# changelog

author: Nils Philippsen <nils@redhat.com> - 2:2.6.9-1
changelog:
  - version 2.6.9

    Overview of Changes from GIMP 2.6.8 to GIMP 2.6.9
    =================================================

    * Bugs fixed:

     612618 - Font selection remains visible
     622234 - gimp.desktop: image/x-psd in MimeTypes twice
     622196 - Unportable test(1) construct in configure script
     620604 - Description of "histogram" procedure is slightly inaccurate
     541586 - Tool options not saved/loaded correctly?
     614153 - Importing PDF files with long titles
     600112 - blur-gauss-selective.exe crashes
     599233 - Dialog of "Save as BMP" ignores changes which are not made
              with a mous
     565001 - Text-Tool crashes when edit a 2.4.2 version xcf
     610478 - Layer preview suddenly stops getting updated
     609026 - leaks shared memory
     609056 - Exporting to Alias PIX format fails
     608188 - a few strings in Save as... > Raw image data dialog are always
              in English
     604820 - GEGL Operation "path" crashes GIMP
     603711 - Crashes when using path tool
     607242 - GIMP 2.7.0 fails to build against libpng 1.4.0
     606372 - Saving to .ppm fails on indexed colorspace
     605237 - the "Antialiasing..." message in the progress bar does not show
              translated
     604508 - gimp-layer-new-from-visible should work from updated projection

    * Updated and new translations:

     Asturian (ast)
     Basque (eu)
     Burmese (my)
     Catalan (ca)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)
     German (de)
     Italian (it)
     Latvian (lv)
     Low German (nds)
     Romanian (ro)
     Simplified Chinese (zh_CN)
     Slovenian (sl)
     Ukrainian (uk)
     Valencian (ca@valencia)

  - remove obsolete gtk219, never-stack-trace-desktop, indexed-pnm patches
  - don't manually provide "gimp-libs%{?_isa}" in gimp-libs
  - don't package %{_datadir}/gtk-doc/html, but dirs beneath


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-21
changelog:
  - conf: Avoid NULL deref for pmsuspended domain state (rhbz#822306)
  - libvirt: Define domain crash event types (rhbz#822306)
  - qemu: Refactor processWatchdogEvent (rhbz#822306)
  - qemu: Expose qemuProcessShutdownOrReboot() (rhbz#822306)
  - qemu: Implement 'oncrash' events when guest panicked (rhbz#822306)
  - qemu: Implement 'oncrash' coredump events when guest panicked (rhbz#822306)
  - conf: Fix a memory leak when parsing nat port XML nodes (rhbz#851455)
  - security_manager: Fix comparison (rhbz#984793)
  - qemu: Prevent crash of libvirtd without guest agent configuration (rhbz#984821)
  - qemu: Fix double free of returned JSON array in qemuAgentGetVCPUs() (rhbz#984821)
  - qemu_agent: Add support for appending arrays to commands (rhbz#924400)
  - Add support for locking domain's memory pages (rhbz#947118)
  - qemu: Implement support for locking domain's memory pages (rhbz#947118)
  - qemu: Check for -realtime mlock=on|off support (rhbz#947118)
  - qemu: Move memory limit computation to a reusable function (rhbz#947118)
  - util: New virCommandSetMax(MemLock|Processes|Files) (rhbz#947118)
  - qemu: Set RLIMIT_MEMLOCK when memoryBacking/locked is used (rhbz#947118)
  - Add Gluster protocol as supported network disk backend (rhbz#849796)
  - qemu: Add support for gluster protocol based network storage backend. (rhbz#849796)
  - tests: Add tests for gluster protocol based network disks support (rhbz#849796)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-22
changelog:
  - virsh: Fix change-media bug on disk block type (rhbz#923053)
  - Fix patches for multiple graphics and spice migration (rhbz#975751)
  - Revert "qemu: Remove maximum cpu limit when setting processor count using the API" (rhbz#855296)
  - Remove VIR_DOMAIN_SHUTDOWN_CRASHED from public API (rhbz#822306)
  - Rename VIR_DOMAIN_PAUSED_GUEST_PANICKED to VIR_DOMAIN_PAUSED_CRASHED (rhbz#822306)
  - Improve LXC startup error reporting (rhbz#903092)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#928661)
  - util: Improve user lookup helper (rhbz#964359)
  - util: Add virGetGroupList (rhbz#964359)
  - util: Make virSetUIDGID async-signal-safe (rhbz#964359)
  - Fix potential deadlock across fork() in QEMU driver (rhbz#964359)
  - security: Framework for driver PreFork handler (rhbz#964359)
  - security_dac: Compute supplemental groups before fork (rhbz#964359)
  - security: Fix deadlock with prefork (rhbz#964359)
  - Split TLS test into two separate tests (rhbz#975201)
  - Avoid re-generating certs every time (rhbz#975201)
  - Change data passed into TLS test cases (rhbz#975201)
  - Fix validation of CA certificate chains (rhbz#975201)
  - Fix parallel runs of TLS test suites (rhbz#975201)
  - tests: Fix parallel runs of TLS test suites (rhbz#975201)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-23
changelog:
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#975201)
  - Fix qemuProcessReadLog with non-zero offset (rhbz#991334)
  - virSecurityManagerGenLabel: Skip seclabels without model (rhbz#997818)
  - bitmap: Add virBitmapCountBits (rhbz#997367)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997367)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997367)
  - network: Allow <vlan> in type='hostdev' networks (rhbz#999107)
  - python: Fix bindings that don't raise an exception (rhbz#912170)
  - storage: Update pool metadata after adding/removing/resizing volume (rhbz#965442)
  - storage: Fix coverity warning (rhbz#965442)
  - storage: Fix the use-after-free memory bug (rhbz#965442)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#928638)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-24
changelog:
  - security: Provide supplemental groups even when parsing label (rhbz#964359)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1000973)
  - virsh: Correct DESCRIPTION for virsh help blockcopy (rhbz#1002790)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004365)
  - build: More workarounds for if_bridge.h (rhbz#1002735)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-25
changelog:
  - migration: Do not restore labels on failed migration (rhbz#895826)
  - qemu: Use default machine type if missing it in qemu command line (rhbz#995312)
  - qemu: Don't leak vm on failure (rhbz#995312)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006710)
  - tests: Files named '.*-invalid.xml' should fail validation (rhbz#1006710)
  - tests: Use portable shell code (rhbz#1006710)
  - Add test for the nodemask double free crash (rhbz#1006710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-26
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - Introduce APIs for splitting/joining strings (rhbz#1006266)
  - Rename virKillProcess to virProcessKill (rhbz#1006266)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006266)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006266)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006266)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006266)
  - Include process start time when doing polkit checks (rhbz#1006266)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-28
changelog:
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1011981)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1013758)
  - docs: Discourage users to set hard_limit (rhbz#1013758)
  - docs: Clean 09adfdc62de2b up (rhbz#1013758)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1013758)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1013758)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014198)
  - qemu: Generate correct name for hostdev network devices (rhbz#1001881)


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.25-7
changelog:
  - Fix for CVE-2010-2244
  - Resolves: #607296
  - Resolves: #594405
  - Related 587761
  - Related 584761
  - Related 584766
  - Related 596151
  - Related 599435


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.2.1.el6
changelog:
  - buildver replaced by updatever
  - buildver reset to 60
  - updatever set to 40
  - added   JDK_BUILD_NUMBER=b`printf "%02d" buildver to make parameters
  - buildversion included in id
  - desktop icons extracted to text files
  - Resolves: rhbz#978423


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.0.el6
changelog:
  - security update to icedtea 2.4.3  (u45, b15)
  - removed unnecessary revert patch404: RH661505-toBeReverted.patch
  - get rid of unaplied patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - Resolves:rhbz#1017627


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.4.el6
changelog:
  -  patch111 - nss-config-2.patch applied jsut as dry-run
    (== not applied) as it have invalid consequences
  - Resolves: rhbz#1036813


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.0.el6
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 0
  - sync with fedora
   - added and applied patch411 1029588.patch (rh 1029588)
   - added aand applied patch410, 1015432 (rh 1015432)
  - Resolves: rhbz#1050935


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-158
changelog:
  - resolves: #984808 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-159
changelog:
  - resolves: #995109 - net ads join - segmentation fault if no realm has been
                        specified.
  - List all vfs, auth and charset modules in the spec file.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-160
changelog:
  - resolves: #948071 - Group membership is not correct on logins with new
                        AD groups.
  - resolves: #953985 - User and group info not return from a Trusted Domain.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-161
changelog:
  - resolves: #997338 - Fix smbstatus as non root user.
  - resolves: #1003689 - Fix Windows 8 printer driver support.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-164
changelog:
  - resolves: #1008574 - Fix offline logon cache not updating for cross child
                         domain group membership.


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032485 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.39-1
changelog:
  - remount /proc to set attributes from fstab #984003
  - print something when arping is detecting colliding ip addresses
  - try dhcpv6 after v4 failed
  - Allow dhclient configuration files for DHCPv6 as well. (#815676)
  - ifdown: don't call nmcli on interface that is alread down
  - call flush addresses with scope global
  - init: inform users about .override files in .conf files
  - netfs: do not force NFS exports to be mounted before _netdev mounts
  - set net.ipv6.conf..autoconf in ifup-ipv6
  - mention rule6 files
  - securetty: check if the device is in the file before attempting to write to it
  - Process rule6-* for sit devices (#840009)
  - Killproc -d should parse same values as sleep
  - Make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - bonding: set master up before slaves
  - Fix greps to correctly handle comments and quotation (#915659)


author: Lukas Nykryn <lnykryn@redhat.com> - 9.03.40-1
changelog:
  - sync disks before halt (#1006294)
  - provide KVM guest count and limit info message (#1014731)
  - add ability to disable LVM activation on boot (#1015065)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-7
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996850
    + Fix: crm_report: Collect corosync quorum data
      Resolves: rhbz#989292


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-8
changelog:
  + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
      Resolves: rhbz#997346


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-9
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  - Remove unsupported resource agent
      Resolves: rhbz#1005678
  - Provide a meaningful error if --master is used for primitives and groups


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: cman: Do not start pacemaker if cman startup fails
    + Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996850


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-12
changelog:
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
      Resolves: rhbz#1011618
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
      Resolves: rhbz#902407
  - Fix: crm_resource: Observe --master modifier for --move
      Resolves: rhbz#902407


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-14
changelog:
  - Log: crmd: Supply arguments in the correct order
      Resolves: rhbz#996850
  - Fix: Invalid formatting of log message causes crash
      Resolves: rhbz#996850


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.2
changelog:
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1052346


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.2
changelog:
  - qemuDomainDestroyFlags: Don't allow @vm to disappear while executing API (rhbz#1038816)
  - python: Return dictionary without value in case of no blockjob (rhbz#1038815)
  - remote: Fix regression in event deregistration (rhbz#1038814)
  - Add virtio-scsi to fallback models of scsi controller (rhbz#1040141)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.3
changelog:
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1055578)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1054804)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.4
changelog:
  - Block info query: Add check for transient domain (rhbz#1059904)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1062708)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1062708)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.6
changelog:
  - Remove contiguous CPU indexes assumption (rhbz#1080439)
  - qemu: monitor: Fix error message and comment when getting cpu info (rhbz#1080439)
  - qemu: monitor: Filter out thread ids of CPUS that were unplugged (rhbz#1080439)
  - qemu: monitor: Fix invalid parentheses (rhbz#1080471)
  - virNetClientSetTLSSession: Restore original signal mask (rhbz#1080501)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make 3des strength to be 128 bits instead of 168 (#1056616)
  - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits
  - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys)
  - FIPS mode: add DH selftest
  - FIPS mode: reseed DRBG properly on RAND_add()
  - FIPS mode: add RSA encrypt/decrypt selftest
  - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key
  - use the key length from configuration file if req -newkey rsa is invoked


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-25
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - drop EXPORT, RC2, and DES from the default cipher list (#1057520)
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - properly detect encryption failure in BIO (#1100819)
  - fail on hmac integrity check if the .hmac file is empty (#1105567)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-29
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.2
changelog:
  - fix CVE-2014-3567 - memory leak when handling session tickets
  - fix CVE-2014-3513 - memory leak in srtp support
  - add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-223
changelog:
  - Fix dovecot_rw_pipes() interface
  - Allow piranha_pulse_t to search tmpfs
  - Allow sysadm to stream connect to postfix-master process
  - Label /usr/sbin/fence_sanlockd as fenced_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-225
changelog:
  - Re-write rules to create tmpfs for all piranha tmpfs files/dirs
  - Allow piranha-lvs to manage piranha_tmpfs_t
  Resolves:#1018306


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-226
changelog:
  - Label /usr/sbin/fence_scsi as fenced_exec_t
  - Fix cluster domains to create dirs in /var/run/cluster as var_run_t to make resource scripts working
  Resolves:#915151


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-227
changelog:
  - Resource agents needs to manage /etc/cluster to place own config files
  Resolves:#915151
  - tgtd needs ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-228
changelog:
  - Add daemons_enable_cluster_mode boolean and turn on it by default until RHEL6.6
  Resolves:#915151
  - Add tcp/8893 as milter port
  - Allow antivirus domain to read localization without the boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-229
changelog:
  - Add bootloader_exec_t labeling for /sbin/grubby
  Resolves:#915729
  - Add etc_runtime_t label for zipl.conf
  - Allow daemons to manage cluster lib files if daemons_enable_cluster_mode is enabled


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231
changelog:
  - Add named_cache_t label for /var/lib/unbound
  - Fix puppet_domtrans_master() interface to make passenger working correctly if it wants to read puppet config files
  - Allow anitvirus domains to manage own log dirs


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-19
changelog:
  - Fix bad mouse offset when crossing Xephyr screens (#991077)
  - Fix doubling of mouse coords in multi-screen setups (#1004241)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-20
changelog:
  - Fix broken Xorg -configure (#1016854)
  - CVE-2013-1940: Fix xf86FlushInput() to drain evdev events too (#950438)
  - CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)


author: Soren Sandmann <ssp@redhat.com> 1.13.0-23.1
changelog:
  * Wed Oct 23 2013 Adam Jackson <ajax@redhat.com> 1.13.0-23
  - Fix root window damage reports when Xinerama is active (#919165)


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812082


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.62.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973130


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.11.90
changelog:
  - added patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.12
  - Resolves: rhbz#976897
  - Resolves: rhbz#983411


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.13
changelog:
  - removed upstreamed  patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.13
  - Resolves: rhbz#983411


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - removed useless runtests parts
  - included also java.security.old files
  - Resolves: rhbz#1017621


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050190


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085009


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115580
  - Resolves: rhbz#1115867


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.0-7.1.13.4
changelog:
  - Add fix for ArrayIndexOutOfBoundsException when certain glyphs are processed
  - Resolves: rhbz#1132523


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-54.rc4
changelog:
  - Fix summary and description of dc subpackages.
  - resolves: #896142
  - Remove conflicting libsmbclient.7 manpage.
  - resolves: #896240


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-56.rc4
changelog:
  - Fix libwbclient.so.0 symlink.
  - resolves: #882338
  - Fix correct linking of libreplace with cmdline-credentials.
  - resolves: #911264


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-57.rc4
changelog:
  - resolves: #984809 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-61.rc4
changelog:
  - resolves: #1073913 - Fix CVE-2012-6150.
  - resolves: #1073913 - Fix CVE-2013-4496.
  - resolves: #1073913 - Fix CVE-2013-6442.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-2
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.60.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950387


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.10-43
changelog:
  - 630019 set correct (f)pie build flags
  - 615104 fix double echo in initscript
  - 589099 Wrong file permissions for atd configuration
  - Resolves: rhbz#630019, rhbz#615104, rhbz#589099


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.22.1.el6]
changelog:
  - [fs] cifs: Check if prefixpath starts with '\' in cifs_parse_mount_options (Sachin Prabhu) [1107503 1104268]
  - [virt] kvm: enable PCI multiple-segments for pass-through device (Michael S. Tsirkin) [1103972 1103471]
  - [fs] GFS2: Lock i_mutex and use a local gfs2_holder for fallocate (Robert S Peterson) [1102313 1061910]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.23.1.el6]
changelog:
  - [net] ip_tunnel: fix ip_tunnel_find to return NULL in case the tunnel is not there (Jiri Pirko) [1107931 1104503]
  - [netdrv] bnx2x: Fix kernel crash and data miscompare after EEH recovery (Michal Schmidt) [1109269 1029600]
  - [netdrv] bnx2x: Adapter not recovery from EEH error injection (Michal Schmidt) [1109269 1029600]
  - [scsi] qla2xxx: Don't check for firmware hung during the reset context for ISP82XX (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Clear loop_id for ports that are marked lost during fabric scanning (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Issue abort command for outstanding commands during cleanup when only firmware is alive (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Reduce the time we wait for a command to complete during SCSI error handling (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Avoid escalating the SCSI error handler if the command is not found in firmware (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Set host can_queue value based on available resources (Chad Dupuis) [1110658 1054299]
  - [net] filter: prevent nla extensions to peek beyond the end of the message (Jiri Benc) [1096778 1096779] {CVE-2014-3144 CVE-2014-3145}
  - [net] bridge: add empty br_mdb_init() and br_mdb_uninit() definitions (Vlad Yasevich) [1106472 1097915]
  - [net] bridge: Correctly unregister MDB rtnetlink handlers (Vlad Yasevich) [1106472 1097915]
  - [net] rds: prevent dereference of a NULL device in rds_iw_laddr_check (Radomir Vrbovsky) [1083276 1083277] {CVE-2014-2678}
  - [s390] crypto: fix aes, des ctr mode concurrency finding (Hendrik Brueckner) [1110168 1096328]
  - [s390] crypto: fix des and des3_ede ctr concurrency issue (Hendrik Brueckner) [1109885 1065404]
  - [s390] crypto: fix des and des3_ede cbc concurrency issue (Hendrik Brueckner) [1109883 1065398]
  - [kernel] futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi() (Mateusz Guzik) [1097759 1097760] {CVE-2012-6647}
  - [libata] ahci: accommodate tag ordered controller (David Milburn) [1099725 1083748]
  - [net] mac80211: crash dues to AP powersave TX vs. wakeup race (Jacob Tanenbaum) [1083531 1083532] {CVE-2014-2706}
  - [netdrv] ath9k: tid->sched race in ath_tx_aggr_sleep() (Jacob Tanenbaum) [1083249 1083250] {CVE-2014-2672}
  - [kernel] hrtimer: Prevent all reprogramming if hang detected (Prarit Bhargava) [1096059 1075805]
  - [net] ipv4: current group_info should be put after using (Jiri Benc) [1087412 1087414] {CVE-2014-2851}
  - [kernel] tracing: Reset ring buffer when changing trace_clocks (Marcelo Tosatti) [1093984 1018138]
  - [net] rds: dereference of a NULL device (Jacob Tanenbaum) [1079218 1079219] {CVE-2013-7339}
  - [s390] crypto: fix concurrency issue in aes-ctr mode (Hendrik Brueckner) [1110169 1063478]
  - [net] ipv4: processing ancillary IP_TOS or IP_TTL (Francesco Fusco) [1094403 990694]
  - [net] ipv4: IP_TOS and IP_TTL can be specified as ancillary data (Francesco Fusco) [1094403 990694]
  - [s390] crypto: Fix aes-xts parameter corruption (Hendrik Brueckner) [1110170 1043540]
  - [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [1103068 1007459]
  - [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [1103068 1007459]
  - [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [1103068 1007459]
  - [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [1103068 1007459]
  - [fs] ext4: replace cut'n'pasted llseek code with generic_file_llseek_size (Eric Sandeen) [1103068 1007459]
  - [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [1103068 1007459]
  - [net] bridge: disable snooping if there is no querier (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: only expire the mdb entry when query is received" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: fix some kernel warning in multicast timer" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: do not call setup_timer() multiple times" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: update mdb expiration timer upon reports" (Vlad Yasevich) [1090749 1090670]
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - Revert: [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [fs] vfs: fix autofs/afs/etc magic mountpoint breakage (Frantisek Hrbata) [1094370 1079347] {CVE-2014-0203}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.24.1.el6]
changelog:
  - [alsa] aloop: Close races at restarting the stream (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Export snd_pcm_constraint_mask64() (Jaroslav Kysela) [1112492 1078592]
  - [alsa] pcm: Warn when buffer preallocation fails (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Add SNDRV_PCM_STATE_PAUSED case in wait_for_avail function (Jaroslav Kysela) [1112492 1078592]
  - [alsa] jack: Unregister input device at disconnection (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Optimize module name check (Jaroslav Kysela) [1112492 1078592]
  - [alsa] pcm: Add fallthru comments (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Fix Oops while PM resume (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: add locking to timer access (Jaroslav Kysela) [1112492 1078592]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.25.1.el6]
changelog:
  - [net] sctp: Fix sk_ack_backlog wrap-around problem (Daniel Borkmann) [1113969 1085932] {CVE-2014-4667}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.26.1.el6]
changelog:
  - [net] gro: fix deliver of trunk packets to VLAN interfaces (Marcelo Ricardo Leitner) [1116231 1112324]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.27.1.el6]
changelog:
  - [scsi] fix performance regression due to inverted blk_get_queue return (Mike Snitzer) [1117582 1098658]
  - [net] openvswitch: fix use-after-free bug in netns (Flavio Leitner) [1120651 1100127]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.28.1.el6]
changelog:
  - [kernel] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102704 1102705] {CVE-2014-3917}
  - [net] ipv4: fix route cache rebuilds (Jiri Pirko) [1113824 1111631]
  - [fs] nfsd: notify_change needs elevated write count (Mateusz Guzik) [1110177 1105057]
  - [fs] nfsv4: close needs to handle NFS4ERR_ADMIN_REVOKED (Dave Wysochanski) [1096397 1082127]
  - [fs] pipe: skip file_update_time on frozen fs (Eric Sandeen) [1114405 1093077]
  - [fs] nfs: Fail the truncate() if the lock/open stateid is invalid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Servers should only check SETATTR stateid open mode on size change (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Fail data server I/O if stateid represents a lost lock (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Fix the return value of nfs4_select_rw_stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Use the open stateid if the delegation has the wrong mode (Steve Dickson) [1090613 1075123]
  - [fs] nfs: nfs4_stateid_is_current should return 'true' for an invalid stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: fix error return in nfs4_select_rw_stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Document the recover_lost_locks kernel parameter (Jeff Layton) [1089359 963785]
  - [fs] nfs: Don't try to recover NFSv4 locks when they are lost (Jeff Layton) [1089359 963785]
  - [fs] nfs: Fix handling of partially delegated locks (Jeff Layton) [1120074 959788]
  - [fs] nfs: Convert the nfs4_lock_state->ls_flags to a bit field (Jeff Layton) [1120074 959788]
  - [x86] Optimize switch_mm() for multi-threaded workloads (Rik van Riel) [1115821 991518]
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP [1119461 1119462] {CVE-2014-4943}
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1115932 1115933] {CVE-2014-4699}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.29.1.el6]
changelog:
  - [mm] hugetlb: ensure hugepage access is denied if hugepages are not supported (Gustavo Duarte) [1118782 1086450]
  - [security] keys: Increase root_maxkeys and root_maxbytes sizes (Steve Dickson) [1115542 1113607]
  - [fs] lockd: Ensure that nlmclnt_block resets block->b_status after a server reboot (Steve Dickson) [1110180 959006]
  - [net] filter: add vlan tag access (Jiri Benc) [1108526 1082097]
  - [net] filter: add XOR operation (Jiri Benc) [1108526 1082097]
  - [net] filter: add SKF_AD_RXHASH and SKF_AD_CPU (Jiri Benc) [1108526 1082097]
  - [net] filter: Socket filter ancilliary data access for skb->dev->type (Jiri Benc) [1108526 1082097]
  - [net] filter: Add SKF_AD_QUEUE instruction (Jiri Benc) [1108526 1082097]
  - [net] filter: ingress socket filter by mark (Jiri Benc) [1108526 1082097]
  - [netdrv] bonding: look for bridge IPs in arp monitoring (Veaceslav Falico) [1102794 704190]
  - [s390] af_iucv: wrong mapping of sent and confirmed skbs (Hendrik Brueckner) [1112390 1102248]
  - [s390] af_iucv: recvmsg problem for SOCK_STREAM sockets (Hendrik Brueckner) [1112390 1102248]
  - [s390] af_iucv: fix recvmsg by replacing skb_pull() function (Hendrik Brueckner) [1112390 1102248]
  - [s390] kernel: avoid page table walk on user space access (Hendrik Brueckner) [1111194 1099146]
  - [s390] qeth: postpone freeing of qdio memory (Hendrik Brueckner) [1112134 1094379]
  - [s390] qeth: Fix retry logic in hardsetup (Hendrik Brueckner) [1112134 1094379]
  - [s390] qeth: Recognize return codes of ccw_device_set_online (Hendrik Brueckner) [1112134 1094379]
  - [s390] qdio: remove API wrappers (Hendrik Brueckner) [1112134 1094379]
  - [scsi] Ensure medium access timeout counter resets (David Jeffery) [1117153 1036884]
  - [scsi] Fix error handling when no ULD is attached (David Jeffery) [1117153 1036884]
  - [scsi] Handle disk devices which can not process medium access commands (David Jeffery) [1117153 1036884]
  - [fs] nfs: Fix calls to drop_nlink() (Steve Dickson) [1099607 1093819]
  - [mm] swap: do not skip lowest_bit in scan_swap_map() scan loop (Rafael Aquini) [1099728 1060886]
  - [mm] swap: fix shmem swapping when more than 8 areas (Rafael Aquini) [1099728 1060886]
  - [mm] swap: fix swapon size off-by-one (Rafael Aquini) [1099728 1060886]
  - [md] avoid deadlock when dirty buffers during md_stop (Jes Sorensen) [1121541 994724]
  - [x86] hyperv: bypass the timer_irq_works() check (Jason Wang) [1112226 1040349]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.29.2.el6]
changelog:
  - [kernel] futex: Fix errors in nested key ref-counting (Denys Vlasenko) [1094457 1094458] {CVE-2014-0205}
  - [net] vxlan: fix NULL pointer dereference (Jiri Benc) [1114549 1096351] {CVE-2014-3535}


