# changelog

author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-192
changelog:
  - Label /usr/lib/yaboot/addnote as bin_t
  - Allow postfix_local to read/write /var/spool/postfix/active
  - Allow postfix domains to list /tmp
  - Allow wdmd to transition to kdump
  Resolves:#887793
  - Add labeling for /var/named/chroot/etc/localtime


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-193
changelog:
  - Fix ssh_sysadm_login boolean for MLS
  Resolves:#865759
  - Allow rpm_script_t to dbus communicate with certmonger_t
  - More fixes for qemu-ga to make "guest-fsfreeze-freeze" working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-194
changelog:
  - qdiskd needs to read usr_t/bin_t files
  - Allow dpsam to connect/bind to spamd ports
  - Allow munin services plugins to bind to generic node
  Resolves:#865759


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195
changelog:
  - Make matahari domains as unconfined
  - Allow nscd to connect to nmbd
  Resolves:#901565
  - Allow setcap/getcap for syslogd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.2
changelog:
  - Allow cgred to use notify
  Resolves:#917966
  - Allow mount to transition to gluster
  Resolves:#917972


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.4
changelog:
  - Allow dirsrv-admin server to be restarted from console 
  Resolves:#955703
  - Allow dac_override for openshift-cron


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.el6
changelog:
  - added patch1000 MBeanFix.patch to fix regressions caused by security patches
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.3.el6
changelog:
  - removed upstreamed patch1000 MBeanFix.patch
  - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
  - Resolves: rhbz#973119


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.25-2.3.10.4.el6
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.3.el6:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - Related: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.0.el6
changelog:
  - security update to 2.3.13
  - adapted java-1.7.0-openjdk-disable-system-lcms.patch (and redeclared to 105)
  - removed bootstrap
  - fixed nss
  - fixed buildver and updatever (Set to 25,30)
  - moved to xz compression of sources
  - all patches moved correctly to prep
  - added patch404 tck20131015_1.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.1.el6
changelog:
  - removed useless  patch404 tck20131015_1.patch
  - added patch405 tck20131015_2.patch, to resolve one of tck failures
  - added patch406 tck20131015_3.patch, to resolve one of tck failures
  - added patch407 tck20131015_4.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.2.el6
changelog:
  - updated to newer security tarball of 2.3.13
  - removed patch405 tck20131015_2.patch, no longer necessary to fix tck failures
  - removed patch406 tck20131015_3.patch, no longer necessary to fix tck failures
  - removed patch407 tck20131015_4.patch, no longer necessary to fix tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.3.el6
changelog:
  - added back patch404 tck20131015_1.patch, to resolve one of tck failures
  - added back patch405 tck20131015_2.patch, to resolve one of tck failures
  - added back patch406 tck20131015_3.patch, to resolve one of tck failures (modified)
  - added back patch407 tck20131015_4.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.1.el6
changelog:
  - sync with rhel 6.5 to icedtea 2.4 because of pernament tck failures
   - nss kept disabled
  - Resolves: rhbz#1017626


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.9-6.el6
changelog:
  - Add patch for CVE-2012-1178 (RH bug #837560).
  - Add patch for CVE-2012-2318 (RH bug #837560).
  - Add patch for CVE-2012-3374 (RH bug #837560).


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.2
changelog:
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos
  - Fix the NVR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.3
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.4
changelog:
  - Resolves: rhbz#911298 - sssd: simple access provider flaw prevents intended
                             ACL use when client to an AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.6
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.9
changelog:
  - Resolves: #996020 - sssd fails instead of skipping when a sudo ldap
                        filter returns entries with multiple CNs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.10
changelog:
  - Resolves: #1003567 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-3
changelog:
  - Add info message when USB dialog is empty
    Resolves: rhbz#804187
  - Properly reset usb channels after non-seamless migration
    Resolves: rhbz#861332
  - Fix read error handling for USB redirection
    Related: rhbz#842354
  - Auto-discover already plugged-in USB devices
    Resolves: rhbz#820964
  - Add support for disabling Ctrl+Alt+Del
    Resolves: rhbz#807771


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-4
changelog:
  - Fix application of Patch2, it includes the git commit log which
    contained a diff hunk which %patch happily applied, which caused
    https://bugzilla.redhat.com/show_bug.cgi?id=804187#c9
    Related: rhbz#804187


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.14-5
changelog:
  - Apply color conversion when creating image
    Resolves: rhbz#843134
  - Show correct ungrab key combination in spicy
    Resolves: rhbz#851090
  - Fix sending 00 scancodes to guests
    Resolves: rhbz#868237
  - Improve open_host() debugging message
    Resolves: rhbz#858232
  - Empty host subject from qemu should only validate hostname
    Resolves: rhbz#858228
  - Fix disabling mouse acceleration on X11
    Resolves: rhbz#867885
  - use more explicit SSL error message
    Resolves: rhbz#846666


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-6
changelog:
  - Don't ask for root/admin password when users want to redirect USB
    devices
    Resolves: rhbz#859392


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.348.el6
changelog:
  - kvm-spice-add-new-spice-server-callbacks-to-ui-spice-dis.patch [bz#879559]
  - kvm-vmmouse-add-reset-handler.patch [bz#884450]
  - kvm-vmmouse-fix-queue_size-field-initialization.patch [bz#884450]
  - kvm-hw-vmmouse.c-Disable-vmmouse-after-reboot.patch [bz#884450]
  - kvm-block-Fix-vpc-initialization-of-the-Dynamic-Disk-Hea.patch [bz#887897]
  - kvm-block-vpc-write-checksum-back-to-footer-after-check.patch [bz#887897]
  - Resolves: bz#879559
    (spice with non-qxl vga dumps core)
  - Resolves: bz#884450
    (after change mac address of guest, mouse inside guest can not be used after system_reset in qemu)
  - Resolves: bz#887897
    (Backport vpc initialization of the Dynamic Disk Header fix)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.349.el6
changelog:
  - kvm-pc-rhel6-compat-enable-S3-S4-for-6.1-and-lower-machi.patch [bz#886798]
  - kvm-e1000-no-need-auto-negotiation-if-link-was-down.patch [bz#890288]
  - kvm-rtl8139-preserve-link-state-across-device-reset.patch [bz#890288]
  - kvm-pci-assign-Enable-MSIX-on-device-to-match-guest.patch [bz#886410]
  - Resolves: bz#886410
    (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)
  - Resolves: bz#886798
    (Guest should get S3/S4 state according to machine type to avoid cross migration issue)
  - Resolves: bz#890288
    (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
  - Resolves: bz#886410
    (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.350.el6
changelog:
  - kvm-raw-posix-add-raw_get_aio_fd-for-virtio-blk-data-pla.patch [bz#877836]
  - kvm-configure-add-CONFIG_VIRTIO_BLK_DATA_PLANE.patch [bz#877836]
  - kvm-vhost-make-memory-region-assign-unassign-functions-p.patch [bz#877836]
  - kvm-dataplane-add-host-memory-mapping-code.patch [bz#877836]
  - kvm-dataplane-add-virtqueue-vring-code.patch [bz#877836]
  - kvm-event_notifier-add-event_notifier_set.patch [bz#877836]
  - kvm-dataplane-add-event-loop.patch [bz#877836]
  - kvm-dataplane-add-Linux-AIO-request-queue.patch [bz#877836]
  - kvm-iov-add-iov_discard_front-back-to-remove-data.patch [bz#877836]
  - kvm-iov-add-qemu_iovec_concat_iov.patch [bz#877836]
  - kvm-virtio-blk-Turn-drive-serial-into-a-qdev-property.patch [bz#877836]
  - kvm-virtio-blk-define-VirtIOBlkConf.patch [bz#877836]
  - kvm-virtio-blk-add-scsi-on-off-to-VirtIOBlkConf.patch [bz#877836]
  - kvm-dataplane-add-virtio-blk-data-plane-code.patch [bz#877836]
  - kvm-virtio-blk-add-x-data-plane-on-off-performance-featu.patch [bz#877836]
  - kvm-virtio-pci-fix-virtio_pci_set_guest_notifiers-error-.patch [bz#877836]
  - Resolves: bz#877836
    (backport virtio-blk data-plane patches)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.351.el6
changelog:
  - kvm-qxl-save-qemu_create_displaysurface_from-result.patch [bz#885644]
  - Resolves: bz#839832
    (qemu-ga: document selinux policy for read/write of guest files)
  - Resolves: bz#885644
    (Memory leak and use after free in qxl_render_update_area_unlocked())


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.352.el6
changelog:
  - kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
  - kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
  - kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
  - Resolves: bz#895392
    (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.353.el6
changelog:
  - kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
  - kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
  - kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
  - kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
  - kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
  - Resolves: bz#869981
    (Cross version migration between different host with spice is broken)
  - Resolves: bz#876982
    (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
  - Resolves: bz#894995
    (core dump when install windows guest with x-data-plane=on)
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.354.el6
changelog:
  - spec: add Epoch to old_conflict_ver
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6
changelog:
  - kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
  - kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
  - kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
  - kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
  - kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
  - Resolves: bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.356.el6
changelog:
  - kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
  - Resolves: bz#907397
    (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)


author: Martin Stransky <stransky@redhat.com> - 17.0.6-4
changelog:
  - Added a workaround for rhbz#961687 - Prelink throws message 
    "Cannot safely convert .rel.dyn' section from REL to RELA"


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.6
changelog:
  - Allow myslqd-safe to execute shell_exec_t
  Resolves:#966997
  - Allow openshift-cron to read openshift link files in /var/lib


author: David Knox <dknox@redhat.com> 0:6.0.24-46
changelog:
  - Resolves: rhbz 847288 classloader deadlock compiler JSPs
  - Resolves: rhbz 785954 HTML filtering needed
  - Resolves: rhbz 798617 init gives incorrect status


author: David Knox <dknox@redhat.com> 0:6.0.24-48
changelog:
  - Resolves: rhbz 576540 - regression init script in the 
  - wrong place. Changed _initrddir definition herein to point to the 
  - right place.


author: David Knox <dknox@redhat.com> 0:6.0.24-50
changelog:
  - Resolves: rhbz 882010 CVE-2012-3439 CVE-2012-5885 CVE-2012-5886 CVE-2012-5887
  - three DIGEST authentication issues
  - Resolves: rhbz 883692 CVE-2012-4534 Denial of service when using
  - SSL NIO sendfile
  - Resolves: rhbz 883705 CVE-2012-3546 Bypass of Realm security constraints


author: David Knox <dknox@redhat.com> 0:6.0.24-52
changelog:
  - Related: rhbz 882010 rhbz 883692 rhbz 883705
  - Javadoc generation did not work. Using targetrhel-6.4.Z-noarch-candidate
  - to avoid building on ppc64, ppc, and x390x.


author: David Knox <dknox@redhat.com> 0:6.0.24-54
changelog:
  - Resolves: rhbz#956771 Related: CVE-2012-3439 digest 
  - authentication broken after errata for cve-2012-3439
  - patch for 3439 corrected


author: David Knox <dknox@redhat.com> 0:6.0.24-55
changelog:
  - Related: rhbz#955976 CVE-2013-1976. Changed log location
  - so only root can use it. Touching TOMCAT_LOG is no longer
  - required


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-11
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #737096


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - rebase to rsyslog-5.8.7
    - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
      http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
    - remove patches obsoleted by rebase
    - add patches for better sysklogd compatibility (taken from upstream)
    - update included files for the new major version
    Resolves: #672182
    Resolves: #727380
    Resolves: #756664
    Resolves: #767527
    Resolves: #769025
  - add several directories for storing auxiliary data
    Resolves: #740420
  - fix source package URL


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Petr Machata <pmachata@redhat.com> - 1.41.0-8
changelog:
  - Import 1.41.1 with fixes from Fedora 13 to RHEL 6
  - Turn off OpenMPI support on s390*, which isn't available in RHEL 6
  - Resolves: #571607


author: Petr Machata <pmachata@redhat.com> - 1.41.0-9
changelog:
  - Use a .gz archive instead of bz2, because that's what's hosted now.
    Fill in the full URL.
  - Resolves: #571607


author: Petr Machata <pmachata@redhat.com> - 1.41.0-10
changelog:
  - Turn on OpenMPI support on non-s390 arches.  It was accidentally
    turned off everywhere.
  - Move cmake files to libdir to avoid multilib conflicts.
  - Also install Boost.cmake, which is included by BoostConfig.cmake
  - Change soname selection to work on RHELs.
  - Resolves: #586204
  - Resolves: #592516
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11
changelog:
  - ... and revert the soname change, because that's not the smartest
    thing to do mid-release.
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-16
changelog:
  - Fix a GCC warning for looser throw specifier in
    boost::exception_ptr::~exception_ptr.
    (boost-1.41.0-exception_ptr.patch)


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-8
changelog:
  - use the default template for bz reports rhbz#747410
  - fix adding users to CC in bugzilla rhbz#841338
  - Resolves: #747410, #841338


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-10
changelog:
  - updated translation rhbz#864025
  - fixed brewtap warnings rhbz#812283
  - silence few rpmdiff warnings rhbz#857425
  - Resolves: #864025, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-12
changelog:
  - fixed relro flags
  - removed confusing warning message
  - added versioned requirements to silence rpmdiff
  - Resolved: #847291, #812283, #857425


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.1
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917909, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.2
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950342)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.4
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#978312)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.5
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #1000313)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.6
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #1002179)


author: Karel Zak <kzak@redhat.com> 2.17.2-12.4
changelog:
  - fix CVE-2011-1675 - mount fails to anticipate RLIMIT_FSIZE
  - fix CVE-2011-1677 - umount may fail to remove /etc/mtab~ lock file


author: Karel Zak <kzak@redhat.com> 2.17.2-12.5
changelog:
  - fix #588419 - Changing the console login timeout
  - fix #740163 - 'fdisk -l' returns confusing output
  - fix #785142 - uuidd service not active by defaul
  - fix #797888 - script does not play well with csh when invoked from within /etc/csh.login


author: Karel Zak <kzak@redhat.com> 2.17.2-12.8
changelog:
  - fix #679833 - [RFE] tailf should support `-n 0`
  - fix #719927 - [RFE] add adjtimex --compare functionality to hwclock
  - fix #730272 - losetup does not warn if backing file is < 512 bytes
  - fix #730891 - document cfdisk and sfdisk incompatibility with 4096-bytes sectors
  - fix #736245 - lscpu segfault on non-uniform cpu configuration
  - fix #783514 - default barrier setting for EXT3 filesystems in mount manpage is wrong
  - fix #790728 - blkid ignores swap UUIDs if the first byte is a zero byte
  - fix #818621 - lsblk should not open device it prints info about
  - fix #819945 - hwclock --systz causes a system time jump
  - fix #820183 - mount(8) man page should include relatime in defaults definition
  - fix #823008 - update to the latest upstream lscpu and chcpu
  - fix #837935 - lscpu coredumps on a system with 158 active processors
  - fix #839281 - inode_readahead for ext4 should be inode_readahead_blks
  - fix #845477 - Duplicate SElinux mount options cause mounting from the commandline to fail
  - fix #845971 - while reading /etc/fstab, mount command returns a device before a directory
  - fix #858009 - login doesn't update /var/run/utmp properly
  - fix #809449 - Backport inverse tree (-s) option for lsblk and related patches
  - fix #809139 - lsblk option -D missing in manpage


author: Jeff Law <law@redhat.com> - 2.12-1.104
changelog:
  - Change from magic environment variable to existance of
      magic file /etc/sysconfig/32bit_ssse3_mempy_via_32bit_ssse3_memmove
      to trigger change in memcpy behavior. (#846342, #865375)
    - Fix IPTOS_CLASS #define. (#864322)


author: Jeff Law <law@redhat.com> - 2.12-1.107
changelog:
  - Simplify test for magic file to change memcpy behaviour
      and correctly handle encoded return value from inlined
      syscall (#846342, #874642)
    -


author: Patsy Franklin <pfrankli@redhat.com> - 2.12.1.107.3
changelog:
  - Consistantly MANGLE/DEMANGLE function pointers and
      fix use after free in dcigettext.c (#989558).


