# changelog

author: Jakub Jelinek <jakub@redhat.com> 4.4.5-5
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/45081, fortran/46794, fortran/46874, middle-end/45852,
  	preprocessor/39213, rtl-optimization/46865, target/22224,
  	target/40468, target/43309, target/45447, target/46880,
  	target/46915, testsuite/33033
  - VTA backports
    - PRs debug/46893, target/47201
  - fix regmove REG_EQUAL handling (PR rtl-optimization/46804)


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-6
changelog:
  - update from gcc-4_4-branch
    - PRs c++/45894, c++/47589, fortran/47569, libstdc++/47354,
  	rtl-optimization/46603, target/44606, target/46610
    - fix avxintrin.h _mm{,256}_mask{load,store}_p{d,s} (#635015,
      PR target/47318)
  - rebuilt against newer binutils to enable PowerPC64 -mcmodel={medium,large}
    support, define __CMODEL_MEDIUM__ or __CMODEL_LARGE__ in such cases
    and fix x+const@toc printing bug (#630166)


author: Jakub Jelinek <jakub@redhat.com> 4.4.6-1
changelog:
  - update from gcc-4_4-branch
    - GCC 4.4.6 release
    - PRs c++/40975, c++/42687, c++/44629, c++/45651, c++/47289, c++/47488,
  	c++/48594, c++/48873, c++/49165, c/42544, c/48197, debug/48466,
  	fortran/47775, fortran/47878, fortran/47886, fortran/48117,
  	fortran/48894, libfortran/47694, libfortran/47830, libgfortran/47878,
  	middle-end/48973, middle-end/49640, other/48179, other/48234,
  	other/48254, other/48639, preprocessor/48740, rtl-optimization/40086,
  	rtl-optimization/45593, rtl-optimization/48542,
  	rtl-optimization/48932, rtl-optimization/49007,
  	rtl-optimization/49619, target/43603, target/43653, target/43700,
  	target/47840, target/48288, target/48349, target/48366, target/48605,
  	target/48774, target/49133, target/49186, target/49723, target/49746,
  	tree-optimization/38752, tree-optimization/46491,
  	tree-optimization/46620, tree-optimization/48809,
  	tree-optimization/48837, tree-optimization/49039,
  	tree-optimization/49572, tree-optimization/49615
    - fix up unwind info if inline asm is scheduled very early in
      function prologue (#721376, PR middle-end/48597)
    - instantiate C++ constant variables in unevaluated contexts
      (#703059, PR c++/48936)
    - improve RTL DCE compilation time on some testcases
      (#684895, PR rtl-optimization/48141)
  - run ldconfig in libgcc %postun, drop libcc_post_upgrade,
    instead write the script in <lua> (#705832)
  - change V2DImode argument passing on PowerPC with VSX (#705764,
    PR target/48857, PR target/48495)
  - Intel -mrdrnd, -mfsgsbase and -mf16c support (#696145, #696495,
    PR target/44844)
  - AMD -mtbm, -mbmi, -march=bdver2 support, slight change
    to -march=bdver1 support and -march=btver1 support
    (#696352, #696370, PR target/46422)
  - disable C90 overlength string literal warnings in inline asm
    and in __extension__ guarded code (#694141)
  - PowerPC64 -mcmodel={medium,large} bugfixes (PR target/47935,
    PR target/47986, PR target/48032)
  - fix debug info for NRV optimized C++ vars (#660302, PR debug/46815)


author: Jakub Jelinek <jakub@redhat.com> 4.4.6-2
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/49791, target/47364
    - further fix for signed one bit precision comparisons (PR middle-end/48973)
  - fix PowerPC vsx_splat* handling (PR target/45844)


author: Jakub Jelinek <jakub@redhat.com> 4.4.6-3
changelog:
  - decrease C++ FE memory usage on code with heavy overloading
    (#732807, PR c++/48481)
  - support used attribute on template class methods and static data
    members for forced instantiation (#722587, PR c++/43125)
  - build EH_SPEC_BLOCK with the same location as current function
    to help gcov (#732802, PR c++/50055)


author: Jakub Jelinek <jakub@redhat.com> 4.4.6-4
changelog:
  - update from gcc-4_4-branch
    - PRs bootstrap/50888, c++/48035, c++/50618, c++/50793, c++/51344, c/52290,
  	fortran/50050, fortran/50109, fortran/50659, rtl-optimization/51821,
  	target/30282, target/49920, target/50001, target/50691, target/50737,
  	target/50788, target/51393, target/51408, target/52330, target/52408
    - IPA-CP fix (#799491, PR tree-optimization/52430)
    - only look at call clobbered hardregs in regmove (#767604)
  - add f16cintrin.h header, -m*=native fix for some AMD CPUs (#739443,
    PR target/48743)
  - improve fortran type_for_size and type_for_mode langhooks (#751767)
  - fix up i386 memory_address_length (#752196)
  - fix up RTL loop cancellation (#756138, PR middle-end/42229)
  - fix up combiner (#756651, PR rtl-optimization/44858,
    PR rtl-optimization/45695)
  - fix parloops VTA handling (#784334, PR debug/46885)
  - backport OpenMP 3.1 support to libgomp (library only; PR fortran/42041,
    PR fortran/46752)
  - asm goto fixes (PRs rtl-optimization/51767, middle-end/51768, c++/52247)
  - -Wunused-but-set-* fix for OpenMP clauses (PR c/51360)
  - remove some unpackaged binaries to avoid packaging debug info for them
    (#729042)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-2
changelog:
  - update from gcc-4_4-branch
    - GCC 4.4.7 release
    - fix up -freorder-blocks-and-partition EH handling
      (#821901, PR middle-end/45566)
  - add -f{,no-}strict-enums option, make -fno-strict-enums the default for C++
    (#826882, PR c++/43680)
  - lazily declare destructor when needed (#750545)
  - fix graphite ICE with VIEW_CONVERT_EXPR (#820281)
  - fix power6 ICE with bswap (#819100, PR target/53199)
  - handle multilib options in gnatmake (#801144)
  - fix up std::__uninitialized_copy (#808590)
  - fix ICE in cp_tree_equal (#831832, PR c++/54858)
  - use F_SETLKW locking for *.gcda not just in libgcov.a, but also
    in the compiler when reading it (PR gcov-profile/54487)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-4
changelog:
  - fix diagnostics reporting with digraphs (#906234)
  - handle %{, %| and %} in inline asm on multiple asm dialect
    targets as {, | and } rather than asm dialect separators (#908025)
  - fix ICE in build_zero_init_1 with va_list data member in a class
    (#921758, PR c++/56403)
  - ignore out of range registers in the unwinder (#959564, PR target/49146)
  - fix ICE in fold_stmt on debug stmts (#967003)


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-23
changelog:
  - Fix 'yum-config-manager --save' traceback.
  - Resolves: bug#1075705
  - post-transaction-actions: fix filename matching.
  - Resolves: bug#1045494
  - Add description of '-l' option to manpage.
  - Resolves: bug#1015191
  - Fix yumdownloader when a package already exists and is oversized.
  - Resolves: bug#1004089
  - repoquery: don't check timestamps for repofrompath repos.
  - Resolves: bug#880944
  - yumdownloader: stop ignoring enabled source repos.
  - Resolves: bug#808347
  - Allow --old=/foo urls for repodiff.
  - Resolves: bug#802784


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-26
changelog:
  - repoquery: handle Yum exceptions on .conf setup.
  - Resolves: bug#1097560
  - yum-config-manager: --save when --setopt contains wildcards.
  - Resolves: bug#1097297
  - Print depsolving errors in yumdownloader instead of ignoring them.
  - Resolves: bug#998892


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-27
changelog:
  - yum-config-manager: fix confusing repo names and IDs.
  - Resolves: bug#971598
  - yum-plugin-security: add --sec-severity option to the man page.
  - Resolves: bug#1026317


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-30
changelog:
  - Add missing manpages.
  - Related: bug#981773
  - needs-restarting: catch IOError.
  - Related: bug#1078724


author: rtb <rtb@mail.cern.ch> 1.4.12-2.cern 27.05.2010
changelog:
  - dcache checker gives false alarms for controlled error conditions
  - p_lockless_validate line badly placed after including recommendations from reviewer


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.59.rc1
changelog:
  - Use /lib or /lib64 only if directory in chroot already exists
  - Tighten NSS library pattern, escape chroot mount path


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.61.rc1
changelog:
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)


author: Ray Strode <rstrode@redhat.com> 2.30.4-58
changelog:
  - Fix this log spew:
        Buggy client sent a _NET_ACTIVE_WINDOW message with a timestamp of 0 for 0x260002b (Login Wind)
    Resolves: #1073546


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-30
changelog:
  - Make sure all windows are properly closed and removed from the task manager applet
    Resolves: bz#1027703


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-4
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639860


author: Joe Orton <jorton@redhat.com> - 1.6.11-4
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709221)
  - add security fix for CVE-2011-0715 (#681174)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672679)


author: Joe Orton <jorton@redhat.com> - 1.6.11-5
changelog:
  - add init script for svnserve (#720790, #711904)
  - fix segfault with "AuthzForceUsernameCase lower" (#751321)
  - fix parent directory access with merges (#749494)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-28.el6
changelog:
  - Add patch for RH bug #1012399 (Fails to display task mail attachment)
  - Bump evolution-data-server version requirement (for RH bug #1009426)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-30.el6
changelog:
  - Update patch for RH bug #975409 (Custom message in alarm notification)
  - Add patch for RH bug #1014743 (Use system timezone has no effect)
  - Add patch for RH bug #1014677 (Search filter persists when changing folders)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-32.el6
changelog:
  - Add patch for RH bug #1054865 (Incorrect unref under e_attachment_load_finish())
  - Add patch for RH bug #1054772 (Local addressbooks created without relative_uri set)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-33.el6
changelog:
  - Add patch for RH bug #1080467 (mark-all-read plugin can cause UI freeze)
  - Add patch for RH bug #1052955 (Time format in combo controls is always 24 hrs)


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-1.1
changelog:
  * Also include 1.5.3 libraries so users of RHEL-6.5+ can run
    programs compiled on RHEL-6.2-
    Resolves: rhbz876315


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-1.2
changelog:
  - Don't bother passing in options that the 1.4.3 configure doesn't
    understand.
  - set XFLAGS on all archs, not just x86_64.
  - Copy requires/provides filtering from openmpi so this will stop
    providing libotf.so.0
    Resolves: rhbz1097290


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-2
changelog:
  - Split into subpackages per OpenMPI version (compat-openmpi14,
    compat-openmpi15)
  - Add compat-openmpi18.
  - Resolves: rhbz1158864, rhbz1142157


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-5
changelog:
  - Rename compat-openmpiXY to openmpi-X.Y. Package names, directories,
    modulefiles.
  - Ship multiple openmpi versions:
    - openmpi-1.4   (compat with RHEL 6.0, 6.1)
    - openmpi-1.5.3 (compat with RHEL 6.2)
    - openmpi-1.5.4 (compat with RHEL 6.3, 6.4, 6.5)
    - openmpi-1.8   (compat with RHEL 6.6, 6.7)
  - Avoid breakage in transition from the compat-openmpi package from RHEL 6.7
    (was versioned as 1.4.3, but was in fact a chimera of 1.4.3 and 1.5.3,
     where really only 1.5.3 had any chance of working) by keeping the
    "compat-openmpi", "compat-openmpi-$arch" directory and module names
    for openmpi-1.5.3.
  - openmpi-1.8 keeps the module and directory unversioned names "openmpi",
    "openmpi-$arch" it had in RHEL 6.7.
  - Related: rhbz1158864


author: Miroslav Suchý 0.9.1-23
changelog:
  - Related: #691283 - older yum do not have _repos_persistdir
  - Resolves: #688870 - resolve --enablerepo/--disablerepo for RHN repos


author: Michael Mraka <michael.mraka@redhat.com> 0.9.1-32
changelog:
  - Resolves: #707161 - reverted init_hook -> prereposetup_hook move
  - Resolves: #698525 - reverted init_hook -> prereposetup_hook move
  - call conduit.getConf() only once
  - create persistdir in _repos_persistdir instead of PWD (691283)
  - beside repo.id, cache even repo.name (684342)
  - disable network in cache only mode
  - cache list of last seen channels so we can correctly clean them
  - disable network communication with certain commands/options (627525)


author: Michael Mraka <michael.mraka@redhat.com> 0.9.1-35
changelog:
  - the latest yum-rhn-plugin and rhn-client-tools require each other
  - Resolves: #710065 - exception messages are in unicode


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-16
changelog:
  - allow prelink of softoken and freebl. Change the verify code to use
    prelink -u if prelink is installed. Fix by Robert Relyea


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-2.1
changelog:
  - Don't enable FIPS when CONFIG_CRYPTO_FIPS=n
  - Fix typo in the package description
  - Fix capitalization error in prelink conflict statement
  - Require nspr 4.8.4


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-14
changelog:
  - release the GSSAPI server credential handle immediately after the
    GSSAPI security context is established (#825863)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-15
changelog:
  - don't use " for saslauth user's description (#1081445)
  - backport the ad_compat option (#994242)
  - fixed a memory leak in the client side DIGEST-MD5 code (#838628)


author: Harald Hoyer <harald@redhat.com> 004-356
changelog:
  - fixed support for multiple fcoe devices
  Resolves: rhbz#1022766
  - fixed iscsiroot with iscsi_firmware boot
  Resolves: rhbz#1126346


author: Harald Hoyer <harald@redhat.com> 004-371
changelog:
  - start iscistart in the background
  Resolves: rhbz#1191721 rhbz#1176671
  - require nss-softokn-freebl >= 3.14.3-22.el6_6
    and remove libfreebl3* inclusion as nss-softokn-freebl
    has its own dracut module
  Resolves: rhbz#1184142
  - logrotate: remove yearly keyword
  Resolves: rhbz#1005886
  - let ip=ibft boot without ifname=...
  Resolves: rhbz#1069275
  - save vlan info in ifcfg files
  Resolves: rhbz#1111358
  - include /etc/lvm/lvm_hostname.conf if present
  Resolves: rhbz#1130565
  - handle /etc/crypttab without newline at the end of the last line
  Resolves: rhbz#1085562
  - copy over dhcp lease files of all interfaces and write
    correct ifcfg file
  Resolves: rhbz#1198117


author: Harald Hoyer <harald@redhat.com> 004-380
changelog:
  - load iSCSI modules after udevd is started for firmware
    loading
  Resolves: rhbz#1213077
  - add the hyperv-keyboard kernel module for Hyper-V Gen2 VM
  Resolves: rhbz#1205095
  - starting iscsistart in parallel has problems, if on the same
    network interface
  Resolves: rhbz#1209406


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-15
changelog:
  - Enhance e2fsck detection of invalid extent trees (#922847)
  - Several filefrag fixes (#927541)
  - Clear errors stored in superblock by newer kernels (#895679)
  - Fix journal superblock error handling (#885083)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-18
changelog:
  - Fix e2fsck false positive when blocks exist past EOF (#994615)
  - Fix resize2fs shrink corruption when moving files with many extents (#873201)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-19
changelog:
  - Fix for some resize2fs corruptions (#1036122)
  - Allow tune2fs to remove a dirty journal with -ff (#1040122)
  - Add enable_periodic_fsck to mke2fs.conf (#1052409)
  - Disallow too-high revision during mke2fs (#1093446)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-22
changelog:
  - e2fsck: fix last mount time and last write time in preen mode (#1218262)
  - e2fsck: don't prompt for time fixes with accept_time_fudge (#1218262)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-23
changelog:
  - e2image: check return value from check_if_mounted() (#1139936)
  - e2fsck: do not process impossibly large dir blocks (#1297694)
  - resize2fs: fix off-line resize of file systems (#1285227)


author: Matthew Barnes <mbarnes@redhat.com> - 1.30.0-1
changelog:
  - Rebase to 1.30.0 based on the Fedora 13 package.
  - Build with introspection disabled since glib-introspection is not
    avalable in rhel6.
  Resolves: #883027


author: Phillip Lougher <plougher@redhat.com> [2.6.32-752.el6]
changelog:
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
  - [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
  - [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
  - [net] security: export security_sk_clone (Marcelo Leitner) [1571357]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-753.el6]
changelog:
  - [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
  - [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
  - [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.el6]
changelog:
  - [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
  - [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
  - [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
  - [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
  - [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
  - [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
  - [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.1.1.el6]
changelog:
  - [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
  - [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
  - [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
  - [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
  - [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
  - [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
  - [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change xstateregs_get()/set() to use ->xsave.i387 rather than ->fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] debug: Add KERN_<LEVEL> to bare printks, convert printks to pr_<level> (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Split up <asm/i387.h> into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.2.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
  - [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
  - [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
  - [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
  - [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
  - [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
  - [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.1.el6]
changelog:
  - [infiniband] ib/iser: Rewrite bounce buffer code path (Don Dutile) [1585312]
  - [sound] alsa: pcm: prevent UAF in snd_pcm_info (CVE-2017-0861) (Jaroslav Kysela) [1565188] {CVE-2017-0861}
  - [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550176] {CVE-2018-7566}
  - [sound] alsa: seq: Fix use-after-free at creating a port (Jaroslav Kysela) [1503383] {CVE-2017-15265}
  - [sound] alsa: seq: Make ioctls race-free (Jaroslav Kysela) [1537452] {CVE-2018-1000004}
  - [mm] reduce total RAM held in per-CPU pvecs by flushing them on compound/THP page arrival (Larry Woodman) [1575819]
  - [usb] acm: fix the computation of the number of data bits (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner, part 2 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] kvm/vmx: Remove barrier_nospec() in slot_largepage_idx() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kvm] Remove memory alias support (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] posix-timers: Protect posix clock array access against speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [ipc] sysvipc/sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [documentation] Document array_index_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Include <asm/barrier.h> dependency (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.2.el6]
changelog:
  - [kvm] VMX: Fix host GDT.LIMIT corruption (CVE-2018-10301) (Paolo Bonzini) [1601851] {CVE-2018-10901}
  - [x86] Initialize __max_smt_threads to 1 (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Add topology_max_smt_threads() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix incorrect error return code in vm_insert_pfn() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Don't flush L1D cache if VMENTER_L1D_FLUSH_NEVER (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Take out the unused nosmt module parameter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm/dump_pagetables: Add a check_l1tf debugfs file (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries aganst L1TF for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Make flush_l1d visible in /proc/cpuinfo (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [Documentation] Add section about CPU vulnerabilities (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Expose SMT control init function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add find_msr() helper function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush logic (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Make indirect call speculation safe (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Enable acknowledge interupt on vmexit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D MSR based flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush algorithm (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] x86: Introducing kvm_x86_ops VM init/destroy hooks (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpufeatures: Add detection of L1D cache flush support. (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Fix incorrect vulnerabilities files function prototypes (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Export the internal __cpu_bugs variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] intel-family.h: Add GEMINI_LAKE SOC (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Move swap offset/type up in PTE to work around erratum (Waiman Long) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.3.el6]
changelog:
  - [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.4.el6]
changelog:
  - [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.5.el6]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-8
changelog:
  - Resolves: rhbz#798983 Kannada langpack missing
  - Resolves: rhbz#798926 fix endianess assumptions of lotuswordpro filter
  - Resolves: rhbz#800272 complain about unknown commandline options


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-12
changelog:
  - Resolves: rhbz#810267 better CSV import default separators
  - Resolves: rhbz#807392 focus problems and tearable menus


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-13
changelog:
  - Resolves: rhbz#809466 libreoffice-core (unintentionally) provides
    libraptor.so.1()() and librdf.so.0()()


author: Ville Skyttä <ville.skytta at iki.fi> - 1.6.0-3
changelog:
  - Patch to make upstream build system honor our CFLAGS and friends.
  - Don't bother building throwaway static libs.
  - Disable autotools dependency tracking for cleaner build logs and possible
    slight build speedup.
  - Convert docs to UTF-8.
  - Update URLs.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.0-2
changelog:
  - Add a patch to allow usage of IPv6 nameservers
    (upstream revisions 1199,1201,1202)
  - Resolves: rhbz#560116


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.0-6
changelog:
  - Only fall back to AF_INET searches when looking for AF_UNSPEC
    addresses (#730695)
  - Do not leak memory in ares_parse_a_reply when parsing an invalid
    record (#730693)
  - Add a missing break (#713133) - reported and patched by Michal Luscon
  - Fix a SIGBUS when resolving SRV queries on architectures that do
    not support unaligned memory access (#695426)
  - Amend the ares_gethostbyname manpage so that it lists ARES_ENODATA as
    an allowed return code (#640944)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-3
changelog:
  - Fall back to AF_INET when ares_gethostbyname() is called with AF_UNSPEC
  - Only set search domains from /etc/resolv.conf if there isn't a value
    already present in the channel (David Drisdale)
  - Related: rhbz#1077544 - Rebase c-ares to version 1.10


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.1
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.2
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.3
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.6
changelog:
  - Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
    overflows in JPEG, PNG and BMP reader implementations


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.7
changelog:
  - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
    processing invalid Escher graphics records length in the Powerpoint
    documents


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.3.rc1
changelog:
  - decrease severity of various errors related to outside DNS environment
    (#788870)
  - fixed various bind-chroot packaging errors (#789886)
  - use portreserve to reserve rndc control port (#790682)


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.9.rc1
changelog:
  - fix race condition in the resolver module
  - nslookup: return non-zero exit code when fail to get answer (#816164)


author: Jarod Wilson <jarod@redhat.com> [2.6.32-351.el6]
changelog:
  - [kernel] ptrace-utrace: fix PTRACE_GETEVENTMSG(pid) in sub-namespace (Oleg Nesterov) [782330]
  - [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [829149]
  - [mm] memcontrol: propagate LRU accounting state when splitting THP (Johannes Weiner) [881714]
  - [net] sctp: proc: protect bind_addr->address_list accesses with rcu_read_lock() (Thomas Graf) [706038]
  - [net] sctp: Add RCU protection to assoc->transport_addr_list (Thomas Graf) [706038]
  - [s390] zfcp: Adapt to new FC_PORTSPEED semantics (Hendrik Brueckner) [855128]
  - [virt] virtio_net: allow to change mac when iface is running (Jiri Pirko) [882868]
  - [virt] kvm: Minimal hyper-v support (Vadim Rozenfeld) [871350]
  - [fs] gfs2: Journal DLM lock has wrong label (Steven Whitehouse) [884822]
  - [mm] huge_memory: fix typo in transparent_hugepage sysfs symlink (Jeremy Eder) [887308]
  - [mm] ksm: numa awareness sysfs knob (Petr Holasek) [743643]
  - [fs] btrfs: handle IS_ERR(inode) in btrfs_lookup() (Zach Brown) [870944]
  - [kernel] sched: Add irq_{enter,exit}() to scheduler_ipi() (Stanislaw Gruszka) [836964]
  - [kernel] panic: fix a possible deadlock in panic() (Tatsuya Kitamura) [871939]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-352.el6]
changelog:
  - [md] raid10: Do not call md_raid10_unplug_device while holding spinlock (Jonathan E Brassow) [886658]
  - [md] dm-thin: commit before gathering status (Mike Snitzer) [882426]
  - [md] dm-thin: cleanup dead code (Mike Snitzer) [882426]
  - [md] dm-thin: rename cell_defer_except to cell_defer_no_holder (Mike Snitzer) [882426]
  - [md] dm-thin: emit "ignore_discard" in status if discards are disabled (Mike Snitzer) [882426]
  - [md] dm-thin: wake the worker when a discard is prepared (Mike Snitzer) [882426]
  - [md] dm-thin: fix race between simultaneous io and discards to same block (Mike Snitzer) [882426]
  - [md] dm-thin: replace calls to cell_release_singleton with cell_defer_except (Mike Snitzer) [882426]
  - [mm] Revert: ksm: numa awareness sysfs knob (Jarod Wilson) [743643]
  - [fs] gfs2: Reset rd_last_alloc when it reaches the end of the rgrp (Robert S Peterson) [882381]
  - [fs] gfs2: Stop looking for free blocks at end of rgrp (Robert S Peterson) [882381]
  - [drm] nouveau: cache ramcfg value for RAM_RESTRICT_ZM_GROUP (Ben Skeggs) [878384]
  - [drm] nouveau: disable use of tesla/fermi copy engines for buffer moves (Ben Skeggs) [878384]
  - [fs] xfs: fix direct IO nested transaction deadlock (Dave Chinner) [876426]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-353.el6]
changelog:
  - [mm] pageattr: prevent PSE and GLOABL leftovers to confuse pmd/pte_present and pmd_huge (Andrea Arcangeli) [878877]
  - [fs] gfs2: Fix FITRIM argument handling (Abhijith Das) [866932]
  - [fs] gfs2: Require user to provide argument for FITRIM (Abhijith Das) [866932]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880146] {CVE-2012-4530}
  - [fs] btrfs: close exclusive opens with close_bdev_exclusive() (Zach Brown) [874505]
  - [kernel] sched_rt: Fix hang where umount is stuck in synchronize_sched_expedited (Larry Woodman) [814768]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-354.el6]
changelog:
  - [char] ipmi: add new kernel options to prevent automatic ipmi init (Tony Camuso) [877177]
  - [usb] xhci: New system added for Compliance Mode Patch on SN65LVPE502CP (Don Zickus) [856709]
  - [x86] quirks: Mark Haswell HDMI Audio as unsupported (Prarit Bhargava) [883428]
  - [scsi] bfa: fix crash in bfa_cb_ioim_done when performing failover/failback tests (Vijay Guvva) [878618]
  - [fs] autofs4: Fix sparse warning: context imbalance in autofs4_d_automount() different lock contexts for basic block (Ian Kent) [876795]
  - [fs] jbd, jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [886318]
  - [scsi] qla4xxx: v5.03.00.00.06.04-k2 (Rob Evers) [890727]
  - [scsi] qla4xxx: Correct the validation to check in get_sys_info mailbox (Rob Evers) [890727]
  - [scsi] qla4xxx: Pass correct function param to qla4_8xxx_rd_direct (Rob Evers) [890727]
  - [scsi] qla4xxx: v5.03.00.00.06.04-k1 (Chad Dupuis) [878048]
  - [scsi] qla4xxx: update copyrights in LICENSE.qla4xxx (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Disable generating pause frames for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix double clearing of risc_intr for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: IDC implementation for Loopback (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix panic while rmmod (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fail probe_adapter if IRQ allocation fails (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Prevent MSI/MSI-X falling back to INTx for ISP82XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Update idc reg in case of PCI AER (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix double IDC locking in qla4_8xxx_error_recovery (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Clear interrupt while unloading driver for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Print correct IDC version (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Added new mbox cmd to pass driver version to FW (Chad Dupuis) [878048]
  - [scsi] qla4xxx: fix various printk and comment typos (Chad Dupuis) [878048]
  - [fs] autofs4: use simple_empty() for empty directory check (Ian Kent) [876795]
  - [fs] autofs4: dont clear DCACHE_NEED_AUTOMOUNT on rootless mount (Ian Kent) [876795]
  - [fs] gfs2: Fix race in gfs2_rs_alloc (Abhijith Das) [878476]
  - [fs] xfs: fix broken error handling in xfs_vm_writepage (Dave Chinner) [874539]
  - [drm] radeon: force rn50 chip to always report connected on analog output (Jerome Glisse) [892723]
  - [sound] alsa: add support for Teradici 2200 host card audio (Jaroslav Kysela) [890581]
  - [md] dm-raid: Fix RAID10's check for sufficient redundancy (Jonathan E Brassow) [889358]
  - [scsi] hpsa: update version number to 3.2.0 (Tomas Henzl) [891935]
  - [netdrv] cxgb4: Initialize data structures before using (Steve Best) [885756]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-355.el6]
changelog:
  - [netdrv] qlge: remove NETIF_F_TSO6 flag (Amerigo Wang) [891839]
  - [fs] ext3: Remove BKL from ext3_put_super() and ext3_remount() (Carlos Maiolino) [885945]
  - [lib] switch the protection of percpu_counter list to spinlock (Carlos Maiolino) [885945]
  - [virt] hv: Add Hyper-V balloon driver (Jason Wang) [885572]
  - [mm] export a function to get vm committed memory (Jason Wang) [885572]
  - [drm] nouveau: extend prevent display switching issues by disabling pageflip (Ben Skeggs) [853226]
  - [netdrv] mlx4: Fix advertisement of wrong PF context behaviour (Alex Williamson) [894060]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-356.el6]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Prarit Bhargava) [890160]
  - [char] ipmi: handle run_to_completion properly in deliver_recv_msg() (Prarit Bhargava) [890160]
  - [usb] xhci: Reset reserved command ring TRBs on cleanup (Don Zickus) [843520]
  - [usb] xhci: handle command after aborting the command ring (Don Zickus) [874541]
  - [usb] xhci: cancel command after command timeout (Don Zickus) [874541]
  - [usb] xhci: add aborting command ring function (Don Zickus) [874541]
  - [usb] xhci: add cmd_ring_state (Don Zickus) [874541]
  - [usb] xhci: Fix Null pointer dereferencing with non-DMI systems (Don Zickus) [874542]
  - [usb] xhci: Intel Panther Point BEI quirk (Don Zickus) [874542]
  - [usb] xhci: Increase XHCI suspend timeout to 16ms (Don Zickus) [874542]
  - [powerpc] Revert: pseries/iommu: remove default window before attempting DDW manipulation (Steve Best) [890454]
  - [serial] 8250_pnp: add Intermec CV60 touchscreen device (Mauro Carvalho Chehab) [894445]
  - [char] ipmi: apply missing hunk from upstream commit 2407d77a (Tony Camuso) [882787]
  - [acpi] Fix broken kernel build if CONFIG_ACPI_DEBUG is enabled (Lenny Szubowicz) [891948]
  - [scsi] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically (Chad Dupuis) [854736]
  - [mm] vmalloc: remove guard page from between vmap blocks (Johannes Weiner) [873737]
  - [mm] vmalloc: vmap area cache (Johannes Weiner) [873737]
  - [fs] vfs: prefer EEXIST to EROFS when creating on an RO filesystem (Eric Sandeen) [878091]
  - [scsi] qla2xxx: change queue depth ramp print to debug print (Rob Evers) [893113]
  - [fs] nfs: Fix umount when filelayout DS is also the MDS (Steve Dickson) [895194]
  - [fs] nfs/pnfs: add set-clear layoutdriver interface (Steve Dickson) [895194]
  - [fs] nfs: Don't call nfs4_deviceid_purge_client() unless we're NFSv4.1 (Steve Dickson) [895194]
  - [fs] nfs: Wait for session recovery to finish before returning (Steve Dickson) [895176]
  - [mm] compaction: validate pfn range passed to isolate_freepages_block (Johannes Weiner) [889456 890498]
  - [drm] nouveau: ensure legacy vga is re-enabled during POST (Ben Skeggs) [625441]
  - [netdrv] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [894344]
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862904] {CVE-2012-4461}


author: Jarod Wilson <jarod@redhat.com> [2.6.32-357.el6]
changelog:
  - [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
  - [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
  - [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
  - [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.1.1.el6]
changelog:
  - [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
  - [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
  - [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
  - [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
  - [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
  - [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
  - [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
  - [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
  - [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
  - [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
  - [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
  - [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
  - [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
  - [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
  - [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
  - [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
  - [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
  - [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
  - [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
  - [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
  - [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
  - [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
  - [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
  - [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.2.1.el6]
changelog:
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03
changelog:
  - Update to u77b03.
  - Drop 8146566 which is applied upstream.
  - Replace s390 Java options patch with general version from IcedTea.
  - Apply s390 patches unconditionally to avoid arch-specific patch failures.
  - Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
  - Remove aarch64-specific suffix as update/build version are now the same as for other archs.
  - Only use z format specifier on s390, not s390x.
  - Adjust tarball generation script to allow ecc_impl.h to be included.
  - Correct spelling mistakes in tarball generation script.
  - Synchronise minor changes from Fedora.
  - Use a simple backport for PR2462/8074839.
  - Don't backport the crc check for pack.gz. It's not tested well upstream.
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03
changelog:
  - Remove patches to generated configure script, which we re-generate anyway.
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03
changelog:
  - RHEL 6 adds -fasynchronous-unwind-tables which leads to libjvm.so being too big on x86
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03
changelog:
  - Revert previous change to CFLAGS/LDFLAGS as issue is not us, but rhbz#1320961
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03
changelog:
  - Avoid WithSeed versions of NSS functions as they do not fully process the seed
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Use basename of test file to avoid misinterpretation of full path as a package
  - Resolves: rhbz#1325421


author: Petr Oros <poros@redhat.com> - 1:1.17-21
changelog:
  - Update microcode data file to 20151106 revision.
  - Resolves: #1244968
  - Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
  - Resolves: #1201276


author: Petr Oros <poros@redhat.com> - 1:1.17-24
changelog:
  - Update microcode data file to 20161104 revision.
  - Add workaround for E5-26xxv4
  - Resolves: #1346045


author: Petr Oros <poros@redhat.com> - 1:1.17-25.2
changelog:
  - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
  - Add amd microcode_amd_fam17h.bin data file
  - Resolves: #1527357


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-16
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports LibMissingRELRO rhbz#812283
  - libreport attached sosreport into bugzilla with bad mimetype rhbz#885509
  - reporter-rhtsupport on RHEL6.4 unable to open cases in RHT customer center rhbz#896090
  - Change default set of reporters shown by CLI/GUI rhbz#948286
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - Resolves: #885509, #812283, #961231, #961231, #961231, #948286, #759443, #896090, #875260


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-17
changelog:
  - updated translation rhbz#993626
  - fixed bugs doscovered by coverity rhbz#905051
  - Resolves: #993626, #905051


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-19
changelog:
  - updated transaltion (ko) rhbz#993626
  - fixed bugzilla reporter to work with the new xmlrpc api rhbz#991088
  - Resolves: #991088, #993626


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-20
changelog:
  - Bugzilla: pass Bugzilla_token in all XML RPC calls
  - mailx: improve notification e-mail headers
  - mailx: include hostane in notification e-mail
  - Resolves: #989530, #997871, #1090466, #1093375


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-21.el6_6.1
changelog:
  - switch dump directory owner from "abrt:user" to "user:abrt" (rhbz#1212093)
  - harden against directory traversal, crafted symbolic links (rhbz#1212093)
  - avoid race-conditions in dump dir opening (rhbz#1212093)
  - Resolves: #1211966


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-3
changelog:
  - Resolves: rhbz#833512 provide a /usr/bin/openoffice.org-1.9 for backwards compat
  - Resolves: rhbz#902694 inaccessibile CJK/Indic shortcuts


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.1-1
changelog:
  - Backport hivex package from Fedora Rawhide.
  - Exclude s390, s390x because of lack of OCaml packages.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Rebase to upstream version 1.2.4 (RHBZ#642631).
    * Python bindings (python-hivex subpackage).
    * Adds hivex_set_value API call (Conrad Meyer).
    * Miscellaneous small bug fixes.
  - Fix Source0.
  - Fix builds with recent perl (Dan Horák).


