# changelog

author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-80
changelog:
  - Release 1.2.11.15-80
  - Resolves: #1316869 - ns-slapd general protection ip:7f570c56afd5 sp:7f56dc7edce0 error:0 in libc-2.12.so (DS 48944)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-82
changelog:
  - Release 1.2.11.15-82
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-83
changelog:
  - Release 1.2.11.15-83
  - Resolves: #1327065 - After updating server, component nss-3.21.0-0.3.el6_7.x86_64, some client applications cannot connect to server (DS 48798)
  - Resolves: #1266920 - invalid message about write_changelog_and_ruv on consumers (DS 47801)
  - Resolves: #1330758 - add a nsTLS1.0 on or off new configuration parameter to cn=encryption,cn=config in RHEL 6 389-ds-base (DS 48816)
  - Resolves: #1369572 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: #1371706 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: #1371678 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)
  - Resolves: #1370145 - cannot reindex retrochangelog (DS 47619)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-84
changelog:
  - Release 1.2.11.15-84
  - Resolves: #1352109 - Replication stops working only when fips mode is set to true  (DS 48909)
  - Resolves: #1372420 - DES to AES backport issues (DS 47462)
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)
  - Resolves: #1382386 - Directory Server accepts a wrong userdn macro ACI (DS 449)
  - Resolves: #1382519 - 1.2.11 only -- coverity fixes (DS 49004)
  - Resolves: #1387022 - specific search with sizelimit=1 sometimes returns no entry (DS 47703)
  - Resolves: #1387772 - trace args debug logging must be more restrictive (DS 49009)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-85
changelog:
  - Release 1.2.11.15-85
  - Resolves: #1372420 - DES to AES backport issues (DS 47462)
  - Resolves: #1391324 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-86
changelog:
  - Release 1.2.11.15-86
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 49049)
  - Resolves: #1400997 - ldif2db.pl script shows wrong usage for -n as instance, instead of database (DS 49070)
  - Resolves: #1403754 - ns-slapd crashes during tickets/ticket48665_test.py (DS 48665)
  - Resolves: #1410645 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
  - Resolves: #1399600 - ns-slapd segfaults during execution of tickets/ticket47966_test.py (DS 47966, DS 48987)
  - Resolves: #1402012 - Importing big ldif file with duplicate DNs throwing "unable to flush" error
  - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-87
changelog:
  - Release 1.2.11.15-87
  - Resolves: #1391701 - do not treat missing csn as fatal (DS 49020)
  - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-88
changelog:
  - Release 1.2.11.15-88
  - Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973)
  - Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-89
changelog:
  - Release 1.2.11.15-89
  - Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.5.4.7-3
changelog:
  - Update to version 6.5.4-7
  - Use lzma-compressed source tarball as sugested by Ville Skyttä (BZ#515319)


author: Olivier Fourdan <ofourdan@redhat.com> - 6.5.4.7-6
changelog:
  - Add fix for CVE-2010-4167
  - Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
  - Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798


author: Thomas Haller <thaller@redhat.com> - 1:0.8.1-104
changelog:
  - core: ignore slave devices when deciding global state (rh #951399)
  - dns: don't override DHCP-supplied search order with domain (rh #1202539)
  - build: fix building source package on recent Fedora (rh #1286742)
  - ibft: add settings plugin (rh #1198325)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:0.8.1-105
changelog:
  - ifcfg-rh: delay handling of deletion events (rh #1272617)
  - ifcfg-rh: load connections during GetIfcfgDetails avoiding ifup race (rh #1292753)
  - ifcfg-rh: leave bridge/bond/vlan to initscripts when support disabled (rh #1292753)
  - bond: avoid assuming connections on bond masters that are not up (rh #1292502)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:0.8.1-108
changelog:
  - dns: added new dns=none option to disable updating of resolv.conf (rh #1308730)
  - core: downgrade message level for unknown device driver (rh #1331314)
  - infiniband: compare only last 8 octects for MAC address (rh #1353033)
  - po: update translation (rh #1321723)


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.8-37
changelog:
  - Add AllowedUsers and AllowedGroups feature
  - Add IgnoredPath option
  - Resolves: #1256705, #1208713


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.8-41
changelog:
  - Limit corefile dump to the value set as MaxCrashReportsSize
  - Correct Required-Start
  - Avoid infinite crash loops
  - Resolves: #1333068, #1324586, #1346198


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-3
changelog:
  - prevent setfacl --restore from SIGSEGV on malformed restore file (#576512)
  - run the test-suite if possible


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-5
changelog:
  - clarify that removing a non-existent acl entry is not an error (#674883)
  - update project URL in package specification (#702638)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-6
changelog:
  - add function acl_extended_file_nofollow() (#720318)
  - build with partial RELRO support as a security enhancement (#723998)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-7
changelog:
  - fix SIGSEGV of getfacl -e on overly long group name (#1025246)
  - fix test-suite failure on a repeated run (#743847)


author: Steve Grubb <sgrubb@redhat.com> - 0.14-2
changelog:
  resolves: #585919 - aide: Libgcrypt warning: missing initialization
  resolves: #587086 - [abrt] crash in aide-0.14-1


author: Steve Grubb <sgrubb@redhat.com> - 0.14-3
changelog:
  resolves: #590561 aide does not detect the change of SElinux context
  resolves: #590566 aide reports a changed file when it has not been changed


author: Tomas Sykora <tosykora@redhat.com> - 0.14-9
changelog:
  - RHEL-6.9 erratum
     - Fix aide logs with remote rsyslog causing unexpected results
     Resolves: rhbz#1305046


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.22-2
changelog:
  - updated to 1.0.22 final
  - added alsaloop utility and alsa-delay script
  - updated the alsa-info.sh script
  - Resolves: rhbz#650113


author: Jaroslav Kysela <jkysela@redhat.com> 1.1.0-3
changelog:
  - updated to 1.1.0 final
  - alsa-info.sh is part of alsa-utils package now
  - Resolves: rhbz#1245602
  - Resolves: rhbz#1248512
  - Resolves: rhbz#1006466
  - Resolves: rhbz#881734
  - Resolves: rhbz#894032


author: Jaroslav Kysela <jkysela@redhat.com> 1.1.0-8
changelog:
  - A small fix for alsa-delay script
  - Fix for ca0106 alsactl init
  - Resolves: rhbz#894032
  - Resolves: rhbz#1320099


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.10-43
changelog:
  - 630019 set correct (f)pie build flags
  - 615104 fix double echo in initscript
  - 589099 Wrong file permissions for atd configuration
  - Resolves: rhbz#630019, rhbz#615104, rhbz#589099


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-47
changelog:
  - do not use perr() in running atd (#994201)
  - correct Requires/BuildRequires (#712079)
  - mention all options in the usage() (#784814)
  - do not leave zero-byte sized files when filesystem is full (#1166882)


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-49
changelog:
  - correct the DST correction when using UTC time specification (#1320322)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages (#1226958)


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1065067 - Audit package rebase
  resolves: #810749 - audit allows tcp_max_per_addr + 1 connections
  resolves: #869555 - ausearch -i does not interpret execve arguments always
  resolves: #888348 - auditd won't start when some actions send mail
  resolves: #922508 - confusing aulast records for bad logins
  resolves: #950158 - man page unclear wrt num_logs affecting keep_logs setting
  resolves: #967238 - Audit rules are built from a directory of rule files
  resolves: #967240 - ausearch to checkpoint so only reports new events
  resolves: #970675 - auparse is truncating path context after first category
  resolves: #1011052 - Missing text in auditd.conf man page
  resolves: #1022035 - Case values for actions unclear in auditd.conf man page
  resolves: #1029981 - ausearch help typo for "-x" option
  resolves: #1049916 - ausearch issues found by ausearch-test
  resolves: #1053424 - Error in auparse-defs.h
  resolves: #1071580 - audispd config file parser fails on long input
  resolves: #1089713 - limit of 30 for system call in audit.rules


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-4
changelog:
  resolves: #1049916 - Handle i386 session ID's better
  resolves: #1120286 - ausearch -i does not display commas between categories


author: Steve Grubb <sgrubb@redhat.com> 2.4.5-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1129076 - auvirt --help shows an incorrect option "--show--uuid"
  resolves: #1138674 - auditd may fail to start if configured to send mail
  resolves: #1144252 - Auditctl should not send warnings to console during boot
  resolves: #1197235 - ausearch can't parse time in non-US locale/UTF-8 encoding
  resolves: #1235457 - Line buffer is too short for plugin config files
  resolves: #1257650 - Rebase audit package


author: Ian Kent <ikent@redhat.com> - 5.0.5-123
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - always set direct mounts catatonic at exit.
    - fix error handing in do_mount_indirect().
    - check negative cache much earlier.
    - log pipe read errors.
    - fix handle_mounts() termination condition check.
  - Resolves: rhbz#1277033


author: Ian Kent <ikent@redhat.com> - 5.0.5-124
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - wait for master map available at start.
    - add master read wait option.
  - Resolves: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-125
changelog:
  - bz703846 - Incorrect autofs.schema
    - update and add README for old autofs schema
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-126
changelog:
  - bz1384404 - Automounter does not fetch maps from AD
    - work around sss startup delay.
    - add sss master map wait config option.
  - Resolves: rhbz#1384404


author: Ian Kent <ikent@redhat.com> - 5.0.5-127
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - fix included master map not found return.
    - dont exit on master map read fail timeout.
    - set sane default master read wait timeout.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-128
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - don't return until after master map retry read.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-129
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - make lookup_nss_read_master() return nss status.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-130
changelog:
  - bz703846 - Incorrect autofs.schema
    - fix autofs.schema.new not copied to package.
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-131
changelog:
  - bz1396403 - Trying to access a non-existent directory using automount
                results in 4 minute hang with nfs-utils-1.2.3-73.el6
    - fix inconsistent signed usage for __rpc_ping().
    - check NFS server availability on local mount fallback
  - Resolves: rhbz#1396403


author: Ian Kent <ikent@redhat.com> - 5.0.5-132
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - make set_direct_mount_catatonic() more general.
    - set autofs mounts catatonic at exit
  - Related: rhbz#1277033


author: Michal Sekletar <msekleta@redhat.com> - 0.6.25-17
changelog:
  - produce better error message when client reaches maximum number of dbus objects (#1292862)
  - don't print backtrace if avahi-discover can't connect to avahi-daemon (#1110349)
  - introduce new subpackage with python bindings (#753905)
  - avahi-daemon initscript improvements (#584766)
  - avahi-dnsconfd initscript improvements (#584761)


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.59.rc1
changelog:
  - Use /lib or /lib64 only if directory in chroot already exists
  - Tighten NSS library pattern, escape chroot mount path


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.61.rc1
changelog:
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)


author: Jeff Law <law@redhat.com> - 2.20.51.0.2-5.38
changelog:
  - Use thread-safe PLT stubs for Power. (#906079)
  - Avoid segfault when arch member uses long names, but no longname
    table exists.  (#909056)
  - Correct patch for 773526. (#922393)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.2-1
changelog:
  - version 0.6.2
  Resolves: rhbz#1003465,rhbz#1084225,rhbz#1133523,rhbz#1158564,rhbz#1207557,rhbz#1212449


author: Kai Engert <kaie@redhat.com> - 2014.1.98-65.2
changelog:
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate (rhbz#1138230).
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key.


author: Kai Engert <kaie@redhat.com> - 2015.2.3-65.1
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-78
changelog:
  - ricci: fix modules cannot return values due to bug in Module::empty_response
           (introduced with rhbz#1044122 fix)
  - Resolves: rhbz#1187745


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-79
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp)
  - Resolves: rhbz#1210679


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-83
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp) incl. reflecting fix up for wrongly generated
    RNG schema for cluster configuration wrt. "action" tag
  - Resolves: rhbz#1272588


author: Chris Feist <cfeist@redhat.com> - 0.16.2-84
changelog:
  - ccs: provide option to backup cluster.conf files when editing
  - ccs: when stopping all nodes send an option to ricci to shutdown
    the cluster before shutting down all of the nodes
  - ccs: Added --usealt option to force ccs to try to connect to
    ricci on the alt node if the normal node interface is not responding
  - Resolves: rhbz#1079529 rhbz#1192637 rhbz#1188108


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-86
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp), now also incl. new "oradg" resource agent
  - Resolves: rhbz#1272588


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.7-1
changelog:
  - correctly read CA not-valid-after dates on 32-bit machines (also reported by
    Natxo Asenjo), so that we don't spin on polling them (#1163023)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.8-1
changelog:
  - dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155, patch by Jan Cholasta)
  - getcert: print help output when 'status' isn't given any args (#1163541)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.1-1
changelog:
  - update to 0.77
    - add initial, still rough, SCEP support (#1140241,#1161768)
      - add an scep-submit helper to handle part of it
    - getcert: add add-ca/add-scep-ca/modify-ca/remove-ca commands
    - getcert: add -l, -L flags to request/resubmit/start-tracking commands
      to provide a way to set a ChallengePassword in signing requests
    - lay some groundwork for rekeying support
    - bundled dogtag enrollment helpers now output debugging info to stderr (#)
    - ipa-getcert: fix a crash when using DNS discovery to locate servers (#39)
    - getcert: fix displaying of pre-request pre-/post-save commands (#1178190,
        - use Zanata for translations
    - getcert list: list the certificate's profile name, if it contains one


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.2-1
changelog:
  - expose the certificate's not-valid-before and not-valid-after dates as a
    property over D-Bus (ticket #41)
  - give the local signer its own configuration option to set the lifetime
    of its signing certificate, falling back to the lifetime configured for
    the self-signer as a default to match the previous behavior
  - fix a potential read segfault parsing the output of an enrollment helper,
    introduced in 0.77 (thanks to Steve Neuharth)
  - read the ns-certtype extension value in certificates
  - request an enrollment certtype extension to CSRs if we have a profile name
    that we want to use (ticket #17, possibly part of IPA ticket #57)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.3-1
changelog:
  - fix a data loss bug when saving renewed certificates to NSS databases - the
    private key could be removed in error since 0.77
  - fixes for bugs found by static analysis
  - fix self-tests when built with OpenSSL 1.0.2


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.4-1
changelog:
  - don't display PINs in "getcert list" output (ticket #42, #1222595)
  - clean up launching of a private instance in "getcert"
  - expand on the don't-delete-private-key fix from 0.77.3 by letting NSS's
    own safety checks have an effect
  - backport record-keeping of key generation dates and counts of how many
    times we've gotten certificates using a given key pair


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.5-1
changelog:
  - pass $CERTMONGER_REQ_IP_ADDRESS to enrollment helpers if the signing request
    includes IP address subjectAltName values
  - correctly verify signatures on SCEP server replies when the signer is neither
    the top-level CA nor the RA (feedback in #1161768)
  - correctly verify signatures on SCEP server replies when there is more than
    one certificate in the chain between the RA and the top-level CA (feedback in


author: Jan Cholasta <jcholast@redhat.com> 0.77.5-2
changelog:
  - Accept cases where NSS insists on 2048-bit DSA
  - Drop workarounds for DSA keygen with NSS
  - Get vague about what we expect from certutil
  - Accept 1016 instead of 1024 bit for DSA keygen
  - Add an alternate accepted result for DSA keygen
  - Fix a possible uninitialized memory read


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.55.0-3
changelog:
  - auto-generate SEE ALSO sections for the man pages
  - utilize test suite in the check phase of the build process
  - bump upstream package (intentional jump on upstream front),
    see https://github.com/jnpkrn/clufter/releases/tag/v0.55.0


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.56.0-1
changelog:
  - general spec file refresh (pagure.io as a default project base, etc.)
  - bump upstream package, see
    https://github.com/jnpkrn/clufter/releases/tag/v0.56.0


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.56.2-1
changelog:
  - move entry_points.txt to clufter-cli sub-package
  - bump upstream package, see
    https://github.com/jnpkrn/clufter/releases/tag/v0.56.2


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.59.6-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
    (v0.56.3, v0.57.0, v0.58.0, v0.59.0 ... v0.59.6)
  - make Python interpreter execution sane


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-75
changelog:
  - fenced: Delay killing a node if there's a stateful merge after a short outage
    Resolves: rhbz#1077890
  - cman_tool: Don't segfault if /dev/zero doesn't exist
    Resolves: rhbz#1171241
  - cman: Improve node-name matching algorithm
    Resolves: rhbz#1193169
  - cman: Delete temp file if ccs_validation fails
    Resolves: rhbz#1206188
  - dlm_controld: reconnect uevent socket on error
    Resolves: rhbz#1221815
  - gfs_controld: reconnect uevent socket on error
    Resolves: rhbz#1225583
  - groupd: Show more than 128 mount groups or lockspaces
    Resolves: rhbz#1243944
  - qdiskd: fix memory leak in unaligned write path
    Resolves: rhbz#1245232
  - qdiskd: fix memory copy in unaligned write path
    Resolves: rhbz#1245232
  - qdiskd: Watch for other nodes leaving during a master re-election
    Resolves: rhbz#1257732


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-75
changelog:
  - libfence: Remove fencedevice params from fence_node -S so that asking for
    status does not shut down a node if action= is set
    Resolves: rhbz#1252991
  - schema: add RRP attributes for <token> section
    Resolves: rhbz#1221728


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-80
changelog:
  - cman_tool: prevent segv in cman_tool nodes -F addr crash of qdisk is present
    Resolves: rhbz#1384968


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-3
changelog:
  - Detect and warn about mismatch between devices used and assumed for an LV.
  - If available, use /proc/self/mountinfo to detect mounted volume in fsadm.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-4
changelog:
  - Remove spurious error about no value in /sys/dev/block/major:minor/dm/uuid.
  - Fix device mismatch detection for LV if persistent .cache file is used.
  - Fix holder device not being found in /dev while sysfs has it during dev scan.
  - Document that lvmlockd and lvmpolld features are available only if compiled in
    (RHEL6 lvm2 doesn't have lvmlockd and lvmpolld compiled in).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-7
changelog:
  - Workaround for raid leg allocation failure after not-in-sync raid leg failure.
  - Fix flushing of outstanding IO for mirror target (2.02.133).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-8
changelog:
  - Prevent non-synced raid1 repair unless --force
  - Fix automatic updates of PV extension headers to newest version.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-9
changelog:
  - Fix lvchange --discard|--zero for active thin-pool.
  - Fix lock-holder device for thin pool with inactive thin volumes.
  - Use any inherited tags when wiping metadata sub LVs to ensure activation.
  - Do not issue "Failed to create directory" message for dm_create_dir failure.
  - Add Conflicts: lvm2-libs < 2.02.111 to device-mapper-event to prevent
    incorrect package setup if old and new device-mapper/lvm2 packages combined.
  - Move blkdeactivate/blk-availability script from lvm2 to device-mapper package.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-10
changelog:
  - Disable queueing on mpath devs in blk-availability initscript.
  - Add new -m|--mpathoption disablequeueing to blkdeactivate.
  - Prevent only repair for non-synced raid1 unless --force, not other raid types.


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-10
changelog:
  - remove libtool hacks so that compat-db builds again
  - remove support for old BDBs: 4.3.29, 4.2.52, 4.1.25


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.5-2.5
changelog:
  - Forward-porting fixes from RHEL6.
  - Enlarge buffer used for formatting date in a string format.
  - Resolves: rhbz#891938.
  - Allow configuration of the maximum number of open files.
  - Resolves: rhbz#738967.


author: Ondrej Vasik <ovasik@redhat.com> - 0.2.7-3
changelog:
  - change project URL to current one (#1022502)
  - ensure num_threads <= IPMICONSOLE_THREAD_COUNT_MAX (#1022496)


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-33
changelog:
  - wacom: add support for NV-CONTROL extension (#805038)
  - wacom: fix button mapping (#805045)
  - wacom: add LED support from upstream (#805069)
    Resolves: #805038 #805045 #805069


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-37
changelog:
  - wacom: Make the calibrator window stay above other windows and
    cancel calibration if/when the calibrator loses input focus.
    Resolves: #818692


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-38
changelog:
  - wacom: Re-sync sources from gnome-settings-daemon-2.28.2-26 with
    LED support (#805069)
    Resolves: #805069


author: Carlos Garnacho <cgarnach@redhat.com> 2.28.1-41
changelog:
  - Check ~/.config/gnome-settings-daemon/no-per-machine-config for wacom settings
    Resolves: #966658


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-36
changelog:
  - Recognize up to 10 certs and keys on PIV and CAC cards.
  - Allow cards to have no cert in slot '0'.
  - Allow cards to have ECC and RSA certs and keys


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-38
changelog:
  - rename the cache changes done in -36 so that they have issues with old
    cache values
  - fix cac 1 alt tokens that store certs beyond the top three slots
  - fix hand when using hp keyboard


author: Jiri Vanek <jvanek@redhat.com> - 1.1-2
changelog:
  - package now "installs" also during pretrans, so pretrasn scripts can use it
  - pretrasn "install" is removed in postrans


author: Jiri Vanek <jvanek@redhat.com> - 1.2-1
changelog:
  - initial import to rhel6
  - commented out lua-posix
  - the work horse file changed to 644 (as it do not work without lua-posix)
  - Resolves: rhbz#1391735


author: Ondrej Oprala <ooprala@redhat.com> - 8.4-39
changelog:
  - du: improve du error message of coreutils commands in a chrooted environment
    (patch by Boris Ranto) (#1086916)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-40
changelog:
  - ls: improve efficiency on filesystems without support for ACLs,
    xattrs or SELinux (#1248141)
  - su: suppress PAM info messages for -c or non-login sessions (#1267588)
  - tail, stat: recognize several new filesystems - up2date by Jan 1st 2016 (#1280333)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-41
changelog:
  - colorls.sh,colorls.csh - call utilities with complete path (#1222140)
  - mkdir, mkfifo, mknod - respect default umask/acls when 
    COREUTILS_CHILD_DEFAULT_ACLS envvar is set (to match rhel 7 behaviour,


author: Kamil Dudka <kdudka@redhat.com> - 8.4-44
changelog:
  - fix the functionality of 'sort -h -k ...' in multi-byte locales (#1357979)
  - use correct path to grep(1) in colorls.sh (#1376892)
  - make colorls.sh compatible with ksh (#1321643)


author: Ondrej Vasik <ovasik@redhat.com> 2.10-7
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#571843)
  - comment patches


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-9
changelog:
  - make sure conversion between aggregates with different
    sizes is never considered useless (#1113878)
  - fix gfortran ICE on old-style initialization of derived type
    components (#1113793)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-10
changelog:
  - backport two further OpenMP 4.0 libgomp tasking fixes (#1099549)
  - fix scheduler wrong-code with DEBUG_INSNs containing volatile ASM_OPERANDS
    (#1127118, PR rtl-optimization/61801)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-12
changelog:
  - only use PCH in toplevel inclusions (#1177458, PR pch/38987, PR pch/52518)
  - don't vectorize bitfield and boolean types (#1150606,
    PR tree-optimization/43390)
  - fix up a Cray pointer handling bug (#1134560, PR fortran/62174)
  - fix up stdarg optimization when address of a va_list variable escapes
    in a phi node (#1190640, PR target/64979)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-17
changelog:
  - change libgomp default spincount if OMP_WAIT_POLICY is not specified
    (#1229852, PR libgomp/43706)
  - remove -Wl,-z,nodlopen from Ada libraries, which no longer contain
    trampolines (#1241495)
  - guard __gcov_flush body in libgcov.a with a mutex (#1251488,
    PR gcov/49484, PR gcov-profile/52627)
  - add missing s390.exp hunk from -mhotpatch= support (#1233260)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-18
changelog:
  - fix up std::rethrow_exception (PR libstdc++/62258, #1380760)
  - fix fortran ICE in resolve_ordinary_assign (PR fortran/43362, #1356346)


author: Jirka Hladky <jhladky@redhat.com> - 20160814-1
changelog:
  - Update to new upstream version 20160814
  - It includes new tool cpuinfo2cpuid which enables to process /proc/cpuinfo
  - Rebuilt for RHEL6 (rhbz#1316998)


author: James Antill <james.antill@redhat.com> - 0.9.9-17
changelog:
  - Use .gz as the default compression for modifyrepo.
  - Document --compress-type in createrepo man page.
  - Resolves: rhbz#874682


author: James Antill <james.antill@redhat.com> - 0.9.9-18
changelog:
  - Option -C does nothing on empty repo.
  - Resolves: rhbz#877301
  - Fix the options documentation.
  - Resolves: rhbz#892657


