# changelog

author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-2
changelog:
  - Fix CVE-2013-4419: insecure temporary directory handling for
    guestfish's network socket
    resolves: rhbz#1019737


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib64 before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Uri Lublin <uril@redhat.com> - 0.12.0-13
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#950029
    Resolves: rhbz#956345


author: Uri Lublin <uril@redhat.com> - 0.12.3-1
changelog:
  - Rebase to upstream 0.12.3 + some additional patches
    Resolves: rhbz#952671
    Resolves: rhbz#884812
    Resolves: rhbz#918472
    Resolves: rhbz#958276
    Resolves: rhbz#978403


author: Uri Lublin <uril@redhat.com> - 0.12.4-1
changelog:
  - Rebase to upstream 0.12.4
    Resolves: rhbz#952671
    Resolves: rhbz#859027
    Resolves: rhbz#823472
    Resolves: rhbz#961848
    Resolves: rhbz#977998
    Resolves: rhbz#887775


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-4
changelog:
  - Fix spice-server crash when client sends a password which is too long
    Resolves: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Make sure we build with -Wl,-z,relro. We used to be getting that flag
    from openssl, but this is no longer the case, and rpmdiff gave a huge
    warning about it being gone
    Related: rhbz#999839 (CVE-2013-4282)


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib64 before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Yonit Halperin <yhalperi@redhat.com> - 0.12.0-12.el6_4.1
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#956984
    Resolves: rhbz#961427


author: Brian C. Lane <bcl@redhat.com> 2.1-22
changelog:
  - Add PreP GUID support
    Resolves: rhbz#1054283
  - Fix busy partition detection on devices witout sequential minor device numbers
    Resolves: rhbz#1018075
  - Fix align-check in interactive mode
    Resolves: rhbz#975478


author: Brian C. Lane <bcl@redhat.com> 2.1-23
changelog:
  - Drop the warning about greater than 512-byte sector sizes being experimental
    Resolves: rhbz#929319


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-33
changelog:
  - Resolves #1051382 - IPA Replica installation fails when using an external CA
  - Test patch to filter out invalid XML and provide additional debugging
    information
  - Resolves #1083170 - Prevent LDAP Attributes from being affected by Locale
  - Resolves #1096142 - IPA replica setup fails during CA setup with
                        "unable to parse xml"
  - Resolves #1061442 - RFE - ipa-server should keep backup of CS.cfg
  - Resolves #1055080 - Giant /var/log/pki-ca/debug


author: Remi Collet <rcollet@redhat.com> - 5.3.3-29
changelog:
  - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
    extension not provided or git binary patches (#1064027)
  - odbc: fix incompatible pointer type (#1053982)
  - mysqli: fix possible segfault in mysqli_stmt::bind_result
    php bug 66762 (#1069167)
  - mysql: fix php_mysql_fetch_hash writes long value into int
    php bug 52636 (#1054953)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-31
changelog:
  - soap: fixRFC2616 transgression (#1045019)
  - fix static calling in non-static method (#953786)
  - fix autoload called from closing session (#954027)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-34
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Jan Kaluza <jkaluza@redhat.com> - 5.3.3-35
changelog:
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480


author: Remi Collet <rcollet@redhat.com> - 5.3.3-36
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.3.3-37
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-38
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670