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-3
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4
changelog:
  - Rebase to upstream version 1.3.3
    resolves: rhbz#734208
  - Add upstream patch: hivexml: Remove unused variable.
  - Add upstream patch: hivex: Added gnulib includes from builddir [...]


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4.2
changelog:
  - Remove loaded text from description
    resolves: rhbz#822741
  - Add patch to fix parsing of hives that contain large ri-records
    resolves: rhbz#841924


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-18
changelog:
  - Fix several issues related to cluster config reload operation
    including checks that would allow the config to be downgraded
    and extra spurious config reload notifications.
    (cman_config_reload_fix_part1.patch)
    (cman_config_reload_fix_part2.patch)
    (cman_config_reload_fix_part3.patch)
    (cman_config_reload_fix_part4.patch)
    (cman_config_reload_fix_part5.patch)
    (cman_config_reload_fix_part6.patch)
    Resolves: rhbz#617161, rhbz#617163
  - Fix logging configuration reload operations
    (cman_preconfig_handle_logging_reload_operation_part1.patch)
    (cman_preconfig_handle_logging_reload_operation_part2.patch)
    Resolves: rhbz#615202


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-19
changelog:
  - dlm_controld/gfs_controld: make default plock_ownership 0
    Use the simpler, safer, and more reliable option as default.
    (controld_make_default_plock_ownership_0.patch)
    Resolves: rhbz#618303
  - dlm_controld: fix plock checkpoint signatures
    (dlm_controld_fix_plock_checkpoint_signatures.patch)
    Resolves: rhbz#618806
  - dlm_controld: fix plock owner in checkpoints
    (dlm_controld_fix_plock_owner_in_checkpoints.patch)
    Resolves: rhbz#618814
  - cman: fix consensus calculation
    Bump Requires: corosync to 1.2.3-17 to guarantee that corosync
    is at the minimal version for this fix to work.
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#618534


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - Fix regression in "Fix fsck.gfs2 unaligned access on ia64" that
    affects all 32bit systems.
    Rename fsck_gfs2_unaligned_access_on_ia64.patch to
    fsck_gfs2_unaligned_access_on_ia64_part1.patch
    (fsck_gfs2_unaligned_access_on_ia64_part2.patch)
    Resolves: rhbz#608154


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - cman: do not propagate old configurations around
    (cman_do_not_propagate_old_configurations_around.patch)
    cman: Clarify man page on config distribution
    (cman_clarify_man_page_on_config_distribution.patch)
    Resolves: rhbz#619680


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-22
changelog:
  - gfs2-utils: mkfs can't fsync device with 32MB RGs
    (gfs2_utils_mkfs_can_t_fsync_device_with_32mb_rgs.patch)
    Resolves: rhbz#622844


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23
changelog:
  - gfs2-utils: fsck.gfs2 deletes directories if they get too big
    (gfs2_fsck_do_not_delete_directories_if_they_get_too_big.patch)
    Resolves: rhbz#624691


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-23.el6_0.1
changelog:
  - Updating /proc/mounts and /etc/mtab with mount args for GFS2 fs
    (updating_proc_mounts_and_etc_mtab_with_mount_args_for_gfs2_fs.patch)
    Resolves: rhbz#634201


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-23.el6_0.2
changelog:
  - fsck.gfs2 segfaults if journals are missing
    (fsck_gfs2_segfaults_if_journals_are_missing.patch)
    Resolves: rhbz#637699


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23.el6_0.3
changelog:
  - cman init: fix "stop remove" operation
    (cman_init_fix_stop_remove_ops.patch)
  - cman: Calculate expected_votes correctly after leave remove
    (cman_fix_calculate_expected_vote_after_leave_remove.patch)
    Resolves: rhbz#638954


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23.el6_0.4
changelog:
  - cman: fix startup race condition when configs are different across nodes
    (cman_fix_startup_race_condition_with_different_config_versions.patch)
    Resolves: rhbz#639958


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-40
changelog:
  - Resolves #1171848 - IPA - port 9443 (pki-core) is vulnerable to SSLv3 POODLE
    (based upon upstream changes provided by cfu and alee)


author: Jack Magne <jmagne@redhat.com> 9.0.3-42
changelog:
  - Resolves #1221900 - pki-core: cross-site scripting flaw in the dogtag administration page (port 9180, port 9444) [rhel-6.7]


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-43
changelog:
  - Resolves #1225589 - unable to create rhel 7.1 replica from rhel 6 replica CA because subsystem user does not exist


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-44
changelog:
  - Resolves #1256039 - Fixed missing subsystem user on external CA case.
  - Removed unused backup files (.p*) generated by the patches.


author: Ade Lee <alee@redhat.com> 9.0.3-48
changelog:
  - Resolves #1306989 - Crash seen with pki-common pkg during IPA server install
  - Resolves #1290535 - Check for incompatible Java at startup
  - Resolves #1313207 - ca.subsystem.certreq missing from CS.cfg


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS 
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file 
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed 
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability 
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch, 
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because 
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line 
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-2
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196132 #1196120 #1196124 #1196128


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Petr Machata <pmachata@redhat.com> - 2013c-2
changelog:
  - Update descriptions in iso3166.tab; make Jerusalem coordinates in
    zone.tab more precise
    (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
  - Update local mean time for Jerusalem to match more-precise longitude
    (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
  - Move Morocco's midsummer 2013 transitions
    (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
    Fixes 980805 980807 981019 981020
  - Israel now falls back on the last Sunday of October
    (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)


author: Jan Kaluza <jkaluza@redhat.com> 5.04-6
changelog:
  - fix #637782 - identify the zip64 format correctly
  - fix #643046 - recognize volume_key escrow packets
  - fix #594083 - improve Python recognition
  - fix #608686 - mention return code in manpage
  - fix #610795 - recognize webm content
  - fix #670125 - don't identify GFS2 filesystems as GFS1 filesystems


author: Jan Kaluza <jkaluza@redhat.com> 5.04-8
changelog:
  - fix #676045 - detect all RPM architectures
  - fix #712992 - detect noarch RPM packages
  - fix #688700 - detect s390 kernel
  - fix #692098 - do not try to get coredump informations from normal binary
  - fix #712988 - do not handle Python scripts as binary files
  - fix #690801 - fixed grammar mistakes in man page
  - fix #675691 - improve TeX recognition


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#694444 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-32
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix typo causing build breakage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701700 - sssd client libraries use select() but should use
  -                         poll() instead


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34.1
changelog:
  - Resolves: rhbz#708352 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf
  - Resolves: rhbz#708353 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned


author: Harald Hoyer <harald@redhat.com> 147-2.31
changelog:
  - fixed zero macs in 70-persistent-net.rules
  Resolves: rhbz#656059
  - add 42-qemu-usb.rules
  Resolves: rhbz#663064
  - create /dev/hugepages directory
  Resolves: rhbz#667750


author: Harald Hoyer <harald@redhat.com> 147-2.32
changelog:
  - added new page codes for scsi_id, to export ID_SERIAL_80 and ID_SERIAL_83.
  Resolves: rhbz#644902
  - correctly handle ENV{ACL_MANAGE}==0
  Resolves: rhbz#674168


author: Harald Hoyer <harald@redhat.com> 147-2.34
changelog:
  - add CFLAGS and LDFLAGS to add missing PIE and RELRO flags
  Resolves: rhbz#676004
  - fixed udevadm trigger segmentation fault
  Resolves: rhbz#677857


author: Harald Hoyer <harald@redhat.com> 147-2.36
changelog:
  - handle Vodafone K3565-Z 3G modem
  Resolves: rhbz#632646
  - update path_id to upstream version, which can handle SAS devices that 
    have no enclosure and handles iSCSI devices.
  Resolves: rhbz#698540 rhbz#714951
  - use IFINDEX for temporary network interface renaming
  Resolves: rhbz#701265
  - udev now changes the IO scheduler for all disks except sata disks to the 
    "deadline" scheduler.
  Resolves: rhbz#711254


author: Harald Hoyer <harald@redhat.com> 147-2.37
changelog:
  - add requires for libgudev1 on libudev with version and release
  Resolves: rhbz#727500
  - change import property buffer to 16384 bytes
  Resolves: rhbz#726566


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html
  Resolves: #565558
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #561010
  - adjust license tag to reflect OSI decision


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593033


author: Tom Lane <tgl@redhat.com> 8.4.4-2
changelog:
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #561010


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.1
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Remove patches added for RH1183014 which are now upstream in 2.6.5/7u99.
  - Resolves: rhbz#1320657


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.1
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop a leading zero from the priority as the update version is now three digits
  - Update PR2809 patch to apply against 2.6.6.
  - Resolves: rhbz#1325426


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-32
changelog:
  - post-transaction-actions: allow colons in command part.
  - Resolves: bug#1134973
  - ovl plugin: new plugin for overlayfs issue workaround.
  - Resolves: bug#1260977


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-33
changelog:
  - Fix yum-security manpage.
  - Resolves: bug#865694
  - Resolves: bug#1208155
  - Add libxml2-python to Requires for repo-rss.
  - Resolves: bug#1155093
  - yumdownloader: fix description of --archlist in the manpage.
  - Resolves: bug#1165661
  - Add missing options to reposync manpage.
  - Resolves: bug#1189033
  - Exclude dups from the list of security updates.
  - Resolves: bug#1209212
  - yum-config-manager: update config file specified using -c option.
  - Resolves: bug#1225753
  - yum-config-manager: require \* syntax to disable all repos.
  - Resolves: bug#1225754
  - Remove -v from repoquery man page.
  - Resolves: bug#1285748


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-34
changelog:
  - Fix 'updateinfo list available' logic and make 'updates' the default.
  - Resolves: bug#1144887
  - Fix updateinfo to exclude wrong arch updates.
  - Resolves: bug#1191313


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-36
changelog:
  - Fix performance issue when excluding dups from the list of security updates.
  - Related: bug#1209212


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-38
changelog:
  - Fix count of applicable security updates.
  - Resolves: bug#1347813
  - auto-update-debuginfo: fix check for repos in opts.
  - Resolves: bug#1293982
  - yum-plugin-verify: set exit status to 1 in case of problems.
  - Resolves: bug#1313574
  - repoquery: fix --pkgnarrow=installed.
  - Resolves: bug#1280453


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-39
changelog:
  - Filter duplicates when counting security updates.
  - Resolves: bug#1272025
  - Update yum-verify man page.
  - Related: bug#1347813


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.288.el6
changelog:
  - kvm-qcow2-Don-t-hold-cache-references-across-yield.patch [bz#812705]
  - Resolves: bz#812705
    (Installing guest with cluster_size=4096, failed)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.289.el6
changelog:
  - kvm-virtio-serial-bus-fix-guest_connected-init-before-dr.patch [bz#787974]
  - kvm-virtio-serial-bus-Unset-guest_connected-at-reset-and.patch [bz#787974]
  - Resolves: bz#787974
    (Spice Client mouse loss after live migrate windows guest with spice vmc channel and inactive guest service)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.290.el6
changelog:
  - kvm-block-change-block-job-set-speed-argument-from-value.patch [bz#813953]
  - kvm-block-add-speed-optional-parameter-to-block-stream.patch [bz#813953]
  - Resolves: bz#813953
    (block-job-set-speed is racy with block-stream/drive-mirror)


author: Eduardo Habkost <ehabkost@redhat.com> - 2:0.12.1.2-2.291.el6
changelog:
  - kvm-fix-mirror_abort-NULL-pointer-dereference.patch [bz#818226]
  - kvm-fail-drive-reopen-before-reaching-mirroring-steady-s.patch [bz#813862]
  - kvm-qemu-kvm-rhev-obsoletes-all-released-qemu-kvm-versio.patch [bz#818620]
  - Resolves: bz#813862
    (post-snap1 fixups to live block copy aka mirroring)
  - Resolves: bz#818226
    (Weird check for null pointer in mirror_abort())
  - Resolves: bz#818620
    (qemu-kvm-rhev should obsolete qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - 2:0.12.1.2-2.292.el6
changelog:
  - kvm-block-do-not-reuse-the-backing-file-across-bdrv_clos.patch [bz#816471]
  - kvm-block-Introduce-path_has_protocol-function.patch [bz#818876]
  - kvm-block-Fix-the-use-of-protocols-in-backing-files.patch [bz#818876]
  - kvm-block-simplify-path_is_absolute.patch [bz#818876]
  - kvm-block-protect-path_has_protocol-from-filenames-with-.patch [bz#818876]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e.patch [bz#818876]
  - Resolves: bz#816471
    (qemu-kvm is not closing the merged images files (mirroring with "full"=true))
  - Resolves: bz#818876
    (streaming to stable iscsi path names (with colons) fails to close backing file)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.293.el6
changelog:
  - kvm-qxl-set-size-of-PCI-IO-BAR-correctly-16-for-revision.patch [bz#698936]
  - Resolves: bz#698936
    (Migrate failed from RHEL6.1 host to RHEL6.3 host with -M rhel6.1.0 (qxl and usb device related))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.294.el6
changelog:
  - Re-adding patches that were missing
  - kvm-scsi-fix-fw-p1-take2.patch [bz#782029]
  - kvm-scsi-fix-fw-p2-take2.patch [bz#782029]
  - kvm-remove-blkmirror-take2.patch [bz#802284]
  - Resolves: bz#782029
    ([RFE] virtio-scsi: qemu-kvm implementation)
  - Resolves: bz#802284
    (RFE: Support live migration of storage (mirroring))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6
changelog:
  - kvm-x86-Pass-KVMState-to-kvm_arch_get_supported_cpui.patch [bz#819562]
  - kvm-Expose-CPUID-leaf-7-only-for-cpu-host-v2.patch [bz#819562]
  - Resolves: bz#819562
    (SMEP is enabled unconditionally)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.1
changelog:
  - postinstall scriptlet no longer loads KVM modules [bz#839897]
  - kvm-isa-bus-Remove-bogus-IRQ-sharing-check.patch [bz#840054]
  - Resolves: bz#840054
    (guest fails with error: isa irq 4 already assigned when starting guest with more than two serial devices)
  - Resolves: bz#839897
    (postinstall scriptlet no longer loads KVM modules)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.2
changelog:
  - kvm-console-bounds-check-whenever-changing-the-cursor-du.patch [bz#851257
  - Resolves: bz#851257
    (EMBARGOED CVE-2012-3515 qemu/kvm: VT100 emulation vulnerability [rhel-6.3.z])


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-96
changelog:
  - Resolves: rhbz#1327238 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out
  - Resolves: rhbz#1347778 The security manager doesn't work correctly


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-97
changelog:
  - Resolves: rhbz#1367052 CVE-2015-5174 tomcat6: tomcat: URL Normalization issue
  - Resolves: rhbz#1367057 CVE-2016-0706 tomcat6: tomcat: directory disclosure
  - Resolves: rhbz#1367059 CVE-2016-0714 Security Manager bypass via persistence mechanisms
  - Resolves: rhbz#1367055 CVE-2015-5345 Directory disclosure


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-98
changelog:
  - Resolves: rhbz#1362211 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1368120 CVE-2016-6325 tomcat6: tomcat: tomcat writable config files allow privilege escalation


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-100
changelog:
  - Resolves: rhbz#1413588 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
  - Resolves: rhbz#1402665 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests
  - Resolves: rhbz#1415824 The tomcat6 build is incompatible with the ECJ update


author: Tomas Hoger <thoger@redhat.com> 0:6.0.24-105
changelog:
  - Sync with 6.8 - add CVE-2016-6816 follow-up patches and revert unreleased fixes.
  - Related: rhbz#1397484 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
  - Related: rhbz#1397484 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816
  - Reverts: rhbz#1415824 The tomcat6 build is incompatible with the ECJ update
  - Reverts: rhbz#1347778 The security manager doesn't work correctly


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-106
changelog:
  - Resolves: rhbz#1441478 CVE-2017-5647 tomcat6: tomcat: Incorrect handling of pipelined requests when send file was used


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-110
changelog:
  - Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-120
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743093, rhbz#743091


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-122
changelog:
  - Resolves: rhbz#738421 - Package bzip2 modules
  - Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915692 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915692 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915692 - CVE-2013-1667 (DoS in rehashing code)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-1
changelog:
  - Update to sblim-cmpi-fsvol-1.5.1
    Resolves: #694506
  - Add Linux_Ext4FileSystem class support
    Resolves: #663833


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.413.el6
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007330]
  - kvm-scsi-Fix-data-length-SCSI_SENSE_BUF_SIZE.patch [bz#956929]
  - Resolves: bz#1007330
    (CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns)
  - Resolves: bz#956929
    (/usr/libexec/qemu-kvm was killed by signal 6 (SIGABRT) when SCSI inquiry is sent to unsupported page inside the KVM guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.414.el6
changelog:
  - kvm-vmstate-Add-max_version_id-field-to-VMStateDescripti.patch [bz#1016736]
  - kvm-savevm-Introduce-max_version_id-field-to-SaveStateEn.patch [bz#1016736]
  - kvm-i386-Set-cpu-section-version_id-to-11.patch [bz#1016736]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1015633]
  - Resolves: bz#1015633
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#1016736
    (CPU migration data has version_id 12 but version 11 format)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.415.el6
changelog:
  - kvm-target-i386-don-t-migrate-steal-time-MSR-on-older-ma.patch [bz#1022821]
  - Resolves: bz#1022821
    (live-migration from RHEL6.5 to RHEL6.4.z fails with "error while loading state for instance 0x0 of device 'cpu'")


author: Michal Novotny <minovotn@redhat.com> - 0.12.1.2-2.415.el6_5.1
changelog:
  - kvm-block-Avoid-unecessary-drv-bdrv_getlength-calls.patch [bz#1022548]
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.2
changelog:
  - kvm-block-Round-up-total_sectors.patch [bz#1025596]
  - Resolves: bz#1025596
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.3
changelog:
  - kvm-monitor-monitor_puts-bail-out-when-mon-NULL.patch [bz#1015979 bz#1029329]
  - kvm-qcow2-Flush-image-after-creation.patch [bz#1029327]
  - kvm-vmdk-Fix-vmdk_parse_extents.patch [bz#1029331]
  - kvm-vmdk-fix-VMFS-extent-parsing.patch [bz#1029331]
  - Resolves: bz#1015979
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1029327
    ('qemu-img info' take too much time with 'cluster_size=512,preallocation=metadata' in the first time)
  - Resolves: bz#1029329
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1029331
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.4
changelog:
  - kvm-vmdk-Allow-read-only-open-of-VMDK-version-3.patch [bz#1056642 bz#1063202]
  - Resolves: bz#1063202
    (qemu-img fails to convert vmdk v3 image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.5
changelog:
  - kvm-monitor-Cleanup-mon-outbuf-on-write-error.patch [bz#1069239]
  - Resolves: bz#1069239
    (QMP socket breaks on unexpected close)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.6
changelog:
  - kvm-block-Pass-filename-to-bdrv_get_full_backing_filenam.patch [bz#1071740]
  - Resolves: bz#1071740
    (RHEV: Cannot start VMs that have more than 23 snapshots.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.7
changelog:
  - kvm-ACPI-level-VCPU-enablement-info-for-libvirt-RHEL-6-o.patch [bz#1080436]
  - Resolves: bz#1080436
    ([Intel 6.5.z Bug] virsh setvcpus can not setup correct vcpu number)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-5
changelog:
  + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-7
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996850
    + Fix: crm_report: Collect corosync quorum data
      Resolves: rhbz#989292


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-8
changelog:
  + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
      Resolves: rhbz#997346


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-9
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  - Remove unsupported resource agent
      Resolves: rhbz#1005678
  - Provide a meaningful error if --master is used for primitives and groups


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: cman: Do not start pacemaker if cman startup fails
    + Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996850


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-12
changelog:
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
      Resolves: rhbz#1011618
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
      Resolves: rhbz#902407
  - Fix: crm_resource: Observe --master modifier for --move
      Resolves: rhbz#902407


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-14
changelog:
  - Log: crmd: Supply arguments in the correct order
      Resolves: rhbz#996850
  - Fix: Invalid formatting of log message causes crash
      Resolves: rhbz#996850


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.25-7
changelog:
  - Fix for CVE-2010-2244
  - Resolves: #607296
  - Resolves: #594405
  - Related 587761
  - Related 584761
  - Related 584766
  - Related 596151
  - Related 599435


author: jchaloup <jchaloup@redhat.com> - 0.40.rc1-16
changelog:
  - extending cgroup names with default
    resolves: #1139205
  - fixing libcgroup-0.40.rc1-reading-config-files-from-etc-cgconfig.d.patch not to modify patch backup file
    resolves: #1162220


author: Nikola Forró <nforro@redhat.com> - 0.40.rc1-19
changelog:
  - fix loading config files from /etc/cgconfig.d to make it work with libcgroup-pam
    resolves: #1345762


author: Adam Jackson <ajax@redhat.com> 1.17.4-7
changelog:
  - Add bug-compatibility for exposure event generation for backing store's
    Always mode, and re-enable the feature


author: Rafael Aquini <aquini@redhat.com> [2.6.32-422.el6]
changelog:
  - [fs] fuse: drop dentry on failed revalidate (Brian Foster) [924014]
  - [fs] fuse: clean up return in fuse_dentry_revalidate() (Brian Foster) [924014]
  - [fs] fuse: use d_materialise_unique() (Brian Foster) [924014]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [876275]
  - [hid] pantherlord: heap overflow flaw (Radomir Vrbovsky) [1000435] {CVE-2013-2892}
  - [virt] hv: Correctly support ws2008R2 and earlier (Jason Wang) [1007341]
  - [powerpc] iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table() (Steve Best) [1012666]
  - [powerpc] Add isync to copy_and_flush (Steve Best) [1014475]
  - [block] rsxx: Kernel Panic caused by mapping Discards (Steve Best) [1013728]
  - [kernel] audit: avoid soft lockup due to audit_log_start() incorrect loop termination (Richard Guy Briggs) [990806]
  - [fs] nfsv4: Remove the BUG_ON() from nfs4_get_lease_time_prepare() (Steve Dickson) [1012688]
  - [netdrv] bnx2x: fix loss of VLAN priority information in received TPA-aggregated packets (Michal Schmidt) [1014694]
  - [fs] gfs2: garbage quota usage reported due to uninitialized inode during creation (Abhijith Das) [1008947]
  - [fs] nfs: fix filelayout_commit_call_ops (Scott Mayhew) [1012479]
  - [netdrv] igb: fix driver reload with VF assigned to guest (Stefan Assmann) [985733]
  - [md] Fix bio flags for md raid5 (Jes Sorensen) [837097]
  - [md] Fix bio flags for md raid10 (Jes Sorensen) [837097]
  - [scsi] qla4xxx: 5.03.00.00.06.05-k3 (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Support setting of local CHAP index for flash target entry (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Correct the check for local CHAP entry type (Chad Dupuis) [1011476]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.3p driver release (Rob Evers) [1012961]
  - [scsi] lpfc: Fixed function mode field defined too small for not recognizing dual-chute mode (Rob Evers) [1012961]
  - [net] Revert "net: more accurate skb truesize" (Francesco Fusco) [889181]
  - [net] fix multiqueue selection (Michal Schmidt) [1011939]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-423.el6]
changelog:
  - [kvm] pmu: add proper support for fixed counter 2 (Gleb Natapov) [1000956]
  - [kvm] vmx: do not check bit 12 of EPT violation exit qualification when undefined (Gleb Natapov) [1006139]
  - [kvm] vmx: set "blocked by NMI" flag if EPT violation happens during IRET from NMI (Gleb Natapov) [1006139]
  - [edac] Fix workqueue-related crashes (Aristeu Rozanski) [831127]
  - [edac] amd64_edac: Fix driver module removal (Aristeu Rozanski) [831127]
  - [md] raid5: BIO flags adjust (Jes Sorensen) [837097]
  - [md] Fix skipping recovery for read-only arrays (Jes Sorensen) [1014102]
  - [kernel] audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record (Richard Guy Briggs) [1009386]
  - [kernel] audit: log the audit_names record type (Richard Guy Briggs) [1009386]
  - [kernel] audit: add child record before the create to handle case where create fails (Richard Guy Briggs) [1009386]
  - [kernel] audit: format user messages to size of MAX_AUDIT_MESSAGE_LENGTH (Richard Guy Briggs) [1007069]
  - [netdrv] tg3: Expand led off fix to include 5720 (Ivan Vecera) [991498]
  - [netdrv] tg3: Don't turn off led on 5719 serdes port 0 (Ivan Vecera) [991498]
  - [netdrv] tg3: Fix UDP fragments treated as RMCP (Ivan Vecera) [991498]
  - [netdrv] tg3: Remove incorrect switch to aux power (Ivan Vecera) [991498]
  - [i2c] ismt: initialize DMA buffer (Neil Horman) [1014753]
  - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Neil Horman) [1014864]
  - [fs] gfs2: Fix race in iteration of glocks for unfreeze/umount (Abhijith Das) [999909]
  - [fs] gfs2: dirty inode correctly in gfs2_write_end (Benjamin Marzinski) [991596]
  - [x86] Mark Intel Atom Avoton processor as supported (Prarit Bhargava) [914842]
  - [mm] vmscan: fix zone shrinking exit when scan work is done (David Gibson) [985155]
  - [block] free bios when failing blk_execute_rq_nowait calls (Jeff Moyer) [1009312]
  - [netdrv] be2net: fix disabling TX in be_close() (Ivan Vecera) [951271]
  - [crypto] Fix race condition in larval lookup (Herbert Xu) [916361]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-424.el6]
changelog:
  - [block] loop: fix crash when using unassigned loop device (Mike Snitzer) [989795]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1014867]
  - [x86] microcode: Fix patch level reporting for AMD family 15h (Prarit Bhargava) [1014401]
  - [hda] alsa: enable switcheroo code in the snd-hda-intel driver (Jaroslav Kysela) [1013993]
  - [x86] reboot: Fix a warning message triggered by stop_other_cpus() (Jerome Marchand) [840710]
  - [kernel] async: Bump up the MAX_THREADS count for the async subsystem (Neil Horman) [1010666]
  - [pci] Calculate right add_size (Myron Stowe) [997672]
  - [netdrv] iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: pcie: add new SKUs for 7000 & 3160 NIC series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: enable shadow registers for 7000 (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: add new 7260 and 3160 series device IDs (Stanislaw Gruszka) [1013951]
  - [netdrv] be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd (Ivan Vecera) [1014360]
  - [netdrv] be2net: call ENABLE_VF cmd for Skyhawk-R too (Ivan Vecera) [1014360]
  - [netdrv] be2net: Fix to prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1014360]
  - [scsi] pm8001: Queue rotation logic for inbound and outbound queues (Rich Bono) [1013771]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.4p driver release (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock hang (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock inversion problem (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed inconsistent spin lock useage (Rob Evers) [1004841]
  - [scsi] qla2xxx: Update version number to 8.05.00.03.06.5-k2 (Chad Dupuis) [912652]
  - [scsi] qla2xxx: Fix request queue null dereference (Chad Dupuis) [912652]
  - [net] tcp: TSQ can use a dynamic limit (Jiri Pirko) [996802]
  - [net] tcp: TSO packets automatic sizing (Jiri Pirko) [996802]
  - [net] tcp: Apply device TSO segment limit earlier (Jiri Pirko) [996802]
  - [net] Allow driver to limit number of GSO segments per skb (Jiri Pirko) [996802]
  - [net] cleanups in RX queue allocation (Ivan Vecera) [1012388]
  - [net] Update kernel-doc for netif_set_real_num_rx_queues() (Ivan Vecera) [1012388]
  - [net] netif_set_real_num_rx_queues may cap num_rx_queues at init time (Ivan Vecera) [1012388]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-425.el6]
changelog:
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [974481] {CVE-2013-4299}
  - [watchdog] iTCO_wdt: add platform driver module alias (Neil Horman) [1019497]
  - [hda] alsa: disable 44.1kHz rate for Haswell HDMI/DP audio (Jaroslav Kysela) [831970]
  - [x86] Update UV3 hub revision ID (George Beshers) [1018962]
  - [fs] xfs: Don't reference the EFI after it is freed (Eric Sandeen) [1018469]
  - [security] keys: Fix a race between negating a key and reading the error set (Dave Wysochanski) [890231]
  - [fs] nfsv4: Ensure memory ordering between nfs4_ds_connect and nfs4_fl_prepare_ds (Jeff Layton) [1012439]
  - [fs] nfsv4: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails (Jeff Layton) [1012439]
  - [md] Disable TRIM on RAID5 for RHEL 6.5 (Jes Sorensen) [837097]
  - [md] raid5: BIO_RW_SYNCIO is a bit number, not a bitmask (Jes Sorensen) [837097]
  - [virt] hyperv: framebuffer pci stub (Gerd Hoffmann) [1013335]
  - [netdrv] bnx2x: add missing enum channel_tlvs definitions (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: KR2 disablement fix (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Specific Active-DAC is not detected on 57810 (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Generalize KR work-around (Michal Schmidt) [1015137]
  - [usb] usbnet: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [usb] cdc_ether: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [mm] Revert "Find_early_table_space based on ranges that are actually being mapped" (Rafael Aquini)
  - [mm] Revert "Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping" (Rafael Aquini)
  - [mm] Revert "Group e820 entries together and add map_individual_e820 boot option" (Rafael Aquini)
  - [net] bridge: update mdb expiration timer upon reports (Vlad Yasevich) [1013816]
  - [net] veth: Remove NETIF_F_HW_VLAN_RX capability (Thomas Graf) [1018158]
  - [net] gre/vxlan: handle 802.1Q inner header properly (Thomas Graf) [997632]
  - [net] disable the new NAPI weight error message for RHEL 6.5 (Michal Schmidt) [1012090]
  - [scsi] sd: Fix parsing of 'temporary ' cache mode prefix (Ewan Milne) [955441]
  - [scsi] sd: fix array cache flushing bug causing performance problems (Ewan Milne) [955441]
  - [scsi] bfa: firmware update to 3.2.1.1 (Rob Evers) [1002770]
  - [netdrv] bna: firmware update to 3.2.1.1 (Ivan Vecera) [1002771]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-426.el6]
changelog:
  - [block] loop: unplug_fn only when backing file is attached (Lukas Czerner) [1022997]
  - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1011876]
  - [kernel] async: Revert MAX_THREADS to 256 (Neil Horman) [1021705]
  - [net] ipv6: restrict neighbor entry creation to output flow (Jiri Pirko) [997103]
  - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1011930] {CVE-2013-4387}
  - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1010347]
  - [net] unix: revert/fix race in stream sockets with SOCK_PASS* flags (Daniel Borkmann) [1019343]
  - [net] Loosen constraints for recalculating checksum in skb_segment() (Vlad Yasevich) [1020298]
  - [drm] nouveau: fix vblank deadlock (Rob Clark) [1013388]
  - [usb] xhci: refactor EHCI/xHCI port switching (Don Zickus) [970715]
  - [fs] compat_ioctl: VIDEO_SET_SPU_PALETTE missing error check (Phillip Lougher) [949573] {CVE-2013-1928}
  - [fs] vfs: fix d_mountpoint() (Ian Kent) [1011337]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [999708]
  - [fs] nfs: Remove the 'FIFO' behaviour for nfs41_setup_sequence (Steve Dickson) [1022257]
  - [fs] nfs: Record the OPEN create mode used in the nfs4_opendata structure (Steve Dickson) [1019439]
  - [fs] nfs: Simulate the change attribute (Steve Dickson) [1018653]
  - [scsi] megaraid_sas: Fix synchronization problem between sysPD IO path and AEN path (Tomas Henzl) [1019811]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-427.el6]
changelog:
  - [tools] perf: Add ref-cycles into array of tested events (Jiri Olsa) [968806]
  - [pci] Revert "make SRIOV resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "ability to relocate assigned pci-resources" (Myron Stowe) [1022270]
  - [pci] Revert "honor child buses add_size in hot plug configuration" (Myron Stowe) [1022270]
  - [pci] Revert "make cardbus-bridge resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "code and comments cleanup" (Myron Stowe) [1022270]
  - [pci] Revert "make re-allocation try harder by reassigning ranges higher in the heirarchy" (Myron Stowe) [1022270]
  - [pci] Revert "Calculate right add_size" (Myron Stowe) [1022270]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-428.el6]
changelog:
  - [fs] Revert "vfs: allow umount to handle mountpoints without revalidating them" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: massage umount_lookup_last() a bit to reduce nesting" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: rename user_path_umountat() to user_path_mountpoint_at()" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: introduce kern_path_mountpoint()" (Rafael Aquini) [1024607]
  - [fs] Revert "autofs4: fix device ioctl mount lookup" (Rafael Aquini) [1024607]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-430.el6]
changelog:
  - [x86] Revert "efi: be more paranoid about available space when creating variables" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efivars: firmware bug workarounds should be in platform code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Export efi_query_variable_store() for efivars.ko" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Check max_size only if it is non-zero" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Distinguish between "remaining space" and actually used space" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Implement efi_no_storage_paranoia parameter" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "Modify UEFI anti-bricking code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Fix dummy variable buffer allocation" (Rafael Aquini) [1012370 1023173]


author: David Tardon <dtardon@redhat.com> - 1:4.2.8.2-11
changelog:
  - Resolves: rhbz#1223696 some labels in print dialog are not translated, even
    though the translations exist


author: Matthias Clasen <mclasen@redhat.com> - 2.28.4-14
changelog:
  - Remove space-saving hack that causes multilib problems
  - Explicitly require nautilus-extensions in nautilus-devel
  Resolves: #596188