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-19
changelog:
  - Options --checksum, --unique-md-filenames, --simple-md-filenames for modifyrepo.
  - Resolves: rhbz#952602


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-20
changelog:
  - Catch IOErrors when loading pkglist.
  - Resolves: rhbz#1083185
  - Fix OSError when running createrepo on CIFS shares.
  - Resolves: rhbz#1035588


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - Make sure filename doesn't already contain a checksum.
  - Resolves: bug#1104840
  - Remove nonexistent --no-compress option from the manpage.
  - Resolves: bug#1106454


author: Sumit Bose <sbose@redhat.com> - 1.0.112-3
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 18,
     git commit de49edcc0dfea7c4396cdbd9e4897358b5474100


author: Sumit Bose <sbose@redhat.com> - 1.0.114.3-2
changelog:
  - Resolves: rhbz#728545 - ctdbd leaks a file descriptor
   - Resolves: rhbz#727913 - Coverity scan revealed defects


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-1
changelog:
  - Updated to ctdb version 1.0.114.5
   - Resolves: rhbz#821715 - ctdbd on a node crashes when another node in the
     cluster is brought down
   - Resolves: rhbz#758367 - ctdb w/ GFS2: A stable node gets banned
   - Resolves: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-2
changelog:
  - Increased release number to be able to update RHS version of ctdb
   - Related: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-3
changelog:
  - Improve output of ctdb status by adding the number of deleted nodes
   - Fix a memory and an unchecked return value found by coverity
   - Resolves: rhbz#866670 - ctdb status reports more nodes then available
   - Resolves: rhbz#874058 - One resource leak && unchecked return value


author: Sumit Bose <sbose@redhat.com> - 2.5.1-1
changelog:
  - Update to ctdb version 2.5.1
   - Resolves: rhbz#1061630
   - Resolves: rhbz#1085447
   - Resolves: rhbz#987099
   - Resolves: rhbz#1085413


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-68
changelog:
  - Apply upstream patch to fix PageLogFormat reference in documentation
    (bug #951553, STR #3969).
  - Only enable multi-part support for selected user agents
    (bug #1178370, STR #3455).
  - Fix for segfault in send_document (bug #1170002).
  - New SSLOptions directive to enable SSL3 and/or RC4, now disabled by
    default (bug #1161171).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-69
changelog:
  - Document ErrorPolicy in cupsd.conf manpage (bug #1120587, STR #4457).
  - Prevent cups-polld busy loop when access is restricted (bug #1164854).
  - Apply upstream patch to prevent crash in cupsdContinueJob() (bug #1187840).
  - Added failover backend to support priority-based failover (bug #1115219).
  - Apply patch to fix sanitize_title documentation (bug #988062, STR #4569).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-70
changelog:
  - Fixed SetEnv patch (bug #1198394).
  - Validate ErrorPolicy directory when reading configuration (bug #1196217,
    STR #4591).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-73
changelog:
  - Fix failover backend options parsing (bug #1231322).
  - The socket backend could go into an infinite loop with certain printers
    (bug #1276772, STR #3622)
  - dnssd backend: don't crash if avahi gives a callback with no TXT record
    (bug #1269305)
  - Don't unload jobs that couldn't be saved (bug #1283003, STR #4742).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-76
changelog:
  - 1344782 - Banner pages do not show time-at-creation or time-at-processing
  - 1219571 - Invalid memory accesses lead to crash when configured class has implicit class as first member


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-77
changelog:
  - 1099617 - Using "lp -o orientation-requested=6" with a PDF file has no effect.
  - 1268131 - Printing PDF with fit-to-page doesn't take printer HW margins into account


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-9
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.50-1
changelog:
  - functions: improve killing loops
  - netfs: tweak nfs umount
  - sysctl.conf: mention sysctl -a
  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
  - spec: require plymouth
  - fix mangled sysconfig/init.s390
  - rc.sysinit: don't perform fsck twice with /.autorelabel
  - ifdown-eth: fix comparison
  - ifup-eth: if arping fails, output responding MAC
  - network-functions: fix change_resolv_conf after grep update
  - spec: add sysctl.d dir
  - rc.sysinit: fix typo in fs
  - rename_devices: comments need to have a blank before them
  - rename_device: remove comments and trailing whitespaces
  - bonding: warn if the ifup for slave device failed
  - clarify daemon() usage message
  - ifdown: clean ipv4 localhost addresses
  - ifup-post: check resolve.conf also with DNS2
  - ifup: add missing quotes
  - ifup-eth: some bridge options are applied later
  - init.d/halt: give init some time to reexecute
  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
  - ifup-wireless: fix calling of phy_wireless_device
  - rc.sysinit: apply quotas after system is relabeled


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.54-1
changelog:
  - specfile: require newer lvm
  - ifdown-eth: add timeout for when flushing global scope
  - functions: support boolean values in is_true() & is_false()
  - ifup-aliases: do not return with error when arping fails
  - netconsole: resolve domain name via 'getent' instead of 'hosts'


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.55-1
changelog:
  - ipcalc: detect invalid mask
  - ifup-aliases: send gratuitous ARPs when adding addresses
  - network: treat other tunnel interfaces (fixes ifdown stage)
  - kexec-disable.conf: release kexec memory properly
  - network-functions: do not send hostname via dhclient everytime
  - sysconfig/network: NO_DHCP_HOSTNAME option introduced
  - ipv6_add_addr_on_device: replace the existing address on NIC


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.92
changelog:
  - Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * fix PAD and PRINT macros
  - Resolves: bz #1145442


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.93
changelog:
  - Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
    * make multipathd use uint64_t for tracking the interactive command
      fingerprint.
  - Resolves: bz #1316165


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.94
changelog:
  - Add 0251-RHBZ-1349376-fix-makefile.patch
    * make multipath use correct version of libdevmapper
  - Add 0252-RHBZ-1333334-huawei-config.patch
  - Add 0253-RHBZ-1305589-check-multipathd.patch
    * warn if multipath devices exist and mutipathd is not running
  - Add 0254-RHBZ-1310320-no-kpartx.patch
    * add skip_kpartx option to skip kpartx device creation
  - Add 0255-UPBZ-1322532-disable-reinstate.patch
    * do not reinstate unusable Implicit ALUA ghost paths
  - Add 0256-RHBZ-1324764-man-page-typo.patch
  - Add 0257-UPBZ-1328077-resize-map.patch
    * reset size if resizer operation fails
  - Add 0259-UPBZ-1343747-dont-fail-discovery.patch
    * keep multipath from failing if it fails to get information on any device
  - Add 0260-RHBZ-1364879-check-mpath-prefix.patch
    * ignore all devices that don't have a uuid starting with "mpath-"
  - Add 0261-RHBZ-1377532-disable-changed-paths.patch
    * do not use path devices that change their wwid
  - Resolves: bz #1299644, #1305589, #1310320, #1322532, #1324764, #1328077
  - Resovles: bz #1333334, #1343747, #1349376, #1364879, #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.95
changelog:
  - Modify 0254-RHBZ-1310320-no-kpartx.patch
    * fix small bug with unitialized data
  - Refresh 0261-RHBZ-1377532-disable-changed-paths.patch
  - Add 0262-RH-free-vector.patch
    * Fix coverity discovered bug in error path
  - Resolves: bz #1310320


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.96
changelog:
  - Add 0258-UPBZ-1300414-PURE_config.patch
  - Add 0264-RHBZ-1365710-no-use-after-free.patch
    * Fix two segfaults, and NULL out some structures after free
  - Add 0265-RHBZ-1390472-dont-exit.patch
    * don't exit if multipath hits recoverable errors during startup
  - Resolves: bz #1300414, #1365710, #1390472


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.97
changelog:
  - Add 0265-RHBZ-1355669-max-sectors-kb.patch
    * add "max_sectors_kb" config option to set this value on all paths
  - Change devicemapper Requires to >= 1.02.117-9.el6 (bz #1344381)
    * forces multipath to use latest version of blk-availability
  - Resolves: bz #1344381, #1355669


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.98
changelog:
  - Add 0266-RHBZ-1401391-fix-prio-put.patch
    * don't try to drop a nonexistant prio handler
  - Add 0267-RHBZ-1401769-orphan-status.patch
    * don't print out checker and device status for orphan paths
  - Resolves: bz #1401391, #1401769


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100
changelog:
  - Modify 0261-RHBZ-1377532-disable-changed-paths.patch
    * add man page information
  - Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
  - Related: #1377532


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-50.P1
changelog:
  - Lease table overflow crash. (#1133917)
  - Add ignore-client-uids option. (#1196768)
  - dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
  - VLAN ID is only bottom 12-bits of TCI. (#1259552)
  - dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
  - dhclient-script: make_resolv_conf(): Keep old nameservers
    if server sends domain-name/search, but no nameservers. (#1269595)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1-3.20071028
changelog:
  - update to 1.1-20071028
  - fix multilib conflicts (#341001)
  - use shared library, drop static
  - merge review fixes (#225693)


author: Jiri Popelka <jpopelka@redhat.com> - 0.7.0-2
changelog:
  - enable to specify disks with path to device file or
    with symbolic link to the device file (#766443)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.7.0-3
changelog:
  - fix the error message for '--gpfs-ops --gpfs' options (#989779)
  - fix the invalid syntax when '--mysql5-conn' is used (#766806)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-15
changelog:
  - Enhance e2fsck detection of invalid extent trees (#922847)
  - Several filefrag fixes (#927541)
  - Clear errors stored in superblock by newer kernels (#895679)
  - Fix journal superblock error handling (#885083)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-18
changelog:
  - Fix e2fsck false positive when blocks exist past EOF (#994615)
  - Fix resize2fs shrink corruption when moving files with many extents (#873201)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-19
changelog:
  - Fix for some resize2fs corruptions (#1036122)
  - Allow tune2fs to remove a dirty journal with -ff (#1040122)
  - Add enable_periodic_fsck to mke2fs.conf (#1052409)
  - Disallow too-high revision during mke2fs (#1093446)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-22
changelog:
  - e2fsck: fix last mount time and last write time in preen mode (#1218262)
  - e2fsck: don't prompt for time fixes with accept_time_fudge (#1218262)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-23
changelog:
  - e2image: check return value from check_if_mounted() (#1139936)
  - e2fsck: do not process impossibly large dir blocks (#1297694)
  - resize2fs: fix off-line resize of file systems (#1285227)


author: Andrew Overholt <overholt@redhat.com> 1:3.4.1-1
changelog:
  - 3.4.1
  - Don't conditionalize building of gcj AOT bits (we're only building
    this for gcj and IcedTea bootstrapping).


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-1
changelog:
  - Update to upstream 4.5.2 release.
  - Add eclipse-gcj-compat-4.2.1.patch and eclipse-gcj-nodummysymbol.patch
    from rhel-7.3 branch.
  - Add ecj-convertto1.5.patch.
  - Remove ClasspathJsr199.java for 1.5 compatibility.
  - Add man page.
  - Resolves: rhbz#1336481


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-3
changelog:
  - Update to a newer GCCMain.
  - Add a timestamp qualifier to ecj-gcj.tar.bz2.
  - Remove eclipse-gcj-compat-4.2.1.patch, no longer necessary. 
  - Restore versioned jar.
  - Resolves: rhbz#1336481


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-7
changelog:
  - fixes memory corruption on git shortlog
  - add -f option for "git submodule add" to add files even when
    these are included in .gitignore
  - improve performance of extremly slow http(s)
  - fix cloning using http(s) protocol when redirection is requested
    Resolves: #874659 #1207253 #1237395 #1289984


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-8
changelog:
  - fixes previous patch which add -f option for "git submodule add"
    which incorectly used unsupported option --ignore-missing for
    "git add --dry-run"
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1207253 #1368384


author: Jack Magne <jmagne@redhat.com>= 1.1.0-22
changelog:
  - Resolves: 729027 - Debuginfo package issues in esc
  - Resolves: 253077 - ESC windows should keep the same size if the user resized them
  - Resolves: 682216 - [abrt] esc-1.1.1.0-21.el6 __strcmp_ssse3: Process /usr/lib/esc-1.1.1.0/escd 
  -    was killed by singnal 11 (SIGSEGV)
  - Resolves: 702683 - esc-prefs.js file has a typo


author: Jack Magne <jmagne@redhat.com>= 1.1.0-26
changelog:
  - Resolve bugs #981156 and #961582. One minor permissions issue, the other fix to malformed desktop file.


author: Milan Crha <mcrha@redhat.com> - 2.32.3-28.el6
changelog:
  - Add patch for RH bug #1012399 (Fails to display task mail attachment)
  - Bump evolution-data-server version requirement (for RH bug #1009426)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-30.el6
changelog:
  - Update patch for RH bug #975409 (Custom message in alarm notification)
  - Add patch for RH bug #1014743 (Use system timezone has no effect)
  - Add patch for RH bug #1014677 (Search filter persists when changing folders)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-32.el6
changelog:
  - Add patch for RH bug #1054865 (Incorrect unref under e_attachment_load_finish())
  - Add patch for RH bug #1054772 (Local addressbooks created without relative_uri set)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-33.el6
changelog:
  - Add patch for RH bug #1080467 (mark-all-read plugin can cause UI freeze)
  - Add patch for RH bug #1052955 (Time format in combo controls is always 24 hrs)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-37.el6
changelog:
  - Add patch for RH bug #1066063 (Use-after-free on a reminder snooze)
  - Add patch for RH bug #1133507 (Calendar event times not drawn with correct font)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-14.el6
changelog:
  - Add patch for RH bug #1009470 (evolution-ews crash when GAL not marked for offline sync)
  - Add patch for RH bug #1005888 (evolution-ews add 'no-alarm-after-start' calendar capability)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-10
changelog:
  - Add patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #906341 (Cannot create book/calendar)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-11
changelog:
  - Update patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #1017108 (Shorten delay of calendar open)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-13
changelog:
  - Add patch for RH bug #1026797 (Coverity scan issue - uninitialized variable)
  - Add patch for RH bug #1141662 (Crash when receiving message without body)


author: Petr Šabata <contyk@redhat.com> - 1.0.22-2
changelog:
  - Reverting a part of d789267 upstream patch.  Initscript shouldn't return code 2 on
    status query when the daemon is running. (#804936)


author: Petr Šabata <contyk@redhat.com> - 1.0.28-1
changelog:
  - Update to 1.0.28 (#829793)
  - Include a fix for #903099, destroying vports first to avoid a hang
  - Fix an old bogus date in the changelog


author: Petr Šabata <contyk@redhat.com> - 1.0.28-2
changelog:
  - Don't build on s390x (#693443)
  - Add a note to README about EL6 service already implementing the
    suggested function (#981062)
  - Use rtgenmsg when requesting RTM_GETLINK (#882139)


author: Marek Grac <mgrac@redhat.com> - 4.0.15-4
changelog:
  - fence_ilo_moonshot: New fence agent for HP Moonshot
    Resolves: rhbz#1099551
  - fence_mpath: New fence agent for multipath devices
    Resolves: rhbz#1118008


author: Marek Grac <mgrac@redhat.com> - 4.0.15-5
changelog:
  - fence_ilo_ssh: New fence agent
    Resolves: rhbz#1111482
  - fence_kdump: Update metadata for 'monitor'
    Resolves: rhbz#1094515


author: Marek Grac <mgrac@redhat.com> - 4.0.15-7
changelog:
  - fence_scsi: remove new pythonic version
  - fence_ipmilan: unset default cipher
  - fence_ilo2: add options --tls1.0
  - fence_bladecenter: fix login process
    Resolves: rhbz#1049805


author: Marek Grac <mgrac@redhat.com> - 4.0.15-9
changelog:
  - fence_ipmilan no longer understands -i
    Resolves: rhbz#1254046
  - fence_ipmilan no longer understands 'timeout'
    Resolves: rhbz#1254700
  - fence_ilo: Improve negotiation of TLS protocol
    Resolves: rhbz#1256902
  - fence_rsa: Login process over telnet is not working
    Resolves: rhbz#1247062
  - fence_mpath: lose scsi keys after restart
    Resolves: rhbz#1254183


author: Marek Grac <mgrac@redhat.com> - 4.0.15-11
changelog:
  - fence_ipmilan: Revert power_wait values
    Resolves: rhbz#1273632
  - fence_apc: Support for firmware 6.x
    Resolves: rhbz#1259254
  - fence_ipmilan: Add 'diag' action
    Resolves: rhbz#1266600
  - fencing: Add '-list-status' action
    Resolves: rhbz#1183829


author: Marek Grac <mgrac@redhat.com> - 4.0.15-13
changelog:
  - fence_ipmilan: Do not print password to debug output
    Resolves: rhbz#1358064
  - fencing: Handle None as status properly
    Resolves: rhbz#1361623


author: David Teigland <teigland@redhat.com> - 2.5-1
changelog:
  - Resolves: rhbz#826022 rhbz#830736 rhbz#830848 rhbz#831906 rhbz#832935 rhbz#840063 rhbz#841305 rhbz#843073


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-19
changelog:
  - fence_virt/fence_xvm: Print status when invoked with -o
    Resolves: rhbz#1020992
  - fence-virt: Fix broken restrictions on the port ranges
    Resolves: rhbz#1078197
  - Fix static analysis errors
    Resolves: rhbz#1125290


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-24
changelog:
  - fence-virt: Add list-status command to man page and metadata
    Resolves: rhbz#908455
  - Remove delay from the status, monitor and list
    Resolves: rhbz#1204873


author: Tim Waugh <twaugh@redhat.com> 4.0-2.20090702
changelog:
  - Move foomatic-db-ppds symlink to ppds sub-package.
  - Use sed instead of perl in raster PPDs (bug #512739).
  - Removed code to convert old-style printer IDs (there are none).
  - Ship README file.


author: Tim Waugh <twaugh@redhat.com> 4.0-3.20090702
changelog:
  - License for ppds sub-package should include GPLv2+.
  - Ship COPYING file in main package.
  - Added filesystem sub-package for directory ownership.


author: Tim Waugh <twaugh@redhat.com> 4.0-5.20090819
changelog:
  - Updated to foomatic-db-4.0-20090819.
  - Removed deprecated foomatic-db-hpijs tarball.
  - Use buildroot macro throughout.


author: Jan Safranek <jsafrane@redhat.com> - 0.7.16-2
changelog:
  - Fix the ipmievd initscript to actually start the service and better
    LSB compatibility (#578172). As consequence, the init scripts were
    renamed to ipmidetectd and bmc-watchdog (was: freeipmi-ipmidetectd
    and freeipmi-bmc-watchdog).


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-1
changelog:
  - Rebase to upstream except changes in /etc/freeipmi/ config dir.
    preserving original locations.
  - 1.2.1:
  - Add ipmiseld daemon and subpackage.
  - Update paths for libfreeipmi changes.
  - Remove bmc-watchdog logrotate file.
  - 1.1.1:
  - Add contrib and ipmi-pet files.
  - Make main package own logdir.
  - 1.0.4:
  - Add pkgconfig files.
  - 0.9.0:
  - Add interpret sub-library.
  - Support new config files.
  - Support new ipmi_monitoring*.h files.
  - Support new manpages.
  - Support new compatability symlinks/manpages.
  - 0.8.0:
  - Update for dcmi.
  - Update for renaming of pef-config.
  - Update for new .h files.
  - Add new ipmimonitoring config manpages.


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-6
changelog:
  - Kernel module aliases configuration for kmod. (#1020650)
  - Big-Endian authentication fix. (#1022178)
  - Revert short options removal to preserve 0.7.16 command line parameters.


author: Boris Ranto <branto@redhat.com> - 0:1.2.1-8
changelog:
  - New release (0:1.2.1-8)
  - Check record counts against array length
  - Increase max record ids in sensor tools to 4096


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-83.el6
changelog:
  - Fix 'gdb internal error' [Threaded program calls clone, which
    crashes GDB] (Pedro Alves, RH BZ 1099929).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-88.el6
changelog:
  - Add --with buildisa, remove %{?_isa} from BuildRequires by default:
    https://github.com/msimacek/koschei/issues/54 (Jan Kratochvil, RH BZ 1287044)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-91.el6
changelog:
  - Load strictly build-id-checked core files only if no executable is specified
    (Jan Kratochvil, RH BZ 1339862).


author: Ray Strode <rstrode@redhat.com> 2.30.4-58
changelog:
  - Fix this log spew:
        Buggy client sent a _NET_ACTIVE_WINDOW message with a timestamp of 0 for 0x260002b (Login Wind)
    Resolves: #1073546


author: Deji Akingunola <dakingun@gmail.com> - 0.1.0-3
changelog:
  - Rebuild for babl-0.1.2
  - Backport upstream patch that removed babl processing time instrumentation


author: Nils Philippsen <nils@redhat.com> - 0.1.2-1
changelog:
  - version 0.1.2
  - remove obsolete cflags, babl-instrumentation, autoreconf patches
  - backported: don't leak each node set on a GeglProcessor


author: Nils Philippsen <nils@redhat.com>
changelog:
  - avoid buffer overflow in gegl_buffer_header_init()
  - correct gegl library version, use macro for it


author: Nils Philippsen <nils@redhat.com> - 0.1.2-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because gegl is likely to deal with data coming from untrusted
    sources


author: Tim Waugh <twaugh@redhat.com> - 8.70-14
changelog:
  - Fixed character spacing problems using backported patch (bug #695766).
  - Apply some fixes from upstream to avoid gdevcups segfaults (bug #643105).


author: Tim Waugh <twaugh@redhat.com> - 8.70-20
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105520).
  - Improved support for PDF/A from upstream (bug #1060026).
  - Back-ported patch to process embedded files as a portable collection
    only if there is a /Collection attribute (bug #1027534).
  - Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 8.70-22
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: Josef Ridky <jridky@redhat.com> - 2:2.6.9-9
changelog:
  - fix bug with num_threads error message on gimp startup (#1150021)
  - fix bug with showing GLib warning message on startup from terminal (#1157037)
  - fix bug with incorrect thumb image text offset (#1158426)


author: Dan Winship <danw@redhat.com> - 2.28.6.1-2.1
changelog:
  - Disable GNOME proxy support since RHEL6 doesn't have gsettings-desktop-schemas
  - Allow building with libproxy 0.3.0


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1035941


author: Colin Walters <walters@redhat.com> - 2.26.1-8
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1036097


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.8-3
changelog:
  - Revert deprecations picked up through rebases to avoid further bugs
    like rhbz#1136304 (devhelp).