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.1
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.2
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15.1
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1081611)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-10
changelog:
  - Fix emblem handling in trash (#616145)
  - Require new gnome-disk-utility (#636540)
  - Hide mounts having a path element starting with dot (#624795)
  - Fix SELinux while accessing a leaked /dev/ptmx file descriptor (#616838)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-13
changelog:
  - Fix interaction with LUKS volumes with fstab records (#599055)
  - Fix defects revealed by Coverity scan (#722465)
  - Correct return values on error for programs (#682799)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-15
changelog:
  - Fix several memory leaks (#809708)
  - Fix formatted BD-RE media detection (#669526)
  - Fix gvfs-open exit code on error (#746978)
  - Fix gvfs-info exit code on error (#746977)
  - Fix gvfs-cat exit code on error (#749369)
  - Fix gvfs-ls exit code on error (#749371)
  - Fix gvfs-mount exit code on error (#749372)


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871814


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901381


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953085


author: Honza Horak <hhorak@redhat.com> 5.1.70-1
changelog:
  - Update to MySQL 5.1.70, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
    Resolves: #990796, #842052
  - Fix mysqldump failure against MySQL 5.0.x server due missing tables
    Resolves: #877557
  - Add logrotate script
    Resolves: #904061
  - Fix init script to not show failed on start even when server started
    Resolves: #884651


author: Honza Horak <hhorak@redhat.com> 5.1.71-1
changelog:
  - Update to MySQL 5.1.71, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-71.html
    Resolves: #990796


author: Jakub Dorňák <jdornak@redhat.com> - 5.1.73-1
changelog:
  - Update to MySQL 5.1.73, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html
    (CVE-2014-0412, CVE-2014-0437, CVE-2013-5908, CVE-2014-0393,
    CVE-2014-0386, CVE-2014-0401, CVE-2014-0402)
    Resolves: #1055880


author: Honza Horak <hhorak@redhat.com> 5.1.73-2
changelog:
  - Make mysqld init script more robust and ignore existing but
    non-being-used unix socket file
    Resolves: #1058719


author: Lukas Czerner <lczerner@redhat.com> 1.41.12-9
changelog:
  - e2image: Add support for exporting image in qcow2 format (#713468)
  - mke2fs: Skip inode table initialization on some discardable devices (#713475)
  - mke2fs: Add -E discard/nodiscard options (#713475)
  - mke2fs: Allow to specify discard option in mke2fs.conf (#713475)
  - e2fsck: Allow to discard free data and inode blocks in e2fsck (#713475)
  - mke2fs: Show discard progress (#713475)
  - Don't attempt to discard flash device if -n option is given (#713475)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-12
changelog:
  - Fix spurious e2fsck checksum errors when -b option is used (#786021)
  - Fix bugs related to e2fsck -E discard (#795846)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-15
changelog:
  - Enhance e2fsck detection of invalid extent trees (#922847)
  - Several filefrag fixes (#927541)
  - Clear errors stored in superblock by newer kernels (#895679)
  - Fix journal superblock error handling (#885083)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-18
changelog:
  - Fix e2fsck false positive when blocks exist past EOF (#994615)
  - Fix resize2fs shrink corruption when moving files with many extents (#873201)


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.0-3
changelog:
  - Rebase to 2.26.0 based on the Fedora 14 package.
  - Retain glib-2.22.5-gio-hide-dot-mounts.patch
  - Drop all other patches.  Code patches were already merged into
    the 2.26.0 tarball, translation patches no longer apply.
  Resolves: #883021


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1 to pick up some additional bug fixes.
  - Remove 0001-message_to_write_data_free-Don-t-unref-data-message-.patch
    (included in 2.26.1).
  Resolves: #883021


author: Colin Walters <walters@redhat.com> - 2.26.1-3
changelog:
  - Explicitly disable systemtap for this rebase; I am not aware
    of a significant number of current users in upstream, and it
    has not to my knowledge been tested in RHEL6.
    Resolves: #1000287


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1065429


author: Colin Walters <walters@redhat.com> - 2.26.1-7
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1065429


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-24
changelog:
  - Bump version to 1.2.11.15-24
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold; Changed CONFIG_INT to CONFIG_LONG for nsslapd-disk-monioring-threshold (ticket 47427)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-25
changelog:
  - Bump version to 1.2.11.15-25
  - Resolves: Bug 1006846 - 2Master replication with SASL/GSSAPI auth broken (ticket 47523)
  - Resolves: Bug 1007452 - Under specific values of nsDS5ReplicaName, replication may get broken or updates (ticket 47489)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-26
changelog:
  - Bump version to 1.2.11.15-26
  - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47534)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-27
changelog:
  - Bump version to 1.2.11.15-27
  - Resolves: Bug 1013735 - CLEANALLRUV doesnt run across all replicas (ticket 47509)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-28
changelog:
  - Bump version to 1.2.11.15-28
  - Resolves: Bug 1016038 - Users from AD sub OU does not sync to IPA (ticket 47488)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-30
changelog:
  - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-32
changelog:
  - Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.5.z] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-33
changelog:
  - Release 1.2.11.15-33
  - Resolves: Bug 1094412 - fix memleak introduced by "Simple paged results should support async search (957864)" (DS 47623)
  - Resolves: Bug 1094413 - rhds91 389-ds-base-1.2.11.15-31.el6_5 crash on paged searches followed by simple srch (DS 47707)


author: Rafael Aquini <aquini@redhat.com> [2.6.32-425.el6]
changelog:
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [974481] {CVE-2013-4299}
  - [watchdog] iTCO_wdt: add platform driver module alias (Neil Horman) [1019497]
  - [hda] alsa: disable 44.1kHz rate for Haswell HDMI/DP audio (Jaroslav Kysela) [831970]
  - [x86] Update UV3 hub revision ID (George Beshers) [1018962]
  - [fs] xfs: Don't reference the EFI after it is freed (Eric Sandeen) [1018469]
  - [security] keys: Fix a race between negating a key and reading the error set (Dave Wysochanski) [890231]
  - [fs] nfsv4: Ensure memory ordering between nfs4_ds_connect and nfs4_fl_prepare_ds (Jeff Layton) [1012439]
  - [fs] nfsv4: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails (Jeff Layton) [1012439]
  - [md] Disable TRIM on RAID5 for RHEL 6.5 (Jes Sorensen) [837097]
  - [md] raid5: BIO_RW_SYNCIO is a bit number, not a bitmask (Jes Sorensen) [837097]
  - [virt] hyperv: framebuffer pci stub (Gerd Hoffmann) [1013335]
  - [netdrv] bnx2x: add missing enum channel_tlvs definitions (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: KR2 disablement fix (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Specific Active-DAC is not detected on 57810 (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Generalize KR work-around (Michal Schmidt) [1015137]
  - [usb] usbnet: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [usb] cdc_ether: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [mm] Revert "Find_early_table_space based on ranges that are actually being mapped" (Rafael Aquini)
  - [mm] Revert "Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping" (Rafael Aquini)
  - [mm] Revert "Group e820 entries together and add map_individual_e820 boot option" (Rafael Aquini)
  - [net] bridge: update mdb expiration timer upon reports (Vlad Yasevich) [1013816]
  - [net] veth: Remove NETIF_F_HW_VLAN_RX capability (Thomas Graf) [1018158]
  - [net] gre/vxlan: handle 802.1Q inner header properly (Thomas Graf) [997632]
  - [net] disable the new NAPI weight error message for RHEL 6.5 (Michal Schmidt) [1012090]
  - [scsi] sd: Fix parsing of 'temporary ' cache mode prefix (Ewan Milne) [955441]
  - [scsi] sd: fix array cache flushing bug causing performance problems (Ewan Milne) [955441]
  - [scsi] bfa: firmware update to 3.2.1.1 (Rob Evers) [1002770]
  - [netdrv] bna: firmware update to 3.2.1.1 (Ivan Vecera) [1002771]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-426.el6]
changelog:
  - [block] loop: unplug_fn only when backing file is attached (Lukas Czerner) [1022997]
  - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1011876]
  - [kernel] async: Revert MAX_THREADS to 256 (Neil Horman) [1021705]
  - [net] ipv6: restrict neighbor entry creation to output flow (Jiri Pirko) [997103]
  - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1011930] {CVE-2013-4387}
  - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1010347]
  - [net] unix: revert/fix race in stream sockets with SOCK_PASS* flags (Daniel Borkmann) [1019343]
  - [net] Loosen constraints for recalculating checksum in skb_segment() (Vlad Yasevich) [1020298]
  - [drm] nouveau: fix vblank deadlock (Rob Clark) [1013388]
  - [usb] xhci: refactor EHCI/xHCI port switching (Don Zickus) [970715]
  - [fs] compat_ioctl: VIDEO_SET_SPU_PALETTE missing error check (Phillip Lougher) [949573] {CVE-2013-1928}
  - [fs] vfs: fix d_mountpoint() (Ian Kent) [1011337]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [999708]
  - [fs] nfs: Remove the 'FIFO' behaviour for nfs41_setup_sequence (Steve Dickson) [1022257]
  - [fs] nfs: Record the OPEN create mode used in the nfs4_opendata structure (Steve Dickson) [1019439]
  - [fs] nfs: Simulate the change attribute (Steve Dickson) [1018653]
  - [scsi] megaraid_sas: Fix synchronization problem between sysPD IO path and AEN path (Tomas Henzl) [1019811]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-427.el6]
changelog:
  - [tools] perf: Add ref-cycles into array of tested events (Jiri Olsa) [968806]
  - [pci] Revert "make SRIOV resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "ability to relocate assigned pci-resources" (Myron Stowe) [1022270]
  - [pci] Revert "honor child buses add_size in hot plug configuration" (Myron Stowe) [1022270]
  - [pci] Revert "make cardbus-bridge resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "code and comments cleanup" (Myron Stowe) [1022270]
  - [pci] Revert "make re-allocation try harder by reassigning ranges higher in the heirarchy" (Myron Stowe) [1022270]
  - [pci] Revert "Calculate right add_size" (Myron Stowe) [1022270]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-428.el6]
changelog:
  - [fs] Revert "vfs: allow umount to handle mountpoints without revalidating them" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: massage umount_lookup_last() a bit to reduce nesting" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: rename user_path_umountat() to user_path_mountpoint_at()" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: introduce kern_path_mountpoint()" (Rafael Aquini) [1024607]
  - [fs] Revert "autofs4: fix device ioctl mount lookup" (Rafael Aquini) [1024607]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-430.el6]
changelog:
  - [x86] Revert "efi: be more paranoid about available space when creating variables" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efivars: firmware bug workarounds should be in platform code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Export efi_query_variable_store() for efivars.ko" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Check max_size only if it is non-zero" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Distinguish between "remaining space" and actually used space" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Implement efi_no_storage_paranoia parameter" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "Modify UEFI anti-bricking code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Fix dummy variable buffer allocation" (Rafael Aquini) [1012370 1023173]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.1.el6]
changelog:
  - [netdrv] mlx4_en: Check device state when setting coalescing (Amir Vadai) [1032395 975908]
  - [net] ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] sunrpc: Fix a data corruption issue when retransmitting RPC calls (Jeff Layton) [1032424 1030046]
  - [fs] gfs2: Implement a rgrp has no extents longer than X scheme (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Drop inadequate rgrps from the reservation tree (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: If requested is too large, use the largest extent in the rgrp (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Add allocation parameters structure (Robert S Peterson) [1032162 998625]
  - [fs] nfs: Don't check lock owner compatability unless file is locked - part 2 (Jeff Layton) [1032260 1007039]
  - [fs] nfs: Don't check lock owner compatibility in writes unless file is locked (Jeff Layton) [1032260 1007039]
  - [netdrv] ixgbevf: move API neg to reset path (Andy Gospodarek) [1032168 1019346]
  - [netdrv] ixgbe: fix inconsistent clearing of the multicast table (Andy Gospodarek) [1032170 975248]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [1020518 876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [1020518 876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [1020518 876275]
  - [fs] nfs: Fix the sync mount option for nfs4 mounts (Scott Mayhew) [1030171 915862]
  - [fs] nfsv4: Missing Chunk of Back Port Patch Causes Hang (Steve Dickson) [1032250 1024006]
  - [fs] xfs: Ensure sync updates the log tail correctly (Dave Chinner) [1032249 1025439]
  - [fs] xfs: only update the last_sync_lsn when a transaction completes (Dave Chinner) [1032249 1025439]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1032688 1014867]
  - [kernel] signal: stop info leak via the tkill and the tgkill syscalls (Petr Holasek) [970876 970878] {CVE-2013-2141}
  - [block] rsxx: Disallow discards from being unmapped (Steve Best) [1028278 1023897]
  - [netdrv] brcmsmac: Module alias support missing from backport (John Green) [1029330 1020461]
  - [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1027343 1023272]
  - [netdrv] mlx4_en: Fix BlueFlame race (Amir Vadai) [1029997 987634]
  - [scsi] lpfc 8.3.42: Fixed failure to allocate SCSI buffer on PPC64 platform for SLI4 devices (Rob Evers) [1030713 1024683]
  - [scsi] Revert: qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low. [1032167 995576]
  - [netdrv] tg3: avoid double-freeing of rx data memory (Ivan Vecera) [1032423 1020685]
  - [hda] alsa: Final fix for the Haswell HDMI audio 44.1kHz rate (Jaroslav Kysela) [1032247 1024548]
  - [input] wacom: do not report ABS_MISC on TPC2FG touch device (Aristeu Rozanski) [1032426 1032256]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.2.el6]
changelog:
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-25
changelog:
  - pr -n no longer crashes when passed values >= 32.
    Also line numbers are consistently padded with spaces,
    rather than with zeros for certain widths. (#997537)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-29
changelog:
  - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various
    segmentation faults in sort, uniq and join(#1015019)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.410.el6
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#995341]
  - Resolves: bz#995341
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.411.el6
changelog:
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1009370]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1009370]
  - Resolves: bz#1009370
    (qemu-img refuses to open the vmdk format image its created)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.412.el6
changelog:
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#985205]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#985205]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#985205]
  - kvm-os-posix-block-SIGUSR2-in-os_setup_early_signal_hand.patch [bz#996814]
  - Resolves: bz#985205
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#996814
    (boot image with gluster native mode cant work with attach another device from local file system)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.413.el6
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007330]
  - kvm-scsi-Fix-data-length-SCSI_SENSE_BUF_SIZE.patch [bz#956929]
  - Resolves: bz#1007330
    (CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns)
  - Resolves: bz#956929
    (/usr/libexec/qemu-kvm was killed by signal 6 (SIGABRT) when SCSI inquiry is sent to unsupported page inside the KVM guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.414.el6
changelog:
  - kvm-vmstate-Add-max_version_id-field-to-VMStateDescripti.patch [bz#1016736]
  - kvm-savevm-Introduce-max_version_id-field-to-SaveStateEn.patch [bz#1016736]
  - kvm-i386-Set-cpu-section-version_id-to-11.patch [bz#1016736]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1015633]
  - Resolves: bz#1015633
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#1016736
    (CPU migration data has version_id 12 but version 11 format)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.415.el6
changelog:
  - kvm-target-i386-don-t-migrate-steal-time-MSR-on-older-ma.patch [bz#1022821]
  - Resolves: bz#1022821
    (live-migration from RHEL6.5 to RHEL6.4.z fails with "error while loading state for instance 0x0 of device 'cpu'")


author: Michal Novotny <minovotn@redhat.com> - 0.12.1.2-2.415.el6_5.1
changelog:
  - kvm-block-Avoid-unecessary-drv-bdrv_getlength-calls.patch [bz#1022548]
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.2
changelog:
  - kvm-block-Round-up-total_sectors.patch [bz#1025596]
  - Resolves: bz#1025596
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.3
changelog:
  - kvm-monitor-monitor_puts-bail-out-when-mon-NULL.patch [bz#1015979 bz#1029329]
  - kvm-qcow2-Flush-image-after-creation.patch [bz#1029327]
  - kvm-vmdk-Fix-vmdk_parse_extents.patch [bz#1029331]
  - kvm-vmdk-fix-VMFS-extent-parsing.patch [bz#1029331]
  - Resolves: bz#1015979
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1029327
    ('qemu-img info' take too much time with 'cluster_size=512,preallocation=metadata' in the first time)
  - Resolves: bz#1029329
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1029331
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.4
changelog:
  - kvm-vmdk-Allow-read-only-open-of-VMDK-version-3.patch [bz#1056642 bz#1063202]
  - Resolves: bz#1063202
    (qemu-img fails to convert vmdk v3 image)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-45
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#893119)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#907571)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919239)
  - fixed kernel threads in hrSWRunTable (#919952)
  - fixed various error codes in Python module (#955771)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)
  - allow 'includeFile' and 'includeDir' options in configuration files
    (#917816)
  - fixed netlink message size (#927474)
  - fixed IF-MIB::ifSpeedHi on systems with non-standard interface speeds
    (#947973)
  - fixed BRIDGE-MIB::dot1dBasePortTable not to include the bridge itself
    as a port (#960568)
  - fixed snmpd segfault when 'agentaddress' configuration options is used
    and too many SIGHUP signals are received (#968898)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks
    if 'includeAllDisks' is specified in snmpd.conf (#922691)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-46
changelog:
  - fixed parsing of bulk responses (#983116)
  - added support of vzfs filesystem in hrStorageTable (#989498)
  - fixed endless loop when parsing sendmail configuration file with
    queue groups (#991213)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49
changelog:
  - fixed snmp daemons and utilities crashing in FIPS mode (#1001830)
  - added support of btrfs filesystem in hrStorageTable (#1006706)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.1
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073222)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.2
changelog:
  - added cache to hrSWRunTable to provide consistent results (#1085315)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086683)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8 (fixes #654226), pigeonhole updated to 0.2.2
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.
  - mdbox: Fixed potential assert-crash when saving multiple messages
    in one transaction
  - dsync: a lot of fixes
  - fixed lda + sieve crash


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-5
changelog:
  - script-login did not drop privileges correctly (#709095)
  - fix directory traversal due to not obeying chroot directive (#709097)
  - check proxy destination host against SSL certificate name (#754980)


author: Joe Orton <jorton@redhat.com> - 1.6.11-4
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709221)
  - add security fix for CVE-2011-0715 (#681174)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672679)


author: Joe Orton <jorton@redhat.com> - 1.6.11-5
changelog:
  - add init script for svnserve (#720790, #711904)
  - fix segfault with "AuthzForceUsernameCase lower" (#751321)
  - fix parent directory access with merges (#749494)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-4
changelog:
  - The devel subpackage now properly requires the base package to avoid
    multilib conflicts (#869633)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Peter Jones <pjones@redhat.com> - 4.02-9
changelog:
  - Avoid a workaround that causes machines to stall in PXE boots that
    use the local disk.
    Resolves: rhbz#980671


author: Zdenek Pavlas <zpavlas@redhat.com> - 1.1.30-8
changelog:
  - Check doUtilBuildTransaction return value.
  - Resolves: rhbz#709043
  - Force ASCII apostrophes in man page examples.
  - Resolves: rhbz#659740
  - Updated previous patch, adding RHN source repos.
  - Resolves: rhbz#732649
  - Related: rhbz#710469


author: Zdenek Pavlas <zpavlas@redhat.com> - 1.1.30-11
changelog:
  - Add show-changed-rco command
  - Resolves: rhbz#684925
  - Return 1 if any pkg download/gpg check fails.
  - Resolves: rhbz#701096
  - Add --compare-arch option.
  - Resolves: rhbz#710579
  - Get rid of double download attempts.
  - Resolves: rhbz#711767
  - yum-debug-restore: handle multiple kernel packages
  - Resolves: rhbz#737597
  - package-cleanup: handle kernel-PAE, keep N of each kernel package name.
  - Resolves: rhbz#769775
  - package-cleanup man page: update description of --count option.
  - Resolves: rhbz#782338


author: Zdenek Pavlas <zpavlas@redhat.com> - 1.1.30-15
changelog:
  - yum-complete-transaction: fix interrupted update processing.
  - Resolves: bug#1013475
  - fs-snapshot: add the "-c" option to dmsetup.
  - Resolves: bug#850612
  - fs-snapshot: new dmsetup does not support "-o".
  - Resolves: bug#954358