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28.4-17
changelog:
  - Fix bookmark renaming from browser Places sidebar (#636881)
  - Refresh desktop location after xdg-dirs change (#661589)
  - Fix saving window geometry (#654091)
  - Prevent a crash when deleting files (#652607)
  - Prevent deadlock on recursive dbus sync calls (#666086)


author: Ray Strode <rstrode@redhat.com> 0.8.3-16
changelog:
  - Fix up problem introduced in previous patch when kernel
    command line has no consoles
    Related: #615912


author: Ray Strode <rstrode@redhat.com> 0.8.3-18
changelog:
  - Handle underpowered video cards that force multiple monitors
    to use one controller
    Resolves: #625209
  - Fix serial console crash
  - Resolves: #631924
  - Remove plymouth-text-and-details-only obsoletes
    Resolves: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-19
changelog:
  - Add explicit, versioned dep on core-libs subpackage to various
    parts of the spec file to silence rpmdiff
    Related: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-21
changelog:
  - Update lock icon dimensions to match dimensions of old
    icon to silence rpmdiff
    Related: #612665


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-12
changelog:
  - fix for Java API __repmgr_send crash where eid=SELF_EID,
    don't update master_id so soon after election (upstream bz#16299)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-18
changelog:
  - Fix GConf module building with updated GLib2 (#1118704)
  - Fix SFTP mounting with updated OpenSSH (#1118325)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.15.1.el6]
changelog:
  - [net] bonding: prevent oopsing on calling pskb_may_pull on shared skb (Andy Gospodarek) [671342 665110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.16.1.el6]
changelog:
  - [net] ipsec: fragment locally generated tunnel-mode IPSec6 packets as needed (Herbert Xu) [670421 661113]
  - [net] tcp: Increase TCP_MAXSEG socket option minimum to TCP_MIN_MSS (Frantisek Hrbata) [652510 652511] {CVE-2010-4165}
  - [perf] perf_events: Fix perf_counter_mmap() hook in mprotect() (Oleg Nesterov) [651672 651673] {CVE-2010-4169}
  - [md] dm mpath: revert "dm: Call blk_abort_queue on failed paths" (Mike Snitzer) [658854 636771]
  - [x86] UV: Address interrupt/IO port operation conflict (George Beshers) [662921 659480]
  - [mm] guard page for stacks that grow upwards (Johannes Weiner) [666796 630562]
  - [scsi] enable state transistions from OFFLINE to RUNNING (Mike Christie) [660590 643237]
  - [scsi] set queue limits no_cluster for stacked devices (Mike Snitzer) [662050 658293]
  - [mm] Out-of-memory under memory cgroup can call both of oom-killer-for-memcg and oom-killer-for-page-fault (Larry Woodman) [661732 592879]
  - [scsi] libfc: possible race could panic system due to NULL fsp->cmd (Mike Christie) [662049 638297]
  - [kernel] exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [kernel] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [virt] virtio: console: Send SIGIO in case of port unplug (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO on new data arrival on ports (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO to processes that request it for host events (Amit Shah) [652720 624628]
  - [virt] virtio: console: Reference counting portdev structs is not needed (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add reference counting for port struct (Amit Shah) [662721 628805]
  - [virt] virtio: console: Use cdev_alloc() instead of cdev_init() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a find_port_by_devt() function (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a list of portdevs that are active (Amit Shah) [662721 628805]
  - [virt] virtio: console: open: Use a common path for error handling (Amit Shah) [662721 628805]
  - [virt] virtio: console: remove_port() should return void (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make write() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make read() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Unblock poll on port hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Un-block reads on chardev close (Amit Shah) [662721 628805]
  - [virt] virtio: console: Check if portdev is valid in send_control_msg() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Remove control vq data only if using multiport support (Amit Shah) [662721 628805]
  - [virt] virtio: console: Reset vdev before removing device (Amit Shah) [662721 628805]
  - [fs] Fix nfsv4 client lock reclaim behaviour (Sachin Prabhu) [661730 638269]
  - [scsi] scsi_dh_alua: Handle all states correctly (Mike Snitzer) [659610 636994]
  - [kernel] execve: improve interactivity and respond to SIGKILL with large arguments (Dave Anderson) [661731 629178]
  - [virt] xen: handle events as edge-triggered (Andrew Jones) [661737 550724]
  - [virt] xen: use percpu interrupts for IPIs and VIRQs (Andrew Jones) [661737 550724]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.17.1.el6]
changelog:
  - [s390x] kdump: allow zfcpdump to mount and write to ext4 file systems (Amerigo Wang) [661667 628676]
  - [scsi] qla2xxx: Properly set the return value in function qla2xxx_eh_abort (Chad Dupuis) [664398 635710]
  - [scsi] qla2xxx: Drop srb reference before waiting for completion (Chad Dupuis) [664398 635710]
  - [virt] KVM: VMX: Really clear cr0.ts when giving the guest ownership of the fpu (Avi Kivity) [658891 645898]
  - [virt] KVM: SVM: Initialize fpu_active in init_vmcb() (Avi Kivity) [658891 645898]
  - [virt] KVM: x86: Use unlazy_fpu() for host FPU (Avi Kivity) [658891 645898]
  - [virt] KVM: Set cr0.et when the guest writes cr0 (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Give the guest ownership of cr0.ts when the fpu is active (Avi Kivity) [658891 645898]
  - [virt] KVM: Lazify fpu activation and deactivation (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Allow the guest to own some cr0 bits (Avi Kivity) [658891 645898]
  - [virt] KVM: Replace read accesses of vcpu->arch.cr0 by an accessor (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: trace clts and lmsw instructions as cr accesses (Avi Kivity) [658891 645898]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.18.1.el6]
changelog:
  - [netdrv] ixgbe: make sure FCoE DDP user buffers are really released by the HW (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: invalidate FCoE DDP context when no error status is available (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: avoid doing FCoE DDP when adapter is DOWN or RESETTING (Frantisek Hrbata) [674002 617193]
  - [fcoe] libfc: remove tgt_flags from fc_fcp_pkt struct (Mike Christie) [666797 633915]
  - [fcoe] libfc: use rport timeout values for fcp recovery (Frantisek Hrbata) [666797 633915]
  - [fcoe] libfc: incorrect scsi host byte codes returned to scsi-ml (Mike Christie) [666797 633915]
  - [scsi] scsi_dh_alua: fix overflow in alua_rtpg port group id check (Mike Snitzer) [673978 670572]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.19.1.el6]
changelog:
  - [crypto] sha-s390: Reset index after processing partial block (Herbert Xu) [678996 626515]
  - [net] clear heap allocations for privileged ethtool actions (Jiri Pirko) [672434 672435] {CVE-2010-4655}
  - [usb] iowarrior: don't trust report_size for buffer size (Don Zickus) [672421 672422] {CVE-2010-4656}
  - [virt] virtio: console: Wake up outvq on host notifications (Amit Shah) [678558 643750]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] sctp: fix kernel panic resulting from mishandling of icmp dest unreachable msg (Neil Horman) [667028 667029] {CVE-2010-4526}
  - [mm] install_special_mapping skips security_file_mmap check (Frantisek Hrbata) [662198 662199] {CVE-2010-4346}
  - [kdump] vt-d: Handle previous faults after enabling fault handling (Takao Indoh) [678485 617137]
  - [kdump] Enable the intr-remap fault handling after local apic setup (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Fix the vt-d fault handling irq migration in the x2apic mode (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Quirk for masking vtd spec errors to platform error handling logic (Takao Indoh) [678485 617137]
  - [virt] virtio: console: Don't block entire guest if host doesn't read data (Amit Shah) [678562 643751]
  - [virt] virtio: console: Prevent userspace from submitting NULL buffers (Amit Shah) [678559 635535]
  - [virt] virtio: console: Fix poll blocking even though there is data to read (Amit Shah) [678561 634232]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.20.1.el6]
changelog:
  - [dvb] kernel: av7110 negative array offset (Mauro Carvalho Chehab) [672403 672404] {CVE-2011-0521}
  - [fs] sunrpc: Correct a misapplied patch (J. Bruce Fields) [678094 678146] {CVE-2011-0714}
  - [netdrv] orinoco: fix TKIP countermeasure behaviour (Stanislaw Gruszka) [667908 667909] {CVE-2010-4648}
  - [kernel] /proc/vmcore: speed up access to vmcore file (Neil Horman) [683442 672937]
  - [netdrv] cnic: Fix big endian bug (Steve Best) [678484 676640]
  - [scsi] fcoe: drop FCoE LOGO in FIP mode (Mike Christie) [683814 668114]
  - [s390x] remove task_show_regs (Danny Feng) [677854 677855] {CVE-2011-0710}
  - [ib] cm: Bump reference count on cm_id before invoking callback (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [rdma] cm: Fix crash in request handlers (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [net] bridge: Fix mglist corruption that leads to memory corruption (Herbert Xu) [678172 659421] {CVE-2011-0716}
  - [netdrv] r8169: use RxFIFO overflow workaround and prevent RxFIFO induced infinite loops (Ivan Vecera) [680080 630810]
  - [s390x] kernel: nohz vs cpu hotplug system hang (Hendrik Brueckner) [683815 668470]
  - [netdrv] cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory (Doug Ledford) [633156 633157] {CVE-2010-3296}
  - [configs] redhat: added CONFIG_SECURITY_DMESG_RESTRICT option (Frantisek Hrbata) [683822 653245]
  - [kernel] restrict unprivileged access to kernel syslog (Frantisek Hrbata) [683822 653245]
  - [fs] cifs: allow matching of tcp sessions in CifsNew state (Jeff Layton) [683812 629085]
  - [fs] cifs: fix potential double put of TCP session reference (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent possible memory corruption in cifs_demultiplex_thread (Jeff Layton) [683812 629085]
  - [fs] cifs: eliminate some more premature cifsd exits (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent cifsd from exiting prematurely (Jeff Layton) [683812 629085]
  - [fs] CIFS: Make cifs_convert_address() take a const src pointer and a length (Jeff Layton) [683812 629085]
  - [kdump] kexec: accelerate vmcore copies by marking oldmem in /proc/vmcore as cached (Neil Horman) [683445 641315]
  - [virt] KVM: VMX: Disallow NMI while blocked by STI (Avi Kivity) [683783 616296]
  - [virt] kvm: write protect memory after slot swap (Michael S. Tsirkin) [683781 647367]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.21.1.el6]
changelog:
  - [netdrv] ixgbe: limit VF access to network traffic (Frantisek Hrbata) [684129 678717]
  - [netdrv] ixgbe: work around for DDP last buffer size (Frantisek Hrbata) [684129 678717]
  - [net] gro: reset dev and skb_iff on skb reuse (Andy Gospodarek) [688311 681970]
  - [x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs (Frank Arnold) [683813 652208]
  - [virt] virtio_net: Add schedule check to napi_enable call (Michael S. Tsirkin) [684268 676579]
  - [s390x] mm: add devmem_is_allowed() for STRICT_DEVMEM checking (Hendrik Brueckner) [684267 647365]
  - [powerpc] Don't use kernel stack with translation off (Steve Best) [684266 628951]
  - [powerpc] Initialise paca->kstack before early_setup_secondary (Steve Best) [684266 628951]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.23.1.el6]
changelog:
  - [x86] Revert "[x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs" (Frank Arnold) [683813 652208]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.24.1.el6]
changelog:
  - [fs] Revert "[fs] inotify: stop kernel memory leak on file creation failure" (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-70.1
changelog:
  - enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI (#756929)
  - add CAVS test driver for the aes-ctr ciphers (#782091)


author: Martin Sivak <msivak@redhat.com> - 0.2.9-1
changelog:
  - Make most of the subpackages arch independent as they
    contain only python code
    Related: rhbz#557202


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.0-4
changelog:
  - remove references to git builds and git matching sources aux files.
  - disable autoreconf, we're building from a tarball.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.0-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Remove spaces/tabs mixup to silence rpmlint.


author: Adam Jackson <ajax@redhat.com> 1.2.1-1
changelog:
  - rebase to 1.2.1
  - synaptics-1.2.1-timer-fix.patch: Don't clobber the timer immediately after
    creating it. (#573669)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-2
changelog:
  - synaptics-1.2.1-clickfinger-defaults: disable clickfingers if middle or
    right button was detected (#588612)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-4
changelog:
  - synaptics-1.2.1-man-page-fixes.patch: Update man page to bring it more
    in-line with the real information (#604483)
  - synaptics-1.2.1-force-mode.patch: don't allow any mode but Relative
    (#604485)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.1-1
changelog:
  - synaptics 1.4.1 (#713861)
  - drop patches, all merged upstream
  - Revert coasting enabled by default. This is a behaviour change.
  - Revert two-finger emulation by default. Behaviour change.


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-2
changelog:
  - Add -Wl,-z,relro to the linker flags in order to fix a rpmdiff
    error. These flags used to be provided indirectly by openssl, and after
    openssl stopped exporting them, they were added by
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch
    which was dropped during the rebase
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-3
changelog:
  - Add -Wl,-z,now as well to the link flags.  This flag was present in
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch, and
    pkgwrangler still complains about:
    File /usr/lib/libspice-client-glib-2.0.so.8.5.0 lost GNU_RELRO security
    protection on i686
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-4
changelog:
  - Fix smartcard issues after VM restart (virsh destroy/virsh start)
    Resolves: rhbz#1205171
  - Remove obsolete patches
    Related: rhbz#1185434


author: Fabiano Fidêncio <fidencio@redhat.com> 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242605
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247920
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1265361
  - Add Client capability for windows monitor_config messsage
    Resolves: rhbz#1265359
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1247749
  - Drop isoc packages on low bandwith
    Resolves: rhbz#1276707


author: Pavel Grunt <pgrunt@redhat.com> 0.26-8
changelog:
  - Make grab session related
    Resolves: rhbz#1330652
  - Improve messages in usb redirection dialog
    Resolves: rhbz#1298772
  - Use proxy only when needed
    Resolves: rhbz#1306311


author: Thomas Oulevey <thomas.oulevey@cern.ch> - 4.0.13-1.slc6
changelog:
  - Change low space message warning

  - Tue Mar 27 2012  Jan van Eldik <Jan.van.Eldik@cern.ch> - 4.0.13-0.slc6
  - eliminate internal variable $HPX_SYSTEM_HOME
  - empty file /etc/hepix/motd


author: Jan Iven <jan.iven@cern.ch> - 4.9.1-0
changelog:
  - remove support for 'obsolete space-separated entries' in USERPATH GROUPPATH
  - add a first round of group scripts to the RPM: si t3 v5 va vv vy wj xv xx z2 zh zp


author: Karel Zak <kzak@redhat.com> 2.17.2-12.16
changelog:
  - fix #1033309 - man rename references mmv command which is not available
  - fix #1039187 - taskset man page PERMISSIONS section is incorrect
  - fix #999625 - mount does not appear to be correctly documented for default mount options
  - fix #1004021 - document blkid -w behaviour
  - fix #1011590 - fdisk: Floating point exception on multipath mapped device
  - fix #1031641 - findmnt should handle better trailing "/" in /proc/mounts entries
  - fix #1104575 - kill(1) doesn't check errno after calling strtol()
  - fix #1049055 - backport PID ns support to unshare(1) in util-linux-ng
  - fix #957906 - backport 'nsenter' utility to util-linux
  - fix #619521 - requesting to add logins(1m) command to distribution of Red Hat


author: Karel Zak <kzak@redhat.com> 2.17.2-12.19
changelog:
  - fix #1088411 - lsblk does not list dm-multipath and partitioned devices
  - fix #1215840 - slogins segfault and failure to allocate memory
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty
  - fix #1168390 - lscpu doesn't show all nodes on a discontinuous NUMA setup
  - fix #1191236 - 'umount -f' calls readlink on dead NFS mounts and hangs
  - fix #1172297 - umount --fake fails to edit mtab for NFS mounts which are already gone
  - fix #961148  - RHEL6: swapon: add "discard" support
  - fix #1150302 - ionice support class names
  - fix #1085062 - fdisk -l fails to fully process /proc/partitions when multipath device
  - fix #1122839 - fallocate and findmnt have wrong options according to man pages
  - fix #1089663 - Not all xfs mount options are described in mount(8)
  - fix #1295737 - man page for hwclock doesn't include --compare option
  - fix #1140594 - mount --move badly documented
  - fix #1296894 - RHEL6: update audit event in hwclock
  - fix #1266191 - fdisk does not handle >2TB disks correctly


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-9
changelog:
  - util: Improve error reporting from absolutePathFromBaseFile helper (rhbz#874860)
  - storage: Fix broken backing chain (rhbz#874860)
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#874050)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#874050)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#874050)
  - virsh: save: Report an error if XML file can't be read (rhbz#876868)
  - virsh: Fix uninitialized variable in cmdSnapshotEdit (rhbz#877303)
  - qemu: Allow larger discrepency between memory & currentMemory in domain xml (rhbz#873134)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-10
changelog:
  - Add note about numeric domain names to manpage (rhbz#824253)
  - Use virNetServerRun instead of custom main loop (rhbz#867246)
  - qemu: Fix RBD attach regression (rhbz#878862)
  - qemu: Stop recursive detection of image chains when an image is missing (rhbz#878862)
  - Fix exiting of libvirt_lxc program on container quit (rhbz#879360)
  - snapshot: qemu: Add support for external inactive snapshots (rhbz#876816)
  - conf: Fix private symbols exported by files in conf (rhbz#876816)
  - snapshot: qemu: Fix detection of external snapshots when deleting (rhbz#876816)
  - snapshot: Require user to supply external memory file name (rhbz#876816)
  - snapshot: Add two more filter sets to API (rhbz#876817)
  - snapshot: Add virsh back-compat support for new filters (rhbz#876817)
  - snapshot: Implement new filter sets (rhbz#876817)
  - snapshot: Expose location through virsh snapshot-info (rhbz#876817)
  - sanlock: Retry after EINPROGRESS (rhbz#820173)
  - storage: Fix logical volume cloning (rhbz#879780)
  - cpu: Add Intel Haswell cpu model (fix previous downstream definition) (rhbz#879282)
  - virsh: Report error when taking a snapshot with empty --memspec argument (rhbz#879130)
  - lxc: Don't crash if no security driver is specified in libvirt_lxc (rhbz#880064)
  - lxc: Avoid segfault of libvirt_lxc helper on early cleanup paths (rhbz#880064)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-11
changelog:
  - Fix uninitialized variable in virLXCControllerSetupDevPTS (rhbz#880064)
  - storage: Fix device detach regression with cgroup ACLs (rhbz#876828)
  - storage: Fix bug of fs pool destroying (rhbz#878400)
  - qemu: Fix a crash when save file can't be opened (rhbz#880919)
  - bitmap: Fix typo to use UL type of integer constant in virBitmapIsAllSet (rhbz#876415)
  - virsh: Rewrite cmdDomDisplay (rhbz#878779)
  - network: Fix crash when portgroup has no name (rhbz#879473)
  - util: Capabilities detection for dnsmasq (rhbz#882265)
  - util: New virSocketAddrIsPrivate function (rhbz#882265)
  - network: Use dnsmasq --bind-dynamic when available (rhbz#882265)
  - storage: Fix scsi detach regression with cgroup ACLs (rhbz#876828)
  - libssh2_session: Support DSS keys as well (rhbz#878376)
  - virsh: Fix error messages in iface-bridge (rhbz#878376)
  - virsh: Check the return value of virStoragePoolGetAutostart (rhbz#878376)
  - conf: Check the return value of virXPathNodeSet (rhbz#878376)
  - conf: snapshot: Check return value of virDomainSnapshotObjListNum (rhbz#878376)
  - util: Fix virBitmap allocation in virProcessInfoGetAffinity (rhbz#878376)
  - virsh: Use correct sizeof when allocating cpumap (rhbz#878376)
  - rpc: Don't destroy xdr before creating it in virNetMessageEncodeHeader (rhbz#878376)
  - virsh: Do timing even for unusable connections (rhbz#878376)
  - conf: Fix uninitialized variable in virDomainListSnapshots (rhbz#878376)
  - Fix error handling in virSecurityManagerGetMountOptions (rhbz#878376)
  - conf: Prevent crash with no uuid in cephx auth secret (rhbz#878376)
  - conf: Fix virDomainNetGetActualDirect*() and BridgeName() (rhbz#881480)
  - virsh: Report errors if arguments of the schedinfo command are incorrect (rhbz#882915)
  - systemd: Require dbus service (rhbz#830201)
  - spec: Require dbus-daemon when using libvirtd in Fedora (rhbz#830201)
  - qemu: Don't free PCI device if adding it to activePciHostdevs fails (rhbz#877095)
  - util: Slightly refactor PCI list functions (rhbz#877095)
  - qemu: Fix memory (and FD) leak on PCI device detach (rhbz#877095)
  - util: Do not keep PCI device config file open (rhbz#877095)
  - node_memory: Improve the docs (rhbz#872656)
  - node_memory: Do not fail if there is parameter unsupported (rhbz#872656)
  - node_memory: Fix bug of node_memory_tune (rhbz#872656)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-12
changelog:
  - qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
  - remote: Avoid the thread race condition (rhbz#866524)
  - storage: Error out earlier if the volume target path already exists (rhbz#832302)
  - dnsmasq: Fix parsing of the version number (rhbz#885727)
  - qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
  - examples: Fix balloon event callback (rhbz#884650)
  - util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
  - util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
  - util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
  - util: Fix warning message in previous patch (rhbz#883832)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-13
changelog:
  - network: Prevent dnsmasq from listening on localhost (rhbz#886821)
  - sanlock: Re-add lockspace unconditionally (rhbz#820173)
  - Fix "virsh create" example (rhbz#887187)
  - docs: Fix some typos in examples (rhbz#887187)
  - network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-14
changelog:
  - util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
  - util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
  - util: Fix botched check for new netlink request filters (rhbz#889319)
  - blockjob: Fix memleak that prevented block pivot (rhbz#888426)
  - sanlock: Chown lease files as well (rhbz#820173)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-15
changelog:
  - snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
  - snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
  - snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
  - snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
  - util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
  - qemu: Add a hash table for the shared disks (rhbz#878578)
  - docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
  - conf: Parse and format the new XML (rhbz#878578)
  - qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
  - qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
  - qemu: Relax hard RSS limit (rhbz#891653)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-16
changelog:
  - qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
  - Add RESUME event listener to qemu monitor. (rhbz#894085)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-17
changelog:
  - storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
  - qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
  - qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18
changelog:
  - rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
  - spec: Disable libssh2 support (rhbz#513363)


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-7
changelog:
  - fixes memory corruption on git shortlog
  - add -f option for "git submodule add" to add files even when
    these are included in .gitignore
  - improve performance of extremly slow http(s)
  - fix cloning using http(s) protocol when redirection is requested
    Resolves: #874659 #1207253 #1237395 #1289984


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-8
changelog:
  - fixes previous patch which add -f option for "git submodule add"
    which incorectly used unsupported option --ignore-missing for
    "git add --dry-run"
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1207253 #1368384


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstreamed patch for RH1151372.
  - Regenerate add-final-location-rpaths patch against new release.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180291


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180291


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Resolves: rhbz#1209066


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235150


author: Nathan Scott <nathans@redhat.com> - 3.10.3-3
changelog:
  - Fix postfix pmda failing to setgid to postfix user (BZ 1213724).
  - Fix postfix pmda not reporting incoming mails (BZ 1213764).
  - Consistent naming for tools related to LVM cache (BZ 1218007).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Resolve local_sock() double free error (BZ 1258846).
  - Resolve netfilter pmda uses outdated /proc API (BZ 1221653).
  - Update to latest PCP sources (BZ 1248272).
  - Fix pmatop attribute error (BZ 1195429).
  - Fix pmwebd fails when monitoring systems with Vector (BZ 1238863).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-3
changelog:
  - Correct papi version we link against (BZ 1295694)
  - Fix possible overflow with pmdaproc using local context options (BZ 1295801)
  - Dropped pcp-compat package from upstream (BZ 1294390)


author: Lukas Berk <lberk@redhat.com> - 3.10.9-4
changelog:
  - Correct interrupts parsing on s390x platforms (BZ 1297822)
  - Correct papi version we link against for 32 bit arches (BZ 1295694)


author: Lukas Berk <lberk@redhat.com> 3.10.9-6
changelog:
  - Update pmdanamed testcaes (BZ 1303005)
  - Fix possible fd leak in pmdanamed (BZ 1223311)
  - Fix issue with pmdagfs2 installation (BZ 1305939)
  - Address testcase 370 failure on non x86_64 archs (BZ 1305940)
  - Address endian issue with pmdalinux on some platforms (BZ 1298722)


author: Nathan Scott <nathans@redhat.com> 3.10.9-7
changelog:
  - Fix pmlogconf probing of base XFS metrics (BZ 1358972)
  - Resolve SIGFPE in pcp-atop with missing metrics (BZ 1373590)
  - Support pcp-iostat uninterpolated PCP archive replay (BZ 1293661)
  - Resolve several reporting issues in PostgreSQL PMDA (BZ 1304619)


author: Nathan Scott <nathans@redhat.com> 3.10.9-9
changelog:
  - Added pcp-iostat precision reporting capability (BZ 1297498)
  - Fixed a pcp-iostat argument checking stack trace (BZ 1414257)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-119
changelog:
  - 692862 - lc launders tainted flag, CVE-2011-1487
  - make SOURCE1 executable, because it missed +x in brew
  - Resolves: rhbz#692862


author: Harald Hoyer <harald@redhat.com> 147-2.41
changelog:
  - add "nowatch" option to manpage
  Resolves: rhbz#628762
  - fixed return code of udev-post for "status"
  Resolves: rhbz#735410
  - fixed udev_device_get_devnode()
    backported cdb1d7608a2e2ba708a890eeab6e5e99409a1953
  Resolves: rhbz#784648


author: Harald Hoyer <harald@redhat.com> 147-2.43
changelog:
  - add cciss handling to path_id
  Resolves: rhbz#784697
  - add kmsg alias logger
  Resolves: rhbz#826396
  - extend udev(7) man page about character encoding in symlinks
  Resolves: rhbz#790321
  - fix cdrom_id to honor feature profiles, if no medium is present
  Resolves: rhbz#847925


author: Harald Hoyer <harald@redhat.com> 147-2.46
changelog:
  - make symlink/rename failure info() only
    this can happen for multipath devices
  Resolves: rhbz#838451


author: Than Ngo <than@redhat.com> - 4.6.2-15
changelog:
  - Resolves: bz#589165
     fix multiple flaws in webkit
     CVE-2010-0047, CVE-2010-0648, CVE-2010-0656


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Caolan McNamara <caolanm@redhat.com> - 4.2.1-9
changelog:
  - Resolves: rhbz#596171 drop icu.icu6284.strictalias.patch and use
    -fno-strict-aliasig as upstream has added a pile more and doesn't look
    interested in proposed patchs


author: Peng Wu <pwu@redhat.com> - 4.2.1-15
changelog:
  - Apply icu.13634.integer.overflow.patch
  - Apply icu.20958.segv.mapper.patch
  - Resolves: rhbz#1809876


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-26
changelog:
  - Match exact Oracle SID to avoid waiting for 90 seconds and killing other databases if their names include the name of the database you're trying to stop
  - Use DAD to check for address collision instead of ping for IPv6 in rgmanager
  - MySQL wait up to "startup_wait" seconds for mysqld to create PID
  - Handle failure state during stop in orainstance.sh
  - Add Oracle resource agents for Pacemaker

    Resolves: rhbz#1200639
    Resolves: rhbz#1191247
    Resolves: rhbz#1207285
    Resolves: rhbz#1234777
    Resolves: rhbz#1070479


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-27
changelog:
  - SAP HANA add Multiple Components One System (MCOS) support
  - sap_redhat_cluster_connector add support for "-" in hostnames

    Resolves: rhbz#1200903
    Resolves: rhbz#1269897


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-28
changelog:
  - Use IPv6 DAD for collision detection in IPaddr2
  - Add RAID segment type support for HA LVM
  - Fix Tomcat SELinux failed in enforcing mode
  - Add migrate_options parameter to VirtualDomain
  - Remove not-working tmpfs "support" from fs.sh
  - Fix tmpfile leak in mysql resource agent

    Resolves: rhbz#1276698
    Resolves: rhbz#1266173
    Resolves: rhbz#1280319
    Resolves: rhbz#1286650
    Resolves: rhbz#1024505
    Resolves: rhbz#1292054


author: Jan Pokorny <jpokorny@redhat.com> - 3.9.5-31
changelog:
  - Fix up for wrongly generated RNG schema for cluster configuration
    wrt. "action" tag

    Related: rhbz#1272587


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-32
changelog:
  - Add portblock resource agent for Pacemaker
  - Add Oracle Data Guard resource agent for rgmanager

    Resolves: rhbz#1302545
    Resolves: rhbz#1086838


author: Karel Zak <kzak@redhat.com> 2.17.2-12.5
changelog:
  - fix #588419 - Changing the console login timeout
  - fix #740163 - 'fdisk -l' returns confusing output
  - fix #785142 - uuidd service not active by defaul
  - fix #797888 - script does not play well with csh when invoked from within /etc/csh.login


author: Karel Zak <kzak@redhat.com> 2.17.2-12.8
changelog:
  - fix #679833 - [RFE] tailf should support `-n 0`
  - fix #719927 - [RFE] add adjtimex --compare functionality to hwclock
  - fix #730272 - losetup does not warn if backing file is < 512 bytes
  - fix #730891 - document cfdisk and sfdisk incompatibility with 4096-bytes sectors
  - fix #736245 - lscpu segfault on non-uniform cpu configuration
  - fix #783514 - default barrier setting for EXT3 filesystems in mount manpage is wrong
  - fix #790728 - blkid ignores swap UUIDs if the first byte is a zero byte
  - fix #818621 - lsblk should not open device it prints info about
  - fix #819945 - hwclock --systz causes a system time jump
  - fix #820183 - mount(8) man page should include relatime in defaults definition
  - fix #823008 - update to the latest upstream lscpu and chcpu
  - fix #837935 - lscpu coredumps on a system with 158 active processors
  - fix #839281 - inode_readahead for ext4 should be inode_readahead_blks
  - fix #845477 - Duplicate SElinux mount options cause mounting from the commandline to fail
  - fix #845971 - while reading /etc/fstab, mount command returns a device before a directory
  - fix #858009 - login doesn't update /var/run/utmp properly
  - fix #809449 - Backport inverse tree (-s) option for lsblk and related patches
  - fix #809139 - lsblk option -D missing in manpage


author: Karel Zak <kzak@redhat.com> 2.17.2-12.13
changelog:
  - fix #816342 - agetty: improve CLOCAL flag management
  - fix #846790 - missing information about threads in kill(2) man page
  - fix #864585 - "mount -av" displays "nothing was mounted" when a /sbin/mount.<fs> successed
  - fix #868850 - sfdisk man pages should refer block devices as "block devices" rather than disks.
  - fix #870128 - improve blkid documentation
  - fix #870854 - Cannot use user@domain format for console logins
  - fix #872291 - "man hwclock" says to run non-existent "adjtimex" utility
  - fix #958313 - Add /bin/logger symlink
  - fix #885313 - hexdump segfault
  - fix #915844 - mount man page incorrectly describes behaviour of "relatime" mount option
  - fix #947062 - blkdiscard command support
  - fix #966735 - CPU add/delete util-linux-ng patch
  - fix #859523 - fallocate: add punch hole support


author: Dave Airlie <airlied@redhat.com> 9.0-0.8
changelog:
  - CVE-2013-1872: memory corruption oob read/write on intel (#963063)
  - CVE-2013-1993: interger overflows in protocol handling (#961613)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-7
changelog:
  - Add ignore_lvm_mirrors to config file to read/ignore labels on mirrors.
  - Revert to using devices/obtain_device_list_from_udev=0 by default.
  - Add internal flag for temporary LVs to properly direct udev to not interfere.
  - Fix endless loop in blkdeactivate <device>... if unable to umount/deactivate.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.107-1
changelog:
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.107-2
changelog:
  - Add report/list_item_separator lvm.conf option.
  - Add lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Comment out devices/{preferred_names,filter} in default lvm.conf file.
  - Enhance lvconvert thin, thinpool, cache and cachepool command line support.
  - Display 'C' only for cache and cache-pool target types in lvs.
  - Prompt for confirmation before change LV into a snapshot exception store.
  - Return proper error codes for some failing lvconvert funtions.
  - Add initial code to use cache tools (cache_check|dump|repair|restore).
  - Add --activationmode degraded to activate degraded raid volumes by default.
  - Add separate lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Recognize "auto"/"unmanaged" values in selection for appropriate fields only.
  - Add report/binary_values_as_numeric lvm.conf option for binary values as 0/1.
  - Add --binary arg to pvs,vgs,lvs and {pv,vg,lv}display -C for 0/1 on reports.
  - Add separate reporting fields for each each {pv,vg,lv}_attr bit.
  - Separate LV device status reporting fields out of LV fields.
  - Fix regression causing PVs not in VGs to be marked as allocatable (2.02.59).
  - Fix VG component of lvid in vgsplit/vgmerge and check in vg_validate.
  - Add lv_full_name, lv_parent and lv_dm_path fields to reports.
  - Change lv_path field to suppress devices that never appear in /dev/vg.
  - Postpone thin pool lvconvert prompts (2.02.107).
  - Require --yes option to skip prompt to lvconvert thin pool chunksize.
  - Support lvremove -ff to remove thin volumes from broken thin pools.
  - Require --yes to skip raid repair prompt.
  - Change makefile %.d generation to handle filename changes without make clean.
  - Fix use of buildir in make pofile.
  - Enhance private volumes UUIDs with suffixed for easier detection.
  - Do not use reserved _[tc]meta volumes for temporary LVs.
  - Leave backup pool metadata with _meta%d suffix instead of reserved _tmeta%d.
  - Allow RAID repair to reuse PVs from same image that suffered a failure.
  - New RAID images now avoid allocation on any PVs in the same parent RAID LV.
  - Always reevaluate filters just before creating PV.
  - Fix dm_report_field_string_list to handle delimiter with multiple chars.
  - Add dm_report_field_reserved_value for per-field reserved value definition.