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - updated 'delloem setled' command to indicate SES status and drive
    activities for a PCI-e SSD (#727314)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - added -Y option for ipmitool to hide Kg key from cmdline (#698647)
  - added 'channel setkg' command to set Kg encryption key on remote machine
    (#726390)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-11
changelog:
  - fixed delloem powermonitor on bigendian systems (#731718)
  - fixed memory leak in Serial-over-Lan module (#731977)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-13
changelog:
  - added new options to configure retransmissions on lan/lanplus interfaces
    (#748073)
  - updated dellem command (#739358)
  - fixed exit code of ipmitool -o list (#715615)
  - improved checking of command line arguments (#725993)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-11
changelog:
  - Fix case where reshape of IMSM RAID fails because we don't check the
    return value when trying to read the word 'degraded' from sysfs,
    resulting in the use of random stack data.
  - Resolves bz824815


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-1
changelog:
  - Update mdadm to upstream release v3.2.5
    This includes all current patches, except for
    mdadm-3.2.3-imsm-fix-correct-checking-volume-s-degradation.patch
  - Resolved bz812358


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Avoid corruption by prohibiting an IMSM array from spanning multiple
    controllers (bz878810)
  - Prevent creation of a second IMSM array of size 0 (bz880208)
  - Avoid segfault when running mdadm --detail on an IMSM raid1 array
    where two drives have been disabled (bz880225)
  - Resolves bz878810, bz880208, bz880225


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.1
changelog:
  - Z-Stream fix
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Fix problem with IMSM RAID5 not rebuilding after reboot
  - Resolves bz958024, bz960612


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.2
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1001493


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.3
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1009243


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-122
changelog:
  - Resolves: rhbz#738421 - Package bzip2 modules
  - Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915692 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915692 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915692 - CVE-2013-1667 (DoS in rehashing code)


author: Elio Maldonado - 3.12.9-12
changelog:
  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#927158 - rebase nss-softokn to 3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.1
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#915336),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #915336


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.2
changelog:
  - add mssing sensor RDRs for the fan resource (#969003)
  - fix openhpi connection failures with redundant OAs (#969004)
  - fix segfaults when retrieving thermal info (#969005)
  - add missing thermal sensors (#969006)
  - Resolves: #969003, #969004, #969003, #969006


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage
  - do not create static libraries (#556052)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-5
changelog:
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
  - TLS-1.2 certificate request compatibility fix


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-9
changelog:
  - documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
    and gnutls-cli-debug(1) manual pages (#648297, #807746)
  - add fallback to import the private keys as PKCS#8 (#745242)
  - silence the strict aliasing warnings


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911525


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.58.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.60.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.62.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973129


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-5
changelog:
  - Fix various migration related bugs
    * don't process both cmd ring and dispatcher queue till migration data is received
    * fix assigning bad memory references to marshaller
    * fix memory corruption when receiving display migration data that exceeds 1024 bytes
    Resolves: rhbz#866929
    Resolves: rhbz#862352
    Resolves: rhbz#878700


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-7
changelog:
  - Fix mishandling of agent data received from the client after agent disconnection
    Resolves: rhbz#881980


author: Uri Lublin <uril@redhat.com> 0.12.0-9
changelog:
  - Fix calling set_client_capabilities when it is unsupported by qemu
    (fixes a crash when qemu-kvm is started with spice but without qxl)
    Resolves: rhbz#880276


author: Yonit Halperin <yhalperi@redhat.com> - 0.12.0-12.el6_4.1
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#956984
    Resolves: rhbz#961427


author: Jay Fenlason <fenlason@redhat.com> - 1.13-2
changelog:
  - Use macros for lib and include directories, and include dist tag in
    release field.
  - Corrected License field.
  - Corrected Requires lines for libuuid.
  - Add Exclusive-arch x86_64
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include the -execstack patch to get libinfinipath.so correctly
    labeled as not executing the stack.
    Resolves: rhbz612936


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-4
changelog:
  - for prelink -u -o ... if no .gnu.prelink_undo section is
    present just pass through the original bits to the output file
    instead of saving the ELF file using libelf into a temporary
    and then copying over or renaming that to the final output file
    (#614382)


author: Jakub Jelinek <jakub@redhat.com> 0.4.4-1
changelog:
  - support copying over extended attributes (#456105)
  - handle DW_OP_GNU_implicit_pointer, fix handling of DW_OP_call_ref


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-1
changelog:
  - enable for arm (#733089)
    - adjust arm default dynamic linker
    - fix up fast PIE detection to handle PT_LOPROC ... PT_HIPROC phdrs
      before PT_PHDR
    - disable cxx{1,2}.sh test checking for conflict removal on arm
      due to EABI weirdnesses, add new cxx3.sh test that tests conflict
      removal even on arm


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3
changelog:
  - add --layout-page-size=N option, default to --layout-page-size=32768
    on AMD Bulldozer (#739460)
  - handle 0%{?rhel} >= 7 like 0%{?fedora} >= 13


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3.1
changelog:
  - fix saving of cache if some dependencies are unprelinkable and their                                            
    dependencies bad (#788238)                                                                                      
  - fix up DWARF4 DW_AT_data_member_location handling                                                               
  - add .debug_macro support                                                                                        
  - add DWZ multifile support


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.8.1.el6
changelog:
  - Added and applied patch 116 - patch 116 rh905128-non_block_ciphers.patch
  - Added and applied patch 117 - patch 117 java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
   - to enable handleStartupErrors = ignoreMultipleInitialisation in icedtea 2.3
  - Restorered removed nss support
  - Fixed java-1.7.0-openjdk-nss-config-{1,2} patches to be valid for icedtea 2.3.x
  - enable_nss switch to 0 - disabled
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.8.2.el6
changelog:
  - Added latest Fedora spec changes
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - classes.jsa marked as ghost on full path
    - see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
  - nss.cfg was marked as config(noreplace)
  - Add symlink to default soundfont (see 541466)
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.9.0.el6
changelog:
  - updated to IcedTea  2.3.9 with latest security patches
  - buildver sync to b19
  - rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.1.el6
changelog:
  - updated to updated IcedTea  2.3.9 with fix to one of security fixes
    -  fixed font glyph offset
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.el6
changelog:
  - Updated to latest IcedTea7-forest 2.3.10
  - patch 107 renamed to 500 for cosmetic purposes
  - improved handling of patch111 - nss-config-2.patch
  - removed patch 117, java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
    duplicated with patch 108 (java-1.7.0-openjdk-nss-icedtea-e9c857dcb964)
  - Added client/server directories so they can be owned
  - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
  - Resolves: rhbz#973119


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-23
changelog:
  - security fix: CVE-2012-1164: assertion failure by processing search queries
    requesting only attributes for particular entry (#813162)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-24
changelog:
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
  - fix: memberof overlay on the frontend database causes server segfault (#730745)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
changelog:
  - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
  - fix: memory leak: def_urlpre is not freed (#816168)
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-28
changelog:
  - CVE-2012-2668 (#825875)
    + cipher suite selection by name can be ignored
    + default cipher suite is always selected


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-29
changelog:
  - fix: invalid order of TLS shutdown operations (#818572)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
  - fix: reading pin from file can make all TLS connections hang (#829319)
  - fix: replication with TLS does not work (#707599)
  - fix: some TLS ciphers cannot be enabled (#852339)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
  - fix: MozNSS certificate database in SQL format cannot be used (#857390)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
  - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
  - fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-21
changelog:
  - mod_proxy_ajp: ignore flushing if headers have not been sent (#853160)
  - mod_proxy_ajp: do not mark worker in error state when one request
    timeouts (#864317)
  - mod_ssl: do not run post script if all files are already created (#752618)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-22
changelog:
  - mod_cache: fix header merging for 304 case, thanks to Roy Badami (#868283)
  - mod_cache: fix handling of 304 responses (#868253)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-25
changelog:
  - htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
  - rotatelogs: omit the second arg when invoking a post-rotate program (#876923)


author: Martin Stransky <stransky@redhat.com> - 10.0.8-2
changelog:
  - Fixed rhbz#865284 - add the storage.nfs_filesystem
    config key to property list
  - disable OOP for wrapped plugins (nspluginwrapper)


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested
    + Warn about node names containing a capital letter
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-4
changelog:
  - Resolves: rhbz#816875
  - Update to upstream db9410b

    + Cluster: Detect node name collisions in corosync
    + Cluster: Strip domains from node names by default
    + Core: Prevent ordering changes when applying xml diffs
    + Fencing: On failure, only try a topology device once from the remote level.
    + Fencing: Retry stonith device for duration of action's timeout period.
    + Fencing: Support 'on_target' option in fencing device metadata for forcing unfence on target node
    + mcp: Re-attach to existing pacemaker components when mcp fails
    + pengine: Bug cl#5101 - Ensure stop order is preserved for partially active groups
    + pengine: Bug cl#5111 - When clone/master child rsc has on-fail=stop, insure all children stop on failure.
    + pengine: Correctly unpack active anonymous clones
    + pengine: Support a 'requires' resource meta-attribute for controlling whether it needs quorum, fencing or nothing
    + pengine: Support resources that require unfencing before start


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-5
changelog:
  - Resolves: rhbz#877364
  - Update to upstream e69dfc1

    + attrd: Correctly handle deletion of non-existant attributes
    + cib: Do not pass local variables to mainloop_add_fd() when creating remote connections
    + Cluster: Do not strip the domain from node names calculated from uname(2)
    + Core: Supply the correct number of arguments for the format string
    + corosync: Avoid errors when closing failed connections
    + fencing: Automatically append 'nodeid' to fencing agent args if it is detected agent supports 'nodeid' parameter
    + mcp: chmod the correct directory instead of /var/run
    + pengine: Prevent double-free for cloned primitive from template


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-6
changelog:
  - Resolves: rhbz#877364
  - Update to upstream d20d06f

    + cib: Avoid use-after-free by correctly support cib_no_children for non-xpath queries
    + cib: Remove text nodes from cib replace operations
    + Cluster: Preserve corosync membership state when matching node name/id entries
    + cman: Do not wait for unmanaged resources during shutdown
    + cman: Ensure reliable shutdown
    + cman: Ignore qdisk 'nodes'
    + Core: Prevent use-of_NULL in IPC code
    + corosync: Ensure peer state is preserved when matching names to nodeids
    + crmd: Avoid filling the ipc queue with data we don't need
    + crmd: Prevent election storms caused by getrusage() values being too close
    + Fencing: Correctly terminate when all device options have been exhausted
    + Fencing: Record delegated self-fencing operations in case they fail
    + legacy: Re-enable logging from the pacemaker plugin
    + pengine: Bug rhbz#880249 - Ensure orphan masters are demoted before being stopped
    + pengine: Bug rhbz#880249 - Teach the PE how to recover masters into primitives
    + pengine: Ensure previous migrations are completed before attempting another one
    + tools: crm_report - Fix node list detection


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-7
changelog:
  - Resolves: rhbz#880249
  - Update to upstream ca7bf5e

    + Fencing: Only try peers for non-topology based operations once
    + tools: Have crm_resource generate a valid transition key when sending resource commands to the crmd


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.1
changelog:
  - Update source tarball to revision: Pacemaker-1.1.10
    Resolves: rhbz#1016617
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details
  - Additional patches:
    + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
    + Fencing: Support agents that need the host to be unfenced at startup
    + Fix: crm_report: Collect corosync quorum data
    + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed
    + Fix: crmd: Prevent crash by passing log arguments in the correct order
    + Fix: pengine: Do not re-allocate clone instances that are blocked in the Stopped state
    + Fix: pengine: Do not allow colocation with blocked clone instances
    + Fix: pengine: Do not restart resources that depend on unmanaged resources
    + Fix: crmd: Prevent recurring monitors being cancelled due to notify operations


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.2
changelog:
  - Fix: xml: Location constraints are allowed to specify a role
  - Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
    Resolves: rhbz#1016617


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.3
changelog:
  - Log: crmd: Supply arguments in the correct order
  - Fix: Invalid formatting of log message causes crash
  - Fix: cman: Start clvmd and friends from the init script if enabled
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
  - Fix: crm_resource: Observe --master modifier for --move
  - Fix: cman: Do not start pacemaker if cman startup fails
  - Fix: Fencing: Observe pcmk_host_list during automatic unfencing
  - Remove unsupported resource agent
  - Provide a meaningful error if --master is used for primitives and groups
    Resolves: rhbz#1016617


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-8
changelog:
  - e2fsck: don't clone dup xattr blocks in fs without xattr feat (#676465)
  - Allow specification of default mntopts in superblock (#679892)
  - Handle devices with large physical blocksizes (#679931)
  - Fix some typos in man pages (#683906)


author: Lukas Czerner <lczerner@redhat.com> 1.41.12-9
changelog:
  - e2image: Add support for exporting image in qcow2 format (#713468)
  - mke2fs: Skip inode table initialization on some discardable devices (#713475)
  - mke2fs: Add -E discard/nodiscard options (#713475)
  - mke2fs: Allow to specify discard option in mke2fs.conf (#713475)
  - e2fsck: Allow to discard free data and inode blocks in e2fsck (#713475)
  - mke2fs: Show discard progress (#713475)
  - Don't attempt to discard flash device if -n option is given (#713475)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-12
changelog:
  - Fix spurious e2fsck checksum errors when -b option is used (#786021)
  - Fix bugs related to e2fsck -E discard (#795846)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Jarod Wilson <jarod@redhat.com> 1.5-13
changelog:
  - Move startup prio so we start after syslog, so any notices during
    system startup actually get logged


author: Petr Sabata <psabata@redhat.com> - 1:1.5-14
changelog:
  - Init script: added the reload function
  - Init script: the service now stops when using p4-clockmod driver
  - Resolves: rhbz#607223


author: Marcela Mašláňová <mmaslano@redhat.com> 1:1.5-16
changelog:
  - Whenever PCC driver is loaded, it loads the “userspace” governor, instead 
    of the “ondemand” governor.
  - Resolves: rhbz#642838


author: Marcela Mašláňová <mmaslano@redhat.com> 1:1.5-17
changelog:
  - Cpuspeed init script still tries to adjust cpufreq sysfiles on a per core 
    basis 738463
  - IGNORE_NICE parameter does opposite of what it says (thanks to Minto Joseph)
    797055
  - Cpuspeed does not reset MIN/MAX values when config file is emptied 616976
  - Resolves: rhbz#738463, rhbz#797055, rhbz#616976


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-28
changelog:
  - avoid truncating the compilation flags of extension modules that have CFLAGS
  set in their environment
  Resolves: rhbz#727364


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-29
changelog:
  - protect GIL detection within gdb debug hooks against C stack frames that
  lack a name (source 1)
  Related: rhbz#711818
  Resolves: rhbz#736085


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-30
changelog:
  - oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
  variable, to provide an opt-in way to protect against denial of service
  attacks due to hash collisions within the dict and set types
  Resolves: CVE-2012-1150


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-31
changelog:
  - fix endless loop in SimpleXMLRPCServer upon malformed POST request
  Resolves: CVE-2012-0845
  - send encoding in SimpleHTTPServer.list_directory to protect IE7 against
  potential XSS attacks
  Resolves: CVE-2011-4940


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-34
changelog:
  - add an RPATH to pyexpat.so to avoid ImportError on XML_SetHashSalt when a
  vanilla build of expat is present in LD_LIBRARY_PATH
  Resolves: rhbz#833271


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-35
changelog:
  - add -DNDEBUG to OPT during the build, disabling C-level assertions
  Resolves: rhbz#810847
  Resolves: rhbz#841748
  - avoid allocating thunks in ctypes unless absolutely necessary, to avoid
  generating SELinux denials on "import ctypes" and "import uuid" when
  embedding Python within httpd
  Resolves: rhbz#814391
  - avoid infinite loop in logging.handlers.SysLogHandler with eventlet when
  the syslog daemon is stopped
  Resolves: rhbz#835460


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-36
changelog:
  - disable patch 110 (python-2.6.5-ctypes-noexecmem.patch)
  Related: rhbz#707944
  - disable patch 129 (python-2.6.6-gc-assertions.patch) now that we're
  building with -DNDEBUG
  Related: rhbz#810847
  Related: rhbz#841748
  Related: rhbz#614680


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-80
changelog:
  - Resolves: rhbz#903078 - Out-of-bounds read flaws in
                            autofs and ssh services responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-81
changelog:
  - Resolves: rhbz#903078 - TOCTOU race conditions by copying
                            and removing directory trees


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed
                            database update


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.2
changelog:
  - kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
  - kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
  - Resolves: bz#910841
    (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.3
changelog:
  - kvm-Fix-regression-introduced-by-machine-accel.patch [bz#929105]
  - Resolves: bz#929105
    ([RHEL6.4] [regression] qemu-kvm does not enable ioeventfd)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-120
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743093, rhbz#743091


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-78
changelog:
  - Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning
                            value is higher than passwordWarning LDAP attribute.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-79
changelog:
  - Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh
                            on ppc64 and s390x


author: Ian Kent <ikent@redhat.com> - 5.0.5-66
changelog:
  - bz866338 - update the man pages to describe 'nobind' option current behaviour
    - fix nobind man page description.
  - Resolves: rhbz#866338


author: Ian Kent <ikent@redhat.com> - 5.0.5-67
changelog:
  - bz880242 - autofs service status fails on rhel 6.4 with version
    autofs-5.0.5-64.el6.x86_64
    - fix pid file substitution in init script.
  - Resolves: rhbz#880242


author: Ian Kent <ikent@redhat.com> - 5.0.5-68
changelog:
  - bz880242 - autofs service status fails on rhel 6.4 with version
    autofs-5.0.5-64.el6.x86_64
    - remove pid file substution patch.
    - add backported upstream patch to add piddir to configure.
  - Related: rhbz#880242


author: Ian Kent <ikent@redhat.com> - 5.0.5-69
changelog:
  - bz880242 - autofs service status fails on rhel 6.4 with version
    autofs-5.0.5-64.el6.x86_64
    - actually add the backported patch.
  - Related: rhbz#880242


author: Ian Kent <ikent@redhat.com> - 5.0.5-70
changelog:
  - bz880242 - autofs service status fails on rhel 6.4 with version
    autofs-5.0.5-64.el6.x86_64
    - update configure of back ported patch.
  - Related: rhbz#880242


author: Ian Kent <ikent@redhat.com> - 5.0.5-71
changelog:
  - bz836422 - autofs /net maps do not refresh list of shares exported on
    the NFS server
    - fix submount offset delete.
  - Related: rhbz#836422


author: Ian Kent <ikent@redhat.com> - 5.0.5-72
changelog:
  - bz889055 - RHEL6.4 autofs initscript not LSB compliant
    - fix init script status return.
  - Resolves: rhbz#889055


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts at
    the same time
    - use numeric protocol ids instead of protoent structs.
  - Resolves: rhbz#921147


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts
    at the same time
    - correct patch name in spec file.
  - Related: rhbz#921147


author: Petr Machata <pmachata@redhat.com> - 1.41.0-6
changelog:
  - More subpackage interdependency adjustments
    - boost doesn't bring in the MPI stuff.  Instead, $MPI-devel does.
      It needs to, so that the symlinks don't dangle.
    - boost-graph-$MPI depends on boost-$MPI so that boost-mpich2
      doesn't satisfy the SONAME dependency of boost-graph-openmpi.