author: Colin Walters <walters@redhat.com> - 2.28.8-6
changelog:
  - Backport patch to avoid integer overflow on reuse of GMainContext
    source ids, which qemu hits.
    Resolves: #1212722


author: Colin Walters <walters@verbum.org> - 2.28.8-8
changelog:
  - Revert use of FAM on NFS - introduces perf regressions for deployments
    which are not using NFS for home directories; this is better handled
    in RHEL7.
    Resolves: #1399726
    Reverts: #725178


author: Milind Changire <mchangir@redhat.com> - 3.7.9-3
changelog:
  - fixes bugs bz#1325975 bz#1311839 bz#1321556 bz#1286911 bz#1323042 
    bz#1298724 bz#1327165 bz#1101702 bz#1326498 bz#1326663 bz#1328397 bz#1330881 
    bz#1331376 bz#1330901 bz#1326248 bz#1324338 bz#1115367 bz#1308837 bz#1322695 
    bz#1322247 bz#1329895 bz#1327552 bz#1118770


author: Milind Changire <mchangir@redhat.com> - 3.7.9-4
changelog:
  - fixes bugs bz#1097555 bz#1322306 bz#1327195 bz#1324820 bz#1306194 
    bz#1298724 bz#1299737 bz#1330385 bz#1258875 bz#1283957 bz#1311362 bz#1321550 
    bz#1332199 bz#1329514 bz#1224180 bz#1313370 bz#1328194 bz#1323424 bz#1332957 
    bz#1294755 bz#1328411 bz#1327751 bz#1332077 bz#1328721 bz#1330365


author: Milind Changire <mchangir@redhat.com> - 3.7.9-5
changelog:
  - fixes bugs bz#1261838 bz#1324820 bz#1325760 bz#1328194 bz#1331260 
    bz#1332949 bz#1333668 bz#1334234 bz#1334668 bz#1334985 bz#1335082 bz#1335114 
    bz#1335364 bz#1335437 bz#1335505 bz#1335826


author: Milind Changire <mchangir@redhat.com> - 3.7.9-7
changelog:
  - fixes bugs bz#1286582 bz#1330997 bz#1334092 bz#1337384 bz#1337649 
    bz#1339090 bz#1339163 bz#1339208 bz#1340085 bz#1340383


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.3.1-10
changelog:
  - Backported assembler routines from recent gmp-6:
    gmp-s390x-optimization.patch, gmp-s390-31bit-optimization.patch
  - Resolves: #1149237


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.1-11
changelog:
  - Explicitly added '-g' option into CFLAGS to correctly build .debug_info for i386
    Resolves: #729039


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - When we ask to logout, actually logout, rather than shutdown
  - Don't hide the restart status icon just because the daemon exited
  - Don't check for updates every day when the user had specified 'Never'
  - Allow the user to select the GPG key information to be able to verify it
  - Fix the error when the user clicks the about menu item
  - Fix a crash where the desktop file that was installed has no root directory
  - Fix a crash when the process-working icon has zero height
  - Resolves: #585086


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-2
changelog:
  - Backport a patch from upstream that adds support for support media repos
    such as those found on additional CDs or DVDs.
  - This patch just calls GetUpdates after a detected media repo is inserted,
    which is enough for PackageKit to add the repo to the default set, and for
    the repo to be used in all the GNOME and KDE tools.
  - This patch will not add explicit support for media repos in client programs,
    so the media is not requested if it is not inserted when the package tools
    are open. This functionality can be backported at a later time if required.
  - Resolves: #591534


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Don't allow shutting down when a transaction is active and cannot
    be cancelled.
  - Resolves: #669798


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-6
changelog:
  - Fix the progress update of the update viewer when multiarch packages
    are installed.
  - Resolves: #744906


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Do not attempt to refresh the updates list when a transaction is in
    progress. This prevents the update UI from going blank.
  - Resolves: #744980


author: Ray Strode <rstrode@redhat.com> 2.28.0-21
changelog:
  - Add a close button in the session selector save dialog, to
    provide a way to close the dialog without saving.
    Resolves: #786573


author: Ray Strode <rstrode@redhat.com> - 2.28.2-39
changelog:
  - Another smartcard update to support drivers that don't
    announce already inserted smartcards at startup
    Related: #1299992


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-10
changelog:
  - Add a patch from upstream to ignore non CPU data from /proc/cpuinfo,
    which would lead to a spurious processor displayed in the application,
    under certain architectures
  Resolves: #682011


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-11
changelog:
  - Add a patch from upstream that looks for the "clock" line in the
    /proc/cpuinfo output. This fixes missing CPU speed for architectures
    that put such information in the "clock" line, such as Power6
  Resolves: #692956


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 2.12.23-21
changelog:
  - Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
    (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
  - Modified gnutls-serv to accept --sni-hostname (#1333521)
  - Modified gnutls-serv to always reply with an alert message (#1327656)
  - Removed support for DSA2 as it causes interoperability issues (#1321112)
  - Allow sending and receiving certificates which were not in the
    signature algorithms extension (#1328205)
  - Removed support for EXPORT ciphersuites (#1337460)
  - Raised the minimum acceptable DH size to 1024 (#1335924)
  - Restricted the number of alert that can be received during handshake (#1388730)
  - Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
  - The exposed (but internal) crypto back-end registration API is deprecated and no
    longer functional. The ABI is kept compatible (#1415682)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.6.el6
changelog:
  - gpxe-Revert-Support-underlying-UNDI-devices-that-don-t-su.patch [bz#661840]
    (patch is broken)
  - Related: bz#661840
    (undi polling fix for Emulex NICs)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.7.el6
changelog:
  - gpxe-Add-SUPPORTED_-constants-to-pxe_api.h.patch [bz#661840]
  - gpxe-Support-underlying-UNDI-devices-that-don-t-support-i-reapply.patch [bz#661840]
  - Resolves: bz#661840
    (undi polling fix for Emulex NICs)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.8.el6
changelog:
  - gpxe-Replace-virtio-net-with-native-gPXE-driver.patch [bz#743893]
  - gpxe-Fix-DEBUG-builds-for-filenames-with-hyphens.patch [bz#743893]
  - Resolves: bz#743893
    (Failed to PXE boot when using Virtio)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.10.el6
changelog:
  - gpxe-Provide-fetch_setting_origin.patch [bz#972671]
  - gpxe-Use-next-server-from-filename-s-settings-block.patch [bz#972671]
  - Resolves: bz#972671
    (pxe boot fails if next-server details come from a different dhcp server)


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.11.el6
changelog:
  - gpxe-Avoid-setting-PSH-flag-when-SYN-flag-is-set.patch [bz#1105189]
  - gpxe-Set-PSH-flag-only-on-packets-containing-data.patch [bz#1105189]
  - Resolves: bz#1105189
    (HTTP request generated by gPXE has wrong TCP flag (SYN & PSH) in first packet in session)


author: Jeff E. Nelson <jenelson@redhat.com> - gpxe-0.9.7-6.12.el6
changelog:
  - gpxe-Add-init_pci_busdevfn.patch [bz#1057249]
  - gpxe-Enable-infrastructure-to-specify-an-autoboot-device-lo.patch [bz#1057249]
  - gpxe-Allow-prefix-to-specify-a-PCI-autoboot-device-location.patch [bz#1057249]
  - gpxe-Store-boot-bus-dev.fn-address-as-autoboot-device-locat.patch [bz#1057249]
  - gpxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00.0.patch [bz#1057249]
  - Resolves: bz#1057249
    (NIC boot order use device PCI address order instead of device boot order)


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.13.el6
changelog:
  - gpxe-Add-support-for-local-configuration-files.patch [bz#968474]
  - gpxe-Extract-timing-parameters-out-to-config-dhcp.h.patch [bz#968474]
  - gpxe-Use-spec-compliant-timeouts.patch [bz#968474]
  - Resolves: bz#968474
    ([RFE] option to increase gpxe retry timeout)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.9.7-6.14.el6
changelog:
  - gpxe-Fix-timeouts.patch [bz#1206042]
  - Resolves: bz#1206042
    (Connection time out when install vm through network)


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.15.el6
changelog:
  - gpxe-Include-port-in-HTTP-Host-header-as-needed.patch [bz#1231931]
  - Resolves: bz#1231931
    (gPXE 'Host' header being transferred without port)


author: Yash Mankad <ymankad@redhat.com> - 0.9.7-6.16.el6
changelog:
  - gpxe-netdevice-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1354521]
  - gpxe-Fix-fragment-reassembly.patch [bz#1380215]
  - Resolves: bz#1354521
    (Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)
  - Resolves: bz#1380215
    (gPXE gets stuck if it receives fragmented IP multicast packets)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-1
changelog:
  - New version
    Resolves: rhbz#1064668
    Resolves: rhbz#982215
    Resolves: rhbz#1126757
    Resolves: rhbz#1167766
    Resolves: rhbz#1171806
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#799863
  - Documented --fixed-regexp option
    Resolves: rhbz#1103270


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1193030
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed bogus date in the changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1256756


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-91
changelog:
  - Suppress failure message on EFI systems when loading splashscreen
    Resolves: rhbz#1129436
  - Return proper disk operation status
    Resolves: rhbz#1130209
  - Stick with default GOP mode unless resolution is absurdly small
    Resolves: rhbz#1130313


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-94
changelog:
  - Properly expand IPv6 address
    Resolves: bz#1177321
  - Support various types of DHCP IPv6 packet for MAC address extraction
    Resolves: bz#1206542


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-95
changelog:
  - Fix the ineffectiveness when loading fragmented initramfs from Ext4 filesystem
    Resolves: #1006373


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-97
changelog:
  - Patch from previous commit c445aac0ee30f has been removed, because it did not
    fix the issues with some SGI hardware. Bumping up the release number, so the
    building of grub package is not affected in the future. For more info see:

    Related: #1325860 (https://bugzilla.redhat.com/show_bug.cgi?id=1325860)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.97-98
changelog:
  - Workaround for SGI UV100/1000 hardware (TFTP transfers in UEFI mode) added
    Resolves: #1124862
  - Allow more than 1 letter in device name when using the grub-install script
    Resolves: #1349389


author: Milan Crha <mcrha@redhat.com> - 2.20.1-4
changelog:
  - Add patch for RH bug #979049 (GtkTreeView: make tree expanding/collapsing more robust)
  Resolves: #979049


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-1
changelog:
  - Rebase to 2.24.23
  - Make immodule cache handling the same as in gtk3. The cache
    file is now in $libdir, no longer in /etc
  - Disable tracker explicitly
  - Initialize variable "key" in gtk_print_backend_cups_set_password()
  - Modify fresh-tooltips.patch so the "new-tooltip-style" property
    is still accepted
  - Revert deprecations added between 2.20 and 2.24 so that building
    of dependent packages don't fail
  - Update relevant patches so that they apply correctly
  - Resolves: #1100886


author: Ray Strode <rstrode@redhat.com> - 2.24.23-5
changelog:
  - Don't crash if enumeration finishes just as it gets cancelled
    in file selector. Fixes crash in libreoffice when saving to
    SFTP mounts.
    Resolves: #1129605


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-6
changelog:
  - Set "entry-text-column" property in constructor of GtkComboBoxText.
  - Fixes crash in evolution when creating new appointment.
  - Resolves: #1126916


author: Milan Crha <mcrha@redhat.com> - 3.32.2-1.el6
changelog:
  - Rebase to 3.32.2
  - Remove patch for RH bug #588457 (part of rebase)
  - Remove patch for RH bug #590877 (part of rebase)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-2.el6
changelog:
  - Add patch for some issues found by Coverity scan
  - Add patch for RH bug #577797 (Cursor misplaced after paste)
  - Add patch for RH bug #615969 (Whitespaces drop on paste)
  - Add patch for RH bug #627199 (Underline/strikeout misplaced in printout)
  - Add patch for RH bug #626690 (Paragraph style not drawn after font style change)


author: Tim Waugh <twaugh@redhat.com> 5.2.4-10
changelog:
  - Better defattr use in file manifests.
  - Fixed mixed spaces and tabs.
  - Fixed main package summary.
  - Added comments for all sources and patches.
  - The cups sub-package requires the exactly-matching main gutenprint
    package.


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.2.5-3
changelog:
  - gutenprint: libgutenprintui2 defines "yyin" symbol (bug #882197)
  - gutenprint base package must also include a copy of license text (bug #613706)


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-18
changelog:
  - Fix GConf module building with updated GLib2 (#1118704)
  - Fix SFTP mounting with updated OpenSSH (#1118325)


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4
changelog:
  - Applied patch to fix CVE-2013-0200, temporary file vulnerability
    (bug #902163).
  - Fixed hpijs-marker-supply patch.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-5
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Tim Waugh <twugh@redhat.com> 3.14.6-3
changelog:
  - Fixes from Fedora:
    - Fixed incorrect name in function call in makeURI when a parallel
      port device is used (bug #1159161).
    - Fixed uses of strncpy throughout.


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-53
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1301758)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-55
changelog:
  - Resolves: #1372315 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-56
changelog:
  - Resolves: #1310582 - when ProxyErrorOverride is On, modcluster return
    503 status code on subsequent requests


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-58
changelog:
  - Resolves: #1349546 - comments no longer allowed at the end of Allow
    from statements and maybe other statements from mod_authz*


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-60.5
changelog:
  - Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
    authentication bypass
  - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
  - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
  - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
    in mod_auth_digest


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-9
changelog:
  - We built a new opensm against a new libibumad and libibmad
    to resolve a bug.  So we need to rebuild this to be against
    the new libs.  Updated to latest upstream since we had to
    rebuild anyway and it's often needed to make it compatible
    with the minor changes in libibumad and libibmad and
    opensm-libs
  - Related: bz1082730


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Put the udev rules file in the right place
    Resolves: rhbz866732
  - include a patch from upstream to fix undefined references
    Resolves: rhbz887730


author: Michal Schmidt <mschmidt@redhat.com> - 3.3-1.7.git05f6f14_open
changelog:
  - Update to latest upstream tarball
  - Replace no-exec-stack patch with one cherry-picked from upstream.
  - Resolves: bz1247994


author: Michal Hlavinka <mhlavink@redhat.com> - 0.3.2-6
changelog:
  - PRIO field was not shown correctly on powerpc platforms (#826875)
  - iotop failed when locale was incorrect (#849559)
  - move iotop to sbin (#908149)


author: Michal Hlavinka <mhlavink@redhat.com> - 0.3.2-9
changelog:
  - allow printing of unicode characters in batch mode (#906149)
  - fix crash when using pipe (#1330965)


author: Petr Vobornik <pvoborni@redhat.com> - 3.0.0-46.el6
changelog:
  - Use tls version range in NSSHTTPS initialization
  - Resolves: #1154687 - POODLE: force using safe ciphers (non-SSLv3) in IPA
                         client and server
  - Resolves: #1012224 - host certificate not issued to client during
                         ipa-client-install


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-48.el6
changelog:
  - Resolves: #1263703 ipa-server-install with externally signed CA fails with
    NSS error (SEC_ERROR_BUSY)
    - Free NSS objects in --external-ca scenario
  - Resolves: #1263262 Unable to resolve group memberships for AD users when
    using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
    ipa-server-3.0.0-42.el6.x86_64 with AD Trust
    - Do not lookup up the domain too early if only the SID is known
    - Do not store SID string in a local buffer
    - Allow ID-to-SID mappings in the extdom plugin


author: Martin Basti <mbasti@redhat.com> - 3.0.0-49.el6
changelog:
  - Resolves: #1127211 ipa-server-install --uninstall produces avc
    - sysrestore: copy files instead of moving them to avoind SELinux issues
    - Use 'mv -Z' in specfile to restore SELinux context
  - Resolves: #1222999 ipa aci plugin is not parsing aci's correctly.
    - ACI plugin: correctly parse bind rules enclosed in parentheses
  - Resolves: #1225868 display browser config options that apply to the browser -
    Chrome
    - webui: add Kerberos configuration instructions for Chrome
    - Remove ico files from Makefile
    - WebUI: fix ipa_error.css
  - Resolves: #1232468 The Domain option is not correctly set in idmapd.conf when
    ipa-client-automount is executed.
    - Simplify adding options in ipachangeconf
    - ipachangeconf: Add ability to preserve section case
    - ipa-client-automount: Leverage IPAChangeConf to configure the domain for
      idmapd
  - Resolves: #1232899 ipa-client-install does not respect --realm option
    - Allow user to force Kerberos realm during installation.
  - Resolves: #1276358 Remove /usr/share/ipa/updates/50-lockout-policy.update
    file from IPA 3.0 releases
    - Remove 50-lockout-policy.update file


author: Jan Cholasta <mbasti@redhat.com> - 3.0.0-50.el6
changelog:
  - Resolves: #1225868 display browser config options that apply to the browser -
    Chrome
    - Remove ico files from Makefile
  - Resolves: #1232843 ipa-client-install errors out if client and server time
    are not in sync or unreachable
    - Skip time sync during client install when using --no-ntp
  - Resolves: #1288495 Add userCertificate index used in Smart Card
    authentication
    - add DS index for userCertificate attribute
  - Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot
    read property 'mozilla' of undefined
    - webui: fix browser detection in browserconfig.html and ssbrowser.html
  - Resolves: #1296124 Adjust Firefox configuration to new extension signing
    policy
    - webui: use manual Firefox configuration for Firefox >= 40
  - Remove binary patching from patch 0140


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.2
changelog:
  - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
    certificate revocation
    - cert-revoke: fix permission check bypass (CVE-2016-5404)


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.3
changelog:
  - Resolves: #1322059 IPA Replica-Install from RHEL6 to RHEL7 Fails
    - Modififed NSSConnection not to shutdown existing database.
    - Do not erroneously reinit NSS in Dogtag interface
    - Make sure replication works after DM password is changed


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-51.el6
changelog:
  - Resolves: #1321138 Missing dependency package "python-sss-murmur" in
    ipa-server-3.0.0-50.el6.x86_64
    - SPEC: Require python2 version of sssd bindings
  - Resolves: #1367026 Document and test procedure for running IdM Server in TLS
    1.2+ environment
    - Require 389-ds-base with TLS 1.0 disable switch


author: Jan Synáček <jsynacek@redhat.com> - 20071127-20
changelog:
  - Resolves: #1149574 - Ping produces "WARNING: kernel is not very fresh, upgrade is recommended."
  - Resolves: #829998 - The arping command may have return value of 0.
  - Resolves: #1099426 - Count of "back" is not correct in tracepath
  - Resolves: #1113082 - ping returns odd results with options inet6 in resolv.conf


author: Jan Synáček <jsynacek@redhat.com> - 20071127-22
changelog:
  - Resolves: #1351720 - documentation inconsistency on arping
  - Resolves: #1334775 - backport upstream ping change unmasking signals
  - Resolves: #1298344 - Ping assumes EACCESS errors are due to broadcast addresses


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1294965 iscsiuio match based on driver to support new hardware without
    adding PCI IDs (still need IDs added to kernel)
  - bnx2i pass through ping support


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15
changelog:
  - Restrict debug builds to shipped JIT architectures, excluding unshipped ppc64
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18
changelog:
  - Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes
  - Replace our correct version of 8159244 with the amendment to the 8u version from 8160122.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18
changelog:
  - Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18
changelog:
  - Disable -ffp-no-contract option introduced by 8170873 as not available on RHEL 6 GCC.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16
changelog:
  - Update to aarch64-jdk8u112-b16.
  - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
  - Re-generate size_t and key size (RH1163501) patches against u112.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted)
  - Resolves: rhbz#1410612


author: Tomas Heinrich <theinric@redhat.com> - 0.11-9
changelog:
  - initial import
    - disable building of a debuginfo package - works around rhbz 903009
    - add a workaround for disabling rpath
    - disable paralel build
    - disable 'check' section for now
    resolves: #966964


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-30
changelog:
  - Make sure all windows are properly closed and removed from the task manager applet
    Resolves: bz#1027703


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-37
changelog:
  - Add explicit dependency for KDM subpackage to require -libs subpackage
    at the same version
    Resolves: bz#1304735


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.12.1.el6]
changelog:
  - [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.13.1.el6]
changelog:
  - [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
  - [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.14.1.el6]
changelog:
  - [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.15.1.el6]
changelog:
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.16.1.el6]
changelog:
  - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
  - [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
  - [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
  - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
  - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.17.1.el6]
changelog:
  - [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.1.el6]
changelog:
  - [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
  - [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
  - [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
  - [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
  - [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
  - [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
  - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.5.el6]
changelog:
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.6.el6]
changelog:
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.7.el6]
changelog:
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-690.el6]
changelog:
  - [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
  - [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-691.el6]
changelog:
  - [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
  - [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
  - [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
  - [net] ipv6: stop sending PTB packets for MTU < 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
  - [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-692.el6]
changelog:
  - [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
  - [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-693.el6]
changelog:
  - [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
  - [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
  - [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
  - [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
  - [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
  - [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
  - [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
  - [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
  - [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-694.el6]
changelog:
  - [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
  - [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
  - [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
  - [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
  - [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
  - [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
  - [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
  - [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
  - [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
  - [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
  - [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
  - [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
  - [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
  - [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
  - [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
  - [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
  - [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
  - [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
  - [block] ensure request->part is valid (Jeff Moyer) [1416341]
  - [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-696.el6]
changelog:
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}


author: Baoquan He <bhe@redhat.com> - 2.0.0-298
changelog:
  - b0e4c65 Use file offset in initialize_mmap(), resolves bug 1314158
  - 85f20f9 mkdumprd: redirect stderr of bmc-watchdog to /dev/null resolves bug 1315270


author: Baoquan He <bhe@redhat.com> - 2.0.0-299
changelog:
  - mkdumprd: Use a flexible way to create rtc device, resolves bug 1315148
  - hyper-v: do not exclude hv_utils module, resolves bug 1228774


author: Baoquan He <bhe@redhat.com> - 2.0.0-301
changelog:
  - mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1343282
  - mkdumprd: Kill useless code in moduledep(), resolves bug 1343282
  - mkdumprd: skip logical interfaces for bridge, resolves bug 1356615


author: Baoquan He <bhe@redhat.com> - 2.0.0-303
changelog:
  - mkdumprd: Remove load_selinux_policy script, resolves bug 1323086
  - mkdumprd: pass the value of DEV_ID to kdump, resolves bug 1322802


author: Baoquan He <bhe@redhat.com> - 2.0.0-306
changelog:
  - mkdumprd: fix env for mdadm, resolves bug 1404263
  - mkdumprd: create node for partition within RAID device, resolves bug 1404263
  - mkdumprd: refactor block_mknod(), resolves bug 1404263
  - uefi: Pass efi_smbios_addr to 2nd kernel, resolves bug 1404552


author: Stanislav Kozina <skozina@redhat.com> - 0.9.16-1
changelog:
  - always load whitelist file from kernel-abi-whitelists package, remove the attached files
  - always load Module.symvers file from kernel-devel package, remove attached files
  - Resolves: #1335513


author: Dennis Gilmore <dennis@ausil.us> - 4.18-1
changelog:
  - update to 4.18
  - spec contents pulled from RHEL5 srpm 
  - fedora spec changelog
  - update buildroot
  - use jss from fedora for building


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-6
changelog:
  - Resolves: bug 684028 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream mozilla id=640750


author: mruprich <mruprich@redhat.com> - 4.0.9-10
changelog:
  - Resolves: #1364524 -  lftp command SIZE on non-existing file is executed in a loop instead of return


author: Michal Ruprich <mruprich@redhat.com> - 4.0.9-14
changelog:
  - Related: #1228484 - lftp hangs after dowloading one file during a mirror
  - Related: #1305235 - lftp not following symlinks through sftp