author: Alasdair Kergon <agk@redhat.com> - 2.02.108-1
changelog:
  - Add lvscan --cache which re-scans constituents of a particular LV.
  - Make dmeventd's RAID plugin re-scan failed PVs when lvmetad is in use.
  - Improve lvconvert --merge and --splitsnapshot validation.


author: Alasdair Kergon <agk@redhat.com> - 2.02.109-1
changelog:
  - Allow approximate allocation with +%FREE in lvextend.
  - Fix a segfault in lvscan --cache when devices were already missing. (2.02.108)
  - Display actual size changed when resizing LV.
  - Remove possible spurious "not found" message on PV create before wiping.
  - Handle upgrade from 2.02.105 when an LV now gaining a uuid suffix is active.
  - Remove lv_volume_type field from reports. (2.02.108)
  - Fix incorrect persistent .cache after vgcreate with PV creation. (2.02.108)
  - Add dm_tree_set_optional_uuid_suffixes to libdevmapper to handle upgrades.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.109-2
changelog:
  - Fix pvcreate_check() to update cache correctly after signature wiping.
  - Fix primary device lookup failure for partition when processing mpath filter.
  - Remove spurious "Skipping mirror LV" message on pvmove of clustered mirror.
  - If LV inactive and non-clustered, do not issue "Cannot deactivate" on -aln.
  - Cleanly error when creating RAID with stripe size < PAGE_SIZE.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.110-1
changelog:
  - Fix manipulation with thin-pools which are excluded via volume_list.
  - Support lv/vgremove -ff to remove thin vols from broken/inactive thin pools.
  - Fix typo breaking configure --with-lvm1=shared.
  - Modify lvresize code to handle raid/mirrors and physical extents.
  - Don't allow pvcreate to proceed if scanning or filtering fails.
  - Print name of LV which on activation triggers delayed snapshot merge.
  - Add lv_layout and lv_role LV reporting fields.
  - Properly display lvs lv_attr volume type and target type bit for cache origin.
  - Improve libdevmapper-event select() error handling.
  - Add extra check for matching transation_id after message submitting.
  - Add dm_report_field_string_list_unsorted for str. list report without sorting.
  - Support --deferred with dmsetup remove to defer removal of open devices.
  - Update dm-ioctl.h to include DM_DEFERRED_REMOVE flag.
  - Add support for selection to match string list subset, recognize { } operator.
  - Fix string list selection with '[value]' to not match list that's superset.
  - Fix string list selection to match whole words only, not prefixes.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-1
changelog:
  - Reinstate nosync logic when extending mirror. (2.02.110)
  - Fix total area extent calculation when allocating cache pool. (2.02.110)
  - Pass properly sized char buffers for sscanf when initializing clvmd.
  - Restore proper buffer size for parsing mountinfo line (1.02.89)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-6
changelog:
  - More subpackage interdependency adjustments
    - boost doesn't bring in the MPI stuff.  Instead, $MPI-devel does.
      It needs to, so that the symlinks don't dangle.
    - boost-graph-$MPI depends on boost-$MPI so that boost-mpich2
      doesn't satisfy the SONAME dependency of boost-graph-openmpi.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-8
changelog:
  - Import 1.41.1 with fixes from Fedora 13 to RHEL 6
  - Turn off OpenMPI support on s390*, which isn't available in RHEL 6
  - Resolves: #571607


author: Petr Machata <pmachata@redhat.com> - 1.41.0-9
changelog:
  - Use a .gz archive instead of bz2, because that's what's hosted now.
    Fill in the full URL.
  - Resolves: #571607


author: Petr Machata <pmachata@redhat.com> - 1.41.0-10
changelog:
  - Turn on OpenMPI support on non-s390 arches.  It was accidentally
    turned off everywhere.
  - Move cmake files to libdir to avoid multilib conflicts.
  - Also install Boost.cmake, which is included by BoostConfig.cmake
  - Change soname selection to work on RHELs.
  - Resolves: #586204
  - Resolves: #592516
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11
changelog:
  - ... and revert the soname change, because that's not the smartest
    thing to do mid-release.
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11.1
changelog:
  - Add an upstream patch that fixes computation of CRC in zlib streams.
  - Turn off mpich2 support on platforms where it's not shipped.
  - Resolves: #723503


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11.2
changelog:
  - Build with -fno-strict-aliasing due to the sheer amount of warnings
    that we get.
  - Related: #723503


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - repack policies adapted to new counts and paths
  - note that also c-j-c is needed to make this apply in next update
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches of:
     patch561 8075484-pr3473-rh1490713.patch
     patch532 8162384-pr3122-rh1358661.patch
     patch547 8173941-pr3326.patch
     patch554 8175887-pr3415.patch
     patch550 8180048-pr3411-rh1449870.patch
  - adapted pr3286-no_fp_contract.patch, CFLAGS_linux_ppc64 no longer have -ffp-contract=off so was dropped from hunk
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: John Hefferman <john.hefferman@cern.ch> - 1.39
changelog:
  - cern-config-keytab changed to perform a 'round robin' on available domain controllers for keytab extraction and verification


author: John Hefferman <john.hefferman@cern.ch> - 1.40
changelog:
  - -x option added for acquiring new keys regardless of validity
  - Bug fix for SLC4 freezing problem on msktutil writes
  - Script now only warns if 'secondary keytab' is not acquired successfully, instead of dying
  - Temp files cleaned up


author: John Hefferman <john.hefferman@cern.ch> - 1.43
changelog:
  - Slc6 specific changes: different mit directory and chcon commands if OS is 6
  - Reduced verbose debugging
  - Stopped script from dying on keytab extraction failure so installations will continue (keytab can be acquired later)
  - Using lxkerb alias instead of single server
  - Added timeout on arc commands. It is 300 seconds for both. arc client might be waiting a long time when the server is under stress, so timeout has to be large.
  - Added retry on extraction in case it fails due to segmentation problem (short term solution)


author: Dave Anderson <anderson@redhat.com> - 6.0.3-1.el6
changelog:
  - Support sadump dumpfile formats for Fujitsu Stand Alone Dump facility.
    Resolves: rhbz#736884
  - Support s390x ELF-kdump and s390x compressed-kdump dumpfiles.
    Resolves: rhbz#738865 
  - Display an early warning message if any part of the kernel has been 
    erased/filtered by the makedumpfile facility.
    Resolves: rhbz#739096
  - Fix for the "runq" command for kernels that are configured with
    CONFIG_FAIR_GROUP_SCHED.
    Resolves: rhbz#754291
  - Fix for the x86_64 "bt" command to handle a recursive entry into
    the NMI exception stack.
    Resolves: rhbz#768189
  - Fix for an x86_64 "bt" command segmentation violation if the number
    of ELF_PRSTATUS notes in a compressed-kdump do not match the number
    of cpus running when the system crashed.
    Resolves: rhbz#782837 
  - Rebase to upstream version 6.0.3.
    Resolves: rhbz#767257


author: Dave Anderson <anderson@redhat.com> - 6.0.4-2.el6
changelog:
  - Fix s390x "vm -p" to properly handle swapped-out and unmapped
    user pages.
  - Fix s390x "bt -[tT]" on a live system.
    Resolves: rhbz#817247
    Resolves: rhbz#817248


author: Dave Anderson <anderson@redhat.com> - 6.0.9-1.el6
changelog:
  - Fix for "crash: cannot resolve: xtime" session invocation failure.
    Resolves: rhbz#843093
  - Enhance "struct" command to accept -o option with an address argument.
    Resolves: rhbz#834260
  - Rebase to upstream version 6.0.9.
  - Support for compressed/filtered ppc64 firmware-assisted dump (fadump).
    Resolves: rhbz#840051


author: Dave Anderson <anderson@redhat.com> - 6.1.0-4.el6
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1006622
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1017930
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1019483


author: Remi Collet <rcollet@redhat.com> - 5.3.3-29
changelog:
  - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
    extension not provided or git binary patches (#1064027)
  - odbc: fix incompatible pointer type (#1053982)
  - mysqli: fix possible segfault in mysqli_stmt::bind_result
    php bug 66762 (#1069167)
  - mysql: fix php_mysql_fetch_hash writes long value into int
    php bug 52636 (#1054953)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-31
changelog:
  - soap: fixRFC2616 transgression (#1045019)
  - fix static calling in non-static method (#953786)
  - fix autoload called from closing session (#954027)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-34
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Jan Kaluza <jkaluza@redhat.com> - 5.3.3-35
changelog:
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480


author: Remi Collet <rcollet@redhat.com> - 5.3.3-36
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.3.3-37
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-38
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-15
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions to the man page
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove unused indentation pseudo patch
  - require nss util 3.16.2.3


author: Petr Machata <pmachata@redhat.com> - 1.41.0-16
changelog:
  - Fix a GCC warning for looser throw specifier in
    boost::exception_ptr::~exception_ptr.
    (boost-1.41.0-exception_ptr.patch)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-1
changelog:
  - Fix CRC32 calculation on big endian CPU (2.02.75).
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-3
changelog:
  - Mitigate annoying error warning from device is usable check if run as non-root.
  - Fallback to control node creation only if node doesn't exist yet.
  - Avoid possible endless loop in _free_vginfo when 4 or more VGs have same name.
  - Fix to make resuming exclusive cluster mirror use local target type.
  - Lower secure data flag warning to verbose level if unsupported by kernel.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.86-1
changelog:
  - Fix read-only identical table reload supression.
  - Suppress low-level locking errors and warnings while using --sysinit.
  - Remove --force option from lvrename manpage.
  - Change DEFAULT_UDEV_SYNC to 1 so udev_sync is used even without any config.
  - Compare also file size to detect changed config file.
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-2
changelog:
  - Terminate pv_attr field correctly (2.02.86).
  - Fix resource leak when strdup fails in _get_device_status() (2.02.85).
  - Fix unsafe table load when splitting off smaller mirror from a larger one.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-3
changelog:
  - Fix overly strict extent-count divisibility requirements for striped mirrors.
  - Fix rounding direction in lvresize when reducing volume size.
  - Fix possible overflow of size if %FREE or %VG is used.
  - Fix vgchange activation of snapshot with virtual origin.
  - Activate virtual snapshot origin exclusively (only on local node in cluster).
  - Fix lv_mirror_count to handle mirrored stripes properly.
  - Fix failure to down-convert a mirror to linear due to udev "dev open" conflict.
  - Fix mirrored log creation when PE size is small - force log_size >= region_size.
  - Fix log size calculation when only a log is being added to a mirror.
  - Work around resume_lv causing error LV scanning during splitmirror operation.
  - Begin using 64-bit status field flags.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-4
changelog:
  - Fix splitmirror in cluster having different DM/LVM views of storage.
  - Fix improper udev settings during suspend/resume for mirror sub-LVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-6
changelog:
  - Fix lv_info open_count test for disabled verify_udev_operations (2.02.86).
  - Log dev name now returned to kernel for registering during cmirror CTR.


author: Harald Hoyer <harald@redhat.com> 004-399
changelog:
  - add hyper kernel modules
  Resolves: rhbz#1298445 rhbz#1223315
  - fix ifcfg generation
  Resolves: rhbz#1261893
  - support multiple vlan definitions
  Resolves: rhbz#1111358
  - support setting of MTU via ip=..:ibft:<mtu>
  Resolves: rhbz#1076465
  - use cpio -R root:root rather than cpio -R 0:0
  Resolves: rhbz#1049763
  - fail hard if final image could not be written
  Resolves: rhbz#1252449
  - create correct bonding interface
  Resolves: rhbz#1263013


author: Harald Hoyer <harald@redhat.com> - 004-403
changelog:
  - network/ifup: use the correct interface name for the vlan parent
  - iscsiroot: for iscsi_firmware retry, if iscsistart -N fails
  Resolves: rhbz#1111358


author: Harald Hoyer <harald@redhat.com> - 004-408
changelog:
  - add more kernel modules for crypt
  Resolves: rhbz#1322893
  - trigger acpi subsystem before running plymouth
  Resolves: rhbz#1218130


author: Harald Hoyer <harald@redhat.com> - 004-409
changelog:
  - don't handle "iscsistart -N" exit value
    start iscsistart -b more reliably in the background
  Resolves: rhbz#1324340


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-27.P1
changelog:
  - dhclient-script: fix looking for other running dhclients (#656339)
  - avoid infinite loop when parsing slp-service-scope option (#747017)
  - dhclient-script: arping address in BOUND|RENEW|REBIND|REBOOT (#752116)
  - send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1
changelog:
  - don't flush old addresses in PREINIT (#815355)
  - remove inherit-leases.patch - it's not needed anymore (#815355)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-32.P1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843122)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843122)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-33.P1
changelog:
  - Use getifaddrs() for interface discovery code on Linux (#803540)
  - dhclient-script: do not backup&restore /etc/resolv.conf (#824622)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-34.P1
changelog:
  - Reducing the expiration time for an IPv6 lease may cause the server to crash
    (CVE-2012-3955, #858130)


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  Resolves: #565554
  - Remove mysql.info, which is not freely redistributable
  Related: #560181
  - Revert broken upstream fix for their bug 45058
  Related: #566547
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #557711
  Resolves: #562749


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html
    including fixes for CVE-2010-1621, CVE-2010-1626,
    CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #590598
  - Create mysql group explicitly in pre-server script, to ensure correct GID


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.61-1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787192


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871813


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-2
changelog:
  - Rebase to ruby-1.8.7.299
    * remove patch30, aka ruby-1.8.7-openssl-1.0.patch; subsumed
    * remove patch101, aka ruby-1.8.7-rb_gc_guard_ptr-optimization.patch; subsumed


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-4
changelog:
  - Address CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    by applying the patch from Apple as included in
    http://bugzilla.redhat.com/587731.
    * ruby-1.8.7-webrick-CVE.patch: New file.
  - Resolves: rhbz#605418


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid a false-positive readline-related test failure
    * ruby-readline-TERM-dumb.patch: New file.
    * Run "make test-all" in addition to "make test", in spite of its known
    failures (e.g., when using out of date gdbm).  Suggested by Ondrej Moris.
  - skip minor gdbm test to avoid failure
    * ruby-skip-gdbm-test.patch: New file.
  - avoid segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
  - Resolves: rhbz#628715


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-6
changelog:
  - Now that ruby uses the two-clause BSDL, it may once again use the
  latest readline, which is covered by the LGPLv3.  2-clause BSDL is
  GPLv3-compatible, per http://www.gnu.org/philosophy/license-list.html
  Before, ruby used the GPLv2, which precluded use of readline6, so it
  had to resort to using the old readline5 library.
  Remove references to the old readline5 library.
  - Resolves: rhbz#631701


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-8
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709964


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-1
changelog:
  - Update to Ruby 1.8.7-p352.
    * Remove Patch43: ruby-1.8.7-CVE-2011-1004.patch; subsumed
    * Remove Patch44: ruby-1.8.7-CVE-2011-1005.patch; subsumed
    * Remove Patch200: ruby-1.8.7-webrick-CVE.patch; subsumed
  - Resolves: rhbz#706332
  - Fix of conflict between 32bit and 64bit library versions.
  - Resolves: rhbz#674787
  - Add systemtap static probes.
  - Resolves: rhbz#673162
  - Remove duplicate path entry
  - Resolves: rhbz#722887


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-3
changelog:
  - mkconfig.rb: fix for continued lines.
    * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
  - Resolves: rhbz#730287


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.8.1.el6]
changelog:
  - [block] fix warning on lockdep_assert_held(q->queue_lock) (Ming Lei) [1624747]
  - [kvm] vmx: fix vmwrite to invalid VMCS (Radim Krcmar) [1602011]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.10.1.el6]
changelog:
  - [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
  - [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
  - [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
  - [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
  - [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
  - [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
  - [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
  - [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
  - [fs] seq_file: always clear m->count when we free m->buf (Rodrigo Freire) [1632434]
  - [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
  - [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
  - [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.11.1.el6]
changelog:
  - [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
  - [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.12.1.el6]
changelog:
  - [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
  - [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
  - [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
  - [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
  - [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
  - [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
  - [s390] detect etoken facility (Hendrik Brueckner) [1625381]
  - [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
  - [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
  - [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
  - [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
  - [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
  - [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
  - [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
  - [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
  - [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
  - [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
  - [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.15.1.el6]
changelog:
  - [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
  - [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
  - [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
  - [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
  - [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
  - [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.16.1.el6]
changelog:
  - [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
  - [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
  - [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
  - [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.17.1.el6]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
  - [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}


author: Karsten Hopp <karsten@redhat.com> 0.82-5
changelog:
  - drop ExcludeArch: s390 s390x as we need this package on s390x to be able to build
    p.e. udev without any hacks


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-33
changelog:
  - wacom: add support for NV-CONTROL extension (#805038)
  - wacom: fix button mapping (#805045)
  - wacom: add LED support from upstream (#805069)
    Resolves: #805038 #805045 #805069


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-37
changelog:
  - wacom: Make the calibrator window stay above other windows and
    cancel calibration if/when the calibrator loses input focus.
    Resolves: #818692


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-38
changelog:
  - wacom: Re-sync sources from gnome-settings-daemon-2.28.2-26 with
    LED support (#805069)
    Resolves: #805069


author: Carlos Garnacho <cgarnach@redhat.com> 2.28.1-41
changelog:
  - Check ~/.config/gnome-settings-daemon/no-per-machine-config for wacom settings
    Resolves: #966658


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-8
changelog:
  - e2fsck: don't clone dup xattr blocks in fs without xattr feat (#676465)
  - Allow specification of default mntopts in superblock (#679892)
  - Handle devices with large physical blocksizes (#679931)
  - Fix some typos in man pages (#683906)


author: Lukas Czerner <lczerner@redhat.com> 1.41.12-9
changelog:
  - e2image: Add support for exporting image in qcow2 format (#713468)
  - mke2fs: Skip inode table initialization on some discardable devices (#713475)
  - mke2fs: Add -E discard/nodiscard options (#713475)
  - mke2fs: Allow to specify discard option in mke2fs.conf (#713475)
  - e2fsck: Allow to discard free data and inode blocks in e2fsck (#713475)
  - mke2fs: Show discard progress (#713475)
  - Don't attempt to discard flash device if -n option is given (#713475)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-12
changelog:
  - Fix spurious e2fsck checksum errors when -b option is used (#786021)
  - Fix bugs related to e2fsck -E discard (#795846)


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-1
changelog:
  Resolves: 642722
  Resolves: 642724
  Resolves: 646718
  Resolves: 628879
  Resolves: 621790
  Resolves: 668785
  Resolves: 658253
  Resolves: 658121


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-7
changelog:
  Resolves: #737973
  Resolves: #737975
  Resolves: #737976
  Resolves: #738385
  Resolves: #742632
  Resolves: #742070


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-26
changelog:
  - #1089817 - Return value of pgrep is incorrect
  - #950748 - /lib64/libproc.so package both in procps and procps-devel
  - #1011216 - Backport man page fix of top utility - RES = CODE + DATA
  - #1082877 - top/man: RES - physical memory a task 'has used'->'is using'
  - #1034337 - Include man pages for openproc(), readproc() and readproctab()
  - Resolves: rhbz#1089817 rhbz#950748 rhbz#1011216 rhbz#1082877 rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-27
changelog:
  - #1060681 - ps -p cycles over all PIDs instead of just one
  - #963799 - Should shared memory be accounted in cached in free output?
  - Resolves: rhbz#1060681 rhbz#963799


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-28
changelog:
  - #1105125 - Locale dependent float delay in top and watch utilities
  - #1039013 - Include an API in RHEL to return the number of opened file descriptors for a process
  - Resolves: rhbz#1105125
  - Related: rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-31
changelog:
  - #993072 - Make the "free" command a little more human friendly
  - #1172059 - ps coredump in stat2proc()
  - #1120580 - [RFE] Have sysctl -p read info from /etc/sysctl.d
  - #1123311 - RFE: "w" should have "-n" flag to suppress reverse name resolution of IP addresses
  - #1163404 - [procps] find_elf_note invalid read if setenv has been called before libproc init
  - Resolves: rhbz#993072 rhbz#1172059 rhbz#1120580 rhbz#1123311 rhbz#1163404


author: Christophe Fergeau <cfergeau@redhat.com> - 0.6-1
changelog:
  - Initial EPEL release based on the rawhide .spec cleaned up from the parts
    that are not useful for EPEL (because the needed dependencies are not available)


author: Christophe Fergeau <cfergeau@redhat.com> - 0.6-1
changelog:
  - Added spice-gtk-0.6-add-generated-files.patch to be able to build without
    perl-Text-CSV
  - Initial import of spice-gtk in RHEL CVS based on the EPEL .spec
  - Related: rhbz#708417


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-1
changelog:
  - give proper warnings on missing packages if configuration
    supported by SSSD (#663882)
  - do not delete mdns4_minimal from nsswitch.conf (#645295)
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-5
changelog:
  - prevent the traceback also when std file descriptors are not
    tty, print out an error message instead of executing authconfig


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-6
changelog:
  - add support for joining IPAv2 domains
  - fix exception handling (#689717)
  - drop obsolete configuration files from manual page
  - use krb5_server instead of obsolete krb5_kdcip (#749700)
  - do not signal error on saving backups for missing config files (#755975)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-7
changelog:
  - detect error exit value from ipa-client-install
  - use --noac option with ipa-client-install
  - add sss to the services entry in nsswitch.conf (#804615)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-43
changelog:
  - fixed value of UCD-SNMP-MIB::extCommand to contain full command
    line (#842279)
  - fixed rpath to perl.so (#848319)
  - added support for port numbers in 'clientaddr' configuration
    option (#833013)
  - fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
    is used (#824402)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#800671)
  - updated documentation of '-c' option of snmptrapd (#784502)
  - fixed endless loop when SIGTEM arrives in middle of internal query
    processing (#851637)
  - fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
  - removed various error log messages related to counte64 expansions
    (#846906)
  - removed various error log messages when IPv6 is disabled (#845157)
  - added support of cvfs filesystem in hrStorageTable (#846532)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#846436)
  - added support of simfs filesystem in hrStorageTable (#861152)
  - fixed responding to requests on a multihost machine (#825889)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-45
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#893119)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#907571)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919239)
  - fixed kernel threads in hrSWRunTable (#919952)
  - fixed various error codes in Python module (#955771)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)
  - allow 'includeFile' and 'includeDir' options in configuration files
    (#917816)
  - fixed netlink message size (#927474)
  - fixed IF-MIB::ifSpeedHi on systems with non-standard interface speeds
    (#947973)
  - fixed BRIDGE-MIB::dot1dBasePortTable not to include the bridge itself
    as a port (#960568)
  - fixed snmpd segfault when 'agentaddress' configuration options is used
    and too many SIGHUP signals are received (#968898)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks
    if 'includeAllDisks' is specified in snmpd.conf (#922691)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-46
changelog:
  - fixed parsing of bulk responses (#983116)
  - added support of vzfs filesystem in hrStorageTable (#989498)
  - fixed endless loop when parsing sendmail configuration file with
    queue groups (#991213)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49
changelog:
  - fixed snmp daemons and utilities crashing in FIPS mode (#1001830)
  - added support of btrfs filesystem in hrStorageTable (#1006706)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.1
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073222)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16
changelog:
  - Update to aarch64-jdk8u112-b16.
  - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
  - Re-generate size_t and key size (RH1163501) patches against u112.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted)
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13
changelog:
  - Add backports from 8u131 and 8u152 ahead of April CPU.
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-0.b11
changelog:
  - Update to aarch64-jdk8u131-b11.
  - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
  - Update generate_source_tarball.sh to remove patch remnants.
  - Cleanup tarball creation documentation to avoid duplication.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-0.b15
changelog:
  - Update to aarch64-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15
changelog:
  - Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
  - Resolves: rhbz#1468473


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16
changelog:
  - Update to aarch64-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Remi Collet <rcollet@redhat.com> - 5.3.3-41
changelog:
  - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
  - core: fix use-after-free in unserialize CVE-2015-2787
  - exif: fix free on unitialized pointer CVE-2015-0232
  - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
  - date: fix use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.3.3-43
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4026, #1213407
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: more fix type confusion through unserialize #1222538


author: Remi Collet <rcollet@redhat.com> - 5.3.3-47
changelog:
  - fix wrong warning in openssl_encrypt() for missing IV
    when IV is not required #1260315
  - fix segfault's when you try and allocate an SplFixedArray
    with size >= 9999 #1071344
  - segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
  - add options to enable TLS in curl #1255920
  - fix segfault in gc_collect_cycles #1122681


author: Remi Collet <rcollet@redhat.com> - 5.3.3-49
changelog:
  - fix php-soap fails to connect to HTTPS web service sporadically
    as stream_socket_enable_crypto() uses NONBLOCK #1283153


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Restore a patch that had been mistakenly disabled
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Fix shell syntax error in nss/tests/all.sh
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Kai Engert <kaie@redhat.com> - 3.18.0-5.3
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Require softokn build 22 to ensure runtime compatibility.
  - Relax the requirement from pkcs11-devel to nss-softokn-freebl-devel
    to allow same or newer.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.1
changelog:
  - Fix configure script to detect that systemd environment is not used and
    generate proper udev rules for lvmetad notification based on this information.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.117-1
changelog:
  - Update to latest upstream release with various fixes and
    enhancementsdetailed in WHATS_NEW and WHATS_NEW_DM file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-1
changelog:
  - Fix LV processing with selection to always do the selection on initial state.
  - Store metadata size + checksum in lvmcache and add struct lvmcache_vgsummary.
  - Remove inaccessible clustered PVs from 'pvs -a'.
  - Don't invalidate cached orphan information while global lock is held.
  - Avoid rescan of all devices when requested pvscan for removed device.
  - Measure configuration timestamps with nanoseconds when available.
  - Disable lvchange of major and minor of pool LVs.
  - Fix pvscan --cache to not scan and read ignored metadata areas on PVs.
  - Disallow vgconvert from changing metadata format when lvmetad is used.
  - Don't do a full read of VG when creating a new VG with an existing name.
  - Reduce amount of VG metadata parsing when looking for vgname on a PV.
  - Avoid reparsing same metadata when reading same metadata from multiple PVs.
  - Save extra device open/close when scanning device for size.
  - Fix seg_monitor field to report status also for mirrors and thick snapshots.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-2
changelog:
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Add --enable-halvm and --disable-halvm options to lvmconf script.
  - Add --services, --mirrorservice and --startstopservices option to lvmconf.
  - Use proper default value of global/use_lvmetad when processing lvmconf script.
  - Set correct vgid when updating cache when writing PV metadata.
  - Don't silently accept lvcreate -m with raid4/5/6.
  - Add A_PARTITION_BY_TAGS set when allocated areas should not share tags.
  - Respect allocation/cling_tag_list during intial contiguous allocation.
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Log relevant PV tags when using cling allocation.


author: Petr Machata <pmachata@redhat.com> - 2012b-2
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820732


author: Petr Machata <pmachata@redhat.com> - 2012f-1
changelog:
  - Upstream 2012f
    - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
      and end at 3 am on Sunday 20th January 2013.  Guess it will be like
      that in following years as well.
  - Upstream 2012e
    - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.
    - Drop tzdata-2012c-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-21
changelog:
  - Add notes about offline mode to sssd.conf
  - Related: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-22
changelog:
  - Use the correct sudo iterator
  - Related: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-23
changelog:
  - Resolves: rhbz#1099290: RFE: Be able to configure sssd to honor openldap
                            account lock to restrict access via ssh key


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-25
changelog:
  - Resolves: rhbz#1111528 - Expired shadow policy user(shadowLastChange=0)
                             is not prompted for password change


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-26
changelog:
  - Resolves: rhbz#1130017 - Saving group membership fails if provider is AD,
                             POSIX attributes are used and primary group contains
                             the user as a member


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-28
changelog:
  - Resolves: rhbz#1125187 - simple_allow_groups does not lookup groups from
                             other AD domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-29
changelog:
  - Resolves: rhbz#1103487 - CVE-2014-0249 - sssd: incorrect expansion of group
                             membership when encountering a non-POSIX group


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915693 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915693 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915693 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-132
changelog:
  - Resolves: #767608 - Fix memory leak when accessing non-matched named
    capturing groups
  - Resolves: #839788 - Do not crash if declared DESTROY method has not been
    defined


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-133
changelog:
  - Resolves: #698552 - Correct taintedness tests
  - Resolves: #825713 - Fix find2perl to translate ? glob properly
  - Resolves: #810469 - Upgrade IO-Compress, Compress-Raw-Bzip2, and
    Compress-Raw-Zlib to 2.021
  - Resolves: #819042 - Set default output for Pod::Man and Pod::Text
    parse_file() methods
  - Resolves: #905482 - Require glibc-devel, gdbm-devel, db4-devel by perl-devel


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-134
changelog:
  - Resolves: #973022 - Make non-option handler for Getopt::Long::GetOptions()
    compatible with XML::Simple


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.5-6.b13
changelog:
  - Removed accessibility package
   - removed patch3 java-atk-wrapper-security.patch
   - removed its files and declaration
   - removed creation of libatk-wrapper.so and java-atk-wrapper.jar symlinks
   - removed generation of accessibility.properties
  - Resolves: rhbz#1113078


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12
changelog:
  - mayor rework of specfile - sync with f21
   - accessibility kept removed
   - lua script kept unsync
   - priority and epoch kept on 0
   - not included disable-doclint patch
   - kept bundled lcms
   - unused OrderWithRequires
   - used with-stdcpplib instead of with-stdc++lib
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12
changelog:
  - fixed desktop icons
  - Icon set to java-1.8.0
  - Development removed from policy tool
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-1.b26
changelog:
  - updated to u20-b26
  - adapted patch9999 enableArm64.patch
  - adapted patch100 s390-java-opts.patch
  - adapted patch102 size_t.patch
  - removed upstreamed patch  0001-PPC64LE-arch-support-in-openjdk-1.8.patch
  - adapted  system-lcms.patch
  - removed patch8 set-active-window.patch
  - removed patch9 javadoc-error-jdk-8029145.patch
  - removed patch10 javadoc-error-jdk-8037484.patch
  - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26
changelog:
  - fixed headless (policytool moved to normal)
   - jre/bin/policytool added to not headless exclude list
  - updated aarch694 source
  - ppc64le synced from fedora
  - Resolves: rhbz#1081073


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1088925 - Opening a terminal in Konqueror / Dolphin does not
    inherit environment variables


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-24
changelog:
  - Resolves: rhbz#1241170 - KDE wallpaper change requiring reboot to take affect
  - Resolves: rhbz#1123512 - Clicking 3x in empty kwrite window causes segfault


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-25
changelog:
  - Resolves: rhbz#1105072 - kbuildsycoca4 goes into infinite recursion while scanning for .desktop file


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-26
changelog:
  - Resolves: rhbz:623642 - do not crash konqueror on specific HTML content
  - Resolves: rhbz:1104205 - meinproc4 does not replace entities after libxml2 fixes
  - Resolves: rhbz:1279627 - do not crash kdirwatch on re-entrancy from slots


author: Tim Waugh <twaugh@redhat.com> 5.2.4-10
changelog:
  - Better defattr use in file manifests.
  - Fixed mixed spaces and tabs.
  - Fixed main package summary.
  - Added comments for all sources and patches.
  - The cups sub-package requires the exactly-matching main gutenprint
    package.


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.2.5-3
changelog:
  - gutenprint: libgutenprintui2 defines "yyin" symbol (bug #882197)
  - gutenprint base package must also include a copy of license text (bug #613706)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-3
changelog:
  - New upstream release 0.1.2
  - Fixes a serious issue with libdhash where hash_enter() would never update
  - existing entries for a key.


