# changelog

author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593033


author: Tom Lane <tgl@redhat.com> 8.4.4-2
changelog:
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #561010


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812081


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830725


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-24
changelog:
  - fsck.gfs2: add ability to fix GFS (gfs1) file systems (66 patches)
    Resolves: rhbz#675723
  - libgfs2: Don't count sentinel dirent as an entry
    Resolves: rhbz#745161
  - mkfs.gfs2: Improve error messages
    Resolves: rhbz#769400


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-25
changelog:
  - gfs_controld: don't ignore dlmc_fs_register error
    Resolves: rhbz#753300
  - gfs2_edit savemeta: crosswrite four patches from upstream (4 patches)
    Resolves: rhbz#749864
  - gfs2_utils: gfs2_grow fails to grow a filesystem with less than 3 RGs
    Resolves: rhbz#742595
  - gfs2_utils: Improve error messages
    Resolves: rhbz#742293


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-26
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - config: make altname validation position indipendent
    Resolves: rhbz#740552
  - config: drastically improve cman RRP configuration handling
    Resolves: rhbz#733298
  - cman: Improve quorum timer handling how quorum timers work
    Resolves: rhbz#759603
  - qdiskd: Make multipath issues go away
    Resolves: rhbz#678372


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-27
changelog:
  - fenced: fix handling of startup partition merge
    dlm_controld: fix handling of startup partition merge
    Resolves: rhbz#750314


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-30
changelog:
  - config: update relax ng schema to include totem miss_count_const
    Resolves: rhbz#804938
  - cman init: fix start sequence error handling
    Resolves: rhbz#806002


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-32
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - cman notifyd: deliver cluster status on startup
    Resolves: rhbz#819787


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6
changelog:
  - Imported from Fedora into RHEL 6.3 branch
  - Removed unused macros
  - Removed rh740762 patch (removed from Fedora now too)
  - Disabled system lcms (not available in RHEL6)
  - Updated virtual provides to provide "7" specific items
  - Made exclusive arch for i686 and x86_64


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.1
changelog:
  - Synched with 7.0 branch
  - Removed unnecessary unsetting of USE_SYSTEM_LCMS
  - Added SystemTap fixes from Mark Wielaard


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.3
changelog:
  - Added ALT_STRIP_POLICY="no_strip" flag so that binaries are not stripped
  - Collapsed if cases for x86
  - Decreased priority
  - Removed xalan and xerces reqs in favor of libxslt which is what we use


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.3-2.2.1.el6
changelog:
  - Used newly prepared tarball with security fixes
  - Bump to icedtea7-forest-2.2.1
  - _mandir/man1/jcmd-name.1 added to alternatives
  - Updated rhino.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Modified partially upstreamed patch302 - systemtap.patch
  - Temporarly disabled patch102 - java-1.7.0-openjdk-size_t.patch
  - Removed already upstreamed patches 104,108,109,301,110:
    - java-1.7.0-openjdk-arm-ftbfs.patch
    - java-1.7.0-openjdk-system-zlib.patch
    - java-1.7.0-openjdk-remove-mimpure-opt.patch
    - systemtap-alloc-size-workaround.patch
    - java-1.7.0-fix-gio-detection.patch
  - Access gnome bridge jar forced to be 644
  - Added patch303 - java-1.7.0-openjdk-jstack.patch which resolved RH804632 for openjdk6
  - Resolves: rhbz#828759


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6
changelog:
  - Updated priority to be > 17000 and to depend on buildver variable
  - Variable buildver increased to 5 as it should be
  - Resolves: rhbz#828759


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-16.el6
changelog:
  - qemuOpenFile: Don't force chown on NFS (rhbz#810241)
  - util: Fix crash when starting macvtap interfaces (rhbz#815270)
  - qemu: Fix segfault when host CPU is empty (rhbz#817078)
  - blockjob: Allow speed setting in block copy (rhbz#815791)
  - blockjob: Fix block-stream bandwidth race (rhbz#815791)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-17.el6
changelog:
  - qemu: Don't modify domain on failed blockiotune (rhbz#819014)
  - qemu: Reject blockiotune if qemu too old (rhbz#819014)
  - qemu: Don't use virDomainDefFormat* directly (rhbz#815503)
  - qemu: Emit compatible XML when migrating a domain (rhbz#815503)
  - usb: Create functions to search usb device accurately (rhbz#815755)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#815755)
  - virsh: Avoid heap corruption leading to virsh abort (rhbz#819636)
  - util: Fix libvirtd startup failure due to netlink error (rhbz#816465)
  - util: Allow specifying both src and dst pid in virNetlinkCommand (rhbz#816465)
  - util: Function to get local nl_pid used by netlink event socket (rhbz#816465)
  - util: Set src_pid for virNetlinkCommand when appropriate (rhbz#816465)
  - domain_conf: Add "usbredir" to list of valid spice channels (rhbz#819498)
  - domain_conf: Add "default" to list of valid spice channels (rhbz#819499)
  - snapshot: Allow block devices past cgroup (rhbz#810200)
  - blockjob: Allow block devices past cgroup (rhbz#810200)
  - util: Avoid libvirtd crash in virNetDevTapCreate (rhbz#817234)
  - python: Fix the forward_null error in Python binding codes (rhbz#771021)
  - xen: Fix resource leak in xen driver (rhbz#771021)
  - test: Fix resource leak in test driver (rhbz#771021)
  - node: Fix resource leak in nodeinfo.c (rhbz#771021)
  - virnet: Fix resource leak in virnetlink.c (rhbz#771021)
  - vmx: Fix resource leak (rhbz#771021)
  - qemu: Fix resource leak (rhbz#771021)
  - uuid: Fix possible non-terminated string (rhbz#771021)
  - node_device: Fix possible non-terminated string (rhbz#771021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-18.el6
changelog:
  - numad: Set memory policy from numad advisory nodeset (rhbz#810157)
  - numad: Copy 'placement' of <numatune> to <vcpu> by default (rhbz#810157)
  - numad: Always output 'placement' of <vcpu> (rhbz#810157)
  - qemu: Avoid the memory allocation and freeing (rhbz#810157)
  - numad: Divide cur_balloon by 1024 before passing it to numad (rhbz#810157)
  - numad: Check numactl-devel if compiled with numad support (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.2
changelog:
  - qemu_hotplug: Don't free the PCI device structure after hot-unplug (rhbz#836916)
  - nodeinfo: Drop static variable (rhbz#836919)
  - nodeinfo: Avoid probing host filesystem during test (rhbz#836919)
  - nodeinfo: Add some more tests (rhbz#836919)
  - nodeinfo: Get the correct CPU number on AMD Magny Cours platform (rhbz#836919)
  - nodeinfo: Test more details (rhbz#836919)
  - drop sanlock on i686 since it is not available anymore