author: Mark Wielaard <mjw@redhat.com> - 1:1.6.0.0-1.45.1.11.1
changelog:
  - Resolves: rhbz#804632
  - Tweak java-1.6.0-openjdk-jstack.patch stack to remove two uses of sprintf
    to make it work against systemtap 1.7.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Updated to IcedTea6 1.11.3
  - Removed upstreamed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828752


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828752


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Access gnome bridge jar is forced to have 644 permissions
  - Resolves: rhbz#906708


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.4
changelog:
  - kvm-virtio-balloon-fix-integer-overflow-in-BALLOON_CHANG.patch [bz#958750]
  - Resolves: bz#958750
    (QMP event shows incorrect balloon value when balloon size is grater than or equal to 4G)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.5
changelog:
  - kvm-e1000-fix-link-down-handling-with-auto-negotiation.patch [bz#907716]
  - kvm-e1000-unbreak-the-guest-network-when-migration-to-RH.patch [bz#907716]
  - kvm-reimplement-error_setg-and-error_setg_errno-for-RHEL.patch [bz#957056]
  - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch [bz#957056]
  - kvm-qga-distinguish-binary-modes-in-guest_file_open_mode.patch [bz#957056]
  - kvm-qga-unlink-just-created-guest-file-if-fchmod-or-fdop.patch [bz#957056]
  - Resolves: bz#907716
    (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
  - Resolves: bz#957056
    (CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode [rhel-6.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.6
changelog:
  - kvm-qga-cast-to-int-for-DWORD-type.patch [bz#980758]
  - kvm-qga-remove-undefined-behavior-in-ga_install_service.patch [bz#980758]
  - kvm-qga-diagnostic-output-should-go-to-stderr.patch [bz#980758]
  - kvm-qa_install_service-nest-error-paths-more-idiomatically.patch [bz#980758]
  - kvm-qga-escape-cmdline-args-when-registering-win32-service.patch [bz#980758]
  - Resolves: bz#980758
    (qemu-kvm: CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path [rhel-6.4.z])


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.385.el6_4.7
changelog:
  - kvm-qcow2-Reinitialise-counter-when-restarting-alloc-r64.patch [bz#996151]
  - Resolves: bz#996151
    (qcow2 corruption bug in cluster allocation code)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.13
changelog:
  - removed upstreamed  patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.13
  - Resolves: rhbz#992909


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - removed useless runtests parts
  - included also java.security.old files
  - Resolves: rhbz#1017618


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.68.1.11.14
changelog:
  - updated to icedtea6-1.11.14.tar.gz
  - added and applied 1.11.14-fixes.patch, patch10 to fix build issues
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - Resolves: rhbz#1017618


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.49.1.11.5
changelog:
  - Updated to IcedTea6 1.11.5
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.55.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911524


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-3
changelog:
  - Init lvmetad lazily to avoid early socket access on config overrides.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid reading mirrors with failed devices in its mirrored log.
  - Avoid reading from mirrors that have failed devices if they block I/O.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add Requires: device-mapper-persistent-data for thin provisioning support.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-4
changelog:
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - Automatically deactivate failed preloaded dm tree node.
  - Fix lvm2app to return all property sizes in bytes.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvconvert support to swap thin pool metadata volume.
  - Implement internal function detach_pool_metadata_lv().
  - Fix lvm2app and return lvseg discards property as string.
  - Allow forced vgcfgrestore of lvm2 metadata with thin volumes.
  - Add lvm.conf thin pool defs thin_pool_{chunk_size|discards|zero}.
  - Support discards for non-power-of-2 thin pool chunks.
  - Support allocation of pool metadata with lvconvert command.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  - Use lv_is_active() instead of lv_info() call.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Automatically restore MISSING PVs with no MDAs.
  - Do not allow --splitmirrors on RAID10 logical volumes.
  - When no '-i' argument is given for RAID10, default to 2 stripes.
  - Mirrored log is now fixed before its mirror when double-fault occurs.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-5
changelog:
  - Avoid a global lock in pvs when lvmetad is in use.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Fix memleak in device_is_usable mirror testing function.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Fix regression that caused inability to create a snapshot of an inactive LV.
  - Remove warning about unsupported discards for non-power-of-2 thin pool chunks.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-6
changelog:
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-7
changelog:
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Fix lvmetad updates for lvm1 format and fix reported internal errors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-9.el6_4.1
changelog:
  - Fix alignment of PV data area if detected alignment less than 1 MB (2.02.74).
  - Give precedence to EMC power2 devices with duplicate PVIDs


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638839


author: Marek Kasik <mkasik@redhat.com> 2.3.11-7
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651762


author: Marek Kasik <mkasik@redhat.com> 2.3.11-8
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723468


author: Marek Kasik <mkasik@redhat.com> 2.3.11-13
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806269


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib64 before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.2.el6
changelog:
  - Unapplied but kept (for 2.3revert) patch110,  java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch
  - Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch
  - Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch
  - NSS enabled by default - enable_nss set to 1
  - rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch
  - rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch
  - Resolves: rhbz#831734


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el6
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.61-1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787192


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871813


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901380


author: Roman Rakus <rrakus@redhat.com> - 1.4.3-24
changelog:
  - Fixed using valist with log option on.
    Resolves: #446844
  - user ident has home dir set to /
    Resolves: #458144


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.6
changelog:
  - qemu: Set correct migrate host in client_migrate_info (rhbz#966587)
  - qemu: Fix crash in migration of graphics-less guests. (rhbz#966587)
  - Fix F_DUPFD_CLOEXEC operation args (rhbz#966707)
  - cgroup: Be robust against cgroup movement races (rhbz#966710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.7
changelog:
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#966587)
  - qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#966587)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.9
changelog:
  - qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976543)
  - build: Fix build with -Werror (rhbz#976543)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.10
changelog:
  - qemu: Avoid leaking uri in qemuMigrationPrepareDirect (rhbz#984578)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#984578)
  - conf: Don't fail to parse <boot> when parsing a single device (rhbz#1003934)
  - Plug leak in virCgroupMoveTask (rhbz#984556)
  - Fix invalid read in virCgroupGetValueStr (rhbz#984561)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.12
changelog:
  - Introduce APIs for splitting/joining strings (rhbz#1006265)
  - Rename virKillProcess to virProcessKill (rhbz#1006265)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006265)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006265)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006265)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006265)
  - Include process start time when doing polkit checks (rhbz#1006265)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.15
changelog:
  - network: Allow <vlan> in type='hostdev' networks (rhbz#1014445)
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1017196)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#1017194)
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1017198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1017198)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix permission on source files (#676364)
  - fix negative keys with var_export (#771738)
  - fix setDate when DateTime created from timestamp (#812819)
  - add php(language) and missing provides (#837042)
  - use arch-specific requires (#833545)
  - fix possible buffer overflow in pdo_odbc (#836264)
  - fix possible segfault in pdo_mysql (#824199)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-16
changelog:
  - fix stream support in fileinfo (#858653)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Joe Orton <jorton@redhat.com> - 1.6.11-4
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709221)
  - add security fix for CVE-2011-0715 (#681174)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672679)


author: Joe Orton <jorton@redhat.com> - 1.6.11-5
changelog:
  - add init script for svnserve (#720790, #711904)
  - fix segfault with "AuthzForceUsernameCase lower" (#751321)
  - fix parent directory access with merges (#749494)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-29
changelog:
  - initialize NSS with no database if the selected database is broken (#772642)
  - use NSS_InitContext() to avoid a collision with OpenLDAP (#738456)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-30
changelog:
  - print reason phrase from HTTP status line on error (#676596)
  - fix typo in curl.1 man page (#729984)
  - introduce the --delegation option of curl (#730445)
  - enforce versioned libssh2 dependency for libcurl (#741935)
  - nss: select client certificates by DER (#746629)
  - fix a build failure when building against newer libssh2-devel (#841905)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-33
changelog:
  - SCP: send large files properly with new enough libssh2 (#879592)
  - fix handling of errors returned from libssh2 when sending data (#873789)


author: Dave Airlie <airlied@redhat.com> 9.0-0.8
changelog:
  - CVE-2013-1872: memory corruption oob read/write on intel (#963063)
  - CVE-2013-1993: interger overflows in protocol handling (#961613)


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.7
changelog:
  - Make Quantum 2013.1.1 working with netns
  - Make SSHing into an Openshift Enterprise Node working
  Resolves:#969043


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.8
changelog:
  - Allow dnsmasq to stream connect to quantum
  - Allow ifconfig domtrans to iptables and execute ldconfig
  Resolves:#969043


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.9
changelog:
  - Allow iptables to read and write quantum inherited pipes
  - Allow iptables to send sigchld to quantum
  Resolves:#969043


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-1
changelog:
  - Update to Ruby 1.8.7-p352.
    * Remove Patch43: ruby-1.8.7-CVE-2011-1004.patch; subsumed
    * Remove Patch44: ruby-1.8.7-CVE-2011-1005.patch; subsumed
    * Remove Patch200: ruby-1.8.7-webrick-CVE.patch; subsumed
  - Resolves: rhbz#706332
  - Fix of conflict between 32bit and 64bit library versions.
  - Resolves: rhbz#674787
  - Add systemtap static probes.
  - Resolves: rhbz#673162
  - Remove duplicate path entry
  - Resolves: rhbz#722887


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-3
changelog:
  - mkconfig.rb: fix for continued lines.
    * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
  - Resolves: rhbz#730287


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768833


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-7
changelog:
  - Addresses segfauls in Marshal.load.
    * ruby-1.8.7-p358-marshal-load-segv-fix.patch
  - Resolves: rhbz#789120


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979300


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979300


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-2
changelog:
  - Update to NSPR_4_9_5_RTM
  - Resolves: rhbz#927186 - Rebase to nspr-4.9.5
  - Add upstream URL for an existing patch per packaging guidelines


author: Than Ngo <than@redhat.com> - 6:4.3.4-15
changelog:
  - Resolves: bz#587016, print dialogue does not remember previous settings
  - Resolves: bz#682611, Konqueror splash page in zh_TW is wrong
  - Resolves: bz#734734, plasma eating up cpu-time when systemtray some icon
  - Resolves: bz#826114, konqueror crash when trying to add "Terminal Emulator" to main menu bar


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.32-1
changelog:
  - check an IP address for existence in ifup-alias
  - remount /dev/shm in sysinit to apply attributes from fstab
  - sets BONDING_OPTS before interface is brougth up and checks if it is not already added
  - Add support for setting random bridge options via BRIDGING_OPTS
  - use vgchange -aay in rc.sysinit and netfs init script
  - script should not kill itself during shutdown
  - fix the NIS domain setting
  - be less strict about VLAN name
  - clarification of work with white spaces in crypttab manpage
  - re-read sysctl values for VLANs on ifup
  - pass useful arguments to halt.local
  - start serial console when we return from runlevel1
  - move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network.
  - don't accidentally match other bonding devices
  - add usage stanzas for tty.conf and serial.conf
  - rename_device: skip VLAN=yes configuration files
  - allow duplicate address dectection to be disabled


author: Václav Pavlín <vpavlin@redhat.com> - 9.03.34-1
changelog:
  - there should be crypttab instead of crypptab in man page (#870025)
  - sysconfig.txt advised saslauthd -a instad of -v (#869075)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-5.el6
changelog:
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771910


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-45
changelog:
  - Don't create zero-length request files (bug #740093).
  - The lp and lpr commands did not cancel jobs queued from stdin on an error
    (STR #4015, bug #738914).
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #738410)


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-50:.1
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-0
changelog:
  - Updated to latest ustream release of 1.2 branch - 1.2.3
   - Security Updates
    - CVE-2013-1927, RH884705 - fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
   - Plugin
    - PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch 0- icedtea-web-PR1161.patch
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-1
changelog:
  - fixed postun - removal of alternatives for plugin restricted to 
    (correct) removal process only
  - fixed date in changelog previous entry
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-2
changelog:
  - Added (temporally!) posttrans forcing creation of symlinks
    - should be removed next release
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-3
changelog:
  - added patch1 b25-appContextFix.patch to make it run with future openjdk
  - rmeoved posttrans
  - Resolves: rhbz#975426


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-4
changelog:
  - improved patch1 b25-appContextFix.patch to make it run with future openjdk better
  - Resolves: rhbz#975426


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-43
changelog:
  - cman init: make sure we start after fence_sanlockd and warn users
  - checkquorum.wdmd: add integration script with wdmd
    (requires wdmd >= 2.6)
    Resolves: rhbz#509056


author: Bob Peterson <rpeterso@redhat.com> - 3.0.12.1-48
changelog:
  - After converting a GFS1 file system with gfs2_convert errors were detected with fsck.gfs2
    Resolves: rhbz#888053


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.13
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  Resolves:#1015117
  - Allow virt_domain to read virt_var_run_t symlinks
  Resolves:#1015068


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-43
changelog:
  - fixed value of UCD-SNMP-MIB::extCommand to contain full command
    line (#842279)
  - fixed rpath to perl.so (#848319)
  - added support for port numbers in 'clientaddr' configuration
    option (#833013)
  - fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
    is used (#824402)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#800671)
  - updated documentation of '-c' option of snmptrapd (#784502)
  - fixed endless loop when SIGTEM arrives in middle of internal query
    processing (#851637)
  - fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
  - removed various error log messages related to counte64 expansions
    (#846906)
  - removed various error log messages when IPv6 is disabled (#845157)
  - added support of cvfs filesystem in hrStorageTable (#846532)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#846436)
  - added support of simfs filesystem in hrStorageTable (#861152)
  - fixed responding to requests on a multihost machine (#825889)


author: <jsafrane@redhat.com> - 1:5.5-44.4
changelog:
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)


author: Harald Hoyer <harald@redhat.com> 147-2.41
changelog:
  - add "nowatch" option to manpage
  Resolves: rhbz#628762
  - fixed return code of udev-post for "status"
  Resolves: rhbz#735410
  - fixed udev_device_get_devnode()
    backported cdb1d7608a2e2ba708a890eeab6e5e99409a1953
  Resolves: rhbz#784648


author: Harald Hoyer <harald@redhat.com> 147-2.43
changelog:
  - add cciss handling to path_id
  Resolves: rhbz#784697
  - add kmsg alias logger
  Resolves: rhbz#826396
  - extend udev(7) man page about character encoding in symlinks
  Resolves: rhbz#790321
  - fix cdrom_id to honor feature profiles, if no medium is present
  Resolves: rhbz#847925


author: Harald Hoyer <harald@redhat.com> 147-2.46
changelog:
  - make symlink/rename failure info() only
    this can happen for multipath devices
  Resolves: rhbz#838451


author: Jack Magne <jmagne@redhat.com>= 1.1.0-22
changelog:
  - Resolves: 729027 - Debuginfo package issues in esc
  - Resolves: 253077 - ESC windows should keep the same size if the user resized them
  - Resolves: 682216 - [abrt] esc-1.1.1.0-21.el6 __strcmp_ssse3: Process /usr/lib/esc-1.1.1.0/escd 
  -    was killed by singnal 11 (SIGSEGV)
  - Resolves: 702683 - esc-prefs.js file has a typo