author: Rafael Aquini <aquini@redhat.com> [2.6.32-495.el6]
changelog:
  - [powerpc] pci: Improve device hotplug initialization (Gustavo Duarte) [1084398]
  - [powerpc] pci: fix PCI-e devices rescan issue on powerpc platform (Gustavo Duarte) [1084398]
  - [powerpc] pci: Cleanup device dma setup code (Gustavo Duarte) [1084398]
  - [pci] Add pcibios_add_device (Gustavo Duarte) [1084398]
  - [pci] fix undefined reference to 'pci_fixup_final_inited' (Gustavo Duarte) [1084398]
  - [pci] call final fixups hot-added devices (Gustavo Duarte) [1084398]
  - [mm] vmscan: Fix memcg forced scan of anonymous pages (Jerome Marchand) [1124895]
  - [mm] try_to_unmap_cluster() should lock_page() before mlocking (Jacob Tanenbaum) [1093081] {CVE-2014-3122}
  - [video] fbmem: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035242] {CVE-2013-2596}
  - [s390] add dummy io_remap_pfn_range() to asm/pgtable.h (Jacob Tanenbaum) [1035242] {CVE-2013-2596}
  - [mm] add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035242] {CVE-2013-2596}
  - [hv] hv_fcopy: fix a race condition for SMP guest (Jason Wang) [1118123]
  - [hv] util: Fix a bug in the KVP code (Jason Wang) [1118123]
  - [hv] vmbus: Fix a bug in the channel callback dispatch code (Jason Wang) [1118123]
  - [scsi] virtio_scsi: fix memory leak on full queue condition (Fam Zheng) [1111485]
  - [scsi] storvsc: Correctly handle TEST_UNIT_READY failure (Jason Wang) [1120468]
  - [scsi] storvsc: Set srb_flags in all cases (Jason Wang) [1120468]
  - [scsi] storvsc: Implement a eh_timed_out handler (Jason Wang) [1120468]
  - [scsi] storvsc: Fix a bug in handling VMBUS protocol version (Jason Wang) [1120468]
  - [scsi] storvsc: Filter commands based on the storage protocol version (Jason Wang) [1120468]
  - [scsi] storvsc: Set cmd_per_lun to reflect value supported by the Host (Jason Wang) [1120468]
  - [scsi] storvsc: Change the limits to reflect the values on the host (Jason Wang) [1120468]
  - [fs] xfs: always do log forces via the workqueue (Eric Sandeen) [1028831]
  - [fs] xfs: Do background CIL flushes via a workqueue (Eric Sandeen) [1028831]
  - [fs] vfs: fix ELOOP error handling in path_mountpoint() (Ian Kent) [1121323] {CVE-2014-5045}
  - [fs] vfs: fix ref count leak in path_mountpoint() (Ian Kent) [1121323] {CVE-2014-5045}
  - [fs] xfs: remove xfs_itruncate_data (Brian Foster) [1113418]
  - [fs] xfs: split xfs_itruncate_finish (Brian Foster) [1113418]
  - [fs] xfs: kill xfs_itruncate_start (Brian Foster) [1113418]
  - [fs] xfs: factor extent map manipulations out of xfs_bmapi (Brian Foster) [1113418]
  - [fs] gfs2: Allow caching of glocks for flock (Robert S Peterson) [1110421]
  - [fs] gfs2: Allow flocks to use normal glock dq rather than dq_wait (Robert S Peterson) [1110421]
  - [fs] xfs: don't log dummy transaction on frozen fs (Eric Sandeen) [1076286]
  - [fs] ext4: set extents flag when migrating file to use extents (Eric Sandeen) [952005]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-496.el6]
changelog:
  - [xen] smp: Unifiy some of the PVs and PVHVM offline CPU path (Vitaly Kuznetsov) [1123370]
  - [xen] smp: Fix leakage of the spinlock interrupt line for every CPU online/offline (Vitaly Kuznetsov) [1123370]
  - [xen] disable PV spinlocks on HVM (Vitaly Kuznetsov) [1123370]
  - [xen] smp: initialize IPI vectors before marking CPU online (Vitaly Kuznetsov) [1123370]
  - [xen] Do not enable PV IPIs when vector callback not present (Vitaly Kuznetsov) [1123370]
  - [xen] pv on hvm support PV spinlocks and IPIs (Vitaly Kuznetsov) [1123370]
  - [xen] percpu: make percpu symbols in xen unique (Vitaly Kuznetsov) [1123370]
  - [kernel] sched: Fix possible divide by zero in avg_atom() calculation (Mateusz Guzik) [1109489]
  - [kernel] add div64_ul() (Mateusz Guzik) [1109489]
  - [kernel] sched: Move idle_balance() stats back where they were instead of at the end of the sched_domain (Larry Woodman) [1119156]
  - [perf] x86: ignore CondChgd bit to avoid false NMI handling (Don Zickus) [1116947]
  - [s390] fix restore of invalid floating-point-control (Hendrik Brueckner) [1121962]
  - [s390] sclp_vt220: Enable ASCII console per default (Hendrik Brueckner) [1112743]
  - [x86] apic: Remove noisy zero-mask warning from default_send_IPI_mask_logical() (Prarit Bhargava) [745124]
  - [drm] i915: lock around link status and link training (Dave Airlie) [1126640]
  - [drm] i915: only hook up hpd pulse for DP outputs (Dave Airlie) [1126640]
  - [alsa] control: Don't access controls outside of protected regions (Radomir Vrbovsky) [1117329] {CVE-2014-4653}
  - [md] dm-thin: set minimum_io_size to pool's data block size (Mikulas Patocka) [1121779]
  - [md] dm: allocate a special workqueue for deferred device removal (Mike Snitzer) [1109431]
  - [kernel] coredump: redefine SIGNAL_GROUP_COREDUMP to fix the conflict with SIGNAL_CLD_STOPPED (Oleg Nesterov) [1106519]
  - [powerpc] pseries: Track previous CPPR values to correctly EOI interrupts (Gustavo Duarte) [1089977]
  - [netdrv] tg3: Modify tg3_tso_bug() to handle multiple TX rings (Ivan Vecera) [1123530]
  - [netdrv] bna: fix performance regression (Ivan Vecera) [1121039]
  - [netdrv] bna: fill the magic in bnad_get_eeprom() instead of validating (Ivan Vecera) [1119123]
  - [netdrv] e1000e: implement 82577/579 MDI setting support (Ivan Vecera) [1105604]
  - [netdrv] igb: update to allow reading/setting MDI state (Ivan Vecera) [1105604]
  - [netdrv] e1000e: implement MDI/MDI-X control (Ivan Vecera) [1105604]
  - [netdrv] e1000: configure and read MDI settings (Ivan Vecera) [1105604]
  - [netdrv] ethtool: MDI setting support (Ivan Vecera) [1105604]
  - [netdrv] bna: remove use of ndo_set_multicast_list in drivers (Ivan Vecera) [1120510]
  - [netdrv] bna: fix vlan tag stripping and implement its toggling (Ivan Vecera) [1120510]
  - [netdrv] bna: convert to hw_features (Ivan Vecera) [1120510]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-497.el6]
changelog:
  - [net] ipv6: fix headroom calculation in udp6_ufo_fragment (Nikolay Aleksandrov) [1121522]
  - [net] udp6: Fix udp fragmentation for tunnel traffic (Nikolay Aleksandrov) [1121522]
  - [net] sctp: inherit auth_capable on INIT collisions (Daniel Borkmann) [1123760] {CVE-2014-5077}
  - [net] sctp: only warn in proc_sctp_do_alpha_beta if write (Daniel Borkmann) [1081372]
  - [net] sctp: fix permissions for rto_alpha and rto_beta knobs (Daniel Borkmann) [1081372]
  - [scsi] scsi_lib: remove the description string in scsi_io_completion() (Maurizio Lombardi) [710111]
  - [scsi] qla2xxx: Update version number to 8.07.00.08.06.6-k1 (Chad Dupuis) [919831 990690]
  - [scsi] qla2xxx: Remove restriction on starting remote device discovery on port update (Chad Dupuis) [990690]
  - [scsi] qla2xxx: Move mailbox failure messages to a default debug level (Chad Dupuis) [919831]
  - [netdrv] mlx4_core: Keep only one driver entry release mlx4_priv (Amir Vadai) [1121531]
  - [netdrv] be2net: fix qnq mode detection on VFs (Ivan Vecera) [1123790]
  - [netdrv] be2net: ignore get/set profile FW cmd failures (Ivan Vecera) [1110417]
  - [netdrv] be2net: use adapter->flags to track SRIOV state (Ivan Vecera) [1110417]
  - [netdrv] be2net: avoid SRIOV config for BE2 chip (Ivan Vecera) [1110417]
  - [netdrv] be2net: use be_max_vfs() macro to access max-vfs (Ivan Vecera) [1110417]
  - [netdrv] be2net: create optimal number of queues on SR-IOV config (Ivan Vecera) [1110417]
  - [netdrv] be2net: read VF's capabilities from GET_PROFILE_CONFIG cmd (Ivan Vecera) [1110417]
  - [netdrv] be2net: remove be_cmd_get_profile_config_mbox/mccq() variants (Ivan Vecera) [1110417]
  - [x86] perf: Fix AMD NB and L2I "uncore" support (Prarit Bhargava) [922929]
  - [x86] perf: Remove old-style NB counter support from perf_event_amd.c (Prarit Bhargava) [922929]
  - [x86] perf: Add support for AMD NB and L2I "uncore" counters (Prarit Bhargava) [922929]
  - [x86] Add cpu_has_topoext (Prarit Bhargava) [922929]
  - [x86] perf: Enable northbridge performance counters on AMD family 15h (Prarit Bhargava) [922929]
  - [x86] perf: add global get_ibs_caps() (Prarit Bhargava) [922929]
  - [x86] perf: Share IBS macros between perf and oprofile (Prarit Bhargava) [922929]
  - [x86] perf: Generalize northbridge constraints code for family 15h (Prarit Bhargava) [922929]
  - [x86] perf: Allow for architecture specific RDPMC indexes (Prarit Bhargava) [922929]
  - [x86] perf: Move MSR address offset calculation to architecture specific files (Prarit Bhargava) [922929]
  - [x86] perf: Use rdpmc() rather than rdmsr() when possible in the kernel (Prarit Bhargava) [922929]
  - [x86] Add rdpmcl() (Prarit Bhargava) [922929]
  - [x86] efi: Properly pre-initialize table pointers (Laszlo Ersek) [1129282]
  - [md] raid1, raid10: always abort recover on write error (Jes Sorensen) [1124351]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-498.el6]
changelog:
  - [drm] i915: fix backport typo (Rob Clark) [1131218]
  - [net] revert: bridge: Provide VLAN registration and GRO acceleration for ports (Jiri Pirko) [1121991]
  - [net] revert: bridge: Correctly receive hw-accelerated vlan traffic (Jiri Pirko) [1121991]
  - [net] revert: vlan: Allow accelerated packets to flow through the bridge (Jiri Pirko) [1121991]
  - [net] ipv6: fix calculation of option len in ip6_append_data (Hannes Frederic Sowa) [1127225]
  - [net] ipv6: pmtudisc setting not respected with UFO/CORK (Hannes Frederic Sowa) [1127225]
  - [net] ipv4: fix DO and PROBE pmtu mode regarding local fragmentation with UFO/CORK (Hannes Frederic Sowa) [1127225]
  - [net] rtnetlink: fix VF info size (Jiri Benc) [1126761]
  - [scsi] fc: ensure scan_work isn't active when freeing fc_rport (Maurizio Lombardi) [1120036]
  - [netdrv] bnx2x: Safe bnx2x_panic_dump() (Michal Schmidt) [1121539]
  - [netdrv] bnx2x: Enlarge the dorq threshold for VFs (Michal Schmidt) [1123412]
  - [netdrv] bnx2x: Fix 1G-baseT link (Michal Schmidt) [1123412]
  - [netdrv] bnx2x: Fix link for KR with swapped polarity lane (Michal Schmidt) [1123412]
  - [md] raid: avoid data corruption during recovery of double-degraded RAID6 (Jes Sorensen) [1090423]
  - [perf] tools: Show better error message in case we fail to open counters due to EBUSY error (Jiri Olsa) [1103196]
  - [perf] tools: Add filename__read_str util function (Jiri Olsa) [1103196]
  - [kvm] revert "x86: increase VCPU limit to 240" (Radim Krcmar) [864242]
  - [virt] revert "virtio-net: initialize vlan_features" (Nikolay Aleksandrov) [1132588]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-499.el6]
changelog:
  - [scsi] cxgb4i: Guard ipv6 code with a config check (Sai Vemuri) [1122829]
  - [scsi] cxgb4i: remove spurious use of rcu (Sai Vemuri) [1122829]
  - [scsi] cxgb4i: Fix ipv6 build failure caught with randconfig (Sai Vemuri) [1122829]
  - [scsi] cxgb4i: Add ipv6 code to driver, call into libcxgbi ipv6 api (Sai Vemuri) [1122829]
  - [scsi] libcxgbi: Add ipv6 api to driver (Sai Vemuri) [1122829]
  - [netdrv] cxgb4: Export symbols required by cxgb4i for ipv6 support and required defines (Sai Vemuri) [1122829]
  - [netdrv] cxgb4vf: Adds device Id for few more Chelsio adapters (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Remove superfluous call to pci_disable_msix() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4: make functions static and remove dead code (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: added much cleaner implementation of is_t4() (Sai Vemuri) [1112417]
  - [netdrv] net: cxgb4vf: use DEFINE_PCI_DEVICE_TABLE (Sai Vemuri) [1112417]
  - [netdrv] net: cxgb4vf: remove unnecessary pci_set_drvdata() (Sai Vemuri) [1112417]
  - [netdrv] net: cxgb4vf: Staticize local symbols (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add support for Chelsio T5 adapter (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix VLAN extraction counter increment (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix extraction of cpl_rx_pkt from the response queue descriptor (Sai Vemuri) [1112417]
  - [netdrv] chelsio: Use netdev_<level> and pr_<level> (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: remove __dev* attributes (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: do vlan cleanup (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: improve Kconfig dependencies (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use defined Mailbox Timeout (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Quiesce Virtual Interfaces on shutdown (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Behave properly when CONFIG_DEBUG_FS isn't defined (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Check driver parameters in the right place (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: recover from failure in cxgb4vf_open() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix mailbox data/control coherency domain race (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Ingress Queue Entry Size needs to be 64 bytes (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix setting unicast/multicast addresses (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Advertise NETIF_F_TSO_ECN (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix up "Section Mismatch" compiler warning (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: add ethtool statistics for GRO (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: minor comment/symbolic name cleanup (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: add call to Firmware to reset VF State (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fail open if link_start() fails (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: flesh out PCI Device ID Table (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix some errors in Gather List to skb conversion (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix bug in Generic Receive Offload (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: don't implement trivial (and incorrect) ndo_select_queue() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: remove call to stop TX queues at load time (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: make single bit signed bitfields unsigned (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use netif_set_real_num_rx/tx_queues() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: do not use PCI resources before pci_enable_device() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix bug where we were only allocating one queue in MSI mode (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix off-by-one error checking for the end of the mailbox delay array (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix SGE resource resource deallocation bug (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix TX Queue restart (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Implement "Unhandled Interrupts" statistic (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: remove obsolete DECLARE_PCI_UNMAP_ADDR usage (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use correct shift factor for extracting the SGE DMA Ingress Padding Boundary (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Remove obsolete comment about the lack of a TX Timer Callback (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Stitch new T4 PCI-E SR-IOV Virtual Function driver into the build (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add new Makefile for T4 PCI-E SR-IOV Virtual Function driver cxgb4vf (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add main T4 PCI-E SR-IOV Virtual Function driver for cxgb4vf (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add T4 Virtual Function Scatter-Gather Engine DMA code (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add core T4 PCI-E SR-IOV Virtual Function hardware definitions and device communication code (Sai Vemuri) [1112417]
  - [infiniband] iw_cxgb4: fix for 64-bit integer division (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fix possible race condition in cleanup (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: only free allocated fls (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fixed incorrect check for memory operation in t4_memory_rw (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add the MC1 registers to read in the interrupt handler (Sai Vemuri) [1121803]
  - [netdrv] iw_cxgb4: Move common defines to cxgb4 (Sai Vemuri) [1121803]
  - [netdrv] iw_cxgb4: work request logging feature (Sai Vemuri) [1121803]
  - [netdrv] iw_cxgb4: display TPTE on errors (Sai Vemuri) [1121803]
  - [netdrv] iw_cxgb4: use firmware ord/ird resource limits (Sai Vemuri) [1121803]
  - [netdrv] iw_cxgb4: Detect Ing. Padding Boundary at run-time (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: remove unnecessary null test before debugfs_remove_recursive (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Adds device ID for few more Chelsio T4 Adapters (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Replaced the backdoor mechanism to access the HW memory with PCIe Window method (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Use FW interface to get BAR0 value (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fixes cxgb4 probe failure in VM when PF is exposed through PCI Passthrough (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Change default Interrupt Holdoff Packet Count Threshold (Sai Vemuri) [1121803]
  - [netdrv] iw_cxgb4: don't truncate the recv window size (Sai Vemuri) [1121803]
  - [netdrv] iw_cxgb4: Choose appropriate hw mtu index and ISS for iWARP connections (Sai Vemuri) [1121803]
  - [netdrv] iw_cxgb4: Allocate and use IQs specifically for indirect interrupts (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Check if rx checksum offload is enabled, while reading hardware calculated checksum (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Decode the firmware port and module type a bit more for ethtool (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: add missing padding at end of struct c4iw_alloc_ucontext_resp (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Add missing padding at end of struct c4iw_create_cq_resp (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix vlan support (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix memory leaks in c4iw_alloc() error paths (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Decode PCIe Gen3 link speed (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Update Kconfig to include Chelsio T5 adapter (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Only allow kernel db ringing for T4 devs (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Force T5 connections to use TAHOE congestion control (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix endpoint mutex deadlocks (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: use the correct max size for firmware flash (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Save the correct mac addr for hw-loopback connections in the L2T (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix over-dereference when terminating (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Use uninitialized_var() (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Add missing debug stats (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Initialize reserved fields in a FW work request (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Use pr_warn_ratelimited (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Max fastreg depth depends on DSGL support (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: SQ flush fix (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: rmb() after reading valid gen bit (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Endpoint timeout fixes (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Use the BAR2/WC path for kernel QPs and T5 devices (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Disable DSGL use by default (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: rx_data() needs to hold the ep mutex (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Drop RX_DATA packets if the endpoint is gone (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Lock around accept/reject downcalls (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: set error code on kmalloc() failure (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Adds device ID for few more Chelsio Adapters (Sai Vemuri) [1121803]
  - [netdrv] cxbg4: Remove addressof casts to same type (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Call dev_kfree/consume_skb_any instead of kfree_skb (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Update snd_seq when sending MPA messages (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Connect_request_upcall fixes (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Ignore read reponse type 1 CQEs (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix possible memory leak in RX_PKT processing (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Don't leak skb in c4iw_uld_rx_handler() (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Save the correct map length for fast_reg_page_lists (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Default peer2peer mode to 1 (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Mind the sq_sig_all/sq_sig_type QP attributes (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix incorrect BUG_ON conditions (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Always release neigh entry (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Allow loopback connections (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Cap CQ size at T4_MAX_IQ_SIZE (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix four byte info leak in c4iw_create_cq() (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix underflows in c4iw_create_qp() (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Doorbell Drop Avoidance Bug Fixes (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Treat CPL_ERR_KEEPALV_NEG_ADVICE as negative advice (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Calculate len properly for LSO path (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Updates for T5 SGE's Egress Congestion Threshold (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Rectify emitting messages about SGE Ingress DMA channels being potentially stuck (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add code to dump SGE registers when hitting idma hangs (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fix some small bugs in t4_sge_init_soft() when our Page Size is 64KB (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: use remove handler as shutdown handler (Sai Vemuri) [1121803]
  - [netdrv] cgxb4: Stop using ethtool SPEED_* constants (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add more PCI device ids (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Don't assume LSO only uses SGL path in t4_eth_xmit() (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Remove unused registers and add missing ones (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Query firmware for T5 ULPTX MEMWRITE DSGL capabilities (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: LE-Workaround is not atomic in firmware (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Allow >10G ports to have multiple queues (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Print adapter VPD Part Number instead of Engineering Change field (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add support to recognize 40G links (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Use pci_enable_msix_range() instead of pci_enable_msix() (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Add missing neigh_release in LE-Workaround path (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fix referencing freed adapter (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix gcc warning on 32-bit arch (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Don't retrieve stats during recovery (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Avoid disabling PCI device for towice (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: silence shift wrapping static checker warning (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Changed FW check version to match FW binary version (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: allow large buffer size to have page size (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Use cxgb4_select_ntuple to correctly calculate ntuple fields (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Server filters are supported only for IPv4 (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Calculate the filter server TID properly (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: make functions static and remove dead code (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add API to correctly calculate tuple fields (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Account for stid entries properly in case of IPv6 (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Assign filter server TIDs properly (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Include TCP as protocol when creating server filters (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Reserve stid 0 for T4/T5 adapters (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: calls skb_set_hash (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Make _c4iw_write_mem_dma() static (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix formatting of physical address (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add new scheme to update T4/T5 firmware (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: added much cleaner implementation of is_t4() (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Much cleaner implementation of is_t4()/is_t5() (Sai Vemuri) [1121803]