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.3
changelog:
  - sanlock: Fix locking for readonly devices (rhbz#838819)
  - Add support for shared sanlock leases (rhbz#838819)
  - Fix compilation on older sanlock (rhbz#838819)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.4
changelog:
  - daemon: Fix crash in virTypedParameterArrayClear (rhbz#844735)
  - remote: Fix locking in stream APIs (rhbz#847946)
  - Using virOnce for global initialization is desirable (rhbz#847959)
  - json: Fix interface locale dependency (rhbz#847959)


author: Harald Hoyer <harald@redhat.com> 147-2.34
changelog:
  - add CFLAGS and LDFLAGS to add missing PIE and RELRO flags
  Resolves: rhbz#676004
  - fixed udevadm trigger segmentation fault
  Resolves: rhbz#677857


author: Harald Hoyer <harald@redhat.com> 147-2.36
changelog:
  - handle Vodafone K3565-Z 3G modem
  Resolves: rhbz#632646
  - update path_id to upstream version, which can handle SAS devices that 
    have no enclosure and handles iSCSI devices.
  Resolves: rhbz#698540 rhbz#714951
  - use IFINDEX for temporary network interface renaming
  Resolves: rhbz#701265
  - udev now changes the IO scheduler for all disks except sata disks to the 
    "deadline" scheduler.
  Resolves: rhbz#711254


author: Harald Hoyer <harald@redhat.com> 147-2.37
changelog:
  - add requires for libgudev1 on libudev with version and release
  Resolves: rhbz#727500
  - change import property buffer to 16384 bytes
  Resolves: rhbz#726566


author: Harald Hoyer <harald@redhat.com> 147-2.41
changelog:
  - add "nowatch" option to manpage
  Resolves: rhbz#628762
  - fixed return code of udev-post for "status"
  Resolves: rhbz#735410
  - fixed udev_device_get_devnode()
    backported cdb1d7608a2e2ba708a890eeab6e5e99409a1953
  Resolves: rhbz#784648


author: Jan Friesse <jfriesse@redhat.com> 1.4.0-1
changelog:
  - Resolves: rhbz#709758
  - Resolves: rhbz#722522
  - Resolves: rhbz#692620
  - Resolves: rhbz#529136
  - Resolves: rhbz#696883
  - Resolves: rhbz#707876
  - Resolves: rhbz#712115
  - Resolves: rhbz#722469
  - Resolves: rhbz#696887
  - Resolves: rhbz#707860
  - Resolves: rhbz#712126
  - Resolves: rhbz#712188
  - Resolves: rhbz#599327
  - Resolves: rhbz#667652
  - Resolves: rhbz#677583
  - Resolves: rhbz#688260
  - Resolves: rhbz#707862
  - Resolves: rhbz#707867
  - Resolves: rhbz#707873
  - Resolves: rhbz#707875
  - Resolves: rhbz#682813
  - Rebase to Corosync 1.4.0


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-2
changelog:
  - Resolves: rhbz#722469
  - Resolves: rhbz#732698
  - rrp: Handle endless loop if all ifaces are faulty (rhbz#722469)
  - merge upstream commit dc862e15cc084926eccc5e1ff3241611c0cb54f0 (rhbz#722469)
  - rrp: Higher threshold in passive mode for mcast (rhbz#722469)
  - merge upstream commit 4e32c3112a2f13a302709d72b0ae989287a48563 (rhbz#722469)
  - Ignore memb_join messages during flush operations (rhbz#732698)
  - merge upstream commit be608c050247e5f9c8266b8a0f9803cc0a3dc881 (rhbz#732698)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-3
changelog:
  - Resolves: rhbz#722469
  - totemconfig: change minimum RRP threshold
  - merge upstream commit b1aba94732edc2ff084b7dd559a08b687f464ed0 (rhbz#722469)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4
changelog:
  - Resolves: rhbz#722522

  - Deliver all messages from my_high_seq_recieved to the last gap (rhbz#722522)
  - merge upstream commit e530376a60dc862f135bd0d4c52aebb43d948423 (rhbz#722522)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-5
changelog:
  - Resolves: rhbz#743810
  - Resolves: rhbz#743812
  - Resolves: rhbz#743813
  - Resolves: rhbz#743815
  - Resolves: rhbz#752159
  - Resolves: rhbz#752951
  - Resolves: rhbz#758209
  - Resolves: rhbz#747628

  - coroipcc: use malloc for path in service_connect (rhbz#743810)
  - merge upstream commit 3cfb0792155448d592b043d0d05586c1b76c9499 (rhbz#743810)
  - cpg: Handle errors from totem_mcast (rhbz#743812)
  - merge upstream commit eef5827dbb01433583da7ad5382789c2f83b9696 (rhbz#743812)
  - cfg: Handle errors from totem_mcast (rhbz#743812)
  - merge upstream commit af1b122e68dfeb8a42cf9c682de061859d8077ec (rhbz#743812)
  - A CPG client can sometimes lockup if the local node is in the downlist (rhbz#743813)
  - merge upstream commit ac1d79ea7c14997353427e962865781d0836d9fa (rhbz#743813)
  - Resolve a deadlock between the timer and serialize locks. (rhbz#743815)
  - merge upstream commit 23112099e1c2b620e6976ca099d2b9afc80721aa (rhbz#743815)
  - Add calls to missing object_find_destroy() to fix mem leaks (rhbz#752159)
  - merge upstream commit 9ddb845f412531b6a2761f42823b6be43216a9c8 (rhbz#752159)
  - A rare condition can lead to fail to recv (rhbz#758209)
  - merge upstream commit c68fb0caa2e337c6fdebfe564402c6d06b7fb018 (rhbz#758209)
  - Free mem allocated by getaddrinfo (rhbz#752951)
  - merge upstream commit a973b7cfb0688cd667d32df714014bbf4cf0bc77 (rhbz#752951)
  - corosync and cman conflict on /var/log/cluster permissions (rhbz#747628)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-6
changelog:
  - Resolves: rhbz#741455
  - Resolves: rhbz#797192

  - Store error str if can't open logfile (rhbz#741455)
  - merge upstream commit f954852ef12544de84a9c557316c2612123b5fec (rhbz#741455)
  - Unlink shm buffers if init fails (rhbz#797192)
  - merge upstream commit ab83b695b578e0fa68a238bf26dd3a1e338c7ec6 (rhbz#797192)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-7
changelog:
  - Resolves: rhbz#773720

  - objctl: add missing calls to dispatch notifications and fix memory corruption (rhbz#773720)
  - merge upstream commit dc9b04a7196b316a596036296ac1a78b21717e97 (rhbz#773720)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-7.1
changelog:
  - Resolves: rhbz#849554

  - Fix dbus part of corosync-notifyd (rhbz#849554)
  - merge upstream commit 4ac9cd59e7873914fe5845e69fd79b7a2877c290 (rhbz#849554)
  - flatiron: Free outq items list on conn exit (rhbz#849554)
  - merge upstream commit 4cdaf8ef1e7676b179eaeb5bde18d4b63d17ce52 (rhbz#849554)