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812082


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-11
changelog:
  - Fix uninitialized variable in virLXCControllerSetupDevPTS (rhbz#880064)
  - storage: Fix device detach regression with cgroup ACLs (rhbz#876828)
  - storage: Fix bug of fs pool destroying (rhbz#878400)
  - qemu: Fix a crash when save file can't be opened (rhbz#880919)
  - bitmap: Fix typo to use UL type of integer constant in virBitmapIsAllSet (rhbz#876415)
  - virsh: Rewrite cmdDomDisplay (rhbz#878779)
  - network: Fix crash when portgroup has no name (rhbz#879473)
  - util: Capabilities detection for dnsmasq (rhbz#882265)
  - util: New virSocketAddrIsPrivate function (rhbz#882265)
  - network: Use dnsmasq --bind-dynamic when available (rhbz#882265)
  - storage: Fix scsi detach regression with cgroup ACLs (rhbz#876828)
  - libssh2_session: Support DSS keys as well (rhbz#878376)
  - virsh: Fix error messages in iface-bridge (rhbz#878376)
  - virsh: Check the return value of virStoragePoolGetAutostart (rhbz#878376)
  - conf: Check the return value of virXPathNodeSet (rhbz#878376)
  - conf: snapshot: Check return value of virDomainSnapshotObjListNum (rhbz#878376)
  - util: Fix virBitmap allocation in virProcessInfoGetAffinity (rhbz#878376)
  - virsh: Use correct sizeof when allocating cpumap (rhbz#878376)
  - rpc: Don't destroy xdr before creating it in virNetMessageEncodeHeader (rhbz#878376)
  - virsh: Do timing even for unusable connections (rhbz#878376)
  - conf: Fix uninitialized variable in virDomainListSnapshots (rhbz#878376)
  - Fix error handling in virSecurityManagerGetMountOptions (rhbz#878376)
  - conf: Prevent crash with no uuid in cephx auth secret (rhbz#878376)
  - conf: Fix virDomainNetGetActualDirect*() and BridgeName() (rhbz#881480)
  - virsh: Report errors if arguments of the schedinfo command are incorrect (rhbz#882915)
  - systemd: Require dbus service (rhbz#830201)
  - spec: Require dbus-daemon when using libvirtd in Fedora (rhbz#830201)
  - qemu: Don't free PCI device if adding it to activePciHostdevs fails (rhbz#877095)
  - util: Slightly refactor PCI list functions (rhbz#877095)
  - qemu: Fix memory (and FD) leak on PCI device detach (rhbz#877095)
  - util: Do not keep PCI device config file open (rhbz#877095)
  - node_memory: Improve the docs (rhbz#872656)
  - node_memory: Do not fail if there is parameter unsupported (rhbz#872656)
  - node_memory: Fix bug of node_memory_tune (rhbz#872656)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-12
changelog:
  - qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
  - remote: Avoid the thread race condition (rhbz#866524)
  - storage: Error out earlier if the volume target path already exists (rhbz#832302)
  - dnsmasq: Fix parsing of the version number (rhbz#885727)
  - qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
  - examples: Fix balloon event callback (rhbz#884650)
  - util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
  - util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
  - util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
  - util: Fix warning message in previous patch (rhbz#883832)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-13
changelog:
  - network: Prevent dnsmasq from listening on localhost (rhbz#886821)
  - sanlock: Re-add lockspace unconditionally (rhbz#820173)
  - Fix "virsh create" example (rhbz#887187)
  - docs: Fix some typos in examples (rhbz#887187)
  - network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-14
changelog:
  - util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
  - util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
  - util: Fix botched check for new netlink request filters (rhbz#889319)
  - blockjob: Fix memleak that prevented block pivot (rhbz#888426)
  - sanlock: Chown lease files as well (rhbz#820173)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-15
changelog:
  - snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
  - snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
  - snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
  - snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
  - util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
  - qemu: Add a hash table for the shared disks (rhbz#878578)
  - docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
  - conf: Parse and format the new XML (rhbz#878578)
  - qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
  - qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
  - qemu: Relax hard RSS limit (rhbz#891653)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-16
changelog:
  - qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
  - Add RESUME event listener to qemu monitor. (rhbz#894085)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-17
changelog:
  - storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
  - qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
  - qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18
changelog:
  - rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
  - spec: Disable libssh2 support (rhbz#513363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.1
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#908836)
  - schema: Make the cpuset type reusable across schema files (rhbz#908836)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
  - capabilities: Add additional data to the NUMA topology info (rhbz#908836)
  - test: Add support for thread and core information for the test driver (rhbz#908836)
  - xen: Initialize variable before using (rhbz#908836)
  - xen: Actually fix the uninitialized variable (rhbz#908836)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913624)
  - qemu_agent: Ignore expected EOFs (rhbz#915344)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
  - qemu: Destroy domain on decompression binary error (rhbz#915347)
  - qemu: Run lzop with '--ignore-warn' (rhbz#915347)
  - Don't ignore return value of qemuProcessKill (rhbz#915353)
  - Fix race condition when destroying guests (rhbz#915353)
  - Log warning if storage magic matches, but version does not (rhbz#915354)
  - Add lots of debugging to storage file probing code (rhbz#915354)
  - Fix probing of QED file format (rhbz#915354)
  - util: Add virendian.h macros (rhbz#915354)
  - util: Use new virendian.h macros (rhbz#915354)
  - storage: Rearrange functions (rhbz#915354)
  - storage: Prepare for refactoring (rhbz#915354)
  - storage: Refactor metadata lookup (rhbz#915354)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
  - storage: Test backing chain traversal (rhbz#915354)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
  - qemu: Add checking in helpers for sgio setting (rhbz#919504)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
  - qemu: Fix the memory leak (rhbz#919504)
  - Fix crash changing CDROM media (rhbz#919504)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
  - qemu: Fix QMP detection of QXL graphics (rhbz#915352)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
  - conf: Add optional attribte primary to video <model> element (rhbz#915352)
  - qemu: Use newer -device video device in qemu commandline (rhbz#915352)
  - tests: Add one -device video device testcase (rhbz#915352)
  - qemu: Detect VGA_QXL capability correctly (rhbz#915352)
  - qemu: Support ram bar size for qxl devices (rhbz#915352)
  - conf: Don't leak 'primary' video property on error (rhbz#915352)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
  - storage: Cleanup logical volume creation code (rhbz#918754)
  - docs: Clarify semantics of sparse storage volumes (rhbz#918754)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
  - locking: Resolve resource leaks on non error path (rhbz#922095)
  - selinux: Resolve resource leak using the default disk label (rhbz#922095)
  - storage: Resolve resource leaks with cmd processing (rhbz#922095)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
  - storage: Need to add virCommandFree() (rhbz#922095)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-4
changelog:
  - Two important fixes from 3.1.2 release (#590773)
  - Fix up attribute handling in xfs_fsr
  - Make sure xfs_admin writes both sb fields when changing lazy_count


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-7
changelog:
  - Fix xfs_metadump hang (#730886)
  - mkfs.xfs: don't increase agblocks past maximum (#738279)
  - Fix double reporting of quota values (#749435)
  - xfs_quota: handle malformed entries in mtab (749434)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-8
changelog:
  - mkfs.xfs: better handle misaligned 4k devices (#836433)
  - mkfs.xfs: default to physical sectorsize (#836433)
  - mkfs.xfs: clarify errors when specified AG size is too large (#730433)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-10.1
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#971698)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#976217)


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.4.1.el6]
changelog:
  - [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [921150 913704]
  - [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921961 896224]
  - [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921961 896224]
  - [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920268 916324]
  - [powerpc] pseries: Fix partition migration hang in stop_topology_update (Steve Best) [921963 910597]
  - [infiniband] qib: correction for faulty sparse warning correction (Jay Fenlason) [922154 901701]
  - [usb] io_ti: Fix NULL dereference in chase_port() (Nikola Pajkovsky) [916198 916200] {CVE-2013-1774}
  - [net] bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Nikola Pajkovsky) [914690 914691] {CVE-2013-0349}
  - [char] tty: set_termios/set_termiox should not return -EINTR (Oleg Nesterov) [921145 904907]
  - [netdrv] ehea: fix VLAN support (Steve Best) [921535 911359]
  - [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919388 919389] {CVE-2013-1826}
  - [net] dccp: check ccid before NULL poiter dereference (Weiping Pan) [919187 919188] {CVE-2013-1827}
  - [mm] tmpfs: fix use-after-free of mempolicy object (Nikola Pajkovsky) [915714 915715] {CVE-2013-1767}
  - [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916957 915135]
  - [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915583 876600]
  - [fs] cifs: after upcalling for krb5 creds, invalidate key rather than revoking it (Niels de Vos) [912452 885899]
  - [fs] cifs: tmp_key_invalidate() should not set key->expiry to 0 (Niels de Vos) [912452 885899]
  - [block] disable discard request merge temporarily (Mike Snitzer) [911475 907844]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.5.1.el6]
changelog:
  - [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [921958 883905]
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_auth() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [fs] nls: improve UTF8 -> UTF16 string conversion routine (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [fs] fat: Fix stat->f_namelen (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [netdrv] tun: fix ioctl() based info leaks (Thomas Graf) [922350 922351] {CVE-2012-6547}
  - [virt] x86: Add a check to catch Xen emulation of Hyper-V (Andrew Jones) [923204 918239]
  - [fs] cifs: fix expand_dfs_referral (Sachin Prabhu) [923098 902492]
  - [fs] cifs: factor smb_vol allocation out of cifs_setup_volume_info (Sachin Prabhu) [923098 902492]
  - [fs] cifs: have cifs_cleanup_volume_info not take a double pointer (Sachin Prabhu) [923098 902492]
  - [fs] nfs: Dont allow NFS silly-renamed files to be deleted, no signal (Dave Wysochanski) [920266 905095]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.6.1.el6]
changelog:
  - [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
  - [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
  - [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
  - [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
  - [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
  - [net] sunrpc: Get rid of the redundant xprt->shutdown bit field (J. Bruce Fields) [915579 893584]
  - [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
  - [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
  - [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
  - [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
  - [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.8.1.el6]
changelog:
  - [fs] raw: don't call set_blocksize when not changing the blocksize (Jeff Moyer) [951406 909482]
  - [x86] Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [952570 876275]
  - [netdrv] ixgbe: Only set gso_type to SKB_GSO_TCPV4 as RSC does not support IPv6 (Michael S. Tsirkin) [927292 908196]
  - [netdrv] bnx2x: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] qlcnic: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] ixgbe: fix gso type (Michael S. Tsirkin) [927292 908196]
  - [fs] gfs2: Allocate reservation structure before rename and link (Robert S Peterson) [924847 922999]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.9.1.el6]
changelog:
  - [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
  - [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
  - [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
  - [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
  - [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
  - [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
  - [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
  - [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
  - [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
  - [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
  - [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
  - [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
  - [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
  - [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
  - [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
  - [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
  - [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
  - [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
  - [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
  - [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
  - [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
  - [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
  - [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
  - [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
  - [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
  - [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
  - [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.10.1.el6]
changelog:
  - [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
  - [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
  - [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
  - [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
  - [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
  - [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
  - [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
  - [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
  - [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
  - [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
  - [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
  - [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
  - [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
  - [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
  - [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
  - [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
  - [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
  - [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
  - [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
  - [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.11.1.el6]
changelog:
  - [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-38
changelog:
  - fixed snmpd crashing with many AgentX subagent (#749227)
  - fixed SNMPv2-MIB::sysObjectID value when "sysObjectID" config file
    option with long OID was used (#786931)
  - fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
  - fixed parsing of "proxy" snmpd.conf option not to enable
    verbose logging by default (#746903)
  - added new "realStorageUnits" config file option to support
    disks > 16 TB in hrStorageTable (#741789)
  - added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
    (#746903)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#748907)
  - fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
    SNMP-SET request on 64-bit platforms (#754275)
  - fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
    SELinux context (#754971)
  - fixed memory leak when agentx subagent disconnects in the middle
    of request processing (#736580)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#788954)


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-190
changelog:
  - Allow virtd to settattr on virt image dirs in MLS
  Resolves:#885045
  - Allow all postfix domains to connect to mysql stream
  - Call init_daemon_domain for rsync_t
  - Add labeling for /var/lib/pgsql/ssh 
  - Allow certmonger to send signal to itself
  - Allow rsyslog to read user tmp files using logging_syslog_can_read_tmp boolean
  - Add support for 1228/tcp and 1228/udp ports and allow corosync touse them
  - Allow corosync to read wdmd tmpfs
  - Allow wdmd to execute consoletype
  - Update man pages using sepolicy from Fedora
  - Fix admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-191
changelog:
  - Remove pam_selinux due to conflict
  - Add labeling for /etc/multipath - lvm_metadata_t
  Resolves:#880407
  - Add additional gitolite3 labeling


author: Jarod Wilson <jarod@redhat.com> [2.6.32-352.el6]
changelog:
  - [md] raid10: Do not call md_raid10_unplug_device while holding spinlock (Jonathan E Brassow) [886658]
  - [md] dm-thin: commit before gathering status (Mike Snitzer) [882426]
  - [md] dm-thin: cleanup dead code (Mike Snitzer) [882426]
  - [md] dm-thin: rename cell_defer_except to cell_defer_no_holder (Mike Snitzer) [882426]
  - [md] dm-thin: emit "ignore_discard" in status if discards are disabled (Mike Snitzer) [882426]
  - [md] dm-thin: wake the worker when a discard is prepared (Mike Snitzer) [882426]
  - [md] dm-thin: fix race between simultaneous io and discards to same block (Mike Snitzer) [882426]
  - [md] dm-thin: replace calls to cell_release_singleton with cell_defer_except (Mike Snitzer) [882426]
  - [mm] Revert: ksm: numa awareness sysfs knob (Jarod Wilson) [743643]
  - [fs] gfs2: Reset rd_last_alloc when it reaches the end of the rgrp (Robert S Peterson) [882381]
  - [fs] gfs2: Stop looking for free blocks at end of rgrp (Robert S Peterson) [882381]
  - [drm] nouveau: cache ramcfg value for RAM_RESTRICT_ZM_GROUP (Ben Skeggs) [878384]
  - [drm] nouveau: disable use of tesla/fermi copy engines for buffer moves (Ben Skeggs) [878384]
  - [fs] xfs: fix direct IO nested transaction deadlock (Dave Chinner) [876426]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-353.el6]
changelog:
  - [mm] pageattr: prevent PSE and GLOABL leftovers to confuse pmd/pte_present and pmd_huge (Andrea Arcangeli) [878877]
  - [fs] gfs2: Fix FITRIM argument handling (Abhijith Das) [866932]
  - [fs] gfs2: Require user to provide argument for FITRIM (Abhijith Das) [866932]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880146] {CVE-2012-4530}
  - [fs] btrfs: close exclusive opens with close_bdev_exclusive() (Zach Brown) [874505]
  - [kernel] sched_rt: Fix hang where umount is stuck in synchronize_sched_expedited (Larry Woodman) [814768]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-354.el6]
changelog:
  - [char] ipmi: add new kernel options to prevent automatic ipmi init (Tony Camuso) [877177]
  - [usb] xhci: New system added for Compliance Mode Patch on SN65LVPE502CP (Don Zickus) [856709]
  - [x86] quirks: Mark Haswell HDMI Audio as unsupported (Prarit Bhargava) [883428]
  - [scsi] bfa: fix crash in bfa_cb_ioim_done when performing failover/failback tests (Vijay Guvva) [878618]
  - [fs] autofs4: Fix sparse warning: context imbalance in autofs4_d_automount() different lock contexts for basic block (Ian Kent) [876795]
  - [fs] jbd, jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [886318]
  - [scsi] qla4xxx: v5.03.00.00.06.04-k2 (Rob Evers) [890727]
  - [scsi] qla4xxx: Correct the validation to check in get_sys_info mailbox (Rob Evers) [890727]
  - [scsi] qla4xxx: Pass correct function param to qla4_8xxx_rd_direct (Rob Evers) [890727]
  - [scsi] qla4xxx: v5.03.00.00.06.04-k1 (Chad Dupuis) [878048]
  - [scsi] qla4xxx: update copyrights in LICENSE.qla4xxx (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Disable generating pause frames for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix double clearing of risc_intr for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: IDC implementation for Loopback (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix panic while rmmod (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fail probe_adapter if IRQ allocation fails (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Prevent MSI/MSI-X falling back to INTx for ISP82XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Update idc reg in case of PCI AER (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix double IDC locking in qla4_8xxx_error_recovery (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Clear interrupt while unloading driver for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Print correct IDC version (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Added new mbox cmd to pass driver version to FW (Chad Dupuis) [878048]
  - [scsi] qla4xxx: fix various printk and comment typos (Chad Dupuis) [878048]
  - [fs] autofs4: use simple_empty() for empty directory check (Ian Kent) [876795]
  - [fs] autofs4: dont clear DCACHE_NEED_AUTOMOUNT on rootless mount (Ian Kent) [876795]
  - [fs] gfs2: Fix race in gfs2_rs_alloc (Abhijith Das) [878476]
  - [fs] xfs: fix broken error handling in xfs_vm_writepage (Dave Chinner) [874539]
  - [drm] radeon: force rn50 chip to always report connected on analog output (Jerome Glisse) [892723]
  - [sound] alsa: add support for Teradici 2200 host card audio (Jaroslav Kysela) [890581]
  - [md] dm-raid: Fix RAID10's check for sufficient redundancy (Jonathan E Brassow) [889358]
  - [scsi] hpsa: update version number to 3.2.0 (Tomas Henzl) [891935]
  - [netdrv] cxgb4: Initialize data structures before using (Steve Best) [885756]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-355.el6]
changelog:
  - [netdrv] qlge: remove NETIF_F_TSO6 flag (Amerigo Wang) [891839]
  - [fs] ext3: Remove BKL from ext3_put_super() and ext3_remount() (Carlos Maiolino) [885945]
  - [lib] switch the protection of percpu_counter list to spinlock (Carlos Maiolino) [885945]
  - [virt] hv: Add Hyper-V balloon driver (Jason Wang) [885572]
  - [mm] export a function to get vm committed memory (Jason Wang) [885572]
  - [drm] nouveau: extend prevent display switching issues by disabling pageflip (Ben Skeggs) [853226]
  - [netdrv] mlx4: Fix advertisement of wrong PF context behaviour (Alex Williamson) [894060]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-356.el6]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Prarit Bhargava) [890160]
  - [char] ipmi: handle run_to_completion properly in deliver_recv_msg() (Prarit Bhargava) [890160]
  - [usb] xhci: Reset reserved command ring TRBs on cleanup (Don Zickus) [843520]
  - [usb] xhci: handle command after aborting the command ring (Don Zickus) [874541]
  - [usb] xhci: cancel command after command timeout (Don Zickus) [874541]
  - [usb] xhci: add aborting command ring function (Don Zickus) [874541]
  - [usb] xhci: add cmd_ring_state (Don Zickus) [874541]
  - [usb] xhci: Fix Null pointer dereferencing with non-DMI systems (Don Zickus) [874542]
  - [usb] xhci: Intel Panther Point BEI quirk (Don Zickus) [874542]
  - [usb] xhci: Increase XHCI suspend timeout to 16ms (Don Zickus) [874542]
  - [powerpc] Revert: pseries/iommu: remove default window before attempting DDW manipulation (Steve Best) [890454]
  - [serial] 8250_pnp: add Intermec CV60 touchscreen device (Mauro Carvalho Chehab) [894445]
  - [char] ipmi: apply missing hunk from upstream commit 2407d77a (Tony Camuso) [882787]
  - [acpi] Fix broken kernel build if CONFIG_ACPI_DEBUG is enabled (Lenny Szubowicz) [891948]
  - [scsi] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically (Chad Dupuis) [854736]
  - [mm] vmalloc: remove guard page from between vmap blocks (Johannes Weiner) [873737]
  - [mm] vmalloc: vmap area cache (Johannes Weiner) [873737]
  - [fs] vfs: prefer EEXIST to EROFS when creating on an RO filesystem (Eric Sandeen) [878091]
  - [scsi] qla2xxx: change queue depth ramp print to debug print (Rob Evers) [893113]
  - [fs] nfs: Fix umount when filelayout DS is also the MDS (Steve Dickson) [895194]
  - [fs] nfs/pnfs: add set-clear layoutdriver interface (Steve Dickson) [895194]
  - [fs] nfs: Don't call nfs4_deviceid_purge_client() unless we're NFSv4.1 (Steve Dickson) [895194]
  - [fs] nfs: Wait for session recovery to finish before returning (Steve Dickson) [895176]
  - [mm] compaction: validate pfn range passed to isolate_freepages_block (Johannes Weiner) [889456 890498]
  - [drm] nouveau: ensure legacy vga is re-enabled during POST (Ben Skeggs) [625441]
  - [netdrv] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [894344]
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862904] {CVE-2012-4461}


author: Jarod Wilson <jarod@redhat.com> [2.6.32-357.el6]
changelog:
  - [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
  - [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
  - [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
  - [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.1.1.el6]
changelog:
  - [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
  - [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
  - [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
  - [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
  - [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
  - [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
  - [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
  - [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
  - [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
  - [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
  - [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
  - [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
  - [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
  - [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
  - [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
  - [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
  - [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
  - [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
  - [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
  - [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
  - [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
  - [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
  - [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
  - [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.2.1.el6]
changelog:
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}


author: Adam Tkac <atkac redhat com> 1.0.90-0.15.20110314svn4359
changelog:
  - flush internal Xvnc event queue early to avoid overflowing
  - improve compatibility with viewers with wrong VeNCrypt implementation
    (vinagre)
  - link libvnc.so with "-z now" to catch all undefined symbols
  - fix undefined symbol "getvnchomedir" in libvnc.so