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-52
changelog:
  - fsck.gfs2: Handle multiple occurrences of one leaf in a directory hash table (6 patches)
    Resolves: rhbz#984085
  - fsck.gfs2: Don't rely on cluster.conf when rebuilding sb
    resolves: rhbz#985796


author: Chrissie Caulfield <ccaulfie@redhat.com> - 3.0.12.1-53
changelog:
  - ccs_tool: Fix example fence device in "ccs_tool create" help
    Resolves: rhbz#871603
  - libccs: don't use uninitialized value in xpathlite
    Resolves: rhbz#874538
  - qdiskd: change log level for an error message
    Resolves: rhbz#888318
  - fenced/dlm_controld/gfs_controld: use cluster_dead for corosync connections
    Resolves: rhbz#888857
  - gfs_controld: avoid mismatching messages with old cgs
    Resolves: rhbz#889564
  - cman|fenced: Fix node killing in case of a 2node cluster that suffers brief network out
    Resolves: rhbz#893925
  - config: fix cluster.conf man page to reflect correct syslog_facility default
    Resolves: rhbz#896191
  - qdiskd: Do not count missed updates from offline nodes
    Resolves: rhbz#920358
  - cman: create and destroy lockfile on restart
    Resolves: rhbz#982670


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-55
changelog:
  - Remove .patch from some patch tmp file names
  - gfs2_edit: Fix bug and add functions from upstream (6 patches)
    Resolves: rhbz#987508


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-57
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts (3 patches)
    Resolves: rhbz#996233


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-59.1
changelog:
  - config: Add missing @ to logging path so logging changes are read correctly
    Resolves: rhbz#1037510


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.2.1.el6]
changelog:
  - [netdrv] bonding: Remove redundant VLAN tag insertion logic (Nikolay Aleksandrov) [1039562 1025224]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.3.1.el6]
changelog:
  - [net] don't drop TSO features for NO_CSUM devices (Ivan Vecera) [1037812 1030631]
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.4.1.el6]
changelog:
  - [powerpc] signals: Improved mark VSX not saved with small contexts fix (Seth Jennings) [1044566 1044117]
  - [powerpc] signals: Mark VSX not saved with small contexts (Seth Jennings) [1044566 1044117]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.5.1.el6]
changelog:
  - [net] sctp: fix checksum marking for outgoing packets (Daniel Borkmann) [1046041 1040385]
  - [kernel] ptrace: Cleanup useless header (Aaron Tomlin) [1046043 1036312]
  - [kernel] ptrace: kill BKL in ptrace syscall (Aaron Tomlin) [1046043 1036312]
  - [fs] nfs: Prevent a 3-way deadlock between layoutreturn, open and state recovery (Steve Dickson) [1045094 1034487]
  - [fs] nfs: Ensure that rmdir() waits for sillyrenames to complete (Steve Dickson) [1051395 1034348]
  - [fs] nfs: wait on recovery for async session errors (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Re-use exit code in nfs4_async_handle_error() (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Update list of irrecoverable errors on DELEGRETURN (Steve Dickson) [1051393 1030049]
  - [exec] ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039486 1039487] {CVE-2013-2929}
  - [net] ipv6: router reachability probing (Jiri Benc) [1043779 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1043779 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1043779 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1043779 1029585]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Jiri Benc) [1040826 1030094]
  - [net] ndisc: Update neigh->updated with write lock (Jiri Benc) [1040826 1030094]
  - [net] ipv6: prevent fib6_run_gc() contention (Jiri Benc) [1040826 1030094]
  - [net] netfilter: push reasm skb through instead of original frag skbs (Jiri Pirko) [1049590 1011214]
  - [net] ip6_output: fragment outgoing reassembled skb properly (Jiri Pirko) [1049590 1011214]
  - [net] netfilter: nf_conntrack_ipv6: improve fragmentation handling (Jiri Pirko) [1049590 1011214]
  - [net] ipv4: fix path MTU discovery with connection tracking (Jiri Pirko) [1049590 1011214]
  - [net] ipv6: Make IP6CB(skb)->nhoff 16-bit (Jiri Pirko) [1049590 1011214]
  - [edac] Add error decoding support for AMD Fam16h processors (Prarit Bhargava) [1051394 1020290]
  - [netdrv] bnx2x: correct VF-PF channel locking scheme (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: handle known but unsupported VF messages (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: Lock DMAE when used by statistic flow (Michal Schmidt) [1040497 1029200]
  - [net] ipv6: fix leaking uninitialized port number of offender sockaddr (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: fix addr_len/msg->msg_namelen assignment in recv_error functions (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: prevent leakage of uninitialized memory to user in recv syscalls (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] ipvs: Add boundary check on ioctl arguments (Denys Vlasenko) [1030817 1030818] {CVE-2013-4588}
  - [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) [1038935 1034266]
  - [md] fix calculation of stacking limits on level change (Jes Sorensen) [1035347 1026864]
  - [ata] ahci: fix turning on LEDs in ahci_start_port() (David Milburn) [1035339 1017105]
  - [ata] libata: implement cross-port EH exclusion (David Milburn) [1035339 1017105]
  - [ata] libata add ap to ata_wait_register and intro ata_msleep (David Milburn) [1035339 1017105]
  - [netdrv] igb: Update link modes display in ethtool (Stefan Assmann) [1032389 1019578]


author: Frank Ch. Eigler <fche@redhat.com> - 1.8-5
changelog:
  - rebased to systemtap 1.8, including scox's fixes from rhel-5.9:
  - rhbz844910: grumble quietly about preexisting gid/uid conflicts in .spec  
  - rhbz843480: systemtap-server should work without systemtap-runtime preinstalled
  - rhbz843392: systemtap-testsuite unresolved deps
  - rhbz843389: sdt.c on systemtap-testsuite cannot be compiled
  - rhbz835027: systemtap-testsuite requires prelink on ia64
  - Backported fix for pr14325
  - No publican in rhel 5.
  - Add s390 to the publican blacklist.
  - rebase
  - Backported fixes for pr14230 pr14296


author: Lukas Berk <lberk@redhat.com> - 2.3-2
changelog:
  - rhbz998595: rpm -V systemtap-server complains
  - rhbz996091: systemtap.syscall/syscall.exp regressed on i686 and x86_64
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996097: systemtap.base/execve.exp fails on i686 and ppc64
  - rhbz996079: systemtap.base/warn_overflow.exp regressed on i686 and ppc64
  - rhbz915180: utrace_syscall_args.exp on s390x: "FAIL: 32_BIT_UTRACE_SYSCALL_ARGS shutdown (eof)"
  - rhbz996065: systemtap.base/bz10078.exp regressed
  - rhbz996072: systemtap.base/kmodule.exp regressed on s390x and ppc64
  - rhbz996080: systemtap.context/fib.exp regressed on s390x
  - rhbz996103: systemtap.base/bad-code.exp regressed on s390x
  - rhbz1008567: broken tapsets on s390x - print_ubacktrace() and print_ubacktrace_brief()
  - rhbz996087: systemtap.server/server_locale.exp regressed on all arches


author: Lukas Berk <lberk@redhat.com> - 2.3-3
changelog:
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996077: systemtap.base/utrace_p5.exp got unstable on i686 and x86_64
  - rhbz874205: [FJ6.2 Bug] systemtap crashes


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.7.0.el6
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed upstreamed patch402 gstackbounds.patch
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - fixed FT2_CFLAGS and FT2_LIBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085002


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115874


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-12
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - Enable system-wide bash_logout
    Resolves: #677439
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964687


author: - Guenther Deschner <gdeschner@redhat.com> - 4.0.0-62.rc4
changelog:
  - resolves: #1105501 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108842 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105571 - CVE-2014-0178: Uninitialized memory exposure.


author: Jay Fenlason <fenlason@redhat.com> - 1.5-2
changelog:
  - Build the 1.1 version as well, so we have the old library for backward
    compatability.
    Resolves: rhbz1070347


author: Michal Schmidt <mschmidt@redhat.com> - 1.5-3
changelog:
  - Make libhwloc.so point to the current library version, not the compat one.
    Resolves: rhbz1135040


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-43
changelog:
  - fixed value of UCD-SNMP-MIB::extCommand to contain full command
    line (#842279)
  - fixed rpath to perl.so (#848319)
  - added support for port numbers in 'clientaddr' configuration
    option (#833013)
  - fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
    is used (#824402)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#800671)
  - updated documentation of '-c' option of snmptrapd (#784502)
  - fixed endless loop when SIGTEM arrives in middle of internal query
    processing (#851637)
  - fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
  - removed various error log messages related to counte64 expansions
    (#846906)
  - removed various error log messages when IPv6 is disabled (#845157)
  - added support of cvfs filesystem in hrStorageTable (#846532)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#846436)
  - added support of simfs filesystem in hrStorageTable (#861152)
  - fixed responding to requests on a multihost machine (#825889)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
changelog:
  - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
  - fix: memory leak: def_urlpre is not freed (#816168)
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-28
changelog:
  - CVE-2012-2668 (#825875)
    + cipher suite selection by name can be ignored
    + default cipher suite is always selected


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-29
changelog:
  - fix: invalid order of TLS shutdown operations (#818572)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
  - fix: reading pin from file can make all TLS connections hang (#829319)
  - fix: replication with TLS does not work (#707599)
  - fix: some TLS ciphers cannot be enabled (#852339)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
  - fix: MozNSS certificate database in SQL format cannot be used (#857390)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
  - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
  - fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.5
changelog:
  - kvm-monitor-Cleanup-mon-outbuf-on-write-error.patch [bz#1069239]
  - Resolves: bz#1069239
    (QMP socket breaks on unexpected close)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.6
changelog:
  - kvm-block-Pass-filename-to-bdrv_get_full_backing_filenam.patch [bz#1071740]
  - Resolves: bz#1071740
    (RHEV: Cannot start VMs that have more than 23 snapshots.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.7
changelog:
  - kvm-ACPI-level-VCPU-enablement-info-for-libvirt-RHEL-6-o.patch [bz#1080436]
  - Resolves: bz#1080436
    ([Intel 6.5.z Bug] virsh setvcpus can not setup correct vcpu number)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-14.el6_5.1
changelog:
  - Improve handling of xmlStopParser(CVE-2013-2877)
  - Do not fetch external parameter entities (CVE-2014-0191)


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-3
changelog:
  - mkconfig.rb: fix for continued lines.
    * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
  - Resolves: rhbz#730287


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768833


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-7
changelog:
  - Addresses segfauls in Marshal.load.
    * ruby-1.8.7-p358-marshal-load-segv-fix.patch
  - Resolves: rhbz#789120


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033500


author: Andy Grover <agrover@redhat.com> - 1.0.24-4
changelog:
  - Add patches
    * 0001-iser-Fix-bidirectional-chap.patch
    * 0002-bs_aio-use-64bit-to-read-eventfd-counter.patch
    * 0003-iser-added-huge-pages-support.patch
    * 0004-iser-added-parameter-for-pool-size.patch
    * 0005-iser-limit-number-of-CQ-entries-requested.patch
    * 0006-iser-add-CQ-vector-param.patch
    * 0007-Rework-param_set_val-and-friends.patch
    * 0008-return-Reject-in-iscsi-login-text-failure.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-9
changelog:
  - Redo patches to use 'git format-patch' naming
  - Add more backported patches:
    * 0014-iser-Don-t-wait-until-iser_ib_init-to-init-list_head.patch
    * 0015-iser-cleaning-iser-ib-objects-on-lld-exit.patch
    * 0016-iser-Don-t-release-IB-resources-if-were-not-allocate.patch
    * 0017-Fix-possible-segfault-on-logicalunit-update.patch


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.3
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1087754


author: Ravishankar N <ranaraya@redhat.com> - 3.4.0.47.1u2rhs-1
changelog:
  - This build has fixes for bugs in glusterd, gNFS, dht, afr, gfapi, fuse,
    cli, gsyncd etc.
    1035519, 1028325, 1034547, 1037274, 1034238, 1027727, 1030443, 1024316,
    1028282, 1032359, 1030021, 1020995, 979861, 1032558, 929036, 1033469,
    916857


author: Ravishankar N <ranaraya@redhat.com> - 3.4.0.49rhs-1
changelog:
  - This build has fixes for bugs in cli, glusterd, fuse, dht etc.
    1023950, 1032081, 923809, 1028995, 1023921, 1037851, 956655, 1015630, 1010975,


author: Ravishankar N<ranaraya@redhat.com> - 3.4.0.52rhs-1
changelog:
  - fixes bugs in guota, gNFS, glusterd, afr etc.
    1024371, 1024316, 1021776, 1043535, 1019908, 965400, 1020816


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.53rhs-1
changelog:
  - fixes bug 916857 1005663 1032034 1046294 1046318 1042830 1045313
    1046571 1046604 1045991 1022822 1031687 1045374 972021


author: David Vossel <dvossel@redhat.com> - 3.9.2-37
changelog:
  - Fixes lvm metadata corruption caused when activating by lv
    using tags.

    Resolves: rhbz#1009772


author: David Vossel <dvossel@redhat.com> - 3.9.2-38
changelog:
  - Removes usage of fuser -kvm from fs-lib.sh based agents.
    This resolves issue with fuser blocking netfs mounts.
  - tomcat-6.sh, Do not fail on stop if config validation fails.
  - tomcat-6.sh, Set tomcat usr correctly.

    Resolves: rhbz#981717 
    Resolves: rhbz#983273
    Resolves: rhbz#1014298


author: David Vossel <dvossel@redhat.com> - 3.9.2-39
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#989284


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-40.2
changelog:
  - Fix netnfs unmount self_fence integration in netfs.sh
  - Ship send_ua helper binary to allow IPaddr2 to manage IPv6 addresses

    Resolves: rhbz#1027410
    Resolves: rhbz#1027412


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.4
changelog:
  - Med: oracledb.sh: Remove quotes around listener name
  - Add no_unmount functionality back into netfs.sh agent
  - Use crm_node instead of uname -n when referencing cluster nodes.
  - Adds Delay agent back into package.
  - Drops nginx rsyslog mysql-proxy tomcat and slapd agents.

    Resolves: rhbz#1031789
    Resolves: rhbz#1031791
    Resolves: rhbz#1031940
    Resolves: rhbz#1032778
    Resolves: rhbz#1032777


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.5
changelog:
  - High: fs-lib.sh: Fixes failure to unmount local fs
    when process runs with cwd inside fs mount.

    Resolves: rhbz#1051185


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.7
changelog:
  - High: Adds ability to monitor VirtualDomain instances using
    kvm without requiring libvirtd.

    Resolves: rhbz#1054327


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.17.1.el6]
changelog:
  - [scsi] qla2xxx: Fixup looking for a space in the outstanding_cmds array in qla2x00_alloc_iocbs() (Chad Dupuis) [1085660 1070856]
  - [scsi] isci: fix reset timeout handling (David Milburn) [1080600 1040393]
  - [scsi] isci: correct erroneous for_each_isci_host macro (David Milburn) [1074855 1059325]
  - [kernel] sched: Fix small race where child->se.parent, cfs_rq might point to invalid ones (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: suppress RCU lockdep splat in task_fork_fair (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: add local variable to store task_group() to avoid kernel stall (Naoya Horiguchi) [1081908 1043733]
  - [fs] cifs: mask off top byte in get_rfc1002_length() (Sachin Prabhu) [1085358 1069737]
  - [kernel] Prevent deadlock when post_schedule_rt() results in calling wakeup_kswapd() on multiple CPUs (Larry Woodman) [1086095 1009626]
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033533 1033534] {CVE-2013-6383}
  - [md] dm-thin: fix rcu_read_lock being held in code that can sleep (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: irqsave must always be used with the pool->lock spinlock (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: sort the per thin deferred bios using an rb_tree (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use per thin device deferred bio lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: simplify pool_is_congested (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: take care to copy the space map root before locking the superblock (Mike Snitzer) [1086007 1060381]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix refcount decrement below 0 which caused corruption (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix Documentation for held metadata root feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix noflush suspend IO queueing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix deadlock in __requeue_bio_list (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix out of data space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: ensure user takes action to validate data and metadata consistency (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: synchronize the pool mode during suspend (Mike Snitzer) [1086007 1060381]
  - [md] fix Kconfig indentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow metadata space larger than supported to go unused (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix the error path for the thin device constructor (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: avoid metadata commit if a pool's thin devices haven't changed (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix bug in resizing of thin metadata (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix pool feature parsing (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix extending the space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-common: make sure new space is used during extend (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix set_pool_mode exposed pool operation races (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: eliminate the no_free_space flag (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add error_if_no_space feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: requeue bios to DM core if no_free_space and in read-only mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: cleanup and improve no space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: log info when growing the data or metadata device (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: handle metadata failures more consistently (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: factor out check_low_water_mark and use bools (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add mappings to end of prepared_* lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: return error from alloc_data_block if pool is not in write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use bool rather than unsigned for flags in structures (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: cleanup dm-thin specific references in text (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: limit errors in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix discard support to a previously shared block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: initialize dm_thin_new_mapping returned by get_next_mapping (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: disallow decrementing a reference count below zero (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow pool in read-only mode to transition to read-write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: re-establish read-only state when switching to fail mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always fallback the pool mode if commit fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read-only mode if metadata space is exhausted (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read only mode if a mapping insert fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: return on failure in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-disk: optimise sm_disk_dec_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-table: print error on preresume failure (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: do not expose non-zero discard limits if discards disabled (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always return -ENOSPC if no_free_space is set (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: set pool read-only if breaking_sharing fails block allocation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: prefix pool error messages with pool device name (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: optimise sm_ll_dec and sm_ll_inc (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: prefetch child nodes when walking tree for a dm_btree_del (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: use pop_frame in dm_btree_del to cleanup code (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix stacking of geometry limits (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add data block size limits to Documentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix metadata dev resize detection (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: generate event when metadata threshold passed (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-metadata: add space map threshold callback (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: add threshold callback to space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: detect metadata device resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: support space map resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: refactor data dev resize (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: initialize read-only module parameters (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: submit writes outside lock (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: add recursive IO request BUG_ON (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: prefetch (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: fix slow IO latency issue specific to RHEL6 (Mike Snitzer) [1086490 1058528]
  - [netdrv] mlx4_en: Fixed crash when port type is changed (Amir Vadai) [1085658 1059586]
  - [netdrv] vmxnet3: fix netpoll race condition (Neil Horman) [1083175 1073218]
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1077345 1077346] {CVE-2014-2523}
  - [scsi] megaraid_sas: fix a small problem when reading state value from hw (Tomas Henzl) [1078641 1065187]
  - [fs] gfs2: Increase the max number of ACLs (Robert S Peterson) [1078874 1075713]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Daniel Borkmann) [1079872 960275]
  - [net] introduce SO_BPF_EXTENSIONS (Daniel Borkmann) [1079872 960275]
  - [scsi] scsi_dh: cosmetic change to sizeof() (Ewan Milne) [1075554 1062494]
  - [acpi] thermal: Check for thermal zone requirement (Nigel Croxon) [1075651 1021044]
  - [acpi] thermal: Don't invalidate thermal zone if critical trip point is bad (Nigel Croxon) [1075651 1021044]
  - [mm] flush pages from pagevec of offlined CPU (Naoya Horiguchi) [1078007 1037467]
  - [fs] xfs: deprecate nodelaylog option (Eric Sandeen) [1076056 1055644]
  - [fs] Fix mountpoint reference leakage in linkat (Jeff Layton) [1069848 1059943]
  - [net] sock: Fix release_cb kABI brekage (Thomas Graf) [1066535 1039723]
  - [vhost] fix total length when packets are too short (Michael S. Tsirkin) [1064442 1064444] {CVE-2014-0077}
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.19.1.el6]
changelog:
  - [kernel] sched: fix cpu_power initialization (Radim Krcmar) [1091826 1065304]
  - [fs] gfs2: Fix uninitialized VFS inode in gfs2_create_inode (Abhijith Das) [1092002 1059808]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.1.el6]
changelog:
  - [net] rtnetlink: Only supply IFLA_VF_PORTS information when RTEXT_FILTER_VF is set (Jiri Pirko) [1092870 1081282]
  - [net] rtnetlink: Warn when interface's information won't fit in our packet (Jiri Pirko) [1092870 1081282]
  - [net] bridge: Correctly receive hw-accelerated vlan traffic (Vlad Yasevich) [1096214 1067722]
  - [net] vlan: Allow accelerated packets to flow through the bridge (Vlad Yasevich) [1096214 1067722]
  - [infiniband] qib: Add missing serdes init sequence (Doug Ledford) [1080104 1005491]
  - [infiniband] qib: Fix txselect regression (Doug Ledford) [1080104 1005491]
  - [netdrv] ixgbevf: fix vlan acceleration (Nikolay Aleksandrov) [1094287 1069028]
  - [security] selinux: Fix kernel BUG on empty security contexts (Paul Moore) [1062502 1064545] {CVE-2014-1874}
  - [netdrv] libertas: potential oops in debugfs (Denys Vlasenko) [1034176 1034177] {CVE-2013-6378}
  - [kernel] cgroup: move put_css_set() after setting CGRP_RELEASABLE bit to fix notify_on_release (Naoya Horiguchi) [1081909 1037465]
  - [kernel] sched: Use exit hook to avoid use-after-free crash (Naoya Horiguchi) [1081914 1032347]
  - [kernel] cgroup: replace list_del() with list_del_init() to avoid panic (Naoya Horiguchi) [1081915 1032343]
  - [x86] turbostat: display C8, C9, C10 residency (Neil Horman) [1096711 1080637]
  - [scsi] lpfc 8.3.44: Fix kernel panics from corrupted ndlp list (Rob Evers) [1086839 1063699]
  - [s390] fix kernel crash due to linkage stack instructions (Hendrik Brueckner) [1067678 1067679] {CVE-2014-2039}
  - [x86] kvm: rate-limit global clock updates (Andrew Jones) [1090750 1072373]
  - [kernel] hrtimers: Move SMP function call to thread context (Mateusz Guzik) [1079869 1073129]
  - [kernel] hrtimers: Support resuming with two or more CPUs online (Mateusz Guzik) [1079869 1073129]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - [fs] ext4: fix WARN_ON from ext4_releasepage() (Carlos Maiolino) [1063508 1036814]
  - [fs] vfs: fix getname() && do_getname() interaction (Oleg Nesterov) [1075653 1024689]
  - [x86] apic: Make disabled_cpu_apicid static read_mostly, fix typos (Nigel Croxon) [1082622 980621]
  - [x86] kexec: Add disable_cpu_apicid kernel parameter (Nigel Croxon) [1082622 980621]
  - [kvm] x86: use kvm_read/write_guest_virt_system in task switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: small cleanups to kvm_task_switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: propagate error from kvm_load_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: improve save_guest_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: introduce kvm_write_guest_virt_system (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: Fix task switch privilege checks (Paolo Bonzini) [1070296 1018581]
  - [powerpc] Make function that parses RTAS error logs global (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Add RTAS event log v6 definition (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Parse and handle EPOW interrupts (Steve Best) [1091424 1028682]
  - [fs] nfsd: don't try to reuse an expired DRC entry off the list (Jeff Layton) [1088779 1036972]
  - [fs] nfsd: when reusing an existing repcache entry, unhash it first (Jeff Layton) [1088779 1036972]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.2.el6]
changelog:
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [fs] vfs: fix autofs/afs/etc magic mountpoint breakage (Frantisek Hrbata) [1094370 1079347] {CVE-2014-0203}
  - [char] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094236 1094237] {CVE-2014-0196}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.3.el6]
changelog:
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - Revert: [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.4.el6]
changelog:
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1115932 1115933] {CVE-2014-4699}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.5.el6]
changelog:
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP [1119461 1119462] {CVE-2014-4943}


author: Ondrej Vasik <ovasik@redhat.com> 1.5-7
changelog:
  - Merge review (#226434) changes: convert AN-1.5 to utf-8,
    spec file cosmetic/policy changes, ship README.linux in doc