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-13.el6
changelog:
  - Fix a problem in the patchset, rhbz#811497 one was applied twice in -12
  - qemu, util: On restart of libvirt restart vepa callbacks (rhbz#812430)
  - qemu, util: Fix netlink callback registration for migration (rhbz#812430)
  - util: Only register callbacks for CREATE operations in virnetdevmacvlan.c (rhbz#812430)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-14.el6
changelog:
  - blockjob: Add new API flags (rhbz#638506)
  - blockjob: Add 'blockcopy' to virsh (rhbz#638506)
  - blockjob: Enhance xml to track mirrors across libvirtd restart (rhbz#638506)
  - blockjob: React to active block copy (rhbz#638506)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#638506)
  - blockjob: Return appropriate event and info (rhbz#638506)
  - blockjob: Support pivot operation on cancel (rhbz#638506)
  - blockjob: Make drive-reopen safer (rhbz#638506)
  - blockjob: Implement block copy for qemu (rhbz#638506)
  - blockjob: Allow for existing files (rhbz#638506)
  - blockjob: Allow mirroring under SELinux (rhbz#638506)
  - blockjob: Accommodate RHEL backport names (rhbz#638506)
  - virsh: Avoid strtol (rhbz#813972)
  - conf: Tighten up XML integer parsing (rhbz#813972)
  - snapshot: Fix memory leak on error (rhbz#782457)
  - virsh: Avoid uninitialized memory usage (rhbz#814080)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-15.el6
changelog:
  - qemu: Improve errors related to offline domains (rhbz#816662)
  - blockjob: Check for active vm before checking blockcopy bits (rhbz#816662)
  - qemu: Preserve original error during migration (rhbz#807907)
  - rpc: Discard non-blocking calls only when necessary (rhbz#807907)
  - qemu: Fix detection of failed migration (rhbz#807907)
  - qemu: Avoid bogus error at the end of tunnelled migration (rhbz#807907)
  - qemu: Make sure qemu can access its directory in hugetlbfs (rhbz#815206)
  - virsh: Fix docs for list command (rhbz#814021)
  - virsh: Fix and clarify the --title flag for the list command in man page (rhbz#814021)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.9-1
changelog:
  - version 2.6.9

    Overview of Changes from GIMP 2.6.8 to GIMP 2.6.9
    =================================================

    * Bugs fixed:

     612618 - Font selection remains visible
     622234 - gimp.desktop: image/x-psd in MimeTypes twice
     622196 - Unportable test(1) construct in configure script
     620604 - Description of "histogram" procedure is slightly inaccurate
     541586 - Tool options not saved/loaded correctly?
     614153 - Importing PDF files with long titles
     600112 - blur-gauss-selective.exe crashes
     599233 - Dialog of "Save as BMP" ignores changes which are not made
              with a mous
     565001 - Text-Tool crashes when edit a 2.4.2 version xcf
     610478 - Layer preview suddenly stops getting updated
     609026 - leaks shared memory
     609056 - Exporting to Alias PIX format fails
     608188 - a few strings in Save as... > Raw image data dialog are always
              in English
     604820 - GEGL Operation "path" crashes GIMP
     603711 - Crashes when using path tool
     607242 - GIMP 2.7.0 fails to build against libpng 1.4.0
     606372 - Saving to .ppm fails on indexed colorspace
     605237 - the "Antialiasing..." message in the progress bar does not show
              translated
     604508 - gimp-layer-new-from-visible should work from updated projection

    * Updated and new translations:

     Asturian (ast)
     Basque (eu)
     Burmese (my)
     Catalan (ca)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)
     German (de)
     Italian (it)
     Latvian (lv)
     Low German (nds)
     Romanian (ro)
     Simplified Chinese (zh_CN)
     Slovenian (sl)
     Ukrainian (uk)
     Valencian (ca@valencia)

  - remove obsolete gtk219, never-stack-trace-desktop, indexed-pnm patches
  - don't manually provide "gimp-libs%{?_isa}" in gimp-libs
  - don't package %{_datadir}/gtk-doc/html, but dirs beneath


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-27.P1
changelog:
  - dhclient-script: fix looking for other running dhclients (#656339)
  - avoid infinite loop when parsing slp-service-scope option (#747017)
  - dhclient-script: arping address in BOUND|RENEW|REBIND|REBOOT (#752116)
  - send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1
changelog:
  - don't flush old addresses in PREINIT (#815355)
  - remove inherit-leases.patch - it's not needed anymore (#815355)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1.1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843120)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843120)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-23
changelog:
  - update gdb debug hooks, showing when a thread is waiting on the GIL, calls
  to C functions and methods, and garbage collections.  Also, better handle the
  case when "f" is optimized out within PyEval_EvalFrameEx, to at least give
  file and function name, even if the line number and locals won't be available
  Resolves: rhbz#711818


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-24
changelog:
  - update uid/gid handling to avoid int overflows seen with uid/gid
  values >= 2^31 on 32-bit architectures
  Resolves: rhbz#697470


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-27
changelog:
  - update "py-bt" in gdb debug hooks to avoiding printing stray <function>
  frames on non-C functions
  Related: rhbz#711818


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-28
changelog:
  - avoid truncating the compilation flags of extension modules that have CFLAGS
  set in their environment
  Resolves: rhbz#727364


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-29
changelog:
  - protect GIL detection within gdb debug hooks against C stack frames that
  lack a name (source 1)
  Related: rhbz#711818
  Resolves: rhbz#736085


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-29.el6_2.1
changelog:
  - distutils.config: create ~/.pypirc securely
  Resolves: CVE-2011-4944
  - fix endless loop in SimpleXMLRPCServer upon malformed POST request
  Resolves: CVE-2012-0845
  - send encoding in SimpleHTTPServer.list_directory to protect IE7 against
  potential XSS attacks
  Resolves: CVE-2011-4940
  - oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
  variable, to provide an opt-in way to protect against denial of service
  attacks due to hash collisions within the dict and set types
  Resolves: CVE-2012-1150


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-29.el6_3.3
changelog:
  - add an RPATH to pyexpat.so to avoid ImportError on XML_SetHashSalt when a
  vanilla build of expat is present in LD_LIBRARY_PATH
  Resolves: rhbz#833271


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-1
changelog:
  - Change package name from libvirt-qpid to libvirt-qmf
  - Convert to QMFv2 API
  - Make libvirt-qmf a matahari agent
    Resolves: #688200
    Related: #688194


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-3
changelog:
  - Ensure all Domain properties are initialized immediately
  - Correct some erroneous error messages
  - Fix quoting of variables in init script
    Resolves: #729127


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.
  - Fix requires to include pygtk2-libglade


author: <dwalsh@redhat.com> - 3.0.45-1
changelog:
  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: <dwalsh@redhat.com> - 3.0.47-3
changelog:
  - Sedispatch is not handling audit messages correctly, 
    this fix allows setroubleshoot to process alerts.
  Resolves: #575686


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.3.3-6
changelog:
  - merge Joe's changes:
  - improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740732)


author: Joe Orton <jorton@redhat.com> - 5.3.3-11
changelog:
  - add security fixes for CVE-2012-0781, CVE-2011-4153, CVE-2012-0057,
    CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-5
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839915


author: Tim Waugh <twaugh@redhat.com> - 8.70-7
changelog:
  - Fixed jbig2dec-nullderef patch (bug #621118).
  - Applied upstream patch to fix iname.c segfault (bug #629562).


author: Tim Waugh <twaugh@redhat.com> - 8.70-13
changelog:
  - Applied patch to prevent null pointer dereference (CVE-2010-4054,
    bug #646086).
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).
  - Applied patch to avoid reading initialization and library files from
    CWD (CVE-2010-2055, bug #599564; CVE-2010-4820, bug #771853).


author: Tim Waugh <twaugh@redhat.com> - 8.70-14
changelog:
  - Fixed character spacing problems using backported patch (bug #695766).
  - Apply some fixes from upstream to avoid gdevcups segfaults (bug #643105).


