.polok@cern.ch>
changelog:
  - added Windows Terminal Server 2008 license handling patch:
    http://rdesktop.svn.sourceforge.net/viewvc/rdesktop/rdesktop/trunk/licence.c?r1=1642&r2=1641&pathrev=1642&diff_format=u
    fixes: "disconnect: Internal licensing error."


author: David Knox <dknox@redhat.com> 0:6.0.24-37
changelog:
  - resolves: cve-2011-3190 rhbz 738504
  - resolves: cve-2011-2204 rhbz 738504
  - resolves: cve-2011-2526 rhbz 738504
  - resolves: cve-2011-1184 rhbz 738504
  - resolves: rhbz 698624 - revisited


author: David Knox <dknox@redhat.com> 0:6.0.24-38
changelog:
  - resolves: rhbz 748813 NPE w/no data in chunked POST request
  -  Not included in 6.2. Slated for 6.3


author: David Knox <dknox@redhat.com> 0:6.0.24-41
changelog:
  - Resolves: rhbz 782400 - remove redhat-lsb dependency
  - Resolves: rhbz 726169 (783407) - Unable to compile class for JSP
  - Resolves: rhbz 783567 - tag attributes parsing throws exception


author: Adam Tkac <atkac redhat com> 1.0.9-5
changelog:
  - run ck-xinit-session for all sessions where the xdg cookie isn't already
    set (#452156, patch from Patrice Dumas)
  - add which Requires (#413041, patch from Patrice Dumas)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.9-8
changelog:
  - have ck-xinit-session tell the session bus to set
    XDG_SESSION_COOKIE for services which it autostarts (#502258)
  - add direct build dependency on dbus-devel, since we call it
    directly now


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-9
changelog:
  - consider scripts in /etc/X11/xinit/Xclients.d/ as well
  - add back scripts in Release -7 and -8 from F11 branch.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13.P1
changelog:
  - Add LICENSE file to dhclient subpackage (#613683)
  - Add DHCRELAYARGS variable to /etc/sysconfig/dhcrelay (#625846)
  - dhclient logs its pid to make troubleshooting systems
    with multiple dhclients running easier (#627257)
  - Fix parsing of date (#631071)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)
  - Fix for CVE-2010-3611 (#651914)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.157
changelog:
  - Return failure in getnetgrent only when all netgroups have been searched
    (#1085312).
  - Fix valgrind warning in nscd_stats (#1091915).


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.158
changelog:
  - Enhance nscd to detect any configuration file changes (#859965).
  - Fix __times() handling of EFAULT when buf is NULL (#1124204).
  - Fix memory leak with dlopen() and thread-local storage variables (#978098).
  - Prevent getaddrinfo from writing DNS queries to random fd (CVE-2013-7423,
    - Implement userspace half of in6.h header coordination (#1053178).
  - Correctely size relocation cache used by profiler (#1144132).
  - Fix reuse of cached stack leading to bounds overrun of DTV (#1116050).


author: Ray Strode <rstrode@redhat.com> 2.30.4-27
changelog:
  - Fix leak in xdmcp chooser
    Resolves: #723515
  - Don't show shutdown/restart buttons when non-functional
    Resolves: #645453


author: Ray Strode <rstrode@redhat.com> 2.30.4-28
changelog:
  - Place pointer thoughtfully, so it doesn't show up on a random
    monitor, or on top of the user list.
    Resolves: #670619


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-13
changelog:
  - Fix crash in in tooltip on_style_set() (rhbz 546509)
  - Fix Crash in SmcSetProperties() on exit (rhbz 539905, gnome 604867)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-14
changelog:
  - Fix crash in _IceTransClose (rhbz 551994)
    The previous patch for rhbz 539905 didn't actually fix the
    problem; the ICE connection was still being closed twice.


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-16
changelog:
  - Add a patch to fix confusion between windows
    Resolves: rhbz 588926
  - Add translation updates
    Resolves: rhbz 589227


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-17
changelog:
  - Add patch to allow breaking out from maximization during mouse resize
    Resolves: rhbz 523520
  - Add patches that tweak behaviors of RHEL 5.5 added GConf preferences
     - apply new_windows_always_on_top to windows that are raised
       or activated but denied focus as well.
     - exclude the current application from the effect of no_focus_windows
       preference
    Resolves: rhbz 607390


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-19
changelog:
  - Fix breaking out from maximization in reduced resources mode; bug
    discovered in testing resulted in mis-positioning in that case.
    Resolves: rhbz 523520


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-20
changelog:
  - Fix cases where unmaximized size wouldn't be honored when unmaximizing
    in reduced resources mode.
    Resolves: rhbz 523520


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.406.el6
changelog:
  - Reverted spurious fix for BZ 981623 [bz#1010930]
  - Resolves: bz#1010930
    (Qemu-kvm-rhev build verifytest failed (rpm -V))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.407.el6
changelog:
  - kvm-usb-host-remove-message.patch [bz#1003771]
  - Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-qemu-kvm-fix-reset-value-of-MSR_PAT.patch [bz#976706]
  - Resolves: bz#1003771
    (warning msg not correct after hotplug invalid usb-host to guest)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)
  - Resolves: bz#976706
    ([HP BCS 6.5 Bug]Guest OS cannot boot after first reboot when enabling SR-IOV feature)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.408.el6
changelog:
  - Fix Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007224]
  - Resolves: bz#1007224
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.409.el6
changelog:
  - kvm-exec-Simplify-allocation-of-guest-RAM.patch [bz#867921]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#867921]
  - kvm-block-better-error-message-for-read-only-format-name.patch [bz#999788]
  - kvm-vmdk-Add-migration-blocker.patch [bz#999358]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1013478]
  - kvm-Add-support-for-JSON-pretty-printing.patch [bz#1010610]
  - kvm-qemu-img-add-dirty-flag-status.patch [bz#1010610]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e2.patch [bz#1010610]
  - kvm-qapi-Add-SnapshotInfo-and-ImageInfo.patch [bz#1010610]
  - kvm-qemu-img-Add-json-output-option-to-the-info-command.patch [bz#1010610]
  - kvm-qemu-img-Add-backing-chain-option-to-info-command.patch [bz#1010610]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#1010610]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#1010610]
  - Resolves: bz#1010610
    (Backport  option "--output=json|human" to qemu-img info command)
  - Resolves: bz#1013478
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#867921
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#999358
    (do live migration with used VMDK format disk should fail with a friendly message prompt)
  - Resolves: bz#999788
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-1
changelog:
  - Update to upstream release 1.1.12-rc3
  - The CIB has O(2) better performance and updates are applied with greater reliablity
  - Transient attributes are now recorded in a truely atomic manner
  - Supports fencing agents that need the host to be unfenced at startup
  - CIB ACLs have been reimplemented and are now enabled 
  - Various bugs squashed