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-3
changelog:
  - Add versioned Requires for glib2/gtk2 as spice-gtk is using symbols
    which were added in these versions
    Resolves: rhbz#980400
  - If software smartcard support is already initialized when creating a
    smartcard channel, don't consider this as a fatal error
    Resolves: rhbz#815639
  - Convert text line-endings if necessary
    Resolves: rhbz#752350


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-4
changelog:
  - Adjust BuildRequires to make sure new enough glib/gtk+ are used
    at build time as glib 2.26 is needed for proxy support
    Resolves: rhbz#948618


author: Alon Levy <alevy@redhat.com> 0.20-11
changelog:
  - Fix failed RELRO test on spice-client-glib.
    Resolves: rhbz#998529 (previous version failed RELRO rpmdiff test)


author: Marc-Andre Lureau <marcandre.lureau@gmail.com> 0.20-11.1
changelog:
  - Fix crash when audio stream isn't started yet.
    Resolves: rhbz#1090000
  - Fix memory leak of primary surface.
    Resolves: rhbz#1090001


author: Than Ngo <than@redhat.com> - 6:4.3.4-15
changelog:
  - Resolves: bz#587016, print dialogue does not remember previous settings
  - Resolves: bz#682611, Konqueror splash page in zh_TW is wrong
  - Resolves: bz#734734, plasma eating up cpu-time when systemtray some icon
  - Resolves: bz#826114, konqueror crash when trying to add "Terminal Emulator" to main menu bar


author: Peter Hatina <phatina@redhat.com> 1.8.10-1
changelog:
  - upgrade to 1.8.10
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.8.10.html
  - Related: #711024


author: Peter Hatina <phatina@redhat.com> 1.8.10-5
changelog:
  - security patches
  - Resolves: CVE-2013-6336
              CVE-2013-6338
              CVE-2013-6339
              CVE-2013-6340
              CVE-2013-7112
              CVE-2013-7114


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.8
changelog:
  - kvm-virtio-net-fix-guest-triggerable-buffer-overrun.patch [bz#1078605 bz#1078849]
  - kvm-qcow2-Check-backing_file_offset-CVE-2014-0144.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Check-refcount-table-size-CVE-2014-0144.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Validate-refcount-table-offset.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Validate-snapshot-table-offset-size-CVE-2014-0.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Validate-active-L1-table-offset-and-size-CVE-2.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Fix-backing-file-name-length-check.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_refc.patch [bz#1079337 bz#1079338]
  - kvm-qcow2-Avoid-integer-overflow-in-get_refcount-CVE-201.patch [bz#1079318 bz#1079319]
  - kvm-qcow2-Check-new-refcount-table-size-on-growth.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Fix-types-in-qcow2_alloc_clusters-and-alloc_cl.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Protect-against-some-integer-overflows-in-bdrv.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Catch-some-L1-table-index-overflows.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Fix-new-L1-table-size-check-CVE-2014-0143.patch [bz#1079318 bz#1079319]
  - kvm-qcow2-Fix-NULL-dereference-in-qcow2_open-error-path-.patch [bz#1079330 bz#1079331]
  - kvm-qcow2-Limit-snapshot-table-size.patch [bz#1079518 bz#1086678]
  - kvm-block-cloop-validate-block_size-header-field-CVE-201.patch [bz#1079452 bz#1079453]
  - kvm-block-cloop-prevent-offsets_size-integer-overflow-CV.patch [bz#1079318 bz#1079319]
  - kvm-block-cloop-refuse-images-with-huge-offsets-arrays-C.patch [bz#1079452 bz#1079453]
  - kvm-block-cloop-Fix-coding-style.patch [bz#1079518 bz#1086678]
  - kvm-cloop-Fix-bdrv_open-error-handling.patch [bz#1079518 bz#1086678]
  - kvm-block-cloop-refuse-images-with-bogus-offsets-CVE-201.patch [bz#1079452 bz#1079453]
  - kvm-block-cloop-Use-g_free-instead-of-free.patch [bz#1079518 bz#1086678]
  - kvm-block-cloop-fix-offsets-size-off-by-one.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Fix-bdrv_open-error-handling.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Unify-header-structs-and-make-them-QEMU_PACKED.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Use-unsigned-variables-for-offsets-and-sizes-C.patch [bz#1079337 bz#1079338]
  - kvm-bochs-Check-catalog_size-header-field-CVE-2014-0143.patch [bz#1079318 bz#1079319]
  - kvm-bochs-Check-extent_size-header-field-CVE-2014-0142.patch [bz#1079313 bz#1079314]
  - kvm-bochs-Fix-bitmap-offset-calculation.patch [bz#1079518 bz#1086678]
  - kvm-vpc-vhd-add-bounds-check-for-max_table_entries-and-b.patch [bz#1079452 bz#1079453]
  - kvm-vpc-Validate-block-size-CVE-2014-0142.patch [bz#1079313 bz#1079314]
  - kvm-vdi-add-bounds-checks-for-blocks_in_image-and-disk_s.patch [bz#1079452 bz#1079453]
  - kvm-vhdx-Bounds-checking-for-block_size-and-logical_sect.patch [bz#1079343 bz#1079344]
  - kvm-curl-check-data-size-before-memcpy-to-local-buffer.-.patch [bz#1079452 bz#1079453]
  - kvm-dmg-Fix-bdrv_open-error-handling.patch [bz#1079518 bz#1086678]
  - kvm-dmg-coding-style-and-indentation-cleanup.patch [bz#1079518 bz#1086678]
  - kvm-dmg-prevent-out-of-bounds-array-access-on-terminator.patch [bz#1079518 bz#1086678]
  - kvm-dmg-drop-broken-bdrv_pread-loop.patch [bz#1079518 bz#1086678]
  - kvm-dmg-use-appropriate-types-when-reading-chunks.patch [bz#1079518 bz#1086678]
  - kvm-dmg-sanitize-chunk-length-and-sectorcount-CVE-2014-0.patch [bz#1079323 bz#1079324]
  - kvm-dmg-use-uint64_t-consistently-for-sectors-and-length.patch [bz#1079518 bz#1086678]
  - kvm-dmg-prevent-chunk-buffer-overflow-CVE-2014-0145.patch [bz#1079323 bz#1079324]
  - kvm-block-Limit-request-size-CVE-2014-0143.patch [bz#1079318 bz#1079319]
  - kvm-parallels-Fix-catalog-size-integer-overflow-CVE-2014.patch [bz#1079318 bz#1079319]
  - kvm-parallels-Sanity-check-for-s-tracks-CVE-2014-0142.patch [bz#1079313 bz#1079314]
  - kvm-bochs-Fix-memory-leak-in-bochs_open-error-path.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Fix-catalog-size-check.patch [bz#1079518 bz#1086678]
  - Resolves: bz#1078849
    (EMBARGOED CVE-2014-0150 qemu-kvm: qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function [rhel-6.5.z])
  - Resolves: bz#1079313
    (CVE-2014-0142 qemu-kvm: qemu: crash by possible division by zero [rhel-6.5.z])
  - Resolves: bz#1079318
    (CVE-2014-0143 qemu-kvm: Qemu: block: multiple integer overflow flaws [rhel-6.5.z])
  - Resolves: bz#1079323
    (CVE-2014-0145 qemu-kvm: Qemu: prevent possible buffer overflows [rhel-6.5.z])
  - Resolves: bz#1079330
    (CVE-2014-0146 qemu-kvm: Qemu: qcow2: NULL dereference in qcow2_open() error path [rhel-6.5.z])
  - Resolves: bz#1079337
    (CVE-2014-0147 qemu-kvm: Qemu: block: possible crash due signed types or logic error [rhel-6.5.z])
  - Resolves: bz#1079343
    (CVE-2014-0148 qemu-kvm: Qemu: vhdx: bounds checking for block_size and logical_sector_size [rhel-6.5.z])
  - Resolves: bz#1079452
    (CVE-2014-0144 qemu-kvm: Qemu: block: missing input validation [rhel-6.5.z])
  - Resolves: bz#1086678
    (qemu-kvm: include leftover patches from block layer security audit)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.9
changelog:
  - kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087978]
  - Resolves: bz#1087978
    (CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-6.5.z])


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.10
changelog:
  - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1095692]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1095743]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load-2.patch [bz#1095743]
  - kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095739]
  - kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1095735]
  - kvm-virtio-validate-num_sg-when-mapping.patch [bz#1095763 bz#1096124]
  - kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1095763 bz#1096124]
  - kvm-enable-PCI-multiple-segments-for-pass-through-device.patch [bz#1099941]
  - kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1095675]
  - kvm-virtio-validate-config_len-on-load.patch [bz#1095779]
  - kvm-usb-fix-up-post-load-checks.patch [bz#1096825]
  - kvm-CPU-hotplug-use-apic_id_for_cpu-round-2-RHEL-6-only.patch [bz#1100575]
  - Resolves: bz#1095675
    ()
  - Resolves: bz#1095692
    ()
  - Resolves: bz#1095735
    ()
  - Resolves: bz#1095739
    ()
  - Resolves: bz#1095743
    ()
  - Resolves: bz#1095763
    ()
  - Resolves: bz#1095779
    ()
  - Resolves: bz#1096124
    ()
  - Resolves: bz#1096825
    ()
  - Resolves: bz#1099941
    ()
  - Resolves: bz#1100575
    (Some vCPU topologies not accepted by libvirt)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-22
changelog:
  - Bump version to 1.2.11.15-22
  - Resolves: Bug 923909 - 389-ds-base cannot handle Kerberos tickets with PAC (ticket 632)
  - Resolves: Bug 928159 - CVE-2013-1897 389-ds: unintended information exposure when rootdse is enabled
  - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47367)
  - Resolves: Bug 951616 - error syncing group if group member user is not synced (ticket 47327)
  - Resolves: Bug 953052 - DESC should not be empty as per RFC 2252 (ldapv3) (ticket 47376)
  - Resolves: Bug 957305 - DS instance crashes under a high load (ticket 47349)
  - Resolves: Bug 957864 - Simple paged results should support async search (ticket 47347)
  - Resolves: Bug 958522 - loading an entry from the database should use str2entry_fast (ticket 531)
  - Resolves: Bug 962885 - RHEL 6.2 to 6.4 ipa upgrade selinuxusermap data not replicating (ticket 47362)
  - Resolves: Bug 963234 - When integrating with Red Hat IDM/DS, an LDAP protocol error is thrown (ticket 47361)
  - Resolves: Bug 966781 - new ldap connections can block ldaps and ldapi connections (ticket 47359)
  - Resolves: Bug 968383 - Wrong error code return when using EXTERNAL SASL and untrusted certificate (ticket 580)
  - Resolves: Bug 968503 - flush_ber error sending back start_tls response will deadlock (ticket 47375)
  - Resolves: Bug 969210 - make listen backlog size configurable (ticket 47377)
  - Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half. (ticket 47385)
  - Resolves: Bug 971033 - connections attribute in cn=snmp,cn=monitor is counted twice (ticket 47383)
  - Resolves: Bug 971966 - 389 DS Replication failures due to Fractional updates (ticket 47386)
  - Resolves: Bug 972976 - ldbm errors when adding/modifying/deleting entries (ticket 47392)
  - Resolves: Bug 973583 - ns-slapd instance crashed with signal 11 SIGSEGV (ticket 47391)
  - Resolves: Bug 974361 - Account policy plugin fails to lock user when policy is created for individual users to lock based to createtimestamp. (ticket 47397)
  - Resolves: Bug 974719 - rhds90 crash on tombstone modrdn (ticket 47396)
  - Resolves: Bug 974875 - Attributes fail to be encrypted/decrypted properly when replicated (ticket 47393)
  - Resolves: Bug 975243 - DS9 still observes altStateAttrName as createTimestamp when attribute is removed from the account policy (ticket 47395)
  - Resolves: Bug 975250 - Changelog deadlock replication failures with DNA (ticket 47410)
  - Resolves: Bug 976546 - Attribute names are incorrect in search results (ticket 47402)
  - Resolves: Bug 979169 - allow setting db deadlock rejection policy (ticket 47409)
  - Resolves: Bug 979435 - Replication problem with add-delete requests on single-value (ticket 47424)
  - Resolves: Bug 979515 - CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold (ticket 47427)
  - Resolves: Bug 983091 - Memory leak in 389-ds-base 1.2.11.15 (ticket 47428)
  - Resolves: Bug 986131 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. (ticket 47435)
  - Resolves: Bug 986424 - fix recent compiler warnings (ticket 47378)
  - Resolves: Bug 986857 - Disk Monitoring not checking filesystem with logs (ticket 47441)
  - Resolves: Bug 987703 - memleaks in set_krb5_creds (ticket 47421)
  - Resolves: Bug 988562 - deadlock after adding and deleting entries (ticket 47449)
  - Resolves: Bug 989692 - Sorting with attributes in ldapsearch gives incorrect result (ticket 543)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-23
changelog:
  - Bump version to 1.2.11.15-23
  - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN
  - Resolves: Bug 1002260 - server fails to start after upgrade(schema error) (ticket 47318)


author: Patsy Franklin <pfrankli@redhat.com> - 2014b-1
changelog:
  - Rebase to 2014b
    - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
    - New entry for Troll station, Antarctica.


author: Patsy Franklin <pfrankli@redhat.com> - 2014c-1
changelog:
  - Rebase to 2014c
    - Egypt's government to re-apply daylight saving time.
    - zic now generates transitions for minimum time values
    - Port to Cygwin sans glibc.
    - Remove now-confusing comment about Jordan.


author: Patsy Franklin <pfrankli@redhat.com> - 2014d-1
changelog:
  - Rebase to 2014d
    - zic no longer generates files containing time stamps before
      the Big Bang.  This works around GNOME bug 730332


author: Patsy Franklin <pfrankli@redhat.com> - 2014e-1
changelog:
  - Rebase to 2014e
    - Morrocco suspends DTS for Ramadan 
         June 28 at 03:00 and August 2 at 02:00
    - Egypt suspends DTS for Ramadan
         June 26 and July 31 at 24:00


author: Patsy Franklin <pfrankli@redhat.com> - 2014f-1
changelog:
  - Rebase to 2014f
    - Several Russian time zone changes effective on 2014-10-26
      at 02:00 local time.  See NEWS file for additional details.


author: Patsy Franklin <pfrankli@redhat.com> - 2014g-1
changelog:
  - Rebase to 2014g
    - Turks & Caicos is switching from US eastern time to UTC-4
      year-round, modeled as a switch from EST/EDT to AST 
      on 2014-11-02 at 02:00.


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-22
changelog:
  - mod_cache: fix header merging for 304 case, thanks to Roy Badami (#868283)
  - mod_cache: fix handling of 304 responses (#868253)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-25
changelog:
  - htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
  - rotatelogs: omit the second arg when invoking a post-rotate program (#876923)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-30
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1078174)
  - mod_log_config: add security fix for CVE-2014-0098 (#1078174)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-45
changelog:
  - Don't create zero-length request files (bug #740093).
  - The lp and lpr commands did not cancel jobs queued from stdin on an error
    (STR #4015, bug #738914).
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #738410)


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-51
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-59.2
changelog:
  - fenced: keep manual ACk fifo open for longer and also make fenced_external()
    write to it.
    Resolves: rhbz#1079991


author: Than Ngo <than@redhat.com> - 4.3.4-22
changelog:
  - Resolves: bz#666295, Missing help page(s) for Plasma workspace
  - Resolves: bz#587917, gnome/kde system monitor tool use same icon


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.8
changelog:
  - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)
  - QoS: make tc filters match all traffic (rhbz#1096806)
  - use virBitmapFree instead of VIR_FREE for cpumask (rhbz#1091206)
  - Properly free vcpupin info for unplugged CPUs (rhbz#1091206)
  - sanlock: code movement in virLockManagerSanlockAcquire (rhbz#1097227)
  - sanlock: don't fail with unregistered domains (rhbz#1097227)
  - sanlock: avoid leak in acquire() (rhbz#1097227)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.9
changelog:
  - qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1100671)
  - qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1100671)
  - qemu: Ignore temporary job errors when checking migration status (rhbz#1100671)
  - qemu: Send migrate_cancel when aborting migration (rhbz#1100642)
  - qemu: add host-pci-multidomain capability (rhbz#1100737)
  - qemu: specify domain in host-side PCI addresses when needed/supported (rhbz#1100737)
  - spec: Switch to "git am" for applying patches


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.10
changelog:
  - qemu: Properly format the uuid string in error messages (rhbz#1110185)
  - qemu: Use maximum guest memory size when getting NUMA placement advice (rhbz#1112819)
  - qemu: fix live pinning to memory node on NUMA system (rhbz#1112820)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1112820)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.11
changelog:
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1120669)
  - virsh: Use inactive definition when removing disk from config (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1120669)


author: Steve Grubb <sgrubb@redhat.com> 2.1-4
changelog:
  resolves: #584981 - Improvements needed for Common Criteria
  resolves: #697463 - Broken autrace -r on s390x


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-1
changelog:
  resolves: #709345 auditctl -l returns 0 even if it fails on dropped capabilities
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #715315 remote client gets disk_error event instead of disk_full
  resolves: #728475 remove krb5 related options from audisp-remote.conf


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-2
changelog:
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #748124 Auditctl doesn't recognize accept4 syscall


author: Steve Grubb <sgrubb@redhat.com> 2.2-1
changelog:
  resolves: #658630 include "check but load" option for audit
  resolves: #766920 audit filtering on file accesses not owned by user
  resolves: #797848 audit.rules contains a typo error


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.132
changelog:
  - Revert the addition of gettimeofday vDSO function for ppc and ppc64 until
    OPD VDSO function call issues are resolved (#1026533).


author: Ray Strode <rstrode@redhat.com> 0.8.3-18
changelog:
  - Handle underpowered video cards that force multiple monitors
    to use one controller
    Resolves: #625209
  - Fix serial console crash
  - Resolves: #631924
  - Remove plymouth-text-and-details-only obsoletes
    Resolves: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-19
changelog:
  - Add explicit, versioned dep on core-libs subpackage to various
    parts of the spec file to silence rpmdiff
    Related: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-21
changelog:
  - Update lock icon dimensions to match dimensions of old
    icon to silence rpmdiff
    Related: #612665


author: Ray Strode <rstrode@redhat.com> 0.8.3-27.1
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1125325


author: Ryan O'Hara <rohara@redhat.com> 0.8.6-1
changelog:
  - Resolves: #846035 - rebase to upstream version 0.8.6
  - Resolves: #857917 - piranha gui does not set ipvs timeout values


author: David Lutterkort <lutter@redhat.com> - 0.9.0-2
changelog:
  - Fix BZ 781690 "Grub password --encrypted argument not parsed correctly"
  - Fix BZ 628507 "It's better to support fadot --help or fadot -h"
  - Fix BZ 759311 "augtool --autosave does not save changes"


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-4
changelog:
  - Rebase to Augeas 1.0.0
    resolves: rhbz#817753
  - Add dependency on libxml2-devel.
  - Remove all patches (all upstream and included in 1.0.0).
  - Print tests/test-suite.log when the tests fail.
  - Add fix for regression added in 1.0.0 (RHBZ#920609).
  - Fix tests/test-run.


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage
  - do not create static libraries (#556052)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-5
changelog:
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
  - TLS-1.2 certificate request compatibility fix


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-9
changelog:
  - documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
    and gnutls-cli-debug(1) manual pages (#648297, #807746)
  - add fallback to import the private keys as PKCS#8 (#745242)
  - silence the strict aliasing warnings


author: Jan Safranek <jsafrane@redhat.com> - 0.7.12-3
changelog:
  - Fix init scripts to be LSB compliant and return correct exit codes
    and provide mandatory actions (#523169, #523177)


author: Jan Safranek <jsafrane@redhat.com> - 0.7.16-2
changelog:
  - Fix the ipmievd initscript to actually start the service and better
    LSB compatibility (#578172). As consequence, the init scripts were
    renamed to ipmidetectd and bmc-watchdog (was: freeipmi-ipmidetectd
    and freeipmi-bmc-watchdog).


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-1
changelog:
  - Rebase to upstream except changes in /etc/freeipmi/ config dir.
    preserving original locations.
  - 1.2.1:
  - Add ipmiseld daemon and subpackage.
  - Update paths for libfreeipmi changes.
  - Remove bmc-watchdog logrotate file.
  - 1.1.1:
  - Add contrib and ipmi-pet files.
  - Make main package own logdir.
  - 1.0.4:
  - Add pkgconfig files.
  - 0.9.0:
  - Add interpret sub-library.
  - Support new config files.
  - Support new ipmi_monitoring*.h files.
  - Support new manpages.
  - Support new compatability symlinks/manpages.
  - 0.8.0:
  - Update for dcmi.
  - Update for renaming of pef-config.
  - Update for new .h files.
  - Add new ipmimonitoring config manpages.


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-6
changelog:
  - Kernel module aliases configuration for kmod. (#1032965)
  - Big-Endian authentication fix. (#1032963)
  - Revert short options removal to preserve 0.7.16 command line parameters.


author: David Knox <dknox@redhat.com> 0:6.0.24-68
changelog:
  - Related: CVE-2013-4322. arches needs to be specified
  - as in arches noarch, so docs/webapps will produce
  - full files. building for ppc will generate empty
  - javadoc.


author: David Knox <dknox@redhat.com> 0:6.0.24-72
changelog:
  - Related: CVE-2014-0075 - rebuild to generate javadoc
  - correctly. previous build generated 0-length javadoc


author: David Knox <dknox@redhat.com> 0:6.0.24-76
changelog:
  - Related: CVE-2013-4590 incrementing release. added 
  - excludearch to the spec file for ppc and ppc64. building
  - on ppc produces empty javadoc files.


author: David Knox <dknox@redhat.com> 0:6.0.24-78
changelog:
  - Related: CVE-2013-4590  - remove xml schema names javaee_5,
  - javaee_web_services_1_2, and javaee_web_services_1_2_client
  - from descriptor.DigesterFactory initialization. These
  - schema definitions are not relevant to 6.0.24 as the version
  - of their spec did not exist at the time.