author: Jiri Skala <jskala@redhat.com> - 0.99.12-3
changelog:
  - fixed #516005 - Errors installing quagga-0.99.11-2.fc11.i586 with --excludedocs
  - fixed #522787 - quagga: build future versions without PAM


author: Adam Tkac <atkac redhat com> - 0.99.15-7.1
changelog:
  - fix CVE-2011-3323
  - fix CVE-2011-3324
  - fix CVE-2011-3325
  - fix CVE-2011-3326
  - fix CVE-2011-3327
  - fix CVE-2012-0255
  - fix CVE-2012-0249 and CVE-2012-0250
  - fix CVE-2012-1820


author: Jarod Wilson <jarod@redhat.com> [2.6.32-277.el6]
changelog:
  - [scsi] be2iscsi: fix dma free size mismatch regression (Mike Christie) [824287]
  - [scsi] libsas: check dev->gone before submitting sata i/o (David Milburn) [824025]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-278.el6]
changelog:
  - [kernel] sysctl: silence warning about missing strategy for file-max at boot time (Jeff Layton) [803431]
  - [net] sunrpc: make new tcp_max_slot_table_entries sysctl use CTL_UNNUMBERED (Jeff Layton) [803431]
  - [drm] i915: set AUD_CONFIG N_value_index for DisplayPort (Dave Airlie) [747890]
  - [scsi] scsi_lib: fix scsi_io_completion's SG_IO error propagation (Mike Snitzer) [827163]
  - [fs] nfs: Fix corrupt read data after short READ from server (Sachin Prabhu) [817738]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.1.1.el6]
changelog:
  - [kernel] Prevent keyctl new_session from causing a panic (David Howells) [833433 827424] {CVE-2012-2745}
  - [net] ipv6/netfilter: fix null pointer dereference in nf_ct_frag6_reasm() (Petr Matousek) [833410 833412] {CVE-2012-2744}
  - [fs] nfs: Map minor mismatch error to protocol not support error (Steve Dickson) [832365 796352]
  - [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate() (Lukas Czerner) [833034 830209]
  - [ata] libata: Add 2GB ATA Flash Disk/ADMA428M to DMA blacklist (Prarit Bhargava) [832363 812904]
  - [netdrv] r8169: fix typo in firmware filenames (Ivan Vecera) [832359 829211]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.2.1.el6]
changelog:
  - [net] bonding: Fix up refcounting issues with bond/vlan config (Neil Horman) [837843 836164]
  - [net] bonding: Always add vid to new slave group (Neil Horman) [837227 834764]
  - [net] bonding: fix regression on vlan module removal (Neil Horman) [837218 823822]
  - [kernel] futex: Fix uninterruptible loop due to gate_area (Jerome Marchand) [836904 834038]
  - [kernel] futex: Fix regression with read only mappings (Jerome Marchand) [836904 834038]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.4.1.el6]
changelog:
  - [fs] proc: stats: Use arch_idle_time for idle and iowait times if available (Steve Best) [841579 841149]
  - [drm] i915: fix integer overflow in i915_gem_execbuffer2() (Jacob Tanenbaum) [824553 824555] {CVE-2012-2383}
  - [usb] core: change the memory limits in usbfs URB submission (Don Zickus) [841667 828271]
  - [usb] core: unify some error pathways in usbfs (Don Zickus) [841667 828271]
  - [netdrv] ixgbe: BIT_APP_UPCHG not set by ixgbe_copy_dcb_cfg() (Andy Gospodarek) [840156 814044]
  - [netdrv] ixgbe: driver fix for link flap (Andy Gospodarek) [840156 814044]
  - [net] bridge: Fix enforcement of multicast hash_max limit (Thomas Graf) [840023 832575]
  - [net] bluetooth: fix sco_conninfo infoleak (Jacob Tanenbaum) [681307 681308] {CVE-2011-1078}
  - [wireless] ipw2200: remove references to CFG80211_WEXT config option (John Linville) [841406 839311]
  - [netdrv] be2net: enable GRO by default (Ivan Vecera) [838821 837230]
  - [virt] kvm/vmx: Fix KVM_SET_SREGS with big real mode segments (Orit Wasserman) [841411 756044]
  - [fs] writeback: merge for_kupdate and !for_kupdate cases (Eric Sandeen) [832360 818172]
  - [fs] writeback: fix queue_io() ordering (Eric Sandeen) [832360 818172]
  - [fs] writeback: don't redirty tail an inode with dirty pages (Eric Sandeen) [832360 818172]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.5.2.el6]
changelog:
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]


author: Joe Orton <jorton@redhat.com> - 1.3.9-4
changelog:
  - add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
  - add fix for CVE-2011-0419 (#703520)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.43.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787144
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed upstreamed patch7 - java-1.6.0-openjdk-6_2-Z-rmi-fix.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Sync with 6.3:
  - Bump to IcedTea6 1.11.3
  - With removed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Including patch7 - java-1.6.0-openjdk-jstack.patch
  - Including patch3, java-1.6.0-openjdk-java-access-bridge-security.patch modification
  - Resolves: rhbz#828751


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828751


author: Ian Main <imain@redhat.com> 0.2.22-1
changelog:
  - Fix init script to return 2 when invoked with no arguments and add try-restart
    to usage list.  Resolves: #570492


author: Jeff Law <law@redhat.com> - 2.12-1.78
changelog:
  - Fix option rotate with single IPV6 server (#804630)
    - Fix loading first object along a path when tracing (#808337)
    - Don't free non-malloced memory.  (#809602)


author: Jeff Law <law@redhat.com> - 2.12-1.80.el6_3.3
changelog:
  - Fix incorrect/corrupt patchfile for 833716.  Did not
      affect generated code, but tests were missing (#833716).


author: Jeff Law <law@redhat.com> - 2.12-1.80.el6_3.5
changelog:
  - Fix integer overflow leading to buffer overflow in strto*
    and related out of bounds array index (#847931)