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-6
changelog:
  - Resolves: rhbz#668586 - ding-libs subpackages should have explicit version
  -                         requirements


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-7
changelog:
  - Resolves: rhbz#736074 - dhash can corrupt memory if initial table size is
                            large


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-8
changelog:
  - Fix bad patch
  - Related:  rhbz#736074 - dhash can corrupt memory if initial table size is
                            large


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.0-11
changelog:
  - Do not package built objects in dhash-devel
  - Fix NVR in the previous changelog entry
  - Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14
changelog:
  - Update to aarch64-jdk8u111-b14.
  - Drop the CORBA typo fix, which appears upstream in u111.
  - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15
changelog:
  - Remove method reference from java.io.ObjectInputStream to allow compilation on old ECJ.
  - Resolves: rhbz#1393047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b18
changelog:
  - Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes
  - Replace our correct version of 8159244 with the amendment to the 8u version from 8160122.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b18
changelog:
  - Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-0.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
  - Re-generate RH1393047 ObjectInputStream patch against u121.
  - Resolves: rhbz#1410612


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.132
changelog:
  - Revert the addition of gettimeofday vDSO function for ppc and ppc64 until
    OPD VDSO function call issues are resolved (#1026533).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.132.3
changelog:
  - Don't use alloca in addgetnetgrentX (#1087789).
  - Adjust pointers to triplets in netgroup query data (#1087789).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.132.4
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Rex Dieter <rdieter@fedoraproject.org> - 1.900.1-13
changelog:
  - CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
  - CVE-2008-3522 jasper: possible buffer overflow in 
    jas_stream_printf() (#461478)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-17
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171209)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-18
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173567)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173567)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-19
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-20
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-33
changelog:
  - qdiskd: Fix auto-vote calculation loop
    (qdiskd_fix_auto_vote_calculation_loop.patch)
    Resolves: rhbz#663433


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-34
changelog:
  - fenced: don't ignore victim_done messages for reduced victims
    (fenced_do_not_ignore_victim_done_messages_for_reduced_victims.patch)
    Resolves: rhbz#678704


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-35
changelog:
  - config_xml: stop leaking memory on config reload
    (config_stop_leaking_memory_on_config_reload.patch)
    Resolves: rhbz#680155


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-36
changelog:
  - Fix race condition at startup that affects dlm based applications
    (dlm_controld_always_return_error_if_daemon_is_not_ready_to_operate.patch)
    (cman_init_wait_for_dlm_controld_to_be_fully_operational_before_proceeding.patch)
    Resolves: rhbz#595725


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-37
changelog:
  - cman-preconfig: allow cman to configure corosync multicast ttl
    (cman_preconfig_allow_cman_to_configure_multicast_ttl.patch)
    Resolves: rhbz#684020


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-38
changelog:
  - qdiskd: Fix bad timer check
    (qdiskd_fix_bad_timer_check.patch)
    Resolves: rhbz#688154
  - cman init: increase the default timeout waiting for quorum
    (cman_init_increase_default_timeout_waiting_for_quorum.patch)
    Resolves: rhbz#688201


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-39
changelog:
  - config: Add DRBD 0.8.3 metadata back to schema
    (add_drbd_0_8_3_metadata_back_to_schema.patch)
    Resolves: rhbz#680172


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-40
changelog:
  - gfs2_convert: exits with success without doing anything
    (gfs2_convert_exists_with_success_without_doing_anything.patch)
    Resolves: rhbz#688734


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-41
changelog:
  - gfs2_convert: exits with success without doing anything
    (gfs2_convert_exists_with_success_without_doing_anything_part2.patch)
    Resolves: rhbz#688734


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26
changelog:
  - force NSS to ask for a new client certificate when connecting second time
    to the same host (#694294)


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Ryan McCabe <rmccabe@redhat.com> - 0.16.2-14
changelog:
  - Fix bz733798 (modclusterd service start doesn't obey failover domain ordering)
  - Fix bz736818 (fix potential deadlocks when calling the execute() function)


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-28
changelog:
  - Fix cluster-snmp module causes net-snmp to SEGV when told to reload
    Resolves: rhbz#888543
  - Fix modclusterd crashes with segfault in IPv4 only environment
    Resolves: rhbz#951470


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-1.el6_0.2
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688829
  - Add fix for CVE-2011-1167
  Resolves: #688742


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.1
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Require at least the build-time version of NSS at run-time due to static linking.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.2
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Remove unneeded AArch64 environment variable setting.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.1
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Add blacklisted.certs to installation file list.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.0
changelog:
  - Bump to 2.6.10 and u141b00.
  - Adjust RH1022017 following application of 8173783
  - Add more detailed output to fsg.sh and generate_source_tarball.sh.
  - Bump to u141b01 to include S8043723 fix for s390.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.151-2.6.11.0
changelog:
  - Bump to 2.6.11 and u151b00.
  - Update java-access-bridge-security.patch to apply against 2.6.11.
  - Apply fix for 8185716 so ppc uses correct ins_encode format
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.0
changelog:
  - Bump to 2.6.12 and u161b00.
  - Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
  - Drop 8185716 patch, now applied upstream.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Fix name of SystemTap tarball, following update.
  - Resolves: rhbz#1499207


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-39
changelog:
  - Release 1.2.11.15-39
  - Resolves: #1123863
    EMBARGOED CVE-2014-3562 - unauthenticated information disclosure (Bug 1123477)
  - Resolves: #1123863
    High contention on computed attribute lock (DS 616)
  - Resolves: #1062763
    single valued attribute replicated ADD does not work (DS 47692)
  - Resolves: #1121596
    Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443)
  - Resolves: #1014111
    Repl-monitor.pl ignores the provided connection parameters (DS 47862)
  - Resolves: #1115281
    New defects found in 389-ds-base-1.2.11 (DS 47863)
  - Resolves: #1112729
    paged results control is not working in some cases when we have a subsuffix. (DS 47824)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-40
changelog:
  - Release 1.2.11.15-40
  - Resolves: #1130252 - dirsrv not running with old openldap (DS 47875)
  - Resolves: #1103287 - logconv.pl memory continually grows (DS 47446)
  - Resolves: #1121596 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443)
  - Resolves: #1109381 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist (DS 415)
  - Resolves: #1128759 - Performance degradation with scope ONE after some load (DS 47874)
  - Resolves: #1127612 - Filter AND with only one clause should be optimized (DS 47872)
  - Resolves: #1014111 - repl-monitor fails to convert "*" to default values (DS 47862)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-42
changelog:
  - Release 1.2.11.15-42
  - Resolves: #1129660 - Adding users to user group throws Internal server error.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-43
changelog:
  - Release 1.2.11.15-43
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-44
changelog:
  - Release 1.2.11.15-44
  - Resolves: #1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Simple bind hangs after enabling password policy


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-45
changelog:
  - Release 1.2.11.15-45
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-47
changelog:
  - Release 1.2.11.15-47
  - Resolves: #1147479 - Memory leak during Reliab15 execution (6.6.z - #47750)


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.2
changelog:
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1052346


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-49
changelog:
  - Require the matching version of ding-libs
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-50
changelog:
  - Related: rhbz#1369921 - Members of nested netgroups configured in IdM
                            cannot be seen by getent on clients


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-51
changelog:
  - Revert the ding-libs requirement
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-54
changelog:
  - Apply several more smartcard-related patches.
  - Related: rhbz#1300421 - Screen locks and smart card is removed - must
                            show a message to insert the correct smartcard


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-55
changelog:
  - Resolves: rhbz#1415785 - ldap_child does not remove temporary files
                             when it's killed with  SIGTERM


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-56
changelog:
  - Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present
  - Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.69-2
changelog:
  - Always pass unsuspended dm devices through persistent filter to other filters.
  - Move test for suspended dm devices ahead of other filters.
  - Fix another segfault in clvmd -R if no response from daemon received. (2.02.68)
  - Preserve memlock balance in clvmd when activation triggers a resume.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-2
changelog:
  - Make vgck warn about missing PVs.
  - Revert failed table load preparation after "create, load and resume".
  - Check if cluster log daemon is running before allowing cmirror create.
  - Add dm_create_lockfile to libdm and use for pidfiles for all daemons.
  - Correct LV list order used by lvconvert when splitting a mirror.
  - Check if LV with specified name already exists when splitting a mirror.
  - Fix suspend/resume logic for LVs resulting from splitting a mirror.
  - Fix possible hang when all mirror images of a mirrored log fail.
  - Adjust auto-metadata repair and caching logic to try to cope with empty mdas.
  - Update pvcreate, {pv|vg}change, and lvm.conf man pages about metadataignore.
  - Prompt if metadataignore with vgextend or pvchange would adjust vg_mda_copies.
  - Adjust vg_mda_copies if metadataignore given with vgextend or pvchange.
  - Speed up the regex matcher.
  - Use "nowatch" udev rule for inappropriate devices.
  - Document LVM fault handling in lvm_fault_handling.txt.
  - Clarify help text for vg_mda_count.
  - Add more verbose messages while checking volume_list and hosttags settings.
  - Add log_error when strdup fails in {vg|lv}_change_tag().
  - Do not log backtrace in valid _lv_resume() code path.
  - Remove log directly if all mirror images of a mirrored log fail.
  - Randomly select which mdas to use or ignore.
  - Add printf format attributes to yes_no_prompt and fix a caller.
  - Remove superfluous suspended device counter from clvmd.
  - Fix lvm shell crash when input is entirely whitespace.
  - Update partial mode warning message.
  - Restore the removemissing behaviour of lvconvert --repair --use-policies.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-4
changelog:
  - Fix data corruption bug in cluster mirrors.
  - Require logical volume(s) to be explicitly named for lvconvert --merge.
  - Disallow 'mirrored' log type for cluster mirrors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-5
changelog:
  - Fix clvmd init script to require proper dependencies.
  - Recognise and give preference to md device partitions (blkext major).
  - Split-mirror operations were ignoring user-specified PVs.
  - Never scan internal LVM devices.
  - Fix segfault in regex matcher with characters of ordinal value > 127.
  - Use built-in rule for device aliases: block/ < dm- < disk/ < mapper/ < other.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8
changelog:
  - Fix potential for corruption during cluster mirror device failure.
  - Fix 'lvconvert --splitmirrors' in cluster operation.
  - Ignore snapshots when performing mirror recovery beneath an origin.
  - Add suspend_lv_origin and resume_lv_origin using LCK_ORIGIN_ONLY.
  - Allow internal suspend and resume of origin without its snapshots.
  - Fix dev_manager_transient to access -real device not snapshot-origin.
  - Monitor origin -real device below snapshot instead of overlay device.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.1
changelog:
  - Fix usage of --yes flag for ReiserFS resize in fsadm.
  - Fix detection of mounted filesystems for fsadm when udev is used.
  - Fix assignment of default value to LVM variable in fsadm.
  - Fix support for --yes flag for fsadm.
  - Do not execute lvresize with --dry-run option for fsadm.
  - Fix fsadm return error code from user's break action.
  - Revert to old glibc vsnprintf behaviour in emit_to_buffer() to catch overflow.
  - Allocate buffer for metadata tags dynamically to remove 4k limit.
  - Fix the way regions are marked complete to avoid slow --nosync cmirror I/O.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.2
changelog:
  - Fix handling of online filesystem resize (using new fsadm return code).
  - Add DIAGNOSTICS section to fsadm man page.
  - Modify fsadm to return different status code for check of mounted filesystem.
  - Fix memory leak of field_id in _output_field function.
  - Allocate buffer for reporting functions dynamically to support long outputs.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-45
changelog:
  - Don't create zero-length request files (bug #740093).
  - The lp and lpr commands did not cancel jobs queued from stdin on an error
    (STR #4015, bug #738914).
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #738410)


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-51
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.10.el6]
changelog:
  - [netdrv] cnic: fix hang due to rtnl_lock (Mike Christie) [694874]
  - [netdrv] firmware: re-add the recently deleted bnx2x fw 6.2.5.0 (Michal Schmidt) [690470]
  - [netdrv] firmware/bnx2x: add 6.2.9.0 fw, remove unused fw (Michal Schmidt) [690470]
  - [netdrv] bnx2x, cnic: Disable iSCSI if DCBX negotiation is successful (Michal Schmidt) [690470]
  - [netdrv] bnx2x: don't write dcb/llfc fields in STORM memory (Michal Schmidt) [690470]
  - [netdrv] bnx2x: Update firmware to 6.2.9 (Michal Schmidt) [690470]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.12.el6]
changelog:
  - [scsi] beiscsi: update version (Mike Christie) [674340]
  - [scsi] be2iscsi: fix chip cleanup (Mike Christie) [674340]
  - [scsi] be2iscsi: fix boot hang due to interrupts not getting rearmed (Mike Christie) [674340]
  - [scsi] bnx2fc: fix regression due to incorrect setup of em for npiv port (Mike Christie) [700672]
  - [ppc] pseries: Use a kmem cache for DTL buffers (Steve Best) [695678]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.13.el6]
changelog:
  - [scsi] hpsa: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] cciss: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] ibft: fix oops during boot (Mike Christie) [698737]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.14.el6]
changelog:
  - [scsi] hpsa: fix reading a write only register causes a hang (Rob Evers) [703262]
  - [scsi] mpt2sas: remove the use of writeq, since writeq is not atomic (Tomas Henzl) [701947]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.1.1.el6]
changelog:
  - [net] dccp: handle invalid feature options length (Jiri Pirko) [703012 703013] {CVE-2011-1770}
  - [fs] cifs: check for private_data before trying to put it (Jeff Layton) [703017 702642] {CVE-2011-1771}
  - [net] can: add missing socket check in can/raw and can/bcm release (Jiri Pirko) [698482 698483] {CVE-2011-1748 CVE-2011-1598}
  - [netdrv] ixgbe: do not clear FCoE DDP error status for received ABTS (Andy Gospodarek) [704011 695966]
  - [netdrv] ixgbe: DCB remove ixgbe_fcoe_getapp routine (Andy Gospodarek) [704002 694358]
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645228 645229] {CVE-2010-3858}
  - [scsi] bfa: change tech-preview to cover all cases (Rob Evers) [704014 703251]
  - [scsi] bfa: driver version update (Rob Evers) [704282 703265]
  - [scsi] bfa: kdump fix (Rob Evers) [704282 703265]
  - [scsi] bfa: firmware download fix (Rob Evers) [704282 703265]
  - [netdrv] bna: fix memory leak during RX path cleanup (Ivan Vecera) [704000 698625]
  - [netdrv] bna: fix for clean fw re-initialization (Ivan Vecera) [704000 698625]
  - [scsi] ipr: improve interrupt service routine performance (Steve Best) [704009 696754]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.2.1.el6]
changelog:
  - [kernel] lib/vsprintf.c: add %pU to print UUID/GUIDs (Frantisek Hrbata) [704280 700299]
  - [scsi] megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [704601 619422]


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-16
changelog:
  - By default, firefox is compiled with an internal version of sqlite
    and when packagekit-glib uses the system shared copy in the running
    firefox process, hilarity ensues.
  - Icons are less important than a crashed browser.
  - Resolves: #617734


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-17
changelog:
  - Do not exit the cron job with an error code if PackageKit is just
    disabled in sysconfig.
  - Resolves: #626867


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-18
changelog:
  - Wrap _getEVR in a try,catch block to deal with invalid version
    numbers in update changelogs.
  - Resolves: #634560


author: Nils Philippsen <nils@redhat.com> - 0.5.8-20
changelog:
  - yum: require pygobject2 (#684861)
  - yum-plugin: require dbus-python (#700448)
  - yum: fix untrusted password entry (#744359)
  - pkcon: fix --noninteractive (#783537)
  - fix building with newer xulrunner
  - add/fix BR: xulrunner-devel >= 8.0, nspr-devel >= 4.8


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-22
changelog:
  - Handle unbuffered input in a better way to fix the simulate declined failure
    when using pkcon.
  - Resolves: #811097


author: Lawrence Lim <llim@redhat.com> - 4.0-3
changelog:
  - apply redhat-lsb.spec.diff-stewb <Stew Benedict - stewb@linuxfoundation.org>
  - Resolved: Bug 585947


author: Ondrej Vasik <ovasik@redhat.com> - 4.0-6
changelog:
  - fix the split-core stuff to allow benefits from it, use
    versioned/arched requirements for the subpackages
  - file /etc/lsb-release should be present on the system
  - Resolves: Bug 833058


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-215.el6]
changelog:
  - [virt] index of virtio disk is not decremented when removed (Mark Wu) [692767]
  - [edac] i7core_edac: Initialize memory name with cpu, channel, bank (Mauro Carvalho Chehab) [712957]
  - [kernel] perf: Optimize event scheduling locking (Steve Best) [744986]
  - [drm] i915: set the right SDVO transcoder for CPT (Adam Jackson) [735122]
  - [scsi] libfc: Prevent race that causes panic during FCoE port destroy (Neil Horman) [735959]
  - [scsi] qla4xxx: Update driver version to 5.02.00-k8 (Mike Christie) [732622]
  - [scsi] qla4xxx: updated device id check for BFS (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed target discovery failed issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed active session re-open issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed device blocked issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed session destroy issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Clear DDB map index on the basis of AEN (Mike Christie) [732622]
  - [scsi] qla4xxx: Free Device Database (DDB) reserved by FW (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix getting BIDI CHAP for boot targets (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix exporting boot targets to sysfs (Mike Christie) [732622]
  - [scsi] qla4xxx: Do not add duplicate CHAP entry in FLASH (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix bidirectional CHAP (Mike Christie) [732622]
  - [scsi] qla4xxx: Add new FLT firmware region (Mike Christie) [732622]
  - [scsi] qla4xxx: Update license (Mike Christie) [732622]
  - [scsi] iscsi class: fix vlan configuration (Mike Christie) [732622]
  - [scsi] qla4xxx: fix data alignment and use nl helpers (Mike Christie) [732622]
  - [scsi] iscsi class: fix link local mispelling (Mike Christie) [732622]
  - [scsi] qla4xxx: Added Get ACB support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added restore factory defaults support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] qla4xxx: Added vendor specific sysfs attributes (Mike Christie) [732622]
  - [scsi] qla4xxx: Add read/update NVRAM support for 40xx adapters using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Add get ACB state support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Code cleanup for read/update flash using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added support to update mtu (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update mtu (Mike Christie) [732622]
  - [scsi] libfc: improve flogi retries to avoid lport stuck (Mike Christie) [745667]
  - [scsi] libfc: avoid exchanges collision during lport reset (Mike Christie) [745667]
  - [scsi] libfc: fix checking FC_TYPE_BLS (Mike Christie) [745667]
  - [scsi] libfc: revert fix deadlock bug in fc_exch_abort_locked (Mike Christie) [745667]
  - [dm] log userspace: Allow for 'log device name' response in CTR msg exchange (Jonathan E Brassow) [746254]
  - [dm] kcopyd: fix job_pool leak (Mike Snitzer) [748441]
  - [netdrv] igb: Fix for Alt MAC Address feature on 82580 and later (Andy Gospodarek) [748503]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-216.el6]
changelog:
  - [scsi] lockless queuecommand dispatch fixup (Rob Evers) [749018]
  - [scsi] iscsi class: export pid of process that created session (Mike Christie) [747696]
  - [scsi] qla4xxx: Autologin persisted target entries (Mike Christie) [747696]
  - [netdrv] iwlagn: enable 11n aggregation without checking traffic load (John Linville) [744361]
  - [s390x] qdio: EQBS retry after CCQ 96 (Hendrik Brueckner) [747578]
  - [s390x] dasd: fix UID readout for z/VM (Hendrik Brueckner) [746000]
  - [x86] PCI: irq and pci_ids patch for Intel Panther Point DeviceIDs (Prarit Bhargava) [747638]
  - [netdrv] Help 6.1 out of tree drivers cope with ABI breakage (Thomas Graf) [746570]
  - [mm] shmem: let shared anonymous be nonlinear again (Larry Woodman) [690129]
  - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [742091] {CVE-2011-3638}
  - [ipc] mqueue: separate mqueue default value from maximum value (Motohiro Kosaki) [746606]
  - [ipc] mqueue: don't use kmalloc with KMALLOC_MAX_SIZE (Motohiro Kosaki) [746606]
  - [ipc] mqueue: revert bump up DFLT_*MAX (Motohiro Kosaki) [746606]
  - [kernel] ipc/mqueue: Up the hard limit on message queues per namespace (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: update maximums for the mqueue subsystem (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: enforce hard limits (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: switch back to using non-max values on create (Doug Ledford) [746606 746898]
  - [kernel] ipc/mqueue: cleanup definition names and locations (Doug Ledford) [746606]
  - [kernel] Revert "Restore max mqueue message size to its previous RHEL 5 value" (Doug Ledford) [746606]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-217.el6]
changelog:
  - [fs] GFS2: rewrite fallocate code to write blocks directly (Benjamin Marzinski) [750208] {CVE-2011-4098}
  - [netdrv] bnx2x: link fixes for 57810 (Andy Gospodarek) [749421]
  - [netdrv] enic: fix accidental GRO off by default (Stefan Assmann) [749390]
  - [scsi] qla2xxx: Correct inadvertent clearing of RISC_INTR status (Chad Dupuis) [748978]
  - [debug] lockdep: double MAX_LOCKDEP_ENTRIES (Kyle McMartin) [748941]
  - [x86] Add missing KERN_DEBUG to x86 module printk (Prarit Bhargava) [747837]
  - [x86] Update module alternatives message (Prarit Bhargava) [745596]
  - [x86] UV: KABI breakage in uv_blade_info (George Beshers) [745253]
  - [net] vlan: fix panic when handling priority tagged frames (Andy Gospodarek) [714936] {CVE-2011-3593}
  - [scsi] qla4xxx: Autologin persisted target entries update (Mike Christie) [747696]
  - [mm] oom: fix integer overflow of points in oom_badness (Frantisek Hrbata) [741207] {CVE-2011-4097}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-218.el6]
changelog:
  - [netdrv] benet: remove bogus "unlikely" on vlan check (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: non-member vlan pkts not received in promiscous mode (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736429] {CVE-2011-3347}
  - [mm] fix race between mremap and removing migration entry (Andrea Arcangeli) [751084]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-219.el6]
changelog:
  - [kernel] KEYS: Fix a NULL pointer deref in the user-defined key type (David Howells) [751190] {CVE-2011-4110}
  - [scsi] fc class: fix building of Fibre Channel DUP drivers in 6.2 (Mike Christie) [750268]
  - [fs] nfs: don't call __mark_inode_dirty while holding i_lock (Steve Dickson) [747391]
  - [netdrv] vxge: allow rebinding the driver with a different number of SR-IOV VFs (Michal Schmidt) [694742]
  - [netdrv] vxge: fix crash of VF when unloading PF (Michal Schmidt) [694742]
  - [ata] revert libata: remove SCSI host lock (David Milburn) [751426]
  - [crypto] ansi_cprng: enforce key != seed in fips mode (Jarod Wilson) [751198]
  - [net] mac80211: Fix reassociation processing within ESS roaming (John Linville) [750350]
  - [net] nl80211: Allow association to change channels during reassociation (John Linville) [750350]
  - [net] mac80211: let cfg80211 manage auth state (John Linville) [750350]
  - [net] cfg80211: avoid sending spurious deauth to userspace (John Linville) [750350]
  - [net] mac80211: recalculate idle later in MLME (John Linville) [750350]
  - [net] mac80211: avoid spurious deauth frames/messages (John Linville) [750350]
  - [net] cfg80211: Allow reassociation in associated state (John Linville) [750350]
  - [net] cfg80211: remove warning in deauth case (John Linville) [750350]
  - [net] netfilter: fix nf_conntrack refcount leak in l4proto->error() (Thomas Graf) [745472]
  - [scsi] qla2xxx: Remove check for null fcport from host reset handler (Chad Dupuis) [744741]
  - [scsi] qla2xxx: Perform implicit logout during rport tear-down (Chad Dupuis) [744741]
  - [scsi] Revert "qla2xxx: Remove host_lock in queuecommand function" (Chad Dupuis) [744741]
  - [drm] nv50/disp: shutdown display on suspend/hibernate (Ben Skeggs) [740857]
  - [edac] Add sb_edac driver into the Red Hat Building system (Mauro Carvalho Chehab) [647700]
  - [edac] Fix incorrect edac mode reporting in sb_edac (Mauro Carvalho Chehab) [647700]
  - [edac] Add an experimental new driver to support Sandy Bridge CPU's (Mauro Carvalho Chehab) [647700]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-220.el6]
changelog:
  - [drm] i915: fix unmap race condition introduced with VT-d fix (Dave Airlie) [750583]
  - [scsi] iscsi: revert lockless queuecommand dispatch (Rob Evers) [751426]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.1.1.el6]
changelog:
  - [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752379 752380] {CVE-2011-4127}
  - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752379 752380] {CVE-2011-4127}
  - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752379 752380] {CVE-2011-4127}
  - [x86] amd: Fix align_va_addr kernel parameter (Frank Arnold) [758028 753237]
  - [md] RAID1: Do not call md_raid1_unplug_device while holding spinlock (Jonathan E Brassow) [755545 752528]
  - [pci] intel-iommu: Default to non-coherent for domains unattached to iommus (Don Dutile) [757671 746484]
  - [x86] initialize min_delta_ns in one_hpet_msi_clockevent() (Prarit Bhargava) [756426 728315]
  - [x86] Update hpet_next_event() (Prarit Bhargava) [756426 728315]
  - [kernel] sched: Use resched IPI to kick off the nohz idle balance (Vivek Goyal) [750459 717179]
  - [drm] i915: enable ring freq scaling, RC6 and graphics turbo on Ivy Bridge (Prarit Bhargava) [758513 752163]
  - [drm] i915: load a ring frequency scaling table (Prarit Bhargava) [758513 752163]
  - [x86] cpufreq: expose a cpufreq_quick_get_max routine (Prarit Bhargava) [758513 752163]
  - [sched] Cleanup/optimize clock updates (Larry Woodman) [751403 750237]
  - [sched] fix skip_clock_update optimization (Larry Woodman) [751403 750237]
  - [block] virtio-blk: Use ida to allocate disk index (Michael S. Tsirkin) [756427 692767]
  - [virt] virtio_blk: Replace cryptic number with the macro (Michael S. Tsirkin) [756427 692767]
  - [kernel] ida: simplified functions for id allocation (Michael S. Tsirkin) [756427 692767]
  - [virt] revert virtio-blk: Use ida to allocate disk index (Aristeu Rozanski) [756427 692767]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.3.1.el6]
changelog:
  - [kernel] Remove "WARNING: at kernel/sched.c:5915" (Larry Woodman) [768288 766051]
  - [x86] kernel: Fix memory corruption in module load (Prarit Bhargava) [769595 767140]
  - [kernel] Reset clocksource watchdog after sysrq-t (Prarit Bhargava) [755867 742890]
  - [x86] AMD: Make tsc=reliable override boot time stability checks (Prarit Bhargava) [755867 742890]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.4.1.el6]
changelog:
  - [fs] Revert "proc: enable writing to /proc/pid/mem" (Johannes Weiner) [782649 782650] {CVE-2012-0056}


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-8
changelog:
  - Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
  - Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z


author: Jindrich Novy <jnovy@redhat.com> 2007-31
changelog:
  - do not conflict with dvipdfm
  - update perl requires filter
  - update latin.ldf (#469948)
  - do not provide any perl dependencies (#516350)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2007-32
changelog:
  - resolve conflict between texlive-texmf (and -doc) and tetex-perltex
  - resolve conflict between texlive-texmf and tetex-prosper
  - resolve conflict between texlive-texmf and tetex-perltex


author: Jindrich Novy <jnovy@redhat.com> 2007-34
changelog:
  - fix permissions of /var/lib/texmf/web2c (#512459, #531894)
  - add IEEEconf (#495877)
  - update achemso (#521459)
  - update perltex to 2.0 from CTAN
  - obsolete tetex-perltex


author: Jindrich Novy <jnovy@redhat.com> 2007-36
changelog:
  - allow to make LaTeX format from source more than 5 years old
    (it gives a warning instead of an error)
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531569#56


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-5
changelog:
  - spec cleanup
  - simplified packaging (merge -perl in -utils)
  - remove obsoleted and/or unmaintained additional sources/patches
  - remove long time not used files from the cvs/srpm
  - update additional sources/patches from their upstream


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-9
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Deji Akingunola <dakingun@gmail.com> - 0.1.0-3
changelog:
  - Rebuild for babl-0.1.2
  - Backport upstream patch that removed babl processing time instrumentation


author: Nils Philippsen <nils@redhat.com> - 0.1.2-1
changelog:
  - version 0.1.2
  - remove obsolete cflags, babl-instrumentation, autoreconf patches
  - backported: don't leak each node set on a GeglProcessor


author: Nils Philippsen <nils@redhat.com>
changelog:
  - avoid buffer overflow in gegl_buffer_header_init()
  - correct gegl library version, use macro for it


author: Nils Philippsen <nils@redhat.com> - 0.1.2-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because gegl is likely to deal with data coming from untrusted
    sources


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-8
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289881


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.5.1.el6]
changelog:
  - [security] IMA: require command line option to enabled (Eric Paris) [644636 643667]
  - [net] Fix priv escalation in rds protocol (Neil Horman) [642899 642900] {CVE-2010-3904}
  - [v4l] Remove compat code for VIDIOCSMICROCODE (Mauro Carvalho Chehab) [642472 642473] {CVE-2010-2963}
  - [kernel] tracing: do not allow llseek to set_ftrace_filter (Jiri Olsa) [631625 631626] {CVE-2010-3079}
  - [virt] xen: hold mm->page_table_lock in vmalloc_sync (Andrew Jones) [644038 643371]
  - [fs] xfs: properly account for reclaimed inodes (Dave Chinner) [642680 641764]
  - [drm] fix ioctls infoleak (Danny Feng) [626319 621437] {CVE-2010-2803}
  - [netdrv] wireless extensions: fix kernel heap content leak (John Linville) [628437 628438] {CVE-2010-2955}
  - [netdrv] niu: buffer overflow for ETHTOOL_GRXCLSRLALL (Danny Feng) [632071 632072] {CVE-2010-3084}
  - [mm] add debug checks for mapcount related invariants (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] move VM_BUG_ON inside the page_table_lock of zap_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] compaction: handle active and inactive fairly in too_many_isolated (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] start_khugepaged after setting transparent_hugepage_flags (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hibernate memory corruption (Andrea Arcangeli) [644037 642570]
  - [mm] ksmd wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] khugepaged wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] unlink_anon_vmas in __split_vma in case of error (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix memleak in copy_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hang on anon_vma->root->lock (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] avoid breaking huge pmd invariants in case of vma_adjust failures (Andrea Arcangeli) [642679 622327 644037 642570]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.7.1.el6]
changelog:
  - [drm] ttm: fix regression introduced in dfb4a4250168008c5ac61e90ab2b86f074a83a6c (Dave Airlie) [646994 644896]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.9.1.el6]
changelog:
  - [fs] Do not mix FMODE_ and O_ flags with break_lease() and may_open() (Harshula Jayasuriya) [648408 642677]
  - [fs] aio: check for multiplication overflow in do_io_submit (Jeff Moyer) [629450 629451] {CVE-2010-3067}
  - [net] fix info leak from kernel in ethtool operation (Neil Horman) [646727 646728] {CVE-2010-3861}
  - [net] packet: fix information leak to userland (Jiri Pirko) [649899 649900] {CVE-2010-3876}
  - [net] clean up info leak in act_police (Neil Horman) [636393 636394] {CVE-2010-3477}
  - [kernel] sys_semctl: fix kernel stack leakage (Danny Feng) [648723 648724] {CVE-2010-4083}
  - [sound] sound/pci/rme9652: prevent reading uninitialized stack memory (Stanislaw Gruszka) [648710 648715 648711 648716] {CVE-2010-4080 CVE-2010-4081}
  - [mm] Prevent Out Of Memory when changing cpuset's mems on NUMA (Larry Woodman) [651996 597127]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.10.1.el6]
changelog:
  - [fs] xfs: prevent reading uninitialized stack memory (Dave Chinner) [630808 630809] {CVE-2010-3078}
  - [net] fix rds_iovec page count overflow (Jiri Pirko) [647423 647424] {CVE-2010-3865}
  - [scsi] Fix megaraid_sas driver SLAB memory leak detected with CONFIG_DEBUG_SLAB (Shyam Iyer) [649436 633836]
  - [usb] serial/mos*: prevent reading uninitialized stack memory (Don Zickus) [648697 648698] {CVE-2010-4074}
  - [kernel] ecryptfs_uid_hash() buffer overflow (Jerome Marchand) [626320 611388] {CVE-2010-2492}
  - [sound] seq/oss - Fix double-free at error path of snd_seq_oss_open() (Jaroslav Kysela) [630554 630555] {CVE-2010-3080}
  - [virt] virtio-net: init link state correctly (Jason Wang) [653340 646369]
  - [netdrv] prevent reading uninitialized memory in hso driver (Thomas Graf) [633143 633144] {CVE-2010-3298}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.11.1.el6]
changelog:
  - [kernel] posix-cpu-timers: workaround to suppress the problems with mt exec (Oleg Nesterov) [656267 656268] {CVE-2010-4248}
  - [fs] bio: take care not overflow page count when mapping/copying user data (Danny Feng) [652530 652531] {CVE-2010-4162}
  - [net] can-bcm: fix minor heap overflow (Danny Feng) [651846 651847] {CVE-2010-3874}
  - [net] filter: make sure filters dont read uninitialized memory (Jiri Pirko) [651704 651705] {CVE-2010-4158}
  - [net] inet_diag: Make sure we actually run the same bytecode we audited (Jiri Pirko) [651268 651269] {CVE-2010-3880}
  - [v4l] ivtvfb: prevent reading uninitialized stack memory (Mauro Carvalho Chehab) [648832 648833] {CVE-2010-4079}
  - [drm] via/ioctl.c: prevent reading uninitialized stack memory (Dave Airlie) [648718 648719] {CVE-2010-4082}
  - [char] nozomi: clear data before returning to userspace on TIOCGICOUNT (Mauro Carvalho Chehab) [648705 648706] {CVE-2010-4077}
  - [serial] clean data before filling it on TIOCGICOUNT (Mauro Carvalho Chehab) [648702 648703] {CVE-2010-4075}
  - [net] af_unix: limit unix_tot_inflight (Neil Horman) [656761 656762] {CVE-2010-4249}
  - [block] check for proper length of iov entries in blk_rq_map_user_iov() (Danny Feng) [652958 652959] {CVE-2010-4163}
  - [net] Limit sendto()/recvfrom()/iovec total length to INT_MAX (Jiri Pirko) [651894 651895] {CVE-2010-4160}
  - [netdrv] mlx4: Add OFED-1.5.2 patch to increase log_mtts_per_seg (Jay Fenlason) [643815 637284]
  - [kernel] kbuild: fix external module compiling (Aristeu Rozanski) [658879 655231]
  - [net] bluetooth: Fix missing NULL check (Jarod Wilson) [655667 655668] {CVE-2010-4242}
  - [kernel] ipc: initialize structure memory to zero for compat functions (Danny Feng) [648694 648695] {CVE-2010-4073}
  - [kernel] shm: fix information leak to userland (Danny Feng) [648688 648689] {CVE-2010-4072}
  - [md] dm: remove extra locking when changing device size (Mike Snitzer) [653900 644380]
  - [block] read i_size with i_size_read() (Mike Snitzer) [653900 644380]
  - [kbuild] don't sign out-of-tree modules (Aristeu Rozanski) [655122 653507]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.12.1.el6]
changelog:
  - [netdrv] igb: only use vlan_gro_receive if vlans are registered (Stefan Assmann) [652804 660192] {CVE-2010-4263}
  - [net] core: neighbour update Oops (Jiri Pirko) [660591 658518]
  - [scsi] lpfc: Set heartbeat timer off by default (Rob Evers) [660244 655935]
  - [scsi] lpfc: Fixed crashes for BUG_ONs hit in the lpfc_abort_handler (Rob Evers) [659611 645882]