  - [netdrv] cgxb4: remove duplicate include in cxgb4.h (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: remove unnecessary pci_set_drvdata() (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: remove workqueue when driver registration fails (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Issue RI.FINI before closing when entering TERM (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Advertise ~0ULL as max MR size (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Always do GTS write if cidx_inc == CIDXINC_MASK (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Set arp error handler for PASS_ACCEPT_RPL messages (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix accounting for unsignaled SQ WRs to deal with wrap (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix QP flush logic (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Use correct bit shift macros for vlan filter tuples (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Handle newer firmware changes (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Add support for active and passive open connection with IPv6 address (Sai Vemuri) [1121803]
  - [infiniband] cma: Add IPv6 support for iWARP (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add CLIP support to store compressed IPv6 address (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add routines to create and remove listening IPv6 servers (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix stack info leak in c4iw_create_qp() (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Do not set net_device::dev_id to VI index (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Correct comparisons and calculations using skb->tail and skb-transport_header (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Force uninitialized state if FW_ON_ADAPTER is < FW_VERSION and we're the MASTER_PF (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: fix error recovery when t4_fw_hello returns a positive value (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fix pci_device_id structure initialization with correct PF number (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix SQ allocation when on-chip SQ is disabled (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix error return code in create_qp() (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix onchip queue support for T5 (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Bump tcam_full stat and WR reply timeout (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Map pbl buffers for dma if using DSGL (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Use DSGLs for fastreg and adapter memory writes for T5 (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Add module_params to enable DB FC & Coalescing on T5 (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Turn off db coalescing when RDMA QPs are in use (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Add Support for Chelsio T5 adapter (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Disable SR-IOV support for PF4-7 for T5 (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Update driver version and description (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add T5 PCI ids (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add T5 debugfs support (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Enable doorbell drop recovery only for T4 adapter (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add T5 write combining support (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Dump T5 registers (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Initialize T5 (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add macros, structures and inline functions for T5 (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add register definations for T5 (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Allow for backward compatibility with new VPD scheme (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix cast warning (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: "cookie" can stay in host endianness (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Address sparse warnings (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Insert hwtid in pass_accept_req instead in pass_establish (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Don't wakeup threads for MPAv2 (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Don't reconnect on abort for mpa_rev 1 (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix endpoint timeout race condition (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Only log rx_data warnings if cpl status is non-zero (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Always log async errors (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Keep QP referenced until TID released (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Display streaming mode error only if detected in RTS (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Abort connections when moving to ERROR state (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Abort connections that receive unexpected streaming mode data (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fix incorrect PFVF CMASK (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Use netdev_<level> and pr_<level> (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix bug for active and passive LE hash collision path (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix LE hash collision bug for passive open connection (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix LE hash collision bug for active open connection (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add LE hash collision bug fix path in LLD driver (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add T4 filter support (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: remove __dev* attributes (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Chelsio FCoE offload driver submission (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: use WARN (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fix initialization of SGE_CONTROL register (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fix unable to get UP event from the LLD (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Don't free chunk that we have failed to allocate (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Remove unnecessary #ifdef condition (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Address various sparse warnings (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: allocate enough data in t4_memory_rw() (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fix build error due to missing linux/vmalloc.h include (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Dynamically allocate memory in t4_memory_rw() and get_vpd_params() (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Fix error handling in create_qp() (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Don't attempt to upgrade T4 firmware when cxgb4 will end up as a slave (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add support for T4 hardwired driver configuration settings (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add support for T4 configuration file (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Code cleanup to enable T4 Configuration File support (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Add functions to read memory via PCIE memory window (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Fix incorrect values for MEMWIN*_APERTURE and MEMWIN*_BASE (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Move dereference below NULL test (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Update RDMA/cxgb4 due to macro definition removal in cxgb4 driver (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Remove duplicate register definitions (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: set maximal number of default RSS queues (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Include vmalloc.h for vmalloc and vfree (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Remove kfifo usage (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Use vmalloc() for debugfs QP dump (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: DB Drop Recovery for RDMA and LLD queues (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Add DB Overflow Avoidance (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Add debugfs RDMA memory stats (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: DB Drop Recovery for RDMA and LLD queues (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Common platform specific changes for DB Drop Recovery (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Detect DB FULL events and notify RDMA ULD (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Drop peer_abort when no endpoint found (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Debugfs dump_qp() updates (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Use ULP_MODE_TCPDDP (Sai Vemuri) [1121803]
  - [infiniband] cxgb4: Turn on delayed ACK (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: Use netif_set_real_num_rx/tx_queues() (Sai Vemuri) [1121803]
  - [netdrv] cxgb4: set skb->rxhash (Sai Vemuri) [1121803]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-500.el6]
changelog:
  - [mm] hugetlb: correct missing private flag clearing (Petr Holasek) [1127126]
  - [mm] hugetlb: return a reserved page to a reserved pool if failed (Petr Holasek) [1127126]
  - [mm] hugetlb: undo change to page mapcount in fault handler (Petr Holasek) [1127126]
  - [mm] hugetlb: fix subpool accounting handling (Petr Holasek) [1127126]
  - [mm] hugetlb: protect reserved pages when soft offlining a hugepage (Petr Holasek) [1127126]
  - [mm] hugetlb: decrement reserve count if VM_NORESERVE alloc page cache (Petr Holasek) [1127126]
  - [mm] hugetlb: remove decrement_hugepage_resv_vma() (Petr Holasek) [1127126]
  - [mm] hugetlb: add VM_NORESERVE check in vma_has_reserves() (Petr Holasek) [1127126]
  - [mm] hugetlb: do not use a page in page cache for cow optimization (Petr Holasek) [1127126]
  - [crypto] modsign: crypto_alloc_shash() returns an error code not NULL on failure (David Howells) [1099208]
  - [drm] nouveau: behave better if ioremap failed (Ben Skeggs) [1076992]
  - [fs] fuse: ignore entry-timeout LOOKUP_REVAL (Carlos Maiolino) [1127702]
  - [fs] fuse: Timeout comparison fix (Carlos Maiolino) [1127769]
  - [fs] ext4: verify block bitmap (Lukas Czerner) [1087584]
  - [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1087584]
  - [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1087584]
  - [fs] fsnotify: delay unmounting until all inode are fput (Eric Paris) [886723]
  - [fs] inotify: determine wd before races are possible (Eric Paris) [886723]
  - [fs] fsnotify: do not hold notification mutex when putting events (Eric Paris) [886723]
  - [fs] fsnotify: use GFP_NOFS when allocating event holders (Eric Paris) [886723]
  - [fs] locks: eliminate BUG() call when there's an unexpected lock on file close (Benjamin Coddington) [1113096]
  - [fs] gfs2: Request demote when a "try" flock fails (Robert S Peterson) [1129445]
  - [fs] nfsd: allow turning off nfsv3 readdir_plus (J. Bruce Fields) [1117468]
  - [powerpc] pseries: Fix kexec regression caused by CPPR tracking (Gustavo Duarte) [1129453]
  - [scsi] Fix erratic device offline during EH (Gustavo Duarte) [1126088]
  - [net] openvswitch: fix panic with multiple vlan headers (Jiri Benc) [1122405]
  - [net] ipvs: extract race fixes for sync daemon setups (Jesper Brouer) [1117536]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-501.el6]
changelog:
  - [md] revert "raid1: Rewrite the implementation of iobarrier" (Jes Sorensen) [1127231]
  - [md] revert "raid1: fix request counting bug in new 'barrier' code" (Jes Sorensen) [1127231]
  - [scsi] hpsa: version string change (Tomas Henzl) [1054631]
  - [scsi] hpsa: change doorbell reset delay to ten seconds (Tomas Henzl) [1054631]
  - [scsi] hpsa: add a delay to kdump path (Tomas Henzl) [1054631]
  - [infiniband] ipoib: No longer use flush as a parameter (Doug Ledford) [1111073]
  - [infiniband] ipoib: Make ipoib_mcast_stop_thread flush the workqueue (Doug Ledford) [1111073]
  - [infiniband] ipoib: Use dedicated workqueues per interface (Doug Ledford) [1111073]
  - [infiniband] ipoib: change init sequence ordering (Doug Ledford) [1111073]
  - [infiniband] ipoib: fix mcast_dev_flush/mcast_restart_task race (Doug Ledford) [1111073]
  - [infiniband] ipoib: fix MCAST_FLAG_BUSY usage (Doug Ledford) [1111073]
  - [infiniband] ipoib: Make the carrier_on_task race aware (Doug Ledford) [1111073]
  - [infiniband] ipoib: Consolidate rtnl_lock tasks in workqueue (Doug Ledford) [1111073]
  - [infiniband] ipoib: Avoid multicast join attempts with invalid P_key (Doug Ledford) [1111073]
  - [infiniband] ipoib: Avoid flushing the workqueue from worker context (Doug Ledford) [1111073]
  - [infiniband] ipoib: Use P_Key change event instead of P_Key polling mechanism (Doug Ledford) [1111073]
  - [infiniband] mlx5: Enable "block multicast loopback" for kernel consumers (Doug Ledford) [1128863]
  - [mm] memory-failure: support use of a dedicated thread to handle SIGBUS BUS_MCEERR_AO (Rui Wang) [1108366]
  - [mm] memory-failure: don't let collect_procs() skip over processes for MF_ACTION_REQUIRED (Rui Wang) [1108366]
  - [mm] memory-failure: send right signal code to correct thread (Rui Wang) [1108366]
  - [x86] mce: Pay no attention to 'F' bit in MCACOD when parsing 'UC' errors (Rui Wang) [1093437]
  - [x86] kvm: trace kvm_ple_window grow/shrink (Radim Krcmar) [1093208]
  - [x86] kvm: vmx: dynamise PLE window (Radim Krcmar) [1093208]
  - [x86] kvm: vmx: make PLE window per-VCPU (Radim Krcmar) [1093208]
  - [x86] kvm: introduce sched_in to kvm_x86_ops (Radim Krcmar) [1093208]
  - [virt] kvm: add kvm_arch_sched_in (Radim Krcmar) [1093208]
  - [fs] Add full_check test before calling add_to_tfile_check() to prevent panic in reverse_path_check_proc() (Larry Woodman) [1130730]
  - [perf] x86: Fix Silvermont offcore masks (Jiri Olsa) [1036335]
  - [perf] x86: Add model number for Avoton Silvermont (Jiri Olsa) [1036335]
  - [perf] x86: Add Silvermont 22nm Atom support (Jiri Olsa) [1036335]
  - [perf] x86: use INTEL_UEVENT_EXTRA_REG to define MSR_OFFCORE_RSP_X (Jiri Olsa) [1036335]
  - [perf] x86: Fix Intel shared extra MSR allocation (Jiri Olsa) [1036335]
  - [x86] amd: perf: Unify AMD's generic and family 15h pmus (Jiri Olsa) [1133680]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-502.el6]
changelog:
  - [kernel] audit: audit_log_start running on auditd should not stop (Richard Guy Briggs) [1019898]
  - [kernel] audit: drop audit_cmd_lock in AUDIT_USER family of cases (Richard Guy Briggs) [1019898]
  - [security] selinux: call WARN_ONCE() instead of calling audit_log_start() (Richard Guy Briggs) [1019898]
  - [crypto] drbg: fix failure of generating multiple of 2**16 bytes (Herbert Xu) [1130529]
  - [x86] uv: Set n_lshift based on GAM_GR_CONFIG MMR for UV3 (George Beshers) [1096981]
  - [fs] nfs: Close another NFSv4 recovery race (Steve Dickson) [1093922]
  - [fs] nfs: Refactor _nfs4_open_and_get_state to set ctx->state (Steve Dickson) [1093922]
  - [fs] nfs: cleanup: pass the nfs_open_context to nfs4_do_open (Steve Dickson) [1093922]
  - [fs] sunrpc: Handle EPIPE in xprt_connect_status (Steve Dickson) [1130619]
  - [fs] sunrpc: Ensure xprt_connect_status handles all potential connection errors (Steve Dickson) [1130619]
  - [fs] sunrpc: Ensure that we handle ENOBUFS errors correctly (Steve Dickson) [1130619]
  - [fs] sunrpc: Ensure call_connect_status() deals correctly with SOFTCONN tasks (Steve Dickson) [1130619]
  - [fs] sunrpc: Ensure that call_connect times out correctly (Steve Dickson) [1130619]
  - [fs] sunrpc: Handle connect errors ECONNABORTED and EHOSTUNREACH (Steve Dickson) [1130619]
  - [fs] sunrpc: call_connect_status should recheck bind and connect status on error (Steve Dickson) [1130619]
  - [fs] sunrpc: Report network/connection errors correctly for SOFTCONN rpc tasks (Steve Dickson) [1130619]
  - [fs] ext3: Fix fdatasync() for files with only i_size changes (Eric Sandeen) [1127023]
  - [fs] gfs2: Change maxlen variables to size_t (Robert S Peterson) [1126899]
  - [mm] hugetlb: add cond_resched_lock() in return_unused_surplus_pages() (Motohiro Kosaki) [1129085]
  - [mm] hugetlb: fix softlockup when a large number of hugepages are freed (Motohiro Kosaki) [1129085]
  - [net] fix ipv4: match prefsrc when deleting routes (Jiri Benc) [1056443]
  - [net] bridge: explictly tag vlan-accelerated frames destined to the host (Vlad Yasevich) [1121991]
  - [net] ipv4: avoid parallel route cache gc executions (Hannes Frederic Sowa) [1121228]
  - [net] ipv4: move route garbage collector to work queue (Hannes Frederic Sowa) [1121228]
  - [net] ethtool: reallow ETHTOOL_SFLAGS to set TX/RX VLAN offloads (Michal Schmidt) [1134359]
  - [net] tcp: tsq: fix nonagle handling (Jiri Pirko) [1134401]
  - [kvm] iommu: fix the third parameter of kvm_iommu_put_pages (Radomir Vrbovsky) [1131953] {CVE-2014-3601}
  - [s390] sysinfo: convert /proc/sysinfo to seqfile (Hendrik Brueckner) [1130987]
  - [s390] con3215: fix hanging console issue (Hendrik Brueckner) [1130986]
  - [s390] dasd: validate request size before building CCW/TCW request (Hendrik Brueckner) [1130988]
  - [scsi] revert "fc: ensure scan_work isn't active when freeing fc_rport" (Maurizio Lombardi) [1135888]
  - [edac] sb_edac: Modify H/W event reporting policy (Rui Wang) [1129067]
  - [alsa] control: Fix replacing user controls (Denys Vlasenko) [1117322] {CVE-2014-4654 CVE-2014-4655}
  - [netdrv] bnx2x: Fix RSS on big-endian (Michal Schmidt) [1119291]
  - [netdrv] bnx2x: Utilize FW 7.10.51 (Michal Schmidt) [1119291]
  - [netdrv] firmware: add bnx2x FW 7.10.51 (Michal Schmidt) [1119291]
  - [security] selinux: fix a problem with IPv6 traffic denials in selinux_ip_postroute() (Paul Moore) [1130082]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-503.el6]
changelog:
  - [kernel] futex: Fix errors in nested key ref-counting (Denys Vlasenko) [1094458] {CVE-2014-0205}
  - [fs] vfs: add missing __putname() in patch_mountpoint() (Ian Kent) [1135165]
  - [fs] nfs: Don't busy-wait on SIGKILL in __nfs_iocounter_wait (Benjamin Coddington) [1113269]
  - [netdrv] mlx4: add vlan_rx_register to the master ops (Doug Ledford) [1133506]
  - [infiniband] ocrdma: use right macro in query ah (Doug Ledford) [1133506]
  - [infiniband] ocrdma: resolve L2 address when creating user AH (Doug Ledford) [1133506]
  - [infiniband] ocrdma: get vlan tag from ib_qp_attrs (Doug Ledford) [1133506]
  - [infiniband] ocrdma: add default gid at index 0 (Doug Ledford) [1133506]
  - [infiniband] ocrdma: obtain sl from deivce structure (Doug Ledford) [1133506]
  - [infiniband] ocrdma: do not skip setting deffered_arm (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Initialize the GID table while registering the device (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Increase the size of STAG array in dev structure to 16K (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Add missing adapter mailbox opcodes (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Return proper value for max_mr_size (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Allow only SEND opcode in case of UD QPs (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Avoid reporting wrong completions in case of error CQEs (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Query and initalize the PFC SL (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Avoid posting DPP requests for RDMA READ (Doug Ledford) [1133506]
  - [infiniband] core: When marsheling uverbs path, clear unused fields (Amir Vadai) [1130394]
  - [infiniband] mlx4: Avoid executing gid task when device is being removed (Amir Vadai) [1130394]
  - [infiniband] mlx4: Fix lockdep splat for the iboe lock (Amir Vadai) [1130394]
  - [infiniband] mlx4: Get upper dev addresses as RoCE GIDs when port comes up (Amir Vadai) [1130394]
  - [infiniband] mlx4: Reorder steps in RoCE GID table initialization (Amir Vadai) [1130394]
  - [infiniband] mlx4: Don't duplicate the default RoCE GID (Amir Vadai) [1130394]
  - [infiniband] mlx4: Avoid null pointer dereference in mlx4_ib_scan_netdevs() (Amir Vadai) [1130394]
  - [netdrv] b43: fix the wrong assignment of status.freq in b43_rx() (John Greene) [1132160]
  - [lib] lzo: properly check for overruns (Denys Vlasenko) [1113901] {CVE-2014-4608}
  - [lib] lzo: Update LZO compression to current upstream version (Denys Vlasenko) [1113901] {CVE-2014-4608}
  - [drm] nouveau: add more checks to PRAMIN image fetching (Ben Skeggs) [1133695 1076733]
  - [drm] nouveau: allow non-optimus setups to load vbios from acpi (Ben Skeggs) [1133695 1076733]
  - [drm] nouveau: fix a potential NULL deref in the PROM shadowing function (Ben Skeggs) [1133695 1076733]
  - [drm] nouveau: fetch the vbios from PROM using only aligned 32-bit accesses (Ben Skeggs) [1133695 1076733]
  - [net] Revert "introduce netif_skb_dev_features" (Florian Westphal) [1029603]
  - [net] revert "ip, ipv6: handle gso skbs in forwarding path" (Florian Westphal) [1029603]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-504.el6]
changelog:
  - [netdrv] revert "cxgb4: set skb->rxhash" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Use netif_set_real_num_rx/tx_queues()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Turn on delayed ACK" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use ULP_MODE_TCPDDP" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Debugfs dump_qp() updates" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Drop peer_abort when no endpoint found" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Detect DB FULL events and notify RDMA ULD" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Common platform specific changes for DB Drop Recovery" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: DB Drop Recovery for RDMA and LLD queues" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add debugfs RDMA memory stats" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add DB Overflow Avoidance" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: DB Drop Recovery for RDMA and LLD queues" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use vmalloc() for debugfs QP dump" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Remove kfifo usage" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Include vmalloc.h for vmalloc and vfree" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: set maximal number of default RSS queues" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Remove duplicate register definitions" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Update RDMA/cxgb4 due to macro definition removal in cxgb4 driver" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Move dereference below NULL test" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix incorrect values for MEMWIN*_APERTURE and MEMWIN*_BASE" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add functions to read memory via PCIE memory window" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Code cleanup to enable T4 Configuration File support" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add support for T4 configuration file" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add support for T4 hardwired driver configuration settings" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Don't attempt to upgrade T4 firmware when cxgb4 will end up as a slave" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix error handling in create_qp()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Dynamically allocate memory in t4_memory_rw() and get_vpd_params()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix build error due to missing linux/vmalloc.h include" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: allocate enough data in t4_memory_rw()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Address various sparse warnings" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Remove unnecessary #ifdef condition" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Don't free chunk that we have failed to allocate" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix unable to get UP event from the LLD" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix initialization of SGE_CONTROL register" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: use WARN" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Chelsio FCoE offload driver submission" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: remove __dev* attributes" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add T4 filter support" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add LE hash collision bug fix path in LLD driver" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix LE hash collision bug for active open connection" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix LE hash collision bug for passive open connection" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix bug for active and passive LE hash collision path" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Use netdev_<level> and pr_<level>" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix incorrect PFVF CMASK" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Abort connections that receive unexpected streaming mode data" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Abort connections when moving to ERROR state" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Display streaming mode error only if detected in RTS" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Keep QP referenced until TID released" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Always log async errors" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Only log rx_data