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.12.1.el6]
changelog:
  - [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
  - [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
  - [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
  - [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
  - [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
  - [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
  - [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.13.1.el6]
changelog:
  - [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
  - [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
  - [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
  - [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
  - [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
  - [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [963564 886420]
  - [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [963564 886420]
  - [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [963564 886420]
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
  - [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
  - [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
  - [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
  - [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
  - [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
  - [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
  - [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
  - [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
  - [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
  - [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
  - [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
  - [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
  - [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#796014)
    (MotifZone bug #1552)
  - fixed use after free with comboboxes and XIM (rhbz#836892)
    (MotifZone bug #1559)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-1
changelog:
  - Rebase to 0.9.16 to provide the version Samba4 needs
  - Resolves: rhbz#766336
  - Drop ABI compatibility patch (no longer needed)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-2
changelog:
  - Add BuildRequires on libxslt and docbook-style-xsl to enable
    building manual pages

  - Related: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.17-1
changelog:
  - Rebase to 0.9.17 to provide the version Samba4 needs
  - Drop EXCLUDE_PATTERNS workaround in specfile
  - Resolves: rhbz#766336


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.56
changelog:
  - Modify 0137-RHBZ-799842-change-netapp-config.patch
    * Add pg_init_retries to netapp config
  - Add 0144-RHBZ-812832-shutdown-crash.patch
    * kill waiter threads with pthread_cancel() instead of SIGUSR1
  - Resolves: bz #799842, #812832


author: Benjmain Marzinski <bmarzins@redhat.com> -0.4.9.57
changelog:
  - Add 0145-RHBZ-831045-realloc-vector.patch
    * fix deleting items from vector, and handle error cases
  - Resolves: bz #831045


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.59
changelog:
  - Add 0146-RHBZ-595692-fix-cciss-names.patch
    * convert cmdline cciss names to sysfs format
  - Add 0147-RHBZ-824243-826610-833124-doc-fix.patch
  - Add 0148-RHBZ-619173-storagetek-config.patch
  - Add 0149-RHBZ-810788-remove-dups.patch
    * remove duplicates from builtin configs
  - Add 0150-RHBZ-810755-update-conf-defaults.patch
  - Add 0151-RHBZ-822389-fix-rename.patch
    * make multipath switch names on reload after disabling
      user_friendly_names
  - Add 0152-RHBZ-735459-mpath_persist.patch
    * mpathpersist allows persistent reservatoins through multipath devices
  - Add 0153-RHBZ-839386-retain_hwhandler.patch
    * add retain_attached_hw_handler default and multipaths config option
  - Add 0154-RHBZ-578114-kpartx-retry.patch
    * retry on EBUSY for loop device deletes
  - Add 0155-RHBZ-810989-load-modules.patch
    * service multipathd start loads kernel modules
  - Add 0156-RHBZ-813963-new-alua-prio.patch
    * combine the "alua" and "tpg_pref" prioritizers
  - Add 0157-RHBZ-816717-flush-full-paths.patch
    * make multipath accept full pathnames in -f
  - Add 0158-RHBZ-821885-check-blacklist.patch
    * make multipath -c check the device blacklisting
  - Add 0159-RHBZ-818367-829065-rdac.patch
  - Add 0160-RHBZ-841732-dont-swap-devices.patch
  - Resolves: bz #595692, #824243, #826610, #833124, #619173, #810788, #810755
  - Resolves: bz #822389, #735459, #839386, #578114, #810989, #813963, #816717
  - Resolves: bz #821885, #818367, #829065, #841732


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.60
changelog:
  - Add 0161-RHBZ-836890-AIX-whitespace.patch
  - Add 0162-RHBZ-860748-early-blacklist.patch
    * blacklist devices as soon as possible
  - Add 0163-RHBZ-839386-detect-prio.patch
    * add default and device configuration option detect-prio
  - Add 0164-RHBZ-839386-netapp-config.patch
  - Modify 0153-RHBZ-839386-retain_hwhandler.patch
    * cleanup minor issues
  - Resolves: bz #836890, #860748, #839386


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.62
changelog:
  - Add 0165-RHBZ-869253-disable-libdm-failback.patch
    * multipathd and kpartx now set a flag to request device-mapper
      not create devices itself.
  - Resolves: bz #869253


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.63
changelog:
  - Add 0166-RHBZ-880487-make-path-fd-readonly.patch
    * revert change from 0152-RHBZ-735459-mpath_persist.patch, so that
      path fds are again opened O_RDONLY
  - Resolves: bz #880487


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64
changelog:
  - Add 0167-RHBZ-735459-fix-mpathpersist-fns.patch
    * make reservation_key display correctly in "multipathd show config"
  - Resolves: bz #735459


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.1
changelog:
  - Add 0168-RHBZ-988704-fix_cli_resize.patch
    * deal with resize happening while path device is being removed.
  - Resolves: bz #988704


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-9
changelog:
  - Resolves: #785084 - vsftpd can not handle square brackets in ls
  - Resolves: #785061 - vsftpd child terminates when listing files with UID/GID larger than signed in
  - Resolves: #717411 - Connection failures during upload using PORT not handled cleanly
  - Resolves: #752954 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #745133 - vsftpd: documentation for 'max_per_ip' default setting is wrong
  - Resolves: #765757 - SITE HELP offers CHMOD even when it is disabled/unavailable
  - Resolves: #701300 - vsftpd.conf lists incorrect default value for xferlog_file
  - Resolvse: #785642 - Invalid error recovery in vsf_privop_pasv_listen()


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-21
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-26
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27.2
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add vino-2.8.1-sanity-check-fb-update.patch
    Fix for CVE-2011-0904 and CVE-2011-0904
    - Bugs #694456, #694455


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add reachability.patch
    Remove UI about whether the is only reachable locally or not.
    Fix for CVE-2011-1164
    - Bug #553477


author: Chris Feist <cfeist@redhat.com> - 3.9.2-20
changelog:
  - Update the rgmanager SAPInstance agent so resource limits configured in
    /usr/sap/services are properly applied.
  - Resolves: rhbz#869695


author: Chris Feist <cfeist@redhat.com> - 3.9.2-21
changelog:
  - Fixed missing '$' in lvm_by_vg.sh script
  - Retry VG shutdown to cope with udev collisions
  - Resolves: rhbz#729812


author: David Vossel <dvossel@redhat.com> - 3.9.2-21-8
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#1001519


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-3
changelog:
  - Resolves: Bug 870158 - slapd entered to infinite loop during new index addition
  - Resolves: Bug 870162 - Cannot abandon simple paged result search
  - c970af0 Coverity defects
  - 1ac087a Fixing compiler warnings in the posix-winsync plugin
  - 2f960e4 Coverity defects
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes


author: Noriko Hosoi <nhoso@redhat.com> - 1.2.11.15-4
changelog:
  - Resolves: Bug 868841 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Resolves: Bug 868853 - Winsync: DS error logs report wrong version of Windows AD when winsync is configured.
  - Resolves: Bug 875862 - crash in DNA if no dnamagicregen is specified
  - Resolves: Bug 876694 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Resolves: Bug 876727 - Search with a complex filter including range search is slow
  - Ticket #495 - internalModifiersname not updated by DNA plugin (Bug 834053)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-6
changelog:
  - Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode
  -   use perl-Socket6 on RHEL6


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-7
changelog:
  - Resolves: Bug 830355 - [RFE] improve cleanruv functionality 
  - Resolves: Bug 876650 - Coverity revealed defects 
  - Ticket #20 - [RFE] Allow automember to work on entries that have already been added (Bug 768084)
  - Resolves: Bug 834074 - [RFE] Disable replication agreements
  - Resolves: Bug 878111 - ns-slapd segfaults if it cannot rename the logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-8
changelog:
  - Resolves: Bug 887855 - RootDN Access Control plugin is missing after upgrade from RHEL63 to RHEL64


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-10
changelog:
  - Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-12
changelog:
  - Resolves: Bug 910994 - PamConfig schema not updated during upgrade
  - Resolves: Bug 910995 - Valgrind reports memleak in modify_update_last_modified_attr
  - Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
  - Resolves: Bug 911467 - DNA: use event queue for config update only at the start up
  - Resolves: Bug 911468 - Error messages encountered when using POSIX winsync
  - Resolves: Bug 911469 - dse.ldif is 0 length after server kill or machine kill
  - Resolves: Bug 911474 - Invalid chaining config triggers a disk full error and shutdown
  - Resolves: Bug 914305 - ns-slapd segfaults while trying to delete a tombstone entry
  - Resolves: Bug 913228 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-188
changelog:
  - Allow rpcd_t to read /var/run/utmp
  - Make glance domains as permissive instead of just glance_t
  - Allow kill capability for ftpd
  - Add labeling for prespawn helper script
  Resolves:#886619
  - Allow winbind to stream connect to nmbd
  - Allow transition from virt domains to bridgehelper domain
  - Add support for watchdog script from sanlock
  - Add labeling for tmp-inst
  - Fix rhev policy
  - Update virt_qemu_ga policy
  - Backport wm_domain policy
  - Backport virtd_lxc_t and make it as unconfined domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-189
changelog:
  - Allow virt_qemu_ga to execute shutdown
  - sssd needs to connect to kerberos password port if a user changes his password
  - More fixes for the dspam domain
  - Allow dovecot to execute bash
  - Additional fixes for passenger
  Resolves:#886619
  - Add labeling for /var/run/checkquorum-timer


author: Dan Winship <danw@redhat.com> - 1:0.8.1-36
changelog:
  - connection-editor: add VLAN support (rh #712302)
  - libnm-util: add API for VLAN connection editor
  - core: add more checks to VLAN creation
  - ifcfg-rh: fix writing of VLAN connections
  - misc other small connection editor UI updates


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-37
changelog:
  - core: fix 802.1x credentials being requested twice (rh #837056)
  - core: inherit leasefiles from the initramfs (rh #817660)
  - core: periodically retry connections even if they have failed (rh #829499)


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-41
changelog:
  - core: additional fixes for bridging and bonding operation (rh #558983)
  - applet: add support for Bridge, Bond, and VLAN devices


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-1
changelog:
  - Re-based to 3.10.9 with fixes from Fedora (bug #652255).
  - Change shebang /usr/bin/env python -> /usr/bin/python (bug #608003).
  - Added COPYING to common sub-package (bug #613707).
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #616569).
  - Fixed "CUPS Web Interface" button (bug #633899).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-4
changelog:
  - The hpijs sub-package no longer requires cupsddk-drivers (which no
    longer exists as a real package), but cups >= 1.4 (bug #829453).


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-1
changelog:
  - Re-based to 3.12.4 with fixes from Fedora (bug #731900).  No longer
    need no-system-tray, openPPD, addgroup, emit-SIGNAL, fab-root-crash,
    newline, hpaio-segfault, dbus-threads, or cups-web patches.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4
changelog:
  - Applied patch to fix CVE-2013-0200, temporary file vulnerability
    (bug #902163).
  - Fixed hpijs-marker-supply patch.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4:.1
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-49.2
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts
  - libgfs2: check return code of rename
  - libgfs2: Correct error message in mtab update code
  - libgfs2: Set umask before calling mkstemp
  - gfs2_grow: report bad return codes on error
    Resolves: rhbz#1001504


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-21.el6
changelog:
  - Properly handle migrated uniqueMember attributes (#894090)
  - ipa permission-find using valid targetgroup throws internal error (#893827)
  - Fix migration of CRLs to new directory location (#893722)
  - Installing IPA with a single realm component sometimes fails (#893187)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-22.el6
changelog:
  - Set minimum version of bind-dyndb-ldap to 2.3-2 to pick up missing DNS
    zone SOA serial fix (#894131)
  - Stopped named service crashed ipa-upgradeconfig program (#895298)
  - ipa-replica-prepare crashed when manipulating DNS zone without SOA
    serial (#894143)
  - Use new certmonger locking to prevent NSS database corruption during
    CA subsystem renewal (#883484)
  - Set minimum selinux-policy to 3.7.19-193 to allow certmonger to talk
    to dbus in an rpm scriptlet. (related #883484)
  - Set minimum vresion of certmonger to 0.61-3 for new locking scheme
    (related #883484)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-23.el6
changelog:
  - Installer should not connect to 127.0.0.1. (#895561)
  - Don't initialize NSS if we don't have to. (#878220)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-24.el6
changelog:
  - Add certmonger condrestart to server post scriptlet (#903758)
  - Make certmonger a (pre) Requires (#903758)
  - Add selinux-policy to Requires(pre) to avoid post scriptlet AVCs
    (#903758)
  - Set minimum version of pki-ca to 9.0.3-30 and add to Requires(pre)
    to pick up certmonger upgrade fix (#902474)
  - Update anonymous access ACI to protect secret attributes (#902481)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-26.el6_4
changelog:
  - Significant decrease in migration performance. (#908308)
  - ipa-client-install failed to fall over to replica with master down (#909161)
  - During Migration - If Schema is unavailable migration fails (#908400)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.2
changelog:
  - Missing LDAP schema attributeType and objectClass after upgrade (#916535)
  - ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
    correctly and crash (#917065)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.3
changelog:
  - client installation fails with anonymous binds set to rootdse (#952741)
  - LDAP upload CA cert sometimes double-encodes the value (#964128)
  - wrong trust argument assigned to renewed certs in ipa cert automatic
    renew (#964130)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: Denys Vlasenko <dvlasenk@redhat.com> 2.0.8-13
changelog:
  - Prevent daemon from being stuck (unresponsive to socket connects)
    while post-create even runs
  - Prevent infinite loop of crashes
  - Resolves: #826924


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.2.el6
changelog:
  - Sync with 6.4
  - introduced tmp-patches source tarball
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#880352


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895033


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.4.1.el6
changelog:
  - Rewerted to IcedTea 2.3.4
    - rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
    - removed jxmd and idlj to alternatives
    - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
    - re-applied patch302 and restored systemtap.patch
    - buildver set to 9
    - icedtea_version set to 2.3.4
    - unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
    - restored tmp-patches source tarball
    - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
    - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
      java.security-linux back to java.security
  - Resolves: rhbz#895033


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.5.el6_3
changelog:
  - Bumped to 2.3.5
  - Changed BR to java7-devel >= 1:1.7.0 as required by CORBA changes in 2.3.5
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.0.el6_3
changelog:
  - Removed patch1000 sec-2013-02-01-8005615.patch
  - Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
  - Removed patch1010 sec-2013-02-01-7201064.patch
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.3.7
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911529


author: Martin Stransky <stransky@redhat.com> - 17.0.9-2
changelog:
  - Added patch for rhbz#983488 - Resizing window changes window
    size to 0 with third party window manager.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-1
changelog:
  - Update to upstream version 2.11.0
    Resolves: #633577
  - Improve package to comply multilib policy
    Resolves: #607722
  - Don't strip debug information
    Resolves: #693389
  - Change build options
    Resolves: #694513


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-2
changelog:
  - Add -libs requirement with explicit version to the main package
  - Build with -fno-strict-aliasing
  - Use correct init script
  - Add OpenSLP support
    Resolves: #712525


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-3
changelog:
  - Backport upstream patch which enables the embedded instanaces to have
    correct empty string values
    Resolves: #796191
  - Add "cim-server" to provides
    Resolves: #799040


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-1
changelog:
  - Update to upstream version 2.12.0
    Resolves: #825471, #739118, #716474
  - Change post created symlinks group owner to 'pegasus'
    Resolves: #759064
  - Fix invocation of useradd without specifying a UID
    Resolves: #800319
  - Fix initscript is not world readable
    Resolves: #824297


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-2
changelog:
  - Fix local-or-remote-auth patch to work with IPv6 and with enabled
    privilege separation
    Resolves: #869664