author: Jarod Wilson <jarod@redhat.com> [2.6.32-272.el6]
changelog:
  - [md] bitmap: ensure to load bitmap when creating via sysfs (Jes Sorensen) [821329]
  - [infiniband] mlx4: fix RoCE oops (Doug Ledford) [749059]
  - [x86] setup: Add rh_check_supported() (Prarit Bhargava) [821561]
  - [mm] read_pmd_atomic: fix pmd_populate SMP race condition (Andrea Arcangeli) [820762] {CVE-2012-1179}
  - [drm] i915: add Ivy Bridge GT2 Server entries (Dave Airlie) [817926]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-273.el6]
changelog:
  - [s390] qeth: remove siga retry for HiperSockets devices (Hendrik Brueckner) [817090]
  - [scsi] lpfc: Changed version number to 8.3.5.68.5p (Rob Evers) [821515]
  - [scsi] lpfc: Fixed system crash due to not providing SCSI error-handling host reset handler (Rob Evers) [821515]
  - [scsi] lpfc: Correct handling of SLI4-port XRI resource-provisioning profile change (Rob Evers) [821515]
  - [scsi] lpfc: Fix driver crash during back-to-back ramp events. (Rob Evers) [821515]
  - [scsi] lpfc: Fixed system panic due to midlayer abort and driver complete race on SCSI cmd (Rob Evers) [821515]
  - [scsi] sd: Fix device removal NULL pointer dereference (Rob Evers) [817853]
  - [md] Add del_timer_sync to mddev_suspend, fixes a panic (Jonathan E Brassow) [818371]
  - [virt] virtio_net: invoke softirqs after __napi_schedule (Michael S. Tsirkin) [819435]
  - [virt] virtio_net: do not reschedule rx refill forever (Michael S. Tsirkin) [819435]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-274.el6]
changelog:
  - [net] sunrpc: fix loss of task->tk_status after rpc_delay call in xprt_alloc_slot (Jeff Layton) [822189]
  - [net] sunrpc: suppress page allocation warnings in xprt_alloc_slot() (Jeff Layton) [822189]
  - [net] netfilter: Fix ip_route_me_harder triggering ip_rt_bug (Jiri Benc) [812108]
  - [net] netfilter/tproxy: do not assign timewait sockets to skb->sk (Jiri Benc) [812108]
  - [usb] Don't fail USB3 probe on missing legacy PCI IRQ (Don Zickus) [812254]
  - [usb] Fix handoff when BIOS disables host PCI device (Don Zickus) [812254]
  - [usb] Remove duplicate USB 3.0 hub feature #defines (Don Zickus) [812254]
  - [usb] Set hub depth after USB3 hub reset (Don Zickus) [812254]
  - [usb] xhci: Fix encoding for HS bulk/control NAK rate (Don Zickus) [812254]
  - [usb] Fix issue with USB 3.0 devices after system resume (Don Zickus) [812254]
  - [virt] xenpv: avoid paravirt __pmd in read_pmd_atomic (Andrew Jones) [822697]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-275.el6]
changelog:
  - [net] bridge: fix broadcast flood regression (Jesper Brouer) [817157]
  - [ipc] mqueue: use correct gfp flags in msg_insert (Doug Ledford) [750260]
  - [security] fix compile error in commoncap.c (Eric Paris) [806726] {CVE-2012-2123}
  - [security] fcaps: clear the same personality flags as suid when fcaps are used (Eric Paris) [806726] {CVE-2012-2123}
  - [fs] proc: Fix vmstat crashing with trap divide error (Larry Woodman) [820507]
  - [net] rds: fix rds-ping inducing kernel panic (Jay Fenlason) [803936] {CVE-2012-2372}
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [814504] {CVE-2012-2136}
  - [virt] kvm: Fix buffer overflow in kvm_set_irq() (Avi Kivity) [816155] {CVE-2012-2137}


author: Doug Ledford <dledford@redhat.com> - 1.0.15-1
changelog:
  - Update to latest upstream release (adds FDR support and fixes 696019 the
    upstream way)
  - Include fixes in git not yet in a release
  - Related: bz750609
  - Resolves: bz700289


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812082


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852020


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831561
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.1-1
changelog:
  - Backport hivex package from Fedora Rawhide.
  - Exclude s390, s390x because of lack of OCaml packages.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Rebase to upstream version 1.2.4 (RHBZ#642631).
    * Python bindings (python-hivex subpackage).
    * Adds hivex_set_value API call (Conrad Meyer).
    * Miscellaneous small bug fixes.
  - Fix Source0.
  - Fix builds with recent perl (Dan Horák).


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-3
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4
changelog:
  - Rebase to upstream version 1.3.3
    resolves: rhbz#734208
  - Add upstream patch: hivexml: Remove unused variable.
  - Add upstream patch: hivex: Added gnulib includes from builddir [...]


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-11
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  - 1.2.10.2-10 was built from the private branch


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-12
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  - Resolves: Bug 821542 - letters in object's cn get converted to lowercase when renaming object


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-14
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  -- patch 0015 fixes a small memleak in previous patch


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-16
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  - Resolves: Bug 830256 - Audit log - clear text password in user changes


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-17
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0019 fixes deref issue.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-18
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0020 disallows users' direct modify on unhashed#user#password


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-19
changelog:
  - Resolves: Bug 834096 - slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)


author: Harald Hoyer <harald@redhat.com> 004-268
changelog:
  - fixed dracut manpage
  Resolves: rhbz#703164
  - fixed assembling of mdraid degraded arrays
  Resolves: rhbz#761584
  - fixed ifup to set broadcast address
  Resolves: rhbz#752584
  - fixed iscsiroot for multiple iscsi disks
  Resolves: rhbz#752066


author: Harald Hoyer <harald@redhat.com> 004-271
changelog:
  - no vconfig requirement anymore
  Resolves: rhbz#714039
  - new option --omit-drivers
  Resolves: rhbz#722879
  - suppress udevadm settle output
  Resolves: rhbz#747840
  - extend lsinitrd to cope with xz images
  Resolves: rhbz#752005
  - respect primary console setting
  Resolves: rhbz#752073


author: Harald Hoyer <harald@redhat.com> 004-273
changelog:
  - fixed option --omit-drivers
  Resolves: rhbz#722879
  - increase wait time for network interfaces to get UP to 10s
  Resolves: rhbz#794863


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-11
changelog:
  Resolves: #771464
  Resolves: #771465
  Resolves: #771466
  Resolves: #771467
  Resolves: #771473
  Resolves: #771475


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-21
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25.1
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - update to 0.4.0
  - Modified the dependency to be libvirt-client instead of libvirt.
  - Added libvirt APIs up through 0.7.0
  - Added maven building tools.
  - Fixed connection and domain bugs found by Thomas Treutner
  - Resolves: rhbz#554348


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - update to upstream 0.4.1
  - better scheduler parameters checking and error reporting 
  - Resolves: rhbz#557066


author: Daniel Veillard <veillard@redhat.com> - 0.4.2-2
changelog:
  - Missing /usr/share/javadoc/libvirt symlink
  - Resolves: rhbz#579037
  - Allow libvirt-java build on all architecture, lower require to java >= 1.5
  - Resolves: rhbz#582294


author: Daniel Veillard <veillard@redhat.com> - 0.4.5-1
changelog:
  - rebase to 0.4.5
  - Added libvirt support up to 0.8.1 API
  - Improved packaging for javadocs
  - Better Free/Close handling
  - Resolves: rhbz#582332


author: Daniel Veillard <veillard@redhat.com> - 0.4.7-1
changelog:
  - rebase to 0.4.7
  - Added libvirt support up to 0.8.2 API
  - Only throw errors on real errors.
  - Remote non thread safe error reporting
  - fix 600819 Incorrect scheduler parameter value passed to native API.
  - Resolves: rhbz#675044


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-8
changelog:
  - Resolves: rhbz#798983 Kannada langpack missing
  - Resolves: rhbz#798926 fix endianess assumptions of lotuswordpro filter
  - Resolves: rhbz#800272 complain about unknown commandline options


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-12
changelog:
  - Resolves: rhbz#810267 better CSV import default separators
  - Resolves: rhbz#807392 focus problems and tearable menus


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-13
changelog:
  - Resolves: rhbz#809466 libreoffice-core (unintentionally) provides
    libraptor.so.1()() and librdf.so.0()()


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.9.rc1
changelog:
  - fix race condition in the resolver module
  - nslookup: return non-zero exit code when fail to get answer (#816164)


author: Jeff Law <law@redhat.com> - 2.12-1.74
changelog:
  - Correctly handle large response to AF_UNSPEC dns lookup (#795498)
    - Always use another area after a failed allocation in the
     main arena (#795328)