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Karel Zak <kzak@redhat.com> 2.17.2-12.19
changelog:
  - fix #1088411 - lsblk does not list dm-multipath and partitioned devices
  - fix #1215840 - slogins segfault and failure to allocate memory
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty
  - fix #1168390 - lscpu doesn't show all nodes on a discontinuous NUMA setup
  - fix #1191236 - 'umount -f' calls readlink on dead NFS mounts and hangs
  - fix #1172297 - umount --fake fails to edit mtab for NFS mounts which are already gone
  - fix #961148  - RHEL6: swapon: add "discard" support
  - fix #1150302 - ionice support class names
  - fix #1085062 - fdisk -l fails to fully process /proc/partitions when multipath device
  - fix #1122839 - fallocate and findmnt have wrong options according to man pages
  - fix #1089663 - Not all xfs mount options are described in mount(8)
  - fix #1295737 - man page for hwclock doesn't include --compare option
  - fix #1140594 - mount --move badly documented
  - fix #1296894 - RHEL6: update audit event in hwclock
  - fix #1266191 - fdisk does not handle >2TB disks correctly


author: Karel Zak <kzak@redhat.com> 2.17.2-12.26
changelog:
  - fix #1320360 - lscpu shows wrong "Virtualization type" on Xen paravirtualization guest (PV)
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1310035 - Hostname not being displayed besides the telnet login prompt
  - fix #1310317 - fdisk -l fdisk double open fd
  - fix #1337478 - wrong error handler and/or error message on fdisk call as not root user


author: Karel Zak <kzak@redhat.com> 2.17.2-12.27
changelog:
  - fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty


author: jchaloup <jchaloup@redhat.com> - 0.40.rc1-16
changelog:
  - extending cgroup names with default
    resolves: #1139205
  - fixing libcgroup-0.40.rc1-reading-config-files-from-etc-cgconfig.d.patch not to modify patch backup file
    resolves: #1162220


author: Nikola Forró <nforro@redhat.com> - 0.40.rc1-19
changelog:
  - fix loading config files from /etc/cgconfig.d to make it work with libcgroup-pam
    resolves: #1345762


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-2
changelog:
  - Silence unnecessary warning
    Resolves: rhbz#1201846
  - Access oVirt REST API through /ovirt-engine/api rather than /api
    Resolves: rhbz#1277447
  - Allow to cancel ovirt:// authentication dialog in virt-viewer
    Resolves: rhbz#1201604
  - Make sure 'cancelled' signal is disconnected when objects die
    Related: rhbz#1201604
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274355
  - Don't print ticket value to stdout
    Resolves: rhbz#1216118
  - Add support for accessing VMs behind proxies
    Resolves: rhbz#1292754


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-3
changelog:
  - Fix bug when setting the CA used for https REST communication
    Resolves: rhbz#1325762
  - Fix parsing of state of storage domain nodes
    Resolves: rhbz#1318672
  - Silence one redundant warning happening during storage domain parsing
    Related: rhbz#1201846


author: Jindrich Novy <jnovy@redhat.com> 2.4.6-1
changelog:
  - update to 2.4.6
  - new IDs for Kodak V803, M1063, Canon PowerShot A650IS, SD990 (aka IXUS 980IS),
    SD880IS, A480, Canon EOS 50D, Fuji FinePix S1000fd
  - many Canon related fixes


author: David Zeuthen <davidz@redhat.com> 2.4.6-3
changelog:
  - Add patch from http://sourceforge.net/tracker/?func=detail&aid=2801117&group_id=8874&atid=308874
    and generate generic udev rules for device identification (ID_GPHOTO2* properties)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-11
changelog:
  - virt-sysprep: Fix locking accounts with passwords.
    resolves: rhbz#1037166
  - Update copy-patches script to RHEL 6.6.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-12
changelog:
  - Fix lvm-set-filter to work with newer lvm2 versions.
    resolves: rhbz#1168751
  - Fix handling of structs in the Java bindings.
    resolves: rhbz#1074005
  - Fix scrub-file so it can work on symlinks.
    resolves: rhbz#1091859
  - Show also aliases in the output of `guestfish -h`.
    resolves: rhbz#1100530
  - Fix typo in the man page of virt-edit.
    resolves: rhbz#1151739
  - virt-ls: always output the checksum field in CSV mode.
    resolves: rhbz#1151901
  - virt-ls: avoid double slashes in directory output.
    resolves: rhbz#1151911
  - Fix newline character in error output.
    resolves: rhbz#1153974
  - Fix virt-sysprep firstboot scripts to not be run more than once.
    resolves: rhbz#1159651
  - Fix logging of virt-sysprep firstboot scripts.
    resolves: rhbz#1160203
  - Fix description of 'set_append' and 'get_append' APIs.
    resolves: rhbz#1164734


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-13
changelog:
  - guestfish: fix Tab completion with some filesystems (e.g. xfs).
    resolves: rhbz#1153846
  - Improve drive caching by selecting the caching mode.
    resolves: rhbz#1038977
  - Generate user-cancel automatically, so there is also documentation for it.
    resolves: rhbz#1100533
  - virt-sysprep: make sure to trigger autorelabel by default when removing
    users.
    resolves: rhbz#1153855
  - virt-sysprep: recommend usage of --selinux-relabel with SELinux guests.
    related: rhbz#1153855
  - virt-sparsify: allow block devices as output.
    resolves: rhbz#1122557


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-14
changelog:
  - Raise augeas (Build)Requires to >= 1.0.0-8.el6, which fixes
    rhbz#1160261, so virt-sysprep can remove users from /etc/shadow;
    also remove note about that lack.
    resolves: rhbz#1138630
  - Make sure that libguesfs (the library itself), and virt-sparsify in
    particular, can handle filenames with ':'.
    resolves: rhbz#1128942


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-16
changelog:
  - Fix the old inspection code to handle some features of RHEL 7 images:
    handle /bin as symlink to /usr/bin, grub2 in boot partition, and
    recognize xfs as filesystem (reading UUID and label for it).
    resolves: rhbz#1216305
  - Fix reading of icon in RHEL 7 guests.
    resolves: rhbz#1216298
  - virt-sysprep: don't delete /var/spool/at/.SEQ
    resolves: rhbz#1229305
  - virt-sparsify: read all the output of `qemu-img --help`
    resolves: rhbz#1218934
  - Fix getting long labels for NTFS and btrfs filesystems; also correct the
    documented maximum length of btrfs labels.
    resolves: rhbz#1164729


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-17
changelog:
  - Mention ext2/3/4 in set-label error messages for ext labels.
    resolves: rhbz#1294956
  - Fix handling of symlinks in ll and llz, and when editing files in guestfish
    and virt-edit.
    resolves: rhbz#1293276


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-19
changelog:
  - libguestfs-java: bump the java Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1319086


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-49
changelog:
  - Require the matching version of ding-libs
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-50
changelog:
  - Related: rhbz#1369921 - Members of nested netgroups configured in IdM
                            cannot be seen by getent on clients


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-51
changelog:
  - Revert the ding-libs requirement
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-54
changelog:
  - Apply several more smartcard-related patches.
  - Related: rhbz#1300421 - Screen locks and smart card is removed - must
                            show a message to insert the correct smartcard


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-55
changelog:
  - Resolves: rhbz#1415785 - ldap_child does not remove temporary files
                             when it's killed with  SIGTERM


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-56
changelog:
  - Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present
  - Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282144


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-29
changelog:
  - Change reporting workflow to enhance the quality of opened customer cases
  - Limit the description section for ABRT reported cases
  - Resolves: #1258474, #1261398


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-31
changelog:
  - Add pkg_vendor, reproducer and reproducible to description
  - Attach all dump dir's element to a new case
  - Change libreport-version to 2.0.9.1
  - Resolves: #1261398


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.1
changelog:
  - Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
  - Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.2
changelog:
  - Resolves: rhbz#1289498 keyingtries=0 is broken
  - Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
  - Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
  - Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1345959 openswan - libreswan migration issues
  - Resolves: rhbz#1360134 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1313709 ipsec pluto returns zero even if it fails [doc change only]
  - Resolves: rhbz#1315415 ipsec.conf manpage does not contain any mention about crl-strict option


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.1
changelog:
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort when ' auto --up --asynchronous' is used
  - Resolves: rhbz#1335896 ipsec initnss/checknss custom directory not recognized


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.2
changelog:
  - Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort [extended patch]
  - Resolves: rhbz#1369990 Libreswan connection sometimes does not get re-established after one side restarts


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.3
changelog:
  - Resolves: rhbz#1403201 pluto uses up available memory and fails with 'unable to popen'
  - Resolves: rhbz#1311360 When IKE rekeys [...] (updated for IKEv1 responder side)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1327697 - Fix netlogon credential checks
  - resolves: #1327746 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-37
changelog:
  - resolves: #1380151 - Fix memory leak in idmap_ad module
  - resolves: #1333561 - Fix smbclient connection issues to DFS shares
  - resolves: #1372611 - Allow ntlmsssp session key setup without signing
                         (Workaround for broken NetApp and EMC NAS)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-38
changelog:
  - resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                         empty list


author: Steve Dickson <steved@redhat.com> 0.2.1-7
changelog:
  - Fixed some races in getnetconfig code (bz 1031498)
  - Remove the installation of libtirpc.a and libtirpc.la (bz 869397)


author: Steve Dickson <steved@redhat.com> 0.2.1-11
changelog:
  - Backported upstream debugging (bz 1273158)
  - Fixed memory leak in svc_vc_create (bz 1276687)
  - Fixed memory leak in svc_tli_create (bz 1276855)
  - Fixed memory leak in __svc_vc_dodestroy (bz 1276856)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-53
changelog:
  - RHEL: Avoid memory leak when virCgroupSetCpusetMemoryMigrate fails (rhbz#1198497)
  - qemu: cgroup: Fix memory leak when there's no vCPU pinning (rhbz#1198096)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54
changelog:
  - util: set MAC address for VF via netlink message to PF+VF# when possible (rhbz#1113474)
  - util: set macvtap physdev online when macvtap is set online (rhbz#1113474)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-55
changelog:
  - daemon: Suppress logging of VIR_ERR_NO_DOMAIN_METADATA (rhbz#1260864)
  - Allow <source> for type=block to have no dev (rhbz#1220197)
  - qemu: event: Properly handle spice events (rhbz#1236581)
  - qemu: event: Clean up VNC monitor handling (rhbz#1236581)
  - qemu: split out cpuset.mems setting (rhbz#1263263)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1263263)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1251532)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1251532)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1251532)
  - qemu: fix hotplugging cpus with strict memory pinning (rhbz#1263263)
  - storage: Track successful creation of LV for removal (rhbz#1232170)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-56
changelog:
  - qemu: snapshot: Fix return value of external checkpoint with no disks (rhbz#1292312)
  - qemu: snapshot: Fix modification of vm object without job (rhbz#1290647)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachInterface (rhbz#1229128)
  - RHEL: virsh: remove duplicate --config for 'virsh update-device' (rhbz#1224037)
  - Update ESX driver to always use privateData (rhbz#1213348)
  - esx: Simplify VI (vSphere) API and VMware product version handling (rhbz#1213348)
  - conf: net: Correctly switch how to format address fields (rhbz#1299700)
  - qemu: Refuse to create snapshot of a disk without source (rhbz#1299411)
  - Build all binaries with PIE (rhbz#1242156)
  - Enable full RELRO mode (rhbz#1242156)
  - Don't duplicate compiler warning flags when linking (rhbz#1242156)
  - Simplify RELRO_LDFLAGS (rhbz#1242156)
  - Fix AM_LDFLAGS typo (rhbz#1242156)
  - Pass AM_LDFLAGS to driver modules too (rhbz#1242156)
  - RHEL: Enable RELRO for python modules (rhbz#1242156)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-57
changelog:
  - vmx: Relax virtualHW.version check (rhbz#1300574)
  - qemu: snapshot: Don't leak XML definition and forget to unlock job (rhbz#1305793)
  - qemu: Fix formatting flags in qemuDomainSaveImageOpen (rhbz#1307094)
  - network: Resolve some issues around vlan copying (rhbz#1300843)
  - network: fix connections count in case of allocate failure (rhbz#1300843)
  - network: consolidate connection count updates for device pool (rhbz#1300843)
  - network: consolidated info log for all network allocate/free operations (rhbz#1300843)
  - util: increase libnl buffer size (rhbz#1276478)
  - util: reduce debug log in virPCIGetVirtualFunctions() (rhbz#1276478)
  - util: improve error reporting in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: add missing newline (rhbz#1276478)
  - util: eliminate bogus error log in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: clean up and expand 802.1QbX negotiation logging (rhbz#1276478)
  - util: report the MAC address that couldn't be set (rhbz#1276478)
  - util: reset MAC address of macvtap passthrough physdev after disassociate (rhbz#1276478)
  - bitmap: add way to find next clear bit (rhbz#1276478)
  - Introduce virBitmapIsBitSet (rhbz#1276478)
  - util: Introduce flags field for macvtap creation (rhbz#1276478)
  - virnetdevmacvlan.c: Introduce mutex for macvlan creation (rhbz#1276478)
  - util: keep/use a bitmap of in-use macvtap devices (rhbz#1276478)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-61
changelog:
  - virsh: Properly display block job type (rhbz#1326653)
  - spec: proper soft static allocation of qemu uid (rhbz#1351792)
  - Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
  - qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
  - tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
  - configure: allow setting default TLS priority string (rhbz#1333415)
  - rpc: allow priority string to be passed to TLS context (rhbz#1333415)
  - libvirtd: add config option for TLS priority (rhbz#1333415)
  - remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
  - Pass config file object through to driver open methods (rhbz#1333415)
  - remote: allow TLS priority to be customized (rhbz#1333415)
  - qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-62
changelog:
  - qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
  - qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
  - migration: add support for migrateURI configuration (rhbz#1347389)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-7
changelog:
  - Add missing openwsman headers to libwsman-devel
    Resolves: #615922
  - Move initscript to the right place
    Resolves: #626773
  - Fix return values from initscript according to guidelines
    Resolves: #613031
  - Fix ssl check behaviour in initscript
    Resolves: #617549
  - Fix openwsman crashes when sfcb is stopped
    Resolves: #625160


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-11
changelog:
  - Additional PAM config fixes
    (use pam_cracklib.so instead of pam_pwcheck.so,
    remove "none" option from session type check - pam_unix.so desn't have it)
    Related: #1152654


author: Petr Šabata <contyk@redhat.com> - 0.9.45-4
changelog:
  - The devel subpackage now properly requires the base package to avoid
    multilib conflicts (#869633)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-19
changelog:
  - fix #1047899 - add support for "maxsize" directive
  - fix #1125769 - add support for "createolddir" directive


author: Kamil Dudka <kdudka@redhat.com> - 3.7.8-28
changelog:
  - fix #1285481 - make 'createolddir' preserve sticky bit
  - fix #1369242 - heap buffer overflow when using long date format


author: Karel Klic <kklic@redhat.com> - 7.3.6-49
changelog:
  - Added fix for CVE-2011-1018: Privilege escalation due improper
    sanitization of special characters in log file names
    Resolves: #680304


author: Jan Synáček <jsynacek@redhat.com> - 7.3.6-50
changelog:
  - Fix: Logwatch doesn't parse Dovecot 2.x log messages proper (#799987)
  - Fix: logwatch "http" script should treat APT .hdr files as "archives" (#800843)
  - Fix: logwatch does not create log file when 'MailTo' in config file has no value (#837034)
  - Fix: Zillions of "SOA: no valid signature found" in logwatch mails (#894134)


author: Jan Synáček <jsynacek@redhat.com> - 7.3.6-51
changelog:
  - Fix: Ignore the ignorable openswan messages (#799690)
  - Fix: Logwatch does not handle "improper command pipelining after (NOOP|RSET)" (#894185)
  - Fix: Logwatch doesn't proper ignore "password check failed for user" (#894191)
  - Fix: logwatch/up2date fix and extension (#737247)
  - Fix: logwatch a bit chatty with smartd (#888007)


author: Jan Synáček <jsynacek@redhat.com> - 7.3.6-52
changelog:
  - Fix: logwatch shows unknown entries for su - (#974042)
  - Fix: logwatch must understand RSYSLOG_FileFormat timestamps (#974044)
  - Fix: Logwatch does not recognise ssh Kerberos (GSS) logins. (#974046)
  - Fix: Logins through xen virt console are under unmatched entries (#974047)


author: Jan Synáček <jsynacek@redhat.com> - 7.3.6-53
changelog:
  - Fix: When filesystem name is long, the disk full check fails to work (#1196774)
  - Fix: Logwatch cron files not marked correctly as %config(noreplace) (#1221963)
  - Fix: logwatch fails with argument list too long (#921409)


author: Jan Synáček <jsynacek@redhat.com> - 7.3.6-55
changelog:
  - Fix: logwatch --service sshd --detail 8 does not print Kerberos summary (#1295886)
  - Fix: logwatch fails with Argument list too long (#1329676)


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-91
changelog:
  - Fix side navigation panel displayed unexpectedly when accessing index page
    without prior logging in after luci start
    Resolves: rhbz#853462
  - Rectify suboptimal logrotate arrangement imposing server restarts
    Resolves: rhbz#887340


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-92
changelog:
  - Further fixes for rhbz#853462, rhbz#877999 and rhbz#885028
    Resolves: rhbz#853462, rhbz#877999, rhbz#885028


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-17
changelog:
  - fix #703389 - fixed file permissions in /usr/lib/mailman
  - fix #636825 - fix #!/usr/bin/env python shebang in migrate-fhs
  - fix #704699 - fixed directories permissions in /usr/lib/mailman
  - fix #684622 - do not create and install /etc/mailman/mm_cfg.pyc and pyo files


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-18
changelog:
  - fix #834023 - escape From in email body properly
  - fix #832920 - fix word-wrap in web front-end
  - fix #772998 - fix reset_pw.py script
  - fix #799323 - handle urlhost in newlist script


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-20
changelog:
  - fix #745409 - do not set Indexes in httpd configuration for public archive
  - fix #1008139 - fix traceback when list_data_dir is not a child of var_prefix


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-23
changelog:
  - fix #1095359 - handle update when some mailing lists have been created
    by newer Mailman than this one


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: jchaloup <jchaloup@redhat.com> - 6.7.1-1
changelog:
  - Upload new tarball
    related: #1188327
  - removed bug fixed in original component: #1119191 (openssl)
  - removed bug fixed in original component: #1119572 (rpm)


author: jchaloup <jchaloup@redhat.com> - 6.7.2-1
changelog:
  - Upload new tarball
  - eventfd.2 man page missing doc detail for EFD_SEMAPHORE
    resolves: #1205351
  - pthread_kill.3 man page fix incorrect information about check
    for the existence of a thread ID
    resolves: #1205377


author: jchaloup <jchaloup@redhat.com> - 6.7.3-1
changelog:
  - Uploaded new tarball
    more detailed explanation for update-minimum with '--advisory'
    option in yum-security manpage
    resolves: #1207200


author: jchaloup <jchaloup@redhat.com> - 6.7.4-1
changelog:
  - Upload new tarball
    related: #1188327
  - removed bug fixed in original component: #878458 (rng-tools)
  - removed bug fixed in original component: #730304 (cpufrequtils)


author: Nikola Forró <nforro@redhat.com> - 6.8.1-1
changelog:
  - resolves: #1287574
  - removed bug fixed in original component: #1103754 (vsftpd)
  - removed bug fixed in original component: #1188612 (sysstat)
  - removed bug fixed in original component: #1119317 (xinetd)
  - removed bug fixed in original component: #1208155 (yum-utils)
  - removed bug fixed in original component: #1189033 (yum-utils)
  - removed bug fixed in original component: #659730 (findutils)
  - removed bug fixed in original component: #820171 (fuse)
  - removed bug fixed in original component: #878467 (shadow-utils)
  - removed bug fixed in original component: #881734 (alsa-utils)
  - removed bug fixed in original component: #1011232 (usbutils)
  - nsswitch.conf.5: add list of files being read when "files" service is used
    resolves: #1188900
  - ethtool.8: fix typo in man page
    resolves: #1231206
  - sa.8: fix invalid option in man page
    resolves: #1233049
  - icastats.1: fix typos and formatting in man page
    resolves: #1234316
  - userhelper.8: use consistent capitalization in man page
    resolves: #1249573
  - socket.7: add SO_REUSEPORT description to man page
    resolves: #1269552
  - rcmd.3: add missing condition to man page
    resolves: #1295349


author: Nikola Forró <nforro@redhat.com> - 6.9.0-1
changelog:
  - upload new tarball
    resolves: #1390141
  - removed bug fixed in original component: #1011204 (net-tools)
  - removed bug fixed in original component: #1300192 (psacct)
  - removed bug fixed in original component: #674862 (quagga)
  - growisofs.1: add comment about closing discs
    resolves: #968454
  - nsswitch.conf.5: mention that "sss" can be used as source
    for compat pseudo-databases
    resolves: #1295676
  - adjtimex.2: sync with upstream
    resolves: #1379392
  - scrub.1: fix description of --freespace option
    resolves: #1122641
  - rsyslogd.8: remove deprecated info about restart after HUP
    resolves: #1295538


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.2-4
changelog:
  - Fix problem where mdadm allowed the creation of more arrays than
    supported by the BIOS.
  - Resolves bz1211564


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-4
changelog:
  - Fix problem with mdadm large device names overflowing an internal buffer,
    potentially leading to segfaults.
  - Resolves bz1343809


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-5
changelog:
  - Retry reading sync_completed state to avoid a reshape not continuing after
    restarting a reshape
    This is an additional patch to resolve this bug, which was identified
    during the z-stream backport of this bug.
  - Resolves bz1322317


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-6
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1340768


author: Xiao Ni <xni@redhat.com> - 3.3.4-8
changelog:
  - Cannot assemble IMSM array with domain policy in mdadm.conf and
    RAID level migration in container with 2 arrays breaks both arrays 
  - Resolves bz1413937 and bz1413615


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-4
changelog:
  - fix init script to check for root privileges (#883438)
  - fix race condition when enabling new connections (#902432)
  - fix crash when printing key in verbose mode (#1153902)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-5
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Petr Oros <poros@redhat.com> - 1:1.17-21
changelog:
  - Update microcode data file to 20151106 revision.
  - Resolves: #1244968
  - Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
  - Resolves: #1201276


author: Petr Oros <poros@redhat.com> - 1:1.17-24
changelog:
  - Update microcode data file to 20161104 revision.
  - Add workaround for E5-26xxv4
  - Resolves: #1346045


author: Petr Oros <poros@redhat.com> - 1:1.17-25.2
changelog:
  - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
  - Add amd microcode_amd_fam17h.bin data file
  - Resolves: #1527357


author: Miroslav Lichvar <mlichvar@redhat.com> 2.3-5
changelog:
  - rename getline to avoid conflict with glibc (#511715)
  - remove makefiles from docs
  - drop wchar patch


author: Michal Hlavinka <mhlavink@redhat.com> - 39-5
changelog:
  - fix crash when bad substitution is used
  - fix crash when alias contains alias
  - fix crash when xtrace is enabled
  - use alternatives for ksh/mksh selection


author: Michal Hlavinka <mhlavink@redhat.com> - 39-9
changelog:
  - tab completion did not work correctly with files containing multibyte 
    characters in name (#771198)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21
changelog:
  - Bumped version build/runtime requirements for 'nspr' and 'nss'
  - Added runtime dependency for 'nss-softokn'
  - Bugzilla Bug #1002733 - Apache core generated with sig 5
  - Bugzilla Bug #1016628 - mod_nss httpd segfaulting regularly
  - Bugzilla Bug #866703 - Memory error in mod_nss (eol_memmove.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-3
changelog:
  - Resolves: rhbz #1288477 - mod_nss: detect and fail for colons in
    credentials with FakeBasicAuth 
  - Patch created by jkaluza@redhat.com for 'mod_ssl' in rhbz #1027442 -
    mod_ssl: detect and fail for colons in credentials with FakeBasicAuth


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-4
changelog:
  - Resolves: rhbz #1280276 - Relocate and downgrade NSSProxyNickname error
    message to a warning (removed error message)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.10-5
changelog:
  - Resolves: rhbz #1295490 - Add server-side Server Name Indication
    (SNI) support
  - Resolves: rhbz #1277613, #1295976 - Always shut down the SSL
    session cache when killing the module. This was the source of a
    rather large memory leak and potential crash in the case of
    SIGHUP or service reload.