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.3
changelog:
  - util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
  - security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
  - security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
  - libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
  - security_manager.c: Append seclabel iff generated (rhbz#928879)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.4
changelog:
  - rpc: Fix client crash when server drops connection (rhbz#950601)
  - storage: Fix volume cloning for logical volume. (rhbz#950604)
  - qemu: Allow migration over IPv6 (rhbz#950597)
  - qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
  - remote: Don't call NULL closeFreeCallback (rhbz#950599)
  - libvirt: Increase connection reference count for callbacks (rhbz#950599)
  - virsh: Unregister the connection close notifier upon termination (rhbz#950599)
  - virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
  - virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
  - rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
  - tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
  - Avoid use of free'd memory in auto destroy callback (rhbz#951073)
  - Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.5
changelog:
  - daemon: Fix leak after listing volumes (CVE-2013-1962)
  - Don't try to add non-existant devices to ACL (rhbz#958837)
  - Avoid spamming logs with cgroups warnings (rhbz#958837)
  - audit: Properly encode device path in cgroup audit (rhbz#958839)


author: Jindrich Novy <jnovy@redhat.com> 20120613-2
changelog:
  - backport patch from upstream to correctly process buildroot
    after installation (compress man pages, etc.) (#844028)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-2.3
changelog:
  - Allow overriding values in macro scl_package (#960556)
  - Delete redundant argument from check_asprintf (#961424)
  - Enable all collections given as arguments, not just the first one (#961430)
  - Prevent collections to be enabled multiple times (#961429)


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-8
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709964


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-7
changelog:
  - Resolves: rhbz#773720

  - objctl: add missing calls to dispatch notifications and fix memory corruption (rhbz#773720)
  - merge upstream commit dc9b04a7196b316a596036296ac1a78b21717e97 (rhbz#773720)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-8
changelog:
  - Resolves: rhbz#770455
  - Resolves: rhbz#783068
  - Resolves: rhbz#786735
  - Resolves: rhbz#786737
  - Resolves: rhbz#794744
  - Resolves: rhbz#821352
  - Resolves: rhbz#824902
  - Resolves: rhbz#827100
  - Resolves: rhbz#838524

  - Fixed bug when corosync receive JoinMSG in OPERATIONAL state (rhbz#786737)
  - merge upstream commit ffe4943ff52843e1c7beba1250256dc7b6f283e4 (rhbz#786737)
  - Correct nodeid of token when we retransmit it (rhbz#786735)
  - merge upstream commit 081bfb0a4d6050416d4daa27d7a8417f0ba697fc (rhbz#786735)
  - Wait for corosync-notifyd exit in init script (rhbz#783068)
  - merge upstream commit fbe6de4d162644aa07b14e93aa2f01299bf4692f (rhbz#783068)
  - iba: Use configured node id (rhbz#794744)
  - merge upstream commit 0b6e1dc3290cfbc6c38a19bead9f39c582f54c40 (rhbz#794744)
  - Correctly handle point-to-point IP (rhbz#821352)
  - merge upstream commit a853b6180e9832fa763ea796f310dc3de5718324 (rhbz#821352)
  - totemip: Support bind to exact address (rhbz#824902)
  - merge upstream commit 1c7b706441d18fe45c6e9c0b17ed1c8c5a723114 (rhbz#824902)
  - Register reload callback only once (rhbz#838524)
  - merge upstream commit ec51f02373d7f0372b8739ab695ae79f2dea26ce (rhbz#838524)
  - cpg: Be more verbose for procjoin message (rhbz#770455)
  - merge upstream commit dc22fd13bff1c38888ac16bc8f8fea8117ef27bd (rhbz#770455)
  - totemudpu: Bind sending sockets to bindto address (rhbz#827100)
  - merge upstream commit 71e5257eb1485ed6544ed2d17792492043e0e48d (rhbz#827100)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-9
changelog:
  - Resolves: rhbz#847232
  - Resolves: rhbz#848210

  - confdb: Fix crash with long values and add API calls to get them (rhbz#847232)
  - merge upstream commit 5704a34612d8829fce6991f130b7732108cca761 (rhbz#847232)
  - confdb: Fix crash with long values (rhbz#847232)
  - merge upstream commit 16d309be840045b3fc6d468faf07fbd727756b3f (rhbz#847232)
  - Fix dbus part of corosync-notifyd (rhbz#848210)
  - merge upstream commit 4ac9cd59e7873914fe5845e69fd79b7a2877c290 (rhbz#848210)
  - flatiron: Free outq items list on conn exit (rhbz#848210)
  - merge upstream commit 4cdaf8ef1e7676b179eaeb5bde18d4b63d17ce52 (rhbz#848210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-10
changelog:
  - Related: rhbz#847232

  - sa-confdb: fix crash due to incorrect malloc size (rhbz#847232)
  - merge upstream commit 0a85b888b0384e83fa4a80c3751a23f4de8a9310 (rhbz#847232)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-11
changelog:
  - Resolves: rhbz#787789
  - Resolves: rhbz#794522
  - Resolves: rhbz#838743
  - Resolves: rhbz#850757
  - Resolves: rhbz#861032

  - When flushing, discard only memb_join messages (rhbz#850757)
  - merge upstream commit 17e15322b7500247c539166441fb2e78cc95d02b (rhbz#850757)
  - Add man page with Confdb keys created by corosync (rhbz#794522)
  - merge upstream commit c741dbe01ea9bb45ae5d8706c8e4287aeae4bfd5 (rhbz#794522)
  - confdb_keys: Document few more runtime statistics (rhbz#794522)
  - merge upstream commit 060abd069483aa7b9d90261c11c79b2a6f6e21c1 (rhbz#794522)
  - Add support for debug level trace in config file (rhbz#838743)
  - merge upstream commit 842d387c2f53e23c055da4509a2f28753d6ffa97 (rhbz#838743)
  - Move some totem and cpg messages to trace level (rhbz#838743)
  - merge upstream commit 9deff57e779375631541bd52146701c41e3bed68 (rhbz#838743)
  - Don't access invalid mem in totemconfig (rhbz#861032)
  - merge upstream commit 539917e35a8c74b3ea4eb9ae8cddc2f73378d203 (rhbz#861032)
  - Use unix socket for local multicast loop (rhbz#787789)
  - merge upstream commit cea2b1a302e6e4563ee5817782f15ea5d941daec (rhbz#787789)
  - Move "Totem is unable to form..." message to main (rhbz#787789)
  - merge upstream commit e032c14341c38be4d273093f1e6691f8417e264d (rhbz#787789)
  - Return back "Totem is unable to form..." message (rhbz#787789)
  - merge upstream commit b343668bbfa09ebcfa4816ddf205eeb8f2ea159c (rhbz#787789)
  - Change specfile to use runautogen


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-12
changelog:
  - Resolves: rhbz#794522
  - Resolves: rhbz#873059
  - Resolves: rhbz#876908

  - Fix minor errors in man page documentation for corosync.conf (rhbz#873059)
  - merge upstream commit b14cd84e96fff1083837a70548ff9e18472c938b (rhbz#873059)
  - manpages: Fix typo in evs* manpages (rhbz#873059)
  - merge upstream commit 6735455c598393880188db7f297ec699c8ae0492 (rhbz#873059)
  - manpages: Add links for referenced confdb calls (rhbz#873059)
  - merge upstream commit b98d4ab44979a52ef74259e0676929055442cbfb (rhbz#873059)
  - manpages: Add confdb_key_get man page (rhbz#873059)
  - merge upstream commit e414e2d34c2e5e26318cfc06f8bdd5b8c8812a7e (rhbz#873059)
  - Add link to confdb_keys in corosync-objctl mpage (rhbz#794522)
  - merge upstream commit a4e7e2bc46545a5acacb3c840bda5270efec987c (rhbz#794522)
  - Track changes for confdb logging object (rhbz#876908)
  - merge upstream commit 6c9cae79dc2680d363b0cca85cbbe55a2bc9b517 (rhbz#876908)
  - Don't call reload on corosync-objctl actions (rhbz#876908)
  - merge upstream commit bdabbf6f20138c5e33154caf32cf66330356893d (rhbz#876908)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-13
changelog:
  - Resolves: rhbz#830799
  - Resolves: rhbz#863940
  - Resolves: rhbz#869609

  - cpg: Never choose downlist with localnode (rhbz#830799)
  - merge upstream commit 559d4083ed8355fe83f275e53b9c8f52a91694b2 (rhbz#830799)
  - cpg: Process join list after downlists (rhbz#830799)
  - merge upstream commit 02c5dffa5bb8579c223006fa1587de9ba7409a3d (rhbz#830799)
  - cpg: Enhance downlist selection algorithm (rhbz#830799)
  - merge upstream commit 64d0e5ace025cc929e42896c5d6beb3ef75b8244 (rhbz#830799)
  - Don't call sync_* funcs for unloaded services (rhbz#863940)
  - merge upstream commit 6ed260b0bfc5e5230a4e765b9c63caf985708c41 (rhbz#863940)
  - Handle sync and service unload correctly (rhbz#863940)
  - merge upstream commit e7536bdaf82044671d2d18ee799eeacd8603af08 (rhbz#863940)
  - Make service_build contain correct number of msgs (rhbz#863940)
  - merge upstream commit 1cea171c4d8f9dd19b4995f96842111e41f23d6c (rhbz#863940)
  - Ignore sync barrier msgs if sync doesn't started (rhbz#869609)
  - merge upstream commit ee292e7968f749f7ebc4daddeb09f39cfbb037b4 (rhbz#869609)
  - Fix problem with sync operations under very rare circumstances (rhbz#830799)
  - merge upstream commit 6fae42ba72006941c1fde99616ea30f4f10ebb38 (rhbz#830799)
  - Handle segfault in backlog_get (rhbz#830799)
  - merge upstream commit a559ccf7247bc448ba30b6ebc02a91fa986f146f (rhbz#830799)
  - Add waiting_trans_ack also to fragmentation layer (rhbz#830799)
  - merge upstream commit 7de25c3b64b2066de19b3f9075c075fb08816de6 (rhbz#830799)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-14
changelog:
  - Resolves: rhbz#865039

  - coroipc: Don't spin when waiting on semaphore (rhbz#865039)
  - merge upstream commit 7ce8718a71b7afe341d9f9ac21c6724d6f18dfc4 (rhbz#865039)
  - On places with POLLERR check also POLLNVAL (rhbz#865039)
  - merge upstream commit 105305a486ae9f171def221ad971d607604a4770 (rhbz#865039)
  - Check socket_recv error code in ipc_dispatch_get (rhbz#865039)
  - merge upstream commit 694a9c2cf0804428671bf815b974a080c7fd1c6c (rhbz#865039)
  - coroipc: Handle pfd.revents as bit-field (rhbz#865039)
  - merge upstream commit b6aabed698d34e4e79e03a3354e59a2d0121e692 (rhbz#865039)
  - ipcc: Return dup of socket fd to user application (rhbz#865039)
  - merge upstream commit 28c5907f59afd52a67be3bddff22df57e1fb36ba (rhbz#865039)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15
changelog:
  - Resolves: rhbz#902397

  - totemip: Properly detect ipv6 address (rhbz#902397)
  - merge upstream commit d76759ec26ecaeb9cc01f49e9eb0749b61454d27 (rhbz#902397)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15.1
changelog:
  - Resolves: rhbz#929101

  - Put handle to hdb in dispatch on unknown message (rhbz#929101)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#929101)
  - Properly check result of coroipcc_dispatch_put (rhbz#929101)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#929101)
  - coroipcs: Ensure rb data are not overwritten (rhbz#929101)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#929101)
  - Properly lock pending_semops (rhbz#929101)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#929101)


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871814


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901381


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953084


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.16
changelog:
  - Allow all daemons to search cluster lib files
  - Resource agents needs to manage /etc/cluster to place own configs
  Resolves:#985442


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.17
changelog:
  - Allow all daemons to manage cluster lib files if daemons_enable_cluster_mode boolean is enabled
  Resolves:#985442


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-12
changelog:
  - document that dd's iflag=fulblock prevents dd's oflag=direct
   automatic turn off when reading via pipe(#614605)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-14
changelog:
  - tweak documentation of tail --sleep-interval (#725618)
  - prevent build failure on system with mock>=1.1.9 (#691292)
  - su: fix shell suspend in tcsh (#703712)
  - ls: use acl_extended_file_nofollow() to prevent unnecessary
    autofs mounts(#720325)
  - fix cp -Z functionality if the destination exists(#715557)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-17
changelog:
  - fix memory leak in ls -l (#751974)
  - document difference between ls -lZ and ls -Zl (#771843)
  - fix various i18n patch related issues in pr (#772172)
  - df should display target device information when
    a symbolic link is specified as a parameter(#766461)
  - su no longer hangs when a program set itself to ignore
    SIG_CHLD signal, and fork a child to exec su(#754029)
  - stat recognizes few new filesystems, tail -f recognizes
    FhGFS and GPFS as remote (disables inotify) (#769874)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.1
changelog:
  - revert to polling for unknown filesystems, update
    known fs for tail and stat based on coreutils-8.21 (#924711)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.2
changelog:
  - fix parsing of field regression in sort command
    (introduced between RHEL5 and RHEL6 upstream) (#963327)


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Florian Festi <ffesti@redhat.com> - 9.0.3-40
changelog:
  - Fix verrel in kmodtool when used with variants
  - Resolves: #795577
  - Add %_smp_ncpus_max macro to allow adjusting the number of processors used
  - Resolves: #669638
  - Fix brp-java-repack-jars for jar files that contain non-standard permissions
  - Resolves: #822073


author: Colin Walters <walters@verbum.org> - 0.84-2
changelog:
  - Add patch to avoid assertions when setting a GError that
    includes a '-' in the enumeration value.  Should fix #528897


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Jan Safranek <jsafrane@redhat.com> 0.37-2.el6
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-7.1
changelog:
  - resolves: #913282
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-1
changelog:
  - Update to 5.44.1.15 from upstream CVS
  - Remove config.sub (no longer needed), remove unused patches (few are
    upstream now, few are pointless with new version), comment patches
  - Fix unbuffer to return exit code of ubuffered program
  - Fix Tk initialization


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-3
changelog:
  - Use full path to su in passmass
    Resolves: #735962
  - Fix segfault in characters matching
    Resolves: #742911
  - Fix minor man page formatting issue
    Resolves: #674866


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Petr Machata <pmachata@redhat.com> - 2013c-2
changelog:
  - Update descriptions in iso3166.tab; make Jerusalem coordinates in
    zone.tab more precise
    (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
  - Update local mean time for Jerusalem to match more-precise longitude
    (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
  - Move Morocco's midsummer 2013 transitions
    (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
    Fixes 980805 980807 981019 981020
  - Israel now falls back on the last Sunday of October
    (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.8
changelog:
  - kvm-ccid-card-emul-do-not-crash-if-backend-is-not-provid.patch [bz#965152]
  - kvm-ccid-make-backend_enum_table-static-const-and-adjust.patch [bz#965152]
  - kvm-ccid-declare-DEFAULT_ATR-table-to-be-static-const.patch [bz#965152]
  - kvm-libcacard-vscclient-fix-error-paths-for-socket-creat.patch [bz#965152]
  - kvm-libcacard-Use-format-specifier-u-instead-of-d-for-un.patch [bz#965152]
  - kvm-Spelling-fixes-in-comments-it-s-its.patch [bz#965152]
  - kvm-libcacard-Fix-unchecked-strdup-by-converting-to-g_st.patch [bz#965152]
  - kvm-libcacard-split-vscclient-main-from-socket-reading.patch [bz#965152]
  - kvm-libcacard-vscclient-to-use-QemuThread-for-portabilit.patch [bz#965152]
  - kvm-libcacard-teach-vscclient-to-use-GMainLoop-for-porta.patch [bz#965152]
  - kvm-libcacard-use-system-config-directory-for-nss-db-on-.patch [bz#965152]
  - kvm-libcacard-remove-sql-prefix.patch [bz#965152]
  - kvm-libcacard-remove-default-libcoolkey-loading.patch [bz#965152]
  - kvm-dev-smartcard-reader-nicer-debug-messages.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-remove-aborts-never-tr.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader-support-windows-guest.patch [bz#965152]
  - kvm-libcacard-change-default-ATR.patch [bz#965152]
  - kvm-hw-ccid-card-passthru.c-add-atr-check.patch [bz#965152]
  - kvm-ccid-card-passthru-dev-smartcard-reader-add-debug-en.patch [bz#965152]
  - kvm-usb-ccid-Drop-unused-CCIDCardInfo-callback-print.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-define-structs-for-CCI.patch [bz#965152]
  - kvm-dev-smartcard-reader-change-default-protocol-to-T-0.patch [bz#965152]
  - kvm-dev-smartcard-reader-copy-atr-protocol-to-ccid-param.patch [bz#965152]
  - kvm-libcacard-vreader-add-debugging-messages-for-apdu.patch [bz#965152]
  - kvm-dev-smartcard-reader-empty-implementation-for-Mechan.patch [bz#965152]
  - kvm-libcacard-cac-change-big-switch-functions-to-single-.patch [bz#965152]
  - kvm-usb-smartcard-reader-Properly-NAK-interrupt-eps-when.patch [bz#965152]
  - kvm-uhci-Don-t-allow-the-guest-to-set-port-enabled-when-.patch [bz#965152]
  - kvm-usb-ccid-remote-wakeup-support.patch [bz#965152]
  - kvm-uhci-egsm-fix.patch [bz#965152]
  - Resolves: bz#965152
    (Smartcard emulation with Windows guest fails)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.9
changelog:
  - kvm-Fix-off-by-one-error-in-page_l1_map.patch [bz#996791]
  - Resolves: bz#996791
    (Off-by-one error in page_l1_map() can lead to out-of-bounds access)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-27.P1
changelog:
  - dhclient-script: fix looking for other running dhclients (#656339)
  - avoid infinite loop when parsing slp-service-scope option (#747017)
  - dhclient-script: arping address in BOUND|RENEW|REBIND|REBOOT (#752116)
  - send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1
changelog:
  - don't flush old addresses in PREINIT (#815355)
  - remove inherit-leases.patch - it's not needed anymore (#815355)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-32.P1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843122)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843122)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-33.P1
changelog:
  - Use getifaddrs() for interface discovery code on Linux (#803540)
  - dhclient-script: do not backup&restore /etc/resolv.conf (#824622)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-34.P1
changelog:
  - Reducing the expiration time for an IPv6 lease may cause the server to crash
    (CVE-2012-3955, #858130)