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011l-3
changelog:
  - State of Bahia, Brazil, to resume Summer Time on Oct 16
  - The project moved, reflect this in URL
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011n-1
changelog:
  - Rebase to 2011n
    - Cuba postponed DST by two weeks to Nov 13
    - Fiji will enter DST on Jan 21
  - Add a patch for the leap second that will occur this summer
  - Resolves: #773755


author: Petr Machata <pmachata@redhat.com> - 2011n-2
changelog:
  - The Chilean Government has decided to postpone the entrance into
    winter time (to leave DST) from March 11 2012 to April 28th 2012
  - Resolves: #796569


author: Petr Machata <pmachata@redhat.com> - 2012b-1
changelog:
  - Rebase to 2012b; changes vs. 2011n-2:
    - Changes to zones for Antarctica stations
    - Armenia abolished DST in 2012 and forward
    - Cuba enters DST on 31st March
    - Falkland Islands will stay on permanent Summer Time
    - New zone for Creston Valley, Canada, which differs from Dawson
      Creek in past stamps.  Changes to historical stamps in Canada.
    - Last year, Tokelau skipped over the date line together with Samoa
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012b-2
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820732


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.9-1.el6
changelog:
  - Update to 2.7.9 (RH bug #616917).
  - Remove patches now included upstream:
      pidgin-2.6.6-clientLogin-proxy-fix.patch
      pidgin-2.6.6-clientLogin-use-https.patch
      pidgin-2.6.6-CVE-2010-1624.patch
      pidgin-2.6.6-CVE-2010-3711.patch
  - Disable the translation updates patch.  It doesn't apply anymore and
    will have to be redone.  Saving the patch for now in case some parts
    are still useful to translators.


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.9-5.el6.1
changelog:
  - Add patch for CVE-2012-1178 (RH bug #837560).
  - Add patch for CVE-2012-2318 (RH bug #837560).
  - Add patch for CVE-2012-3374 (RH bug #837560).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - Build libraries with -fpic/-fPIC, not with -fPIE (#736999)
  - Add dhcp-common subpackage (#736194)
  - Do not run dhcpd as root (#693381)
    - Use '--enable-paranoia' configure flag
    - Create dhcpd user in %pre
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'
    - Move changing of the effective user/group ID after writing new PID file.


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.2.rc1
changelog:
  - harden dns_zone_setmasterswithkeys() to avoid INSIST failures
  - build with '--enable-fixed-rrset'
  - fix potential memory leak in code which processes rndc authentication
    (#749582)
  - generate rndc.key during `service named start` (#768798)
  - nslookup: improve handling of AA responses with recursion off
  - removed obsolete bind97-rh714049.patch patch


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.3.rc1
changelog:
  - decrease severity of various errors related to outside DNS environment
    (#788870)
  - fixed various bind-chroot packaging errors (#789886)
  - use portreserve to reserve rndc control port (#790682)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-38
changelog:
  - fixed snmpd crashing with many AgentX subagent (#749227)
  - fixed SNMPv2-MIB::sysObjectID value when "sysObjectID" config file
    option with long OID was used (#786931)
  - fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
  - fixed parsing of "proxy" snmpd.conf option not to enable
    verbose logging by default (#746903)
  - added new "realStorageUnits" config file option to support
    disks > 16 TB in hrStorageTable (#741789)
  - added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
    (#746903)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#748907)
  - fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
    SNMP-SET request on 64-bit platforms (#754275)
  - fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
    SELinux context (#754971)
  - fixed memory leak when agentx subagent disconnects in the middle
    of request processing (#736580)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#788954)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.48
changelog:
  - Add 0124-RHBZ-751039-fix-shutdown.patch
    * make sure to test if the threads have been cancelled after locking
  - Add 0125-RHBZ-727429-dont-print-exec-fails.patch
  - Add 0126-RHBZ-740760-kpartx-man-page.patch
  - Add 0127-RHBZ-737051-add-netapp-brand.patch
  - Add 0128-RHBZ-796384-fix-alua.patch
    * gerneralize the vpd 0x83 handling
  - Add 0129-RHBZ-788963-eternus-config.patch
  - Add 0130-RHBZ-754586-use-sync-support.patch 
    * multipathd and kpartx now use udev_sync_support. They just don't
      use any cookies
  - Add 0131-RHBZ-662433-override-queue-no-daemon.patch
    * make queue_without_daemon default to off, but make service restart
      override that so, you won't fail IO on restart.
  - Add 0132-RHBZ-744756-regex-hw-match.patch
    * add hwtable_regex_match parameter, which makes the user device entries
      in multipath.conf regex with the builtin ones to override them.
  - Add 0133-RHBZ-744210-config-changes.patch
    * default max_fs to "max" and make user_friendly_names configurable in
      the devices and multipaths section.
  - Add 0134-RHBZ-769527-fix-flush-on-last-del.patch
  - Resolves: bz #662433, #727429, #737051, #740760, #744210, #744756, #751039
  - Resolves: bz #754586, #769527, #788963, #796384


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.49
changelog:
  - Modify 0132-RHBZ-744756-regex-hw-match.patch
    * The regex comparison was working in the wrong direction.
  - Modify 0133-RHBZ-744210-config-changes.patch
    * add missing entries to store_hwe
  - Add 0135-RHBZ-798541-build-options.patch
    * build rpm with RPM_OPT_FLAGS
  - Add 0136-RHBZ-799908-ibm-xiv.patch
  - Add 0137-RHBZ-799842-change-netapp-config.patch
  - Add 0138-RH-fix-strings.patch
    * fix two spots where multipath wasn't checking string size before copying
  - Pass RPM_OPT_FLAGS to make
  - Resolves: bz #798541, #799842, #799908
  - Related: bz #744210, #744756


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.50
changelog:
  - Modify 0135-RHBZ-798541-build-options.patch
    * switch from compiling with -lpthread to -pthread, to make sure
      and use reentrant versions of functions.
  - Related: bz #798541


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.51
changelog:
  - Add 0139-RHBZ-800288-netapp-devloss.patch
    * Set fast_io_fail_tmo and dev_loss_tmo for netapp devices
  - Add 0140-RHBZ-803527-blacklist-management-luns.patch
  - Resolves: bz #800288, #803527


author: Benjamin Marzinski <bmarzins@redaht.com> -0.4.9.52
changelog:
  - Modify 0130-RHBZ-754586-use-sync-support.patch
    * This fix now just calls dm_task_update_nodes() after renaming the
      the devices.
  - Refresh 0110-RHBZ-725541-04-serialize-startup.patch
  - Refresh 0131-RHBZ-662433-override-queue-no-daemon.patch
  - Refresh 0135-RHBZ-798541-build-options.patch
  - Resolves: bz #805809


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.54
changelog:
  - Modify 0132-RHBZ-744756-regex-hw-match.patch (bz #802630)
    * Added documentation to the multipath.conf man page
  - Modify 0138-RH-fix-strings.patch (bz #810208)
  - Resolves: bz #802630, #810208


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.55
changelog:
  - Modify 0131-RHBZ-662433-override-queue-no-daemon.patch
    * enforce queueing on condrestart as well
  - Add 0142-RHBZ-769527-fix-features-build.patch
    * remove "queue_if_no_path" feature when flushing due to
      "flush_on_last_del"
  - Add 0143-RHBZ-467709-followover-chkr-state.patch
    * Only failback if the path checker's reported state has changed
  - Resolves: bz #467709, #769527
  - Related: bz #662433