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-67
changelog:
  - dlm_controld: Adjust fence time comparison
    Resolves: #rhbz843160
  - man: update fence_node options
    Resolves: #rhbz886016
  - fenced: Wait for ringid
    gfs_controld: Fix first recovery case
    Resolves: #rhbz982305


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-69
changelog:
  - fsck.gfs2: fix broken i_goal values in inodes
  - gfs2_convert: use correct i_goal values instead of zeros for inodes
  - fsck.gfs2: Reprocess nodes if anything changed - addendum 1 of 2
  - fsck.gfs2: addendum to fix broken i_goal values in inodes - addendum 2 of 2
    Resolves: rhbz#1149516


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-72
changelog:
  - xml: ccs_update_schema: be verbose about extraction fail
    Resolves rhbz#1087286
  - qdiskd: warn if no heuristics defied for >2 node clusters
    Resolves: rhbz#1095418
  - *_controld: better logging if receive_start fails
    Resolves: rhbz#1095657
  - qdiskd: Enable master_wins if votes=1
    Resolves: rbhz#1099223
  - cman: fix cman.5 man page to indicate only 1 altname is allowed
    Resolves: rhbz#1111500
  - cman: Slight fix to message issued for invalid two_node clusters
    Resolves: rhbz#1142947


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-73.1
changelog:
  - gfs_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1234443
  - dlm_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1233535


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.18.1.el6]
changelog:
  - [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
  - [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
  - [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
  - [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
  - [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
  - [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
  - [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
  - [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
  - [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
  - [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
  - [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
  - [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
  - [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.19.1.el6]
changelog:
  - [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
  - [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.20.1.el6]
changelog:
  - [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
  - [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.21.1.el6]
changelog:
  - [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
  - [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13
changelog:
  - Omit jsa files from power64 file list as well, as they are never generated
  - Use the template interpreter on ppc64le
  - priority set  gcj < lengthOffFour < otherJdks (RH1175457)
  - misusing already fixed bug
  - Resolves: rhbz#1189853


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235161


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16
changelog:
  - another touching attempt to polycies...
  - main links in alternatives moved to versionless format
  - Resolves: rhbz#1254197


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-3.b16
changelog:
  - direcotries aligned to rhel6, jdk7 like style ifarch 64 name.arch else naem
  - moved to rhel7, jdk8 like style of name.arch. Fixes 1259241
  - Resolves: rhbz#1254197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Fix library removal script so jpeg, giflib and png sources are removed.
  - Update system-lcms.patch to regenerated upstream (8042159) version.
  - Drop LCMS update from rhel6-built.patch
  - Resolves: rhbz#1257654


author: Steve Grubb <sgrubb@redhat.com> 2.1-4
changelog:
  resolves: #584981 - Improvements needed for Common Criteria
  resolves: #697463 - Broken autrace -r on s390x


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-1
changelog:
  resolves: #709345 auditctl -l returns 0 even if it fails on dropped capabilities
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #715315 remote client gets disk_error event instead of disk_full
  resolves: #728475 remove krb5 related options from audisp-remote.conf


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-2
changelog:
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #748124 Auditctl doesn't recognize accept4 syscall


author: Steve Grubb <sgrubb@redhat.com> 2.2-1
changelog:
  resolves: #658630 include "check but load" option for audit
  resolves: #766920 audit filtering on file accesses not owned by user
  resolves: #797848 audit.rules contains a typo error


author: Remi Collet <rcollet@redhat.com> - 5.3.3-39
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.28.rc1
changelog:
  - Add support for TLSA resource records (#956685)
  - Increase defaults for lwresd workers and make workers and client objects number configurable (#1092035)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.31.rc1
changelog:
  - Fix RRL slip behavior when set to 1 (#1112356)
  - Fix issue causing bind to hang after reload if using DYNDB (#1142152)


author: Pavel Šimerda <psimerda@redhat.com> - 32:9.8.2-0.37.rc1
changelog:
  - Resolves: 1215687 - DNS resolution failure in high load environment with
    SERVFAIL and "out of memory/success" in the log


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-138
changelog:
  - Fix backslash interpolation in Locale::Maketext (bug #1025906)
  - Do not ignore single-letter-named packages by Module::Plugable (bug #1086215)
  - Run-require exact version of perl-libs by perl-suidperl (bug #1161170)


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.41
changelog:
  - Allow use sandbox to follow homedirs symlinks
  Resolves:#913175
  - Make sure file equivalance target and source do not end
   with a /
  - Allow make only valid domains as permissive domains
  - Fix polgen.py to allow "_" in a policy file.
  - Implement --noreload option to semanage
  - Add missing long options in sandbox man page


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.42
changelog:
  - Fail properly on invalid options for restorecon/setfiles when using -R or -r
  - Check if all files exist for setfiles and restorecon
  - Remove handling of cgroups from sandbox. 
  Resolves:#1091139
  - Make -q and -d options mutually exclusive


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.43
changelog:
  - Fix semanage man page to contain also noreload option
  Resolves:#1032828
  - Fix sandbox man page
  - Make setfiles more informative if bad option is given


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.46
changelog:
  - Make semanage -i working on empty file
  - Fix setfiles man page
  - Fix setfiles -r option to be working correctly
  Resolves:#1086456


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.47
changelog:
  - Fix setfiles man page
  Resolves:#1086456
  - Fix  semanage fcontext  error message when non-existing context given
  Resolves:#1122023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers.
  - Resolves: rhbz#1235157


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
  - Resolves: rhbz#1295765


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
  - Resolves: rhbz#1350039


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350039


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.1.el6]
changelog:
  - [netdrv] mlx4_en: Check device state when setting coalescing (Amir Vadai) [1032395 975908]
  - [net] ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] sunrpc: Fix a data corruption issue when retransmitting RPC calls (Jeff Layton) [1032424 1030046]
  - [fs] gfs2: Implement a rgrp has no extents longer than X scheme (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Drop inadequate rgrps from the reservation tree (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: If requested is too large, use the largest extent in the rgrp (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Add allocation parameters structure (Robert S Peterson) [1032162 998625]
  - [fs] nfs: Don't check lock owner compatability unless file is locked - part 2 (Jeff Layton) [1032260 1007039]
  - [fs] nfs: Don't check lock owner compatibility in writes unless file is locked (Jeff Layton) [1032260 1007039]
  - [netdrv] ixgbevf: move API neg to reset path (Andy Gospodarek) [1032168 1019346]
  - [netdrv] ixgbe: fix inconsistent clearing of the multicast table (Andy Gospodarek) [1032170 975248]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [1020518 876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [1020518 876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [1020518 876275]
  - [fs] nfs: Fix the sync mount option for nfs4 mounts (Scott Mayhew) [1030171 915862]
  - [fs] nfsv4: Missing Chunk of Back Port Patch Causes Hang (Steve Dickson) [1032250 1024006]
  - [fs] xfs: Ensure sync updates the log tail correctly (Dave Chinner) [1032249 1025439]
  - [fs] xfs: only update the last_sync_lsn when a transaction completes (Dave Chinner) [1032249 1025439]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1032688 1014867]
  - [kernel] signal: stop info leak via the tkill and the tgkill syscalls (Petr Holasek) [970876 970878] {CVE-2013-2141}
  - [block] rsxx: Disallow discards from being unmapped (Steve Best) [1028278 1023897]
  - [netdrv] brcmsmac: Module alias support missing from backport (John Green) [1029330 1020461]
  - [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1027343 1023272]
  - [netdrv] mlx4_en: Fix BlueFlame race (Amir Vadai) [1029997 987634]
  - [scsi] lpfc 8.3.42: Fixed failure to allocate SCSI buffer on PPC64 platform for SLI4 devices (Rob Evers) [1030713 1024683]
  - [scsi] Revert: qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low. [1032167 995576]
  - [netdrv] tg3: avoid double-freeing of rx data memory (Ivan Vecera) [1032423 1020685]
  - [hda] alsa: Final fix for the Haswell HDMI audio 44.1kHz rate (Jaroslav Kysela) [1032247 1024548]
  - [input] wacom: do not report ABS_MISC on TPC2FG touch device (Aristeu Rozanski) [1032426 1032256]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.2.el6]
changelog:
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Mark Wielaard <mjw@redhat.com> - 0.158-3.2
changelog:
  - Add elfutils-0.158-unstrip.patch (#806474)
  - Add elfutils-0.158-readelf-nostrings.patch (#1101440)


author: Mark Wielaard <mjw@redhat.com> - 0.161-3
changelog:
  - Update to 0.161. (#1167724)
  - Add elfutils-0.161-ar-long-name.patch (#1181525 CVE-2014-9447)
  - Add elfutils-0.161-formref-type.patch


author: Mark Wielaard <mjw@redhat.com> - 0.164-1
changelog:
  - Update to elfutils-0.164 (#1254647)
  - Drop old compat stuff
  - Drop upstreamed patches
    - elfutils-0.161-ar-long-name.patch
    - elfutils-0.161-formref-type.patch
  - Include elfutils/known-dwarf.h


author: David Tardon <dtardon@redhat.com> - 1:4.0.4.2-10
changelog:
  - Resolves: rhbz#1012379 sound file included in presentation displayed
    as a gray sqaure
  - Resolves: rhbz#1012390 CRITICAL **: AtkObject* atk_object_wrapper_ref
  - Resolves: rhbz#1038189 libreoffice does not recognize new printer
  - Resolves: rhbz#1085420 LO incorrectly provides liblcms2.so.2
  - Resolves: rhbz#1065629 RTF import probable regression with non-english
    BigMachines exports
  - Resolves: rhbz#1020712 No Default Font showing when write in text
    boxes at first, behaving unusual
  - Resolves: rhbz#1021915 Menu drop-down list overlapping with other menu
    items
  - Resolves: rhbz#1035298 Transaction check errors due to file conflicts
  - Related: rhbz#1035298 provide non-arch variants of openoffice.org
    provides too


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-14
changelog:
  - Resolves: rhbz#1130264 crash in gstreamer callback on s390x
  - Resolves: rhbz#1131428 cannot export charts as svg
  - Resolves: rhbz#1035298 obsolete openoffice.org-langpack-ms_MY


author: Kai Engert <kaie@redhat.com> - 2017.2.20-65.1
changelog:
  - Update to CKBI 2.20 from NSS 3.34.1 with legacy modifications.
    In the original upstream release, Mozilla.org removed all trust for
    the code signing usage. As part of the default legacy configuration,
    this package retains code signing trust for all CAs that are still
    trusted for the server authentication usage.
    The ca-legacy disable configuration disables all code signing trust.


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-60.0
changelog:
  -Update to CKBI 2.32 from NSS 3.44
  -   Removing:
  -    # Certificate "Visa eCommerce Root"
  -    # Certificate "AC Raiz Certicamara S.A."
  -    # Certificate "TC TrustCenter Class 3 CA II"
  -    # Certificate "ComSign CA"
  -    # Certificate "S-TRUST Universal Root CA"
  -    # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
  -    # Certificate "Certplus Root CA G1"
  -    # Certificate "Certplus Root CA G2"
  -    # Certificate "OpenTrust Root CA G1"
  -    # Certificate "OpenTrust Root CA G2"
  -    # Certificate "OpenTrust Root CA G3"
  -   Adding:
  -    # Certificate "GlobalSign Root CA - R6"
  -    # Certificate "OISTE WISeKey Global Root GC CA"
  -    # Certificate "GTS Root R1"
  -    # Certificate "GTS Root R2"
  -    # Certificate "GTS Root R3"
  -    # Certificate "GTS Root R4"
  -    # Certificate "UCA Global G2 Root"
  -    # Certificate "UCA Extended Validation Root"
  -    # Certificate "Certigna Root CA"
  -    # Certificate "emSign Root CA - G1"
  -    # Certificate "emSign ECC Root CA - G3"
  -    # Certificate "emSign Root CA - C1"
  -    # Certificate "emSign ECC Root CA - C3"
  -    # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-65.1
changelog:
  - Remove expired 1024 bit roots
  -    Removing:
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure CA"
  -     # Certificate "ValiCert Class 1 VA"
  -     # Certificate "ValiCert Class 2 VA"
  -     # Certificate "RSA Root Certificate 1"
  -     # Certificate "Entrust.net Secure Server CA"
  -     # Certificate "NetLock Business (Class B) Root"
  -     # Certificate "NetLock Express (Class C) Root"


author: Doug Ledford <dledford@redhat.com> - 1.0.15-1
changelog:
  - Update to latest upstream release (adds FDR support and fixes 696019 the
    upstream way)
  - Include fixes in git not yet in a release
  - Related: bz750609
  - Resolves: bz700289


author: Doug Ledford <dledford@redhat.com> - 1.0.17-0.git4b5c1aa
changelog:
  - Pre-release version of 1.0.17
  - Resolves a CVE vulnerability between librdmacm and ibacm
  - Fixes various minor bugs in sample programs
  - Resolves: bz866221, bz816074


author: Doug Ledford <dledford@redhat.com> - 1.0.17-1
changelog:
  - Official 1.0.17 release
  - The fix to bug 866221 got kicked back as incomplete last time, fix
    it for real this time.
  - Intel adapters that use the qib driver don't like using inline data,
    so use a memory region that is registered instead
  - Resolves: bz866221, bz828071


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.4
changelog:
  - Resolves: rhbz#660592 - SSSD shutdown sometimes hangs
  - Resolves: rhbz#660585 - getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Florian Festi <ffesti@redhat.com> - 4.8.0-57
changelog:
  - Very slow "rpm -q --specfile a.spec" if specfile has thousands of patches (#1383422)
  - Fix refcounting for Python hdr objects (#1438811)
  - Add sources to lua to prevent %autosetup failing in some cases (#1438815)


author: Marek Kasik <mkasik@redhat.com> 2.3.11-5
changelog:
  - Add freetype-2.3.11-CVE-2010-1797.patch
      (Check stack after execution of operations too.
       Skip the evaluations of the values in decoder, if
       cff_decoder_parse_charstrings() returns any error.)
  - Resolves: #621624


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_0.1
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638838


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_0.2
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651761


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_1.3
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723467


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_2.9
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806268


author: Peter Lemenkov <lemenkov@gmail.com> - 0.31.1-23
changelog:
  - Removed static libraries from -devel
  - Changed %makeinstall to "make install DESTDIR=blablabla"
  - Fixed rhbz# 477980


author: Bastien Nocera <bnocera@redhat.com> 0.10.17-2
changelog:
  - Update Farsight plugins to 0.10.17
  - Disable LADSPA plugins, they should be in -bad (#540198)
  - Add support for authenticating RTSP sources
  Related: rhbz#543948


author: Wim Taymans <wtaymans@redhat.com> 0.10.23-2
changelog:
  - add patch to post provide-clock message to fix a major regression
    in 0.10.23
  - bump version to rebuild for fastrack
  Resolves: rhbz#622776


author: Tom Lane <tgl@redhat.com> 2.0.13-2
changelog:
  - Fix rpmlint complaints: remove unneeded explicit Requires:, use Conflicts:
    instead of bogus Obsoletes: to indicate lack of zope subpackage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-46
changelog:
  - Resolves: rhbz#1227860 - Provide a way to disable the cleanup task
  - Resolves: rhbz#1227863 - ignore_group_members doesn't work for subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47
changelog:
  - Resolves: rhbz#1232738 - Cache is not updated after user is deleted from
                             ldap server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.1
changelog:
  - Resolves: rhbz#1258398 - sysdb sudo search doesn't escape special
                             characters


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.6
changelog:
  - Resolves: rhbz#1291158 - Group members are not turned into ghost entries
                             when the user is purged from the SSSD cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.7
changelog:
  - Resolves: rhbz#1298252 - 'filter_users' in conjunction with
                             'default_domain_suffix'


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.8
changelog:
  - Resolves: rhbz#1305447 - sssd_nss memory usage keeps growing on
                             sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when
                             trying to retrieve non-existing netgroups


author: Stepan Kasal <skasal@redhat.com> - 0.47-5
changelog:
  - require perl(:MODULE_COMPAT_5.10.x) because the package requires libperl.so
  - the same for inkscape-view


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b13
changelog:
  - Fix signedness build failure in shenandoahHeapRegion.cpp (upstream patch from mvala)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Drop Shenandoah signedness fix as it appears in the new upstream tarball.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Karel Klic <kklic@redhat.com> 1:23.1-16
changelog:
  - Removed PreReq from spec file
  - Fixed rhbz#517272 - emacs-23.1 update shows fonts in double the normal size


author: Karel Klic <kklic@redhat.com> 1:23.1-17
changelog:
  - Removed invalid URL for rpm-spec-mode.el. This mode in
    this version is no longer found on the Internet


author: Karel Klic <kklic@redhat.com> 1:23.1-21
changelog:
  - Added jis2004 patch to prefer non-JIS X 0213:2004 compliant fonts
    for Japanese texts (IPA fonts are counted as JIS X 0213:2004
    compliant)
    Resolves: #612385
  - Removed dependency on aspell and hunspell
    Resolves: #613759


author: Adam Jackson <ajax@redhat.com> 3.1-13
changelog:
  - Forked spec for RHEL7 Mesa's private use
    - no ocaml support
    - no doxygen build
    - no clang support
    - no static archives
    - no libraries, binaries, or manpages not needed by Mesa


author: Adam Jackson <ajax@redhat.com> 3.3-0.1.rc1
changelog:
  - Update to 3.3 rc1
  - Move library to %{_libdir} to avoid rpath headaches
  - Link with -Bsymbolic and --default-symver
  - --disable-libffi
  - Misc spec cleanup


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.3.1.el6]
changelog:
  - [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
  - [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
  - [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
  - [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
  - [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
  - [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.4.1.el6]
changelog:
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.5.1.el6]
changelog:
  - [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
  - [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.6.1.el6]
changelog:
  - [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
  - [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
  - [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
  - [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
  - [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.7.1.el6]
changelog:
  - [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.8.1.el6]
changelog:
  - [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
  - [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.9.1.el6]
changelog:
  - [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.10.1.el6]
changelog:
  - [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
  - Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
  - [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
  - [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
  - [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
  - [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
  - [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
  - [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
  - [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-696.10.2.el6]
changelog:
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.10.3.el6]
changelog:
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}


author: Jan Horak <jhorak@redhat.com> - 31.3.0-6
changelog:
  - Fixed rhbz#1164855 - firefox.desktop is missing
    x-scheme-handler MimeType entries
  - Fixed problems with dictionaries (mozbz#1097550)


author: Milind Changire <mchangir@redhat.com> - 3.7.9-3
changelog:
  - fixes bugs bz#1325975 bz#1311839 bz#1321556 bz#1286911 bz#1323042 
    bz#1298724 bz#1327165 bz#1101702 bz#1326498 bz#1326663 bz#1328397 bz#1330881 
    bz#1331376 bz#1330901 bz#1326248 bz#1324338 bz#1115367 bz#1308837 bz#1322695 
    bz#1322247 bz#1329895 bz#1327552 bz#1118770


author: Milind Changire <mchangir@redhat.com> - 3.7.9-4
changelog:
  - fixes bugs bz#1097555 bz#1322306 bz#1327195 bz#1324820 bz#1306194 
    bz#1298724 bz#1299737 bz#1330385 bz#1258875 bz#1283957 bz#1311362 bz#1321550 
    bz#1332199 bz#1329514 bz#1224180 bz#1313370 bz#1328194 bz#1323424 bz#1332957 
    bz#1294755 bz#1328411 bz#1327751 bz#1332077 bz#1328721 bz#1330365


author: Milind Changire <mchangir@redhat.com> - 3.7.9-5
changelog:
  - fixes bugs bz#1261838 bz#1324820 bz#1325760 bz#1328194 bz#1331260 
    bz#1332949 bz#1333668 bz#1334234 bz#1334668 bz#1334985 bz#1335082 bz#1335114 
    bz#1335364 bz#1335437 bz#1335505 bz#1335826


author: Milind Changire <mchangir@redhat.com> - 3.7.9-7
changelog:
  - fixes bugs bz#1286582 bz#1330997 bz#1334092 bz#1337384 bz#1337649 
    bz#1339090 bz#1339163 bz#1339208 bz#1340085 bz#1340383


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-17
changelog:
  - change libgomp default spincount if OMP_WAIT_POLICY is not specified
    (#1229852, PR libgomp/43706)
  - remove -Wl,-z,nodlopen from Ada libraries, which no longer contain
    trampolines (#1241495)
  - guard __gcov_flush body in libgcov.a with a mutex (#1251488,
    PR gcov/49484, PR gcov-profile/52627)
  - add missing s390.exp hunk from -mhotpatch= support (#1233260)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-18
changelog:
  - fix up std::rethrow_exception (PR libstdc++/62258, #1380760)
  - fix fortran ICE in resolve_ordinary_assign (PR fortran/43362, #1356346)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-4
changelog:
  - Two important fixes from 3.1.2 release (#590773)
  - Fix up attribute handling in xfs_fsr
  - Make sure xfs_admin writes both sb fields when changing lazy_count


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-11
changelog:
  Resolves: #771464
  Resolves: #771465
  Resolves: #771466
  Resolves: #771467
  Resolves: #771473
  Resolves: #771475


author: Parag Nemade <pnemade@redhat.com> -1.1.10-1
changelog:
  - update to new upstream release 1.1.10 
  - Resolves: rh#513920: [pa_IN]Jhelum layout conflict with shortcut key in lokalize
  - revert pa-jhelum-numeric-503478.patch to its original version.


author: Parag Nemade <pnemade AT redhat.com> - 1.1.10-4
changelog:
  - Resolves:rh#642138-[te_IN] [inscript] U0C60, U0C44 and U0C01 need key mapping in inscript keymap.
  - Resolves:rh#653781 - [ta_IN] [tamil99] some enhancements needed for more input combinations
  - Resolves:rh#653782 - [hi_IN] problems with hi-remington layout
  - Resolves:rh#653783 - [ml_IN] The character 0D1A ("ച") missing on IOK for Malayalam Inscript


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-111
changelog:
  - fix conflicts in specfile, upload missing sources, upload patch with
   wrong name
  - Related: rhbz# 594768


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-113
changelog:
  - fix CGI test data location to pass internal tests 
  - remove CPAN and CPANPLUS sysconfig declarations as they are not provided
  - disable tests on s390(x) and ppc64 as multithread stress tests fails
  - Related: rhbz#594768


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-114
changelog:
  - Remove unused @INC paths
  - Own all used @INC paths
  - Own architecture dependent paths by perl-libs due to multiarch
  - Resolves: rhbz#554671


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - require Digest::SHA 640716
  - remove removal of NDBM 640729
  - remove unsupported option fork from prove's documentation 609492
  - Thread desctructor leaks 640720
  - update threads to 1.82 (bugfixes releases) 626330
  - remove unused patches from cvs
  - Resolves: rhbz#640729, rhbz#640716, rhbz#609492, rhbz#640720, rhbz#626330


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-119.1
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743090, rhbz#743092


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-1
changelog:
  - update to 4.2.4p7 (CVE-2009-1252)
  - improve PLL response when kernel discipline is disabled
  - don't log STA_MODE changes
  - enable nanokernel support
  - allow minpoll 3
  - increase memlock limit
  - move html documentation to -doc subpackage (#492444)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-2
changelog:
  - fix frequency calculation when starting with no drift file
  - reduce phase adjustments beyond Allan intercept in daemon PLL


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-3
changelog:
  - handle system time jumps better
  - don't wake up every second for refclocks without timer
  - don't crash in ntpstat when unknown clock type is received (#505564)
  - make ntpstat process first packet in multipacket response
  - switch to editline
  - set pool.ntp.org vendor zone in spec (#512711)
  - compile with -fno-strict-aliasing


author: Roland McGrath <roland@redhat.com> - 0.150-1
changelog:
  - Update to 0.150
    - libdw: Fix for handling huge .debug_aranges section. (#638432)
    - libdwfl: Fix for handling prelinked DSO with separate debug file. (#652857)
    - findtextrel: Fix diagnostics to work with usual section ordering.


author: Petr Sabata <psabata@redhat.com> - 1.0.10-2
changelog:
  - Avoid NULL dereference when parsing supported_classes sys entry
  - Remove redundant buildroot definition
  - Resolves: rhbz#690014


author: Petr Šabata <contyk@redhat.com> - 1.0.13-1
changelog:
  - 1.0.13 bump + 47d8dca, "Set SerialNumber to 'Unknown' if not found"  (#788510)
  - Subpackage the pkgconfig file


author: Petr Šabata <contyk@redhat.com> - 1.0.16-1
changelog:
  - 1.0.16 bump, documentation and autotools scripts updates (#829810)
  - Fix an old bogus date in the changelog


author: Doug Ledford <dledford@redhat.com> - 1.0-15
changelog:
  - No longer provide a rules file to create infinband devices, the kernel
    now creates them in the proper place all by itself
  - Change the LSB headers in the init script, they were wrong
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-16
changelog:
  - If we are being installed on a machine that has ib_ipoib module loaded,
    then this is likely because it is a machine being installed over IPoIB,
    so enable our init script
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-17
changelog:
  - Don't do lsmod in the %post script looking for ib_ipoib, anaconda
    loads it unconditionally.  Instead, anaconda has been modified to
    enable our init script if it installed over an IPoIB interface, so
    simply remove that portion of our %post script.
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-20
changelog:
  - Name the cards slightly differently (upstream request)
  - Check for the ibacm program before trying to down the stack
  - Resolves: bz808600


author: Doug Ledford <dledford@redhat.com> - 3.3-1
changelog:
  - Fix an issue in the rdma script that caused rds_rdma to load
    when it shouldn't
  - Resolves: bz815622


author: Doug Ledford <dledford@redhat.com> - 3.3-3
changelog:
  - The fix to bug 808600 was noisy and resulted in bug 815999,
    silence the script
  - Resolves: bz815999


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1035941


author: Colin Walters <walters@redhat.com> - 2.26.1-8
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1036097


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.8-3
changelog:
  - Revert deprecations picked up through rebases to avoid further bugs
    like rhbz#1136304 (devhelp).


author: Colin Walters <walters@redhat.com> - 2.28.8-6
changelog:
  - Backport patch to avoid integer overflow on reuse of GMainContext
    source ids, which qemu hits.
    Resolves: #1212722


author: Colin Walters <walters@verbum.org> - 2.28.8-8
changelog:
  - Revert use of FAM on NFS - introduces perf regressions for deployments
    which are not using NFS for home directories; this is better handled
    in RHEL7.
    Resolves: #1399726
    Reverts: #725178


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-57
changelog:
  - Resolves: rhbz#1473005 - The originalMemberOf attribute disappears from
                             the cache, causing intermittent HBAC issues


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-58
changelog:
  - Resolves: rhbz#1534618 - ABRT crash - /usr/libexec/sssd/sssd_nss
                             [rhel-6.9.z]


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix permission on source files (#676364)
  - fix negative keys with var_export (#771738)
  - fix setDate when DateTime created from timestamp (#812819)
  - add php(language) and missing provides (#837042)
  - use arch-specific requires (#833545)
  - fix possible buffer overflow in pdo_odbc (#836264)
  - fix possible segfault in pdo_mysql (#824199)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-16
changelog:
  - fix stream support in fileinfo (#858653)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - set CPAN installation path into "site"
  - 'make local' now pass because of Patch0, which removes incorectly set
   dependencies
  - Related: rhbz#594768


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-0.b14
changelog:
  - Update to u92b14.
  - Remove upstreamed patches for Zero build failures 8087120 & 8143855.
  - Add 8132051 Zero fix upstreamed as 8154210 in 8u112.
  - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell.
  - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues.
  - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92
  - Resolves: rhbz#1350034


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-0.b13
changelog:
  - Update to u101b13.
  - Backport REPOS option in generate_source_tarball.sh
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1350034


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13
changelog:
  - Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
  - Resolves: rhbz#1350034


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13
changelog:
  - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
  - Resolves: rhbz#1350034


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.31.b17
changelog:
  - excluded bin/javaws files
  		exclude  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/jre/bin/javaws
  		files devel
  		exclude  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/bin/javaws

  - garbage removed to separated file
  - Resolves: rhbz#639954


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.33.1.b20
changelog:
  - Bump to IcedTea 1.9.3
  - Build with --disable-webstart and remove all javaws and plugin references
  - Moved pre 2009 changelog entries to a separate file to keep spec file small
  - Resolves: rhbz#658208


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.39.1.9.8
changelog:
  - Resolves: rhbz#709375
  - Bumped to IcedTea6 1.9.8
  - Copy fontconfig files to match names for current and next release
  - RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
    disabled get still selected for read ops (win)
  - RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
  - RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
    FileDialog.show()
  - RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
    code
  - RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
    bindings
  - RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
  - RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
  - RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
    with scale close to zero
  - RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
  - RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
    size variables


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.3
changelog:
  - Fix regression in vgimportclone script that caused failures on
    any duplicate PVs found, hence making the script unusable.