warnings if cpl status is non-zero" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix endpoint timeout race condition" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Don't reconnect on abort for mpa_rev 1" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Don't wakeup threads for MPAv2" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Insert hwtid in pass_accept_req instead in pass_establish" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Address sparse warnings" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: "cookie" can stay in host endianness" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix cast warning" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Allow for backward compatibility with new VPD scheme" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add register definations for T5" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add macros, structures and inline functions for T5" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Initialize T5" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Dump T5 registers" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add T5 write combining support" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Enable doorbell drop recovery only for T4 adapter" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add T5 debugfs support" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add T5 PCI ids" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Update driver version and description" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Disable SR-IOV support for PF4-7 for T5" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add Support for Chelsio T5 adapter" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Turn off db coalescing when RDMA QPs are in use" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add module_params to enable DB FC & Coalescing on T5" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use DSGLs for fastreg and adapter memory writes for T5" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Map pbl buffers for dma if using DSGL" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Bump tcam_full stat and WR reply timeout" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix onchip queue support for T5" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix error return code in create_qp()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix SQ allocation when on-chip SQ is disabled" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix pci_device_id structure initialization with correct PF number" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: fix error recovery when t4_fw_hello returns a positive value" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Force uninitialized state if FW_ON_ADAPTER is < FW_VERSION and we're the MASTER_PF" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Correct comparisons and calculations using skb->tail and skb-transport_header" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Do not set net_device::dev_id to VI index" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix stack info leak in c4iw_create_qp()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add routines to create and remove listening IPv6 servers" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add CLIP support to store compressed IPv6 address" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cma: Add IPv6 support for iWARP" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add support for active and passive open connection with IPv6 address" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Handle newer firmware changes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use correct bit shift macros for vlan filter tuples" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix QP flush logic" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix accounting for unsignaled SQ WRs to deal with wrap" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Set arp error handler for PASS_ACCEPT_RPL messages" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Always do GTS write if cidx_inc == CIDXINC_MASK" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Advertise ~0ULL as max MR size" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Issue RI.FINI before closing when entering TERM" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: remove workqueue when driver registration fails" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: remove unnecessary pci_set_drvdata()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cgxb4: remove duplicate include in cxgb4.h" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Much cleaner implementation of is_t4()/is_t5()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: added much cleaner implementation of is_t4()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add new scheme to update T4/T5 firmware" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix formatting of physical address" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Make _c4iw_write_mem_dma() static" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: calls skb_set_hash" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Reserve stid 0 for T4/T5 adapters" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Include TCP as protocol when creating server filters" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Assign filter server TIDs properly" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Account for stid entries properly in case of IPv6" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add API to correctly calculate tuple fields" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: make functions static and remove dead code" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Calculate the filter server TID properly" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Server filters are supported only for IPv4" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use cxgb4_select_ntuple to correctly calculate ntuple fields" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: allow large buffer size to have page size" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Changed FW check version to match FW binary version" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: silence shift wrapping static checker warning" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Avoid disabling PCI device for towice" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Don't retrieve stats during recovery" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix gcc warning on 32-bit arch" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix referencing freed adapter" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add missing neigh_release in LE-Workaround path" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Use pci_enable_msix_range() instead of pci_enable_msix()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add support to recognize 40G links" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Print adapter VPD Part Number instead of Engineering Change field" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Allow >10G ports to have multiple queues" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: LE-Workaround is not atomic in firmware" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Query firmware for T5 ULPTX MEMWRITE DSGL capabilities" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Remove unused registers and add missing ones" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Don't assume LSO only uses SGL path in t4_eth_xmit()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add more PCI device ids" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cgxb4: Stop using ethtool SPEED_* constants" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: use remove handler as shutdown handler" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix some small bugs in t4_sge_init_soft() when our Page Size is 64KB" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add code to dump SGE registers when hitting idma hangs" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Rectify emitting messages about SGE Ingress DMA channels being potentially stuck" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Updates for T5 SGE's Egress Congestion Threshold" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Calculate len properly for LSO path" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Treat CPL_ERR_KEEPALV_NEG_ADVICE as negative advice" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Doorbell Drop Avoidance Bug Fixes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix underflows in c4iw_create_qp()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix four byte info leak in c4iw_create_cq()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Cap CQ size at T4_MAX_IQ_SIZE" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Allow loopback connections" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Always release neigh entry" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix incorrect BUG_ON conditions" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Mind the sq_sig_all/sq_sig_type QP attributes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Default peer2peer mode to 1" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Save the correct map length for fast_reg_page_lists" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Don't leak skb in c4iw_uld_rx_handler()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix possible memory leak in RX_PKT processing" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Ignore read reponse type 1 CQEs" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Connect_request_upcall fixes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Update snd_seq when sending MPA messages" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Call dev_kfree/consume_skb_any instead of kfree_skb" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxbg4: Remove addressof casts to same type" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Adds device ID for few more Chelsio Adapters" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: set error code on kmalloc() failure" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Lock around accept/reject downcalls" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Drop RX_DATA packets if the endpoint is gone" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: rx_data() needs to hold the ep mutex" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Disable DSGL use by default" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use the BAR2/WC path for kernel QPs and T5 devices" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Endpoint timeout fixes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: rmb() after reading valid gen bit" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: SQ flush fix" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Max fastreg depth depends on DSGL support" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use pr_warn_ratelimited" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Initialize reserved fields in a FW work request" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add missing debug stats" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use uninitialized_var()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix over-dereference when terminating" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Save the correct mac addr for hw-loopback connections in the L2T" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: use the correct max size for firmware flash" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix endpoint mutex deadlocks" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Force T5 connections to use TAHOE congestion control" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Only allow kernel db ringing for T4 devs" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Update Kconfig to include Chelsio T5 adapter" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Decode PCIe Gen3 link speed" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix memory leaks in c4iw_alloc() error paths" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix vlan support" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add missing padding at end of struct c4iw_create_cq_resp" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: add missing padding at end of struct c4iw_alloc_ucontext_resp" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Decode the firmware port and module type a bit more for ethtool" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Check if rx checksum offload is enabled, while reading hardware calculated checksum" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: Allocate and use IQs specifically for indirect interrupts" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: Choose appropriate hw mtu index and ISS for iWARP connections" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: don't truncate the recv window size" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Change default Interrupt Holdoff Packet Count Threshold" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fixes cxgb4 probe failure in VM when PF is exposed through PCI Passthrough" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Use FW interface to get BAR0 value" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Replaced the backdoor mechanism to access the HW memory with PCIe Window method" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Adds device ID for few more Chelsio T4 Adapters" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: remove unnecessary null test before debugfs_remove_recursive" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: Detect Ing. Padding Boundary at run-time" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: use firmware ord/ird resource limits" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: display TPTE on errors" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: work request logging feature" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: Move common defines to cxgb4" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add the MC1 registers to read in the interrupt handler" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fixed incorrect check for memory operation in t4_memory_rw" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: only free allocated fls" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix possible race condition in cleanup" (Prarit Bhargava) [1140743]
  - [infiniband] revert "iw_cxgb4: fix for 64-bit integer division" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add core T4 PCI-E SR-IOV Virtual Function hardware definitions and device communication code" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add T4 Virtual Function Scatter-Gather Engine DMA code" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add main T4 PCI-E SR-IOV Virtual Function driver for cxgb4vf" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add new Makefile for T4 PCI-E SR-IOV Virtual Function driver cxgb4vf" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Stitch new T4 PCI-E SR-IOV Virtual Function driver into the build" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Remove obsolete comment about the lack of a TX Timer Callback" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Use correct shift factor for extracting the SGE DMA Ingress Padding Boundary" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: remove obsolete DECLARE_PCI_UNMAP_ADDR usage" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Implement "Unhandled Interrupts" statistic" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix TX Queue restart" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix SGE resource resource deallocation bug" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fix off-by-one error checking for the end of the mailbox delay array" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fix bug where we were only allocating one queue in MSI mode" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: do not use PCI resources before pci_enable_device()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Use netif_set_real_num_rx/tx_queues()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: make single bit signed bitfields unsigned" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: remove call to stop TX queues at load time" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: don't implement trivial (and incorrect) ndo_select_queue()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix bug in Generic Receive Offload" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix some errors in Gather List to skb conversion" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: flesh out PCI Device ID Table" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fail open if link_start() fails" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: add call to Firmware to reset VF State" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: minor comment/symbolic name cleanup" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: add ethtool statistics for GRO" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix up "Section Mismatch" compiler warning" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Advertise NETIF_F_TSO_ECN" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix setting unicast/multicast addresses" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Ingress Queue Entry Size needs to be 64 bytes" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix mailbox data/control coherency domain race" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: recover from failure in cxgb4vf_open()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Check driver parameters in the right place" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Behave properly when CONFIG_DEBUG_FS isn't defined" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Quiesce Virtual Interfaces on shutdown" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Use defined Mailbox Timeout" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: improve Kconfig dependencies" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: do vlan cleanup" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: remove __dev* attributes" (Prarit Bhargava) [1140743]
  - [netdrv] revert "chelsio: Use netdev_<level> and pr_<level>" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fix extraction of cpl_rx_pkt from the response queue descriptor" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fix VLAN extraction counter increment" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add support for Chelsio T5 adapter" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG" (Prarit Bhargava) [1140743]
  - [netdrv] revert "net: cxgb4vf: Staticize local symbols" (Prarit Bhargava) [1140743]
  - [netdrv] revert "net: cxgb4vf: remove unnecessary pci_set_drvdata()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "net: cxgb4vf: use DEFINE_PCI_DEVICE_TABLE" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: added much cleaner implementation of is_t4()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: make functions static and remove dead code" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Remove superfluous call to pci_disable_msix()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Adds device Id for few more Chelsio adapters" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Export symbols required by cxgb4i for ipv6 support and required defines" (Prarit Bhargava) [1140743]
  - [scsi] revert "libcxgbi: Add ipv6 api to driver" (Prarit Bhargava) [1140743]
  - [scsi] revert "cxgb4i: Add ipv6 code to driver, call into libcxgbi ipv6 api" (Prarit Bhargava) [1140743]
  - [scsi] revert "cxgb4i: Fix ipv6 build failure caught with randconfig" (Prarit Bhargava) [1140743]
  - [scsi] revert "cxgb4i: remove spurious use of rcu" (Prarit Bhargava) [1140743]
  - [scsi] revert "cxgb4i: Guard ipv6 code with a config check" (Prarit Bhargava) [1140743]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.40.1.el6]
changelog:
  - [fs] gfs2: go back to try locks if reservation does not fit our needs (Robert S Peterson) [1086590 989669]
  - [fs] GFS2: add buffer in gfs2_write_end (Benjamin Marzinski) [1085307 991596]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.41.1.el6]
changelog:
  - Revert: [netdrv] mlx4_en: nullify cq->vector field when closing completion queue (Amir Vadai) [1078512 1018715]
  - Revert: [netdrv] mlx4: allow order-0 memory allocations in RX path (Frantisek Hrbata) [1078512 1018715]
  - Revert: [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1078492 1023272]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.42.1.el6]
changelog:
  - [fs] gfs2: Use ->dirty_inode() (Robert S Peterson) [1094621 887341]
  - [netdrv] macvtap: limit head length of skb allocated (Jason Wang) [1092352 1029381]
  - [netdrv] macvtap: do not zerocopy if iov needs more pages than MAX_SKB_FRAGS (Jason Wang) [1092352 1029381]
  - [netdrv] macvtap: correctly linearize skb when zerocopy is used (Jason Wang) [1092352 1029381]
  - [netdrv] tuntap: limit head length of skb allocated (Frantisek Hrbata) [1092352 1029381]
  - [vhost] fix total length when packets are too short (Michael S. Tsirkin) [1074440 1064444] {CVE-2014-0077}
  - [scsi] lpfc 8.3.44: Fix kernel panics from corrupted ndlp list (Rob Evers) [1091161 1063699]
  - [scsi] lpfc: Fixed spinlock hang (Rob Evers) [1091161 1063699]
  - [kernel] Prevent deadlock when post_schedule_rt() results in calling wakeup_kswapd() on multiple CPUs (Larry Woodman) [1086845 1009626]
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1052145 1033534] {CVE-2013-6383}
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1083124 1077346] {CVE-2014-2523}
  - [kernel] hrtimers: Move SMP function call to thread context (Mateusz Guzik) [1079868 1073129]
  - [kernel] hrtimers: Support resuming with two or more CPUs online (Mateusz Guzik) [1079868 1073129]
  - [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1078492 1023272]
  - [netdrv] mlx4: allow order-0 memory allocations in RX path (Frantisek Hrbata) [1078512 1018715]
  - [netdrv] mlx4: use one page fragment per incoming frame (Amir Vadai) [1078512 1018715]
  - [netdrv] mlx4_en: nullify cq->vector field when closing completion queue (Amir Vadai) [1078512 1018715]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.43.1.el6]
changelog:
  - [char] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094245 1094237] {CVE-2014-0196}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.45.1.el6]
changelog:
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104523 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104523 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104523 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104523 1104517] {CVE-2014-3153}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.46.1.el6]
changelog:
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094313 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094313 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [x86] kvm: rate-limit global clock updates (Andrew Jones) [1102253 1072373]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.47.1.el6]
changelog:
  - [net] ipv4: fix route cache rebuilds (Jiri Pirko) [1113823 1111631]
  - [net] ipv6: router reachability probing (Jiri Benc) [1115262 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1115262 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1115262 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1115262 1029585]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.48.1.el6]
changelog:
  - [x86] hyperv: Bypass the timer_irq_works() check (Jason Wang) [1112225 1040349]
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1120666 844450]
  - [scsi] fix performance regression due to inverted blk_get_queue return (Mike Snitzer) [1117581 1098658]
  - [net] mac80211: crash dues to AP powersave TX vs. wakeup race (Frantisek Hrbata) [1093618 1083532] {CVE-2014-2706}
  - [netdrv] ath9k: tid->sched race in ath_tx_aggr_sleep() (Frantisek Hrbata) [1093340 1083250] {CVE-2014-2672}
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP (Petr  Matousek) [1119464 1119462] {CVE-2014-4943}
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1117227 1115933] {CVE-2014-4699}
  - [net] rds: prevent dereference of a NULL device in rds_iw_laddr_check (Radomir Vrbovsky) [1093341 1083277] {CVE-2014-2678}
  - [mm] swap: do not skip lowest_bit in scan_swap_map() scan loop (Rafael Aquini) [1099727 1060886]
  - [mm] swap: fix shmem swapping when more than 8 areas (Rafael Aquini) [1099727 1060886]
  - [mm] swap: fix swapon size off-by-one (Rafael Aquini) [1099727 1060886]
  - [net] ipv4: current group_info should be put after using (Jiri Benc) [1087478 1087414] {CVE-2014-2851}
  - [net] rds: dereference of a NULL device (Jacob Tanenbaum) [1093338 1079219] {CVE-2013-7339}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.49.1.el6]
changelog:
  - [kernel] futex: Fix errors in nested key ref-counting (Frantisek Hrbata) [1094461 1094458] {CVE-2014-0205}
  - [fs] fsnotify: delay unmounting until all inode are fput (Eric Paris) [1130628 886723]
  - [fs] inotify: determine wd before races are possible (Eric Paris) [1130628 886723]
  - [fs] fsnotify: do not hold notification mutex when putting events (Eric Paris) [1130628 886723]
  - [fs] fsnotify: use GFP_NOFS when allocating event holders (Eric Paris) [1130628 886723]
  - [md] raid: avoid data corruption during recovery of double-degraded RAID6 (Jes Sorensen) [1131410 1090423]
  - [perf] x86: ignore CondChgd bit to avoid false NMI handling (Don Zickus) [1134695 1116947]
  - [netdrv] bnx2x: fix set_setting for some PHYs (Petr Holasek) [1138300 1009332]