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.56
changelog:
  - Modify 0137-RHBZ-799842-change-netapp-config.patch
    * Add pg_init_retries to netapp config
  - Add 0144-RHBZ-812832-shutdown-crash.patch
    * kill waiter threads with pthread_cancel() instead of SIGUSR1
  - Resolves: bz #799842, #812832


author: Benjmain Marzinski <bmarzins@redhat.com> -0.4.9.56.el6_3.1
changelog:
  - Add 0145-RHBZ-831045-realloc-vector.patch
    * fix deleting items from vector, and handle error cases
  - Resolves: bz #837594


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-151
changelog:
  - Add openstack-nova, openstack-keystone, openstack-glance, openstack-quantum policies
  - Allow sysadm_t to create other crontabs
  - Allow nfsd_t to read defaul_t link files
  - Fix labeling for /var/run/heartbeat
  - Fixes for admin_template() interface to make sysadm_secadm.pp module working correctly
  - More fixes for condor policy
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Fix auth_role() interface
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-152
changelog:
  - Add label for condor_starter
  Resolves:#807682
  - Dontaudit sys_module for brctl
  - Allow winbind to send signull to smbd
  - Add jacorb port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-154
changelog:
  - Allow fenced to manage snmpd lib files
  - Allow certmonger to get attributes on init script files
  Resolves:#790967
  - Fix labeling for Firefox plugins
  Resolves:#747993
  - Add mta_signal_user_agent() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155
changelog:
  - Allow setroubleshootd to execute rpm
  Resolves:#833053
  - Add labeling for /usr/lib/flash-plugin/libflashplayer.so


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155.4
changelog:
  - Make condor_startd_ssh domain as unconfined
  - Allow condor_startd_ssh to connect to kerberos_master port
  Resolves:#852456


author: Richard Hughes <rhughes@redhat.com> - 2.28.2-1
changelog:
  - Update to 2.28.2
  - Remove the original package from the dep-confirmation screen
  - Ignore generic errors such as 'Failed' and do not show UI in this case
  - Use the desktop icon when we unselect the installed application in gpk-application. Fixes fd#25098


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-0.1.20091211git
changelog:
  - New snapshot from the gnome-2-28 branch
  - Don't show the selected packages as deps of the to be updated packages.
    Note, this only affects PackageKit >= 0.5.5. Fixes rh#546247
  - Check the GpkDbusTask object only replies once to each session request


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - When we ask to logout, actually logout, rather than shutdown
  - Don't hide the restart status icon just because the daemon exited
  - Don't check for updates every day when the user had specified 'Never'
  - Allow the user to select the GPG key information to be able to verify it
  - Fix the error when the user clicks the about menu item
  - Fix a crash where the desktop file that was installed has no root directory
  - Fix a crash when the process-working icon has zero height
  - Resolves: #585086


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-2
changelog:
  - Backport a patch from upstream that adds support for support media repos
    such as those found on additional CDs or DVDs.
  - This patch just calls GetUpdates after a detected media repo is inserted,
    which is enough for PackageKit to add the repo to the default set, and for
    the repo to be used in all the GNOME and KDE tools.
  - This patch will not add explicit support for media repos in client programs,
    so the media is not requested if it is not inserted when the package tools
    are open. This functionality can be backported at a later time if required.
  - Resolves: #591534


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Don't allow shutting down when a transaction is active and cannot
    be cancelled.
  - Resolves: #669798


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-20
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#730311)
  - fix regression: openldap built without tcp_wrappers (#742592)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-21
changelog:
  - fix: ldapsearch crashes with invalid parameters (#743781)
  - fix: replication (syncrepl) with TLS causes segfault (#783445)
  - fix: openldap server in MirrorMode sometimes fails to resync via syncrepl (#784211)
  - use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
  - fix: missing options in manual pages of client tools (#745470)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
  - fix: slapd segfaults when certificate key cannot be loaded (#796808)
  - Jan Synáček <jsynacek@redhat.com>
    + fix: overlay constraint with count option work bad with modify operation (#742163)
    + fix: Default SSL certificate bundle is not found by openldap library (#742023)
    + fix: Duplicate close() calls in OpenLDAP (#784203)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-23
changelog:
  - security fix: CVE-2012-1164: assertion failure by processing search queries
    requesting only attributes for particular entry (#813162)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-24
changelog:
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
  - fix: memberof overlay on the frontend database causes server segfault (#730745)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
changelog:
  - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
  - fix: memory leak: def_urlpre is not freed (#816168)
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26.2
changelog:
  - CVE-2012-2668 (#825875)
    + cipher suite selection by name can be ignored
    + default cipher suite is always selected


author: Petr Sabata <contyk@redhat.com> - 0.9.43-12
changelog:
  - lldpad: fix core dump (#749943)
  - Support for multiple filter info formats (#731407)
  - Updating documentation for previous commit (#749057)


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6
changelog:
  - Added patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
    to fix vulnerability until it is fixed in upstream sources. 
  - Resolves: rhbz#852299


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6.3
changelog:
  - Removed patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
  - Applied upstream patches for same issue:
     patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
     patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
     patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
     patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
     patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
  - Resolves: rhbz#852299


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.41.1.11.1
changelog:
  - Resolves: rhbz#771971
  - Updated to IcedTea6 1.11.1
  - Security fixes:
    - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object
    - S7082299, CVE-2011-3571: AtomicReferenceArray insufficient array type check
    - S7110687, CVE-2012-0503: Unrestricted use of TimeZone.setDefault
    - S7110700, CVE-2012-0505: Incomplete info in the deserialization exception
    - S7110683, CVE-2012-0502: KeyboardFocusManager focus stealing
    - S7088367, CVE-2011-3563: JavaSound incorrect bounds check
    - S7126960, CVE-2011-5035: Add property to limit number of request headers to the HTTP Server
    - S7118283, CVE-2012-0501: Off-by-one bug in ZIP reading code
    - S7110704, CVE-2012-0506: CORBA fix


author: Mark Wielaard <mjw@redhat.com> - 1:1.6.0.0-1.42.1.11.1
changelog:
  - Resolves: rhbz#804632
  - Added patch7 java-1.6.0-openjdk-jstack.patch based on upstream patches:
    http://thread.gmane.org/gmane.comp.java.openjdk.distro-packaging.devel/17667


author: Mark Wielaard <mjw@redhat.com> - 1:1.6.0.0-1.45.1.11.1
changelog:
  - Resolves: rhbz#804632
  - Tweak java-1.6.0-openjdk-jstack.patch stack to remove two uses of sprintf
    to make it work against systemtap 1.7.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Updated to IcedTea6 1.11.3
  - Removed upstreamed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828752


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828752


author: Deepak Bhole <dbhole@redhat.com> 1.1.1-1
changelog:
  - Bump to 1.1.1
  - Removed icedtea-web-shared-classloader.patch (now upstream)
  - Updated alternative removal commands to reflect the situation in RHEL6
  - Resolves: rhbz#713514


author: Deepak Bhole <dbhole@redhat.com> 1.1.2-1
changelog:
  - Updated to 1.1.2
  - Resolves: rhbz#683479
  - Resolves: rhbz#725794
  - Resolves: rhbz#718181 
  - Resolves: rhbz#731358
  - Resolves: rhbz#725718
  - Use the new --with-jre-home switch (#731358)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-9
changelog:
  - Resolves: Bug 815991 - crash in ldap_initialize with multiple threads
  -  previous fix was still crashing in ldclt