  - Resolves: rhbz#1020210 rhbz#1036631 rhbz#1069279
  - Resolves: rhbz#1069795 rhbz#1071995


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-2
changelog:
  - Bug rhbz#1054307 - cname pattern match should be more restrictive in init script
      Resolves: rhbz#1054307


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-3
changelog:
  - Fix: crmd: avoid double free caused by nested hash table removal
  - Fix: ignore SIGPIPE with gnutls is in use
  - Fix: cib: cl#5222 - Prevent assert in xml_calculate_changes() on performing cib operations
      Resolves: rhbz#1071995


author: David Vossel <dvossel@redhat.com> - 1.1.12-5
changelog:
  - Properly clear shutdown transient attribute after node leaves
    membership.

    Resolves: rhbz#1198638


author: David Vossel <dvossel@redhat.com> - 1.1.12-6
changelog:
  - Fixes invalid free in attrd
  - Fixes crm_mon -E option for external script.
  - Fixes acl read-only access role assignment.

    Resolves: rhbz#1205292
    Resolves: rhbz#1208896
    Resolves: rhbz#1207621


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-7
changelog:
  - Ensure relevant components clear cache entries are cleared when peers leave the cluster

    Resolves: rhbz#1193499


author: David Vossel <dvossel@redhat.com> - 1.1.12-8
changelog:
  - Reduce log severity for style upgrade notice.
   - Properly export pacemaker related sysconfig variables
   - Remove warning during yum update of pacemaker packages.

    Resolves: rhbz#1163982
    Resolves: rhbz#1177821
    Resolves: rhbz#1210291


author: Jay Fenlason <fenlason@redhat.com> 1.8-1
changelog:
  - New upstream version, with man pages again.
    This fixes the following bugs:
    Related: rhbz739138
    Resolves: rhbz613696
    Resolves: rhbz625620
    Resolves: rhbz735954
    Resolves: rhbz782263


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-11
changelog:
  - Fix cpio applet to print "N blocks" to stderr, not stdout
  - Change .config, making hwclock read adjtime from correct location:
    /etc/adjtime
  - Fix awk to correctly interpret numbers with leading zeros: 02.345
  - Resolves: #615391, #621853, #633961


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Enable ECC support for suite b and add upstream fixes for aec gcm
  - Use the unstripped upstream sources with ecc support
  - Limit the ECC support to suite b
  - Apply several upstream aes gcm fixes
  - Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Resolves: rhbz#960208 - Enable ECC in nss-softoken
  - Related: rhbz#919172


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
  - Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
  - When appling the patches use a backup file suffix that better describes the patch purpose


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-6
changelog:
  - create -fips packages 
  - patch submitted by Bob Relyea <rrelyea@redhat.com>
  - fix the script that splits softoken off from nss
  - patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Fix the PR_Access stub to actually access the correct permissions
  - Resolves: rhbz#1008513 - Unable to login in fips mode
  - Run the lowhash tests
  - Require nspr-4.0.0 and nss-util-3.15.1


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable new packaging but don't apply nss-fips-post.patch
  - Related: rhbz#1008513 - Unable to login in fips mode


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-10
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1082900 - Admin server segfault when configuration DS configured on SSL port
  - Add workaround to %check
  unset DISPLAY
   section for RHEL-5 based build machines where kernel lacks support for hardware GCM


author: Jiri Popelka <jpopelka@redhat.com> - 3.9.8-28
changelog:
  - Fixed crash when using Preferences dialog (bug #557099).
  - Ship %{_datadir}/hplip/prnt/plugins directory (bug #565875).


author: Tim Waugh <twaugh@redhat.com> - 3.9.8-30
changelog:
  - Explicitly destroy tray icon on exit (bug #576282).
  - Fixed duplex handling in hpcups.drv (bug #557515).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-1
changelog:
  - Re-based to 3.10.9 with fixes from Fedora (bug #652255).
  - Change shebang /usr/bin/env python -> /usr/bin/python (bug #608003).
  - Added COPYING to common sub-package (bug #613707).
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #616569).
  - Fixed "CUPS Web Interface" button (bug #633899).