author: Chris Feist <cfeist@redhat.com> - 0.9.123-3
changelog:
  - Added ability to upgrade cluster cib and we auto upgrade cib if we're running
    an acl command (except show or help)
  - Resolves: rhbz#1112727


author: Chris Feist <cfeist@redhat.com> - 0.9.123-4
changelog:
  - Fixed resource delete for clones of groups with more than one resource
  - Fixed unclone of group so all resources are removed
  - Resolves: rhbz#1107612 rhbz#1108778


author: Chris Feist <cfeist@redhat.com> - 0.9.123-6
changelog:
  - Fixed issue with sync cluster.conf & adding uid/gid across cluster on RHEL6 w/ pcsd
  - Resolves: rhbz#1102836


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-14
changelog:
  - handle different usb scheme needed to support ReinerSCT Cyberjack
    readers. Patch was supplied by customer.


author: Nathan Scott <nathans@redhat.com> - 3.9.0-1
changelog:
  - Create new sub-packages for pcp-webapi and pcp-manager
  - Split configuration from pcp-libs into pcp-conf (multilib)
  - Fix pmdagluster to handle more volumes, fileops (BZ 1066544)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.9.2-1
changelog:
  - Improve pmdarpm(1) concurrency complications (BZ 1044297)
  - Fix pmconfig(1) shell output string quoting (BZ 1085401)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-1
changelog:
  - Merged pcp-gui and pcp-doc packages into core PCP.
  - Allow for conditional libmicrohttpd builds in spec file.
  - Adopt slow-start capability in systemd PMDA (BZ 1073658)
  - Resolve pmcollectl network/disk mis-reporting (BZ 1097095)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-3
changelog:
  - Backport PCP daemon signal handling fixes (BZ 847343).
  - Resolve potential signed integer overflow (ET rpmdiff 97915).
  - Update spec to ensure tutorial files live in pcp-doc package.


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-13
changelog:
  - If the ssl part is specified for ldap, default to ldaps unless
    otherwise specified in the .conf file


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-14
changelog:
  - Handle PKCS #11 modules when NSS or pam_pkcs11 only specify a partial path
  - Fix coverity issues (found in 7.0 coverity scan)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-22
changelog:
  - Handle unbuffered input in a better way to fix the simulate declined failure
    when using pkcon.
  - Resolves: #811097


author: David Vossel <dvossel@redhat.com> - 1.1.10-15
changelog:
  - Fix: Removes unnecessary newlines in crm_resource -O output
      Resolves: rhbz#1038155
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
      Resolves: rhbz#1046131
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1046131


author: David Vossel <dvossel@redhat.com> - 1.1.10-16
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078954


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-1
changelog:
  - Update to upstream release 1.1.12-rc3
  - The CIB has O(2) better performance and updates are applied with greater reliablity
  - Transient attributes are now recorded in a truely atomic manner
  - Supports fencing agents that need the host to be unfenced at startup
  - CIB ACLs have been reimplemented and are now enabled 
  - Various bugs squashed

  - Resolves: rhbz#1020210 rhbz#1036631 rhbz#1069279
  - Resolves: rhbz#1069795 rhbz#1071995


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-2
changelog:
  - Bug rhbz#1054307 - cname pattern match should be more restrictive in init script
      Resolves: rhbz#1054307


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-3
changelog:
  - Fix: crmd: avoid double free caused by nested hash table removal
  - Fix: ignore SIGPIPE with gnutls is in use
  - Fix: cib: cl#5222 - Prevent assert in xml_calculate_changes() on performing cib operations
      Resolves: rhbz#1071995


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-31
changelog:
  - Resolves: rhbz#1088656 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1070356 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1041576 (pluto cannot write to directories not owned by root)
  - Resolves: rhbz#1025687 service ipsec stop shows errors about unloading used modules
  - Resolves: rhbz#1092913 The default nss database created by ipsec can not be used
  - Resolves: rhbz#1105179 ipsec_auto --ready doesn't work properly
  - Resolves: rhbz#1002708 rightid=%fromcert does not use the ID from the offered peer certificate
  - Resolves: rhbz#908478  Openswan is sending DPD and/or NAT-T keep alive messages when the IPsec SA is active
  - Resolves: rhbz#970349  ikev2 pending SA and rekey issues
  - Resolves: rhbz#970279  ikev2=insist allows an ikev1 proposal when acting as responder
  - Resolves: rhbz#988106  strict checking of phase2alg= parameters allows mismatched policy
  - Resolves: rhbz#1019746 ipsec ikeping does not recognize --exchangenum parameter
  - Resolves: rhbz#1018327 ipsec.conf man page lacks example for AES-GCM configuration
  - Resolves: rhbz#730975  Openswan doesn't work with ike=modp1536 option
  - Resolves: rhbz#1021961 pluto abort when using SHA2_{384,512} IKE encryption algorithm
  - Resolves: rhbz#739949  Openswan net-to-net not work with unencrypted connection on specific port
  - Resolves: rhbz#993124  ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#834397  ikev2 crashes when firing up a few conns at once
  - Resolves: rhbz#1099871  Missing man-page ipsec_whack


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-32
changelog:
  - Resolves: rhbz#1092913 create nss db before startup if not there
  - Resolves: rhbz#1098473 ipsec newhostkey returns 0 even if it fails (and enforce min 2192 RSA key size)
  - Resolves: rhbz#1114683 configuring a non-standard ESP algorithm (like CAST) cause a restart of pluto
  - Resolves: rhbz#1126066 dcookie code enabled with force_busy=yes uses bad pointer causing restart


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-35
changelog:
  - Resolves: rhbz#1114683 configuring a non-standard AH / ESP algorithm [updated]
  - Resolves: rhbz#993124 ikev2 delete - work around to unbreak -fstack-protector [updated]


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-95
changelog:
  - adjust the key echange DH groups and ssh-keygen according to SP800-131A (#993580)
  - log failed integrity test if /etc/system-fips exists (#1020803)
  - backport ECDSA and ECDH support (#1028335)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-96
changelog:
  - prevent a server from skipping SSHFP lookup (#1081338) CVE-2014-2653
  - ignore environment variables with embedded '=' or '\0' characters CVE-2014-2532
  - backport ControlPersist option (#953088)
  - log when a client requests an interactive session and only sftp is allowed (#997377)
  - don't try to load RSA1 host key in FIPS mode (#1009959)
  - restore Linux oom_adj setting when handling SIGHUP to maintain behaviour over restart
    (#1010429)
  - ssh-keygen -V - relative-specified certificate expiry time should be relative to current time
    (#1022459)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-97
changelog:
  - x11 forwarding - be less restrictive when can't bind to one of available addresses
    (#1027197)
  - better fork error detection in audit patch (#1028643)
  - fix openssh-5.3p1-x11.patch for non-linux platforms (#1100913)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-98
changelog:
  - add possibility to autocreate only RSA key into initscript (#1111568)
  - fix several issues reported by coverity


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-5
changelog:
  - Move removal of directories to the end of the %prep section
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-6
changelog:
  - Update pem sources to the same ones used on rhel-7
  - Remove no longer needed patches on account of this update
  - Resolves: Bug 1002205


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096315)
  - fixed missing outline in mwm while moving window (rhbz#1000343)
    (copy of rhbz#997241)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-8
changelog:
  - fixed Label size computed wrong within a Form (rhbz#869782) (rhbz#953938)
    (copy of rhbz#980577)
    (MotifZone bug #1612 final upstream patch with white space changes)
  - fixed segmentation violation in XmList after calling XmListDeleteAllItems 
    and clicking on a new item with left-shift left-button click (rhbz#1058644)
    (MotifZone bug #1636)


author: Petr Lautrbach <plautrba@redhat.com> 2.4.3.1-2
changelog:
  - use correct OID in CKA_ECDSA_PARAMS attribute
  - fixed ica token's SHA update function when passing zero message size
  - Resolves: #1027606, #1131745


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Add nss-util portion of a fix for pluggable ecc bug in nss and nss-util
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Apply the patch for the pluggable ecc fix
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - nssutil_growList and nssutil_ReadSecmodDB cleanup
  - Resolves: Bug 1019529 - New defect found in nss-util-3.14.0.0-2.el6


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is "yes" or "no"
  - Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-15
changelog:
  - Fix shlibsign to return non-zero on failure
  - Resolves: Bug 587634 - shlibsign returns 0 although if fails


author: Steve Dickson <steved@redhat.com> 1.2.3-45
changelog:
  - Smothed out upgrads from rhel6 to rhel7 (bz 1086625)
  - rpc.statd: Bind downcall socket to loopback address (bz 1018358)
  - nfsiostat: periodically flush stdout (bz 1007195)
  - Fixed a buffer overflow in exportfs (bz 1008381)


author: Steve Dickson <steved@redhat.com> 1.2.3-47
changelog:
  - Stop Treat IP addresses a FQDN rather than SUBNETs. (bz 1098592)
  - Removed the local_lock not supported line in man page (bz 1017477)


author: Steve Dickson <steved@redhat.com> 1.2.3-50
changelog:
  - gssd: Drop full domain when constructing the Ad hostname (bz 1067423)
  - Explained nfsiostat output in man page (bz 869684)
  - mountd.man: Added missing arguments in man page (bz 1003555)


author: Steve Dickson <steved@redhat.com> 1.2.3-53
changelog:
  - gssd: Error out when rpc_pipefs directory is empty (bz 1116698)
  - exportfs: Removed a warning from exportfs.c (bz 1133562)
  - nfsiostat: Corrected the cache hits (bz 1066314)
  - mountd: optimize libblkid usage (bz 1113204)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-50
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073223)
  - added cache to hrSWRunTable to provide consistent results (#1007634)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1073237)
  - fixed snmptrapd crashing on forwarding SNMPv3 traps (#1131844)


author: Laine Stump <laine@redhat.com> - 0.2.4-1
changelog:
  - rebase to netcf-0.2.4
   - resolves rhbz#851748
   - avoid use of uninitialized data when getting mac address
     resolves rhbz#1052156
   - eliminate duplicate quotes in bonding options
   - resolves rhbz#879055
   - wait for IFF_UP and IFF_RUNNING after calling ifup
   - don't require IFF_RUNNING for bridge devices
   - avoid memory leak in debian when listing interfaces
   - limit interface names to IFNAMSIZ-1 characters in length
   - support systemd for netcf-transaction


author: Jay Fenlason <fenlason@redhat.com> 1.8-2
changelog:
  - Add BuildRequires on flex and bison
  - Add "export AR=ar" to allow builds on RHEL-7 to work.
    Resolves: rhbz822527


author: Jay Fenlason <fenlason@redhat.com> 1.8-3
changelog:
  - Move the module files to the (correct for RHEL-7) mpi/ directory.
  - Add MANPATH to the module files.


author: Jay Fenlason <fenlason@redhat.com> 2.0a-1
changelog:
  - Add Build Requires on autoconf, automake, libtool,
    perl-Digest-MD5, hwloc-devel, and libibmad-devel.
  - remove build requires on java
  - New upstream version, edited so it can pass a license audit.
    (RHEL7) R e s o l v e s: r h b z 1001718


author: Jay Fenlason <fenlason@redhat.com> 2.0rc1-1
changelog:
  - Upgrade to upstream 2.0rc1
  - Backport from RHEL-7 to RHEL-6
  - Include the -free patch (written by me) to prevent errors caused
    by calling the free macro rather than the free() function.
  - Fix the build process to work on RHEL-6, with its ancient
    auto*, libtool, etc.  This requires not rerunning autogen.sh
  - Resolves: rhbz1093454


author: Jay Fenlason <fenlason@redhat.com> 3.2-10
changelog:
  - Add BuildRequires for libibmad-devel
  - Build against mpich, now that we have a mpi-3 version of it.
  - rebuild against new mvapich2
    R e s o l v e s: rhbz1011910, rhbz1011915


author: Jay Fenlason <fenlason@redhat.com> 3.2.4-1
changelog:
  - Backport from RHEL-7.0
  - Edit old changelog entries so commit can work.
  - Update to latest imb and osu versions, no longer using openfabrics.org
    tarball.
    Resolves: rhbz1093468


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-15
changelog:
  - Fixes Bugzilla Bug #749408 - PK11_ListCerts called to retrieve all user
    certificates for every server (mod_nss-PK11_ListCerts.patch)
  - Fixes Bugzilla Bug #749409 - Add '--enable-ecc' option to %configure
    line under %build section of RHEL 6 spec file


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-19
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1030265 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-6.5.z]


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-20
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1030267 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-6.6]


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21
changelog:
  - Bumped version build/runtime requirements for 'nspr' and 'nss'
  - Added runtime dependency for 'nss-softokn'
  - Bugzilla Bug #1002733 - Apache core generated with sig 5
  - Bugzilla Bug #1016628 - mod_nss httpd segfaulting regularly
  - Bugzilla Bug #866703 - Memory error in mod_nss (eol_memmove.patch)