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115875


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.65-2.5.3pre01.1
changelog:
  - Bump to 2.5.3pre01.
  - Remove obsolete patches, which are now included upstream.
  - Disable LCMS via environment variables rather than maintaining a patch.
  - Resolves: rhbz#1148309


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.71-2.5.3.2
changelog:
  - added and applied patch407, bug1146622-fix.patch
  - removed chrpath (sync with 6.7)
  - Resolves: rhbz#1173706


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Remove earlier temporary patch for RH1146622 (included upstream)
  - Fix elliptic curve list as part of fsg.sh
  - Resolves: rhbz#1180295
  - Resolves: rhbz#1173706


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.2
changelog:
  - Add backports of PR2233, PR2161, PR1661 (GConf changeset) and PR2320 from IcedTea 2.6.x
  - No longer set SYSTEM_GIO to false as we can link against it now GSettings is not required
  - Add test case to ensure file type detection works
  - Add build dependency on GConf2-devel for native proxy support.
  - Remove outdated dependencies on mercurial, redhat-lsb and libxslt from IcedTea builds.
  - Remove python dependency introduced for rpath rewrite script, which has now been removed.
  - Add build dependency on redhat-lsb-core to provide lsb_release for jdk_generic_profile.sh
  - Apply PR2323 to fix building of networking support with system GConf on and system GIO off
  - Revise PR2323 to use header defines to mark whether GLib types have been defined or not
  - Revise PR2323 to account for different glibconfig.h define used on RHEL 6
  - Use installed directory in check section and remove duplicate tests in build
  - Resolves: rhbz#1217984


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.9.1.el6]
changelog:
  - [mm] hugetlb: fix race in region tracking (Herton R. Krzesinski) [1274599 1260755]
  - [mm] hugetlb: improve, cleanup resv_map parameters (Herton R. Krzesinski) [1274599 1260755]
  - [mm] hugetlb: unify region structure handling (Herton R. Krzesinski) [1274599 1260755]
  - [mm] hugetlb: change variable name reservations to resv (Herton R. Krzesinski) [1274599 1260755]
  - [fs] dcache: Log ELOOP rather than creating a loop (Benjamin Coddington) [1272858 1254020]
  - [fs] dcache: Fix loop checks in d_materialise_unique (Benjamin Coddington) [1272858 1254020]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.10.1.el6]
changelog:
  - [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
  - [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
  - [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
  - [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
  - [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
  - [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
  - [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
  - [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.11.1.el6]
changelog:
  - [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
  - [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.13.1.el6]
changelog:
  - [security] Don't leak a key reference if request_key tries to use a revoked keyring (David Howells) [1288095 1188442]
  - [fs] gfs2: Protect freeing directory hash table with i_lock spin_lock (Robert S Peterson) [1288093 1250663]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.14.1.el6]
changelog:
  - [scsi] bfa: Fix incorrect de-reference of pointer (Chad Dupuis) [1292370 1258533]
  - [netdrv] genetlink-compat: register multicast groups (Stanislaw Gruszka) [1291978 1259870]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.16.1.el6]
changelog:
  - [net] bonding: propagate LRO disable to slave devices (Jarod Wilson) [1287993 1259008]
  - [net] Move bonding headers under include/net (Jarod Wilson) [1287993 1259008]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.17.1.el6]
changelog:
  - [kernel] hrtimer: add force_hrtimer_reprogram kernel parameter (Prarit Bhargava) [1292082 1285142]
  - [mm] fix anon_vma->degree underflow in anon_vma endless growing prevention (Jerome Marchand) [1285693 1151823]
  - [mm] fix corner case in anon_vma endless growing prevention (Jerome Marchand) [1285693 1151823]
  - [mm] prevent endless growth of anon_vma hierarchy (Jerome Marchand) [1285693 1151823]
  - [mm] avoid anon_vma_chain allocation under anon_vma lock (Jerome Marchand) [1285693 1151823]
  - [mm] avoid repeated anon_vma lock/unlock sequences in unlink_anon_vmas() (Jerome Marchand) [1285693 1151823]
  - [mm] avoid repeated anon_vma lock/unlock sequences in anon_vma_clone() (Jerome Marchand) [1285693 1151823]
  - [scsi] only re-lock door after EH on devices that were reset (Ewan Milne) [1282464 995234]
  - [fs] fs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1282621 1241030]
  - [fs] revert 'vfs: Unhash and evict unused children dentries after rmdir' (Carlos Maiolino) [1282621 1241030]
  - [netdrv] macvtap: fix network header pointer for VLAN tagged pkts (Ivan Vecera) [1280206 1213846]
  - [net] Fix vlan_get_protocol for stacked vlan (Ivan Vecera) [1280206 1213846]
  - [scsi] ipr: Fix incorrect trace indexing (Gustavo Duarte) [1280211 1209543]
  - [scsi] ipr: Fix invalid array indexing for HRRQ (Gustavo Duarte) [1280211 1209543]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-573.18.1.el6]
changelog:
  - [netdrv] bonding: "primary_reselect" with "failure" is not working properly (Jarod Wilson) [1295924 1290672]
  - [net] netpoll: Close race condition between poll_one_napi and napi_disable (Neil Horman) [1295370 1252212]


author: Harald Hoyer <harald@redhat.com> 147-2.65
changelog:
  - 80-drivers.rules: only make an exception for ipmi for
                      modprobe with DRIVER set
  Resolves: rhbz#1268251


author: Michal Sekletar <msekleta@redhat.com> - 147-2.66
changelog:
  - prevent creation of duplicate udev rules by write_net_rules helper (#652499)
  - fix memory leak in scsi_id (#891669)
  - introduce SECLABEL{selinux} for setting explicit SELinux labels on device nodes (#1015300)
  - for ATA disks udev will now also create by-id/wwn-* symlinks when appropriate (#1220617)


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10.el6_6
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1172165
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Baoquan He <bhe@redhat.com> - 2.0.0-279
changelog:
  - mkdurmpd: Issue sync after saving vmcore-dmesg.txt, resolves bug 1123061
  - mkdumprd: Fix check condition of selinux status, resolves bug 1122880
  - mkdumprd: fix no such file or directory warning in 2nd kernel on s390, resolves bug 1122883
  - Support for eppic language as a subpackage, resolves bug 823561
  - update .gitignore/sources for eppic_030413.tar.gz, resolves bug 823561
  - makedumpfile: Fix Makefile for eppic_makedumpfile.so build, resolves bug 823561


author: Baoquan He <bhe@redhat.com> - 2.0.0-280
changelog:
  - mkdumprd: wait for multipath device node, resolves bug 1128248
  - mkdumprd: clean up found logic in wait_for_multipath_devices(), resolves bug 1128248
  - use "getent ahostsv4 host-name" to get ipv4 address of a host name, resolves bug 1127138


author: Baoquan He <bhe@redaht.com> - 2.0.0-281
changelog:
  - starting kdump service after network, local fs and remote fs, resolves bug 1132300
  - Add sample eppic scripts to kexec-tools-eppic package, resolves bug 1104837
  - Convert leftover "getent hosts" to "getent ahostsv4", resolves bug 1142666
  - mkdurmpd: Fix the syntax error on the condition of fips inexistence, resolves bug 1131945


author: Baoquan He <bhe@redhat.com> - 2.0.0-283
changelog:
  - makedumpfile: Exclude unnecessary hugepages. resolves bug 1068674
  - makedumpfile: Vtop address translation support for vmalloc region in PPC64 arch. resolves bug 1068674
  - makedumpfile: Initialize for vmalloc address translation support in PPC64 arch. resolves bug 1068674
  - makedumpfile: Get rid of overrun adjustments. resolves bug 1068674
  - makedumpfile: Generic handling of multi-page exclusions. resolves bug 1068674


author: Baoquan He <bhe@redhat.com> - 2.0.0-286
changelog:
  - update kexec-kdump-howto.txt, resolves bug 949376
  - mkdumprd: Load the mlx4_core module if it is needed in the 2nd kernel, resolves bug 1099589
  - nfs dump will fail when netdev has different device name in ifcfg-$dev, resolves bug 1005141 
  - udev-rules: Restart kdump service on cpu ADD/REMOVE events, resolves bug 1113276


author: Tom "spot" Callaway <tcallawa@redhat.com> - 7.2-5
changelog:
  - Remove bh-ttf and bh-type1 (Luxi fonts) and truetype subpackage, due to 
    licensing issues (#317641)
  - Correct license tag


author: Tom "spot" Callaway <tcallawa@redhat.com> - 7.2-6
changelog:
  - IBM refused to relicense ibm-type1 fonts with permission to modify,
    so they were dropped (bugzilla 317641)
  - Meltho Syrian fonts (misc-meltho) have a bad license, upstream did not
    respond to request for relicensing, so they were dropped. This also
    means that the -syriac subpackage has been removed. (bugzilla 317641)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-10
changelog:
  - Fix pkgconfig variable usage, it's fontrootdir, not fontdir. Same applies
    to the patches.
  - Move generation of encodings.dir back to post, over time they moved to
    install despite the files being ghosted (#1089118)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-11
changelog:
  - Revert previous commit, pkg-config gives us /usr/share/fonts/X11, not
    /usr/share/X11/fonts which breaks the build on RHEL6 (#1089118)
  - Replace pkgconfig call with hardcoded path to _x11fontdir, same in the
    patches
  - Run autoreconf for encodings to pick up the changed path


author: David Lutterkort <lutter@redhat.com> - 0.9.0-2
changelog:
  - Fix BZ 781690 "Grub password --encrypted argument not parsed correctly"
  - Fix BZ 628507 "It's better to support fadot --help or fadot -h"
  - Fix BZ 759311 "augtool --autosave does not save changes"


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-4
changelog:
  - Rebase to Augeas 1.0.0
    resolves: rhbz#817753
  - Add dependency on libxml2-devel.
  - Remove all patches (all upstream and included in 1.0.0).
  - Print tests/test-suite.log when the tests fail.
  - Add fix for regression added in 1.0.0 (RHBZ#920609).
  - Fix tests/test-run.


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-4
changelog:
  - Don't call xmlCleanupParser, it breaks other users of thread-private
    storage
    Resolves: #578568


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.1
changelog:
  - Fix exit codes in nscd start script (#582738)
  - Fix lookup of collation sequence value during regexp matching (#587360)
  - Handle too-small buffers in Linux getlogin_r (BZ#11571)
  - Fix name of tt_RU.UTF-8@iqtelif locale (#589138)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.3
changelog:
  - Implement recvmmsg on all archs (#594194)
  - Avoid strict aliasing issues (#594194)
  - Fix nscd user creation (#594256)
  - Fix access outside of red zone on ppc (#593771)
  - Fix scope handling during dl_close (#593686)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7
changelog:
  - Round cache sizes to handle odd sizes (#607010)
  - Fix initializsation of cpu features (#630801)
  - Fix ifunc thunk for strspn on x86 in static libc (#631011)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7.el6_0.1
changelog:
  - Fix bug in generic strstr/memmem implementation handling certain
    repeated patterns (#643341)
  - Correctly align TCB for AVX (#643343)


author: Tom Lane <tgl@redhat.com> 2.2.14-1
changelog:
  - Update to unixODBC 2.2.14.  Note this involves an ABI break and a consequent
    soname version bump, because upstream fixed some mistakes in the widths of
    some API datatypes for 64-bit platforms.  Also, the formerly embedded
    mysql, postgresql, and text drivers have been removed.  (For mysql and
    postgresql, use the separate mysql-connector-odbc and postgresql-odbc
    packages, which are far more up to date.  The text driver is not currently
    shipped by upstream at all, but might get revived as a separate SRPM later.)
  - Stop shipping .a library files, per distro policy.
  - Fixes for libtool 2.2.


author: Peter Lemenkov <lemenkov@gmail.com> - 2.2.14-4
changelog:
  - Properly install *.desktop files
  - No need to ship INSTALL in docs
  - Use macros instead of hardcoded /usr/share and /usr/include
  - fixed permissions on some doc- and src-files
  - Almost all rpmlint messages are gone now


author: Tom Lane <tgl@redhat.com> 2.2.14-6
changelog:
  - Switch to building against qt4, not qt3.  This means the DataManager,
    DataManagerII, and odbctest applications are gone.
  Resolves: #514064
  - Use Driver64/Setup64 to eliminate need for hand-adjustment of odbcinst.ini
  Resolves: #514688
  - Fix misdeclaration of SQLBIGINT and SQLUBIGINT in generated header files
  Resolves: #518623


author: Tom Lane <tgl@redhat.com> 2.2.14-9
changelog:
  - Sync with Fedora head
  - Fix bug preventing drivers from being selected in ODBCConfig
  Resolves: #554501
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparcv9 isn't a possible uname -i output


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-118
changelog:
  - Fix label for /root/.hushlogin
  - Allow domain to send/recv unlabeled packet
  - Allow sshd to relabel tun socket
  - Allow puppetmasterd to relabel puppet config files
  - Add label for lvs.conf
  - Fix labeling for matahari-netd agents


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-123
changelog:
  - MLS Overrides needed for a user running at a level to be able to use sudo and talk to sssd
  - Allow initrc_t to manage dirsrv pid files with disabled unconfined module
  - Fixed for deltacloudd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-125
changelog:
  - Change the postinstall to load_policy separately from the semodule command
  - This will put the proper files in place even if the kernel rejects the policy.
  - Allow login programs to connect to the pki_ca_port
  - Allow vhostmd to read /dev/rand and signal


author: Ondrej Vasik <ovasik@redhat.com> 2.4.28-1
changelog:
  - Provide/obsolete pm-utils-filesystem, own dirs for pm-utils
    hooks(#515362)
  - Do own man sections for /usr/share/man/<locale> dirs (#220265)
  - Do own /usr/share/sounds (#515485)


author: Ondrej Vasik <ovasik@redhat.com> 2.4.29-1
changelog:
  - iso_codes package no longer provides tab files, do generate
    them on fly with sed (thanks D. Tardon)


author: Frank Ch. Eigler <fche@redhat.com> - 1.2-5
changelog:
  - Backported fixes for rhbz596085 rhbz580917 rhbz604294 rhbz602386
    rhbz599498 rhbz580197 rhbz597329 rhbz599430


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Jan Horak <jhorak@redhat.com> - 60.1.0-8
changelog:
  - Fixed homepage and bookmarks (rhbz#1606778)
  - Fixed missing file associations in RHEL6 (rhbz#1613565)


author: Jan Horak <jhorak@redhat.com> - 60.1.0-9
changelog:
  - Do not set user agent (rhbz#1608065)
  - GTK dialogs are localized now (rhbz#1619373)
  - JNLP association works again (rhbz#1607457)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.6.6-5
changelog:
  - Include svn2cl and its man page only in the -svn2cl subpackage (#558598).
  - Do not include bash completion in docs, it's installed.


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.351.el6
changelog:
  - kvm-qxl-save-qemu_create_displaysurface_from-result.patch [bz#885644]
  - Resolves: bz#839832
    (qemu-ga: document selinux policy for read/write of guest files)
  - Resolves: bz#885644
    (Memory leak and use after free in qxl_render_update_area_unlocked())


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.352.el6
changelog:
  - kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
  - kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
  - kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
  - Resolves: bz#895392
    (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.353.el6
changelog:
  - kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
  - kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
  - kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
  - kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
  - kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
  - Resolves: bz#869981
    (Cross version migration between different host with spice is broken)
  - Resolves: bz#876982
    (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
  - Resolves: bz#894995
    (core dump when install windows guest with x-data-plane=on)
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.354.el6
changelog:
  - spec: add Epoch to old_conflict_ver
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6
changelog:
  - kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
  - kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
  - kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
  - kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
  - kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
  - Resolves: bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.1
changelog:
  - kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
  - Resolves: bz#907397
    (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.2
changelog:
  - kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
  - kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
  - Resolves: bz#910841
    (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.3
changelog:
  - kvm-Fix-regression-introduced-by-machine-accel.patch [bz#929105]
  - Resolves: bz#929105
    ([RHEL6.4] [regression] qemu-kvm does not enable ioeventfd)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.4
changelog:
  - kvm-virtio-balloon-fix-integer-overflow-in-BALLOON_CHANG.patch [bz#958750]
  - Resolves: bz#958750
    (QMP event shows incorrect balloon value when balloon size is grater than or equal to 4G)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.5
changelog:
  - kvm-e1000-fix-link-down-handling-with-auto-negotiation.patch [bz#907716]
  - kvm-e1000-unbreak-the-guest-network-when-migration-to-RH.patch [bz#907716]
  - kvm-reimplement-error_setg-and-error_setg_errno-for-RHEL.patch [bz#957056]
  - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch [bz#957056]
  - kvm-qga-distinguish-binary-modes-in-guest_file_open_mode.patch [bz#957056]
  - kvm-qga-unlink-just-created-guest-file-if-fchmod-or-fdop.patch [bz#957056]
  - Resolves: bz#907716
    (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
  - Resolves: bz#957056
    (CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode [rhel-6.4.z])


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-51
changelog:
  - sanlock: Don't spam logs with "target pid not found" (rhbz#1189414)
  - nwfilter: fix crash when adding non-existing nwfilter (rhbz#1202703)
  - util: more verbose error when failing to create macvtap device (rhbz#1186142)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-52
changelog:
  - qemu: Keep QEMU host drive prefix in BlkIoTune (rhbz#1203633)
  - qemu: Fix name comparison in qemuMonitorJSONBlockIoThrottleInfo() (rhbz#1203633)
  - virsh: fix typos in virsh man page (rhbz#1130835)
  - schemas: Allow all generic elements and attributes for all interfaces (rhbz#1206066)
  - RNG: Allow multiple parameters to be passed to an interface filter (rhbz#1206066)
  - qemu_domain: fix startup policy for disks (rhbz#1203542)
  - Create directory for lease files if it's missing (rhbz#1200991)
  - qemu: cgroup: Properly set up vcpu pinning (rhbz#1198096)
  - cgroup: Add accessors for cpuset.memory_migrate (rhbz#1198497)
  - qemu: Fix possible crash (rhbz#1198497)
  - qemu: Migrate memory on numatune change (rhbz#1198497)
  - qemu: fix crash when removing <filterref> from interface with update-device (rhbz#1205042)
  - nwfilter: Fix rule priority problem (rhbz#1210183)
  - qemuProcessHook: Call qemuProcessInitNumaMemoryPolicy only when needed (rhbz#1198645)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-53
changelog:
  - RHEL: Avoid memory leak when virCgroupSetCpusetMemoryMigrate fails (rhbz#1198497)
  - qemu: cgroup: Fix memory leak when there's no vCPU pinning (rhbz#1198096)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54
changelog:
  - util: set MAC address for VF via netlink message to PF+VF# when possible (rhbz#1113474)
  - util: set macvtap physdev online when macvtap is set online (rhbz#1113474)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54.el6_7.1
changelog:
  - qemu: split out cpuset.mems setting (rhbz#1265970)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1265970)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1266039)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1266039)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1266039)


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-39
changelog:
  - Resolves #1144608 - pki-core failed to build with cmake-2.8.12.2-4.el6
  - Resolves #1037248 - pki-core FTBFS if "-Werror=format-security" flag is used
  - Resolves #1243 - Outdated selinux-policy dependency in Dogtag 9


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-1
changelog:
  - Update to upstream version 2.11.0
    Resolves: #633577
  - Improve package to comply multilib policy
    Resolves: #607722
  - Don't strip debug information
    Resolves: #693389
  - Change build options
    Resolves: #694513


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-2
changelog:
  - Add -libs requirement with explicit version to the main package
  - Build with -fno-strict-aliasing
  - Use correct init script
  - Add OpenSLP support
    Resolves: #712525


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-3
changelog:
  - Backport upstream patch which enables the embedded instanaces to have
    correct empty string values
    Resolves: #796191
  - Add "cim-server" to provides
    Resolves: #799040


author: Dave Airlie <airlied@redhat.com> 2.4.20-1
changelog:
  - pull in upstream .20 release - contains pretty much same patches
  - fix includes harder to make mesa build


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
    fix small sound file playback. (#505610)


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.5.4.7-3
changelog:
  - Update to version 6.5.4-7
  - Use lzma-compressed source tarball as sugested by Ville Skyttä (BZ#515319)


author: Olivier Fourdan <ofourdan@redhat.com> - 6.5.4.7-6
changelog:
  - Add fix for CVE-2010-4167
  - Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
  - Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798


author: Peter Jones <pjones@redhat.com> - 4.02-9
changelog:
  - Avoid a workaround that causes machines to stall in PXE boots that
    use the local disk.
    Resolves: rhbz#980671


author: Thomas Haller <thaller@redhat.com> - 1:0.8.1-104
changelog:
  - core: ignore slave devices when deciding global state (rh #951399)
  - dns: don't override DHCP-supplied search order with domain (rh #1202539)
  - build: fix building source package on recent Fedora (rh #1286742)
  - ibft: add settings plugin (rh #1198325)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:0.8.1-105
changelog:
  - ifcfg-rh: delay handling of deletion events (rh #1272617)
  - ifcfg-rh: load connections during GetIfcfgDetails avoiding ifup race (rh #1292753)
  - ifcfg-rh: leave bridge/bond/vlan to initscripts when support disabled (rh #1292753)
  - bond: avoid assuming connections on bond masters that are not up (rh #1292502)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:0.8.1-108
changelog:
  - dns: added new dns=none option to disable updating of resolv.conf (rh #1308730)
  - core: downgrade message level for unknown device driver (rh #1331314)
  - infiniband: compare only last 8 octects for MAC address (rh #1353033)
  - po: update translation (rh #1321723)


author: Ted Ross<tross@redhat.com> - 0.12-3
changelog:
  - BZ 681680 - QMF agents wake up several times a second
  - BZ 699499 - [RFE] qmfv2 must provide mainloop integration


author: Justin Ross <jross@redhat.com> - 0.12-5
changelog:
  - Related: rhbz#742040
  - Remove the indirection for subpackage renaming; we no longer need it
  - Adapt spec file to use upstream qpid source tarball as-is
  - Rebase qpid and store source to 0.12
  - Restore changes for new architectures


author: Justin Ross <jross@redhat.com> - 0.14-15
changelog:
  - Related: rhbz#765803
  - Rebase to 0.14
  - BZs: 730017, 759114, 760636, 786875, 791249, 795399, 797426, 798236,
    800028, 801310


author: Ted Ross <tross@redhat.com> - 0.14-16
changelog:
  - Related: rhbz#703563
  - Related: rhbz#771961
  - Related: rhbz#785919
  - Related: rhbz#788901
  - Related: rhbz#799269
  - Related: rhbz#802807


author: Mike Cressman <mcressman@redhat.com> - 0.14-19
changelog:
  - BZs: 609685, 683711, 693444, 707682, 729311, 801465, 808090,
         809357, 811481, 817283, 826989, 831365, 835628


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #668836 - Review Request: ipa-pki-theme
  -   Modified overview to pertain more to these packages
  -   Removed "Obsoletes:" lines (only pertinent to internal deployments)
  -   Modified installation section to preserve timestamps
  -   Removed sectional comments


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Made 'ipa-pki-common-theme' a runtime dependency of 'ipa-pki-ca-theme'
  - https://pkgdb.lab.eng.bos.redhat.com/pkg/packages/srpm/5936/
  -   Package Wrangler:  applied GPLv2 license header to 'xml.vm'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - 'ipa-pki-common-theme'
  -     Bugzilla Bug #671058 - ipa2 - ipa-server-install fails on pkisilent -
        xml parsing string -- ?


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - Augmented overview description.
  - 'ipa-pki-ca-theme'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - Resolves 643543
  - Resolves #683172 - pkisilent needs to provide option to set
    nsDS5ReplicaTransportInfo to TLS in replication agreements
    when creating a clone, r1886


author: Milan Crha <mcrha@redhat.com> - 0.32.2-10
changelog:
  - Add patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #906341 (Cannot create book/calendar)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-11
changelog:
  - Update patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #1017108 (Shorten delay of calendar open)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-13
changelog:
  - Add patch for RH bug #1026797 (Coverity scan issue - uninitialized variable)
  - Add patch for RH bug #1141662 (Crash when receiving message without body)


author: Jeff E. Nelson <jen@redhat.com> - 1.7.4-1
changelog:
  - Sync with supp-rhel-7.2 virtio-win-1.7.4-1
  - Resolves: bz#1207415 [rhel-6.7]
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-preqhql build)
  - Resolves: bz#1207413 [rhel-6.7]
    (Windows 2012 R2 using virtio-scsi-driver with Direct LUNs causes BSODs)
  - Resolves: bz#1210211 [rhel-6.7]
    (CVE-2015-3215 [NetKVM] Malformed packet can cause BSOD [rhel-6.7])


author: Jeff E. Nelson <jen@redhat.com> - 1.7.5-0
changelog:
  - The virtio-win-1.7.5-0 release contains:
    - support for Windows 10
    - Bugfixes and improvements (see below for bugzilla list)

  - The drivers contained in this release are:
    - Balloon build 105
    - viorng  build 105
    - viostor build 106
    - NetKVM  build 105 (Windows Server 2008) and build 110 (all others)
    - vioser  build 108
    - vioscsi build 102

  - Also included in this release are:
    - qemu guest agent 7.0-10
    - qxl 0.1-24

  - Resolves: bz#1275050
    (VirtIO-Win must be repackaged for RHEL 6 with Windows 10 drivers [rhel6.8])

  This release also addresses the following BZs:
  - bz#1010887
    ([virtio-win][balloon] Guest display did not show properly after hibernate guest(s4)& resume after enlarging memory during runtime)
  - bz#1017817
    (copying of 10+ MB plaintext from guest through spice clipboard to client results in: vio_serial write completion error 554)
  - bz#1037949
    ([virtio-win][viostor]guest bsod(9F) when do s4 while guest running iozone)
  - bz#1054640
    ([virtio-win][netkvm]windows 8.1 x86 BSOD on DRIVER_POWER_STATE_FAILURE (9f))
  - bz#1058115
    ([whql][netkvm]win2k8-32 BSOD with code 9F when run WLK job "Ethernet - NDISTest 6.5 (MPE)")
  - bz#1058121
    ([whql][netkvm]win2k8-32 BSOD with 7E code when run WLK job "Ethernet - NDISTest 6.5 (MPE)")
  - bz#1058225
    ([WHQL][netkvm]Job named PM_PowerStateTransition failed because error pop up while test app's running on win8/win8.1)
  - bz#1067249
    ([virtio-win][balloon]Balloon device can not be removed after blnsrv service installed)
  - bz#1085702
    ([WHQL][netkvm][macvtap][1 machine]OffloadRsc failed on win2012 and win8-64 guest)
  - bz#1096505
    ([NetKVM] Implement multiqueue support in Windows guest driver)
  - bz#1098876
    ([virtio-win][netkvm]netkvm driver can not be installed on win8-64 guests)
  - bz#1100308
    ([NetKVM] Race condition in handling device stop)
  - bz#1103100
    ([virtio-win][netkvm]netkvm driver can not be load in win2008 guest)
  - bz#1106400
    ([whql][netkvm]NDISTest 6.5 - [2 Machine] - OffloadLSO failed)
  - bz#1109027
    ([virtio-win][netkvm]Name field is empty when using netsh command)
  - bz#1110129
    ([virtio-win][scsi]scsi driver can not be installed automately via pnputil)
  - bz#1111051
    ([virtio-win][netkvm]win7-32 guest bsod(8e) while performing long (several hours) netperf transfer with mq=on)
  - bz#1112712
    ([virtio-win][netkvm]win8.1 32bit BSOD when loading virtio-win-prewhql-0.1 driver & indirect_desc=off option of virtio-net-pci)
  - bz#1119966
    ([whql][netkvm][RHEL6]guests bsod (0xd1) when running job "NDISTest 6.5 - [1 Machine] - StandardizedKeywords")
  - bz#1121338
    ([WHQL][netkvm]NDISTest 6.5 - 2 Machine - OffloadChecksum failed via bridge on hck)
  - bz#1123288
    ([virtio-win][netkvm]BOSD occurs during guest reboot after disable nic when netserver running)
  - bz#1125796
    ("Guest moved used index from 10122 to 10253" when reboot win2012R2 guest with 129 virtio-scsi target)
  - bz#1126378
    ([virtio-win][vioscsi][rhel6]win2012 guest bsod(d1) when shutdown guest with multi virtio-scsi devices on the same scsi controller)
  - bz#1136023
    ([NetKVM] Google patches broke debug compilation of NetKVM driver)
  - bz#1136602
    ([whql][netkvm]Guest (64 bits Operating System) got BSOD (DRIVER_VERIFIER_DETECTED_VIOLATION) while run some jobs)
  - bz#1136606
    ([whql][netkvm]guests bsod(7E) when running job "NDISTest 6.0 - [1 Machine] - 1c_FaultHandling")
  - bz#1140447
    ([virtio-win][viorng]should use uniformed name for WDFCoinstallerXXX.dll)
  - bz#1142737
    ([virtio-win][netkvm]interface status is '2', but expect status is '7' after set_link NIC off)
  - bz#1147202
    ([virtio-win][WHQL][netkvm]Job named by InvalidPackets induce win81-32/64 to hang up.)
  - bz#1147203
    ([virtio-win][whql][netkvm]win2k8-64 bsod(7e) when run job "Ethernet - NDISTest 6.0")
  - bz#1147239
    (NetKVM with 2012R2 fails the HCK tests)
  - bz#1154419
    (NetKVM fails HCK test for 2008R2, single CPU)
  - bz#1154420
    (ParaNdis6_SendNetBufferList should dispatch each net buffer to a separate queue)
  - bz#1154435
    ([NetKVM] Incorrect message id assignment and queue allocation)
  - bz#1155891
    ([whql][netkvm]Job MPE failed while job was running on win2008R2 because of bsod (0A) on build 93 - 4 vcpus)
  - bz#1155910
    ([whql][netkvm]Job MPE failed while job was running on win2008R2 because of bsod (D1) on build 93 - 1 vcpus)
  - bz#1156259
    (Win7-64 guest BSOD(0x000000A0) when doing s4)
  - bz#1157241
    ([NetKVM] Uninitialized reserved field in procNumber structure)
  - bz#1159732
    ([virtio-win][vioscsi]guest shutdown instead of S3/S4 while doing S3/S4 in guest)
  - bz#1159754
    ([virtio-win][netkvm]Nic device doesn't work when guest is running in IRQ mode)
  - bz#1167539
    (win8.1.32 guest BSOD with error ' MEMORY_MANAGEMENT)
  - bz#1167614
    (win8.1.32 guest BSOD with error 'DRIVER_IRQL_NOT_LESS_OR_EQUAL' (netkvm.sys))
  - bz#1168119
    ([virtio-win][netkvm]win8.1.64 guest BSOD with error 'DRIVER_IRQL_NOT_LESS_OR_EQUAL' (netkvm.sys) after first reboot during os installation on AMD host)
  - bz#1168483
    ([virtio-win][netkvm]guest lost ip when change MTU between 500 and 575 via device manage)
  - bz#1168784
    ([virtio-win]win2012r2 guest shows black screen with error code "0x0000005c" after migration and reboot)
  - bz#1169673
    ([virtio-win][netkvm]qemu quit with "qemu-kvm: Guest moved used index from 0 to 257" when set MaxRxBuffers to 512/1024 in guest)
  - bz#1169718
    (CVE-2015-3215 [NetKVM] Malformed packet can cause BSOD [rhel-7.2])
  - bz#1170106
    (RFE: [virtio-win][qxl-win] Add windows 2008R2 QXL to the .vfd)
  - bz#1172920
    ([virtio-win][vioser]winxp guest bsod with D1 code when shutdown guest after hotunplug/hotplug serial port and serial pci)
  - bz#1173323
    (iperf stalls the NetKVM driver)
  - bz#1177063
    ([virtio-win][balloon]guest can't s3/s4 correctly if disable guest-stats-polling while balloon service running)
  - bz#1183423
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-prewhql build)
  - bz#1184430
    (enable event index feature in Windows virtio-blk driver)
  - bz#1184818
    (guest BSOD when reboot guest after enable qxl driver verifier)
  - bz#1188790
    (NetKVM driver crashed on pausing in MPE test)
  - bz#1190968
    ([whql][netkvm][mq]job "NDISTest 6.0 - [1 Machine] - 1c_Mini6RSSOids" last for hours and never stop w/ 4 queues)
  - bz#1191836
    ([whql][netkvm][mq]job "NDISTest 6.5 - [2 Machine] - GlitchFreeDevice" failed due to "not received the expected number of packets" w/ 4 queues)
  - bz#1195487
    (Windows guest performing out-of-bounds accesses on virtio device)
  - bz#1195920
    (Windows 2012 R2 using virtio-scsi driver with Direct LUNs causes BSODs)
  - bz#1210208
    (CVE 2015-3215 [NetKVM] Malformed packet can cause BSOD [rhel-7.2])
  - bz#1212392
    (need to do extra Refresh work when initiate virtio-blk disk while boot guest with OVMF)
  - bz#1217642
    (QXL XDDM is not shipped on the virtio-win ISO)
  - bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)
  - bz#1217799
    (Distribute *.oem, LICENSE, COPYING in -prewhql build)
  - bz#1218449
    (Ship qemuserial.cat on the iso)
  - bz#1218937
    (QEMU Guest Agent VSS Provider is not started after guest tools install)
  - bz#1227164
    (viostor/vioscsi is not digital signed by Redhat)
  - bz#1228967
    ([virtio-win][whql][viostor]job "Flush Test" failed on all guests with build 105)


author: Yash Mankad <ymankad@redhat.com> - 1.7.5-1
changelog:
  - The virtio-win-1.7.5-1 release contains:
    - Windows 10 drivers within vfd files

  - Resolves: bz#1304973
    (virtio-win 1.7.4 doesn't provide windows 10 drivers within vfd [rhel6.9] )


author: Yash Mankad <ymankad@redhat.com> - 1.8.0-1
changelog:
  - The virtio-win-1.8.0-1 release contains:
    - support for Windows 2016
    - Bugfixes and improvements (see below for bugzilla list)

  - The drivers contained in this release are:
    - pvpanic build 121
    - Balloon build 125
    - viorng  build 125
    - viostor build 126
    - NetKVM  build 126
    - vioser  build 126
    - vioscsi build 124

  - Also included in this release are:
    - qemu guest agent 7.3.2-1
    - qxl 0.1-24