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-5
changelog:
  - do not change permissions with pam_console_apply
  - drop obsolete pam_tally module and the faillog file (#461258)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-7
changelog:
  - pam_console: fix memory corruption when executing handlers (patch by
    Stas Sergeev) and a few more fixes in the handler execution code (#532302)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-4.1
changelog:
  - fix insecure dropping of priviledges in pam_xauth, pam_env,
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Akira TAGOH <tagoh@redhat.com> - 1.28.1-10
changelog:
  - Avoid the error message at %postun on upgrading to rhel7. (#1086690)
  - Use correct rpm macro for man page (#885846)


author: Hans de Goede <hdegoede@redhat.com> - 7.7-10
changelog:
  - fontsproto-2.1.3
  - videoproto-2.3.2
  - xextproto-7.3.0
  - xproto-7.0.26
  - Cherry pick some unreleased fixes from upstream git


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-69.el6]
changelog:
  - [mm] make stack guard page logic use vm_prev pointer (Mike Snitzer) [607859]
  - [mm] make the mlock() stack guard page checks stricter (Mike Snitzer) [607859]
  - [mm] make the vma list be doubly linked (Mike Snitzer) [607859]
  - [drm] nv50: insert a delay before fb change to prevent display engine hang (Ben Skeggs) [618225]
  - [mm] fix up some user-visible effects of the stack guard page (Mike Snitzer) [607859]
  - [net] sched: fix some kernel memory leaks (Jiri Pirko) [624637] {CVE-2010-2942}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-70.el6]
changelog:
  - [x86] Disable AMD IOMMU by default (Matthew Garrett) [593787]
  - [netdrv] Revert "iwlwifi: disable hardware scanning by default" (Stanislaw Gruszka) [625981]
  - [s390x] kernel: fix tlb flushing vs. concurrent /proc accesses (Hendrik Brueckner) [587587]
  - [s390x] kernel: prepare mm_context_t for new tlb flush handling (Hendrik Brueckner) [587587]
  - [fs] NFS: Fix an Oops in the NFSv4 atomic open code (Jeff Layton) [625718]
  - [net] can: add limit for nframes and clean up signed/unsigned variables (Danny Feng) [625702] {CVE-2010-2959}
  - [fs] aio: bump i_count instead of using igrab (Jeff Moyer) [626595]
  - [fs] cifs: check for NULL session password (Jeff Layton) [625583]
  - [fs] cifs: fix NULL pointer dereference in cifs_find_smb_ses (Jeff Layton) [625583]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-71.el6]
changelog:
  - [fs] nfsd: initialize nfsd versions before creating svc (J. Bruce Fields) [628084]
  - [fs] nfsd: fix startup/shutdown order bug (J. Bruce Fields) [628084]
  - [security] KEYS: Fix bug in keyctl_session_to_parent() if parent has no session keyring (David Howells) [627808] {CVE-2010-2960}
  - [security] KEYS: Fix RCU no-lock warning in keyctl_session_to_parent() (David Howells) [627808] {CVE-2010-2960}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.1.1.el6]
changelog:
  - [security] Make kernel panic in FIPS mode if modsign check fails (David Howells) [633865 625914]
  - [virt] Guests on AMD with CPU type 6 and model >= 8 trigger errata read of MSR_K7_CLK_CTL (Jes Sorensen) [632292 629066]
  - [x86] UV: use virtual efi on SGI systems (George Beshers) [633964 627653]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.2.1.el6]
changelog:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Xiaotian Feng) [634465 634466] {CVE-2010-3081}
  - [x86] kernel: fix IA32 System Call Entry Point Vulnerability (Xiaotian Feng) [634451 634452] {CVE-2010-3301}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.3.1.el6]
changelog:
  - [block] prevent merges of discard and write requests (Mike Snitzer) [639412 637805]
  - [drm] nouveau: correct INIT_DP_CONDITION subcondition 5 (Ben Skeggs) [638973 636678]
  - [drm] nouveau: enable enhanced framing only if DP display supports it (Ben Skeggs) [638973 636678]
  - [drm] nouveau: fix required mode bandwidth calculation for DP (Ben Skeggs) [638973 636678]
  - [drm] nouveau: disable hotplug detect around DP link training (Ben Skeggs) [638973 636678]
  - [drm] nouveau: set DP display power state during DPMS (Ben Skeggs) [638973 636678]
  - [mm] remove "madvise" from possible /sys/kernel/mm/redhat_transparent_hugepage/enabled options (Larry Woodman) [636116 634500]
  - [netdrv] cxgb3: don't flush the workqueue if we are called from the workqueue (Doug Ledford) [634973 631547]
  - [netdrv] cxgb3: deal with fatal parity error status in interrupt handler (Doug Ledford) [634973 631547]
  - [netdrv] cxgb3: now that we define fatal parity errors, make sure they are cleared (Doug Ledford) [634973 631547]
  - [netdrv] cxgb3: Add define for fatal parity error bit manipulation (Doug Ledford) [634973 631547]
  - [virt] Emulate MSR_EBC_FREQUENCY_ID (Jes Sorensen) [633966 629836]
  - [virt] Define MSR_EBC_FREQUENCY_ID (Jes Sorensen) [633966 629836]
  - [kernel] initramfs: Fix initramfs size calculation (Hendrik Brueckner) [637087 626956]
  - [kernel] initramfs: Generalize initramfs_data.xxx.S variants (Hendrik Brueckner) [637087 626956]
  - [drm] radeon/kms: fix sideport detection on newer rs880 boards (Dave Airlie) [634984 626454]
  - [block] switch s390 tape_block and mg_disk to elevator_change() (Mike Snitzer) [633864 632631]
  - [block] add function call to switch the IO scheduler from a driver (Mike Snitzer) [633864 632631]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.4.1.el6]
changelog:
  - [scsi] fcoe: set default FIP mode as FIP_MODE_FABRIC (Mike Christie) [641457 636233]
  - [virt] KVM: Fix fs/gs reload oops with invalid ldt (Avi Kivity) [639884 639885] {CVE-2010-3698}
  - [drm] i915: prevent arbitrary kernel memory write (Jerome Marchand) [637690 637691] {CVE-2010-2962}
  - [scsi] libfc: adds flogi retry in case DID is zero in RJT (Mike Christie) [641456 633907]
  - [kernel] prevent heap corruption in snd_ctl_new() (Jerome Marchand) [638485 638486] {CVE-2010-3442}
  - [scsi] lpfc: lpfc driver oops during rhel6 installation with snapshot 12/13 and emulex FC (Rob Evers) [641907 634703]
  - [fs] ext4: Always journal quota file modifications (Eric Sandeen) [641454 624909]
  - [mm] fix split_huge_page error like mapcount 3 page_mapcount 2 (Andrea Arcangeli) [641258 640611]
  - [block] Fix pktcdvd ioctl dev_minor range check (Jerome Marchand) [638088 638089] {CVE-2010-3437}
  - [drm] ttm: Fix two race conditions + fix busy codepaths (Dave Airlie) [642045 640871]
  - [drm] Prune GEM vma entries (Dave Airlie) [642043 640870]
  - [virt] ksm: fix bad user data when swapping (Andrea Arcangeli) [641459 640579]
  - [virt] ksm: fix page_address_in_vma anon_vma oops (Andrea Arcangeli) [641460 640576]
  - [net] sctp: Fix out-of-bounds reading in sctp_asoc_get_hmac() (Jiri Pirko) [640461 640462] {CVE-2010-3705}
  - [mm] Move vma_stack_continue into mm.h (Mike Snitzer) [641483 638525]
  - [net] sctp: Do not reset the packet during sctp_packet_config() (Jiri Pirko) [637681 637682] {CVE-2010-3432}
  - [mm] vmstat incorrectly reports disk IO as swap in (Steve Best) [641458 636978]
  - [scsi] fcoe: Fix NPIV (Neil Horman) [641455 631246]