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Use org.freedesktop.sssd.infopipe.GetUserGroups for group lists.
  - Support new org.freedesktop.sssd.infopipe.GetUserAttr parameters /
    return values.
  - Removed LookupOutputGroupsSeparator.
  - LookupOutputGroups and LookupUserAttr now support separator as
    optional second parameter.
  - Added LookupUserGroupsIter and LookupUserAttrIter.
  - Added LookupDbusTimeout.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.8.1-1
changelog:
  - Ensure we run before mod_headers so that our result can be put to
    request headers for mod_proxy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - No longer call lookup_identity_hook explicitly, hook order does
    the same.
  - Silence compile warnings by specifying C99.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Simo Sorce <simo@redhat.com> 0.7.0-4
changelog:
  - Backport of useful patches from upstream
    - Better handling of IDP reported errors
    - Better handling of session data storage size


author: Simo Sorce <simo@redhat.com> 0.8.0-1
changelog:
  - New upstream realease version 0.8.0
  - Upstream moved to github
  - Drops patches as they have been all included upstream


author: Adam Jackson <ajax@redhat.com> 10.1.1-0.1
changelog:
  - Rebase to Mesa 10.1.1
  - Initial rebuild against llvm 3.4
  - Add llvm_rebase macro for future convenience


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-8
changelog:
  - Work around udev sporadically not updating ID_FS_TYPE field of block
    device entry in its database when array is being created.
  - Resolves bz1040006


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-9
changelog:
  - Change permissions of /etc/cron.d/raid-check to 600
  - Resolves bz1012505
  - Avoid double close() issue reported by Coverity
  - Resolves bz991041


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-10
changelog:
  - Fix problem of IMSM platform capabilities not being detected in UEFI
    mode when only the second SATA controller is enabled.
  - Resolves bz1075529


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-11
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1059307


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-2
changelog:
  - Fix problem with path=* policy not working, due to lack of /dev/disk/by-path/
  - Resolves bz1059193


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-6
changelog:
  - Fix problem with reshape of IMSM RAID arrays failing to start
  - Disallow IMSM arrays spanning multiple controllers
  - Fix problem with reshape failing to restart when reassembling IMSM RAID
  - Resolves bz1136880, bz1136891, bz1136903


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.107-2
changelog:
  - Add report/list_item_separator lvm.conf option.
  - Add lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Comment out devices/{preferred_names,filter} in default lvm.conf file.
  - Enhance lvconvert thin, thinpool, cache and cachepool command line support.
  - Display 'C' only for cache and cache-pool target types in lvs.
  - Prompt for confirmation before change LV into a snapshot exception store.
  - Return proper error codes for some failing lvconvert funtions.
  - Add initial code to use cache tools (cache_check|dump|repair|restore).
  - Add --activationmode degraded to activate degraded raid volumes by default.
  - Add separate lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Recognize "auto"/"unmanaged" values in selection for appropriate fields only.
  - Add report/binary_values_as_numeric lvm.conf option for binary values as 0/1.
  - Add --binary arg to pvs,vgs,lvs and {pv,vg,lv}display -C for 0/1 on reports.
  - Add separate reporting fields for each each {pv,vg,lv}_attr bit.
  - Separate LV device status reporting fields out of LV fields.
  - Fix regression causing PVs not in VGs to be marked as allocatable (2.02.59).
  - Fix VG component of lvid in vgsplit/vgmerge and check in vg_validate.
  - Add lv_full_name, lv_parent and lv_dm_path fields to reports.
  - Change lv_path field to suppress devices that never appear in /dev/vg.
  - Postpone thin pool lvconvert prompts (2.02.107).
  - Require --yes option to skip prompt to lvconvert thin pool chunksize.
  - Support lvremove -ff to remove thin volumes from broken thin pools.
  - Require --yes to skip raid repair prompt.
  - Change makefile %.d generation to handle filename changes without make clean.
  - Fix use of buildir in make pofile.
  - Enhance private volumes UUIDs with suffixed for easier detection.
  - Do not use reserved _[tc]meta volumes for temporary LVs.
  - Leave backup pool metadata with _meta%d suffix instead of reserved _tmeta%d.
  - Allow RAID repair to reuse PVs from same image that suffered a failure.
  - New RAID images now avoid allocation on any PVs in the same parent RAID LV.
  - Always reevaluate filters just before creating PV.
  - Fix dm_report_field_string_list to handle delimiter with multiple chars.
  - Add dm_report_field_reserved_value for per-field reserved value definition.


author: Alasdair Kergon <agk@redhat.com> - 2.02.108-1
changelog:
  - Add lvscan --cache which re-scans constituents of a particular LV.
  - Make dmeventd's RAID plugin re-scan failed PVs when lvmetad is in use.
  - Improve lvconvert --merge and --splitsnapshot validation.


author: Alasdair Kergon <agk@redhat.com> - 2.02.109-1
changelog:
  - Allow approximate allocation with +%FREE in lvextend.
  - Fix a segfault in lvscan --cache when devices were already missing. (2.02.108)
  - Display actual size changed when resizing LV.
  - Remove possible spurious "not found" message on PV create before wiping.
  - Handle upgrade from 2.02.105 when an LV now gaining a uuid suffix is active.
  - Remove lv_volume_type field from reports. (2.02.108)
  - Fix incorrect persistent .cache after vgcreate with PV creation. (2.02.108)
  - Add dm_tree_set_optional_uuid_suffixes to libdevmapper to handle upgrades.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.109-2
changelog:
  - Fix pvcreate_check() to update cache correctly after signature wiping.
  - Fix primary device lookup failure for partition when processing mpath filter.
  - Remove spurious "Skipping mirror LV" message on pvmove of clustered mirror.
  - If LV inactive and non-clustered, do not issue "Cannot deactivate" on -aln.
  - Cleanly error when creating RAID with stripe size < PAGE_SIZE.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.110-1
changelog:
  - Fix manipulation with thin-pools which are excluded via volume_list.
  - Support lv/vgremove -ff to remove thin vols from broken/inactive thin pools.
  - Fix typo breaking configure --with-lvm1=shared.
  - Modify lvresize code to handle raid/mirrors and physical extents.
  - Don't allow pvcreate to proceed if scanning or filtering fails.
  - Print name of LV which on activation triggers delayed snapshot merge.
  - Add lv_layout and lv_role LV reporting fields.
  - Properly display lvs lv_attr volume type and target type bit for cache origin.
  - Improve libdevmapper-event select() error handling.
  - Add extra check for matching transation_id after message submitting.
  - Add dm_report_field_string_list_unsorted for str. list report without sorting.
  - Support --deferred with dmsetup remove to defer removal of open devices.
  - Update dm-ioctl.h to include DM_DEFERRED_REMOVE flag.
  - Add support for selection to match string list subset, recognize { } operator.
  - Fix string list selection with '[value]' to not match list that's superset.
  - Fix string list selection to match whole words only, not prefixes.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-1
changelog:
  - Reinstate nosync logic when extending mirror. (2.02.110)
  - Fix total area extent calculation when allocating cache pool. (2.02.110)
  - Pass properly sized char buffers for sscanf when initializing clvmd.
  - Restore proper buffer size for parsing mountinfo line (1.02.89)


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-55
changelog:
  - Fine-tune update-downgrade-uninstall scriptlets as changed in rhbz#991575 fix
    and modify new suggested value in sysconfig file
    Related: rhbz#991575


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-56
changelog:
  - luci: Update the fence_kdump config forms
    Resolves: rhbz#918795
  - luci: Move sort arrows for resources
    Resolves: rhbz#919225
  - luci: Cope better with editing services containing VM
    Resolves: rhbz#1100817
  - luci: Add support for the bind-mount resource
    luci: Update fence_brocade
    luci: Add support for the reboot_on_pid_exhaustion
    luci: Remove mention of fenced skip_undefined
    luci: Add support for the postgres-8 startup_wait attr
    luci: Add the ssh_options attribute to applicable fence
    luci: Add support for the no_kill attribute of the VM
    luci: Add support for the use_findmnt attribute
    Resolves: rhbz#1117398


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-57
changelog:
  - Fix luci unable to handle node name ending with recognized filetype extension
    Resolves: rhbz#999324
  - Add a custom luci launcher allowing sane Python runtime + SELinux coexistence
    Resolves: rhbz#1026374
  - Fix privilege escalation through cluster with specially crafted configuration
    Resolves: rhbz#1127286 (CVE-2014-3593)


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-59
changelog:
  - luci: Allow & in XML attribute values
    Resolves: rhbz#855112
  - luci: Fix positioning of sort arrows
    Resolves: rhbz#919225
  - luci: Allow nfsclient to be a child of nfsserver
    Resolves: rhbz#919243
  - luci: Remove bad default values for startup_wait and
    luci: Remove ssh_options fields from fence agents that do
    luci: Support newly added bind-mount "name" attribute
    Resolves: rhbz#1117398


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-61
changelog:
  - Resolve newly introduced issue with doubled Edit Fence Instance forms
    Related: rhbz#1127286 (CVE-2014-3593)


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-62
changelog:
  - luci: Fix editing services that VM references
  - luci: Fix error in fence_lpar form
    luci: Fix issues with bind-mount resource name display
    Resolves: rhbz#1117398


author: Petr Machata <pmachata@redhat.com> - 0.5-25.45svn
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.5-account_execl.patch)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-1.20140318git2b099c
changelog:
  - update to 20140318git2b099c (#1067502, #1011022, #1019121, #1004996, #1016356)
  - fix PIE linking (#1094368)
  - include simulation test suite


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-37
changelog:
  - udev: consider the device a CDROM when ID_CDROM=1 (rhbz#1016878)
  - Add support for timestamping QEMU logs (rhbz#997010)
  - Detect -msg-timestamp capability from QEMU help output (rhbz#997010)
  - qemu: Avoid leak in qemuDomainCheckRemoveOptionalDisk (rhbz#1014730)
  - Return right error code for baselineCPU (rhbz#1097969)
  - Add a port allocator class (rhbz#1018695)
  - Avoid integer wrap on remotePortMax in QEMU driver (rhbz#1018695)
  - Followup fix for integer wraparound in port allocator (rhbz#1018695)
  - Don't spam logs with "port 0 must be in range" errors (rhbz#1018695)
  - qemu: Avoid assigning unavailable migration ports (rhbz#1018695)
  - qemu: Make migration port range configurable (rhbz#1018695)
  - qemu: Fix augeas support for migration ports (rhbz#1018695)
  - qemu: clean up migration ports when migration cancelled (rhbz#1018695)
  - qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1083238)
  - qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1083238)
  - qemu: Ignore temporary job errors when checking migration status (rhbz#1083238)
  - qemu: Send migrate_cancel when aborting migration (rhbz#1098833)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-38
changelog:
  - remote: Don't leak priv->tls object on connection failure (rhbz#1099075)
  - Fix invalid read in virNetSASLSessionClientStep debug log (rhbz#1100173)
  - Tie SASL callbacks lifecycle to virNetSessionSASLContext (rhbz#1100173)
  - fix leak in memoryStats with older python (rhbz#1099860)
  - hooks: let virCommand do the error reporting (rhbz#1105397)
  - SELinux: don't fail silently when no label is present (rhbz#1105954)
  - qemu: Add qemuDomainReleaseDeviceAddress to remove any address (rhbz#807023)
  - qemu: Separate disk device removal into a standalone function (rhbz#807023)
  - qemu: Separate controller removal into a standalone function (rhbz#807023)
  - qemu: Separate net device removal into a standalone function (rhbz#807023)
  - qemu: Separate host device removal into a standalone function (rhbz#807023)
  - Add VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event (rhbz#807023)
  - examples: Handle VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event (rhbz#807023)
  - Clarify virDomainDetachDeviceFlags documentation (rhbz#807023)
  - Add virDomainDefFindDevice for looking up a device by its alias (rhbz#807023)
  - qemu: Add support for DEVICE_DELETED event (rhbz#807023)
  - qemu: Remove devices only after DEVICE_DELETED event (rhbz#807023)
  - qemu: Emit VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED events (rhbz#807023)
  - Add function to find a needle in a string array (rhbz#807023)
  - util: Non-existent string array does not contain any string (rhbz#807023)
  - conf: Make error reporting in virDomainDefFindDevice optional (rhbz#807023)
  - qemu: Introduce qemuMonitorGetDeviceAliases (rhbz#807023)
  - qemu: Unplug devices that disappeared when libvirtd was down (rhbz#807023)
  - qemu: Finish device removal in the original thread (rhbz#807023)
  - qemu: Process DEVICE_DELETED event in a separate thread (rhbz#807023)
  - qemu: Remove interface backend only after frontend is gone (rhbz#807023)
  - qemu: Remove disk backend only after frontend is gone (rhbz#807023)
  - qemu: Return in from qemuDomainRemove*Device (rhbz#807023)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-39
changelog:
  - Fix crash when saving a domain with type none dac label (rhbz#1108590)
  - Initialize threading & error layer in LXC controller (rhbz#1109120)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-40
changelog:
  - formatdomain.html.in: Document implementation limitation of QoS (rhbz#980350)
  - Fix error in qemuDomainSetNumaParamsLive (rhbz#857312)
  - cpu: Add new Broadwell CPU model (rhbz#1100381)
  - docs: publish correct enum values (rhbz#1113316)
  - qemu: blockcopy: Don't remove existing disk mirror info (rhbz#1113828)
  - qemu: fix guestfwd chardev option back how it was (rhbz#1112066)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-41
changelog:
  - Add invariant TSC cpu flag (rhbz#996772)
  - Fix segfault when starting a domain with no cpu definition (rhbz#996772)
  - qemu: copy: Accept 'format' parameter when copying to a non-existing img (rhbz#1113828)
  - Bind connection close callback APIs to python binding (rhbz#1114619)
  - qemu: Factor out body of qemuDomainGetMetadata for universal use (rhbz#1115039)
  - qemu: Factor out body of qemuDomainSetMetadata for universal use (rhbz#1115039)
  - conf: Factor out setting of metadata to simplify code (rhbz#1115039)
  - util: Add helper to convert libxml2 nodes to a string (rhbz#1115039)
  - conf: Add support for requesting of XML metadata via the API (rhbz#1115039)
  - conf: allow to add XML metadata using the virDomainSetMetadata api (rhbz#1115039)
  - conf: Avoid false positive of uninitialized variable use (rhbz#1115039)
  - lib: Don't force the key argument when deleting metadata (rhbz#1115039)
  - test: Add <metadata> support into the test drivera (rhbz#1115039)
  - tests: Add metadata tests (rhbz#1115039)
  - conf: Don't corrupt metadata on OOM (rhbz#1115039)
  - Ignore additional fields in iscsiadm output (rhbz#1116741)
  - conf: net: Fix helper for applying new network definition (rhbz#1116754)
  - blockjob: wait for pivot to complete (rhbz#1119385)
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1117177)
  - virsh: Use inactive definition when removing disk from config (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1117177)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-42
changelog:
  - conf: Fix backport of metadata API code (rhbz#1115039)
  - conf: Always format seclabel's model (rhbz#1113860)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-43
changelog:
  - Fix blkdeviotune for shutoff domain (rhbz#1122819)
  - rpc: message related sizes enlarged (rhbz#1126393)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1126393)
  - Fix max stream packet size for old clients (rhbz#1126393)
  - Adjust legacy max payload size to account for header information (rhbz#1126393)
  - rpc: Correct the wrong payload size checking (rhbz#1126393)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46
changelog:
  - cpu: separate host-model and host-passthrough (rhbz#1138222)
  - Don't include non-migratable features in host-model (rhbz#1138222)
  - Don't add dhcp hosts to hostsfile twice (rhbz#1137011)


author: John Ferlan <jferlan@redhat.com> - 0.6.1.10.el6
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1046280)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Steve Dickson <steved@redhat.com> 0.2.1-7
changelog:
  - Fixed some races in getnetconfig code (bz 1031498)
  - Remove the installation of libtirpc.a and libtirpc.la (bz 869397)