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-7
changelog:
  - Daemonize per user session vdagent process on startup, this avoids a long
    delay after logging in
  - Fix mouse not working with the agent installed
    Resolves: rhbz#688257


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-8
changelog:
  - Fix chunk demultiplexing when chunks from messages for different ports
    get intermixed
    Related: rhbz#658464


author: Hans de Goede <hdegoede@redhat.com> 0.8.1-1
changelog:
  - New upstream release 0.8.1
    Resolves: rhbz#722477
  - Fixes vdagent not auto restarting when vdagentd gets restarted
    Resolves: rhbz#681797
  - Fixes vdagent crash when copying large (multiple megabytes) amount of data
    from the client clipboard to the guest clipboard
    Resolves: rhbz#690164


author: Hans de Goede <hdegoede@redhat.com> 0.8.1-3
changelog:
  - Fix resolution sync not working when connecting with a multi monitor client
    to a single monitor guest
    Resolves: rhbz#748760


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
    Resolves: rhbz#842355
  - This switches to syslog for logging, adding timestamps, etc. to the logs
    Resolves: rhbz#747894
  - This adds support for dynamically adding monitors and resolutions
    Resolves: rhbz#842298


author: Michal Hlavinka <mhlavink@redhat.com> - 39-5
changelog:
  - fix crash when bad substitution is used
  - fix crash when alias contains alias
  - fix crash when xtrace is enabled
  - use alternatives for ksh/mksh selection


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-15
changelog:
  - Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half.  (Ticket 47385)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-17
changelog:
  - Resolves: Bug 970995 - DS not shutting down when disk monitoring threshold is reached to half. (Ticket 47385)
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold. (ticket 47427)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.18
changelog:
  - Bump version to 1.2.11.15-18
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 2). (ticket 47427)
  - Resolves: Bug 987850 - Disk Monitoring not checking filesystem with logs (ticket 47741)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.19
changelog:
  - Bump version to 1.2.11.15-19
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 3). (ticket 47427)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.19
changelog:
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 4). (ticket 47427)
  - Patch was not added


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.20
changelog:
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 5 limits not displayed correctly). (ticket 47427)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-12
changelog:
  - fix for Java API __repmgr_send crash where eid=SELF_EID,
    don't update master_id so soon after election (upstream bz#16299)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Thomas Wörner <twoerner@redhat.com> 0.2.19-5
changelog:
  - fixed handling of stdin/stdout/stderr during daemon creation (rhbz#695480)
  - fixed device type determination (rhbz#707079)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-7
changelog:
  - fix: apply scheduler settings to vd* devices (#725497)
  - enhancement: add virtual-host profile (#740976)
  - enhancement: add virtual-guest profile (#740977)
  - fix: diskdevstat and netdevstat command line error handling (#747210)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-8
changelog:
  - fix: poor ping latency in 'latency-performance' profile (#714180)
  - fix: ktune breaks disks when pecifying just the device for ELEVATOR_TUNE_DEVS (#784308)
  - fix: should not disable barriers on devices with write back cache (#801561)
  - fix: /var/run/tuned/tuned.pid created with insecure permissions (#845336)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-10
changelog:
  - fix: virtual-guest profile should not deploy the nobarrier option
    resolves: rhbz#886956
  - fix: disable transparent hugepages in latency-performance profile
    resolves: rhbz#887355


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-11.1
changelog:
  - fix: tuned incorrectly sets readahead values when new device is inserted
    resolves: rhbz#907856
  - fix: there is a race when multiple devices are inserted
    resolves: rhbz#907768


author: Doug Ledford <dledford@redhat.com> - 3.2.3-7
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - Resolves: bz808424, bz808519, bz808492, bz808438, bz808507,
  	    bz808475


author: Doug Ledford <dledford@redhat.com> - 3.2.3-8
changelog:
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - bitmap_offset is signed, treat it as such
  - Related: bz808475
  - Resolves: bz808776, bz812001, bz814743, bz811282


author: Ian Kent <ikent@redhat.cem> - 5.0.5-75.el6_4
changelog:
  - bz1006163 - Race condition or other deadlocking issue on expire code path
    - expire thread use pending mutex.
  - Resolves: rhbz#1006163


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
  - Add -L${libdir}/nss3 to Libs: line in nspr.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#927171 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-19.el6
changelog:
  - Client installation crashes when Kerberos SRV record is not found (#889583)
  - Fix typo in patch 0048 for CVE-2012-5484 (#878220)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-20.el6
changelog:
  - Set maxbersize to a large value to accomondate large CRLs during replica
    installation. (#888956)
  - Set minimum version of pki-ca, pki-slient and pki-setup to 9.0.3-29 to
    pick up default CA validity period of 20 years. (#891980)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-13
changelog:
  - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)
  - Resolves: Bug 929111 - Coverity issue 13091
  - Resolves: Bug 929196 - Deadlock in DNA plug-in (ticket 634)
  - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 929115 - crash in aci evaluation (ticket 628)
  - Resolves: Bug 923240 - unintended information exposure when anonymous access is set to rootdse (ticket 47308)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-14
changelog:
  - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)


author: Angus Salkeld <asalkeld@redhat.com> - 0.9.0-2
changelog:
  - Disable loop and ipc tests as they use features not availble on brew.
  - Get the tests to print out (disable parallel-tests).
  - Call autogen.sh to get the no parallel-tests
  - Disable ppc arch as the "make check" fails.


author: David Vossel <dvossel@redhat.com> - 0.14.2-2
changelog:
  - Fixes issue with qb_ipcc_recv() that resulted in nearly 100%
    cpu usage during certain situations. (#869446)


author: David Vossel <dvossel@redhat.com> - 0.14.2-3
changelog:
  - Additional upstream work to address 100% cpu usage bug in
    realtime environment.
    cpu usage during certain situations. (#869446)


author: Tim Waugh <twaugh@redhat.com> - 8.70-7
changelog:
  - Fixed jbig2dec-nullderef patch (bug #621118).
  - Applied upstream patch to fix iname.c segfault (bug #629562).


author: Tim Waugh <twaugh@redhat.com> - 8.70-13
changelog:
  - Applied patch to prevent null pointer dereference (CVE-2010-4054,
    bug #646086).
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).
  - Applied patch to avoid reading initialization and library files from
    CWD (CVE-2010-2055, bug #599564; CVE-2010-4820, bug #771853).


author: Tim Waugh <twaugh@redhat.com> - 8.70-14
changelog:
  - Fixed character spacing problems using backported patch (bug #695766).
  - Apply some fixes from upstream to avoid gdevcups segfaults (bug #643105).


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.15.1.el6]
changelog:
  - [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
  - [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
  - [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
  - [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
  - [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
  - [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
  - [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.16.1.el6]
changelog:
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559]
  - [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
  - [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
  - [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.17.1.el6]
changelog:
  - [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
  - [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
  - [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.18.1.el6]
changelog:
  - [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
  - [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
  - [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
  - [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
  - [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
  - [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
  - [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
  - [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
  - [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
  - [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
  - [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
  - [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
  - [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
  - [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
  - [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
  - [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
  - [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
  - [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
  - [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-11
changelog:
  Resolves: #771464
  Resolves: #771465
  Resolves: #771466
  Resolves: #771467
  Resolves: #771473
  Resolves: #771475


author: Michal Luscon <mluscon@redhat.com> - 7:3.1.10-10
changelog:
  - Resolves #798090 - Client timeout uses server-side "read_timeout"
  - Resolves #833086 - Private md5 hash function does not comply FIPS
  - Resolves #782732 - Squid crashes by segfault when it reboots
  - Resolves #797571 - Squid userid is not added to wbpriv group
  - Disable strict-error-checking on account of squid-fips.patch


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-7
changelog:
  - Translation updates for Red Hat Supported Languages (RH bug #575674).
  - This also includes the fix for the or_IN crasher (RH bug #578094).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
changelog:
  * Set errno=EINVAL for invalid contexts from Dan Walsh.
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.
  Resolves: #593788


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Honza Horak <hhorak@redhat.com> - 2.19-19
changelog:
  - Added passwd.adjunct support in yppasswdd to recognize 
    password format correctly when changing password using yppasswd
    Resolves: #699667
  - Fix strcat on uninitialized memory in yppasswdd
    Resolves: #699675


author: Honza Horak <hhorak@redhat.com> - 2.19-20
changelog:
  - changed shadow patch to allow different number of columns 
    in passwd.adjunct file than in shadow file
    Resolves: #699667


author: Honza Horak <hhorak@redhat.com> - 2.19-22
changelog:
  - hide passwords in syslog when using external script
    to update user's data using yppasswdd
    Resolves: #734494


author: Honza Horak <hhorak@redhat.com> - 2.19-23
changelog:
  - fix memory leak when malformed request is received
    Resolves: #845283
  - Fixed returned value when all entries requested and no such
    map exists
    Resolves: #790812


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.19.1.el6]
changelog:
  - [fs] gfs2: Reserve journal space for quota change in do_grow (Robert S Peterson) [988384 976823]
  - [netdrv] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [995458 988460]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [996014 987426]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.20.1.el6]
changelog:
  - [fs] nfs: Add functionality to allow waiting on all outstanding reads to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Ensure that NFS file unlock waits for readahead to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Convert nfs_get_lock_context to return an ERR_PTR on failure (Dave Wysochanski) [996424 976915]
  - [x86] thermal: Disable power limit notification interrupt (Shyam Iyer) [999328 908990]
  - [x86] thermal: Delete power-limit-notification console messages (Shyam Iyer) [999328 908990]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.21.1.el6]
changelog:
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1000314 947275]
  - [net] sctp: Fix list corruption resulting from freeing an association on a list (Jiri Pirko) [1002184 887868]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.22.1.el6]
changelog:
  - [x86] Round the calculated scale factor in set_cyc2ns_scale() (Prarit Bhargava) [1001954 975507]
  - [x86] sched: Fix overflow in cyc2ns_offset (Prarit Bhargava) [1001954 975507]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.23.1.el6]
changelog:
  - [md] raid1, raid10: use freeze_array in place of raise_barrier in various places (Jes Sorensen) [1003765 997845]
  - [scsi] megaraid_sas: megaraid_sas driver init fails in kdump kernel (Nikola Pajkovsky) [1001963 833299]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (Nikola Pajkovsky) [988228 876778]
  - [net] bridge: Add multicast_querier toggle and disable queries by default (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Fix fatal typo in setup of multicast_querier_expired (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Restart queries when last querier expires (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Add br_multicast_start_querier (Flavio Leitner) [995334 905561]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1006932 1002765]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [1006956 998752]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [993547 867689]
  - [net] bridge: do not call setup_timer() multiple times (Amerigo Wang) [997746 994430]
  - [fs] lockd: protect nlm_blocked list (David Jeffery) [993544 967095]
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Jiri Benc) [987649 987651] {CVE-2013-4162}
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988708 981741]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988708 981741]
  - [fs] cifs: fix issue mounting of DFS ROOT when redirecting from one domain controller to the next (Sachin Prabhu) [994866 976535]
  - [fs] nfs: Make nfs_readdir revalidate less often (Scott Mayhew) [994867 976879]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Scott Mayhew) [994867 976879]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Scott Mayhew) [994867 976879]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Scott Mayhew) [987262 983288]
  - [fs] nfs: fix a leak at nfs_lookup_revalidate() (Dave Wysochanski) [987261 975211]
  - [acpi] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [993547 867689]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [993547 867689]
  - [acpi] Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [993547 867689]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [997745 952012]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [997745 952012]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [997745 952012]
  - [net] bridge: Replace mp->mglist hlist with a bool (Amerigo Wang) [997745 952012]
  - [mm] fadvise: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages (Larry Woodman) [994140 957821]
  - [net] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1003931 955712]
  - [virt] xen-netfront: reduce gso_max_size to account for max TCP header (Andrew Jones) [1004657 957231]
  - [pps] Fix a use-after free bug when unregistering a source (Jiri Benc) [997916 920155]
  - [scsi] fnic: Fix SGEs limit (Chris Leech) [991346 829506]


author: Bill Nottingham <notting@redhat.com> 1.3.44-1
changelog:
  - alternatives: update symlinks if they exist on installation (#104940)
  - alternatives: clarify error messages with more context (#441443)
  - alternatives: fix removal of manual links (#525021, <dtardon@redhat.com>)
  - translation updates: ml, mr, pl, ta, uk


author: Bill Nottingham <notting@redhat.com> 1.3.45-1
changelog:
  - add support for Should-Start, Should-Stop (#98470, <iarnell@gmail.com>)
  - ntsysv: don't drop initscripts with '.' in the name (#556751)
  - translation updates: el, id


author: Bill Nottingham <notting@redhat.com> 1.3.49.1-1
changelog:
  - backport LSB fixes from head
  - fixes: #693202/#771455, #649227/#771452, #750446/#771454, #701573/#771741, #696305 (<jbastian@redhat.com>)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.2
changelog:
  - Add 0169-RHBZ-993545-rw-change.patch
    * reload a readonly multipath device if a path device has become
      read/write
  - Resolves: bz #993545


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el6.2
changelog:
  - Added nss support (see 831733)
    -added  enable_nss variable, set to true - 1 as default
    -added and applied if enable_nss true patch108 java-1.7.0-openjdk-aes-buffering.patch
    -added and applied if enable_nss true patch109 java-1.7.0-openjdk-nss-config-1.patch
    -added and applied if enable_nss true patch111 java-1.7.0-openjdk-nss-config-2.patch
    -added and applied if enable_nss true patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - openjdk-nss-config-2.patch, is dynamically modified after build time and is
    changing build dependence (nss last) to runtime depndecne (nss first)
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#871771


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Disabled nss - enable_nss set to 0
  - Resolves: rhbz#895034


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-10
changelog:
  - update the validnames changes to the self-tests so that their expectations
    match the modified defaults (#737496)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-11
changelog:
  - do not overflow big UID values, use explicit base when converting UIDs
    and GIDs to integer types (#741362)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-14
changelog:
  - run the config file upgrade in %posttrans to avoid problems on multilib
    (#706454)
  - convert UID to long long on all arches to catch negative values (#741362)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-16
changelog:
  - Do not print a "Broken Pipe" error message after requesting a large group
    (#791042)
  - Fix a typo in the disconnection logic (#747281), patch by Martin Poole


author: Lennart Poettering <lpoetter@redhat.com> - 0.5-1
changelog:
  - New release
  - By default don't demote unknown threads
  - Make messages less cute
  - Resolves: #530582


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32.el6
changelog:
  - Collect /proc/pagetypeinfo in memory module
    Resolves: bz809727
  - Strip trailing newline from command output
    Resolves: bz850433
  - Add sanlock module
    Resolves: bz850779
  - Do not collect archived accounting files in psacct module
    Resolves: bz850542
  - Call spacewalk-debug from rhn module to collect satellite data
    Resolves: bz859142


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33.el6
changelog:
  - Add Red Hat Update Infrastructure module
    Resolves: bz821323
  - Collect /proc/iomem in hardware module
    Resolves: bz840975
  - Collect subscription-manager output in general module
    Resolves: bz825968
  - Collect rhsm log files in general module
    Resolves: bz826312
  - Fix exception in gluster module on non-gluster systems
    Resolves: bz849546
  - Fix exception in psql module when dbname is not given
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35.el6
changelog:
  - Report --name and --ticket values as defaults
    Resolves: bz822113
  - Fix device-mapper command execution logging
    Resolves: bz824378
  - Fix data collection and rename PostreSQL module to pgsql
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-38.el6_4.1
changelog:
  - Backport SELinux enhancements from upstream
    Resolves: bz985242
  - Fix invocation of 'udevadm info' in device-mapper plug-in
    Resolves: bz985244


author: Adam Jackson <ajax@redhat.com> 6.9.3-4
changelog:
  - Disable EXA and DRI, use ShadowFB by default, and don't gratuitously disable
    Render when using ShadowFB. (#860676)


author: Dave Young <dyoung@redhat.com> - 2.0.0-252
changelog:
  - remove hardcode for including ata_generic driver, resolve bug 820474
  - mkdumprd: Fix /dev/mapper/* links not being created by default, resolve bug 874832
  - vmcore-dmesg: Determine correct machine pointer size, resolve bug 871292


author: Dave Young <dyoung@redhat.com> - 2.0.0-254
changelog:
  - blacklist IB module mlx4_core.ko, resolve bug 876891
  - create bonding device dynamiclly, resolve bug 859824


author: Dave Young <dyoung@redhat.com> - 2.0.0-255
changelog:
  - make the SCSI dump target work with Linux on System z, resolve bug 870957
  - extract Linux on System z device init into separate functions, resolve bug 870957
  - remove hwclock calls for Linux on System z, resolve bug 821376


author: Baoquan He <bhe@redhat.com> -2.0.0-258.1
changelog:
  - kexec-tools: Map network devices based on MAC address
  - kexec-tools: Allow mkdumprd modules blacklist to be overwritten by extra_modules


author: Chris Feist <cfeist@redhat.com> - 0.9.26-6
changelog:
  - Added additional specific steps for configuring pcs on Red Hat Enterprise
    Linux 6
  - Resolves: rhbz#878682


author: Chris Feist <cfeist@redhat.com> - 0.9.26-9
changelog:
  - pcs now allows assigning constraints to group/clone/multistate resources
  - pcs no longer deletes resources from the lrm during resource removal
  - Resolves: rhbz#894174 rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.26-10
changelog:
  - Removed one extra place where pcs incorrectly deleted resources from the lrm
  - Resolves: rhbz#893221