author: Jindrich Novy <jnovy@redhat.com> 2007-57
changelog:
  - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
    CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773184)


author: Than Ngo <than@redhat.com> - 2007-58
changelog:
  - Resolves: bz#699575, running latex when the .aux file is non-writable can erase the input .tex file


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.8-1
changelog:
  - enable slang utf8 mode (#425992)
  - support --disable-nls option (patch by Natanael Copa)
  - redraw screen when using entry in euc encodings


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-39
changelog:
  - Resolves #1144608 - pki-core failed to build with cmake-2.8.12.2-4.el6
    (mharmsen - backport for RHEL 6.6.Z)
  - Resolves #1037248 - pki-core FTBFS if "-Werror=format-security" flag is used
    (mharmsen - backport for RHEL 6.6.Z)
  - Resolves #1243 - Outdated selinux-policy dependency in Dogtag 9
    (mharmsen - backport for RHEL 6.6.Z)
  - Resolves #1229361 - ipa-server-install fails when configuring CA
    (edewata - backport for RHEL 6.6.Z)


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
    Resolves: #554998
  - add support for arbitrary number of open file descriptors
  - run libtoolize to avoid errors due mismatching libtool version
  - change exec-prefix to /


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-3
changelog:
  - remove '_smp_mflags' make argument as it seems to be
    producing corrupted builds
    Resolves: #556522


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
    Resolves: #554998
  - correct the default value of the OMFileFlushOnTXEnd directive
  - add upstream fix for message-induced off-by-one error
  - change the default value of the HUPisRestart directive to enabled
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil
  - redefine _libdir as it doesn't use _exec_prefix
    Resolves: #591860


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-2
changelog:
  - Fix a potential segfault upon SIGHUP induced restart
    Resolves: #598421
  - Add Obsoletes: sysklogd
    Resolves: #513277


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-3
changelog:
  - build rsyslog with PIE and RELRO
    Resolves: #642994
  - add ChangeLog file to documentation
  - add /etc/pki/rsyslog directory


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-13
changelog:
  - RHEL-6.6 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - fix sesh login shell argv[0]
    - handle the "(none)" hostname correctly
    - SSSD: fix ipa_hostname handling
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    Resolves: rhbz#1065415
    Resolves: rhbz#1078338
    Resolves: rhbz#1052940
    Resolves: rhbz#1083064
    Resolves: rhbz#1033703
    Resolves: rhbz#1006447
    Resolves: rhbz#1006463
    Resolves: rhbz#1070952


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-14
changelog:
  - RHEL-6.6 erratum
    - SSSD: fixed netgroup filter patch
    - SSSD: dropped serparate patch for #1006463, the fix is now part
      of the netgroup filter patch
    Resolves: rhbz#1006463
    Resolves: rhbz#1083064


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-15
changelog:
  - RHEL-6.6 erratum
    - SSSD: dropped the ipahostnameshort patch, as it is not
      needed. rhbz#1033703 is a configuration issue.
    Related: rhbz#1033703


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-16
changelog:
  - RHEL-6.7 erratum
    - added zlib-devel build required to enable zlib compression support
    - fixed two typos in the sudoers.ldap man page
    - fixed a hang when duplicate nss entries are specified in nsswitch.conf
    - SSSD: implemented sorting of the result entries according to the
            sudoOrder attribute
    - LDAP: fixed logic handling the computation of the "user matched" flag
    - fixed restoring of the SIGPIPE signal in the tgetpass function
    - fixed listpw, verifypw + authenticate option logic in LDAP/SSSD
    Resolves: rhbz#1106433
    Resolves: rhbz#1138267
    Resolves: rhbz#1147498
    Resolves: rhbz#1138581
    Resolves: rhbz#1142122
    Resolves: rhbz#1094548
    Resolves: rhbz#1144448


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-17
changelog:
  - RHEL-6.7 erratum
    - added patch for CVE-2014-9680
    - added BuildRequires for tzdata
    Resolves: rhbz#1200253