  This release addresses the following BZs:
  - Resolves: bz#1384587
    (Backport virtio-win from RHEL-7.3 to RHEL-6.9)
  - Resolves: bz#1290305
    (Win7 64bit guest got BSOD with error 0x0000000A when reboot several times)
  - Resolves: bz#1304973
    (virtio-win 1.7.4 doesn't provide windows 10 drivers within vfd [rhel-6.9])
  - Resolves: bz#1303906
    (RFE: [qemu-ga] provide command for setting administrator account password (Windows guest) [rhel-6.9])
  - Solves: bz#950611
    ([NetKVM] Pass WHQL tests with RSC feature enabled )
  - Solves: bz#954183
    ([NetKVM] Static driver verifier fails with NetKVM )
  - Solves: bz#1013336
    ([virtio-win][netkvm] BSoD occurs when running NDISTest6.5 -[2 Machine] - MPE_Ethernet job on windows 2012 (Win10))
  - Solves: bz#1122364
    ([virtio-win][vioser][rhel6]win2k8r2 guest bsod(7e) when do continuous hotplug/unplug during virtio serial in use with driver verifier enabled)
  - Solves: bz#1157987
    (Windows hangs at startup if virtio-scsi device is configured with vectors=1, 2, and 3)
  - Solves: bz#1161453
    ([whql][vioscsi]Job named by SCSI Compliance Test (LOGO) failed on win2k8-R2 and win8-64 guest)
  - Solves: bz#1190960
    ([whql][netkvm][mq]job failed due to "Received some net buffer lists out of order" w/ 4 queues)
  - Solves: bz#1208465
    (Windows guest boots up slowly with multiple virtual NIC devices (I attached 232 with mutifunction=on))
  - Solves: bz#1210166
    ([vioscsi] Add multiqueue support to Windows virtio-scsi driver.)
  - Solves: bz#1214177
    ([virtio-win] [NetKVM] Compilation errors with Visual Studio 2015 while trying to compile NetKVM)
  - Solves: bz#1214568
    ([RFE][virtio-win] Add WMI facility to check the virito-scsi mq enabled)
  - Solves: bz#1219841
    ([RFE] vioscsi.sys should support MS Cluster Services)
  - Solves: bz#1223426
    ([NetKVM] Performance degradation with multi-queue)
  - Solves: bz#1234741
    ([virtio-win][vioscsi]win2012 guest bsod(c9) when whql test DPWLK-HotAdd(1104) job)
  - Solves: bz#1234751
    ([virtio-win][vioscsi]win2012R2 guest bsod(d1) when whql test DPWLK-HotAdd(1104) job)
  - Solves: bz#1235108
    ([virtio-win][vioscsi]VIOSCSI driver is not signed by redhat certification on win200832/64 platform)
  - Solves: bz#1237024
    ([virtio-win][netkvm]ipv6 uploading speed is quite slow when set "TCP/UDP checksum offload(IPv6)" to "Rx & Tx Enabled")
  - Solves: bz#1241986
    (win7 64bit BSOD when booting it on RHEL7.2 host)
  - Solves: bz#1243229
    ([virtio-win][scsi][windows 10]win10 and win2016 guests bsod with D1 when run job "Bus Reset Test")
  - Solves: bz#1245957
    ([WHQL][viostor][data-plane]it could not generate dump file on WIN2008-32/64 via WLK while running Crash Dump job)
  - Solves: bz#1246993
    ([virtio-win][svvp][ws2016] job "Signed Driver Check (CheckLogo)" failed during ws2016 svvp test)
  - Solves: bz#1247006
    ([virtio-win][svvp][ws2016] job "Profile Interrupt Test" failed during ws2016 svvp test)
  - Solves: bz#1248873
    ([whql][netkvm]Job named NDISTest6.5-InvalidPackets failed with HCK on win8-32/win8-64(build 106))
  - Solves: bz#1248977
    ([virtio-win][vioscsi] Cannot install vioscsi driver on win7-32&win2008-32)
  - Solves: bz#1249867
    ([WHQL][vioscsi]Job hangs and it cannot continure on windows2008 guest via WLK)
  - Solves: bz#1250854
    ([WHQL][vioscsi]The job named crash dump failed on windows 2008 -32/64 platform)
  - Solves: bz#1256583
    (Win10 guest can't get ip address from dhcpserver when add mrg_rxbuf=off for virtio-net-pci)
  - Solves: bz#1266340
    ([whql][netkvm]NDISTest6.5 Manual test failed and generate dump file on windows 2008 guest)
  - Solves: bz#1270149
    ([virtio-win][netkvm] Check guest network link status of virtio nic with status=on failed (build 110))
  - Solves: bz#1289406
    ([virtio-win][vioser] Cannot install vioser driver successfully)
  - Solves: bz#1292788
    ([virtio-win][viostor] Cannot install viostor driver on win7-64&win2008-64&win2008R2)
  - Solves: bz#1293042
    ([virtio-win][vioser] Extra '-' (dash) in serial driver name)
  - Solves: bz#1293249
    ([virtio-win][vioser] IOCTL_GET_INFORMATION does not return required buffer size)
  - Solves: bz#1296092
    ([virtio-win][balloon] balloon driver can not be installed automately via pnputil)
  - Solves: bz#1303511
    (update copyright of license.txt file in virtio-win to 2016)
  - Solves: bz#1303809
    (provide QEMU guest agent command for setting root/administrator account password - window guests)
  - Solves: bz#1303988
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for NetKVM)
  - Solves: bz#1304041
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for vioserial)
  - Solves: bz#1304044
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for vioscsi)
  - Solves: bz#1304049
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for viostor)
  - Solves: bz#1313243
    ([virtio-win][netkvm][rhel6]win2008-32 guest bsod with HARDWARE_INTERRUP_STORM(f2) when running netper
  f for longevity test)
  - Solves: bz#1313887
    ([RFE] provide QEMU guest agent command for setting root account password (Windows guest) [rhel-7.3])
  - Solves: bz#1315984
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for baloon)
  - Solves: bz#1315985
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for rng)
  - Solves: bz#1321774
    ([virtio-win][vioscsi]fio jobs keep printing "0% done" in win2012r2 guest)
  - Solves: bz#1325078
    (Add TargetOSVersion to driver inf files)
  - Solves: bz#1328275
    (virtio-win doesn't provide windows 10 drivers within vfd [rhel-7.3])
  - Solves: bz#1334736
    (On the LAN network, as long as the VMs receive the Network message, and will always blue screen.)
  - Solves: bz#1336368
    ([virtio-win][viostor][virtio1.0]Cannot enlarge/shrink disk with virtio1.0 device)
  - Solves: bz#1339175
    ([NetKVM] Turn on RSC feature in NetKVM driver)
  - Solves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)
  - Solves: bz#1352432
    ([virtio-win][vioscsi]Win2012-64&R2 guest occurred bsod(d1) when whql test DPWLK- Hot-Replace - Device Test - Verify driver support for D3 power state)
  - Solves: bz#1352517
    ([virtio-win][balloon][whql]windows guest BSOD when run several WHQL jobs)
  - Solves: bz#1352809
    ([virtio-win][viorng]wrong dervier version for virtio-win-prewhql-121)
  - Solves: bz#1356363
    ([virtio-win][viorng] cannot install viorng driver on win2008-32/64 (build 122) )
  - Solves: bz#1358125
    (Virtio 1.0 driver didn't work on win10 with q35 machine type)
  - Solves: bz#1359072
    ([virtio-win][netkvm][whql]many whql jobs occurred BSOD(DRIVER_VERIFIER_DETECTED_VIOLATION (c4)) on build 122)
  - Solves: bz#1361501
    ([virtio-win][balloon] report "VCRUNTIME120.dll is missing from your computer"error when using blnsvr.exe)


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.24.1.el6]
changelog:
  - [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
  - [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
  - [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
  - [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
  - [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
  - [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.25.1.el6]
changelog:
  - [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
  - [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
  - [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
  - [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
  - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.26.1.el6]
changelog:
  - [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
  - [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
  - [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.27.1.el6]
changelog:
  - [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.28.1.el6]
changelog:
  - [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
  - [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
  - [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
  - [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
  - [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
  - [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
  - [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
  - [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.29.1.el6]
changelog:
  - [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
  - [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
  - binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-8
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 113)
  - CVE-2010-2089: further checks within the audioop module (patch 114)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 115)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-9
changelog:
  - cherrypick upstream fix for fatal error creating threads when memory is
  low (patch 116)
  Resolves: rhbz#598564


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-10
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 117)
  Resolves: rhbz#583931


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-11
changelog:
  - Stop python bailing out with an assertion failure when UnicodeDecodeErrors
  occur on very large buffers (patch 118, upstream issue 9058)
  Resolves: rhbz#540518


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-1
changelog:
  - 2.6.5
  - remove upstream patch 53
  - fixup selinux patch to apply cleanly against 2.6.5 (patch 110)
  Resolves: rhbz#611607
  - remove commented-out, out-of-date patches


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-2
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib
  Resolves: rhbz#563986
  - don't build the _md5 and _sha* modules: rely on _hashlib in hashlib


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-3.el6_0.1
changelog:
  - backport subprocess fixes to use the "poll" system call, rather than "select"
  Resolves: rhbz#668975


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-3.el6_0.2
changelog:
  - allow the "no_proxy" environment variable to override "ftp_proxy" in
  urllib2 (patch 128)
  Resolves: rhbz#671343


author: Jay Fenlason <fenlason@redhat.com> - 1.13-2
changelog:
  - Use macros for lib and include directories, and include dist tag in
    release field.
  - Corrected License field.
  - Corrected Requires lines for libuuid.
  - Add Exclusive-arch x86_64
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include the -execstack patch to get libinfinipath.so correctly
    labeled as not executing the stack.
    Resolves: rhbz612936


author: Andreas Schneider <asn@redhat.com> - 3.6.23-15
changelog:
  - resolves: #1165750 - Fix guid retrieval for published printers.
  - resolves: #1163383 - Fix 'net ads join -k' with existing keytab entries.
  - resolves: #1195456 - Fix starting daemons on read only filesystems.
  - resolves: #1138552 - Fix CPU utilization when re-reading the printcap info.
  - resolves: #1144916 - Fix smbclient NTLMv2 authentication.
  - resolves: #1164336 - Document 'sharesec' command for
                         'access based share enum' option.


author: Andreas Schneider <asn@redhat.com> - 3.6.23-21
changelog:
  - resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
  - resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails


author: Andreas Schneider <asn@redhat.com> - 3.6.23-22
changelog:
  - resolves: #1290706 - CVE-2015-5299
  - related: #1290706 - CVE-2015-5296
  - related: #1290706 - CVE-2015-5252
  - related: #1290706 - CVE-2015-5330


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.0-3
changelog:
  - Rebase to 2.26.0 based on the Fedora 14 package.
  - Retain glib-2.22.5-gio-hide-dot-mounts.patch
  - Drop all other patches.  Code patches were already merged into
    the 2.26.0 tarball, translation patches no longer apply.
  Resolves: #883021


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1 to pick up some additional bug fixes.
  - Remove 0001-message_to_write_data_free-Don-t-unref-data-message-.patch
    (included in 2.26.1).
  Resolves: #883021


author: Colin Walters <walters@redhat.com> - 2.26.1-3
changelog:
  - Explicitly disable systemtap for this rebase; I am not aware
    of a significant number of current users in upstream, and it
    has not to my knowledge been tested in RHEL6.
    Resolves: #1000287


author: David Knox <dknox@redhat.com> 0:6.0.24-23
changelog:
  - Resolves: rhbz 678671 - useradd sets shell to nologin
  - dangling symlink for log4j. Added it as R: and R(post)


author: David Knox <dknox@redhat.com> 0:6.0.24-25
changelog:
  - Installed permissions do not allow tomcat to start
  - incrementing NVR so yum won't get confused with the zstream


author: David Knox <dknox@redhat.com> 0:6.0.24-28
changelog:
  - Resovles  rhbz#695284 - wrapper logs to different locations
  - CVE-2010-4172, CVE-2011-0013, CVE-2010-3718 commented out 
  - until needed.


author: David Knox <dknox@redhat.com> 0:6.0.24-29
changelog:
  - Resolves: rhbz#656403, rhbz#675926, rhbz#676011
  - CVE-2010-4172, CVE-2010-3718, CVE-2011-0013, CVE-2010-4476,
  - CVE-2011-0534


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Add missing documentation for resource agents
    (add_missing_resource_docs.patch)
  - Clean up recursion in scheman output and documentation
    (clean_up_recursion_and_documentation.patch)
    Resolves: rhbz#606470


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-7
changelog:
  - Make vm.sh honor start and stop timeouts
    (Make_vm.sh_use_stop_start_timeouts.patch)
    Resolves: rhbz#606754


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-8
changelog:
  - Make fs-lib resolve links before checking for block devices
    (fix_incorrect_link_resolution_in_fs_lib.patch)
    Resolves: rhbz#609579


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Add NFSv4 server support
    (add_nfsv4_support.patch)
    (install_nfsv4_agent.patch)
    Resolves: rhbz#595547
  - Fix migration mapping behavior
    (fix_migration_mapping_behavior.patch)
    Resolves: rhbz#596918


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Fix changelog for 3.0.12-9 date
  - Add RHEVM status program
    (add_rhevm_status_program.patch)
    Resolves: rhbz#609497


author: Marek Grac <mgrac@redhat.com> - 3.0.12-12
changelog:
  - postgres RA will fail to stop gracefully if there 
    is active client connected
    (sigquit_if_sigterm_was_not_fast_enough.patch)
    Resolves: rhbz#612165
  - new RA for tomcat6
    (resource_agent_tomcat-6.patch)
    (tomcat-6_change_build_system.patch)
    Resolves: rhbz#593721


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-13
changelog:
  - Allow other values for "yes" in fs-lib when unmounting
    file systems
    (fs-lib_allow_other_values_for_yes.patch)
    Resolves: rhbz#614421


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-14
changelog:
  - resource-agents: Drop tomcat-5 from build
    (drop_tomcat_5_from_build.patch)
    Resolves: rhbz#593721


author: Marek Grac <mgrac@redhat.com> - 3.0.12-15
changelog:
  - postgresql RA does not work correctly with netmask
    (psql_does_not_work_correctly_with_netmask.patch)
    Resolves: rhbz#614457


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-15.el6_0.1
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#640190


author: Andreas Schneider <asn@redhat.com> - 3.6.24-44
changelog:
  - resolves: #1451105 - Fix trusted domain handling in winbind
  - resolves: #1431000 - Fix crash while trying to authenticate with a disabled
                         account
  - resolves: #1467395 - Add 'winbind request timeout' option


author: Michael Simacek <msimacek@redhat.com> - 1.7-9
changelog:
  - Replace usages of sun's jpeg codecs with imageio when possible
  - Provide stubs for cases when it's not


author: Lukas Czerner <lczerner@redhat.com> 1.41.12-24
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1474179)
  - resize2fs: create optimized flex_bg block groups (#1474179)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage
  - do not create static libraries (#556052)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-5
changelog:
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
  - TLS-1.2 certificate request compatibility fix


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-9
changelog:
  - documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
    and gnutls-cli-debug(1) manual pages (#648297, #807746)
  - add fallback to import the private keys as PKCS#8 (#745242)
  - silence the strict aliasing warnings


author: Dan Horák <dan@danny.cz> - 1.28-2
changelog:
  - include rescan-scsi-bus script 1.35
  - rebase patches and add fix for issue mentioned in #538787
  - Related: #538787


author: Adam Jackson <ajax@redhat.com> 1.15.0-28
changelog:
  - Restore basic driver Requires: for Xorg
  - Fix CVE-2014-8092-3 patch to be valid C++, fixes tigervnc build


author: Olivier Fourdan <ofourdan@redhat.com> 1.15.0-31
changelog:
  - Synchronize CAPS-Lock state in nested X servers such as Xnest
    and Xephyr (#1161061)
  - Add a new command line option "--auto-display" to xvfb-run to take
    advantage of the XServer's "-displayfd" option to get the display
    number directly from Xfvb (#1049297)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.2
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.3.1-10
changelog:
  - Backported assembler routines from recent gmp-6:
    gmp-s390x-optimization.patch, gmp-s390-31bit-optimization.patch
  - Resolves: #1149237


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.1-11
changelog:
  - Explicitly added '-g' option into CFLAGS to correctly build .debug_info for i386
    Resolves: #729039


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-9
changelog:
  - make sure conversion between aggregates with different
    sizes is never considered useless (#1113878)
  - fix gfortran ICE on old-style initialization of derived type
    components (#1113793)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-10
changelog:
  - backport two further OpenMP 4.0 libgomp tasking fixes (#1099549)
  - fix scheduler wrong-code with DEBUG_INSNs containing volatile ASM_OPERANDS
    (#1127118, PR rtl-optimization/61801)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-12
changelog:
  - only use PCH in toplevel inclusions (#1177458, PR pch/38987, PR pch/52518)
  - don't vectorize bitfield and boolean types (#1150606,
    PR tree-optimization/43390)
  - fix up a Cray pointer handling bug (#1134560, PR fortran/62174)
  - fix up stdarg optimization when address of a va_list variable escapes
    in a phi node (#1190640, PR target/64979)


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-21
changelog:
  - fixfiles verify: do not relabel /tmp and /var/tmp dirs
  Resolves: rhbz#1113083
  - Fix semanage -S <store> -o <output>
  Resolves: rhbz#1122850


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-23
changelog:
  - Move python scripts in /usr/share/system-config-selinux to policycoreutils-python
  Resolves: rhbz#995778


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-26
changelog:
  - restorecond: treat root as a regular user
  Resolves: rhbz#1281877
  - semanage: don't skip reserver_port_t
  Resolves: rhbz#1225806
  - semanage: check if a store exists
  Resolves: rhbz#1208801
  - fixfiles: check the SELinux status
  Resolves: rhbz#1240788


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-27
changelog:
  - sandbox: Improve comments in sysconfig file
  Resolves: rhbz#1159336
  - secon, newrole: fix inconsistence between --help and man page
  Resolves: rhbz#1278811, rhbz#1278913


author: Nathan Scott <nathans@redhat.com> - 3.10.3-1
changelog:
  - Update to latest PCP sources again (BZ 1158681).
  - Fixes bug in s390x /proc/cpuinfo parsing (BZ 1196540).
  - Added explicit PAPI 5.1.1 build dependencies (BZ 1188045).
  - Improved diagnostics for chkconfig-driven service (BZ 1131022).
  - New sub-package for pcp-import-ganglia2pcp.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-2
changelog:
  - Resolve PAPI build dependency issues again (BZ 1188045).
  - Fix Avahi-related pmwebd memory corruption (BZ 1199052).
  - Resolve QA test case failures (BZ 1198031 & BZ 1198981).


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.2
changelog:
  - qemu_hotplug: Don't free the PCI device structure after hot-unplug (rhbz#836916)
  - nodeinfo: Drop static variable (rhbz#836919)
  - nodeinfo: Avoid probing host filesystem during test (rhbz#836919)
  - nodeinfo: Add some more tests (rhbz#836919)
  - nodeinfo: Get the correct CPU number on AMD Magny Cours platform (rhbz#836919)
  - nodeinfo: Test more details (rhbz#836919)
  - drop sanlock on i686 since it is not available anymore


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.3
changelog:
  - sanlock: Fix locking for readonly devices (rhbz#838819)
  - Add support for shared sanlock leases (rhbz#838819)
  - Fix compilation on older sanlock (rhbz#838819)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.4
changelog:
  - daemon: Fix crash in virTypedParameterArrayClear (rhbz#844735)
  - remote: Fix locking in stream APIs (rhbz#847946)
  - Using virOnce for global initialization is desirable (rhbz#847959)
  - json: Fix interface locale dependency (rhbz#847959)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.5
changelog:
  - security: Fix libvirtd crash possibility (CVE-2012-4423)
  - Fix augeas test of shared sanlock leases (rhbz#858988)
  - qemu augeas: Add spice_tls/spice_tls_x509_cert_dir (rhbz#858988)
  - Fix mistakes in augeas lens (rhbz#858988)
  - qemu: Fix failure path in disk hotplug (rhbz#859376)
  - blockjob: Relabel entire existing chain (rhbz#860720)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.6
changelog:
  - rpc: Switch to dynamically allocated message buffer (rhbz#869650)
  - rpc: Size up RPC limits (rhbz#869650)
  - client: Free message when freeing client (rhbz#869650)
  - nodeinfo_test: Enhance test data before changing nodeinfo gathering (rhbz#869723)
  - nodeinfo: Fix gathering of nodeinfo data structure (rhbz#869723)
  - test: Add new test case for nodeinfotest (rhbz#869723)
  - test: Add test case for nodeinfotest if host machine doesn't have NUMA (rhbz#869723)
  - nodeinfo: Deal with offline cpus in a node (rhbz#869723)
  - qemu: Always format CPU topology (rhbz#868972)
  - iohelper: Fdatasync() at the end (rhbz#873292)
  - iohelper: Don't report errors on special FDs (rhbz#873292)
  - Introduce new VIR_DOMAIN_EVENT_SUSPENDED_API_ERROR event (rhbz#874235)
  - qemu: Emit event if 'cont' fails (rhbz#874235)
  - qemu: Allow migration to be cancelled at prepare phase (rhbz#875770)
  - AbortJob: Fix documentation (rhbz#875770)
  - qemu: Avoid deadlock on HandleAgentEOF (rhbz#875788)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.10-21.el6_3.7
changelog:
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#877024)
  - tests: Reduce length of nodeinfodata test names (rhbz#877024)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#877024)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#877024)
  - Wire up handling for QMP's BALLOON_EVENT (rhbz#884713)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.1
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#908836)
  - schema: Make the cpuset type reusable across schema files (rhbz#908836)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
  - capabilities: Add additional data to the NUMA topology info (rhbz#908836)
  - test: Add support for thread and core information for the test driver (rhbz#908836)
  - xen: Initialize variable before using (rhbz#908836)
  - xen: Actually fix the uninitialized variable (rhbz#908836)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913624)
  - qemu_agent: Ignore expected EOFs (rhbz#915344)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
  - qemu: Destroy domain on decompression binary error (rhbz#915347)
  - qemu: Run lzop with '--ignore-warn' (rhbz#915347)
  - Don't ignore return value of qemuProcessKill (rhbz#915353)
  - Fix race condition when destroying guests (rhbz#915353)
  - Log warning if storage magic matches, but version does not (rhbz#915354)
  - Add lots of debugging to storage file probing code (rhbz#915354)
  - Fix probing of QED file format (rhbz#915354)
  - util: Add virendian.h macros (rhbz#915354)
  - util: Use new virendian.h macros (rhbz#915354)
  - storage: Rearrange functions (rhbz#915354)
  - storage: Prepare for refactoring (rhbz#915354)
  - storage: Refactor metadata lookup (rhbz#915354)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
  - storage: Test backing chain traversal (rhbz#915354)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
  - qemu: Add checking in helpers for sgio setting (rhbz#919504)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
  - qemu: Fix the memory leak (rhbz#919504)
  - Fix crash changing CDROM media (rhbz#919504)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
  - qemu: Fix QMP detection of QXL graphics (rhbz#915352)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
  - conf: Add optional attribte primary to video <model> element (rhbz#915352)
  - qemu: Use newer -device video device in qemu commandline (rhbz#915352)
  - tests: Add one -device video device testcase (rhbz#915352)
  - qemu: Detect VGA_QXL capability correctly (rhbz#915352)
  - qemu: Support ram bar size for qxl devices (rhbz#915352)
  - conf: Don't leak 'primary' video property on error (rhbz#915352)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
  - storage: Cleanup logical volume creation code (rhbz#918754)
  - docs: Clarify semantics of sparse storage volumes (rhbz#918754)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
  - locking: Resolve resource leaks on non error path (rhbz#922095)
  - selinux: Resolve resource leak using the default disk label (rhbz#922095)
  - storage: Resolve resource leaks with cmd processing (rhbz#922095)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
  - storage: Need to add virCommandFree() (rhbz#922095)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-4.2
changelog:
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Karel Zak <kzak@redhat.com> 2.17.2-8
changelog:
  - fix #619139 - fsck returns zero instead of error code 
  - fix #621312 - losetup --help returns 1 (fail) for successful command execution
  - fix #651035 - misleading reference to samba-client in mount man page, cifs options
  - fix #612325 - RHEL6.0 Beta-1: Add mkfs.ext4 to mkfs man page
  - fix #650879 - RHEL6: /usr/bin/column segmentation fault
  - fix #626374 - fdisk incorrectly checks alignment for non-512-byte *logical* sectors
  - fix #663731 - sfdisk -d and fdisk -l print /dev/dm-<N>
  - fix #650953 - wipefs(8) does not erase LUKS
  - fix #656453 - libblkid incorrectly revalidated cache entries
  - fix #623012 - lscpu return error after offline cpu
  - fix #616393 - tmpfs mount fails with 'user' option
  - fix #561111 - remount of tmpfs fails on RHEL6 alpha
  - fix #624521 - fsck seems to run quasi-serially
  - fix #657082 - Add lsblk (list block devices) utility
  - fix #625064 - fuse-sshfs mounts cannot be unmounted as user
  - fix #615389 - Output of "mount" is missing mapping displays for loop-mounts
  - fix #616325 - Include findmnt in util-linux-ng package
  - fix #665376 - incorrectly documented the mount "atime" option
  - fix #670770 - lscpu does not identify 32bit capability on AMD
  - fic #671357 - mount.8 man page update for ext{3,4} options


author: Karel Zak <kzak@redhat.com> 2.17.2-11
changelog:
  - fix #678306 - introduce safe variant of uuid_generate_time(), fix locking of counter file
  - fix #678378 - util-linux-ng code review


author: Karel Zak <kzak@redhat.com> 2.17.2-12.1
changelog:
  - fix #723546 - Defects revealed by Coverity scan
  - fix #723352 - cfdisk cannot read default installer partitioning
  - fix #712158 - uid/gid overflow in ipcs
  - fix #696959 - wipefs(8) reject partitioned devices
  - fix #694648 - document blank line at head of fstab
  - fix #684203 - umount fails on inconsistent fstab
  - fix #679831 --lines does not work
  - fix #679741 - canonicalize swap device
  - fix #692119 - include fstrim tool
  - fix #675999 - blkid crashes on a server with more than 128 storage devices
  - fix #696731 - display failed login attempts
  - fix #726092 - Pass host name from agetty to login
  - fix #716995 - Remove Deprecation Statement in /etc/udev/rules.d/60-raw.rules
  - fix #712808 - uuidd should depend on chkconfig
  - fix #723638 - Backport upstream extensions for lsblk (RHEL6.2)


author: Karel Zak <kzak@redhat.com> 2.17.2-12.4
changelog:
  - fix CVE-2011-1675 - mount fails to anticipate RLIMIT_FSIZE
  - fix CVE-2011-1677 - umount may fail to remove /etc/mtab~ lock file


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.107.el6
changelog:
  - kvm-Correct-cpuid-flags-and-model-fields-V2.patch [bz#613892 bz#618332]
  - Resolves: bz#613892
    ([SR-IOV]VF device can not start on 32bit Windows2008 SP2)
  - Resolves: bz#618332
    (CPUID_EXT_POPCNT enabled in qemu64 and qemu32 built-in models.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.108.el6
changelog:
  - kvm-Fix-migration-with-spice-enabled.patch [bz#618168]
  - kvm-virtio-Factor-virtqueue_map_sg-out.patch [bz#607244]
  - kvm-virtio-blk-Fix-migration-of-queued-requests.patch [bz#607244]
  - Resolves: bz#607244
    (virtio-blk doesn't load list of pending requests correctly)
  - Resolves: bz#618168
    (Qemu-kvm in the src host core dump when do migration by using spice)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.109.el6
changelog:
  - kvm-qdev-Reset-hotplugged-devices.patch [bz#607611]
  - kvm-Block-I-O-signals-in-audio-helper-threads.patch [bz#621161]
  - Resolves: bz#607611
    (pci hotplug of e1000, rtl8139 nic device fails for all guests.)
  - Resolves: bz#621161
    (qemu-kvm crashes with I/O Possible message)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.110.el6
changelog:
  - kvm-vhost-Fix-size-of-dirty-log-sync-on-resize.patch [bz#622356]
  - Resolves: bz#622356
    (Live migration failed during reboot due to vhost)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.112.el6
changelog:
  - kvm-qemu-img-rebase-Open-new-backing-file-read-only.patch [bz#624666]
  - Resolves: bz#624666
    (qemu-img re-base broken on RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6
changelog:
  - kvm-disable-guest-provided-stats-on-info-ballon-monitor-.patch [bz#623903]
  - Resolves: bz#623903
    (query-balloon commmand didn't return on pasued guest cause virt-manger hang)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6_0.1
changelog:
  - kvm-virtio-net-Make-tx_timer-timeout-configurable.patch [bz#633963]
  - kvm-virtio-net-Limit-number-of-packets-sent-per-TX-flush.patch [bz#633963]
  - kvm-virtio-net-Rename-tx_timer_active-to-tx_waiting.patch [bz#633963]
  - kvm-virtio-net-Introduce-a-new-bottom-half-packet-TX.patch [bz#633963]
  - Resolves: bz#633963
    (Replace virtio-net TX timer mitigation with bottom half handler)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6_0.2
changelog:
  - kvm-block-Fix-image-re-open-in-bdrv_commit.patch [bz#641835]
  - Resolves: bz#641835
    (Can not commit copy-on-write image's data to raw backing-image)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6_0.3
changelog:
  - ksmtuned: committed_memory of 0 qemus [bz#634249]
  - Resolves: bz#634249
    (incorrect committed memory on idle host)


author: Jindrich Novy <jnovy@redhat.com> 4.999.9-0.3.20091007.beta
changelog:
  - move xz man pages to main package, leave lzma ones where they belong
  - remove URL from Source0, it is a git snapshot


author: Pavel Raiskup <praiskup@redhat.com> - 4.999.9-0.4.beta.20091007git
changelog:
  - fix 'xzgrep -h' to behave as expected (#850898)
  - fix 'xzgrep -l' to behave as expected (#863024)
  - fix 'xzfgrep -F' to behave as expected (#988703)


author: <unknown>
changelog:
  - Added a new CAF::FileEditor module.

  It will allow to access and modify the contents of a file, perhaps
  replacing NCM::Check::lines.


author: <unknown>
changelog:
  - Added head_print method, documentation and fixed the Makefile.

  Added full documentation with a few examples.
  New head_print method, which I hope helps replacing the confusing syntax of
  NCD::Check::lines (or whatever).
  Updated the Makefile to build this module, too.


author: Luis Fernando Muñoz Mejías
changelog:
  - Fix CAF::Reporter::verbose.

  CAF::Reporter objects don't have the debug and verbose flags as part of the object,
  but on the class-wide $_REP_SETUP. So that's the place to look at when we are verifying
  whether or not a verbose message should be output.


author: Luis Fernando Muñoz Mejías
changelog:
  - Fix CAF::FileEditor::print.

  It was not working as expected, as IO::String has the stupid habit of
  resetting the position to 0, so all printings were done on the very beginning
  of the file, instead of at the end.


author: Luis Fernando Muñoz Mejías <lfmunozmejias@gmail.com>
changelog:
  - Add NoAction to Object and stringify to File*

  Process and File* will not do anything if NoAction is present. The
  name is probably not optimal, but it's consistent with what we
  find in NCM::Components.

  Also, it's possible to get the contents of a FileWriter or
  FileEditor as if it was a string, and check if it contains some
  pattern just by doing

  $fh =~ m{regexp};


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-12
changelog:
  - fixed relro flags
  - removed confusing warning message
  - added versioned requirements to silence rpmdiff
  - Resolved: #847291, #812283, #857425


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.2
changelog:
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos
  - Fix the NVR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.3
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.4
changelog:
  - Resolves: rhbz#911298 - sssd: simple access provider flaw prevents intended
                             ACL use when client to an AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.6
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.9
changelog:
  - Resolves: #996020 - sssd fails instead of skipping when a sudo ldap
                        filter returns entries with multiple CNs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.10
changelog:
  - Resolves: #1003567 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Nils Philippsen <nils@redhat.com>
changelog:
  - use better ugettext to allow anaconda to use the time zone widget even with
    encodings other than UTF-8


author: Nils Philippsen <nils@redhat.com> - 1.9.59-1
changelog:
  - require docs in enterprise builds
  - configure iburst mode instead of ntpdate upon boot (original patch by Radek
    Nováček)
  - fix configuring ntp.conf template


author: Jan Synáček <jsynacek@redhat.com> - 1.9.60-3
changelog:
  - replace spaces with underscores when writing ZONE variable into /etc/sysconfig/clock (#956284)
  - set time zone before date/time (#622494)
  - catch unavailable display (#676336)
  - update translations (#814582)


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-26
changelog:
  - Fix a python traceback when the comps groups cannot be loaded
  - Do not substitute '%' in error messages as this is misleading
  - Do not ever run the transaction plugins even for modified configs
  - Resolves: #1268932, #984836, #1204932


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #593458)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)
    (#595828)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596937), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.1
changelog:
  - incorporate candidate patch to fix uninitialized pointer crash in the KDC
    (CVE-2010-1322, #636336)


author: Peter Gordon <peter@thecodergeek.com> - 1.1.15.1-3
changelog:
  - Forcibly disable JIT until we can properly resolve the execmem-caused
    segfaulting. (Temporary workaround until bug #516057 can be properly fixed.)
  - Remove the gnome-keyring build option (no longer used by the build scripts).
  - Correct release value of previous %changelog entry.


author: Matthias Clasen <mclasen@redhat.com> - 1.1.15.2-1
changelog:
  - Update to 1.1.15.2, which has multiple crash and other fixes
  - See https://lists.webkit.org/pipermail/webkit-gtk/2009-October/000040.html


author: Matthias Clasen <mclasen@redhat.com> - 1.1.15.3-1
changelog:
  - Update to 1.1.15.3, more crash fixes and important media player fixes
  - See https://lists.webkit.org/pipermail/webkit-gtk/2009-October/000047.html


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-161
changelog:
  - resolves: #997338 - Fix smbstatus as non root user.
  - resolves: #1003689 - Fix Windows 8 printer driver support.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-164
changelog:
  - resolves: #1008574 - Fix offline logon cache not updating for cross child
                         domain group membership.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.9-169
changelog:
  - resolves: #1105499 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108840 - CVE-2014-3493: DoS in smbd with unicode path names.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Provide Javadoc debug subpackage for now, but populate it from the normal build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-1
changelog:
  - New upstream version, resolves rhbz #766335
  - Build python bindings to satisfy Samba4 BuildRequires


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-2
changelog:
  - Obsolete older pytalloc{,-devel} releases to clear the upgrade path
    towards non-multilib pytalloc
  - Resolves: rhbz#862062


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-5.el6
changelog:
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771910


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-8.el6_3.1
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843741)
  - Fix entities local buffers size problems (rhbz#843741)
  - Fix an error in previous commit (rhbz#843741)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843741)
  - Impose a reasonable limit on comment size (rhbz#843741)
  - Impose a reasonable limit on PI size (rhbz#843741)
  - Cleanups and new limit APIs for dictionaries (rhbz#843741)
  - Introduce some default parser limits (rhbz#843741)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843741)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843741)
  - More avoid quadratic behaviour (rhbz#843741)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843741)
  - More fixups on the push parser behaviour (rhbz#843741)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Joe Orton <jorton@redhat.com> - 2.2.15-6
changelog:
  - ab: fail gracefully for OOM allocating stats structures (#645846)
  - init script: use $STOP_DELAY as delay before SIGKILL of parent (#657480)
  - stop multiple invocations of filter init functions (#631849)
  - mod_ssl: avoid overlapping memcpy (#652335)
  - mark httpd.conf as noreplace


author: Joe Orton <jorton@redhat.com> - 2.2.15-7
changelog:
  - mod_ldap: fix caching with per-vhost directive use (#676635)
  - mod_ssl: fix startup with duplicate SSL vhost configurations (#676831)
  - prefork: ensure early child exit during graceful restart (#679476)