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-7
changelog:
  - Backported patch from Rob Crittenden
  - Clean up semaphore in nss_pcache on shutdown (#1364561)
  - Update clean semaphore patch to not close pipe twice and to
    shutdown NSS database (#1364561)
  - Update clean semaphore patch to not free the pinList twice.
    (#1364561)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-9
changelog:
  - Backported patch from Rob Crittenden
  - Bugzilla Bug #1390359 - foward port NSS OCSP cache settings (rcritten)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-6
changelog:
  - Bugzilla Bug #746365 - CRLS are not downloaded when mod_revocator module
    is loaded successfully. And no error was thrown in httpd error_log -
    mharmsen
  - Add 'autoreconf -fvi' to build section - mharmsen
  - Fix shutting down Apache if CRLUpdateCritical is on and a CRL
    is not available at startup (#654378) - rcritten@redhat.com
  - Updated mod_revocator-kill patch. The ownership of the semaphore used to
    control access to crlhelper was not always changed to the Apache user
    (#648546) - rcritten@redhat.com
  - Actually apply the patch (#648546) - rcritten@redhat.com
  - Fix killing the web server if updatecritical is set (#648546) -
    rcritten@redhat.com


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-8
changelog:
  - Bugzilla Bug #748577 - mod_revocator does not shut down httpd server if
    expired CRL is fetched
  - Bugzilla Bug #748579 - mod_revocator does not bring down httpd server if
    CRLUpdate fails


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-9
changelog:
  - Bugzilla Bug #749696 - httpd (32 bit) failed to start if mod_revocator
    (32 bit) is installed on ppc64


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-10
changelog:
  - Bugzilla Bug #861999 - mod_revocator exec CLR URIs fail to load: unable to
    load Revocation module, NSS error -8187 - stephen.capstick64@gmail.com
    (mod_revocator-waitpid.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-11
changelog:
  - Backported patch from Rob Crittenden
  - Clean up semaphore in crlhelper on shutdown (#1326841)
  - Update URL to https://fedorahosted.org/mod_revocator/
  - Respin to fix segfault in cleanup call. (#1326841)


author: Martin Sivak <msivak@redhat.com> - 3.9-18
changelog:
  - Fix a segfault when overrides line was incomplete
    Resolves: rhbz#673100
  - Added backports directory to depmod search path
    Resolves: rhbz#761511


author: Tony Camuso <tcamuso@redhat.com>
changelog:
  - weak-modules: when adding a module, should collect the symbols from
    external modules of destination kernel
    Resolves: rhbz#1284935

  - weak-modules: Updating kernel was issuing warnings upon removal of
    old kernel.
    Resolves: rhbz#1343376

  - weak-modules: weak-modules does not handle periods in symbol names
    Resolves: rhbz#1389067


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Jan Pacner <jpacner@redhat.com> - 5:1.5.20-5.20091214hg736b6a
changelog:
  - Resolves: #1083524 (segmentation fault when sending an e-mail from a command
    line)
  - Resolves: #750929 (SIGSEGV Crash while parsing certificates file)
  - Resolves: #690409 (mutt crash; seg fault in mx_update_context)
  - Resolves: #674271 (SIGSEGV when browsing pop account)


author: Matej Muzila <mmuzila@redhat.com> 5:1.5.20-8.20091214hg736b6a
changelog:
  - Resolves #1196787 (System default CA bundle not set as default in compiled-in
    default or config)
  - Resolves #1212646 (mutt sends e-mail with broken "From" header, which has no
    host part)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28.4-17
changelog:
  - Fix bookmark renaming from browser Places sidebar (#636881)
  - Refresh desktop location after xdg-dirs change (#661589)
  - Fix saving window geometry (#654091)
  - Prevent a crash when deleting files (#652607)
  - Prevent deadlock on recursive dbus sync calls (#666086)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28.4-19
changelog:
  - Fix segfault on startup when showing homedir as desktop (#755561)
  - Rearrange icons on desktop when screen size changes (#600260)
  - Fix free space display in Properties window (#772103)
  - Fall back to regular file rename when updating desktop file contents fails (#782467)


author: Carlos Soriano <csoriano@redhat.com> - 2.28.4-20
changelog:
  - Fix crashes accessing files over sftp (#1072272)
  - Fix crashes on folder removal in browser mode (#1026561)
  Resolves: #1072272 #1026561


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-52
changelog:
  - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is
    received (#CVE-2014-3565)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-55.el6
changelog:
  - Fixed 'clientaddr' option for UDPv6 client messages (#1279501)
  - Increased maximum size of AgentX packets (#1271196).
  - Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
    (#1250023).
  - Fixed client utilities reporting 'read_config_store open failure on
    /var/lib/net-snmp/snmpapp.conf' (#1246568)
  - Fixed typos in NET-SNMP-AGENT-MIB.txt (#1241865)
  - Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1227640)
  - Restored message about duplicate IP address (#1227374)
  - Fixed fd leak in sctp statistics (#1291054)


author: Josef Ridky <jridky@redhat.com> - 1:5.5-58.el6
changelog:
  - Resolves: #1315481 - An SNMPv3 request with a small max message size can lead to SNMPv1/2c bulk requests timing out


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-105
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since RHEL-6.1 network devices can have arbitrary names (#682368)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-106
changelog:
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#680837)
  - plipconfig man page and usage output fixes (#694766)
  - Add -A,--all-fqdns and -I,--all-ip-addresses options to hostname (#705110)
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (#708538)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-108
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).
    (#725348)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.9-1
changelog:
  - handle component destruction (patch by Richard W.M. Jones)
  - fix newtWinEntry definition
  - don't use uninitialized values in newtWinMenu
  - remove workarounds for old bug in SLsmg_write_nstring
  - improve SIGWINCH handling in form
  - don't abort from whiptail gauge on SIGWINCH
  - redisplay also last line
  - update Polish translation (Piotr Drąg)
  - update URL and Source tag


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-1
changelog:
  - improve --noitem description (#456305)
  - add setHeight to Textbox class
  - fix fixedheight forms
  - free keymap in newtFinished()
  - fix memory leak in textbox
  - fix valgrind error in checkboxtree
  - don't crash when running empty form
  - don't crash or hang when form has no focusable elements
  - before checkboxtree drawing return first item in GetCurrent()
  - redraw textbox in SetText()
  - add setColor description to SnackScreen docstring (Greg Swift)
  - make sure Widget isn't used directly (Greg Swift) (#452920)
  - add Serbian translations (Miloš Komarčević)
  - add Balochi translation (Mostafa Daneshvar)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-1
changelog:
  - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)
  - use full textbox width when reflowing and allow minimal width 1
  - fix writing lines longer than width in textbox
  - don't use va_list in newtvwindow more than once (#523696)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - terminate string after reading file in whiptail
  - add newtRadioSetCurrent function (Thomas Jarosch)
  - add pkgconfig support (Thomas Jarosch)
  - add Malay, Malayalam, Assamese, Gujarati, Bengali India, Kannada, Telugu
    translations
  - include tutorial in txt format
  - include debian patches
    - fix crash in textbox SetText when topLines != 0
    - don't link modules with libraries already linked with libnewt
    - add Asturian and Marathi translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-3
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets (#707704)


author: Steve Dickson <steved@redhat.com> 1.2.3-66
changelog:
  - svc_create: Make sure errors are logged (bz 1156647)
  - gssd: suppress error message if rpc_pipefs dir disappears (bz 1220156)
  - gssd: set $HOME to prevent recursion (bz 1223661)
  - statd: Update existing record if we receive SM_MON... (bz 1280024)
  - mountstats.man: fixed typo in man page (bz 1263968)


author: Steve Dickson <steved@redhat.com> 1.2.3-67
changelog:
  - mount.nfs: Fix fallback from tcp to udp (bz 1287894)
  - exportfs: escape path for function test_export (bz 735696)
  - nfs-utils.spec: No verification on runtime configuration files (bz 1118176)
  - idmapd: added usage statement (bz 1001439)
  - mountd: fix netgroup lookup for short hostnames (bz 1231998)
  - mountd: fix bug affecting exports of dirs with 64bit inode number (bz 994564)


author: Steve Dickson <steved@redhat.com> 1.2.3-71
changelog:
  - rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
  - nfsidmap: Clean up other exit status cases (bz 1313603)
  - gssd: Fix inner-loop variable reuse (bz 1313090)
  - mount.nfs manpage: Add nfsmount.conf (bz 1302981)
  - nfs.init: Set exit code on restarts (bz 1205055)


author: Steve Dickson <steved@redhat.com> 1.2.3-73
changelog:
  - mountd: fix is_subdirectory to understand '/' (bz 1331207)
  - mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
  - mount.nfs: Removed supported flag from usage string (bz 1000990)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037926)
  - exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032488 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269361 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-7
changelog:
  - Add patch to check if hash algorithms are backed by a token
  - Add patch to disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256,
    which have never enabled in the past


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-9
changelog:
  - Update fix_multiple_open patch to fix regression in openldap client
  - Remove pk11_genobj_leak patch, which caused crash with Firefox
  - Add comment in the policy file to preserve the last empty line
  - Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not
    provided by softoken; this superseds check_hash_impl patch


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-10
changelog:
  - Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Add patch to remove duplicate ciphersuites entries in sslinfo.c
  - Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
  - Build with support for SSLKEYLOGFILE


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-11
changelog:
  - Adjust the sslstress.txt filename so that it matches with the
    disableSSL2tests patch ported from RHEL 7
  - Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
  - Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-1
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Fix the required nspr version to be 4.10.6
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.26.0
  - Remove upstreamed patch for CVE-2016-1950
  - Remove p-disable-md5-590364-reversed.patch for bug 1335915


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-7
changelog:
  - Remove ocaml-find-{requires,provides}.sh from this package.  These are
    now in upstream RPM 4.8 (RHBZ#545116).
  - define -> global in a few places.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.2-5
changelog:
  - Enable execshield stack protection on ppc/ppc64 (572826)
    related: rhbz#1343082
  - Fix strict-aliasing warnings in build (990540).


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1263477)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - fix: slapd crash in do_search (#1257543)
  - Fix: Cannot build the package after libtool rebase (#1296129)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-9
changelog:
  - fix: Bad log levels in check_password module (#1255046)
  - [rfe] add informational message about database backup when openldap is updated (#1261651)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1288545)
  - fix: We can't search expected entries from LDAP server (#1212283)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: update description in slapd.conf for NSS database related options (#1131094)
  - fix: check_password minPoints parameter useless (#1255063)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-11
changelog:
  - fix: OpenLDAP doesn't use sane (or default) cipher order (#1300701)
    + Add support for TLSv1.2, and SHA256 and SHA384 ciphers
    + Use what NSS considers default for DEFAULT cipher string.
    + Drop unnecessary hardcoded cipher suites' default flags
    + Update with TLSv1.2 ciphers
  - revert: check_password minPoints parameter useless (#1255063)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - NSS: fix setting olcTLSProtocolMin (#1249092)
  - fix slapd crash in do_search (sc_writewait) (#1340861)
  - NSS: fix parsing code (#1372349)
    + refactor ciphers-related patches
    + fix cipherstring parsing
  - NSS: fix cipher suites' definitions (#1372357)
    + fix some ciphers' flags
    + add new ciphers to match the current NSS
    + add PSK and CHACHA20POLY1305 cipher strings


author: Matus Honek <mhonek@redhat.com> - 2.4.40-14
changelog:
  - NSS: use a hex number for some ciphersuite definitions (#1372357)
  - NSS: fix OpenLDAP crash in NSS shutdown handling (#1373222)
  - fix: rpm -V openldap-servers complains after a clean install (#1263220)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-15
changelog:
  - ITS#8337 fix missing olcDbChecksum config attr (#1397961)
  - ITS#8003 fix off-by-one in LDIF length (#1397949)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#796014)
    (MotifZone bug #1552)
  - fixed use after free with comboboxes and XIM (rhbz#836892)
    (MotifZone bug #1559)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096315)
  - fixed missing outline in mwm while moving window (rhbz#1000343)
    (copy of rhbz#997241)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-8
changelog:
  - fixed Label size computed wrong within a Form (rhbz#869782) (rhbz#953938)
    (copy of rhbz#980577)
    (MotifZone bug #1612 final upstream patch with white space changes)
  - fixed segmentation violation in XmList after calling XmListDeleteAllItems 
    and clicking on a new item with left-shift left-button click (rhbz#1058644)
    (MotifZone bug #1636)


author: Šimon Lukašík <slukasik@redhat.com> - 1.2.7-1
changelog:
  - upgrade to the latest upstream release (#1259037)
  - Introduced '--verbose' mode (#1287295)
  - Detailed OVAL results present in HTML report (#1140240)
  - fixed issues in scap-as-rpm tool (#1226398, #1258958)
  - introduced support for non-decimal OVAL vetsions (#1248378)
  - 'oscap oval eval --report' command (#1258958)
  - 'oscap xccdf generate --profile <custom-profile> guide' (#1139822)


author: Watson Sato <wsato@redhat.com> - 1.2.11-1
changelog:
  - Upgrade to the latest upstream release
  - NIST certified OpenSCAP (#1364207)
  - Huge speed-up of generating HTML reports and guides
  - Support remote datastream components
  - Support tailoring of external datastreams
  - New option generating OVAL results without system characteristics
  - Support for extracting Ansible playbooks
  - Enabled fetching remote resources in OVAL module
  - Support --benchmark-id when running `oscap xccdf generate guide`
  - Enabled offline scanning in many probes
  - Added and updated various CPEs
  - Fixed manual page for oscap-ssh (#1299969)


author: Martin Preisler <mpreisle@redhat.com> - 1.2.12-1
changelog:
  - Upgrade to the latest upstream release
  - improved HTML report by referencing links
  - fixed validity errors in ARF files
  - fixed CVE parsing
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (#1387248)
  - fixed oscap-docker man page (#1387166)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1229871)
  - document some options of the speed command (#1197095)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-49
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
  - fix CVE-2016-0799 - memory issues in BIO_printf


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-50
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength
  - replace expired testing certificates


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - disallow DH keys with less than 1024 bits in TLS client
  - remove support for weak and export ciphersuites
  - use correct digest when exporting keying material in TLS1.2 (#1376741)


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: William Cohen <wcohen@redhat.com> - 0.9.9-12
changelog:
  - Add support for Intel Xeon D. rhbz1231399
  - Add support for Intel Skylake Mobile/Desktop processors. rhbz1254764
  - Fix coverity warnings. rhbz1206242


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-1
changelog:
  - Rebase to upstream e174ec84857e087210b9dacee3318f8203176129 (1.1.15)

    Resolves: rhbz#1253325
    Resolves: rhbz#1312040
    Resolves: rhbz#1322595
    Resolves: rhbz#1326350
    Resolves: rhbz#1356727


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-2
changelog:
  - Include upstream fixes to init scripts
   - ClusterMon resource should verify pid is crm_mon's
   - Fix CVE-2016-7035

    Resolves: rhbz#1322595
    Resolves: rhbz#1360234
    Resolves: rhbz#1374775


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-3
changelog:
  - Show correct help and error messages in attrd_updater
   - Preserve rolling upgrades involving Pacemaker Remote nodes
   - Update status of clufter in README_RGManager_porting

    Resolves: rhbz#1388558
    Resolves: rhbz#1389028


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-4
changelog:
  - crm_report should avoid grep on binary logs
   - document that clufter is now supported

    Resolves: rhbz#1405205


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-22
changelog:
  - pam_tally2: added no_lockf_timeout option, do not use it
  - pam_tally2: added debug option
  - pam_tally2: do not create the log file as executable (#1186361)
  - add manpage symlink for environment(5) (#1110258)
  - pam_group: add support for Development/Debug syntax (#1114220)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-23
changelog:
  - pam_succeed_if: properly work with large uids
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - pam_access: check for (group) match first (#1359303)


author: Nathan Scott <nathans@redhat.com> - 3.10.3-3
changelog:
  - Fix postfix pmda failing to setgid to postfix user (BZ 1213724).
  - Fix postfix pmda not reporting incoming mails (BZ 1213764).
  - Consistent naming for tools related to LVM cache (BZ 1218007).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Resolve local_sock() double free error (BZ 1258846).
  - Resolve netfilter pmda uses outdated /proc API (BZ 1221653).
  - Update to latest PCP sources (BZ 1248272).
  - Fix pmatop attribute error (BZ 1195429).
  - Fix pmwebd fails when monitoring systems with Vector (BZ 1238863).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-3
changelog:
  - Correct papi version we link against (BZ 1295694)
  - Fix possible overflow with pmdaproc using local context options (BZ 1295801)
  - Dropped pcp-compat package from upstream (BZ 1294390)


author: Lukas Berk <lberk@redhat.com> - 3.10.9-4
changelog:
  - Correct interrupts parsing on s390x platforms (BZ 1297822)
  - Correct papi version we link against for 32 bit arches (BZ 1295694)


author: Lukas Berk <lberk@redhat.com> 3.10.9-6
changelog:
  - Update pmdanamed testcaes (BZ 1303005)
  - Fix possible fd leak in pmdanamed (BZ 1223311)
  - Fix issue with pmdagfs2 installation (BZ 1305939)
  - Address testcase 370 failure on non x86_64 archs (BZ 1305940)
  - Address endian issue with pmdalinux on some platforms (BZ 1298722)


author: Nathan Scott <nathans@redhat.com> 3.10.9-7
changelog:
  - Fix pmlogconf probing of base XFS metrics (BZ 1358972)
  - Resolve SIGFPE in pcp-atop with missing metrics (BZ 1373590)
  - Support pcp-iostat uninterpolated PCP archive replay (BZ 1293661)
  - Resolve several reporting issues in PostgreSQL PMDA (BZ 1304619)


author: Nathan Scott <nathans@redhat.com> 3.10.9-9
changelog:
  - Added pcp-iostat precision reporting capability (BZ 1297498)
  - Fixed a pcp-iostat argument checking stack trace (BZ 1414257)


author: Ivan Devat <idevat@redhat.com> - 0.9.148-3
changelog:
  - Fixed updating cluster properties from older version of web UI
  - Fixed syntax error in utilization attributes functions
  - Resolves: rhbz#1298163
  - Related: rhbz#1260021


author: Ivan Devat <idevat@redhat.com> - 0.9.154-1
changelog:
  - Rebased to latest upstream packages
  - Keep a cluster qauorate as long as possible when shutting it down
  - Fixed disabling TLSv1.1 in pcsd
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed adding a node when fencing configuration has been manually changed in cluster.conf
  - Make pcsd init script wait for pcsd to fully start
  - Gracefully handle errors when reading cluster properties definition
  - Resolves: rhbz#1373874 rhbz#1353738 rhbz#1344928 rhbz#1369029 rhbz#1319070 rhbz#1328870 rhbz#1325459


author: Ivan Devat <idevat@redhat.com> - 0.9.155-1
changelog:
  - Rebased to latest upstream packages
  - When stopping a cluster with some of the nodes unreachable, stop the cluster completely on all reachable nodes
  - Fixed occasional crashes / failures when using locale other than en_US.UTF8
  - Added SBD support for cman clusters
  - Added alerts management in web UI
  - Resolves: rhbz#1373874 rhbz#1315748 rhbz#1380372 rhbz#1387106 rhbz#1380352 rhbz#1376480


author: Ivan Devat <idevat@redhat.com> - 0.9.155-2
changelog:
  - Fixed upgrading CIB to the latest schema version
  - Adding a node in a cluster does not cause the new node to be fenced immediately
  - Fixed handling of HTTP communication failure
  - Added dependency on cman
  - Resolves: rhbz#1397408 rhbz#1394846 rhbz#1394273 rhbz#1394857


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-14
changelog:
  - handle different usb scheme needed to support ReinerSCT Cyberjack
    readers. Patch was supplied by customer.


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-15
changelog:
  - unlock mutex on failure
  - clean up socket files after start at init time (allows restart after
    crash or hard fail of pcscd)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-138
changelog:
  - Fix backslash interpolation in Locale::Maketext (bug #1025906)
  - Do not ignore single-letter-named packages by Module::Plugable (bug #1086215)
  - Run-require exact version of perl-libs by perl-suidperl (bug #1161170)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.10.1-143
changelog:
  - Fix typo in name of the signal PIPE in IPC::Cmd (bug #1315053)
  - Fix crash in httpd mod_perl Perl_sv_pvn_force_flags (bug #1364206)


author: Marcela Mašláňová <mmaslano@redhat.com> - 6.3-1
changelog:
  - new upstream version - noarch, because since 6.0 there were bigger
   changes like stripping this module into more of them


author: Steven Pritchard <steve@kspei.com> 1:0.4304-1
changelog:
  - Update to DateTime 0.4304.
  - Update to DateTime::TimeZone 0.78.
  - Update to DateTime::Locale 0.41.


author: Steven Pritchard <steve@kspei.com> 1:0.4401-1
changelog:
  - Update to DateTime 0.4401.
  - Update to DateTime::Locale 0.42.
  - Update to DateTime::TimeZone 0.8301.


author: Stepan Kasal <skasal@redhat.com> - 1:0.5300-1
changelog:
  - new upstream version
  - use Build.PL as Makefile.PL no longer exists
  - use iconv to recode to utf-8, not a patch
  - update BuildRequires
  - drop Provides: perl(DateTime::TimeZoneCatalog), it is no longer there
  - use filtering macros


author: Robin Norwood <rnorwood@redhat.com> - 0.07b4-3
changelog:
  - Various fixes from package review:
  - Remove BR: perl
  - Use dist tag in release
  - Resolves: bz#226258


author: Robin Norwood <rnorwood@redhat.com> - 1:0.34-3
changelog:
  - Resolves: bz#226267
  - Only filter out the unversioned Provides: perl(Net::LDAP::Filter) to
    avoid breaking dependencies.


author: Petr Pisar <ppisar@redhat.com> - 1:0.40-2
changelog:
  - Do not set SSL ciphers at all by default (bug #1090966)
  - Pass actual length to syswrite() instead of default 1500 B (bug #1104069)


author: Lubomir Rintel <lkundrak@v3.sk> - 0.710.08-1
changelog:
  - New upstream release
  - Enable tests
  - Include examples in documentation
  - Don't grab in dependencies of exotic transports (for the sake
    of consistency with existing practice of Jabber transport)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.710.08-3
changelog:
  - Filter out perl(LWP::Protocol) Provides, which comes from a file
    not stored in Perl's search path for modules (#472359).