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-19
changelog:
  - RHEL-6.7 erratum
    - modified the authlogicfix patch to fix #1144448
    - fixed a bug in the ldapusermatchfix patch
    Resolves: rhbz#1144448
    Resolves: rhbz#1142122


author: Milan Broz <mbroz@redhat.com> - 1.2.0-7
changelog:
  - Fix device lookup function.
  - Fix duplicate directories displayed in status output.
    Resolves: #755478 #746648


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.97
changelog:
  - Add 0265-RHBZ-1355669-max-sectors-kb.patch
    * add "max_sectors_kb" config option to set this value on all paths
  - Change devicemapper Requires to >= 1.02.117-9.el6 (bz #1344381)
    * forces multipath to use latest version of blk-availability
  - Resolves: bz #1344381, #1355669


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.98
changelog:
  - Add 0266-RHBZ-1401391-fix-prio-put.patch
    * don't try to drop a nonexistant prio handler
  - Add 0267-RHBZ-1401769-orphan-status.patch
    * don't print out checker and device status for orphan paths
  - Resolves: bz #1401391, #1401769


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100
changelog:
  - Modify 0261-RHBZ-1377532-disable-changed-paths.patch
    * add man page information
  - Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
  - Related: #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.101
changelog:
  - Add 0268-RHBZ-1447328-fix-reserve.patch
    * stop waiting for threads that weren't successfully created
  - Resolves: #1447328


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.102
changelog:
  - Add 0269-RHBZ-1442369-fix-check-partitions.patch
    * fix crash when partition minor starts with all the digits of the
      multipath device number
  - Add 0270-RHBZ-1408287-remove-long-def-timeout.patch
    * make all timeouts use checker_timeout if set and default to 60 sec.
  - Add 0271-RHBZ-1444193-fix-hang-on-resume.patch
    * resume again if an invalid table left the device suspended
  - Add 0272-RHBZ-1525217-3PAR-config.patch
  - Resolves: #1408287, #1442369, #1444193, #1525217


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.104
changelog:
  - Add 0273-RHBZ-1550069-fix-messages.patch
    * change error messages to warning messages, if adding or updating a
      multipath device fails because the device is missing from sysfs
  - Resolves: #1550069


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.105
changelog:
  - Add 0274-RHBZ-1573463-uevent-socket.patch
    * retry binding socket and close it immediately when cancelled.
  - Resolves: #1573463


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.106
changelog:
  - Modify 0272-RHBZ-1525217-3PAR-config.patch
    * revert path selector to round-robin
  - Resolves: #1578515


author: Daniel Borkmann - 1.0.10-6
changelog:
  - Move spec system to apply patches via git-am(1), which makes it more
    convienient for future backports
  - Backport SCTP_GET_ASSOC_STATS support (#908390) and import its dependencies
  - Fix bugs (#855379), (#953383), (#912557) and import its dependencies


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-11
changelog:
  - fix incompatibility between 2.6.6 and our non-standard M2Crypto.SSL.SSLTimeoutError
  Resolves: rhbz#681811


author: Bill Nottingham <notting@redhat.com> 1.3.44-1
changelog:
  - alternatives: update symlinks if they exist on installation (#104940)
  - alternatives: clarify error messages with more context (#441443)
  - alternatives: fix removal of manual links (#525021, <dtardon@redhat.com>)
  - translation updates: ml, mr, pl, ta, uk


author: Bill Nottingham <notting@redhat.com> 1.3.45-1
changelog:
  - add support for Should-Start, Should-Stop (#98470, <iarnell@gmail.com>)
  - ntsysv: don't drop initscripts with '.' in the name (#556751)
  - translation updates: el, id


author: Than Ngo <than@redhat.com> - 4.3-15.2
changelog:
  - drop KPackageKit for RHEL
  - use default ksplash, default.jpg as wallpaper and oxygen-air as kdm theme


author: James Antill <james.antill@redhat.com> - 3.2.29-18
changelog:
  - Deal with pre scripts errors better.
  - Resolves: rhbz#661962
  - history nows stores and display rpmdb/yumdb information (Eg. from_repo).
  - Resolves: rhbz#662243
  - No bug report warning on depsolve check errors.
  - Resolves: rhbz#694401
  - Don't display baseurl in repolist for non-mirrors.
  - Resolves: rhbz#697885
  - Workaround  rpm-python big size problems.
  - Resolves: rhbz#704600
  - Fix false installroot config opt. warning.
  - Resolves: rhbz#707358
  - Fix retrieve gpg syntax bug.
  - Resolves: rhbz#709311
  - Fix for pulp repostorage API usage.
  - Resolves: rhbz#727574
  - Fix stale metadata cache checking.
  - Resolves: rhbz#727586
  - Make -q history info load-ts compatible.
  - Resolves: rhbz#728253
  - Changes needed for createrepo --update with sqlite.
  - Relates: rhbz#716235
  - Add upgrade-to.
  - Resolves: rhbz#728526


author: Florian Festi <ffesti@redhat.com> - 3.2.29-19
changelog:
  - Removed locking changes from history store and display repo information.
  - Resolves: rhbz#730291
  - Relates: rhbz#662243


author: James Antill <james.antill@redhat.com> - 3.2.29-20
changelog:
  - Fix bugs in the history store patch (unicode and yumdb write fail).
  - Resolves: rhbz#730365
  - history nows stores and display rpmdb/yumdb information (Eg. from_repo).
  - Relates: rhbz#662243