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-23
changelog:
  - Resolves: rhbz#998587 underspecific build requires (of nss)
  - Resolves: rhbz#1002312 IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  - Resolves: rhbz#1002633 openswan needs -fips subpackage that would provide the FIPS hmac files


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-27.3
changelog:
  - Resolves: rhbz#1089395 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1090273 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1090614 pluto cannot write to directories not owned by root


author: David Knox <dknox@redhat.com> 0:6.0.24-54
changelog:
  - Resolves: rhbz 845786 webapps-docs contained empty files. 
  - Build will fail of architectures ppc s390x ppc64. Use
  - target rhel-6.5-noarch-candidate
  - Resolves: rhbz 915447 can't start with group other than tomcat
  - changes in init script
  - Resolves: rhbz 950647 Error in checkpidfile of init script
  - Resolves: rhbz 977685 Full implementation of juli and juli
  - adapters. Jars placed in new extras directory
  - Resolves: 960225 Status script does not return proper PID


author: David Knox <dknox@redhat.com> 0:6.0.24-58
changelog:
  - Resolves: CVE-2012-3439
  - Resolves: CVE-2012-4534
  - Resolves: CVE-2012-3546
  - Increment build number to exceed 6_4 build number. Demanded
  - by rpmdiff


author: David Knox <dknox@redhat.com> 0:6.0.24-60
changelog:
  - Related: rhbz 915447 can't start with group other than tomcat
  - changes in init script. Added TOMCAT_GROUP to sysconfig and
  - tomcat6.conf. Also changed default to the group that user
  - tomcat belongs.


author: David Vossel <dvossel@redhat.com> - 3.9.2-35
changelog:
  - Fixes invalid return statement in LVM retry clvmd activation
  - Adds ability to disable findmnt to avoid autofs complications
    for fs-util based rgmanager agents.

    Resolves: rhbz#974941
    Resolves: rhbz#989284


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.1.pre1
changelog:
  - update to 2.2.3pre1, which you can still get from upstream
  - build with -fno-strict-aliasing to avoid problems triggered by strict aliasing
  - package the translations


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580192, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.4.pre1
changelog:
  - import patch to handle initgroups directly rather than forcing libc to
    use the enumeration interfaces, which could result in two threads calling
    initgroups() at the same time to both get a subset of the right answers
    (#705466)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.5.pre1
changelog:
  - when the initgroups function needs to parse a group entry which contains a
    large list of users, reinitialize the buffer that we pass to the parsing
    function, which destroyed what we passed to it the previous time (#751461)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-31
changelog:
  - mod_cgid: add security fix for CVE-2014-0231
  - mod_deflate: add security fix for CVE-2014-0118
  - mod_status: add security fix for CVE-2014-0226


author: Karel Zak <kzak@redhat.com> 2.17.2-12.8
changelog:
  - fix #679833 - [RFE] tailf should support `-n 0`
  - fix #719927 - [RFE] add adjtimex --compare functionality to hwclock
  - fix #730272 - losetup does not warn if backing file is < 512 bytes
  - fix #730891 - document cfdisk and sfdisk incompatibility with 4096-bytes sectors
  - fix #736245 - lscpu segfault on non-uniform cpu configuration
  - fix #783514 - default barrier setting for EXT3 filesystems in mount manpage is wrong
  - fix #790728 - blkid ignores swap UUIDs if the first byte is a zero byte
  - fix #818621 - lsblk should not open device it prints info about
  - fix #819945 - hwclock --systz causes a system time jump
  - fix #820183 - mount(8) man page should include relatime in defaults definition
  - fix #823008 - update to the latest upstream lscpu and chcpu
  - fix #837935 - lscpu coredumps on a system with 158 active processors
  - fix #839281 - inode_readahead for ext4 should be inode_readahead_blks
  - fix #845477 - Duplicate SElinux mount options cause mounting from the commandline to fail
  - fix #845971 - while reading /etc/fstab, mount command returns a device before a directory
  - fix #858009 - login doesn't update /var/run/utmp properly
  - fix #809449 - Backport inverse tree (-s) option for lsblk and related patches
  - fix #809139 - lsblk option -D missing in manpage


author: Karel Zak <kzak@redhat.com> 2.17.2-12.13
changelog:
  - fix #816342 - agetty: improve CLOCAL flag management
  - fix #846790 - missing information about threads in kill(2) man page
  - fix #864585 - "mount -av" displays "nothing was mounted" when a /sbin/mount.<fs> successed
  - fix #868850 - sfdisk man pages should refer block devices as "block devices" rather than disks.
  - fix #870128 - improve blkid documentation
  - fix #870854 - Cannot use user@domain format for console logins
  - fix #872291 - "man hwclock" says to run non-existent "adjtimex" utility
  - fix #958313 - Add /bin/logger symlink
  - fix #885313 - hexdump segfault
  - fix #915844 - mount man page incorrectly describes behaviour of "relatime" mount option
  - fix #947062 - blkdiscard command support
  - fix #966735 - CPU add/delete util-linux-ng patch
  - fix #859523 - fallocate: add punch hole support


author: Harald Hoyer <harald@redhat.com> 004-322
changelog:
  - fixed crypt: add support for keyfiles in the initramfs
  Resolves: rhbz#886194
  - fixed FIPS module checking
  Resolves: rhbz#947729


author: Harald Hoyer <harald@redhat.com> 004-327
changelog:
  - fixed crypt: add support for keyfiles in the initramfs
  Resolves: rhbz#886194
  - fixed booting with iSCSI and without network config
  Resolves: rhbz#910605


author: Harald Hoyer <harald@redhat.com> 004-334
changelog:
  - fcoe: add --link-retry=100 to fipvlan call
  Resolves: rhbz#1012316
  - ldd: redirect error to /dev/null
  - do not turn off biosdevname, if not given on kernel cmdline
  Resolves: rhbz#1011508
  - network: fixed ibft parsing
  Resolves: rhbz#1011508


author: Harald Hoyer <harald@redhat.com> 004-336.1
changelog:
  - fix FIPS kernel check for RHEV-H
  Resolves: rhbz#1029846
  - fixed unlocking of encrypted partitions in FIPS mode
  Resolves: rhbz#1029844


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-124
changelog:
  - Resolves: #1002161 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-125
changelog:
  - Resolves: #997406 - sssd_nss core dumps under load
  - Resolves: #984814 - sssd_nss terminated with segmentation fault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-126
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - A better version of already committed patch
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-128
changelog:
  - More upstream fixes to prevent memcache crashes
  - Related: #997406 - sssd_nss core dumps under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129
changelog:
  - Do not crash when LDAP disconnects while a search is still in progress
  - Resolves: #1019979 - sssd_be segfault when authenticating against active
                         directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.1
changelog:
  - Inherit UID limits for subdomains
  - Resolves: #1028046 - Creating system accounts on a IdM client takes up
                         to 10 minutes when AD trust is configured in the IdM.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.2
changelog:
  - Allow combination of proxy id backend and LDAP auth backend
  - Resolves: #1032966 - SSSD: Allow for custom attributes in RDN when using
                         id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.3
changelog:
  - Resolves: #1036168 - sssd can't retrieve auto.master when using the
                         "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.4
changelog:
  - Resolves: #1044905 - sssd_nss grows memory footprint when netgroups
                         are requested


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Petr Machata <pmachata@redhat.com> - 2013c-2
changelog:
  - Update descriptions in iso3166.tab; make Jerusalem coordinates in
    zone.tab more precise
    (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
  - Update local mean time for Jerusalem to match more-precise longitude
    (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
  - Move Morocco's midsummer 2013 transitions
    (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
    Fixes 980805 980807 981019 981020
  - Israel now falls back on the last Sunday of October
    (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)


author: Patsy Franklin <pfrankli@redhat.com> 2013i-1
changelog:
  - Rebase with early release of 2013i from Paul Eggert github.
    - Jordan switches back to standard time at 00:00 on December 20,2013.
    - The 2006-2011 transition schedule is planned to resume in 2014.
    - The compile-time flag NOSOLAR has been removed.
    - The files solar87, solar88, and solar89 are no longer distributed.
    - tz-link.htm now mentions Noda Time.


author: Peter Jones <pjones@redhat.com> - 4.02-2
changelog:
  - Split out extlinux and tftpboot.
  - remove duplicate syslinux/com32/ left in base package after 3.83-2


author: Peter Jones <pjones@redhat.com> - 4.02-9
changelog:
  - Avoid a workaround that causes machines to stall in PXE boots that
    use the local disk.
    ResolveS:rhbz#980671


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Enable ECC support for suite b and add upstream fixes for aec gcm
  - Use the unstripped upstream sources with ecc support
  - Limit the ECC support to suite b
  - Apply several upstream aes gcm fixes
  - Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Resolves: rhbz#960208 - Enable ECC in nss-softoken
  - Related: rhbz#919172


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
  - Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
  - When appling the patches use a backup file suffix that better describes the patch purpose


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-6
changelog:
  - create -fips packages 
  - patch submitted by Bob Relyea <rrelyea@redhat.com>
  - fix the script that splits softoken off from nss
  - patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Fix the PR_Access stub to actually access the correct permissions
  - Resolves: rhbz#1008513 - Unable to login in fips mode
  - Run the lowhash tests
  - Require nspr-4.0.0 and nss-util-3.15.1


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable new packaging but don't apply nss-fips-post.patch
  - Related: rhbz#1008513 - Unable to login in fips mode


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-10
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1082900 - Admin server segfault when configuration DS configured on SSL port
  - Add workaround to %check
  unset DISPLAY
   section for RHEL-5 based build machines where kernel lacks support for hardware GCM


author: Uri Lublin <uril@redhat.com> - 0.12.0-13
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#950029
    Resolves: rhbz#956345


author: Uri Lublin <uril@redhat.com> - 0.12.3-1
changelog:
  - Rebase to upstream 0.12.3 + some additional patches
    Resolves: rhbz#952671
    Resolves: rhbz#884812
    Resolves: rhbz#918472
    Resolves: rhbz#958276
    Resolves: rhbz#978403


author: Uri Lublin <uril@redhat.com> - 0.12.4-1
changelog:
  - Rebase to upstream 0.12.4
    Resolves: rhbz#952671
    Resolves: rhbz#859027
    Resolves: rhbz#823472
    Resolves: rhbz#961848
    Resolves: rhbz#977998
    Resolves: rhbz#887775


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-4
changelog:
  - Fix spice-server crash when client sends a password which is too long
    Resolves: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Make sure we build with -Wl,-z,relro. We used to be getting that flag
    from openssl, but this is no longer the case, and rpmdiff gave a huge
    warning about it being gone
    Related: rhbz#999839 (CVE-2013-4282)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-4
changelog:
  - Don't call xmlCleanupParser, it breaks other users of thread-private
    storage
    Resolves: #578568


author: Jasper St. Pierre <jasper@redhat.com> - 2.26.0-6.1
changelog:
  - Fix build by linking in -lm
  - io: Implement strict network policy (CVE-2013-1881)
    Resolves: #1049155


author: Hans de Goede <hdegoede@redhat.com> 6.4.9.6-2
changelog:
  - Fix undefined warning in magick-type.h (#489453)
  - Do not link PerlMagick against system ImageMagick, but against the just
    build one


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.5.4.7-3
changelog:
  - Update to version 6.5.4-7
  - Use lzma-compressed source tarball as sugested by Ville Skyttä (BZ#515319)


author: Olivier Fourdan <ofourdan@redhat.com> - 6.5.4.7-6
changelog:
  - Add fix for CVE-2010-4167
  - Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
  - Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798


author: Dave Airlie <airlied@redhat.com> 9.0-0.8
changelog:
  - CVE-2013-1872: memory corruption oob read/write on intel (#963063)
  - CVE-2013-1993: interger overflows in protocol handling (#961613)


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.9-169
changelog:
  - resolves: #1105499 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108840 - CVE-2014-3493: DoS in smbd with unicode path names.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64
changelog:
  - Add 0167-RHBZ-735459-fix-mpathpersist-fns.patch
    * make reservation_key display correctly in "multipathd show config"
  - Resolves: bz #735459


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.65
changelog:
  - Add 0168-RHBZ-902585-fix-state-size.patch
  - Add 0169-RHBZ-895110-fix-params-size.patch
  - Add 0170-RHBZ-889441-fix-multipath.rules.patch
    * set multipath device link_priority on change events
  - Add 0171-RHBZ-904836-handle-other-sector-sizes.patch
    * handle non-512 byte GPT sector sizes
  - Add 0172-RHBZ-895110-fix-output-buffer.patch
    * make sure to allocate enough space to print the full list of multipath
      devices
  - Add 0173-RHBZ-889429-catch-early-uevents.patch
    * start up the uevent listening thread early, but don't start up the
      uevent servicing thread until after you configure
  - Add 0174-RHBZ-875199-null-vector-fix.patch
  - Add 0175-RHBZ-889987-detect_prio_fix.patch
    * make sure you can actually get the priority with ALUA before selecting it.
  - Add 0176-RHBZ-892292-listing-speedup.patch
    * don't get the wwid when you are just listing a device.
  - Add 0177-RHBZ-902593-multipath-c-manpage.patch
  - Add 0178-RHBZ-918825-kpartx-loop-devices.patch
    * remove tmp loopdev create by 'kpartx -l' in no partitions were found.
  - Add 0179-RHBZ-920448-bindings-fix.patch
    * try to find the smallest unused user friendly name
  - Add 0180-RHBZ-928831-check-dm-version-for-retain_hwhandler.patch
    * don't use retain_attached_hw_handler on kernels that don't support it.
  - Resolves: bz #875199, #889429, #889441, #889987, #892292, #902585
  - Resolves: bz #902593, #904836, #918825, #920448, #928831


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.66
changelog:
  - Modify 0179-RHBZ-920448-bindings-fix.patch
    * remove debug printing.
  - Add 0181-RHBZ-958091-check-for-erofs.patch
    * only retry loading a map read-only if the read/write load failed
      with EROFS
  - Add 0182-RHBZ-947798-rw-change.patch
    * add a new multipath.conf default keyword "reload_readwrite". If set
      to "yes", multipathd will listed to path device change events, and
      if they device has become read/write, it will reload the multipath
      device.
  - Add 0183-RHBZ-924924-replace_whitespace.patch
    * add a new multipath.conf default keyword "replace_wwid_whitespace".
      If set to "yes", multipath will add --replace-whitespace for devices
      That use the default getuid callout.
  - Add 0184-RHBZ-975676-fix_cli_resize.patch
    * deal with resize happening while path device is being removed.
  - Add 0185-RH-signal-waiter.patch
    * send waiter thread a signal to break out of waiting for dm events
  - Resolves: bz #958091, #947798, #924924, #975676


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.67
changelog:
  - Modify 0182-RHBZ-947798-rw-change.patch
    * Add documentation
  - Modify 0183-RHBZ-924924-replace_whitespace.patch
    * Add documentation
  - Add 0186-RHBZ-974129-delay_set_fast_io_fail.patch
    * fix issue with setting fast_io_fail_tmo past the old value of
      dev_loss_tmo
  - Resolves: bz #974129, #924924, #947798


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.68
changelog:
  - Modify 0172-RHBZ-895110-fix-output-buffer.patch
    * free buffer
  - Modify 0182-RHBZ-947798-rw-change.patch
    * don't access multipath device if it has been freed in setup_multipath
  - Add 0187-RH-fix-bad-derefs.patch
    * Fix places where we are dereferencing freed pointers
  - Resolves: bz #947798


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.69
changelog:
  - Add 0188-RH-add-all_devs.patch
    * Add new special "all_devs" devices identifier, that makes multipath
      update a the values on all devices
  - Add 0189-RHBZ-986767-blacklist-td-devs.patch
    * add td[a-z].* devices to the builtin blacklist
  - Add 0190-UPBZ-994277-handle-offline-states.patch
    * Handle "transport-offline" and "quiesce" path states
  - Add 0191-UPBZ-995251-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down
  - Resolves: bz #986767, #994277, #995251


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.70
changelog:
  - Modify 0185-RH-signal-waiter.patch
    * making the waiter threads exit correctly caused a race at shutdown.
  - Resolves: bz #996921


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.71
changelog:
  - Add 0192-RHBZ-916667-print-major-minor.patch
    * Make multipathd print major:minor on path and and remove events
  - Resolves: bz #916667


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72
changelog:
  - Add 0193-UPBZ-1011341-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.
  - Resolves: bz #1011341


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.1
changelog:
  - Add 0194-RHBZ-997570-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync
      version
  - Resolves: bz #1069435


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.21.1.el6]
changelog:
  - [kvm] mmu: fix incorrect check of guest cr4 bits (Bandan Das) [1103821 1007164]
  - [drm] nouveau: fix nasty bug which can clobber SOR0's clock setup (Ben Skeggs) [1100574 1095796]
  - [net] tcp: tsq: restore minimal amount of queueing (Jiri Pirko) [1103825 1044053]


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.2
changelog:
  - Add 0195-UPBZ-1024103-alua-prio-timeout.patch
    * Change alua prioritizer timeout from 5 minutes to one minute
  - Resolves: bz #1078491


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.3
changelog:
  - Add 0196-RHBZ-1099530-orphan-paths-on-reload.patch
    * make multipath orphan paths that are no longer included in the device
      when the table is reread.
  - Resolves: bz #1099530


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-10.4
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1072456)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 2.02-5
changelog:
  - Fix configure failure with -Werror-implicit-function-declaration in CFLAGS
  - Add a minilzo subpackage which contains a shared version of minilzo, to be
    used by all applications which ship with their own copy of it (bz 439979)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.132.3
changelog:
  - Don't use alloca in addgetnetgrentX (#1087789).
  - Adjust pointers to triplets in netgroup query data (#1087789).


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Make pem's derEncodingsMatch function work with encrypted keys
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Remove two unused patches and apply a needed one that was missed
  - Resolves: Bug 1112136 - Rebase nss in RHEL 6.5.Z to NSS 3.16.1


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-7
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1145431 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Enable patch with fix for deadlock in trust domain lock and object lock
  - Resolves: Bug 1036477 - deadlock in trust domain lock and object lock
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042685 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.10
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1115498


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.60-2.4.2.0.el6
changelog:
  - updated to icedtea7-forest 2.4.2 + aprtial sync with fedoras
  - removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
  - renamed patch103 java-1.7.0-openjdk-arm-fixes.patch to 
  patch120: java-1.7.0-openjdk-freetype-check-fix.patch
  - adapted patch104 java-1.7.0-openjdk-ppc-zero-jdk.patch
  - adapted patch105 java-1.7.0-openjdk-ppc-zero-hotspot.patch
  - added patch404 RH661505-toBeReverted.patch, to be *reverted* during prep
  - added source12, TestCryptoLevel.java to ensure used crypto
  - ppc64 repalced by macro
  - buildver bumbed to 60
  - Resolves: rhbz#978423


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.6.1.el6]
changelog:
  - [mm] memcg: fix oom schedule_timeout() (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: change memcg_oom_mutex to spinlock (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: fix hierarchical oom locking (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: make oom_lock 0 and 1 based rather than counter (Ulrich Obergfell) [1054072 1034237]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.7.1.el6]
changelog:
  - [char] n_tty: Fix unsafe update of available buffer space (Jiri Benc) [1060491 980188]
  - [char] n_tty: Fix stuck throttled driver (Jiri Benc) [1060491 980188]
  - [char] tty: Add safe tty throttle/unthrottle functions (Jiri Benc) [1060491 980188]
  - [char] tty: note race we need to fix (Jiri Benc) [1060491 980188]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.10.1.el6]
changelog:
  - [fs] xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (Brian Foster) [1067775 1059334]
  - [x86] apic: Map the local apic when parsing the MP table (Prarit Bhargava) [1063507 1061873]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.1.el6]
changelog:
  - [net] netpoll: take rcu_read_lock_bh() in netpoll_send_skb_on_dev() (Florian Westphal) [1063271 1049052]
  - [fs] cifs: sanity check length of data to send before sending (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [fs] cifs: ensure that uncached writes handle unmapped areas correctly (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [infiniband] ipoib: Report operstate consistently when brought up without a link (Michal Schmidt) [1064464 995300]
  - [security] selinux: fix broken peer recv check (Paul Moore) [1059991 1043051]
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064913 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064913 1024024]
  - [fs] nfs: always make sure page is up-to-date before extending a write to cover the entire page (Scott Mayhew) [1066942 1054493]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058418 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062113 1043353]
  - [security] selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: look for IPsec labels on both inbound and outbound packets (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() (Paul Moore) [1055364 1024631]
  - [edac] e752x_edac: Fix pci_dev usage count (Aristeu Rozanski) [1058420 1029530]
  - [s390] mm: handle asce-type exceptions as normal page fault (Hendrik Brueckner) [1057164 1034268]
  - [s390] mm: correct tlb flush on page table upgrade (Hendrik Brueckner) [1057165 1034269]
  - [net] fix memory information leaks in recv protocol handlers (Florian Westphal) [1039868 1039869]
  - [usb] cdc-wdm: fix buffer overflow (Alexander Gordeev) [922000 922001] {CVE-2013-1860}
  - [usb] cdc-wdm: Fix race between autosuspend and reading from the device (Alexander Gordeev) [922000 922001] {CVE-2013-1860}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.2.el6]
changelog:
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-24
changelog:
  - Don't hang on rtnl_send() in a confined domain (#985526)
  - Run lnstat indefinitely if -c was not specified (#977845)
  - lnstat manpage SEE ALSO path fixes (#974694)
  - Document tc's force and batch options (#950122)
  - Fix include/linux/if_link.h to get in line with upstream again (#903228)
  - Add support for the IPv6 tokenized interface (#950400)
  - Handle ip-route rto_min parameters correctly (#859145)
  - Add VXLAN support (#929313, #908155)
  - Add mdb subcommand to bridge (#885977)
  - tc now supports the -OK option (#851371)


author: Petr Pisar <ppisar@redhat.com> - 2.6.32-29
changelog:
  - Document tc -OK option (#851371)
  - Document "bridge mdb" and "bridge monitor mdb" (#885977)
  - Document bridge unsupported features (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-31
changelog:
  - Removed the unsporrted features from the bridge(8) manpage and
    document bridge fdb replace (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-32
changelog:
  - Fix a floating point exception regression introduced with the
    incorrect fix of #859145 (#1045200)


author: Jiri Skala <jskala@redhat.com> - 4.0.9-1
changelog:
  - Resolves: #602838 - CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability
  - re-base to latest upstream version


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.14.1.el6]
changelog:
  - [net] ip_tunnel: (revert old)/fix ecn decapsulation behaviour (Jiri Pirko) [1078011 1059402]
  - [net] ipv6: del unreachable route when an addr is deleted on lo (Vivek Dasgupta) [1078798 1028372]
  - [net] ipv6: add ip6_route_lookup (Vivek Dasgupta) [1078798 1028372]
  - [net] packet: improve socket create/bind latency in some cases (Daniel Borkmann) [1079870 1045150]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.15.1.el6]
changelog:
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1083350 844450]


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.9.3-1
changelog:
  - New upstream release
  - Fixes the folowing bugzilla.redhat.com tickets:
  - 563355 error in tuna --help output
  - 574950 cannot use cpu ranges in the tuna GUI
  - 559770 tuna backtrace when moving threads
  - 563352 tuna backtrace when no thread list is given for --priority
  - 563350 tuna backtrace when scheduler is mis-typed.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-6
changelog:
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Resolves bz903212


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-1
changelog:
  - Update mdadm to upstream release v3.2.6
    This includes all current patches, except for
    mdadm-3.2.5-imsm-Forbid-spanning-between-multiple-controllers.patch and
    mdadm-3.2.5-Create.c-check-if-freesize-is-equal-0.patch
  - Fix problem with arrays marked <ignored> in mdadm.conf still being
    auto-assembled
  - Fix problem with it not being possible to use <ignore> more than
    once in mdadm.conf
  - Resolves bz922971
  - Resolves bz902142
  - Resolves bz902137


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-2
changelog:
  - Enhance raid-check to allow the admin to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz819943


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Fix problem where first stop command doesn't stop container during
    IMSM volume's reshape
  - Fix annoying build noise caused by latest rpmbuild
  - Resolves bz956016


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-4
changelog:
  - Fix problem with RAID10 resync failing to restart if it has been
    stopped after 50% completion.
  - Resolves bz995105


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015514


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7.1
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1077131


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-21
changelog:
  This patch is found broken and duplicated.  Getting rid of it in 1.2.11.15-22.
    commit 2b3a50d55707ffa281c922ec188850576b757934
    Author: Mark Reynolds <mreynolds@redhat.com>
    Date:   Tue Jul 23 10:28:45 2013 -0400
    Add patch 0049 for Tickets-47427-47441


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-34
changelog:
  - Release 1.2.11.15-34
  - Resolves: #1123861
    EMBARGOED CVE-2014-3562 unauthenticated information disclosure [rhel-6.5.z] (DS 616, BZ 1123477)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-33
changelog:
  - SCP: send large files properly with new enough libssh2 (#879592)
  - fix handling of errors returned from libssh2 when sending data (#873789)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.1
changelog:
  - refresh expired cookie in test172 from upstream test-suite (#1092486)
  - fix a memory leak caused by write after close (#1092479)
  - nss: implement non-blocking SSL handshake (#1092480)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.3
changelog:
  - fix re-use of wrong HTTP NTLM connection (CVE-2014-0015)
  - fix connection re-use when using different log-in credentials (CVE-2014-0138)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.58.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
  - Resolves: rhbz#950387


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
   - added dependency on libibverbs-devel pciutils-devel
   - cannot provide support for cuda (cuda_runtime_api.h). 
   - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Petr Machata <pmachata@redhat.com> - 2014h-1
changelog:
  - Rebase to 2014h
    - Changes to historical transitions in America/Jamaica and
      Asia/Novokuznetsk.
    - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
      Lusaka} now alias Africa/Maputo, because they don't differ in
      post-1970 stamps.
    - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
      the same reason.