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.710.10-3
changelog:
  - if ENV(MOD_PERL) is defined, then standard read insted of sysread must
    be used.
  - Resolves: rhbz#748376


author: Petr Pisar <ppisar@redhat.com> - 5.833-3
changelog:
  - Implement hostname verification that is disabled by default. You can install
    IO::Socket::SSL Perl module and set PERL_LWP_SSL_VERIFY_HOSTNAME=1
    enviroment variable (or modify your application to set ssl_opts option
    correctly) to enable the verification. See LWP::UserAgent POD for more
    details. (bug #745800)


author: Petr Pisar <ppisar@redhat.com> - 5.833-4
changelog:
  - Support HTTPS_CERT_FILE and HTTPS_KEY_FILE Net::SSL environment variables
    with IO::Socket::SSL back-end (bug #1365490)


author: Petr Pisar <ppisar@redhat.com> - 5.833-5
changelog:
  - Honor HTTPS_PROXY and https_proxy Net::SSL environment variables with
    IO::Socket::SSL back-end by default (bug #1400632)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-41
changelog:
  - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
  - core: fix use-after-free in unserialize CVE-2015-2787
  - exif: fix free on unitialized pointer CVE-2015-0232
  - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
  - date: fix use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.3.3-43
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4026, #1213407
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: more fix type confusion through unserialize #1222538


author: Remi Collet <rcollet@redhat.com> - 5.3.3-47
changelog:
  - fix wrong warning in openssl_encrypt() for missing IV
    when IV is not required #1260315
  - fix segfault's when you try and allocate an SplFixedArray
    with size >= 9999 #1071344
  - segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
  - add options to enable TLS in curl #1255920
  - fix segfault in gc_collect_cycles #1122681


author: Remi Collet <rcollet@redhat.com> - 5.3.3-49
changelog:
  - fix php-soap fails to connect to HTTPS web service sporadically
    as stream_socket_enable_crypto() uses NONBLOCK #1283153


author: Ryan O'Hara <rohara@redhat.com> 0.8.6-1
changelog:
  - Resolves: #846035 - rebase to upstream version 0.8.6
  - Resolves: #857917 - piranha gui does not set ipvs timeout values


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-44
changelog:
  - Resolves #1256039 - Fixed missing subsystem user on external CA case.
  - Removed unused backup files (.p*) generated by the patches.


author: Ade Lee <alee@redhat.com> 9.0.3-48
changelog:
  - Resolves #1306989 - Crash seen with pki-common pkg during IPA server install
  - Resolves #1290535 - Check for incompatible Java at startup
  - Resolves #1313207 - ca.subsystem.certreq missing from CS.cfg


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-52
changelog:
  - Resolves #1403943 - Replica install fails with failed to configure ca on
    "White spaces are required between publicId and systemId"


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-53
changelog:
  - Resolves #1403943 - Replica install fails with failed to configure ca on
    "White spaces are required between publicId and systemId"
    (contains the additional changes required to work with the latest HTTPD)


author: Ray Strode <rstrode@redhat.com> 0.8.3-19
changelog:
  - Add explicit, versioned dep on core-libs subpackage to various
    parts of the spec file to silence rpmdiff
    Related: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-21
changelog:
  - Update lock icon dimensions to match dimensions of old
    icon to silence rpmdiff
    Related: #612665


author: Ray Strode <rstrode@redhat.com> 0.8.3-28
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1120904


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-4
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639860


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.6-1
changelog:
  - update to 2.6.6 (#588781)
  - move sasl config to /etc/sasl2 (#574439)
  - drop sasl v1 support
  - require Date::Calc for pflogsumm (#588726)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-7
changelog:
  - Backported patch to use long integers for message_size_limit,
    mailbox_size_limit and virtual_mailbox_limit
    Resolves: rhbz#907387


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-8
changelog:
  - Backported support for TLS 1.1, TLS 1.2
    Resolves: rhbz#1287192
  - Preserve timestamps for configuration files
    Resolves: rhbz#1307066


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-7
changelog:
  - backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
    changing wait timeout to 2 seconds by default


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-4
changelog:
  - Backported turbo detection (turbo patch, #610464)
  - Show all P-states in dump mode (dump-all-pstates patch, accepted by upstream)
  - Backported tty handling for non-interactive mode (notty patch, #628514)
  - Output error in interactive mode if there is no tty (checktty patch,
    posted upstream)
  - Fixed rpmlint warning about mixed tabs and spaces


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-6
changelog:
  - Improved sigwinch handling
    Resolves: rhbz#698422

    * Tue Aug 02 2011 Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-5
  - Fixed sigwinch handling
    Resolves: rhbz#698422


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-3
changelog:
  - New version of unlimit-fds patch
  - Fixed error message if FDs limit is reached (by fd-limit-err patch)
    Related: rhbz#998021


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-4
changelog:
  - Reintroduced -d dump switch and improved reporting options
    (by improve-reporting-options patch)
    Resolves: rhbz#1333439


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-36
changelog:
  - #1201024 - [RFE] Increase sysctl -p line size limit
  - #1246573 - typo in ps man page
  - #1251101 - Fixing human readable patch (removing trailing spaces)
  - #1284076 - [RFE] Support for thread cgroups
  - #1288208 - use of /proc/self/auxv breaks ps when running as a different euid
  - #1288497 - pmap - no sums computed for RSS and Dirty column
  - Resolves: #1201024 #1246573 #1251101 #1284076 #1288208 #1288497


author: Jan Rybar <jrybar@redhat.com> - 3.2.8-43
changelog:
  - Rework of patch 91 from 3.2.8-37, stripping removed permanently, no new option
  - Resolves: rhbz#1322111


author: Jaromir Capik <jcapik@redhat.com> - 6.3.2-66
changelog:
  - Resolves: rhbz#837621
  - Fixing 'sa -u' SIGSEGVs & wrong UIDs
  - Fixing the ChengeLog version typos ... 6.2.3 -> 6.3.2


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Jan Rybar <jrybar@redhat.com> - 22.6-20
changelog:
  - fuser manpage: note about handling not-owned processes moved from BUGS to RESTRICTIONS
  - Resolves: rhbz#1211743


author: Chris Lumens <clumens@redhat.com> - 1.74.13-1
changelog:
  - Also fix the version test for RHEL6. (clumens)
  - Fix a couple minor problems pychecker caught. (clumens)
  - Add network --ipv6gateway option (#978252) (rvykydal)
  - fix TypeError in network.py with ipv6 static addresses (#966183). (wwoods)
  - Fix a bug in logvol duplicate reporting (#924579, mhuth). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.74.14-1
changelog:
  - Add tests for incorrect command usage detection (mkolman)
  - Add class for multi-line command sequence tests (mkolman)
  - Raise an error if autopart is combined with partitioning commands (#886010) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.74.16-1
changelog:
  - Add an option to disable even installing the core group. (clumens)
  - Add a new bootloader --disabled option. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.74.17-1
changelog:
  - Fix small issues with output formatting of the new --cdl option. (clumens)
  - Add clearpart --cdl option. (#1182624) (sbueno+anaconda)


author: Chris Lumens <clumens@redhat.com> - 1.74.18-1
changelog:
  - Add support for specifying thin pool profile (vpodzime)
    Related: rhbz#1083459
  - Add support for custom layouts using lvm thin provisioning. (dlehman)
    Related: rhbz#1083459


author: Chris Lumens <clumens@redhat.com> - 1.74.22-1
changelog:
  - Fix handling # in passwords. (clumens)
    Related: rhbz#1301267
  - Pass comments=True to shlex.split calls in the test functions. (clumens)
    Related: rhbz#1301267


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.32.1-1
changelog:
  - Updated to 2.32.1 (RH #1126056, RH #1132348)
  - Added python3-boto (RH #1024363)
  - Added (but did not enable) unit tests (RH #1072946, RH #1072923)


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.34.0-1
changelog:
  - Updated to 2.34.0 (RH #1072925, RH #1072928, RH #1161229)
  - Made executables point to python2 (RH #1152444)
  - Enabled unit tests on Fedora (RH #1072946)


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.34.0-2
changelog:
  - Added missing python-requests and python-rsa dependencies
  - Disabled unit tests due to rawhide/F21 python regression (RH #1161166:c4)


author: Charalampos Stratakis <cstratak@redhat.com> - 1:2.34.0-5
changelog:
  - Import to RHEL 6.9
  - Use the epoch tag so the EPEL 6 package can be replaced
  Resolves: rhbz#1423029


author: David Malcolm <dmalcolm@redhat.com> - 1.4.1-6
changelog:
  - remove embedded copy of timezone data, and redirect the dateutil.zoneinfo
  API accordingly
  Resolves: rhbz#559309
  - add a %check, running the upstream selftest suite


author: Roman Rakus <rrakus@redhat.com> - 3.10.13-1
changelog:
  - Update to 3.10.13 release
    Resolves: #621567, #627901, #667363
  - Signal handler for SIGILL
    Resolves #646429


author: Jeff Garzik <jgarzik@redhat.com> - 0.3-5.2
changelog:
  - Import man page patch from Fedora BZ# 638475
  - Fix description spelling errors found by rpmlint.
  - Fixes BZ# 605535


author: David Malcolm <dmalcolm@redhat.com> - 0.6-1
changelog:
  - cherrypick fixes for Py_None reference leak, and for some error-handling bugs
  Resolves: rhbz#680269


author: David Malcolm <dmalcolm@redhat.com> - 0.6-2
changelog:
  - fix typo in pethtool --help
  Resolves: rhbz#692028
  - fix memory leaks
  Resolves: rhbz#698125
  - add IPv6 information to pifconfig
  Resolves: rhbz#698192
  - respect interface arguments to pifconfig
  Resolves: rhbz#714753
  - add a get_ipv4_addresses() method to ethtool.etherinfo to support devices
  with multiple IPv4 addresses
  Resolves: rhbz#759150


author: David Malcolm <dmalcolm@redhat.com> - 0.6-3
changelog:
  - update python-ethtool-0.6-add-get_ipv4_addresses-method.patch, addressing
  bug 886644, memory leaks, and a crasher when the broadcast address is NULL
  Resolves: rhbz#886644


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.6-4
changelog:
  - make get_active_devices() return IPv6-only devices, too
  Resolves: rhbz#855920
  - make pifconfig output all IPv4 addresses for all devices
  Resolves: rhbz#876211


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.1-1
changelog:
  - Update to 2.1, which fixes a number of bugs.
    See http://jinja.pocoo.org/2/documentation/changelog#version-2-1.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.1-1
changelog:
  - Update to 2.2.1, mainly a bugfix release.
  - Remove patch no longer needed.
  - Remove conditional for FC-8.
  - Compilation of speedup module has to be explicitly requested now.


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.1-3
changelog:
  - Require python-setuptools, otherwise jinja2.__version__ evaluates to "unknown"
  Resolves: rhbz#1121241


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0-4
changelog:
  - Import to RHEL 6.9
  - Increment the release so it will replace the respective EPEL build
  Resolves: rhbz#1422977


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 0.9.4-2
changelog:
  - Add hotfix for broken py-def (#220843)
  - Simplify kid and kidc to not require setuptools to run (#220844)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.7-1
changelog:
  - Fix pidstat.process_flag()
  - Introduce pflags utility
  - Parse IRQ affinities for !root
  - Add PF_NO_SETAFFINITY const


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.9-1
changelog:
  - Adds documentations to classes, more work to do on methods
  - Fixes parsing of users in /proc/interrupts users field
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1245677


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0-1
changelog:
  - Update to 2.0.
  - Adjusted source URL.
  - License changed to BSD only.
  - Upstream now provides a script to run markdown from the cmdline.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0.1-3
changelog:
  - Add requirement on python-elementtree, which was a separate package
    before Python 2.5.
  - Re-add changelog entries accidentally removed earlier.


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - New upstream version
  - Added support for python3
  - Included README, COPYING, and CHANGELOG in docs


author: Jan Pokorny <jpokorny@redhat.com> - 0.2.1-5.2
changelog:
  - Fix install_requires contains forward-incompatible
    "PEAK-Rules>=0.5a1.dev-r2562,==dev" specification
  Resolves: rhbz#1321133


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.0-2
changelog:
  - Remove bundled directories altogether, requests are smart enough
    to import system modules, fixes a problem with updating requests
    from 2.3.0
  Resolves: rhbz#1212145


author: Charalampos Stratakis <cstratak@redhat.com> - 2.6.0-4
changelog:
  - Ensure that urllib3.connection module is imported only once so connections
    to HTTPS servers that require SNI support do not fail
  Resolves: rhbz#1382682


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
  - Renamed patches to python-urllib3-*
  - Fixed ssl check patch to use the correct cert path for Fedora.
  - Included dependency on ca-certificates
  - Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
  - Upstream patch to fix Accept header when behind a proxy.
  - Reorganize patch numbers to more clearly distinguish them.


author: Charalampos Stratakis <cstratak@redhat.com> - 1.10.2-2
changelog:
  - Upstream patch for fixing issue of new configs not taken into account
  by the PoolManager instance
  Resolves: rhbz#1329382


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.600.0-25
changelog:
  - When --cpu-host is specified use cpu-mode host-model (rhbz#1167072)
  - Do not fail when using a non sparse logical volume (rhbz#1167998)
  - Fix bridge interface creation (rhbz#1172407)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.494.el6
changelog:
  - kvm-rtl8139-flush-queued-packets-when-RxBufPtr-is-writte.patch [bz#1356924]
  - kvm-block-Detect-unaligned-length-in-bdrv_qiov_is_aligne.patch [bz#1321862]
  - kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1281713]
  - kvm-atapi-fix-halted-DMA-reset.patch [bz#1281713]
  - Resolves: bz#1281713
    (system_reset should clear pending request for error (IDE))
  - Resolves: bz#1321862
    (Backport 'block: Detect unaligned length in bdrv_qiov_is_aligned()')
  - Resolves: bz#1356924
    (rtl8139 driver hangs in widows guests)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.495.el6
changelog:
  - kvm-qemu-img-add-support-for-fully-allocated-images.patch [bz#1297653]
  - kvm-qemu-img-fix-usage-instruction-for-qemu-img-convert.patch [bz#1297653]
  - kvm-target-i386-warns-users-when-CPU-threads-1-for-non-I.patch [bz#1292678 bz#1320066]
  - Resolves: bz#1292678
    (Qemu should report error when cmdline set threads=2 in amd host)
  - Resolves: bz#1297653
    ("qemu-img convert" can't  create a fully allocated image passed a "-S 0" option)
  - Resolves: bz#1320066
    (Qemu should not report error when cmdline set threads=2 in Intel host)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.496.el6
changelog:
  - kvm-virtio-blk-Release-s-rq-queue-at-system_reset.patch [bz#1361490]
  - kvm-virtio-scsi-Prevent-assertion-on-missed-events.patch [bz#1333697]
  - Resolves: bz#1333697
    (qemu-kvm: /builddir/build/BUILD/qemu-kvm-0.12.1.2/hw/virtio-scsi.c:724: virtio_scsi_push_event: Assertion `event == 0' failed)
  - Resolves: bz#1361490
    (system_reset should clear pending request for error (virtio-blk))


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.497.el6
changelog:
  - kvm-vmstate-fix-breakage-by-7e72abc382b700a72549e8147bde.patch [bz#1294941]
  - Resolves: bz#1294941
    (QEMU crash on snapshot revert when using Cirrus)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.498.el6
changelog:
  - kvm-virtio-introduce-virtqueue_unmap_sg.patch [bz#1392520]
  - kvm-virtio-introduce-virtqueue_discard.patch [bz#1392520]
  - kvm-virtio-decrement-vq-inuse-in-virtqueue_discard.patch [bz#1392520]
  - kvm-balloon-fix-segfault-and-harden-the-stats-queue.patch [bz#1392520]
  - kvm-virtio-balloon-discard-virtqueue-element-on-reset.patch [bz#1392520]
  - kvm-virtio-zero-vq-inuse-in-virtio_reset.patch [bz#1392520]
  - kvm-PATCH-1-4-e1000-pre-initialize-RAH-RAL-registers.patch [bz#1300626]
  - kvm-net-update-nic-info-during-device-reset.patch [bz#1300626]
  - kvm-net-e1000-update-network-information-when-macaddr-is.patch [bz#1300626]
  - kvm-net-rtl8139-update-network-information-when-macaddr-.patch [bz#1300626]
  - Resolves: bz#1300626
    (e1000/rtl8139: qemu mac address can not be changed via set the hardware address in guest)
  - Resolves: bz#1392520
    ([RHEL6.9] KVM guest shuts itself down after 128th reboot)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.499.el6
changelog:
  - kvm-rename-qemu_aio_context-to-match-upstream.patch [bz#876993]
  - kvm-block-stop-relying-on-io_flush-in-bdrv_drain_all.patch [bz#876993]
  - kvm-block-add-bdrv_drain.patch [bz#876993]
  - kvm-block-avoid-very-long-pauses-at-the-end-of-mirroring.patch [bz#876993]
  - Resolves: bz#876993
    (qemu-kvm: vm's become non-responsive during migrate disk load from 2 domains to a 3ed)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.500.el6
changelog:
  - kvm-qcow2-Free-allocated-L2-cluster-on-error.patch [bz#1405882]
  - kvm-qcow2-Support-exact-L1-table-growth.patch [bz#1405882]
  - kvm-iotests-Fix-026-s-reference-output.patch [bz#1405882]
  - kvm-iotests-Fix-049-s-reference-output.patch [bz#1405882]
  - kvm-iotests-Disable-086.patch [bz#1405882]
  - kvm-block-commit-speed-is-an-optional-parameter.patch [bz#1405882]
  - kvm-iotests-Use-_img_info.patch [bz#1405882]
  - Resolves: bz#1405882
    (test cases 026 030 049 086 and 095 of qemu-iotests fail for qcow2 with qemu-kvm-rhev-0.12.1.2-2.498.el6)


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.501.el6
changelog:
  - kvm-Revert-iotests-Use-_img_info.patch [bz#1405882]
  - kvm-Revert-block-commit-speed-is-an-optional-parameter.patch [bz#1405882]
  - kvm-Revert-iotests-Disable-086.patch [bz#1405882]
  - kvm-Revert-iotests-Fix-049-s-reference-output.patch [bz#1405882]
  - kvm-Revert-iotests-Fix-026-s-reference-output.patch [bz#1405882]
  - kvm-Revert-qcow2-Support-exact-L1-table-growth.patch [bz#1405882]
  - kvm-Revert-qcow2-Free-allocated-L2-cluster-on-error.patch [bz#1405882]
  - kvm-net-check-packet-payload-length.patch [bz#1398214]
  - Resolves: bz#1398214
    (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.9])
  - Reverts: bz#1405882
    (test cases 026 030 049 086 and 095 of qemu-iotests fail for qcow2 with qemu-kvm-rhev-0.12.1.2-2.498.el6)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.502.el6
changelog:
  - kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418231 bz#1419417]
  - kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418231 bz#1419417]
  - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418231 bz#1419417]
  - kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418231 bz#1419417]
  - Resolves: bz#1418231
    (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])
  - Resolves: bz#1419417
    (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6
changelog:
  - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420487 bz#1420489]
  - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420487 bz#1420489]
  - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420487 bz#1420489]
  - Resolves: bz#1420487
    (EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])
  - Resolves: bz#1420489
    (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])


author: Adam Tkac <atkac redhat com> - 0.99.15-8
changelog:
  - fix CVE-2011-3323
  - fix CVE-2011-3324
  - fix CVE-2011-3325
  - fix CVE-2011-3326
  - fix CVE-2011-3327
  - fix CVE-2012-0255
  - fix CVE-2012-0249 and CVE-2012-0250
  - fix CVE-2012-1820


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-10
changelog:
  - add watchquagga initscript (#862826, #1208617)
  - remove pidfile when service is stopped (#842308)
  - use QCONFDIR correctly in initscripts (#839620)
  - include watchquagga and ospfclient manpages (#674862)


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-11
changelog:
  - fix for CVE-2013-2236 (#1391918)
  - fix for CVE-2016-1245 (#1391914)
  - fix for CVE-2016-2342 (#1391916)
  - fix for CVE-2016-4049 (#1391919)


author: Michal Ruprich <mruprich@redhat.com> - 0.99.15-14
changelog:
  - Resolves: #1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory


author: Doug Ledford <dledford@redhat.com> - 6.6_3.15-1
changelog:
  - Change numbering scheme to be clearer: first number is redhat
    release this package is for (aka rhel6.6), second number is the
    upstream kernel that our kernel code comes from, aka 3.15.
  - Minor fix to init script to support cxgb4 and ocrdma and mlx5
    drivers properly
  - Add a dracut module to make sure all the needed InfiniBand
    kernel modules and support files make it on to the initrd
  - Resolves: 1064308


author: Doug Ledford <dledford@redhat.com> - 6.7_3.15-2
changelog:
  - Fix ipoib MTU issue
  - Fix shutdown ordering of NFSoRDMA code
  - Absorb mlx4/cxgb3/cxgb4 setup/module init code into our package
  - Resolves: bz1186498, bz1163527


author: Doug Ledford <dledford@redhat.com> - 6.7_3.15-4
changelog:
  - Fix modprobe file so command line opts passed to modprobe mlx4_core will
    work again
  - Resolves: bz1215857


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-36
changelog:
  - SAPDatabase: fix process count for SUSER
  - oracle: use monprofile parameter
  - send_arp: fix buffer overflow on infiniband devices
  - mysql: use replication_port variable
  - oracle: inform user that monprofile monuser must start with C##
    for container databases

    Resolves: rhbz#1260710
    Resolves: rhbz#1358892
    Resolves: rhbz#1351717
    Resolves: rhbz#1337146
    Resolves: rhbz#1374655


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-37
changelog:
  - lvm.sh: fix status clustered to check specific volume
  - netfs.sh: move defaults to metadata
  - nfsserver: use rpcpipefs_dir variable

    Resolves: rhbz#1320520
    Resolves: rhbz#1286291
    Resolves: rhbz#1382036


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-40
changelog:
  - SAPHana/SAPHanaTopology: update to version 0.152.17
  - Add netstat dependency

    Resolves: rhbz#1381891
    Resolves: rhbz#1395594


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-25
changelog:
  - rgmanager: Fix bash syntax error in clunfslock
    rgmanager: clunfslock: copy state info if it exists
    Resolves: rhbz#1278943


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-29
changelog:
  - rgmanager: Forget that we were transition master if quorum is dissolved
    rgmanager: Re-init the vf key callbacks after losing and recovering quorum
    Resolves: rhbz#1084053
  - rgmanager: Exit more gracefully if cman stops first when cpg locks are used
    Resolves: rhbz#1342825


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-1
changelog:
  - initial import of rsyslog7
    changes since rsyslog-5.8.10-8:
    - rebase to 7.4.10
    - drop patches merged upstream
    - regenerate patches for rhbz820311, rhbz886117
    - add a patch to remove dependency on liblogging-stdlog
    - add a patch to fix compilation of omelasticsearch
      on platforms without atomic instructions
    - mark package as conlicting with rsyslog
    - update specification of dependencies
    - add the rsyslog-recover-qi.pl script
    - add new plugins
      imdiag, mmanon, mmjsonparse, mmsnmptrapd, omelasticsearch,
      pmaixforwardedfrom, pmcisconames, pmsnare
    - add new subpackage rsyslog-elasticsearch
    - make the build more verbose by adding 'V=1' to make
    - update conf file for new omusrmsg syntax
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - drop default compatibility mode from SYSLOGD_OPTIONS
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - fix typos in the spec file
    resolves: #869600


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-2
changelog:
  - amend rsyslog.conf man page with information on omitting file sync
    resolves: #994127
  - add a patch to support TCP KEEPALIVE in imrelp
    resolves: #1009048
  - add a patch to fix missing note about message repetition in imuxsock
    resolves: #1020431
  - add a patch to prevent division-by-zero errors
    resolves: #996862
  - add a patch to fix the name of the PID file in man page
    resolves: #1009882
  - add a patch to remove references to Google ads from the html docs
    resolves: #1030040
  - add missing image files referenced from the html docs
    resolves: #1031673
  - add a patch to backport the mmcount module
    resolves: #1030206
  - add a patch to support arbitrary number of listeners in imuxsock
    resolves: #1096732
  - remove clean section
    resolves: #869600
  - add a list of bugs fixed by rebasing to 7.4.10
    resolves: #996857, #1007409, #1029910, #1061614, #1070689