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-26
changelog:
  - backport patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761523)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761523)
  - backport patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761523)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-27
changelog:
  - reintroduce patch to accept keytab entries with vno==0 as matches when
    we're searching for an entry with a specific name/kvno (#782211)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-28
changelog:
  - when processing etype-info and etype-info2 preauth hints, remember them all,
    and if we fail to generate enc_timestamp preauth data due to a
    key-table-entry-not-found error with a given set of hints, move on to try the
    next one until we run out of hints (#748528)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-29
changelog:
  - backport fixes to GSSAPI to obtain creds for all available mechanisms when we
    don't specify a mechanism when acquiring credentials, and to not try to use
    the default credential when accepting an initiator token for a mechanism for
    which we have no verifier creds (#799161, RT#6894)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-30
changelog:
  - move removal of krb5-user.info from %postun to %preun, and use the name
    of the compressed file (#801033)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-31
changelog:
  - backport fixes for retrying a request with referrals disabled if we get
    a referral to the same realm (#786216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-32
changelog:
  - revise the fix for #748528 so that it correctly resets the shallow
    etype_info list in cases where we get both etype-info and etype-info2


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33
changelog:
  - selinux: reliably reset the file creation context after setting it when we
    flush replay caches, in cases where there was none explicitly set beforehand
    (#813883)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.1
changelog:
  - add candidate patch from upstream to fix freeing uninitialized pointer in
    the KDC (MITKRB5-SA-2012-001, CVE-2012-1015, #839859)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.2
changelog:
  - pull up the patch to correct a possible NULL pointer dereference in
    kadmind (CVE-2012-1013, #827517)


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Jaromir Capik <jcapik@redhat.com> - 6.3.2-63.el6_3.3
changelog:
  - Resolves: rhbz#838998
  - Fixing 'sa -u' SIGSEGVs & wrong UIDs
  - Fixing the ChengeLog version typos ... 6.2.3 -> 6.3.2


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-6
changelog:
  - removed the --with-ldap-*conf options
  - added RELRO flags
    Resolves: rhbz#709235
    Resolves: rhbz#709859


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-8
changelog:
  - created a separate ldap configuration file, sudo-ldap.conf
  - visudo: mark unused aliases as warnings, not errors
  - backported signal handling from 1.7.5
  - don't disable coredumping from the code, rely on /proc/sys/fs/suid_dumpable
  - use correct SELinux context when editing files with sudoedit
  - fixed visudo syntax checks
  - fixed typos and inconsistencies in documentation
  - switched to an updated -getgrouplist patch to fix sudo -l -U <user> behavior 
    Resolves: rhbz#760843
    Resolves: rhbz#736030
    Resolves: rhbz#697775
    Resolves: rhbz#726634
    Resolves: rhbz#708515
    Resolves: rhbz#736653
    Resolves: rhbz#667120
    Resolves: rhbz#769701
    Resolves: rhbz#751680
    Resolves: rhbz#604297
    Resolves: rhbz#797511


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-9
changelog:
  - fixed uninitialized value warning introduced with the sudoedit-selinux patch
    Resolves: rhbz#806386


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10
changelog:
  - fixed bug in Runas_Spec group matching (#810147)
  - disable `sudo -l' output word wrapping if the output
    is piped (#810326)
  - fixed `sudo -i' command escaping (#806095)
    Resolves: rhbz#806095
    Resolves: rhbz#810147
    Resolves: rhbz#810326


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10.1
changelog:
  - backported ldap code modifications that fix an issue with tls_checkpeer (#810372)
    Resolves: rhbz#810372


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-11
changelog:
  - use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK (#821976)
    Resolves: rhbz#821976


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-147
changelog:
  - Fix man pages for SELinux users
  - Allow all user domains to setexec
  - Allow cobblerd to get SELinux status and booleans
  - Add labeling for /etc/zipl.conf
  Resolves:#813803
  - Allow fenced to read SNMP lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-149
changelog:
  - Add labeling for /usr/sbin/matahari-dbus-sysconfigd
  - Add additional labeling for zarafa
  - Allow guest_t to fix labeling
  - Corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - squashfs does not support xattr in RHEL6
  Resolves:#815898
  - Remove pyzor labeling and move it to spamassassin.fc
  - Fix config.tgz


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - Fix the double suspend on lid close issue when not using KMS hardware.
  - Resolves: #543948


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Do not ask the user to look at the help file on suspend failure,
    it is already out of date.
  - Resolves: #640296


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-5
changelog:
  - Reinstate the "Do nothing" option on the lid close combo because
    per-screen DPMS does not work in RHEL6.
  - Resolves: #623674


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-27
changelog:
  - last update of init script modified to work with SELinux correctly
  - added support for new configuration option - file limit for service


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-28
changelog:
  - fixed an issue with flooding log with error messages (see fedora bug #573764)
  - fixed issue with segfaulting tcpmux service (fedora bug #543968)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-34
changelog:
  - Avoid possible hang while logging an unexpected signal (#694820)
  - Fix Rpmdiff build warning about "dereferencing type-punned pointer" (#697783)
  - Let RPC services bind to a specific port (#697788)
  - Prevent memory corruption error while using large number of services (#711787)
  - Fix coverity defects in poll patch (#715303)


author: Adam Tkac <atkac redhat com> - 1.1.0-0.5.b1
changelog:
  - don't crash on stop/reload when no zones are found in LDAP (#805814)
  - compute SOA attributes correctly when modifying it (#805871)


author: Petr Holasek <pholasek@redhat.com> - 2:0.55-32
changelog:
  - NUMA awareness bits were thrown away (from #673234 and #798648)
  - Mistake in sysconfig documentation was fixed (bz 732435)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - updated 'delloem setled' command to indicate SES status and drive
    activities for a PCI-e SSD (#727314)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - added -Y option for ipmitool to hide Kg key from cmdline (#698647)
  - added 'channel setkg' command to set Kg encryption key on remote machine
    (#726390)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-11
changelog:
  - fixed delloem powermonitor on bigendian systems (#731718)
  - fixed memory leak in Serial-over-Lan module (#731977)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-13
changelog:
  - added new options to configure retransmissions on lan/lanplus interfaces
    (#748073)
  - updated dellem command (#739358)
  - fixed exit code of ipmitool -o list (#715615)
  - improved checking of command line arguments (#725993)


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  Resolves: #547808
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Milan Broz <mbroz@redhat.com> - 0.1.4-1
changelog:
  - Fix thin_check man page (add -q option).
  - Install utilities in /usr/sbin.
    Resolves: #803204 #803144


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.4-3.3
changelog:
  - Drop ocaml-camomile* dependency (RHBZ#661783).
  - Document background noise of RX packets from bridges (RHBZ#647987).
  - Fix pad function to work for negative widths (RHBZ#634435).
  - Fix virt-top --end-time option when TZ<>UTC (RHBZ#637964).
  - Document that memory option shows total guest memory (RHBZ#647991).
  - Remove references to xm/xentop manual pages (RHBZ#648186).
  - Record and print full exception stack traces to aid debugging.
    This also requires OCaml 3.11.0 so update BR.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.4-3.8
changelog:
  - Fix --end-time option with absolute times.
    resolves: RHBZ#680344
  - Fix documentation for virt-top -c option.
    resolves: RHBZ#676979


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.4-3.10
changelog:
  - docs: Explain how to debug libvirt initialization problems
    resolves: RHBZ#680031
  - Show domain memory information in csv mode.
    resolves: RHBZ#680027
  - Add processcsv.py file and documentation.
    resolves: RHBZ#665817