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.2.29-21
changelog:
  - Don't issue bug report warning on rpm depsolve check errors
  - Resolves: rhbz#694401
  - Do not cache updateinfo for too long
  - Resolves: rhbz#733391


author: Baoquan He <bhe@redhat.com> - 2.0.0-266
changelog:
  - kdump.conf.5: Modify 2 spelling errors
  - kexec-tools: Only remap network once when cluster configured
  - tools: Clean up /etc/iface_map after remapping the devices
  - kernel cmdline: Remove hugepage allocations
  - mkdumprd: change default disk_timeout to 180 seconds
  - kdump.conf: Tell user to specify module without ".ko" suffix
  - kdump.conf: add some missing supported configurations from kdump.conf.5
  - kdump.conf: change line columns to 80
  - Raw dump: use /sbin/blockdev to flush out block device buffers
  - Update translation file for firstboot
  - Update translation file for firstboot


author: Baoquan He <bhe@redhat.com> - 2.0.0-267
changelog:
  - mkdumprd: improve error message when e2fsprogs is missing, resolves bug 975642
  - mkdumprd: improve error message when btrfs-progs is missing, resolves bug 810494
  - Document mkdumprd option --allow-missing, resolves bug 951035


author: Baoquan He <bhe@redhat.com> - 2.0.0-269
changelog:
  - add snappy build, resolves bug 902147
  - This patch fixes the parsing of inline comments in config file, resolves bug 967427


author: Baoquan He <bhe@redhat.com> - 2.0.0-271
changelog:
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption, resolves bug 1009207


author: Baoquan He <bhe@redhat.com> - 2.0.0-272
changelog:
  - Allow multipathd to configure multipath map before adding partition devmappings, resolves bug 906601
  - mkdumprd: use timeout_count as a global variable, resolves bug 906601
  - mkdumprd: add support for SCM devices available for Linux on System z, resolves bug 903529
  - kdump.init: Run multiple kdump init instances one by one in serial order, resolves bug 963948


author: Baoquan He <bhe@redhat.com> - 2.0.0-273
changelog:
  - Fix max_mapnr issue on system has over 44-bit addressing, resolves bug 1008543
  - makedumpfile: fails phys_base calculation on sadump format, resolves bug 1010103


author: Chrissie Caulfield <ccaulfie@redhat.com> - 3.0.12.1-60
changelog:
  - fenced: keep manual ACk fifo open for longer and also make fenced_external()
    write to it.
    Resolves: rhbz#1059269


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-61
changelog:
  - libgfs2: Fix up remove_mtab_entry
    Resolves: rhbz#1059853
  - fsck.gfs2: Check and repair per_node contents such as quota_changeX
    Resolves: rhbz#1062742
  - libgfs2: patch to update gfs1 superblock correctly
  - gfs2-utils: check and fix bad dinode pointers in gfs1 sb
    Resolves: rhbz#1053668


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-63
changelog:
  - gfs2_edit: Add a savemeta file metadata header
  - gfs2_edit: Fix loop arithmetic in restore_data
  - gfs2_edit: Ensure all leaf blocks in per_node are saved
  - gfs2_edit: Reinstate a check for system dinodes
    Resolves: rhbz#1081523


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-64
changelog:
  - qdisk: Check cman_wait() return value and report errors
    Resolves: rhbz#979313
  - libccs: Read daemon logging attributes correctly
    Resolves: rhbz#980575
  - qdisk: Quorum init complete after tko_up cycles, not tko
    Resolves: rhbz#1029210
  - config: Fix typos and phrasing in defaults file
    Resolves: rhbz#1035929
  - ccs_tool: Fix crash using --verbose
    Resolves: rhbz#1074551
  - manpage: Mention cluster.conf.html schema in man page
    Resolves: rhbz#981043
  - fenced: Remove mention of skip_undefined feature as it is not supported
    Resolves: rhbz#994234


author: Akira TAGOH <tagoh@redhat.com> - 0.108.0-2
changelog:
  - Fix issue the invocation of IM always fails in the internal status. (#582448)
  - Add imsettings-lxde subpackage.


author: Jens Petersen <petersen@redhat.com> - 0.108.0-3.5
changelog:
  - only enable XIM for X locale compose for necessary locales (#616061)
    (for pt_BR, fi_FI, am_ET, el_GR, and ru_RU):
  - drop imsettings-none.conf-gtk-xim-default.patch
  - add imsettings-xinput-xcompose.patch


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.1
changelog:
  - Resolves: rhbz#1192451 - nslcd does not reconnect to alternate ldap server
                             when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.2
changelog:
  - Do not crash when parsing the tls_ciphers option
  - Resolves: rhbz#1184361 - segfault occurs when nslcd starts


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.3
changelog:
  - Use a static buffer for OpenLDAP callback structure
  - Resolves: rhbz#999472 - nslcd does not reconnect to alternate ldap server
                            when using SSL


author: Harald Hoyer <harald@redhat.com> 004-298
changelog:
  - fixed fcoe-up script for new Brocade switch
  Resolves: rhbz#813057
  - document "rd_retry" option in dracut(8) man page
  Resolves: rhbz#823507
  - convert all MAC parameter to lowercase
  Resolves: rhbz#835646
  - add "no_eject" option for "live_ram"
  Resolves: rhbz#843105


author: Harald Hoyer <harald@redhat.com> 004-302
changelog:
  - add vlan support
  Resolves: rhbz#858187
  - fixed "LiveCD boot from iscsi targets" patch (Regression bug 863964)
  Resolves: rhbz#794751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320656


author: Martin Stransky <stransky@redhat.com> - 10.0.8-2
changelog:
  - Fixed rhbz#865284 - add the storage.nfs_filesystem
    config key to property list
  - disable OOP for wrapped plugins (nspluginwrapper)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-6
changelog:
  - Resolves: rhbz#741455
  - Resolves: rhbz#797192

  - Store error str if can't open logfile (rhbz#741455)
  - merge upstream commit f954852ef12544de84a9c557316c2612123b5fec (rhbz#741455)
  - Unlink shm buffers if init fails (rhbz#797192)
  - merge upstream commit ab83b695b578e0fa68a238bf26dd3a1e338c7ec6 (rhbz#797192)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-7
changelog:
  - Resolves: rhbz#773720