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-4
changelog:
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202455
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224335
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1184722
  - add a patch to remove a limit on number of sources in imfile
    resolves: rhbz#1122802
  - add an explicit, versioned requirement on librelp to work
    around an incorrect soname
    resolves: rhbz#1191680
  - make logrotate tolerate missing log files
    resolves: rhbz#1252909
  - replace bundled docs with updated upstream documentation
    remove reference to queue.spoolDirectory
    drop empty NEWS file
    resolves: rhbz#1238451
    resolves: rhbz#1243293


author: Radovan Sroka <rsroka@redhat.com> 7.4.10-7
changelog:
  - fix warning in net.c in debug mode
  - added rsyslog-7.4.10-fix-net-warning.patch
    resolves: rhbz#1388420


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033502


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-1
changelog:
  - Update to Ruby 1.8.7-p374.
    * Remove Patch41: ruby-ppc64-segv-fix.patch; subsumed
    * Remove Patch45: ruby-1.8.7-CVE-2011-0188.patch; subsumed
    * Remove Patch46: ruby-1.8.7-FIPS.patch; subsumed
    * Remove Patch47: ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch; subsumed
    * Remove Patch48: ruby-1.8.7-p352-CVE-2011-4815.patch; subsumed
    * Remove Patch49: ruby-1.8.7-p358-marshal-load-segv-fix.patch; subsumed
    * Remove Patch50: ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch; subsumed
    * Remove Patch51: ruby-2.0.0-add-missing-rexml-require.patch; subsumed
    * Remove Patch52: ruby-1.8.7-p371-CVE-2012-4481.patch; subsumed
    * Remove Patch53: ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch; subsumed
    Resolves: rhbz#830098
  - Enable ECC support, provided by OpenSSL, in Ruby
    * ruby-1.9.3-p482-Fix-build-against-OpenSSL-with-enabled-ECC-curves.patch
    Resolves: rhbz#1033864
  - Exclude test that fails when issuing a certificate with RSA signature and
    DSS1 digest for earlier OpenSSL versions when used in conjunction with
    OpenSSL 1.0.1.
    * ruby-1.9.3-p172-Exclude-failing-tests-written-for-earlier-OpenSSL.patch
    Resolves: rhbz#1034351
  - Rename Tracer.fire to SystemTap.fire to avoid conflict with Ruby's tracer.
    Resolves: rhbz#784766


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-2
changelog:
  - Replace hardcoded MD5 by sha256 to prevent SSL server failure in FIPS mode.
    * ruby-1.8.7-p374-Replace-md5-by-sha256-to-fix-SSL-server-FIPS-compatibility.patch
  - Resolves: rhbz#802946


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163994
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163994


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-8
changelog:
  - Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
  - Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z


author: Nils Philippsen <nils@redhat.com> - 1.0.21-1
changelog:
  - version 1.0.21
  - remove obsolete rpath, hal, genesys-gl841-registers patches
  - update pkgconfig, udev, man-utf8->man-encoding, epson-expression800,
    docs-utf8 patches
  - remove hal conditional
  - package man pages


author: Nils Philippsen <nils@redhat.com> - 1.0.21-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because SANE-enabled software is likely to deal with data coming
    from untrusted sources (client <-> saned via network)


author: Nils Philippsen <nils@redhat.com> - 1.0.21-4
changelog:
  - update udev rules for Fujitsu fi-6110 device (#987890)
  - fix bogus changelog dates
  - fix source URLs


author: <kwenning@redhat.com> - 1.2.1-30
changelog:
  - init-patch updated
  - Rebuild against RHEL-6.9
    Resolves: rhbz#1375244

  -* Mon Apr 4 2016 <kwenning@redhat.com> - 1.2.1-9
  - use SBD_OPTS when calling sbd
    Resolves: rhbz#1313246


author: <kwenning@redhat.com> - 1.2.1-31
changelog:
  - init-patch updated
  - added CONFDIR & INITDIR for distro indep init
  - added stripped down manpage
    Resolves: rhbz#1375244


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix incorrect max cpu frequency
    Resolves: #971053
  - Fix wrong UserModeTime and KernelModeTime
    Resolves: #974071
  - Fix restart of scfbd service in provider-register script
    Resolves: #1179878


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-1
changelog:
  - Update to sblim-sfcb-1.3.11
    Resolves: #633580
  - Compile with --enable-uds, i. e. enable unix domain socket local connect functionality
    Resolves: #620303
  - Create sfcb system group (used by basic authentication with PAM) in pre install scriptlet,
    remove it in post uninstall scriptlet
    Resolves: #618081
  - Fix default location where sfcbrepos is looking for schema files
    and simplify sfcbrepos command in post install sciptlet
    Resolves: #618080


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-2
changelog:
  - Checks for valid pointer before calling free() in providerDrv.c,
    result.c and support.c (backported from upstream)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-4
changelog:
  - Fix memory leak in sblim-sfcb
    Resolves: #1114798
  - Fix a zombie process of openwsmand (defunct) is left behind
    Resolves: #1110106


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-5
changelog:
  - Fix SIGSEGV in tool_mm_flush()
    Resolves: #907204
  - Fix minor init script inconsistencies
    Resolves: #805588


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-1
changelog:
  - Upgrade to upstream 0.1.21 version
  - Drop C2S profile patch since it has been adopted upstream
  - Include datastream forms of benchmarks for Red Hat Enterprise Linux 6
    and Red Hat Enterprise Linux 7
  - Include the kickstart file for United States Government Configuration
    Baseline (USGCB) profile for Red Hat Enterprise Linux 6


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-2
changelog:
  - Re-implement nodev, noexec, and nosuid removable media OVAL checks
    (RH BZ#1185426)
  - Don't include the 'test' profile into the SCAP content (RH BZ#1199946)
  - Document USGCB profile kickstart availability for Red Hat Enterprise Linux 6
    in the scap-security-guide manual page (RH BZ#1133963)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-3
changelog:
  - Rebuild scap-security-guide RPM against openscap >= 1.0.9 in order the
    upstream SCAP Security Guide logo to be rendered properly in the generated
    HTML guide


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-4
changelog:
  - Update R / BR to lightweight openscap-scanner >= 1.0.10-2 package
    (RH BZ#1243396)
  - Update URL to point to official SCAP Security Guide GitHub repository


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-1
changelog:
  - Rebase to upstream 0.1.27 version (RH BZ#1267509, RH BZ#1284045,
    RH BZ#1270329, RH BZ#1250895, RH BZ#1270710, RH BZ#1223865)
  - Perform the spec changes necessary for the rebase:
    * Update path to remediation functions library, list of provided
    kickstart files, path to scap-security-guide(8) manual page, path
    to LICENSE file
    * Drop:
    - scap-security-guide-0.1.21-dev-shm-removable.patch
    - scap-security-guide-0.1.21-dont-include-the-test-profile.patch
    patches since they have been merged upstream
    * Replace:
    - scap-security-guide-0.1.21-document-kickstart-in-manual-page.patch
    with its updated:
    - scap-security-guide-0.1.27-document-kickstarts-in-manual-page.patch
    version to also document inclusion of new kickstart files for Red Hat
    Enterprise Linux 6 that are available in upstream's 0.1.27 release
    * Introduce the new scap-security-guide-doc subpackage (to contain the
    HTML formatted documents containing security guides that have been
    generated from XCCDF benchmarks present in the scap-security-guide package)
    * Include the datastream versions of Firefox and Java Runtime Environment
    (JRE) benchmarks


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-2
changelog:
  - Modify the upstream provided kickstart files for Red Hat Enterprise Linux 6
    to use internal scap-security-guide RPM package rather than upstream git
    repository copies (RH BZ#1251929)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-1
changelog:
  - Rebase to upstream 0.1.28 version
  - Start using consistent IDs for OVAL definitions (RH BZ#1250808)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-2
changelog:
  - Update URL to PCI DSS standard (latest version is v3.1 from April 2015)
  - Enhance title of CNSS No.1253 profile for Red Hat Enterprise Linux 6
    (RH BZ#1284045#c8)
  - Drop 'install_hids' rule from PCI DSS profile for both Red Hat Enterprise
    Linux 6 and 7 (since we don't have an OVAL check for this requirement)


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-298
changelog:
  - Allow isnsd_t to accept tcp connections
  Resolves:rhbz#1365501
  - Add label for alsa_var_lib_t dirs and files.
  Resolves: rhbz#1340150


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-300
changelog:
  - Allow sblim_reposd_t domain to read cert_f files
  Resolves:rhbz#1392382
  - Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs.
  Resolves: rhbz#1392406


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-301
changelog:
  - Allow hald_t to read nvme devices.
  Resolves: rhbz#1389982
  - Allow ftpdctl_t domain to manage own sockets
  Resolves: rhbz#1392525


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-302
changelog:
  - Label /var/lock/kdump as kdump_lock_t.
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-303
changelog:
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565
  - Allow guest-set-user-passwd to set users password
  Resolves: rhbz#1369699


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-304
changelog:
  - Allow _java_t domain to read systemd state.
  Resolves:rhbz#1393938
  - Allow kdumpgui to read/write to nvme filesystem.
  Resolves:rhbz#1323293


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-305
changelog:
  - Fix typo bug sepgsql_contexts file
  Resolves: rhbz#1397703
  - Allow sssd_t domain to manage samba files and dirs.
  Resolves: rhbz#1395403
  - Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
  Resolves: rhbz#1397117
  - Allow consolekit_t domain to manage consolekit_log_t dirs
  Resolves: rhbz#1397802


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-306
changelog:
  - Allow hostname_t domain to manage cluster_tmp_t files
  Resolves: rhbz#1400234
  - Allow ipsec_mgmt_t domain use nsswitch
  Resolves:rhbz#1401611
  - Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
  Resolves:rhbz#1397117


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307
changelog:
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1404152
  - Label /usr/bin/puppet* binaries as puppet_exec_t
  Resolves: rhbz#1386181


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.47-13.1
changelog:
  - setroubleshootd is set to be run as setroubleshoot user instead of root user
  Resolves: rhbz#1349435


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-13
changelog:
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)
  - reserve 175:175 for rhevagent (#709599)
  - reserve 176:176 for apache traffic server - ats(#715266)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703052)
  - do not override already set PROMPT_COMMAND envvar(#691425)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-14
changelog:
  - comment out bad spr-itunes entry from /etc/services(#710185)
  - reserve 177:177 for dhcpd (#738177)
  - reserve 179:179 for sanlock (#738294)
  - reserve 181:181 for wallaby (#772746)
  - reserve 134:134 for cimsrvr (#760178)
  - add ext4 to /etc/filesystems (#771388)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-15
changelog:
  - reserve 180:180 for aeolus (#804203)
  - reserve 182:182 for katello (#804204)
  - reserve 183:183 for elasticsearch (#804205)
  - drop root's supplementary groups (#724007)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-21
changelog:
  - reserve uid 189 for hacluster (#872208)
  - reserve gid 189 for haclient (#872208)
  - reserve 160:160 for swift (openstack-swift) (#991502)
  - reserve 161:161 for glance (openstack-glance) (#991502)
  - reserve 162:162 for nova (openstack-nova) (#991502)
  - reserve 163:163 for keystone (openstack-keystone) (#991502)
  - reserve 164:164 for quantum (openstack-quantum) (#991502)
  - reserve 165:165 uidgid pair for cinder (#991502)
  - reserve 166:166 uidgid pair for ceilometer (#991502)
  - reserve 187:187 for heat (openstack-heat) (#991502)
  - reserve 185:185 for jboss-as (#991502)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-22
changelog:
  - reserve 142:142 for activemq (#1086921)
  - reserve 167:167 for ceph (ceph-common) (#1221042)
  - change reservation for 185:185 from jboss-as to jboss (#1192412)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.39.1-3
changelog:
  - extended smartctl man pages with examples how to use cciss
  - fix crash when starting selftest on megaraid controller


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.42-1
changelog:
  - updated to 5.42 (#698317)
  - improve 3ware raid controller support (#697235)
  - fix SCSI log page sanity check (#784925)


author: Shane Bradley <sbradley@redhat.com> = 3.2-49
changelog:
  - [sosreport] The reports were not generated.
    Resolves: bz1299892

  - [npm/nodejs] Add plugins npm and nodejs.
    The patch contained plugin classes that are not in rhel-6
    which were removed.
    Resolves: bz1368547


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-2
changelog:
  - Add -Wl,-z,relro to the linker flags in order to fix a rpmdiff
    error. These flags used to be provided indirectly by openssl, and after
    openssl stopped exporting them, they were added by
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch
    which was dropped during the rebase
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-3
changelog:
  - Add -Wl,-z,now as well to the link flags.  This flag was present in
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch, and
    pkgwrangler still complains about:
    File /usr/lib/libspice-client-glib-2.0.so.8.5.0 lost GNU_RELRO security
    protection on i686
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-4
changelog:
  - Fix smartcard issues after VM restart (virsh destroy/virsh start)
    Resolves: rhbz#1205171
  - Remove obsolete patches
    Related: rhbz#1185434


author: Fabiano Fidêncio <fidencio@redhat.com> 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242605
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247920
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1265361
  - Add Client capability for windows monitor_config messsage
    Resolves: rhbz#1265359
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1247749
  - Drop isoc packages on low bandwith
    Resolves: rhbz#1276707


author: Pavel Grunt <pgrunt@redhat.com> 0.26-8
changelog:
  - Make grab session related
    Resolves: rhbz#1330652
  - Improve messages in usb redirection dialog
    Resolves: rhbz#1298772
  - Use proxy only when needed
    Resolves: rhbz#1306311


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12
changelog:
  - Fix spicevmc-related crash which could be triggered with older clients
    Resolves: rhbz#1163480
  - Fix crash when using VNC + QXL + rhel-6.0.0 machine type
    Resolves: rhbz#1135372


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12.1
changelog:
  - Avoid race conditions reading monitor configs from guest. This race could
    trigger memory corruption host-side
    Resolves: rhbz#1239124


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-13
changelog:
  - Fix " qemu-kvm: spicevmc.c:324: spicevmc_red_channel_alloc_msg_rcv_buf:
    Assertion `!state->recv_from_client_buf' failed." assertion during migration
    Resolves: rhbz#1264113


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-14
changelog:
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Victor Toso <victortoso@redhat.com> - 0.12.4-15
changelog:
  - Avoid spice assertion when changing sized stream
    Resolves: rhbz#1274575
  - Make red_client_{ref,unref} thread safe to avoid crash
    Resolves: rhbz#1361946


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-16
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-5
changelog:
  - Add support for TIMESTAMP/STRING selection types, this fixes copy and paste
    issues with some applications (vncviewer for example).
    Resolves: rhbz#1117764


author: Fabiano Fidêncio <fidencio@redhat.com> 0.14.0-6
changelog:
  - randr: Make resolution changing more robust
    Resolves: rhbz#1206117, rhbz#1130080 and rhbz#1209550


author: Fabiano Fidêncio <fidencio@redhat.com> 0.14.0-8
changelog:
  - Cannot get same result enablng second monitor after it was disabled using
    Guest's "Display Preference"
    Resolves: rhbz#1086657


author: Victor Toso <victortoso@redhat.com> 0.14.0-12
changelog:
  - Do not allow file-transfer on locked session
    Resolves: rhbz#1323630
  - Do not allow file-transfer on login screen
    Resolves: rhbz#1323640


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-17
changelog:
  - Resolves: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-18
changelog:
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-19
changelog:
  - Resolved: #1334490 - CVE-2016-4554 CVE-2016-4556 squid: various flaws
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-24
changelog:
  - Resolves: #1235114 - Squid crashes with 'assertion failed: disk.cc:377:
    "fd >= 0"' after reloading the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-10
changelog:
  - Resolves: #1330575 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-11
changelog:
  - Related: #1330575 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-12
changelog:
  - Resolves: #1334500 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556
    squid34: various flaws
  - Resolves: #1334507 - CVE-2016-4553 squid34: squid: Cache poisoning 
    issue in HTTP Request handling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-13
changelog:
  - Resolves: #1303053 - Squid crashes with 'assertion failed: disk.cc:377:
    "fd >= 0"' after reloading the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-15
changelog:
  - Resolves: #1415874 - squid34 does not fallback protocol from IPv6 to IPv4
    in HTTPS connection even if the fix in bz1303067 is applied


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Avesh Agrwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-5
changelog:
  - Fix first connection failure when configuration pulled from stdin (#927928)
  - Log the negotiated protocol version to the logs (#1275611)


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-6
changelog:
  - Add support for TLSv1.1 and TLSv1.2, change the default for client from
    SSLv3 to all version support
  - Add support for DH and ECDH ciphersuites on server


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - removed defaults option requiretty from /etc/sudoers
    - backported pam_service and pam_login_service defaults options
    - implemented a new defaults option for changing netgroup processing
      semantics
    - fixed visudo's quiet cli option
    Resolves: rhbz#1248695
    Resolves: rhbz#1247231
    Resolves: rhbz#1241896
    Resolves: rhbz#1197885
    Resolves: rhbz#1233205


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - fixed ldap's and sssd's sudoOption value and remove quotes
    - fixed ldap's and sssd's sudoOption whitespaces parse problem
    Resolves: rhbz#1144422
    Resolves: rhbz#1279447


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - search also by user id when fetching rules from LDAP
    Resolves: rhbz#1135531


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-22
changelog:
  - RHEL-6.8 erratum
    - fixed potential getcwd failure, resulting in Null pointer exception 
    Resolves: rhbz#1284886


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-23
changelog:
  - RHEL-6.8 erratum
    - fixed handling of closefrom_override defaults option
    Resolves: rhbz#1309976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-24
changelog:
  - RHEL-6.8 erratum
    - fixed a bug causing that non-root users can list privileges of
      other users
    Resolves: rhbz#1312481


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-25
changelog:
  - RHEL-6.9 erratum
    - Fix "sudo -l command" in the LDAP and SSS backends when the command
      is not allowed.
    Resolves: rhbz#1374410
    - Fix sudo log file wrong group ownership
    Resolves: rhbz#1330001
    - Fix sudo parsing sudoers with user's locale
    Resolves: rhbz#1318374


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-26
changelog:
  - RHEL-6.9 erratum
    - Fix race condition when creating /var/log/sudo-io direcotry
    Resolves: rhbz#1365156


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-24
changelog:
  - resolves: #921612
    fix issues when sa data files weren't correctly overwritten in some cases.
    Part of this fix is lowering the line when the sa data files are kept
    in subfolders (from 28 to 25 days), and because of this, the default history
    value was also lowered from 28 to 25 days.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-25
changelog:
  - related: #921612
    reverted the boundary when the sa data files are stored in directories
    and default history value back to 28. Without the revert, backward
    compatibility could be broken in some cases.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-26
changelog:
  - resolves: #1110851
    added sysstat(5) man page describing /etc/sysconfig/sysstat file
  - resolves: #1102603
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-27
changelog:
  - resolves: #1124180
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-28
changelog:
  - resolves: #1224878
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #887231
    fixed segfaults on bogus localtime input
  - resolves: #1185057
    added two new columns to iostat: r_await and w_await
  - resolves: #1188612
    fixed description of %util field in sar(1) and iostat(1) man pages


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-31
changelog:
  - related: #1224878
    in some corner cases, pidstat could still output values for % CPU bigger
    than 100; this commit fixes the issue


author: Michal Sekletar <msekleta@redhat.com> - 9.0.4-32
changelog:
  - cifsiostat: report correct number of open/closed files (#1346844)
  - sar: output timestamps when running with ko_KR.UTF-8 locale (#1363947)


author: Nils Philippsen <nils@redhat.com>
changelog:
  - use better ugettext to allow anaconda to use the time zone widget even with
    encodings other than UTF-8


author: Nils Philippsen <nils@redhat.com> - 1.9.59-1
changelog:
  - require docs in enterprise builds
  - configure iburst mode instead of ntpdate upon boot (original patch by Radek
    Nováček)
  - fix configuring ntp.conf template


author: Jan Synáček <jsynacek@redhat.com> - 1.9.60-3
changelog:
  - replace spaces with underscores when writing ZONE variable into /etc/sysconfig/clock (#956284)
  - set time zone before date/time (#622494)
  - catch unavailable display (#676336)
  - update translations (#814582)


author: Roman Rakus <rrakus@redhat.com> - 2.0.5-13
changelog:
  - Use last value when multiple values are mentioned
  - Don't traceback when value is auto
    Resolves: #829386


author: Roman Rakus <rrakus@redhat.com> - 2.0.5-15
changelog:
  - Set timout for dbus calls to 5 minutes
  - Don't (re)start service when setting auto option
    Resolves: #858280


author: Martin Milata <mmilata@redhat.com> - 2.0.5-16
changelog:
  - Only list unused partitions as raw devices
    Resolves: #1017611
  - Fix loading nonexistent raw device
    Resolves: #828667
  - Allow updating kdump memory without hitting enter
    Resolves: #877004
  - Don't start kdump if there's no reserved memory
    Resolves: #962724
  - Correct the "auto" memory threshold
    Resolves: #1030533
  - Add support for grub on EFI systems
    Resolves: #977981


author: Martin Milata <mmilata@redhat.com> - 2.0.5-17
changelog:
  - d-bus: require authentication for getting list of unused partitions (in
    non-interactive sessions)


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-18
changelog:
  - Don't leave symlinks in /tmp after adding a printer (bug #556548).
  - Fixed probe-printer-typo.patch (bug #579864).
  - Fixed stack overflow in pycups (bug #584991).
  - Moved COPYING file from main package to libs subpackage (bug #613708).
  - Fixed gtk_label_autowrap.py by updating it to latest version (bug #633595).
  - Set D-Bus timeout when calling asynchronously (bug #634252).
  - More translatable strings marked as such (bug #634436).
  - Backport translations from upstream (bug #634436).
  - Don't rename when names differ only in size of characters (bug #636523).
  - Stub out getJockeyDriver_thread() (bug #639624).
  - Applet could cause high cupsd CPU usage (bug #645426).
  - Don't crash when DISPLAY is unset (bug #676339, bug #676343).
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (bug #708519).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-23
changelog:
  - Use thread-local storage for password callback function (bug #744519).
  - Don't handle tooltips during mainloop recursion (bug #739745).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-24
changelog:
  - Fixed pycups documentation (bug #854937).
  - Prevent pycups segmentation fault when handling UTF-8 input (bug #1063224).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.1.16-26
changelog:
  - 1333633 - [ALL_LANG][RHEL6.8 RC][system-config-printer] - Translation incomplete
  - 784817 - Segfault when moving / removing printer from class


author: Nils Philippsen <nils@redhat.com> - 1.2.106-1
changelog:
  - fix startup if max uid/gid is allocated
  - attempt to mkdir home directory instead of using os.access()
  - cope better with deleting auto-mounted home directories
  - restore context of home directories after creating, also use umask of 0700
    (u=rwx,go=)
  - make most password problems warnings, not errors (#656356)
  - ask if non-ASCII password should be used (#646876)
  - add forced password change on next login (#656219)
  - pick up translation updates


author: Nils Philippsen <nils@redhat.com> - 1.2.106-6
changelog:
  - fix account expiration if inactive default is set (#841886)
  - apply fix to Japanese translation (by Naomi Nakakita, #801652)


author: Samantha N. Bueno <sbueno@redhat.com> - 1.8.1-1
changelog:
  - Upgrade to 1.8.1 release
    Resolves: rhbz#1037469
  - Rebase patches, including one I missed a chunk of last release
    Resolves: rhbz#1065320


author: Tony Camuso <tcamuso@redhat.com> - 1.8.3-1
changelog:
  - Upgrade t0 1.8.3 release
  - Removed 1.8.1 patches, since the've been merged
  - Fixed bad day-of-week of first entry in changelog
  - updated .gitignore
    Resolves: rhbz#1043060


author: Tony Camuso <tcamuso@redhat.com> - 1.9.4-1
changelog:
  - Needed an important upsteam fix for bz listed below. Rather than
    add more patches to the already heavily patched 1.8.3, decided to
    simply upgrade to 1.9.4, which includes all the patches in 1.8.3-2
    plus the ones needed to resolve the bz.
    Resolves rhbz#1323660


author: Tony Camuso <tcamuso@redhat.com> - 1.9.4-3
changelog:
  - Allow install on UEFI platform, but with warning message, in order to
    permit completion of provisioning. tboot remains unsupported by RHEL
    on UEFI platforms.
    This is the -2 release change.
    Resolves: rhbz#1365140
  - MANPATH should not be used as install dir. Man files should be installed
    into DISTDIR not into '/' of system.
    This is the -3 release change.
    Resolves: rhbz#1321857