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-1
changelog:
  - Rebase to 3.2.9c (bug #765630, #818177)
    + Fix 'module clear'
  - Fix memory problems with 'modules switch' (bug #818177)
  - Fix "module use" path in default modules file (bug #848865)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-3
changelog:
  - Add -fno-strict-aliasing to silence gcc warnings
  - Fix timestamps to silence multilib test
  - Related: #848865


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-4
changelog:
  - Revert timestamps fix attempt
  - Prevent rpm from bytecompiling the internal python file
  - Related: #848865


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-5
changelog:
  - Make .modulespath a config file (bug #918540)
  - Do not replace modified profile.d scripts (bug #953198)
  - Remove use of test command in csh alias (bug #929007)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-6
changelog:
  - Call test command in csh alias by its full path (bug #929007)
  - Correctly preserve the target file that the config symlink points to
    (this change makes the previous fix for bug #953198 whole)


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib64 before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21
changelog:
  - Resolves: rhbz#975550 ikev2 md5 hash results in incorrect policy
  - Resolves: rhbz#985596 openswan does not allow SHA2 auth algorithms under FIPS mode 
  - Resolves: rhbz#881914 openswan doesn't support SHA2 certificates
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#960235 CVE-2013-2053: remote buffer overflow in atodn()
  - Resolves: rhbz#963833 Abort pluto on crypto failure to prevent plaintext / nonce leak
  - Resolves: rhbz#771612 ipsec barf should not grep sparse file
  - Resolves: rhbz#841325 leftmodecfgclient=no causes rekey failure [Avesh]
  - Resolves: rhbz#848132 dpdaction=restart can cause full phase1 timeout after DPD [Avesh]
  - Resolves: rhbz#880004 Backported libreswan IKE fragmentation support 
  - Resolves: rhbz#908476 Backported libreswan INITIAL-CONTACT Notify support
  - Resolves: rhbz#796683 Backported libreswan USERCOMPILE with -fno-strict-aliasing
  - Resolves: rhbz#959568 Backported libreswan nat_keepalive=yes|no (default yes) option
  - Resolves: rhbz#916743 Backported libreswan control transmission delay timing
  - Resolves: rhbz#959566 Backported libreswan ikeping compile warnings
  - Resolves: rhbz#957400 Openswan did not load aesni_intel kernel module
  - Resolves: rhbz#960171 Initial loading of CRL always fails on pluto startup [Matt Rogers]
  - Resolves: rhbz#958969 Crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: rhbz#868986 Fix for RDN values containing a comma [Matt Rogers]
  - Resolves: rhbz#747966 Missing else keyword


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.132.4
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.6-1
changelog:
  - update to 2.6.6 (#588781)
  - move sasl config to /etc/sasl2 (#574439)
  - drop sasl v1 support
  - require Date::Calc for pflogsumm (#588726)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-9
changelog:
  - Resolves: rhbz#847232
  - Resolves: rhbz#848210

  - confdb: Fix crash with long values and add API calls to get them (rhbz#847232)
  - merge upstream commit 5704a34612d8829fce6991f130b7732108cca761 (rhbz#847232)
  - confdb: Fix crash with long values (rhbz#847232)
  - merge upstream commit 16d309be840045b3fc6d468faf07fbd727756b3f (rhbz#847232)
  - Fix dbus part of corosync-notifyd (rhbz#848210)
  - merge upstream commit 4ac9cd59e7873914fe5845e69fd79b7a2877c290 (rhbz#848210)
  - flatiron: Free outq items list on conn exit (rhbz#848210)
  - merge upstream commit 4cdaf8ef1e7676b179eaeb5bde18d4b63d17ce52 (rhbz#848210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-10
changelog:
  - Related: rhbz#847232

  - sa-confdb: fix crash due to incorrect malloc size (rhbz#847232)
  - merge upstream commit 0a85b888b0384e83fa4a80c3751a23f4de8a9310 (rhbz#847232)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-11
changelog:
  - Resolves: rhbz#787789
  - Resolves: rhbz#794522
  - Resolves: rhbz#838743
  - Resolves: rhbz#850757
  - Resolves: rhbz#861032

  - When flushing, discard only memb_join messages (rhbz#850757)
  - merge upstream commit 17e15322b7500247c539166441fb2e78cc95d02b (rhbz#850757)
  - Add man page with Confdb keys created by corosync (rhbz#794522)
  - merge upstream commit c741dbe01ea9bb45ae5d8706c8e4287aeae4bfd5 (rhbz#794522)
  - confdb_keys: Document few more runtime statistics (rhbz#794522)
  - merge upstream commit 060abd069483aa7b9d90261c11c79b2a6f6e21c1 (rhbz#794522)
  - Add support for debug level trace in config file (rhbz#838743)
  - merge upstream commit 842d387c2f53e23c055da4509a2f28753d6ffa97 (rhbz#838743)
  - Move some totem and cpg messages to trace level (rhbz#838743)
  - merge upstream commit 9deff57e779375631541bd52146701c41e3bed68 (rhbz#838743)
  - Don't access invalid mem in totemconfig (rhbz#861032)
  - merge upstream commit 539917e35a8c74b3ea4eb9ae8cddc2f73378d203 (rhbz#861032)
  - Use unix socket for local multicast loop (rhbz#787789)
  - merge upstream commit cea2b1a302e6e4563ee5817782f15ea5d941daec (rhbz#787789)
  - Move "Totem is unable to form..." message to main (rhbz#787789)
  - merge upstream commit e032c14341c38be4d273093f1e6691f8417e264d (rhbz#787789)
  - Return back "Totem is unable to form..." message (rhbz#787789)
  - merge upstream commit b343668bbfa09ebcfa4816ddf205eeb8f2ea159c (rhbz#787789)
  - Change specfile to use runautogen


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-12
changelog:
  - Resolves: rhbz#794522
  - Resolves: rhbz#873059
  - Resolves: rhbz#876908

  - Fix minor errors in man page documentation for corosync.conf (rhbz#873059)
  - merge upstream commit b14cd84e96fff1083837a70548ff9e18472c938b (rhbz#873059)
  - manpages: Fix typo in evs* manpages (rhbz#873059)
  - merge upstream commit 6735455c598393880188db7f297ec699c8ae0492 (rhbz#873059)
  - manpages: Add links for referenced confdb calls (rhbz#873059)
  - merge upstream commit b98d4ab44979a52ef74259e0676929055442cbfb (rhbz#873059)
  - manpages: Add confdb_key_get man page (rhbz#873059)
  - merge upstream commit e414e2d34c2e5e26318cfc06f8bdd5b8c8812a7e (rhbz#873059)
  - Add link to confdb_keys in corosync-objctl mpage (rhbz#794522)
  - merge upstream commit a4e7e2bc46545a5acacb3c840bda5270efec987c (rhbz#794522)
  - Track changes for confdb logging object (rhbz#876908)
  - merge upstream commit 6c9cae79dc2680d363b0cca85cbbe55a2bc9b517 (rhbz#876908)
  - Don't call reload on corosync-objctl actions (rhbz#876908)
  - merge upstream commit bdabbf6f20138c5e33154caf32cf66330356893d (rhbz#876908)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-13
changelog:
  - Resolves: rhbz#830799
  - Resolves: rhbz#863940
  - Resolves: rhbz#869609

  - cpg: Never choose downlist with localnode (rhbz#830799)
  - merge upstream commit 559d4083ed8355fe83f275e53b9c8f52a91694b2 (rhbz#830799)
  - cpg: Process join list after downlists (rhbz#830799)
  - merge upstream commit 02c5dffa5bb8579c223006fa1587de9ba7409a3d (rhbz#830799)
  - cpg: Enhance downlist selection algorithm (rhbz#830799)
  - merge upstream commit 64d0e5ace025cc929e42896c5d6beb3ef75b8244 (rhbz#830799)
  - Don't call sync_* funcs for unloaded services (rhbz#863940)
  - merge upstream commit 6ed260b0bfc5e5230a4e765b9c63caf985708c41 (rhbz#863940)
  - Handle sync and service unload correctly (rhbz#863940)
  - merge upstream commit e7536bdaf82044671d2d18ee799eeacd8603af08 (rhbz#863940)
  - Make service_build contain correct number of msgs (rhbz#863940)
  - merge upstream commit 1cea171c4d8f9dd19b4995f96842111e41f23d6c (rhbz#863940)
  - Ignore sync barrier msgs if sync doesn't started (rhbz#869609)
  - merge upstream commit ee292e7968f749f7ebc4daddeb09f39cfbb037b4 (rhbz#869609)
  - Fix problem with sync operations under very rare circumstances (rhbz#830799)
  - merge upstream commit 6fae42ba72006941c1fde99616ea30f4f10ebb38 (rhbz#830799)
  - Handle segfault in backlog_get (rhbz#830799)
  - merge upstream commit a559ccf7247bc448ba30b6ebc02a91fa986f146f (rhbz#830799)
  - Add waiting_trans_ack also to fragmentation layer (rhbz#830799)
  - merge upstream commit 7de25c3b64b2066de19b3f9075c075fb08816de6 (rhbz#830799)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-14
changelog:
  - Resolves: rhbz#865039

  - coroipc: Don't spin when waiting on semaphore (rhbz#865039)
  - merge upstream commit 7ce8718a71b7afe341d9f9ac21c6724d6f18dfc4 (rhbz#865039)
  - On places with POLLERR check also POLLNVAL (rhbz#865039)
  - merge upstream commit 105305a486ae9f171def221ad971d607604a4770 (rhbz#865039)
  - Check socket_recv error code in ipc_dispatch_get (rhbz#865039)
  - merge upstream commit 694a9c2cf0804428671bf815b974a080c7fd1c6c (rhbz#865039)
  - coroipc: Handle pfd.revents as bit-field (rhbz#865039)
  - merge upstream commit b6aabed698d34e4e79e03a3354e59a2d0121e692 (rhbz#865039)
  - ipcc: Return dup of socket fd to user application (rhbz#865039)
  - merge upstream commit 28c5907f59afd52a67be3bddff22df57e1fb36ba (rhbz#865039)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15
changelog:
  - Resolves: rhbz#902397

  - totemip: Properly detect ipv6 address (rhbz#902397)
  - merge upstream commit d76759ec26ecaeb9cc01f49e9eb0749b61454d27 (rhbz#902397)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-16
changelog:
  - Resolves: rhbz#854216
  - Resolves: rhbz#877349
  - Resolves: rhbz#880598
  - Resolves: rhbz#881729
  - Resolves: rhbz#906432
  - Resolves: rhbz#907894
  - Resolves: rhbz#915490
  - Resolves: rhbz#915769
  - Resolves: rhbz#916227
  - Resolves: rhbz#922671
  - Resolves: rhbz#924261
  - Resolves: rhbz#947936
  - Resolves: rhbz#949491
  - Resolves: rhbz#959184
  - Resolves: rhbz#959189

  - If failed_to_recv is set, consensus can be empty (rhbz#854216)
  - merge upstream commit 81ff0e8c94589bb7139d89e573a75473cfc5d173 (rhbz#854216)
  - objdb: Don't read uninitialized memory in inc/dec (rhbz#880598)
  - merge upstream commit 0a11d261a361726703084897471608d9914e0548 (rhbz#880598)
  - log: Handle race in printf_to_logs and format_set (rhbz#881729)
  - merge upstream commit a282eeecb4899ec415f76442217836338edfbeec (rhbz#881729)
  - log: Avoid deadlock caused by previous commit (rhbz#881729)
  - merge upstream commit e69f322d52a967e19ac6cf4eba60c54fc64b1688 (rhbz#881729)
  - Handle colon in configuration file (rhbz#906432)
  - merge upstream commit c04af91ada3c4ca29643cad599ed5605f6bb10bd (rhbz#906432)
  - Handle unexpected closing brace in config file (rhbz#906432)
  - merge upstream commit 60a9f809c17d6cfe73c34263233dbf8e4677d6b5 (rhbz#906432)
  - Put handle to hdb in dispatch on unknown message (rhbz#922671)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#922671)
  - Properly check result of coroipcc_dispatch_put (rhbz#922671)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#922671)
  - Handle config file with service without name (rhbz#915769)
  - merge upstream commit 6b719961b36b3b780f2c9ff148aa2273872f8788 (rhbz#915769)
  - Move corosync exit semaphore initialization (rhbz#916227)
  - merge upstream commit b6aaa6e2af625467316e54e67a39c6327cf73cbc (rhbz#916227)
  - coroipcs: Ensure rb data are not overwritten (rhbz#922671)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#922671)
  - Properly lock pending_semops (rhbz#922671)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#922671)
  - cfg: When send_shutdown fails, clear shutdown_con (rhbz#924261)
  - merge upstream commit fd967b6db504b1fe6667da8ce8a141924e3914a9 (rhbz#924261)
  - cfgtool: Retry shutdown on CS_ERR_TRY_AGAIN (rhbz#924261)
  - merge upstream commit 3324d31819d359fae75d6f91a942fc84e3b9be23 (rhbz#924261)
  - totempg: Make iov_delv local variable (rhbz#907894)
  - merge upstream commit 3e3231375c29d562af050a48f18b301bf1cdca82 (rhbz#907894)
  - Fix race for sending_allowed (rhbz#907894)
  - merge upstream commit 94331b5e0226f985364ef0632fdf4d5f0d91d625 (rhbz#907894)
  - schedwrk: Set values before create callback (rhbz#907894)
  - merge upstream commit 7f00dcb548584911191f1e70483d4523c3ba1319 (rhbz#907894)
  - Remove exit thread and replace it by exit pipe (rhbz#907894)
  - merge upstream commit 9f8279a3f1853139e9bd472c23f905baf9298c32 (rhbz#907894)
  - totempg: Store and restore global variables (rhbz#907894)
  - merge upstream commit 5e6e1a000db8b066aff08b0649886e4ce07b843c (rhbz#907894)
  - Logsys: Ensure logging PID is really corosync (rhbz#915490)
  - merge upstream commit 830df013a853ffa7e9b49efb030ccc7920d2f683 (rhbz#915490)
  - fplay: Check minimum record size (rhbz#915490)
  - merge upstream commit ef63aae13945bd790e54181593561468426baca4 (rhbz#915490)
  - corosync-fplay: Check incorrect idx and cycle (rhbz#915490)
  - merge upstream commit d8761bae84c12285ef40426c0ad7f09f569c3d87 (rhbz#915490)
  - Improve handling of getpwnam_r() and getgrnam_r() (rhbz#947936)
  - merge upstream commit c3422128a45a2833103c8351e0adc84ba6c341be (rhbz#947936)
  - Detect big scheduling pauses (rhbz#949491)
  - merge upstream commit 7475db7102bf387cfcd16a65b0b0ace3e194bd4b (rhbz#949491)
  - Improve corosync-notifyd example (rhbz#877349)
  - merge upstream commit 614d897209c8d9d8b38bc583d0ce056a5d3445b6 (rhbz#877349)
  - Install sysconfig/corosync-notifyd in specfile (rhbz#877349)
  - merge upstream commit bc130cb10c4ec014829286ba61c0de544f82656d (rhbz#877349)
  - Free confdb message holder list on confdb exit (rhbz#959189)
  - merge upstream commit 013b4ba8ebdc089da76313d43b1454fe324d597b (rhbz#959189)
  - Handle SIGPIPE in req_setup_send (rhbz#959184)
  - merge upstream commit a9c4bbd9f10d9453730f71d8bd9a02ee8bcf2eed (rhbz#959184)
  - confdb: Make objdb_notify_dispatch preemptable (rhbz#959189)
  - merge upstream commit 0194e6455983947c9c496658b5d593c769e58bfe (rhbz#959189)
  - Lock sync_in_process variable (rhbz#907894)
  - merge upstream commit 460a495243b1ebb225e15c1757554ff625aca99e (rhbz#907894)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-17
changelog:
  - Resolves: rhbz#956739

  - Add timestamps to the Corosync black-box output (rhbz#956739)
  - merge upstream commit 3ede0352ea4a7ea71ebe16db59c0c7ad0a01f733 (rhbz#956739)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-17.1
changelog:
  - Resolves: rhbz#1080103

  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1080103)
  - merge upstream commit e9d9c4be7293c04ca97bfd84f95b76a22690a92a (rhbz#1080103)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1080103)
  - merge upstream commit 0b825f22f2b95beca1aeb614d22a7e74a84c66b5 (rhbz#1080103)
  - cpg: Make sure left nodes are really removed (rhbz#1080103)
  - merge upstream commit b55f32fe2e1538db33a1ec584b67744c724328c6 (rhbz#1080103)


author: Till Maas <opensource@till.name> - 1.2.5-6
changelog:
  - filesystem subpackage contents are now provided by filesystem (Red Hat
    Bugzilla 515362) filesystem-2.4.28-1.fc12


author: Adam Jackson <ajax@redhat.com> 1.2.5-6.2
changelog:
  - Drop vbetool, should not be needed.  Video resume is supported through
    KMS or not at all. (#545808)
  - Drop radeontool, same logic.


author: Laine Stump <laine@redhat.com> - 0.1.6-2
changelog:
  - make miimon/arpmon in bond definitions optional
  - Resolves: rhbz#585108
  - properly deal with initializing a 0 length /etc/sysconfig/iptables file
  - Resolves: rhbz#582905


author: Laine Stump <laine@redhat.com> - 0.1.6-4
changelog:
  - install missing sysconfig.aug file
  - Resolves: rhbz#613886
  - Don't delete the physical interface config when defining a vlan
  - Resolves: rhbz#585112


author: Laine Stump <laine@redhat.com> - 0.1.7-1
changelog:
  - rebase to netcf-0.1.7
    - Resolves: rhbz#651032
    - remove all iptables manipulation
    - Resolves: rhbz#633346
    - Resolves: rhbz#629206


author: Laine Stump <laine@redhat.com> - 0.1.8-1
changelog:
  - rebase to netcf-0.1.8
    - resolves rhbz#616060
    - show ifup output in relevant error message
    - resolves rhbz#662057
    - pkgconfig file should not list augeas, libxml or libxslt
    - resolves rhbz#681078
    - Need to input 'quit' twice to quit ncftool after an erroneous command
    - resolves rhbz#703318
    - %desc field in specfile has a typo
    - resolves rhbz#705061
    - rebase netcf for RHEL6.2
    - resolves rhbz#708476
    - RFE: transaction-oriented API for handling host interfaces


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - rebase to netcf-0.1.9
    - resolves rhbz#616060
    - always add <bridge> element to bridge, even if there is no physdev present
    - resolves rhbz#713180
    - don't log error if interface isn't found in kernel during status report
    - resolves rhbz#713286
    - update gnulib


author: Laine Stump <laine@redhat.com> - 0.1.9-2
changelog:
  - resolves rhbz#728184
    - eliminate potential use of uninitialized index/pointer in add_bridge_info
    - resolves rhbz#736920
    - resolves rhbz#739505
    - fix missing vlan/bond/ethernet info in dumpxml --live


author: Laine Stump <laine@redhat.com> - 0.1.9-3
changelog:
  - resolves rhbz#886862
    - libnl addr and link caches are not thread-safe, leading to
      libvirtd crashes


author: Laine Stump <laine@redhat.com> - 0.1.9-4
changelog:
  - resolves rhbz#844578
    - check IFF_RUNNING before considering and interface "active"
    - resolves rhbz#848722
    - fix ipcalc_netmask


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.12.1.el6]
changelog:
  - [mm] vmscan: re-introduce the ZONE_RECLAIM_NOSCAN bailout for zone_reclaim() (Rafael Aquini) [1073562 1039534]
  - [mm] vmscan: compaction works against zones, not lruvecs (Johannes Weiner) [1073564 982770]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-431.13.1.el6]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (J. Bruce Fields) [1063201 1042731]
  - [net] sctp: fix sctp_connectx abi for ia32 emulation/compat mode (Daniel Borkmann) [1076242 1053547]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.4
changelog:
  - Add 0197-UPBZ-1137017-fast-io-fail-iscsi.patch
    * add iscsi support for fast_io_fail_tmo
  - Resolves: bz #1137017


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.12
changelog:
  - rpc: message related sizes enlarged (rhbz#1128603)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1128603)
  - Fix max stream packet size for old clients (rhbz#1128603)
  - Adjust legacy max payload size to account for header information (rhbz#1128603)
  - rpc: Correct the wrong payload size checking (rhbz#1128603)


author: Dan Horák <dhorak@redhat.com> 2.4-2
changelog:
  - don't add root to pkcs11 group (#732756)
  - document implications of the pkcs11 group membership (#730903)
  - Resolves: #732756, #730903


author: Chris Feist <cfeist@redhat.com> - 0.9.87-1
changelog:
  - Allow two ordering constraints with same resources
  - Improved error messages when trying to master/clone resources
  - Updated error message when attempting to move a master/slave without
    --master


author: Chris Feist <cfeist@redhat.com> - 0.9.88-1
changelog:
  - Don't allow order/colocation constraints created for master primitives
  - Check in clones for stonith resources
  - Clarify 'constraint rule add' in man page/usage
  - Fixed minor usage issue with colocation sets


author: Chris Feist <cfeist@redhat.com> - 0.9.89-1
changelog:
  - Show location constraint role in pcs status/constraint
  - Disable resource before removing
  - Misc man/usage fixes


author: Chris Feist <cfeist@redhat.com> - 0.9.90-1
changelog:
  - Add ability to set node attributes
  - Fix issue setting meta attributes on a master when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.2
changelog:
  - Fixed bug causing an issue when adding stonith level without --force
  - Added ability to create/edit/remove uidgid for corosync in cluster.conf
  - Fixed bug which wouldn't allow a user to standby nodes
  - Resolves: rhbz#1038479 rhbz#1038478 rhbz#1032161