  - objctl: add missing calls to dispatch notifications and fix memory corruption (rhbz#773720)
  - merge upstream commit dc9b04a7196b316a596036296ac1a78b21717e97 (rhbz#773720)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-8
changelog:
  - Resolves: rhbz#770455
  - Resolves: rhbz#783068
  - Resolves: rhbz#786735
  - Resolves: rhbz#786737
  - Resolves: rhbz#794744
  - Resolves: rhbz#821352
  - Resolves: rhbz#824902
  - Resolves: rhbz#827100
  - Resolves: rhbz#838524

  - Fixed bug when corosync receive JoinMSG in OPERATIONAL state (rhbz#786737)
  - merge upstream commit ffe4943ff52843e1c7beba1250256dc7b6f283e4 (rhbz#786737)
  - Correct nodeid of token when we retransmit it (rhbz#786735)
  - merge upstream commit 081bfb0a4d6050416d4daa27d7a8417f0ba697fc (rhbz#786735)
  - Wait for corosync-notifyd exit in init script (rhbz#783068)
  - merge upstream commit fbe6de4d162644aa07b14e93aa2f01299bf4692f (rhbz#783068)
  - iba: Use configured node id (rhbz#794744)
  - merge upstream commit 0b6e1dc3290cfbc6c38a19bead9f39c582f54c40 (rhbz#794744)
  - Correctly handle point-to-point IP (rhbz#821352)
  - merge upstream commit a853b6180e9832fa763ea796f310dc3de5718324 (rhbz#821352)
  - totemip: Support bind to exact address (rhbz#824902)
  - merge upstream commit 1c7b706441d18fe45c6e9c0b17ed1c8c5a723114 (rhbz#824902)
  - Register reload callback only once (rhbz#838524)
  - merge upstream commit ec51f02373d7f0372b8739ab695ae79f2dea26ce (rhbz#838524)
  - cpg: Be more verbose for procjoin message (rhbz#770455)
  - merge upstream commit dc22fd13bff1c38888ac16bc8f8fea8117ef27bd (rhbz#770455)
  - totemudpu: Bind sending sockets to bindto address (rhbz#827100)
  - merge upstream commit 71e5257eb1485ed6544ed2d17792492043e0e48d (rhbz#827100)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-9
changelog:
  - Resolves: rhbz#847232
  - Resolves: rhbz#848210

  - confdb: Fix crash with long values and add API calls to get them (rhbz#847232)
  - merge upstream commit 5704a34612d8829fce6991f130b7732108cca761 (rhbz#847232)
  - confdb: Fix crash with long values (rhbz#847232)
  - merge upstream commit 16d309be840045b3fc6d468faf07fbd727756b3f (rhbz#847232)
  - Fix dbus part of corosync-notifyd (rhbz#848210)
  - merge upstream commit 4ac9cd59e7873914fe5845e69fd79b7a2877c290 (rhbz#848210)
  - flatiron: Free outq items list on conn exit (rhbz#848210)
  - merge upstream commit 4cdaf8ef1e7676b179eaeb5bde18d4b63d17ce52 (rhbz#848210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-10
changelog:
  - Related: rhbz#847232

  - sa-confdb: fix crash due to incorrect malloc size (rhbz#847232)
  - merge upstream commit 0a85b888b0384e83fa4a80c3751a23f4de8a9310 (rhbz#847232)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-11
changelog:
  - Resolves: rhbz#787789
  - Resolves: rhbz#794522
  - Resolves: rhbz#838743
  - Resolves: rhbz#850757
  - Resolves: rhbz#861032

  - When flushing, discard only memb_join messages (rhbz#850757)
  - merge upstream commit 17e15322b7500247c539166441fb2e78cc95d02b (rhbz#850757)
  - Add man page with Confdb keys created by corosync (rhbz#794522)
  - merge upstream commit c741dbe01ea9bb45ae5d8706c8e4287aeae4bfd5 (rhbz#794522)
  - confdb_keys: Document few more runtime statistics (rhbz#794522)
  - merge upstream commit 060abd069483aa7b9d90261c11c79b2a6f6e21c1 (rhbz#794522)
  - Add support for debug level trace in config file (rhbz#838743)
  - merge upstream commit 842d387c2f53e23c055da4509a2f28753d6ffa97 (rhbz#838743)
  - Move some totem and cpg messages to trace level (rhbz#838743)
  - merge upstream commit 9deff57e779375631541bd52146701c41e3bed68 (rhbz#838743)
  - Don't access invalid mem in totemconfig (rhbz#861032)
  - merge upstream commit 539917e35a8c74b3ea4eb9ae8cddc2f73378d203 (rhbz#861032)
  - Use unix socket for local multicast loop (rhbz#787789)
  - merge upstream commit cea2b1a302e6e4563ee5817782f15ea5d941daec (rhbz#787789)
  - Move "Totem is unable to form..." message to main (rhbz#787789)
  - merge upstream commit e032c14341c38be4d273093f1e6691f8417e264d (rhbz#787789)
  - Return back "Totem is unable to form..." message (rhbz#787789)
  - merge upstream commit b343668bbfa09ebcfa4816ddf205eeb8f2ea159c (rhbz#787789)
  - Change specfile to use runautogen


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-12
changelog:
  - Resolves: rhbz#794522
  - Resolves: rhbz#873059
  - Resolves: rhbz#876908