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-11
changelog:
  - adjust the wording in the octal value byte representation
    documentation to match with upstream(#660033)


author: Petr Holasek <pholasek@redhat.com> - 2:0.55-32
changelog:
  - NUMA awareness bits were thrown away (from #673234 and #798648)
  - Mistake in sysconfig documentation was fixed (bz 732435)


author: David Sommerseth <davids@redhat.com> - 3.10.7-3
changelog:
  - Fixed even more .spec file issues and removed explicit mentioning
    of /usr/share/python-dmidecode/pymap.xml


author: Nima Talebi <nima@it.net.au> - 3.10.8-1
changelog:
  - New Upstream release.
  - Big-endian and little-endian approved.
  - Packaged unit-test to tarball.
  - Rewritten unit-test to be able to run as non-root user, where it will not
    try to read /dev/mem.
  - Added two dmidump data files to the unit-test.


author: Roman Rakus <rrakus@redhat.com> - 3.10.13-1
changelog:
  - Update to 3.10.13 release
    Resolves: #621567, #627901, #667363
  - Signal handler for SIGILL
    Resolves #646429


author: Jarod Wilson <jarod@redhat.com> [2.6.32-351.el6]
changelog:
  - [kernel] ptrace-utrace: fix PTRACE_GETEVENTMSG(pid) in sub-namespace (Oleg Nesterov) [782330]
  - [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [829149]
  - [mm] memcontrol: propagate LRU accounting state when splitting THP (Johannes Weiner) [881714]
  - [net] sctp: proc: protect bind_addr->address_list accesses with rcu_read_lock() (Thomas Graf) [706038]
  - [net] sctp: Add RCU protection to assoc->transport_addr_list (Thomas Graf) [706038]
  - [s390] zfcp: Adapt to new FC_PORTSPEED semantics (Hendrik Brueckner) [855128]
  - [virt] virtio_net: allow to change mac when iface is running (Jiri Pirko) [882868]
  - [virt] kvm: Minimal hyper-v support (Vadim Rozenfeld) [871350]
  - [fs] gfs2: Journal DLM lock has wrong label (Steven Whitehouse) [884822]
  - [mm] huge_memory: fix typo in transparent_hugepage sysfs symlink (Jeremy Eder) [887308]
  - [mm] ksm: numa awareness sysfs knob (Petr Holasek) [743643]
  - [fs] btrfs: handle IS_ERR(inode) in btrfs_lookup() (Zach Brown) [870944]
  - [kernel] sched: Add irq_{enter,exit}() to scheduler_ipi() (Stanislaw Gruszka) [836964]
  - [kernel] panic: fix a possible deadlock in panic() (Tatsuya Kitamura) [871939]


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-1
changelog:
  - update to 0.26.0
  - patch to add missing emms instructions
  - reenable iwmmxt since configure should now detect if it can't built


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-2
changelog:
  - Add experimental patch to use OpenMP
    If this causes your X server to misbehave, please file bugs.


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-11
changelog:
  - reserve uidgid pair 109:109 for rhevm (#652287)
  - add double quotes arround sourced profile.d scripts -
    allow special characters in script names(#661645)
  - use printf instead of echo in bashrc scripts(#620408)
  - change detection of interactive shell in profile for ksh(#616117)
  - respect profile.d script defined umask even in interactive
    login shells(#661681)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-13
changelog:
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)
  - reserve 175:175 for rhevagent (#709599)
  - reserve 176:176 for apache traffic server - ats(#715266)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703052)
  - do not override already set PROMPT_COMMAND envvar(#691425)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-14
changelog:
  - comment out bad spr-itunes entry from /etc/services(#710185)
  - reserve 177:177 for dhcpd (#738177)
  - reserve 179:179 for sanlock (#738294)
  - reserve 181:181 for wallaby (#772746)
  - reserve 134:134 for cimsrvr (#760178)
  - add ext4 to /etc/filesystems (#771388)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-15
changelog:
  - reserve 180:180 for aeolus (#804203)
  - reserve 182:182 for katello (#804204)
  - reserve 183:183 for elasticsearch (#804205)
  - drop root's supplementary groups (#724007)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-20.1
changelog:
  - reserve uid 189 for hacluster (#998923)
  - reserve gid 189 for haclient (#998923)
  - reserve 160:160 for swift (openstack-swift) (#998912)
  - reserve 161:161 for glance (openstack-glance) (#998912)
  - reserve 162:162 for nova (openstack-nova) (#998912)
  - reserve 163:163 for keystone (openstack-keystone) (#998912)
  - reserve 164:164 for quantum (openstack-quantum) (#998912)
  - reserve 165:165 uidgid pair for cinder (#998912)
  - reserve 166:166 uidgid pair for ceilometer (#998912)
  - reserve 187:187 for heat (openstack-heat) (#998912)
  - reserve 185:185 for jboss-as (#998912)


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820732


author: Petr Machata <pmachata@redhat.com> - 2012f-1
changelog:
  - Upstream 2012f
    - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
      and end at 3 am on Sunday 20th January 2013.  Guess it will be like
      that in following years as well.
  - Upstream 2012e
    - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.
    - Drop tzdata-2012c-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Marek Grac <mgrac@redhat.com> - 3.0.15-20
changelog:
  - fence_ipdu: New fence agent for IBM iPDU
    Resolves: rhbz#740869
  - fence_hpblade: New fence agent for HP blades
    Resolves: rhbz#818337
  - Add fence symlinks for most used fence agents
    Resolves: rhbz#800650
  - Fix unique attributes in XML output
    Resolves: rhbz#822507
  - Automatic detection of EOL in telnet sessions
    Resolves: rhbz#823430


author: Marek Grac <mgrac@redhat.com> - 3.0.15-21
changelog:
  - fence_vmware_soap: Faster fencing and fix issue with VM without valid UUID
    Resolves: rhbz#769798
  - fence_rhevm: Support new RHEV-M API
    Resolves: rhbz#863568


author: Marek Grac <mgrac@redhat.com> - 3.0.15-25.2
changelog:
  - fence_drac5: fix regression due to invalid EOL
    Resolves: rhbz#908401
  - fence_vmware_soap: traceback when hostname cannot be resolved
    Resolves: rhbz#908409


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.13.pre3
changelog:
  - use appropriate BuildRequires for nss_compat_ossl (#495532)
  - support for trusted CA certificates loading from file in PEM format


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.15.pre3
changelog:
  - try to load default NSS root certificates if the configuration option
    connection.ssl.trusted_ca_file is set to an empty string (#497788)


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.20.pre5
changelog:
  - remove patch for configure script to find OpenSSL (we use NSS instead)
  - rediffed all patches with non-zero offset
  - add buildrequires for zlib-devel


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing 
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output 
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-29
changelog:
  - luci: Fix the interaction of the force_unmount and nfsrestart checkboxes
    Resolves: rhbz#822502
  - luci: Error out if max_restarts is set but not restart_expire_time is not
    luci: Fix handling of subtree options
    Resolves: rhbz#877188
  - luci: Fix value for LVM self_fence
    Resolves: rhbz#877392
  - Remove trailing commas that cause problems for some old
    Resolves: rhbz#881796
  - luci: Audit of resource agent checkbox input
    Resolves: rhbz#881955


author: John Ruemker <jruemker@redhat.com> - 0.26.0-36
changelog:
  - Correctly display the 'type' attribute value when editing an oracledb resource
    Resolves: rhbz#886678


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-37.1
changelog:
  - Add support for fence device attributes
    Resolves: rhbz#969328
  - Add support for missing fence devices
    Resolves: rhbz#996423


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-4
changelog:
  - synaptics-1.2.1-man-page-fixes.patch: Update man page to bring it more
    in-line with the real information (#604483)
  - synaptics-1.2.1-force-mode.patch: don't allow any mode but Relative
    (#604485)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.1-1
changelog:
  - synaptics 1.4.1 (#713861)
  - drop patches, all merged upstream
  - Revert coasting enabled by default. This is a behaviour change.
  - Revert two-finger emulation by default. Behaviour change.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.2-7
changelog:
  - Merge from F18 (#835257)
    - disable xorg.conf, enable HAL files instead
    - disable smooth scrolling
    - disable coasting by default to maintain RHEL6.0 behavior


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.2-10.1
changelog:
  - Disable driver-based resolutions scaling on ABI 18.1 (#1012816)
  - Conflict with X server's that don't provide the proper scaling (#1012816)


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-12
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - Enable system-wide bash_logout
    Resolves: #677439
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #982610


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-34
changelog:
  - Avoid possible hang while logging an unexpected signal (#694820)
  - Fix Rpmdiff build warning about "dereferencing type-punned pointer" (#697783)
  - Let RPC services bind to a specific port (#697788)
  - Prevent memory corruption error while using large number of services (#711787)
  - Fix coverity defects in poll patch (#715303)


author: Vít Ondruch <vondruch@redhat.com> - 1.3.7-3
changelog:
  - Fix insecure connection to SSL repository (CVE-2012-2125, CVE-2012-2126).
    - Related: rhbz#1002838.


author: Ryan O'Hara <rohara@redhat.com> 0.8.5-13
changelog:
  - Resolves: #788541 - add option for sync daemon mcast interface
  - Resolves: #717556 - add option for sync daemon id


author: Ryan O'Hara <rohara@redhat.com> 0.8.6-1
changelog:
  - Resolves: #846035 - rebase to upstream version 0.8.6
  - Resolves: #857917 - piranha gui does not set ipvs timeout values


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - Fix the double suspend on lid close issue when not using KMS hardware.
  - Resolves: #543948


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Do not ask the user to look at the help file on suspend failure,
    it is already out of date.
  - Resolves: #640296


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-5
changelog:
  - Reinstate the "Do nothing" option on the lid close combo because
    per-screen DPMS does not work in RHEL6.
  - Resolves: #623674


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Don't dim the screen by default on battery power -- it was never a
    good default, and we're doing this a different way in GNOME 3.
  - Resolves: #912270


author: Daniel Veillard <veillard@redhat.com> - 0.6.0-1.el6
changelog:
  - Rebase to libvirt-cim 0.6.0 rhbz#739154
  - Support libvirt domain events rhbz#739153
  - Network QoS support rhbz#633338
  - cpu cgroup support rhbz#739156


author: Daniel Veillard <veillard@redhat.com> - 0.6.1-2.el6
changelog:
  - do not require specifically tog-pegasus server (rhbz#799037)
  - (de)register the schemas with sblim-sfcb if found


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.1-4.el6
changelog:
  - Fix an incomplete substitution in Makefile (rhbz#805892)
  - Only deregister cim classes on uninstall (rhbz#864096)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.1
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#951402)
  - Need to initialize domain->type to UNKNOWN (rhbz#951402)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.2
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1009117)
  - Update spec file to more closely match upstream
  - Uninstall open-pegasus-specific providers from sfcb.eml (rhbz#833633)
  - Don't install open-pegasus' specific providers (rhbz#859122)
  - Fixed dates in changelog


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-57.el6
changelog:
  - Fix `Backport gdb fix to handle identical binaries via additional build-id
    symlinks' (RH BZ 836966).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-58.el6
changelog:
  - Fix `Cannot find new threads: generic error' (RH BZ 811648).
  - Delete gdb-core-threads-5of5.patch; rename gdb-core-threads-Nof5.patch to gdb-core-threads-Nof4.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-59.el6
changelog:
  - Fix `CVE-2011-4355 gdb: arbitrary code execution via .debug_gdb_scripts'
    (Jan Kratochvil, RH BZ 756116).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6
changelog:
  - Fix `GDB cannot access struct member whose offset is larger than 256MB'
    (Siddhesh Poyarekar, RH BZ 795424).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 954300).


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-6
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments (#684933)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-7
changelog:
  - Use portreserve to protect rsync/tcp port (#786076)
  - Truncate a copied sparse file at the end of transaction
    (-S, --sparse option) (#737539)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-9
changelog:
  - Revert portreserve, as portrelease functionality needs to be
    implemented first in the rsync binary (#786076)


author: Adam Tkac <atkac redhat com> - 2.0-0.1.20120925git072225
changelog:
  - rebase to the latest 2.0 snapshot
  - patches merged
    - 0001-Fix-ticket-55-BIND-cannot-be-shutdown-correctly-if-p.patch
    - 0001-Fix-crash-on-reload-without-any-zones.patch
    - 0001-Fix-SOA-record-update.patch
    - 0001-Find-A-AAAA-delegation-glue-records-correctly.patch
    - bind-dyndb-ldap11-CVE-2012-2134.patch
    - 0001-Add-proper-DN-escaping-before-LDAP-library-calls.patch
    - bind-dyndb-ldap-CVE-2012-3429.patch


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-11
changelog:
  - Fix cpio applet to print "N blocks" to stderr, not stdout
  - Change .config, making hwclock read adjtime from correct location:
    /etc/adjtime
  - Fix awk to correctly interpret numbers with leading zeros: 02.345
  - Resolves: #615391, #621853, #633961


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-12
changelog:
  - Backport 'set -o pipefail' support
  - Resolves: #782018
  - Add btrfs support to findfs and related applets
  - Resolves: #751927


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-13
changelog:
  - Resolves: #790335 "busybox various flaws" including:
    "buffer underflow in decompression"
    "udhcpc insufficient checking of DHCP options"


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-16
changelog:
  - Resolves: #859817
  - "mknod in busybox can not create device file with major number greater than 255"


author: Avesh Agrwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Ray Strode <rstrode@redhat.com> 2.28.3-16
changelog:
  - More monitor dock fixes
    Resolves: #719023 746237
  - Potential workaround for libxklavier brokeness
    Related: #677580


author: Ray Strode <rstrode@redhat.com> 2.28.3-18
changelog:
  - Revert libxklavier workarounds introduced in -16 and -17
    They're causing additional problems.
    Resolves: #677580


author: Ray Strode <rstrode@redhat.com> 2.28.3-22
changelog:
  - Don't show unlock dialog immediately after user locks
    screen in some multimonitor scanarios
    Resolves: #744763


author: Ray Strode <rstrode@redhat.com> 2.28.3-24.1
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #994868


author: Martin Sivak <msivak@redhat.com> - 3.9-18
changelog:
  - Fix a segfault when overrides line was incomplete
    Resolves: rhbz#673100
  - Added backports directory to depmod search path
    Resolves: rhbz#761511


author: Adam Jackson <ajax@redhat.com> 1.4.13-6
changelog:
  - Fix rendering corruption on RANDR-enabled setups (#814381)
  - Fix display setup on G200ER (#810224)


author: Andy Grover <agrover@redhat.com> - 1.9.9-6
changelog:
  - Update based on review comments
    - Fully document steps to build archive
    - Remove commented-out extraneous text
    - Remove a repeat in Requires line
    - Update git-version.patch to have proper sha1
    - Change location of fabric spec files to /var/lib/target
  - Remove unused specs


author: Andy Grover <agrover@redhat.com> - 2.1.fb20-1
changelog:
  - Update to new upstream version
  - Remove patches
    * fix nodeacl-dump.patch
    * retry-target-creation.patch


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-12
changelog:
  - Use real binary name in help message (rhbz #814150)
  - Correctly detect IPv6 any address (rhbz #832121)
  - Add --title option to remote-viewer (rhbz #828339)
  - Add newline at end of verbose info output (rhbz #822794)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-15
changelog:
  - Fix crash starting remote-viewer from XPI plugin (rhbz #867459)
  - Fix crash connecting with wrong spice password (rhbz #867248)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-16
changelog:
  - Don't resize to 50x50 when toggling autoresize (rhbz #856610)
  - Allow zooming beyond normal size (rhbz #856678)
  - Allow changing resolution when in fullsreen (rhbz #864929)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-18
changelog:
  - Fix resolution when switching to fullscreen (rhbz #881020)
  - Ensure correct file extension on screenshots (rhbz #875126)


author: Anton Arapov <anton@redhat.com> - 1:1.17-10
changelog:
  - Fix buffer overflow
  - Resolves: rhbz#768803
  - Update to microcode-20111110.dat
  - Resolves: rhbz#736266


author: Mike Christie <mchristie@redhat.com> - 1.0.13-0
changelog:
  - Rebase to upstream 1.0.13.
  - Add upstream iser target. This requires setting the driver/lld
  type to iser. See targets.conf for example or the README.iscsi for
  a tgtadm example.
  - 616402 read-only support


author: Mike Christie <mchristie@redhat.com> - 1.0.13-1
changelog:
  - Drop scsi-target-utils-dynamic-link-iser.patch patch. It turns out
  in 6.0 this patch was broken and linked against rdma libs, so
  the got brought in by yum. The new patch was not broken and did not
  force linking but yum/iser users are not expecting the depencies
  to be broken.


author: Chris Feist <cfeist@redhat.com> - 3.9.2-15
changelog:
  - Fixes issue with rgmanager not recognizing a mounted cifs share due to
    trailing slashes
  - Resolves: rhbz#848642


author: Chris Feist <cfeist@redhat.com> - 3.9.2-16
changelog:
  - Add support for 'volume group per service HA-LVM support for RAID logical
    volumes'
  - Resolves: rhbz#824153


author: Chris Feist <cfeist@redhat.com> - 3.9.2-17
changelog:
  - HA LVM is now able to properly shutdown when device failures cause LVs
    to go missing which allows the service to migrate to another machine
  - Resolves: rhbz#860981


author: Chris Feist <cfeist@redhat.com> - 3.9.2-19
changelog:
  - Better error messages for the script resource have been added to aid
    debugging
  - Resolves: rhbz#773478