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.3
changelog:
  - When creating a resource using --group/--clone/--master put the group
    inside the master/clone/group before putting it into the live CIB
  - Resolves: rhbz#1099314


author: Kai Engert <kaie@redhat.com> - 2012.87-65.3
changelog:
  - added a manual page and related build requirements
  - updated copyright sections in scripts
  - enhance update-ca-trust script


author: Kai Engert <kaie@redhat.com> - 2012.87-65.4
changelog:
  - attempt to handle unsupported downgrades, where the admin has enabled
    legacy support, but downgrades to an old package that is incompatible
    provide the new feature.
  - move manual page to the man8 section (system administration commands)
  - simplify the README files now that we have a manual page


author: Kai Engert <kaie@redhat.com> - 2012.87-65.7
changelog:
  - ExcludeArch/ExclusiveArch doesn't work to enforce a build host
  - Added comment that explains the special build requirements.
  - Added a comment suggesting to keep the release number below the 
    ones used on RHEL 7.
  - Fixed permissions of /etc/pki/java (thanks to stefw)


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Harald Hoyer <harald@redhat.com> 004-316
changelog:
  - create the initramfs non-world readable
  - unset LD_LIBRARY_PATH and GREP_OPTIONS
  Resolves: rhbz#912299
  - add mkinitrd man page
  Resolves: rhbz#610462
  - add bonding
  Resolves: rhbz#851666
  - lvm: add "--yes" to lvchange
  Resolves: rhbz#720684
  - crypt: add support for keyfiles in the initramfs
  Resolves: rhbz#886194
  - start iscsi regardless of network, if requested
  Resolves: rhbz#813687
  - install multipath module only, when root is multipath in generic mode
  Resolves: rhbz#916144
  - fips: handle checksum checks for RHEV kernels
  Resolves: rhbz#947729
  - add xhci-hcd driver
  Resolves: rhbz#960729


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.1
changelog:
  - Pull in 2.6.33pre1 from rawhide
    Resolves: bz#520481 - [Emulex 6.0 feat] be2net request_firmware() support in
    Ethtool-cmd-with-flash-for-RH6


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.3
changelog:
  - Fix source0 line to match the actual download filename.
  - Get rid of the no-longer-needed predash macro.
    Related: bz#555835


author: Jay Fenlason <fenlason@redhat.com> 3.5-1.2
changelog:
  - Backport two patches to improve register dumps on ixgbe devices
    Resolves: bz#1038956
  - Backport two patches to fix lro support
    Resolves: bz#1038955


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885311


author: David Zeuthen <davidz@redhat.com> - 1.0.0-0.git20100223.1.el6_5
changelog:
  - Update to git snapshot for LVM2/Multipath support
  - Bump lvm2 version requirement to 2.02.61
  - Don't include compat devkit-disks symlinks
  - Don't advertise remote access support via Avahi
  - Related: rhbz#548874
  - Related: rhbz#548870


author: David Zeuthen <davidz@redhat.com> - 1.0.0-1.el6_5
changelog:
  - Update to release 1.0.0
  - Build without LVM2 and Multipath support for now (#548870, #548874)
  - Related: rhbz#575889


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.4-1
changelog:
  - New version: grep-2.5.4
  - Fixed typos in %description
  - Updated utf-8 patch
  - Added dfa-optional patch (#538423)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6-1
changelog:
  - New version: grep-2.6
  - Added sigsegv patch (after release patch from upstream)
  - Dropped obsoleted patches: fedora-tests, pcrewrap, case, egf-speedup,
    bz460641, utf8, dfa-optional, w


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-2
changelog:
  - Added dfa-optimize-period patch (speedup for . patterns in UTF-8)
  - Added glibc-matcher-fallback patch (speedup for [a-z] patterns in UTF-8)
  - Added mmap-option-fix patch
  - Added dfa-convert-to-wide-char patch (speedup for -m and remove quadratic
    complexity when going to glibc)
  - Added dfa-speedup-digit-xdigit patch (speedup for [[:digit:]] [:xdigit:]])


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-4.el5
changelog:
  - limit rpm to x86_64, because it is used only by qspice, to fix
    "stack smashing detected" error on ia64 (513407)


author: Uri Lublin <uril@redhat.com> - 1.0-8.el6
changelog:
  Copy changes done by Tom "spot" Callaway <tcallawa@redhat.com> in Fedora-12:
    - Delete non-free (but freely distributable) snprintf.c under Artistic 1.0
    Copy changes done by Yuval Kashtan <ykashtan@redhat.com> in RHEL-5:
    -   Create a -docs subpackage to resolve a multilib conflict. (502679)
    -   Convert some files from iso-8859-1 to utf8 (makes rpmlint happy).
    -   ExclusiveArch:  x86_64 i386 (513407)
  Related: #549888


author: Uri Lublin <uril@redhat.com> - 1.0-10.el6
changelog:
  Fix rpmlint issues:
      - Added doc files to -devel subpackage
      - Made doc-file api/installdox non-executable
  Related: #555835


author: Uri Lublin <uril@redhat.com> - 1.0-11.el6
changelog:
  Fix review comments:
      - removed installdox from -docs sub-package
      - fixed multi-lib/multi-arch issues
        - renamed log4cpp-config according to arch
  Related: #555835


author: Uri Lublin <uril@redhat.com> - 1.0-12.el6
changelog:
  Fixed multi-lib/multi-arch issues:
      - Remove date from html-footer (doc/html/api/*)
      - Also in preparation of removing -doc subpackage
  Related: #555835


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Updated to latest upstream release: libnfsidmap-0.24-rc1 (bz 650970)
  - Reset default values in /etc/idmap.conf (bz 650997)
  - Remove some warnings in the RPMdiff run (bz 594279)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038985 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-57.el6
changelog:
  - Fix `Backport gdb fix to handle identical binaries via additional build-id
    symlinks' (RH BZ 836966).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-58.el6
changelog:
  - Fix `Cannot find new threads: generic error' (RH BZ 811648).
  - Delete gdb-core-threads-5of5.patch; rename gdb-core-threads-Nof5.patch to gdb-core-threads-Nof4.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-59.el6
changelog:
  - Fix `CVE-2011-4355 gdb: arbitrary code execution via .debug_gdb_scripts'
    (Jan Kratochvil, RH BZ 756116).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6
changelog:
  - Fix `GDB cannot access struct member whose offset is larger than 256MB'
    (Siddhesh Poyarekar, RH BZ 795424).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 947564).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.1
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1108490).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.2
changelog:
  - Improve fix to ''gdb crashes while thread apply all bt is run on the core
    file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov, RH BZ 1108490).


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#796014)
    (MotifZone bug #1552)
  - fixed use after free with comboboxes and XIM (rhbz#836892)
    (MotifZone bug #1559)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096754)
  - fixed missing outline in mwm while moving window (rhbz#1096749)
    (copy of rhbz#997241)


author: Daniel Veillard <veillard@redhat.com> - 0.6.1-2.el6
changelog:
  - do not require specifically tog-pegasus server (rhbz#799037)
  - (de)register the schemas with sblim-sfcb if found


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.1-4.el6
changelog:
  - Fix an incomplete substitution in Makefile (rhbz#805892)
  - Only deregister cim classes on uninstall (rhbz#864096)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-5
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#908083)


author: Michal Privoznik <mprivozn@redhat.com> - 0.6.1-7.el6
changelog:
  - libvirt-cim-get_dominfo-Use-VIR_DOMAIN_XML_SECURE-more-wisely.patch (rhbz#826179)
  - Don't install open-pegasus' specific providers (rhbz#859122)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1000937)
  - Update spec file to more closely match upstream
  - Fixed dates in changelog


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6_5.1
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1055626)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-6
changelog:
  - Require libguestfs 1.7.17 (newer version in RHEL 6.1).
  - Require febootstrap-supermin-helper instead of febootstrap
    resolves: RHBZ#670299.


author: Steve Dickson <steved@redhat.com> 1.2.3-34
changelog:
  - Update the default encryption types in svcgssd (bz 877636)
  - Added the -v 4.1 mount option (bz 877052)


author: Steve Dickson <steved@redhat.com> 1.2.3-35
changelog:
  - Fixed a regession in mountd that cause a localhost mounts to hang (bz 797209)
  - Make sure mount tries all the addresses returned by getaddrinfo (bz 876847)


author: Steve Dickson <steved@redhat.com> 1.2.3-38
changelog:
  - Fixed typo in nfsstat's output (bz 890146)
  - Fixed retrans defaults in nfs(5) man page (bz 952560)
  - Clean rpc.idmapd messages when nfsd starts (bz 892235)
  - Fixed sm-notify to work with localhost (bz 950324)
  - Fixed pNFS stats (bz 962602)
  - Remove no_acl from exports(5) man page (bz 991302)
  - Improve nfsmount.conf configuration parsing (bz 889272)
  - Fixed sm-notify -v (bz 995484)


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: James Antill <james.antill@redhat.com> - 4.3.10-5
changelog:
  - Change invocation as "zsh foo" to search the path by default.
  - Add new option PATH_SCRIPT for old behaviour.
  - Resolves: rhbz#612685
  - Solve defect in emulation of ksh with math substituion.
  - Resolves: rhbz#657300


author: James Antill <james.antill@redhat.com> - 4.3.10-7
changelog:
  - Change {NAME:OFFSET:LENGTH} substitution feature to ignore KSH_ARRAYS option.
  - Fixup tests.
  - Resolves: rhbz#820530


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-4
changelog:
  - use PATH_MAX for buffers passed to realpath (#492861)
  - unconditionally inode-sort Maildir and MH folders
  - restore connection polling callback when closing SASL connection


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.11
changelog:
  - kvm-block-Fix-bdrv_is_allocated-for-short-backing-files.patch [bz#1109715]
  - Resolves: bz#1109715
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.12
changelog:
  - kvm-qcow-Return-real-error-code-in-qcow_open.txt [bz#1097225]
  - kvm-qcow1-Make-padding-in-the-header-explicit.txt [bz#1097225]
  - kvm-qcow1-Check-maximum-cluster-size.txt [bz#1097225]
  - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.txt [bz#1097225]
  - kvm-qcow1-Validate-image-size-CVE-2014-0223.txt [bz#1097234]
  - kvm-qcow1-Stricter-backing-file-length-check.txt [bz#1097234]
  - Resolves: bz#1097225
    (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-6.5.z])
  - Resolves: bz#1097234
    (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-6.5.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.415.el6_5.13
changelog:
  - kvm-block-Create-proper-size-file-for-disk-mirror.patch [bz#1109715]
  - kvm-block-Fix-bdrv_is_allocated-return-value.patch [bz#1109715]
  - kvm-scsi-bus-prepare-scsi_req_new-for-introduction-of-pars.patch [bz#1125131]
  - kvm-scsi-bus-introduce-parse_cdb-in-SCSIDeviceClass-and-SC.patch [bz#1125131]
  - kvm-scsi-block-extract-scsi_block_is_passthrough.patch [bz#1125131]
  - kvm-scsi-block-scsi-generic-implement-parse_cdb.patch [bz#1125131]
  - kvm-virtio-scsi-implement-parse_cdb.patch [bz#1125131]
  - kvm-virtio-scsi-Fix-reset-callback-for-virtio-scsi.patch [bz#1123271]
  - kvm-virtio-scsi-add-ioeventfd-support.patch [bz#1123271]
  - Resolves: bz#1109715
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1123271
    (Enable ioenventfd for virtio-scsi-pci)
  - Resolves: bz#1125131
    ([FJ6.5 Bug] SCSI command issued from KVM guest doesn't reach target device)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.415.el6_5.14
changelog:
  - The commit for zrelease .13 was incomplete; the changes to qemu-kvm.spec
    did not include the "%patchNNNN -p1" lines for patches 4647 through 4655;
    so although the patch files themselves were committed, the srpm build
    did not pick them up. In addition, the commit log did not describe the
    patches.

    This commit corrects these problems and bumps the zrelease to .14.


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.409.el6
changelog:
  - kvm-exec-Simplify-allocation-of-guest-RAM.patch [bz#867921]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#867921]
  - kvm-block-better-error-message-for-read-only-format-name.patch [bz#999788]
  - kvm-vmdk-Add-migration-blocker.patch [bz#999358]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1013478]
  - kvm-Add-support-for-JSON-pretty-printing.patch [bz#1010610]
  - kvm-qemu-img-add-dirty-flag-status.patch [bz#1010610]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e2.patch [bz#1010610]
  - kvm-qapi-Add-SnapshotInfo-and-ImageInfo.patch [bz#1010610]
  - kvm-qemu-img-Add-json-output-option-to-the-info-command.patch [bz#1010610]
  - kvm-qemu-img-Add-backing-chain-option-to-info-command.patch [bz#1010610]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#1010610]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#1010610]
  - Resolves: bz#1010610
    (Backport  option "--output=json|human" to qemu-img info command)
  - Resolves: bz#1013478
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#867921
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#999358
    (do live migration with used VMDK format disk should fail with a friendly message prompt)
  - Resolves: bz#999788
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-9
changelog:
  - Resolves: #785084 - vsftpd can not handle square brackets in ls
  - Resolves: #785061 - vsftpd child terminates when listing files with UID/GID larger than signed in
  - Resolves: #717411 - Connection failures during upload using PORT not handled cleanly
  - Resolves: #752954 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #745133 - vsftpd: documentation for 'max_per_ip' default setting is wrong
  - Resolves: #765757 - SITE HELP offers CHMOD even when it is disabled/unavailable
  - Resolves: #701300 - vsftpd.conf lists incorrect default value for xferlog_file
  - Resolvse: #785642 - Invalid error recovery in vsf_privop_pasv_listen()


author: Anton Arapov <anton@redhat.com> - 1:1.17-10
changelog:
  - Fix buffer overflow
  - Resolves: rhbz#768803
  - Update to microcode-20111110.dat
  - Resolves: rhbz#736266


author: Marek Grac <mgrac@redhat.com> - 3.0.15-27
changelog:
  - fence_ipmilan: Fix manual page to mention HP iLO3, iLO4
    Resolves: rhbz#872308
  - fence_cisco_ucs: Respect "delay" option
    Resolves: rhbz#896603
  - fence_scsi: Add "unfence" operation to manual page
    Resolves: rhbz#887349


author: Marek Grac <mgrac@redhat.com> - 3.0.15-28
changelog:
  - fence_scsi: Add delay option
    Resolves: rhbz#912773
  - fence_apc: Add support for firmware 5.x
    Resolves: rhbz#886614


author: Marek Grac <mgrac@redhat.com> - 3.0.15-29
changelog:
  - remove static parts from cluster schema templates
    Resolves: rhbz#917675
  - fence_cisco_ucs: agent did not respect login_timeout
    Resolves: rhbz#978325
  - fence_cisco_ucs: agent fail with traceback when hostname cannot be resolved
    Resolves: rhbz#978326
  - fencing: Validation if password/password_script or identity file is used was not processed
    Resolves: rhbz#959490
  - fence_scsi: support unfence action in pacemaker cluster
    Resolves: rhbz#978328


author: Marek Grac <mgrac@redhat.com> - 3.0.15-33
changelog:
  - fence_scsi: Fix error in XML metadata
    Resolves: rhbz#994186
  - fence_scsi: Add documention of "delay" into manual pages
    Resolves: rhbz#912773
  - fencing: Improve detection of EOL during login
    Resolves: rhbz#886614


author: Marek Grac <mgrac@redhat.com> - 3.0.15-34
changelog:
  - fence_cisco_ucs: Respect login timeout
    Resolves: rhbz#978325
  - fence_bladecenter: Telnet login failure
    Resolves: rhbz#997416


author: Marek Grac <mgrac@redhat.com> - 3.0.15-35
changelog:
  - fence_vmware_soap: Fix symlink vulnerability caused by python-suds temp directory
    Resolves: rhbz#1014000


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.1-1
changelog:
  - Update to 2.1, which fixes a number of bugs.
    See http://jinja.pocoo.org/2/documentation/changelog#version-2-1.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.1-1
changelog:
  - Update to 2.2.1, mainly a bugfix release.
  - Remove patch no longer needed.
  - Remove conditional for FC-8.
  - Compilation of speedup module has to be explicitly requested now.


author: Václav Pavlín <vpavlin@redhat.com> - 9.03.34-1
changelog:
  - there should be crypttab instead of crypptab in man page (#870025)
  - sysconfig.txt advised saslauthd -a instad of -v (#869075)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-14
changelog:
  - Resolves: #637705
    'sar -u ALL' doesn't report an correct value
  - Resolves: #631841
    fix the tickless kernel output of sar command
  - Resolves: #592283
    add CIFS support to iostat


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-16
changelog:
  - Related: #592283
    improved support of cifs mount points (mounting and unmounting during
    cifsiostat run)


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-19
changelog:
  - resolves: #766431
    added support for symlinks to the iostat command
  - resolves: #771594
    updated reading /proc/diskstats file according to the kernel
  - resolves: #700797
    fixed minor resource leak
  - resolves: #694759
    fixed iostat command does not reporting shares with long names
  - resolves: #690562
    fixed cifsiostat does not report number of open files correctly
  - resolves: #674648
    added new option -P ON to mpstat, showing only online cpu in statistics
  - resolves: #693398
    updated sysstat configuration


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-20
changelog:
  - related: #693398
    added note about -S option to the sadc manual page
  - resolved: #801453
    fixed return code of sa2 script
  - resolved: #801702
    increased IOC_MAXMINOR constant for block devices


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-21
changelog:
  - resolves: #838914
    keep log files for 28 days instead of 7
  - resolves: #916396
    fixed buffer overflow in iostat program when inspecting encrypted disks
  - resolves: #826399, #826403, #804534
    added support for persistent device names
  - resolves: #888823
    increased NR_CPUS and NR_IRQS constants
  - resolves: #820992
    made init script LSB
  - resolves: #850810
    added iostat option to report interval statistics in first report


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-22
changelog:
  - resolves: #996134
    fixed umask command in sa1 script
  - resolves: #967386
    documented and partialy fixed regression caused by sysstat-9.0.4-diskstats.patch


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-22.el6_5.1
changelog:
  - resolves: #1127069
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Peter Schiffer <pschiffe@redhat.com> 6.3.1-1
changelog:
  - resolves: #605521
    added manual page for urlgrabber
  - resolves: #768949
    updated info about trapt in bash manual page
  - resolves: #528879
    added missing pages: mksquashfs.1 and unsquashfs.1
  - Removed bug fixed in original component: #659646
  - Removed bug fixed in original component: #659705
  - Removed bug fixed in original component: #659713
  - Removed bug fixed in original component: #659720
  - Removed bug fixed in original component: #674864
  - Removed bug fixed in original component: #674866
  - Removed bug fixed in original component: #676636
  - Removed bug fixed in original component: #676643
  - Removed bug fixed in original component: #714086
  - Removed bug fixed in original component: #745133


author: Peter Schiffer <pschiffe@redhat.com> 6.3.2-1
changelog:
  - resolves: #745467
    added manual page for pkcs_slot
  - resolves: #801742
    fixed redundant "works" word in request-key.conf man page
  - resolves: #695363
    added description of auditing support to the iptables and ip6tables man pages
  - resolves: #801784
    fixed typo in the yum man page
  - resolves: #747970
    added description of -D option to the lsblk man page
  - resolves: #769566
    fixed description of --group-info option in the wbinfo man page
  - resolves: #766341
    removed -s option from cgcreate man page
  - resolves: #801783
    added description of auditing support to the ebtables man page
  - resolves: #800256
    added description of EIDRM error to the shmop man page
  - resolves: #653908
    added missing options to the replcon man page
  - Removed bug fixed in original component: #737990


author: Peter Schiffer <pschiffe@redhat.com> 6.3.3-1
changelog:
  - related: #528879
    fixed name section in the unsquashfs.1 man page
  - resolves: #529335
    added missing pages: fusermount.1, ulockmgr_server.1 and mount.fuse.8
  - resolves: #810910
    mount(8) man page should include relatime in defaults definition


author: Peter Schiffer <pschiffe@redhat.com> 6.4.0-1
changelog:
  - resolves: #866386
    mpo remove tracker
  - removed bug fixed in original component: #676355
  - removed bug fixed in original component: #714073
  - removed bug fixed in original component: #714074
  - removed bug fixed in original component: #714075
  - removed bug fixed in original component: #714078
  - removed bug fixed in original component: #729984
  - removed bug fixed in original component: #735789
  - removed bug fixed in original component: #745152
  - removed bug fixed in original component: #745501
  - removed bug fixed in original component: #745521
  - removed bug fixed in original component: #745733
  - removed bug fixed in original component: #799958
  - removed bug fixed in original component: #809108
  - removed bug fixed in original component: #809117
  - removed bug fixed in original component: #809139
  - removed bug fixed in original component: #809144
  - removed bug fixed in original component: #809564
  - removed bug fixed in original component: #820183
  - removed bug fixed in original component: #690800
  - renamed all patches to include bug id


author: Peter Schiffer <pschiffe@redhat.com> 6.4.1-1
changelog:
  - resolves: #872526
    mentioned ext4 support in dump(8) man page
  - resolves: #853959
    added missing --no-tpm option in rngd(8) man page
  - resolves: #867332
    mentioned that groupmems command is not setuid in groupmems(8) man page
  - resolves: #849201
    added missing alsaunmute(1) man page
  - resolves: #806845
    updated dmidecode(8) man page
  - resolves: #845657
    updated description of localalloc option on the numactl(8) man page
  - resolves: #814417
    updated vnc documentation for -SecurityTypes option
  - resolves: #846591
    added missing options to the ipmitool(1) man page


author: Peter Schiffer <pschiffe@redhat.com> 6.5.0-1
changelog:
  - resolves: #996478
    mpo remove tracker
  - removed bug fixed in original component: #659661
  - removed bug fixed in original component: #714079
  - removed bug fixed in original component: #714084
  - removed bug fixed in original component: #809550


author: Peter Schiffer <pschiffe@redhat.com> 6.5.1-1
changelog:
  - related: #996478
    mpo remove tracker
  - removed bug fixed in original component: #881779
  - resolves: #896700
    fixed missing text in auditd.conf(5) man page
  - resolves: #1002071
    updated description of extglob behavior in bash(1) man page
  - resolves: #807323
    added description of webm format to byzanz-record(1) man page
  - resolves: #885625
    fixed typo on cupsctl(8) man page
  - resolves: #905066
    fixed documentation regarding CA certificates in curl package
  - resolves: #896544
    fixed typos in curl package man pages
  - resolves: #913088
    fixed typo in security_compute_av(3) man page
  - resolves: #913191
    updated selinux(8) man page
  - resolves: #979460
    added clarification about setting variables on mailx(1) man page
  - resolves: #960281
    documented missing values in clock_getres(2) man page
  - resolves: #974697
    updated description of LD_PRELOAD variable in ld.so(8) man page
  - resolves: #953753
    documented /proc/[pid]/oom_score_adj on proc(5) man page
  - resolves: #953750
    documented /proc/sys/kernel/dmesg_restrict on proc(5) man page
  - resolves: #953539
    documented /proc/sys/kernel/kptr_restrict on proc(5) man page
  - resolves: #908295
    fixed typo on syslog(3) man page
  - resolves: #974685
    removed incorrect example from sched_setaffinity(2) man page
  - resolves: #988125
    documented MADV_DONTDUMP and MADV_DODUMP on madvise(2) man page
  - resolves: #903258
    documented FALLOC_FL_PUNCH_HOLE flag on fallocate(2) man page
  - resolves: #957010
    fixed return type of strtoul(3) and strtoull(3)
  - resolves: #928917
    updated description of O_DIRECT on open(2) man page
  - resolves: #979318
    described ipv6 on netstat(8) man page
  - resolves: #951826
    updated default settings of inet_protocols variable on postconf(5) man page
  - resolves: #872144
    backported fix for top(1) man page
  - resolves: #983066
    removed deprecated example from rhnreg_ks(8) man page
  - resolves: #904970
    fixed typos on rsync(1) man page
  - resolves: #907837
    fixed description of -u option on useradd(8) man page
  - resolves: #884699
    fixed typo in usb-devices(1) man page
  - resolves: #972764
    removed superfluous dots after "via" preposition in yum man pages


author: Peter Schiffer <pschiffe@redhat.com> 6.5.2-1
changelog:
  - related: #807323
    fixed typo on byzanz-record(1) man page
  - related: #896700
    fixed even more missing text in auditd.conf(5) man page
  - related: #913191
    fixed typo on selinux(8) man page
  - resolves: #1020432
    properly documented -Z option for passing principal
    list on ssh-keygen(1) man page
  - resolves: #1020417
    removed incorrect default values of KexAlgorithms on ssh_config(5) man page
  - resolves: #833868
    fixed dig(1) man page
  - resolves: #1018622
    updated description of "new station" message on arpwatch(8) man page