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-20
changelog:
  - Bugzilla: pass Bugzilla_token in all XML RPC calls
  - mailx: improve notification e-mail headers
  - mailx: include hostane in notification e-mail
  - Resolves: #989530, #997871, #1090466, #1093375


author: David Tardon <dtardon@redhat.com> - 1:4.0.4.2-10
changelog:
  - Resolves: rhbz#1012379 sound file included in presentation displayed
    as a gray sqaure
  - Resolves: rhbz#1012390 CRITICAL **: AtkObject* atk_object_wrapper_ref
  - Resolves: rhbz#1038189 libreoffice does not recognize new printer
  - Resolves: rhbz#1085420 LO incorrectly provides liblcms2.so.2
  - Resolves: rhbz#1065629 RTF import probable regression with non-english
    BigMachines exports
  - Resolves: rhbz#1020712 No Default Font showing when write in text
    boxes at first, behaving unusual
  - Resolves: rhbz#1021915 Menu drop-down list overlapping with other menu
    items
  - Resolves: rhbz#1035298 Transaction check errors due to file conflicts
  - Related: rhbz#1035298 provide non-arch variants of openoffice.org
    provides too


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-14
changelog:
  - Resolves: rhbz#1130264 crash in gstreamer callback on s390x
  - Resolves: rhbz#1131428 cannot export charts as svg
  - Resolves: rhbz#1035298 obsolete openoffice.org-langpack-ms_MY


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Pavel Šimerda <psimerda@redhat.com> - 1.0.1-3
changelog:
  - Resolves: #738244 - provide libnetfilter_queue package for RHEL 6.6
  - use a modified EPEL6 spec file


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Add the modprobe.d/mlx4.conf for user set module options that we
    don't replace on upgrade
  - Rename the dracut module to just mlx4 instead of -libmlx4 (dracut
    takes a dash between the number and the name literally)
  - Add obsoletes tag to make us replace libmlx4-rocee
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Actually use the right %source macro when installing the new
    mlx4.conf file this time
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Update to latest upstream release (which adds XRC support,
    infrastructure for verbs extensions, core support for usNIC
    nodes and transports, uverbs extensions, and receive flow
    steering extension)
  - The HPN channel in rhel6 is going away and the RoCE capability
    is being folded back into the base OS channel package (aka
    this one).  Provide an Obsoletes tag to cause this package
    to replace the older libibverbs-rocee package from the HPN
    channel
  - Resolves: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Add the RoCE IP Address GID support patches
  - Create our own tarball that is the three patches we needed
    then autoreconf run with an acceptable version of autotools
    as the version in the build system is too old
  - Resolves: bz1051211


author: Doug Ledford <dledford@redhat.com> - 1.3.3-1
changelog:
  - Bump and rebuild against new libibverbs, update our sources while we
    are at it
  - Related: bz854655


author: Simo Sorce <simo@redhat.com> 2.3.6-0.20131125.3
changelog:
  - Initial packaging
  - Based on the spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>
  - Code is updated to latest master via a jumbo patch while waiting for
    official upstream release.
  - Jumbo patch includes also additional patches sent to upstream list)
    to build on Fedora 20
  - Perl bindings are disabled as they fail to build
  - Disable doc building as it doesn't ork correctly for now


author: Simo Sorce <simo@redhat.com> 2.4.0-0
changelog:
  - Update to final 2.4.0 version
  - Drop all patches, they are now included in 2.4.0
  - Change Source URI


author: Simo Sorce <simo@redhat.com> - 2.4.0-5
changelog:
  - Add various fixes from upstream master, mostly memory leaks
  - Change to final covscan fixes as applied upstream


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-14
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1066589)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-16
changelog:
  - do not resend signal on termination (#1075635)
  - fix argv rewrite (#1047506)
  - fix brace expansion on/off (#1078698)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070350)
  - fix parser errors related to the end of the here-document marker (#1036931)
  - ksh hangs when command substitution fills out the pipe buffer (#1062296)
  - using typeset -l with a restricted variabled caused segmentation fault (#1083713)
  - ksh stopped on read when monitor mode was enabled (#1023109)
  - monitor mode was documented incorrectly (#1019334)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-17
changelog:
  - do not crash when unsetting running function from another one (#1105138)
  - should report an error when trying to cd into directory without execution bit (#1102627)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-18
changelog:
  - job locking mechanism did not survive compiler optimization (#1112306)
  - wrong return code from a pipe in command substitution (#1117316)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-10.4
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1072456)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-25
changelog:
  - ksu: if the -e flag isn't used, use the target user's shell when checking
    for authorization via the target user's .k5users file (#1026721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-26
changelog:
  - pull in backport of patch to not subsequently always require that responses
    come from master KDCs if we get one from a master somewhere along the way
    while chasing referrals (RT#7650, #1113652)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-27
changelog:
  - pull in backported fix for denial of service by injection of malformed
    GSSAPI tokens (CVE-2014-4341, CVE-2014-4342, #1121510)
  - incorporate backported patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800, more of


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-29
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121510)
  - gssapi: pull in proposed-and-accepted fix for a double free in initiators
    (David Woodhouse, CVE-2014-4343, #1121510)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-30
changelog:
  - ksu: when evaluating .k5users, treat lines with just a principal name as if
    they contained the principal name followed by '*', and don't throw away data
    from .k5users when we're not passed a command to run, which implicitly means
    we're attempting to run the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: David Howells <dhowells@redhat.com> - 1.4-5
changelog:
  - Make keyctl show handle deeply nested keyrings [BZ 1075652].
  - The key serial ID field displayed by keyctl show may be up to 10 digits [BZ 1075652].
  - Make keyctl padd & co. handle binary data containing NUL chars [BZ 1075652].
  - The input buffer for keyctl padd & co. should be 1MB-1 in size [BZ 1075652].


author: Baoquan He <bhe@redhat.com> - 2.0.0-274
changelog:
  - Add fence_kdump support for generic clusters, resolves bug 1083938
  - Add function setup_cluster_nodes_and_options, resolves bug 1083938
  - Add function get_pcs_cluster_nodes, resolves bug 1083938
  - Add function is_pcs_fence_kdump, resolves bug 1083938


author: Baoquan He <bhe@redhat.com> - 2.0.0-276
changelog:
  - kexec-tools: non-default routes are ignored by kdump, resolves bug 806992
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel, resolves bug 1061480
  - use -p option with fsck instead of -y, resolves bug 1055679
  - kdump doesn't work properly with nic that has "-" in it's name, resolves bug 874529
  - fix makedumpfile report and debug messages not shown, resolves bug 1016451


author: Baoquan He <bhe@redhat.com> - 2.0.0-277
changelog:
  - mkdumprd: add support for s390 DASD FBA type device, resolves bug 1022871
  - Check status of fsck before trying to mount a file system, resolves bug 1055672


author: Baoquan He <bhe@redhat.com> - 2.0.0-278
changelog:
  - Stop maximizing the bitmap buffer to reduce the risk of OOM, resolves bug 1114153
  - Move counting pfn_memhole for cyclic mode, resolves bug 1114153
  - Remove the 1st bitmap buffer from the ELF path in cyclic mode, resolves bug 1114153
  - Fix free bitmap_buffer_cyclic error, resolves bug 1114153
  - Introduce the mdf_pfn_t type, resolves bug 1114153


author: Baoquan He <bhe@redhat.com> - 2.0.0-279
changelog:
  - mkdurmpd: Issue sync after saving vmcore-dmesg.txt, resolves bug 1123061
  - mkdumprd: Fix check condition of selinux status, resolves bug 1122880
  - mkdumprd: fix no such file or directory warning in 2nd kernel on s390, resolves bug 1122883
  - Support for eppic language as a subpackage, resolves bug 823561
  - update .gitignore/sources for eppic_030413.tar.gz, resolves bug 823561
  - makedumpfile: Fix Makefile for eppic_makedumpfile.so build, resolves bug 823561


author: Baoquan He <bhe@redhat.com> - 2.0.0-280
changelog:
  - mkdumprd: wait for multipath device node, resolves bug 1128248
  - mkdumprd: clean up found logic in wait_for_multipath_devices(), resolves bug 1128248
  - use "getent ahostsv4 host-name" to get ipv4 address of a host name, resolves bug 1127138


author: Ryan O'Hara <rohara@redhat.com> - 1.2.13-1
changelog:
  - Rebase to upstream version 1.2.13
    Resolves: rhbz#1052380, rhbz#1077201, rhbz#1007575, rhbz#967641


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.5-6.b13
changelog:
  - Removed accessibility package
   - removed patch3 java-atk-wrapper-security.patch
   - removed its files and declaration
   - removed creation of libatk-wrapper.so and java-atk-wrapper.jar symlinks
   - removed generation of accessibility.properties
  - Resolves: rhbz#1113078


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12
changelog:
  - mayor rework of specfile - sync with f21
   - accessibility kept removed
   - lua script kept unsync
   - priority and epoch kept on 0
   - not included disable-doclint patch
   - kept bundled lcms
   - unused OrderWithRequires
   - used with-stdcpplib instead of with-stdc++lib
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12
changelog:
  - fixed desktop icons
  - Icon set to java-1.8.0
  - Development removed from policy tool
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-1.b26
changelog:
  - updated to u20-b26
  - adapted patch9999 enableArm64.patch
  - adapted patch100 s390-java-opts.patch
  - adapted patch102 size_t.patch
  - removed upstreamed patch  0001-PPC64LE-arch-support-in-openjdk-1.8.patch
  - adapted  system-lcms.patch
  - removed patch8 set-active-window.patch
  - removed patch9 javadoc-error-jdk-8029145.patch
  - removed patch10 javadoc-error-jdk-8037484.patch
  - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26
changelog:
  - fixed headless (policytool moved to normal)
   - jre/bin/policytool added to not headless exclude list
  - updated aarch694 source
  - ppc64le synced from fedora
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.7.3.el6
changelog:
  - bumped release
  - changed  buildoutputdir to contains "-debug" in case of debug on
  - rewritten (long unmaintained) java-1.7.0-openjdk-debugdocs.patch and 
    java-1.7.0-openjdk-debuginfo.patch
  - debug turned on (1)
  - Resolves: rhbz#1092063


author: Omair Majid <omajid@redhat.com> - 1.7.0.51-2.4.7.5.el6
changelog:
  - Work when capabilities are set on the binary
  - Include hardcoded install path as well as $ORIGIN in RPATH
  - Resolves: rhbz#1105293


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115875


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.65-2.5.3pre01.1
changelog:
  - Bump to 2.5.3pre01.
  - Remove obsolete patches, which are now included upstream.
  - Disable LCMS via environment variables rather than maintaining a patch.
  - Resolves: rhbz#1148309


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1085010


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.6
changelog:
  - fixed outdated debug build
  - debug set (temporarily) on (1)
  - fixed java-1.6.0-openjdk-debugdocs.patch and ava-1.6.0-openjdk-debuginfo.patch
  - redeffined debugbuild and buildoutputdir (for debug on)
  - added and applied it6-mkfile-tmp.patch (upstreamed already)
  - Resolves: rhbz#1059925


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.0-9.1.13.3
changelog:
  - Backport fix (7027300) replacing HashMap with ConcurrentHashMap to avoid deadlock
  - Also includes related backport (7183251) to fix issue revealed by fixing 7027300
  - Resolves: rhbz#1098399


author: Omair Majid <omajid@redhat.com> - 1:1.6.0.1-5.1.13.8
changelog:
  - Work when capabilities are set on the binary
  - Include hardcoded install path as well as $ORIGIN in RPATH
  - Don't Expect LD_LIBRARY_PATH to be set in the launcher
  - Resolves: rhbz#1059925


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - reworked patch for unsyncHashMap.patch
    - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115868


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.0-11.1.13.4
changelog:
  - Add fix for ArrayIndexOutOfBoundsException when certain glyphs are processed
  - Regenerate rpath patch to apply after upstreamed patch.
  - Resolves: rhbz#1112806


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Remove upstreamed patches.
  - Regenerate add-final-location-rpaths patch against new release.
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - Use xz for tarballs to reduce file size.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148899


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - 1054587 iscsiuio update
  - 1053374 upstream backports to support new driver features
  - 1052361 IPC sockaddr compat to communicate with older iscsid on upgrade
  - 1076344 fix handling of multiple oustanding async events


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-12
changelog:
  - added ip6t_set (rhbz#1033270)
  - do not block uninstall on a failing alternatives --remove call in preun
    (rhbz#1059214) (rhbz#1070123)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-38.el6
changelog:
  - ipa-server-install intermittently crashed with "Unable to find
    preop.pin" (#905064)
  - Disabled sudo rules were still active in the sudoers tree (#1022199)
  - Replica installation fails if forward zone is not present (#1034478)
  - Administrative password change did not respect user password
    policy (#1029921)
  - Re-initializing a winsync connection exits with "Can't contact
    LDAP server" (#1016042)
  - Server checked for unknown attributes before "ipa" tool version
    check (#1015481)
  - CA subsystem certificate renewal was broken on CA clones (#1040009)
  - Lockout plugin worked inconsistently compared to KDC lockout
    mechanism. Also, default user policy may not have been applied if
    krbPwdPolicyReference was missing (#1088772)
  - ipa-client-automount was not backwards compatible (#1082590)
  - Increase service timeout from 120s to 300s as some services are
    known to start for more than 120s (#1060639)
  - Proxy calls to /ca/ee/ca/profileSubmit to PKI to enable installation
    of replicas with Dogtag 10 PKI (#1083878)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-40.el6
changelog:
  - Explicitly specify auth mechanism when calling ldapmodify in
    the installers (#1108661)
  - Add support for DNS classless reverse domains (#1095250)
  - Multiple nsDS5ReplicaId attributes created in
    cn=replication,cn=etc (#1109050)
  - ipa-client-install should configure sudo automatically (#1111121)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-41.el6
changelog:
  - ipasam does not support deleting multiple child trusted domains due
    to LDAP delete operation (#1110664)
  - Excessive LDAP calls by ipa-sam during file operations to samba file
    share on freeipa master cause high CPU and slow performance (#1074314)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-42.el6
changelog:
  - Require 389-ds-base >= 1.2.11.15-38 to fix roken dereference control with
    the FreeIPA 4.0 ACIs (#1112698)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.41-1
changelog:
  - netfs: implicitly handle glusterfs as a network filesystemd
  - init.d/functions: check parent dir of pid file for accessibility
  - ifup-eth: some options for bridge can be applied after the bridge is up
  - rc.sysinit: apply sysctl settings before starting udev
  - ifup: add possibility to specify value for -w parameter of arping
  - ifup-tunnel: call ifup-ipv6 in the end
  - pids_var_run: handle '(deleted)'
  - require correct version of upstart
  - rc.sysinit: use 'vgchange --ignoreskippedcluster'
  - during install do not create /var/lib/random-seed if /dev/urandom does not exist
  - rc.sysinit: increase the saved random-seed to 4K (#1023471)
  - umount-loop: make sure that we don't kill our own process
  - umount-loop: don't use xargs
  - ifup-eth: remove ipx relic (#1028135)
  - init.d/functions: add -b optin to status and killproc (#1047948)
  - remove duplicit then