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-4.20090921gitdf3cb4.2
changelog:
  - add support for pcap_setdirection, -P commandline flag (#1099701)
  - add support for nano second timestamps, -J flag and --timestamp-preciosion (#1045601)
  - fix cdp dissector, allow zero-length data frames (#1130111)
  - allow specifying NIC names which start with number (#972396)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-5.20090921gitdf3cb4.2
changelog:
  - regenerate patch for pcap_setdirection support. Added detection of the needed
    libpcap functionality to configure script


author: Michal Ruprich - 14:4.0.0-10.20090921gitdf3cb4.2
changelog:
  - Resolves: #1339662 -  Race condition between SIGALARM handler function verbose_stats_dump() and main()->pcap_close()


author: Michal Ruprich - 14:4.0.0-11.20090921gitdf3cb4.2
changelog:
  - Related: #1339662 - Race condition between SIGALARM handler function verbose_stats_dump() and main()->pcap_close()
                      - Previous patch changed to upstream fix


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.17-36
changelog:
  - fix regression with 'jobs' builtin output not going to stdout (#1338986)
  - fix several regressions in tcsh-6.17.00-quote-backslashes-properly.patch (#1334751)


author: Tim Waugh <twaugh@redhat.com> 1.1.0-16
changelog:
  - Unknown pseudo-encodings (those with negative values) would cause
    vncviewer to crash (bug #1121041).
  - Set source as well as target when building java as some JDKs require
    this (bug #1078427).


author: Jan Grulich <jgrulich@redhat.com> 1.1.0-17
changelog:
  - Rebuild against xorg-x11-server-1.17
    Resolves: bz#1248637
  - Added Requires: libXfont
    Resolves: bz#1011315
  - Remove lock file after stopping vncserver service
    Resolves: bz#1236559


author: Jan Grulich <jgrulich@redhat.com> 1.1.0-20
changelog:
  - Rebuild against fixed xorg-x11-server to avoid automatical disconnects
    when initiazed from xinetd
    Resolves: bz#1390458


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-1
changelog:
  - Update to upstream version 2.11.0
    Resolves: #633577
  - Improve package to comply multilib policy
    Resolves: #607722
  - Don't strip debug information
    Resolves: #693389
  - Change build options
    Resolves: #694513


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-2
changelog:
  - Add -libs requirement with explicit version to the main package
  - Build with -fno-strict-aliasing
  - Use correct init script
  - Add OpenSLP support
    Resolves: #712525


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-3
changelog:
  - Backport upstream patch which enables the embedded instanaces to have
    correct empty string values
    Resolves: #796191
  - Add "cim-server" to provides
    Resolves: #799040


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-1
changelog:
  - Update to upstream version 2.12.0
    Resolves: #825471, #739118, #716474
  - Change post created symlinks group owner to 'pegasus'
    Resolves: #759064
  - Fix invocation of useradd without specifying a UID
    Resolves: #800319
  - Fix initscript is not world readable
    Resolves: #824297


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-2
changelog:
  - Fix local-or-remote-auth patch to work with IPv6 and with enabled
    privilege separation
    Resolves: #869664


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-4
changelog:
  - Backported and slightly modified sslBackwardCompatibility option for disabling
    unsafe SSLv3 protocol
    Resolves: #1238329


author: John Kacur <jkacur@redhat.com> - 1.0.5-8
changelog:
  - trace-cmd: Use splice to filter out rest of buffer {746656}
  - trace-cmd: Do not use threads for extract {746656}
  Resolves:bz746656


author: John Kacur <jkacur@redhat.com> - 1.0.5-11
changelog:
  - Rework spec to use apply patches separate from upstream
  - trace-cmd-Add-checks-for-invalid-pointers-to-fix-seg.patch (879814)
  Resolves:bz879814


author: John Kacur <jkacur@redhat.com> - 2.2.4-3
changelog:
  - trace-cmd-don-t-call-free-on-tracing-and-path-more-t.patch
  - trace-cmd-trace-cmd.c-Don-t-deref-re-if-it-is-NULL.patch
  - trace-cmd-trace-recorder.c-Prevent-free-of-unitializ.patch
  - trace-cmd-trace-util.c-Prevent-resource-leak-by-clos.patch
  Resolves: rhbz#1288579


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-10
changelog:
  - fix: virtual-guest profile should not deploy the nobarrier option
    resolves: rhbz#886956
  - fix: disable transparent hugepages in latency-performance profile
    resolves: rhbz#887355


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-12
changelog:
  - fix: tuned incorrectly sets readahead values when new device is inserted
    resolves: rhbz#905077
  - fix: there is a race when multiple devices are inserted
    resolves: rhbz#904062


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-13
changelog:
  - add support for upstream THP
    resolves: rhbz#912788
  - added sap profile, backported features it needs
    resolves: rhbz#910838
  - made elevator settings customizable
    resolves: rhbz#987547
  - fixed usb_autosuspend and bluetooth functions
    resolves: rhbz#982756
  - increased kernel.sched_migration_cost in virtual-host profile
    resolves: rhbz#969491
  - documented virtual-guest and virtual-host profiles
    resolves: rhbz#964187
  - fixed typo in tuned-adm help
    resolves: rhbz#963821
  - modified latency-performance profile to lock CPU to C1
    resolves: rhbz#961792
  - added support for /etc/sysctl.d
    resolves: rhbz#959732
  - fixed permissions of /var/run/tuned/pmqos-static.pid
    resolves: CVE-2013-1820
  - fixed diskdevstat labels
    resolves: rhbz#885080
  - quiet errors when remounting FS with nobarriers
    resolves: rhbz#838512


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-15
changelog:
  - dynamically changing symlinks excluded from the RPM verification
    resolves: rhbz#1017366
  - reversed reading of sysctl configuration in SYSCTL_POST to follow
    RHEL-6 behavior
    resolves: rhbz#1036049
  - fixed typo in latency-performance profile regarding SYSCTL_POST
    resolves: rhbz#1064062
  - added support for s390 block devices (/dev/dasd)
    resolves: rhbz#1129936
  - added support for Xen VS devices (/dev/xvd)
    resolves: rhbz#1159963
  - increased vm.max_map_count in sap-netweaver profile
    resolves: rhbz#1174253


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-16
changelog:
  - added oracle profile
    resolves: rhbz#1196294
  - ktune now doesn't revert sysctl settings if not explictly requested
    resolves: rhbz#1111416


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-18
changelog:
  - switched to sysfs for governor switching, cpuspeed config is still patched
    for compatibility
    related: rhbz#1313489


author: Tomas Bzatek <tbzatek@redhat.com> - 1.0.1-8.el6
changelog:
  - Allow extra mount options from udev rules (#673102, #681875)
  - Do not force-unmount devices marked as DM_SUSPENDED (#1121742)


author: Tomas Smetana <tsmetana@redhat.com> - 1.0.1-11.el6
changelog:
  - Fix LUKS errors on re-inserting the encrypted disk
  - Plug a memory leak
  - Related: rhbz#1183131
  - Related: rhbz#965206


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch,
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-2
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196133 #1196121 #1196125 #1196129


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-3
changelog:
  - Fix problem with symlink errors in archive with many files
  - add support of non-latin and non-unicode encodings for filenames
    Resolves: rhbz#740012 rhbz#885540


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-4
changelog:
  - Added patch for build option "-Werror=format-security"
  - Fix print of non-ascii filenames
    Resolves: rhbz#1284896


author: Mark Wielaard <mjw@redhat.com> 3.8.1-4
changelog:
  - Add valgrind-3.8.1-ppc32-instr-magic.patch. (#1142151)
  - Add valgrind-3.8.1-hwcaps-no-lzcnt.patch. (#1158802)
  - Add valgrind-3.8.1-llcache-size.patch. (#1163777)


author: Mark Wielaard <mjw@redhat.com> 3.8.1-5
changelog:
  - Add tests filter to valgrind-3.8.1-llcache-size.patch. (#1163777)
  - Add valgrind.h update to valgrind-3.8.1-ppc32-instr-magic.patch. (#1142151)


author: Mark Wielaard <mjw@redhat.com> - 3.8.1-7
changelog:
  - Add valgrind-3.8.1-ethtool.patch. (#1191404)
  - Add valgrind-3.8.1-ppc64-priority.patch. (#1191414)


author: Eduardo Habkost <ehabkost@redhat.com> - vgabios-0.6b-3.2.el6
changelog:
  - Build only on x86_64
  - Resolves: bz#554862
    (vgabios should not be shipped on i686/ppc64/s390x, only on x86_64)


author: Eduardo Habkost <ehabkost@redhat.com> - vgabios-0.6b-3.3.el6
changelog:
  - vgabios-use-VBE-LFB-address-from-PCI-base-address-if-present.patch [bz#569473]
  - vgabios-qxl-vgabios.patch [bz#569473]
  - Resolves: bz#569473
    (spice: Need vgabios for qxl device)


author: Eduardo Habkost <ehabkost@redhat.com> - vgabios-0.6b-3.4.el6
changelog:
  - Add VGABIOS-lgpl-latest.qxl.bin to file list
  - Add Provides: vgabios-qxl to allow other packages to require vgabios.qxl
  - Related: bz#569473
    (spice: Need vgabios for qxl device)


author: Eduardo Habkost <ehabkost@redhat.com> - vgabios-0.6b-3.5.el6
changelog:
  - vgabios-Revert-qxl-vgabios.patch [bz#654639]
  - vgabios-Makefile-cleanup.patch [bz#654639]
  - vgabios-Add-defines-for-PCI-IDs.patch [bz#654639]
  - vgabios-Add-qemu-stdvga-pci-bios.patch [bz#654639]
  - vgabios-update-pci_get_lfb_addr-for-vmware-vga.patch [bz#654639]
  - vgabios-Add-qemu-vmware-vga-pci-bios.patch [bz#654639]
  - vgabios-Add-qemu-qxl-vga-pci-bios.patch [bz#654639]
  - Include stdvga and vmware bios images in the package
  - Resolves: bz#654639
    ([vgabios] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)


author: Eduardo Habkost <ehabkost@redhat.com> - vgabios-0.6b-3.6.el6
changelog:
  - vgabios-add-DPMS-support-to-cirrus-vgabios.patch [bz#691344]
  - Resolves: bz#691344
    (vgabios is missing DPMS support (for S3 support for Win guests))


author: Michal Novotny <minovotn@redhat.com> - vgabios-0.6b-3.7.el6
changelog:
  - vgabios-Fix-get-video-mode-vgabios-call.patch [bz#840087]
  - Resolves: bz#840087
    (Unable to boot rhev-hypervisor6.iso in virtual machine for testing.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.6b-3.7.el6
changelog:
  - vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1421574]
  - Resolves: bz#1421574
    ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016)


author: Marek Kasik <mkasik@redhat.com> 2.28.1-2
changelog:
  - Don't crash when the history file is empty (#552076)
  - Fix mixed use of spaces and tabs in spec file
  - Set %defattr for devel subpackage
  - Add ChangeLog to docs of devel subpackage
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> 2.28.1-8
changelog:
  - Backport RDP support
  - Backport scaling of RDP sessions
  - Backport Minimize button
  - Backport storing of credential to keyring
  - Backport translations for new strings
  - Resolves: #1215093


author: Marek Kasik <mkasik@redhat.com> 2.28.1-10
changelog:
  - Don't capture key events of other tabs
  - Allow different logins to the same host
  - Ignore active-plugins GConf key
  - Related: #1215093


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add vino-2.8.1-sanity-check-fb-update.patch
    Fix for CVE-2011-0904 and CVE-2011-0904
    - Bugs #694456, #694455


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add reachability.patch
    Remove UI about whether the is only reachable locally or not.
    Fix for CVE-2011-1164
    - Bug #553477


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-29
changelog:
  - Use correct signal and callback names to catch cpu-threads property changes (rhbz#1190641)
  - Fix crash caused by closing an unowned fd (rhbz#1174464)


author: Pavel Hrdina <phrdina@redhat.com> - 0.9.0-32
changelog:
  - console: add support to forget password (rhbz#1301841)
  - create: report an error if storage doesn't exist for import installation (rhbz#1305209)
  - uihelpers: fix detection of networks (rhbz#1333290)


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-9
changelog:
  - Update translations
    Resolves: rhbz#1194474
  - Add support for proxy-uri libgovirt property
    Resolves: rhbz#1292765


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-10
changelog:
  - Set guest name/uuid when using VNC
    Resolves: rhbz#1293878
  - Fix crash when disabling last enabled display
    Resolves: rhbz#1294937


author: Jonathon Jongsma <jjongsma@redhat.com> - 2.0-12
changelog:
  - The last change was incomplete. We need to define the OSID for the build in
    order for the minum version check to work properly.
    Resolves: rhbz#1295944


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-13
changelog:
  - Use --with-buildid for RHEL6 builds
    Resolves: rhbz#1300639
  - Set useful values for MIM_DISPLAY_{WIDTH,HEIGHT} and use them for
    desktop-{width,height} properties.
    Resolves: rhbz#1296878


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-14
changelog:
  - Monitor mapping doesn't properly adjust resolutions
    Resolves: rhbz#1309234
  - Return early on empty monitor mapping
    Resolves: rhbz#1304648
  - Update translations
    Resolves: rhbz#1194474


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.0-15
changelog:
  - Only use active ISO domains for foreign menu
    Resolves: rhbz#1313376
  - Allow to cancel authentication without showing error dialog
    Resolves: rhbz#1318575
  - Set display menu not sensitive when needed
    Resolves: rhbz#1360253
  - Set toolbar buttons not sensitive when needed
    Resolves: rhbz#1360253
  - Do not show usbredir button without session
    Resolves: rhbz#1360253
  - GtkRecentChooserWidget is not suitable for mnemonic activation
    Related: rhbz#1351562
  - Use a different mnemonic for Connection Address widget
    Related: rhbz#1351562
  - Add some missing mnemonics to menu items
    Resolves: rhbz#1351890
  - Add mnemonics for each display item
    Resolves: rhbz#1351890
  - Avoid crashing when using invalid video config
    Resolves: rhbz#1310974
  - Do not crash on NULL display
    Resolves: rhbz#1310974
  - Do not ignore usb-filter in vv-file
    Resolves: rhbz#1327525
  - Add parameter for client monitors in monitor-mapping
    Resolves: rhbz#1351881
  - Use debug to inform about smartcard shortcuts state
    Related: rhbz#1351876
  - Check validity of hotkey
    Resolves: rhbz#1351876


author: Pavel Grunt <pgrunt@redhat.com> - 2.0-16
changelog:
  - Inform about unix socket connection failure
    Resolves: rhbz#1377214
  - Fix format of displayed string for it_IT
    Resolves: rhbz#1325127


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.1
changelog:
  - Add support for IBM PowerVM Lx86 Linux/x86 emulator (RHBZ#668857).
  - Move configure into build (not prep).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.2
changelog:
  - Add support for Microsoft HyperV (RHBZ#670272).
  - Add support for Hitachi Virtage (RHBZ#670530).
  - Add support for EC2 (Xen) instances (RHBZ#671126).  This includes
    backporting the test framework and enabling tests.
  - Add support for IBM Systemz z/VM, LPAR (RHBZ#671132).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.4
changelog:
  - Various improvements to the wording in the manual page.
    resolves: rhbz#672285
  - Confirm support for Microsoft HyperV and add a regression test.
    resolves: rhbz#670272


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.1
changelog:
  - Rebase to virt-what 1.11.
    resolves: rhbz#672211
  - Add patch "IA64 Xen HVM should print 'xen-hvm' not 'xen-domU'" from upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.2
changelog:
  - Add patch to fix dmidecode detection of Hitachi Virtage
    (thanks Satoru Moriya, Masaki Kimura)
    resolves: rhbz#829427


author: Martin Osvald <mosvald@rehat.com> - 2.2.2-15
changelog:
  - Resolves: #816486 - Timestamp problem
  - Resolves: #849993 - deny_file, hide_file
  - Resolves: #863061 - "service vsftpd stop" not stopping all vsftpd processes
  - Resolves: #894340 - The vsftpd doesn't remove failed upload when the delete_failed_uploads
    is enabled and the network cable is unplagged
  - Resolves: #1058695 - [RFE] vsftpd does not support DHE cipher suites
  - Resolves: #1058710 - [RFE] vsftpd does not support ECDHE cipher suites
  - Resolves: #1065361 - closing a non-opened file when connection fails with a message "Security: Bad IP connecting." 
  - Resolves: #1103754 - ssl_request_cert paragraph in the vsftpd.conf man page gets rendered incorrectly
  - Resolves: #1182928 - [RFE] vsftpd should permit specified TLS versions only.


author: Tomas Hozza <thozza@redhat.com> 1.12-5
changelog:
  - Fix the parsing of weblink when doing recursive retrieving (#960137)
  - Fix errors found by static analysis of source code (#873216)


author: Tomas Hozza <thozza@redhat.com> - 1.12-8
changelog:
  - Added build dependency needed to run HTTP unit tests (Related #1295847)
  - Explicitly disabled IDN/IRI support during build due to QA TPS test failures (Related #1295847)


author: Peter Hatina <phatina@redhat.com> - 1.8.10-16
changelog:
  - security patches
  - Resolves: CVE-2014-8710
              CVE-2014-8711
              CVE-2014-8712
              CVE-2014-8713
              CVE-2014-8714
              CVE-2015-0562
              CVE-2015-0564


author: Martin Sehnoutka <msehnout@redhat.com> - 1.8.10-21
changelog:
  - Resolves: #1222902 - Encrypt-then-MAC TLS extension unrecognised
  - Patch also include master secret extension decoding in TLS


author: Martin Sehnoutka <msehnout@redhat.com> - 1.8.10-24
changelog:
  - Related: #1245887
  - segfault with CVE-2013-4075 capture
  - valgrind error with CVE-2015-3812 capture


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-1
changelog:
  - Update to 0.7.3 - for nl80211 and background scanning (rh #713280)
  - Drop upstreamed and backported patches


author: Dan Williams <dcbw@redhat.com> - 1:0.7.3-4
changelog:
  - Fix issues with Opportunistic/Proactive Key Caching (OKC) (rh #813579)
  - Be less aggressive when choosing to roam (rh #837402)
  - Don't install manpage for wpa_gui (rh #672976)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-5
changelog:
  - Add domain_match config option from upstream (rh #1186806) (rh #1178263)
  - Include peer certificate in EAP events for use by clients
  - Add dbus signal for information about server certification
  - eapol_test: Add option for writing server certificate chain to a file


author: Lubomir Rintel <lrintel@redhat.com> - 1:0.7.3-8
changelog:
  - Enable syslog logging support (rh #822128)
  - Support run-time rotation the debug log file (rh #908306)
  - Fix scriptlet dependencies (rh #712848)
  - Enable timestampes in logs (rh #1150004)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-11
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#961501)
  - xfs_io: Update  man page to include chproj, lsproj (#962394)
  - xfs_io: Remove broken setfl command (#962394)
  - xfs_logprint: Handle multiply-logged fields (#962397)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#964216)
  - xfs_repair: avoid segfault with ag_stride (#93904)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-15
changelog:
  - libxfs: restrict platform_test_xfs_fd to regular files (#1018751)
  - xfs_repair: avoid segfault if reporting progress early in repair (#1020438)
  - xfs_fsr: fix SWAPEXT failures under selinux (#1024702)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-16
changelog:
  - xfs_copy: do not exit with error code if we succeed (#1100107)
  - xfs_copy: fix corruption when source fs sector size is > 512 bytes (#1104956)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-17
changelog:
  - xfs_quota: Allow user project starting with digits (#1167413)
  - xfs_repair: Don't validate symlink component lengths (#1171267)
  - xfs_repair: Handle log in allocation group zero (#1215616)
  - xfs_io: deprecate -F flag (#1136742)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-20
changelog:
  - xfs_logprint: Fix some inode logging corner cases (#1027075)
  - xfs_fsr: Fix more selinux-related failures (#1225651)
  - xfs_repair: Detect reserved attribute names (#1304285)


author: Hans de Goede <hdegoede@redhat.com> - 7.7-10
changelog:
  - fontsproto-2.1.3
  - videoproto-2.3.2
  - xextproto-7.3.0
  - xproto-7.0.26
  - Cherry pick some unreleased fixes from upstream git


author: Adam Jackson <ajax@redhat.com> 1.17.4-7
changelog:
  - Add bug-compatibility for exposure event generation for backing store's
    Always mode, and re-enable the feature


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-72
changelog:
  - Add ftp_disable_epsv config option.
  - Resolves: bug#1293363
  - Honor proxy=_none_ set in yum.conf.
  - Resolves: bug#1293385


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-76
changelog:
  - Remove "username" and "password" options from yum.conf man page.
  - Resolves: bug#1367861
  - Fix reget problems with simple md filenames.
  - Resolves: bug#1155687


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-77
changelog:
  - Filter duplicate packages from different repos in doPackageLists(pkgnarrow='obsoletes').
  - Resolves: bug#1272828


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-30
changelog:
  - Add missing manpages.
  - Related: bug#981773
  - needs-restarting: catch IOError.
  - Related: bug#1078724


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-32
changelog:
  - post-transaction-actions: allow colons in command part.
  - Resolves: bug#1134973
  - ovl plugin: new plugin for overlayfs issue workaround.
  - Resolves: bug#1260977


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-33
changelog:
  - Fix yum-security manpage.
  - Resolves: bug#865694
  - Resolves: bug#1208155
  - Add libxml2-python to Requires for repo-rss.
  - Resolves: bug#1155093
  - yumdownloader: fix description of --archlist in the manpage.
  - Resolves: bug#1165661
  - Add missing options to reposync manpage.
  - Resolves: bug#1189033
  - Exclude dups from the list of security updates.
  - Resolves: bug#1209212
  - yum-config-manager: update config file specified using -c option.
  - Resolves: bug#1225753
  - yum-config-manager: require \* syntax to disable all repos.
  - Resolves: bug#1225754
  - Remove -v from repoquery man page.
  - Resolves: bug#1285748


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-34
changelog:
  - Fix 'updateinfo list available' logic and make 'updates' the default.
  - Resolves: bug#1144887
  - Fix updateinfo to exclude wrong arch updates.
  - Resolves: bug#1191313


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-36
changelog:
  - Fix performance issue when excluding dups from the list of security updates.
  - Related: bug#1209212


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-38
changelog:
  - Fix count of applicable security updates.
  - Resolves: bug#1347813
  - auto-update-debuginfo: fix check for repos in opts.
  - Resolves: bug#1293982
  - yum-plugin-verify: set exit status to 1 in case of problems.
  - Resolves: bug#1313574
  - repoquery: fix --pkgnarrow=installed.
  - Resolves: bug#1280453


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-39
changelog:
  - Filter duplicates when counting security updates.
  - Resolves: bug#1272025
  - Update yum-verify man page.
  - Related: bug#1347813