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.6-1.el6_5
changelog:
  - Rebase to v0.5.6. Resolves: #961455
  - Two monitors are in fullscreen at only one screen (rhbz#809546)
  - Can't Change Resolution in Full Screen (rhbz#846127)
  - Connection dialog should handle connection errors (rhbz#864026)
  - Allow changing guest resolution when started in fullscreen (rhbz#864929)
  - "Unable to connect to the graphic server" error on guest shutdown (rhbz#875697)
  - Cannot change resolution when automatically resize is off (rhbz#908057)
  - full-screen=auto-conf -- setting resolution in a loop (rhbz#908408)
  - Send keys menu offset in fullscreen (rhbz#913601)
  - Support connection file / MIME reigstration (rhbz#908805)
  - Reuse existing 'displays' submenu (rhbz#856682)
  - Window too small after switching off full-screen (rhbz#805146)
  - Move display on client monitors with --full-screen (rhbz#876444)
  - Make window titles configurable (rhbz#904091)
  - Make hotkeys configurable from the cmdline (rhbz#904094)
  - Guest will keep typing '~' after press F9 and F10 in same time (rhbz#820829)
  - Fail to resume guest after do S3 (rhbz#870710)
  - man: document auto-conf fullscreen option (rhbz#875559)
  - Title bar of second form becomes invisible (rhbz#876445)
  - man: document running remote-viewer without URI (rhbz#882133)
  - Fix recent connections (rhbz#882134)
  - Multi-monitors fixes (rhbz#888629)
  - Add a "Do not ask me again" checkbox when closing app (rhbz#905684)
  - Fix menu keyboard interaction (rhbz#924577)
  - man: add -- to seperate program arguments (rhbz#843103)
  - Press Enter to connect in dialog (rhbz#885106)
  - Change of resolution switches previously disabled display back on (rhbz#958966)
  - All "windows" have the same resolution in fullscreen (rhbz#886570)
  - Removed plugin


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.6-2
changelog:
  - Use -H instead of -h for the short --hotkeys (rhbz#980846)
  - remote-viewer.desktop: Fix missing trailing ;


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-6
changelog:
  - Unregister events and callbacks on dispose, silence a libvirtd error when
    virt-viewer shuts down (rhbz#890297)


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-7
changelog:
  - Always ask for confirmation when quitting remote-viewer, even when in
    fullscreen (rhbz#905684)
  - Show an error message when trying to use a wrong SPICE password
    (rhbz#990883)
  - Make sure resolution higher than native can be set in fullscreen
    (rhbz#864929)


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-8
changelog:
  - Re-add patch to propagate 'send-ctrlaltdel' setting from the controller
    to spice-gtk, this was dropped by mistake during the 6.5 rebase
    Resolves: rhbz#1007205


author: James Antill <james.antill@redhat.com> - 3.2.29-36
changelog:
  - Speedup to_xml, and thus. createrepo.
  - Resolves: rhbz#878335
  - Don't throw an error with yum history list when there is no history.
  - Resolves: rhbz#802462
  - Verify options before doing anything (fix BZ references).
  - Resolves: rhbz#880968


author: James Antill <james.antill@redhat.com> - 3.2.29-37
changelog:
  - Move basename checking for nss snafu.
  - Resolves: rhbz#885159
  - Merge "identical" updateinfo errata from different repos.
  - Resolves: rhbz#737173


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-1
changelog:
  - update to 0.26.0
  - patch to add missing emms instructions
  - reenable iwmmxt since configure should now detect if it can't built


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-2
changelog:
  - Add experimental patch to use OpenMP
    If this causes your X server to misbehave, please file bugs.


author: Anton Arapov <anton@redhat.com> - 1:2.11-7
changelog:
  - Add "PXE" to HP OEM Type 209 record output
  - Properly print the hexadecimal value of invalid string characters


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-12
changelog:
  - Do not own common directories under /etc (bug #634137)
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-13
changelog:
  - Correct spec file comment (bug #634137)
  - Add quotasync tool (bug #658586)
  - Implement quotacheck for GFS2 (bug #658586)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-14
changelog:
  - Fix vfsv0 format detection (bug #609795)
  - Initialize vfsold block and inode value boundries for new quota file
    (bug #668709)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-18
changelog:
  - Do not use real domains in warnquota example (bug #680919)
  - Disable grace period/times remote setting (bug #683554)
  - Initialize v2r1 ddquot padding in dump (bug #692390)
  - Make dirname static to work with nss_db (bug #704216)
  - Do not report missing utmp record to syslog (bug #730057)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-19
changelog:
  - Report quotacheck failures by return code (bug #717948)
  - Improve quotacheck error message (bug #717948)
  - Do not fiddle with quota files on XFS and GFS (bug #846120)
  - Allow to set limits using multiplicative units (bug #890051)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-18
changelog:
  - add IPv6 support to comsat notification (#198403)
  - package man page for mailstat
  - change mail spool directory to /var/spool/mail


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-24
changelog:
  - rename getline to avoid conflict with glibc (#505977)
  - add -Wno-comments to CFLAGS
  - remove package name from summary


author: Chris Feist <cfeist@redhat.com> - 0.16.2-60
changelog:
  - Fix issue causing conga to be unable to find/install packages due to line
    breaks in yum output
  - Resolves: rhbz#842939


author: Chris Feist <cfeist@redhat.com> - 0.16.2-63
changelog:
  - Synced cluster schema with latest cman, resource-agents, fence-agents
    fence-sanlock & fence_virt
  - Resolves: rhbz#878108


author: Chris Feist <cfeist@redhat.com> - 0.16.2-64
changelog:
  - Automatically add unfencing section when adding scsi fence agents
  - Prevent ccs_sync from segfaulting when multiple hostnames were provided
  - ccs --lsmisc now shows fence_daemon options
  - ccs --lsresourceopts has been added as an alias to --lsserviceopts
  - Resolves: rhbz#853890 rhbz#877863 rhbz#893574 rhbz#918555


author: Chris Feist <cfeist@redhat.com> - 0.16.2-69.el6_5.1
changelog:
  - Added ability to create/remove uidgid entries for corosync in cluster.conf
  - Resolves: rhbz#1038272


author: Neil Horman <nhorman@redhat.com> 1.1-2
changelog:
  - Removed set -m option from cpupower (bz 914623)
  - Added man pages for turbostat & perf policy (bz 886225)
  - Improved perf_poilcy usage (bz 886228)
  - Added check for root on energy_perf_poilcy (bz 886227)
  - Fixed crash when running cpufreq-bench as non-root (bz 886226)


author: Neil Horman <nhorman@redhat.com> 1.2-1.1
changelog:
  - Fixed wildcatpass error message (bz 1056310)
  - Fixed rapl register reads (bz 1080631
  - Enalbed haswell power states (bz 1008033)


author: Ian Kent <ikent@redhat.cem> - 5.0.5-82
changelog:
  - bz859078 - NFSv4 UDP packet sent during automounting
    - only probe specific nfs version when requested
  - Related: rhbz#859078


author: Ian Kent <ikent@redhat.cem> - 5.0.5-83
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - add missing "\n" to usage output.
  - Related: rhbz#852327


author: Ian Kent <ikent@redhat.cem> - 5.0.5-84
changelog:
  - bz1002896 - Race condition or other deadlocking issue on expire code path
    - expire thread use pending mutex.
  - Resolves: rhbz#1002896


author: Ian Kent <ikent@redhat.cem> - 5.0.5-85
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - add missing ">" to usage output.
  - Related: rhbz#852327


author: Ian Kent <ikent@redhat.cem> - 5.0.5-86
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - add missing ">" to man page.
    - handle path name when when given instead of only map name.
  - Related: rhbz#852327


author: Ian Kent <ikent@redhat.cem> - 5.0.5-87
changelog:
  - bz1004129 - automounter load balancing with replicated servers broken
    by whitespace patch
    - fix get_nfs_info() probe.
  - Resolves: rhbz#1004129


author: Ian Kent <ikent@redhat.cem> - 5.0.5-88
changelog:
  - bz996749 - segmentation fault in ber_memalloc_x function when running automount
    - fix crash due to thread unsafe use of libldap.
  - Resolves: rhbz#996749


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89
changelog:
  - bz1067774 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - fix options compare.
  - Resolves: rhbz#1067774


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89.el6_5.1
changelog:
  - bz1067774 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - fix fix options compare.
  - Related: rhbz#1067774


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89.el6_5.2
changelog:
  - bz1089889 - autofs can ghost non-existent map entries given the right timing
    - fix use cache entry after free in lookup_prune_one_cache().
    - check for non existent negative entries in lookup_ghost().
  - Resolves: rhbz#1089889


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-9
changelog:
  - Use a .gz archive instead of bz2, because that's what's hosted now.
    Fill in the full URL.
  - Resolves: #571607


author: Petr Machata <pmachata@redhat.com> - 1.41.0-10
changelog:
  - Turn on OpenMPI support on non-s390 arches.  It was accidentally
    turned off everywhere.
  - Move cmake files to libdir to avoid multilib conflicts.
  - Also install Boost.cmake, which is included by BoostConfig.cmake
  - Change soname selection to work on RHELs.
  - Resolves: #586204
  - Resolves: #592516
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11
changelog:
  - ... and revert the soname change, because that's not the smartest
    thing to do mid-release.
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-16
changelog:
  - Fix a GCC warning for looser throw specifier in
    boost::exception_ptr::~exception_ptr.
    (boost-1.41.0-exception_ptr.patch)


author: Baoquan He <bhe@redhat.com> - 2.0.0-266
changelog:
  - kdump.conf.5: Modify 2 spelling errors
  - kexec-tools: Only remap network once when cluster configured
  - tools: Clean up /etc/iface_map after remapping the devices
  - kernel cmdline: Remove hugepage allocations
  - mkdumprd: change default disk_timeout to 180 seconds
  - kdump.conf: Tell user to specify module without ".ko" suffix
  - kdump.conf: add some missing supported configurations from kdump.conf.5
  - kdump.conf: change line columns to 80
  - Raw dump: use /sbin/blockdev to flush out block device buffers
  - Update translation file for firstboot
  - Update translation file for firstboot


author: Baoquan He <bhe@redhat.com> - 2.0.0-267
changelog:
  - mkdumprd: improve error message when e2fsprogs is missing, resolves bug 975642
  - mkdumprd: improve error message when btrfs-progs is missing, resolves bug 810494
  - Document mkdumprd option --allow-missing, resolves bug 951035


author: Baoquan He <bhe@redhat.com> - 2.0.0-269
changelog:
  - add snappy build, resolves bug 902147
  - This patch fixes the parsing of inline comments in config file, resolves bug 967427


author: Baoquan He <bhe@redhat.com> - 2.0.0-271
changelog:
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption, resolves bug 1009207


author: Baoquan He <bhe@redhat.com> - 2.0.0-272
changelog:
  - Allow multipathd to configure multipath map before adding partition devmappings, resolves bug 906601
  - mkdumprd: use timeout_count as a global variable, resolves bug 906601
  - mkdumprd: add support for SCM devices available for Linux on System z, resolves bug 903529
  - kdump.init: Run multiple kdump init instances one by one in serial order, resolves bug 963948


author: Baoquan He <bhe@redhat.com> - 2.0.0-273
changelog:
  - Fix max_mapnr issue on system has over 44-bit addressing, resolves bug 1008543
  - makedumpfile: fails phys_base calculation on sadump format, resolves bug 1010103


author: Ian Kent <ikent@redhat.cem> - 5.0.5-81
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - update automount(8) usage message also.
  - Related: rhbz#852327


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Peter Jones <pjones@redhat.com> - 0.97-76
changelog:
  - [UEFI] Iterate PXE objects and try to find an active one instead
    of letting the firmware pick for us.
    Resolves: rhbz#670266
  - [UEFI] Handle tftp implementations that give invalid error codes
    from TFTP_GET_FILE_SIZE.
    Related: rhbz#670266


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-79
changelog:
  - Scan for virtio disks
    Resolves: rhbz#814014
  - Let user specify efi boot disk as root
    Resolves: rhbz#737732
  - Pass hig order bits to EFI system map and memory map
    Resolves: rhbz#825054


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-82
changelog:
  - Disable the watchdog timer on EFI platforms
    Resolves: rhbz#911715
  - Add MACAPPEND command
    Resolves: rhbz#848628
  - Retry getting memory map and exit boot services on fail
    Resolves: rhbz#918824
  - Fixed regexps for matching devices in device.map and resolve symlinks
    when getting stats for block device
    Resolves: rhbz#928938
  - Remove grub.info when make clean is called to be sure that it is
    recreated with all changes.
    Resolves: rhbz#854652
  - Replace glibc-static with /usr/lib/libc.a in BuildRequires
    Resolves: rhbz#922705
  - If the title is too long, print remaining seconds to the new line
    Resolves: rhbz#851706
  - Recognize virtio-blk devices when running on OVMF
    Resolves: rhbz#916016


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-83
changelog:
  - Allocate size of struct instead of size of pointer
    Resolves: rhbz#1008305
  - Add support for NVMe to grub-install
    Resolves: rhbz#1017296


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-84
changelog:
  - grub-install: add regex for partition and multipath when
    use_friendly_names is off
    Resolves: rhbz#1121321


author: Ondrej Vasik <ovasik@redhat.com> 2.10-7
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#571843)
  - comment patches


author: Milan Broz <mbroz@redhat.com> - 0.1.4-1
changelog:
  - Fix thin_check man page (add -q option).
  - Install utilities in /usr/sbin.
    Resolves: #803204 #803144


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.6-1
changelog:
  - New upstream version 0.2.6; working around build system providing
    old boost-devel-1.41.0-17.el6_4 with constraints
    Resolves: #814790


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-2
changelog:
  - New upstream version 0.2.8 introducing cache_{check,dump,repair,restore}; missing patch
    Resolves: #1019217


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-3
changelog:
  - Add critical needs_check flag support
  - No support for the cache target in RHEL-6.5, thus avoid packaging cache tools and man pages
    Resolves: #1086824


author: Marek Grac <mgrac@redhat.com> - 3.0.15-26
changelog:
  - fence_drac5: fix regression caused by missing detection of EOL
    Resolves: rhbz#905478
  - fence_vmware_soap: fix traceback when hostname cannot be resolved
    Resolves: rhbz#902404


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-13
changelog:
  - Fix array overrun when launching nss_pcache (#714154)
  - For FakeBasicAuth retrieve the entire subject, not just CN. Prefix this
    with "/" to be compatible with OpenSSL.
    Always retrieve the client certificate, not just on the first request
    it is needed. (#702437)
  - Don't try to shut down NSS if it wasn't initialized. (#691502)


author: Robert Relyea <rrelyea@redhat.com> - 1.0.8-14
changelog:
  - Fix 'Bugzilla Bug #797358 - mod_nss fails debug assertion' by removing
    'mod_nss-no_shutdown_if_not_init.patch' and applying
    'mod_nss-no_shutdown_if_not_init_2.patch' instead
  - The 'mod_nss-no_shutdown_if_not_init_2.patch' patch also fixes
    Bugzilla Bug #797326 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-15
changelog:
  - Fixes Bugzilla Bug #749408 - PK11_ListCerts called to retrieve all user
    certificates for every server (mod_nss-PK11_ListCerts.patch)
  - Fixes Bugzilla Bug #749409 - Add '--enable-ecc' option to %configure
    line under %build section of RHEL 6 spec file


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-16
changelog:
  - Fixes Bugzilla Bug #769906 - mod_nss insists on Required value
    NSSCipherSuite not set. (mod_nss-proxyvariables.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-17
changelog:
  - Fixes Bugzilla Bug #816394 - [RFE] Provide Apache 2.2 support for TLS v1.1
    via NSS through mod_nss . . .
  - Bumped version build/runtime requirements for NSPR and NSS


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-18
changelog:
  - Fixes Bugzilla Bug #835071 - [RFE] Support ability to share mod_proxy with
    other SSL providers (w/jorton, nkinder, & rcritten)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-19
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1030265 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-6.5.z]


author: Matthew Booth <mbooth@redhat.com> - 0.8.7-5
changelog:
  - Disable serial console when converting to RHEV (RHBZ#785235)
  - Improve error detection in p2v-server
  - Replace augeas-libs dependency with libguestfs dependency for mdadm_conf lens


author: Matthew Booth <mbooth@redhat.com> - 0.8.9-1
changelog:
  - Update to new upstream release
  - Don't warn on unknown floppy devices (RHBZ#794680)
  - Create disks with cache=none on libvirt (RHBZ#838057)


author: Matthew Booth <mbooth@redhat.com> - 0.8.9-2
changelog:
  - Fix creation of /Temp/V2V (RHBZ#868073)
  - Fix output to RHEV (RHBZ#868129)
  - Clean RPM database before any rpm operations
  - Fix update of xvc0 to ttyS0 in securetty
  - Fix guestfs launch failure doing format conversion with libvirtxmlguest
    (RBBZ#868405)


author: Matthew Booth <mbooth@redhat.com> - 0.9.1-2
changelog:
  - Fix BSOD converting Windows guest with Xen PV drivers (RHBZ#809273)
  - Build rhsrvany from source (RHBZ#1003058)


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-40.el6
changelog:
  - Backport SELinux enhancements from upstream
    Resolves: bz876309
  - Fix invocation of 'udevadm info' in device-mapper plug-in
    Resolves: bz947424


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-41.el6
changelog:
  - Exclude RPC files from procfs data collection in networking module
    Resolves: bz913201
  - Add NFS client plug-in
    Resolves: bz907861
  - Restrict wbinfo collection to local domain in samba plug-in
    Resolves: bz986973


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-42.el6
changelog:
  - Update sosreport user interface text
    Resolves: bz878589
  - Preserve ownership and permissions on collected files
    Resolves: bz888724
  - Do not collect krb5.keytab in samba plug-in
    Resolves: bz987103
  - Collect output of 'ls -l /var/named' in named plug-in
    Resolves: bz896713
  - Collect /var/log/squid in squid plug-in
    Resolves: bz955671
  - Fix systool invocation in device-mapper plug-in
    Resolves: bz868719
  - Add plug-in to collect OpenHPI configuration
    Resolves: bz924338
  - Fix traceback in sar module when /var/log/sa does not exist
    Resolves: bz883443
  - Collect mountstats and mountinfo files in filesys plug-in
    Resolves: bz988417
  - Add crm_report integration for pacemaker to cluster plug-in
    Resolves: bz989292


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-43.el6
changelog:
  - Add restricted rpm verify
    Resolves: bz888589
  - Add new foreman plug-in
    Resolves: bz976386
  - Collect saved vmcore-dmesg.txt files in kdump plug-in
    Resolves: bz924839
  - Obfuscate luci secrets in cluster plug-in
    Resolves: bz986301
  - Remove rpm list collection from RHN module
    Resolves: bz884609
  - Add gluster geo-replication status and sync with RHS version
    Resolves: bz868711
  - Obscure passwords in libvirt and corosync data
    Resolves: bz883811
  - Make krb5 plug-in conform with sos-2.2 plug-in API
    Resolves: bz987103
  - Add further NIS data collection
    Resolves: bz928748
  - Fix symbol collection for modern kernels
    Resolves: bz970417
  - Disable 'ipsec barf' collection in openswan plug-in
    Resolves: bz924925
  - Add pam_ldap.conf collection to ldap plug-in
    Resolves: bz877395
  - Force LC_ALL=C for external commands
    Resolves: bz888488
  - Rationalise lvm2 plug-in lvmdump options
    Resolves: bz980959
  - Backport addCopySpecs from upstream
    Resolves: bz924338, bz907861


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-45.el6
changelog:
  - Fix collection of squid log files
    Resolves: bz955671
  - Fix regex substitution in openhpi plug-in
    Resolves: bz924338
  - Fix typo in /proc/kallsyms collection
    Resolves: bz970417
  - Fix exception while post-processing command output
    Resolves: bz986301, bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-46.el6
changelog:
  - Fix obfuscation of luci secrets in cluster plug-in
    Resolves: bz986301
  - Fix password substitution in libvirt plug-in
    Resolves: bz883811


author: Hans de Goede <hdegoede@redhat.com> 0.8.1-3
changelog:
  - Fix resolution sync not working when connecting with a multi monitor client
    to a single monitor guest
    Resolves: rhbz#748760


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
    Resolves: rhbz#842355
  - This switches to syslog for logging, adding timestamps, etc. to the logs
    Resolves: rhbz#747894
  - This adds support for dynamically adding monitors and resolutions
    Resolves: rhbz#842298


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-5
changelog:
  - Allow having a sparse monitor config (ie monitor 1 and 3 active)
    Resolves: rhbz#894036
  - Fix session spice-vdagent crash on system spice-vdagentd restart
    Resolves: rhbz#894365
  - Don't log a warning when there are less qxl devices then monitors
    Resolves: rhbz#895004
  - Restore old monitor config when failing to set a new monitor config
    Resolves: rhbz#881020


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - Rebase to spice-vdagent-0.14.0 release
  - Drop all patches (all upstream)
    Resolves: rhbz#951596
  - Advertise Unix line-endings for clipboard data
    Resolves: rhbz#799482
  - Add support for setups with multiple Screens
    Resolves: rhbz#904082
  - Make console-kit integration runtime configurable
    Resolves: rhbz#904084


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-2
changelog:
  - Silence session agent error logging when not running in a vm
    Resolves: rhbz#999804
  - Release guest clipboard ownership on client disconnect
    Resolves: rhbz#1003977