  - Fix minor errors in man page documentation for corosync.conf (rhbz#873059)
  - merge upstream commit b14cd84e96fff1083837a70548ff9e18472c938b (rhbz#873059)
  - manpages: Fix typo in evs* manpages (rhbz#873059)
  - merge upstream commit 6735455c598393880188db7f297ec699c8ae0492 (rhbz#873059)
  - manpages: Add links for referenced confdb calls (rhbz#873059)
  - merge upstream commit b98d4ab44979a52ef74259e0676929055442cbfb (rhbz#873059)
  - manpages: Add confdb_key_get man page (rhbz#873059)
  - merge upstream commit e414e2d34c2e5e26318cfc06f8bdd5b8c8812a7e (rhbz#873059)
  - Add link to confdb_keys in corosync-objctl mpage (rhbz#794522)
  - merge upstream commit a4e7e2bc46545a5acacb3c840bda5270efec987c (rhbz#794522)
  - Track changes for confdb logging object (rhbz#876908)
  - merge upstream commit 6c9cae79dc2680d363b0cca85cbbe55a2bc9b517 (rhbz#876908)
  - Don't call reload on corosync-objctl actions (rhbz#876908)
  - merge upstream commit bdabbf6f20138c5e33154caf32cf66330356893d (rhbz#876908)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-13
changelog:
  - Resolves: rhbz#830799
  - Resolves: rhbz#863940
  - Resolves: rhbz#869609

  - cpg: Never choose downlist with localnode (rhbz#830799)
  - merge upstream commit 559d4083ed8355fe83f275e53b9c8f52a91694b2 (rhbz#830799)
  - cpg: Process join list after downlists (rhbz#830799)
  - merge upstream commit 02c5dffa5bb8579c223006fa1587de9ba7409a3d (rhbz#830799)
  - cpg: Enhance downlist selection algorithm (rhbz#830799)
  - merge upstream commit 64d0e5ace025cc929e42896c5d6beb3ef75b8244 (rhbz#830799)
  - Don't call sync_* funcs for unloaded services (rhbz#863940)
  - merge upstream commit 6ed260b0bfc5e5230a4e765b9c63caf985708c41 (rhbz#863940)
  - Handle sync and service unload correctly (rhbz#863940)
  - merge upstream commit e7536bdaf82044671d2d18ee799eeacd8603af08 (rhbz#863940)
  - Make service_build contain correct number of msgs (rhbz#863940)
  - merge upstream commit 1cea171c4d8f9dd19b4995f96842111e41f23d6c (rhbz#863940)
  - Ignore sync barrier msgs if sync doesn't started (rhbz#869609)
  - merge upstream commit ee292e7968f749f7ebc4daddeb09f39cfbb037b4 (rhbz#869609)
  - Fix problem with sync operations under very rare circumstances (rhbz#830799)
  - merge upstream commit 6fae42ba72006941c1fde99616ea30f4f10ebb38 (rhbz#830799)
  - Handle segfault in backlog_get (rhbz#830799)
  - merge upstream commit a559ccf7247bc448ba30b6ebc02a91fa986f146f (rhbz#830799)
  - Add waiting_trans_ack also to fragmentation layer (rhbz#830799)
  - merge upstream commit 7de25c3b64b2066de19b3f9075c075fb08816de6 (rhbz#830799)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-14
changelog:
  - Resolves: rhbz#865039

  - coroipc: Don't spin when waiting on semaphore (rhbz#865039)
  - merge upstream commit 7ce8718a71b7afe341d9f9ac21c6724d6f18dfc4 (rhbz#865039)
  - On places with POLLERR check also POLLNVAL (rhbz#865039)
  - merge upstream commit 105305a486ae9f171def221ad971d607604a4770 (rhbz#865039)
  - Check socket_recv error code in ipc_dispatch_get (rhbz#865039)
  - merge upstream commit 694a9c2cf0804428671bf815b974a080c7fd1c6c (rhbz#865039)
  - coroipc: Handle pfd.revents as bit-field (rhbz#865039)
  - merge upstream commit b6aabed698d34e4e79e03a3354e59a2d0121e692 (rhbz#865039)
  - ipcc: Return dup of socket fd to user application (rhbz#865039)
  - merge upstream commit 28c5907f59afd52a67be3bddff22df57e1fb36ba (rhbz#865039)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15
changelog:
  - Resolves: rhbz#902397

  - totemip: Properly detect ipv6 address (rhbz#902397)
  - merge upstream commit d76759ec26ecaeb9cc01f49e9eb0749b61454d27 (rhbz#902397)


author: Uri Lublin <uril@redhat.com> 2.4-2
changelog:
  - add npplat.h to Makefile.am sources
  - add nsISpicec.xpt to Makefile.am EXTRA_DIST
  - add version to plugin name string
  Resolves: #672761
  - change location & name  of logfile & unix-domain-socket
  Resolves: #630601
  - look for spicec in /usr/bin if not found in /usr/libexec
  Resolves: #672497


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Resolves: #549329
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html
  Resolves: #565554
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.
  Resolves: #565210


author: Tom Lane <tgl@redhat.com> 5.1.61-1.el6_2.1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787191


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-32
changelog:
  - fixed varbind parsing in python netsnmp module (#711481)
  - fixed session initialization in python netsnmp module (#710667)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#708947)
  - added xfs and jfs filesystem support to hrStorageTable (#707912)
  - fixed snmpd to purge zombies resulted from pass_persist process exit
    (#703682)
  - added a log message when snmpd detects two interfaces with the same
    IP address and thus having only one ipTable entry for both (#702171)
  - added new snmpd.conf options 'interface_fadeout' and
    'interface_replace_old' to controll snmpd behavior when more
    interfaces get the same name (#702165)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#678314)
  - fixed hrSystemDate timezone sign (#683680)
  - fixed snmp logging 'truncating integer value > 32 bits' for
    UCD-SNMP-MIB::systemStats (#681949)
  - fixed rare race condition in hrSWRunTable (#683563)
  - recompiled with relro for better security (#725657)
  - snmpd should not change request-id when sending multiple SMUX messages
    (#708370)