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.42-1
changelog:
  - ipcalc: -c allow netmask
  - ipcalc: parse prefix more safely
  - vi.po: fix parentheses
  - network-functions: handle BONDING_OPTS better
  - custom naming for VLAN devices
  - bonding: match whole name of interface
  - network-functions: ETHTOOL_DELAY introduction patch
  - ifup-wireless: add support for wowlan
  - Remove NETWORKING_IPV6 from sysconfig.txt (#918622)
  - bridging: add possibility to set prio and ageing


author: Lukáš Nykrýn - 9.03.43-1
changelog:
  - ifup-aliases: arpcheck - check for parent operstate and carrier
  - ifdown: don't wait for aliases
  - hotplug: don't call ifup when new vlan appears
  - ifup-wireless: add support for wowlan (second part)
  - readonly-root: remount rpc_pipefs if readonly-root is used


author: Doug Ledford <dledford@redhat.com> - 1.6.4-1
changelog:
  - Update to latest upstream release
  - Simplify and reduce spec file
  - Ship the various scripts we used to remove, they can be useful
  - Pick up changes from rhel7 and bring them to rhel6
  - Related: bz1082730


author: Doug Ledford <dledford@redhat.com> - 1.5.7-9
changelog:
  - We built a new opensm against a new libibumad and libibmad
    to resolve a bug.  So we need to rebuild this to be against
    the new libs.  Updated to latest upstream since we had to
    rebuild anyway and it's often needed to make it compatible
    with the minor changes in libibumad and libibmad and
    opensm-libs
  - Related: bz1082730


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-31
changelog:
  - mod_proxy: fix bybusyness algorithm to balance the load after failed worker
    has recovered (#972949)
  - mod_proxy: ignore EINTR when polling in proxy_connect (#976644)
  - mod_proxy_http: log "reading response" error to proper log file (#1012766)
  - mod_ssl: add ECDH support (#1035818)
  - mod_ssl: improve DH temp key handling (#1071883)
  - mod_ssl: enable support at run-time for TLSv1.x with newer OpenSSL (#1034984)
  - mod_ssl: fix crash when loaded for first time during the reload (#876626)
  - mod_ssl: make lazy CRL caching configurable (#1037832)
  - apachectl status: return exit code 3 when httpd is not running (#1077336)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-35
changelog:
  - mod_proxy_http: cleanup bucket brigade even on error (#991556)
  - add missing Reason-Phrase in HTTP response headers (#1032733)
  - mod_ldap: fix crash in uldap_cache_getattrvals (#1048757)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-36
changelog:
  - mod_ssl: Add a wildcard common name match (#1035666)
  - mod_cache: avoid thundering herd (#1094990)
  - mod_cgi: return error code 408 on timeout (#979129)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-38
changelog:
  - mod_cgid: add security fix for CVE-2014-0231
  - mod_deflate: add security fix for CVE-2014-0118
  - mod_status: add security fix for CVE-2014-0226


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-1
changelog:
  - fix regression of #512275 -- we looked for prelink, but didn't record
    its location properly (#548438)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-2
changelog:
  - backport fix to treat unexpected command-line arguments as an error to
    avoid setting incorrect expectations, and warn when a check file doesn't
    appear to contain anything for us to check (#1016706)


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-13
changelog:
  - Initialize DBus errors correctly to resolve crashes when the probers are run
    directly.
  - Resolves: #755209


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-17
changelog:
  - Check GConf2 key before use to avoid error dialog (#1049232)
  - Fix renaming files on webdav (#1011835)
  - Fix libarchive dependency


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-18
changelog:
  - Fix GConf module building with updated GLib2 (#1118704)
  - Fix SFTP mounting with updated OpenSSH (#1118325)


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-84
changelog:
  - Proper graphics initialization
    Resolves: rhbz#1048681
    Resolves: rhbz#1074914
    Resolves: rhbz#1094978


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-86
changelog:
  - grub-install: add regex for partition and multipath when
    use_friendly_names is off
    Resolves: rhbz#1121321
  - Disable previous patch as it doesn't work properly


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-91
changelog:
  - Suppress failure message on EFI systems when loading splashscreen
    Resolves: rhbz#1129436
  - Return proper disk operation status
    Resolves: rhbz#1130209
  - Stick with default GOP mode unless resolution is absurdly small
    Resolves: rhbz#1130313


author: Ray Strode <rstrode@redhat.com> 2.28.0-21
changelog:
  - Add a close button in the session selector save dialog, to
    provide a way to close the dialog without saving.
    Resolves: #786573


author: Dan Winship <danw@redhat.com> - 2.28.6.1-2.1
changelog:
  - Disable GNOME proxy support since RHEL6 doesn't have gsettings-desktop-schemas
  - Allow building with libproxy 0.3.0


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.141
changelog:
  - Fix infinite loop in nscd when netgroup is empty (#1085273).
  - Provide correct buffer length to netgroup queries in nscd (#1074342).
  - Return NULL for wildcard values in getnetgrent from nscd (#1085289).
  - Avoid overlapping addresses to stpcpy calls in nscd (#1082379).
  - Initialize all of datahead structure in nscd (#1074353).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.143
changelog:
  - [ppc] Add VDSO IFUNC for gettimeofday (#1028285).
  - [ppc] Fix ftime gettimeofday internal call returning bogus data (#1099025).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.146
changelog:
  - Fix memory order when reading libgcc handle (#905941).
  - Fix format specifier in malloc_info output (#1027261).
  - Fix nscd lookup for innetgr when netgroup has wildcards (#1054846).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.147
changelog:
  - Fix stack overflow due to large AF_INET6 requests (CVE-2013-4458, #1111460).
  - Fix buffer overflow in readdir_r (CVE-2013-4237, #1111460).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.149
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1035941


author: Colin Walters <walters@redhat.com> - 2.26.1-8
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1036097


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.8-3
changelog:
  - Revert deprecations picked up through rebases to avoid further bugs
    like rhbz#1136304 (devhelp).


author: Ray Strode <rstrode@redhat.com> 2.30.4-58
changelog:
  - Fix this log spew:
        Buggy client sent a _NET_ACTIVE_WINDOW message with a timestamp of 0 for 0x260002b (Login Wind)
    Resolves: #1073546


author: Marek Kasik <mkasik@redhat.com> - 2.24.1-2
changelog:
  - Import gdk-pixbuf2 package from F16
  - Disable introspection
  - Add update-gdk-pixbuf-loaders
  - Resolves: #1103734


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-66.el6
changelog:
  - Fix 'Add $_signo convenience variable'.  It is worth mentioning that the
    variable was finally named $_exitsignal instead of $_signo (RH BZ 971849).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-68.el6
changelog:
  - Fix 'gdb gives highly misleading error when debuginfo pkg is present,
    but not corresponding binary pkg' (Jan Kratochvil, backported from Fedora,
    RH BZ 981154).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-70.el6
changelog:
  - Fix 'gdb deadlock due to gdb calling calloc() in signal handler.'
    (Jan Kratochvil, RH BZ 913146).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-71.el6
changelog:
  - Improve fix for 'gdb deadlock due to gdb calling calloc() in signal
    handler.', because it was failing on i686.  (Pedro Alves, RH BZ 913146).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-72.el6
changelog:
  - Fix '[RHEL6] Can't access TLS variables in statically linked binaries'
    (Jan Kratochvil, RH BZ 1080656).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-73.el6
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-74.el6
changelog:
  - Improve fix for 'gdb crashes while thread apply all bt is run on the core
    file' (RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-75.el6
changelog:
  - Additional fixes needed by 'gdb crashes while thread apply all bt is
    run on the core file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov,
    RH BZ 1104587).


author: Marek Polacek <polacek@redhat.com> 4.4.7-5
changelog:
  - fix std::uncaught_exception (#1085442, PR c++/59224)
  - don't nuke gcov files if any is missing (#1008798)
  - don't ICE with missing template-header (#858351, PR c++/54653)
  - don't ICE when creating an epilog for reduction (#875472)
  - declare type_info (#1061435, PR libstdc++/56468)
  - check elements for error_mark_node (#1027003, PR c++/43028)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-9
changelog:
  - make sure conversion between aggregates with different
    sizes is never considered useless (#1113878)
  - fix gfortran ICE on old-style initialization of derived type
    components (#1113793)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-10
changelog:
  - backport two further OpenMP 4.0 libgomp tasking fixes (#1099549)
  - fix scheduler wrong-code with DEBUG_INSNs containing volatile ASM_OPERANDS
    (#1127118, PR rtl-optimization/61801)


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855317
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-5
changelog:
  - Add support for microsecond precision of home server's response_window
    option, client's response_window option with the same precision and home
    server's response_timeouts option, backported from v3.0.x.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-6
changelog:
  - Fix missing braces around a condition branch in client response_window
    patch.
  - Resolves: bug#1107843


author: Jan Kaluza <jkaluza@redhat.com> 5.04-16
changelog:
  - fix #873997 - improve Minix detection pattern to fix false positives
  - fix #884396 - improve PBM pattern to fix misdetection with x86 boot sector
  - fix #980941 - improve Bio-Rad pattern to fix false positives
  - fix #849621 - tweak strength of XML, Latex and Python patterns to execute
    them in the proper order
  - fix #1067771 - detect qcow version 3 images
  - fix #1064463 - treat RRDTool files as binary files


author: Jan Kaluza <jkaluza@redhat.com> 5.04-17
changelog:
  - fix CVE-2014-3479 (cdf_check_stream_offset boundary check)
  - fix CVE-2014-3480 (cdf_count_chain insufficient boundary check)
  - fix CVE-2014-0237 (cdf_unpack_summary_info() excessive looping DoS)
  - fix CVE-2014-0238 (CDF property info parsing nelements infinite loop)
  - fix CVE-2014-2270 (out-of-bounds access in search rules with offsets)
  - fix CVE-2014-1943 (unrestricted recursion in handling of indirect type rules)
  - fix CVE-2012-1571 (out of bounds read in CDF parser)


author: Marek Grac <mgrac@redhat.com> - 3.0.15-40
changelog:
  - fencing: Add option --ssh-options
    Resolves: rhbz#1069618
  - fence_vmware_soap: python exception when user does not have privileges
    Resolves: rhbz#1018263
  - fence_wti: Add support for delay
    Resolves: rhbz#1079291
  - fence_ilo: Unable to enter password with "
    Resolves: rhbz#990537
  - fencing: Fence agent uses key authentication when it should use password
    Resolves: rhbz#1048842


author: Marek Grac <mgrac@redhat.com> - 3.0.15-41
changelog:
  - fence_brocade ported to fencing library
    Resolves: rhbz#641632 rhbz#642232 rhbz#841556
  - fence_rsb fails to power devices on with certain firmwares
    Resolves: rhbz#1110428


author: Marek Grac <mgrac@redhat.com> - 3.0.15-43
changelog:
  - fix quoes in fence_ilo
    Resolves: rhbz#990537
  - fix delay support for agents without off/reboot
    Resolves: rhbz#641632


author: Marek Grac <mgrac@redhat.com> - 3.0.15-44
changelog:
  - fence_brocade: fix default action
    Resolves: rhbz#1114559
  - fence_brocade: add support for list to allow monitor
    Resolves: rhbz#1114528


author: Milan Crha <mcrha@redhat.com> - 2.32.3-32.el6
changelog:
  - Add patch for RH bug #1054865 (Incorrect unref under e_attachment_load_finish())
  - Add patch for RH bug #1054772 (Local addressbooks created without relative_uri set)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-33.el6
changelog:
  - Add patch for RH bug #1080467 (mark-all-read plugin can cause UI freeze)
  - Add patch for RH bug #1052955 (Time format in combo controls is always 24 hrs)


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - Include a pair of small patches from upstream to improve
    handling of lro options
    Resolves: bz#1010843
  - Include a pair of small patches to improve dumping of
    registers on ixgbe devices
    Resolves: bz#1018367


author: Jay Fenlason <fenlason@redhat.com> 3.5-4
changelog:
  - Include the backported -kr patch from upstream to close
    Resolves: bz#1003891
    the rest of the way.


author: Mark Wielaard <mjw@redhat.com> - 0.158-3.2
changelog:
  - Add elfutils-0.158-unstrip.patch (#806474)
  - Add elfutils-0.158-readelf-nostrings.patch (#1101440)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-19
changelog:
  - Fix for some resize2fs corruptions (#1036122)
  - Allow tune2fs to remove a dirty journal with -ff (#1040122)
  - Add enable_periodic_fsck to mke2fs.conf (#1052409)
  - Disallow too-high revision during mke2fs (#1093446)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.0-11
changelog:
  - Do not package built objects in dhash-devel
  - Fix NVR in the previous changelog entry
  - Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6


author: Jaromír Končický <jkoncick@redhat.com> - 12:4.1.1-40.P1
changelog:
  - Fix handling of UDP packets with checksum 0xffff. (#1015997)
  - Add GUIDs in the DHCP logs for IPoIB. (#1064416)


author: Jaromír Končický <jkoncick@redhat.com> - 12:4.1.1-41.P1
changelog:
  - Fix dhcpd.leases reverting to root:root on every dhcpd start (#1067142)
    New patch "paranoia" merged with older "paranoia-pid" patch
  - Add init script for dhcrelay IPv6 version (#1053155)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.73
changelog:
  - Add 0194-RHBZ-997570-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync version
  - Resolves: bz #997570


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.74
changelog:
  - Add 0195-UPBZ-1024103-alua-prio-timeout.patch
    * change alua prioritizer timeout from 5 minutes to one minute
  - Resolves: bz #1024103


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.75
changelog:
  - Add 0196-RHBZ-1012672-fix-sysdev.patch
    * rewrite multipath sysfs device handling to fix various issues from
      bzs #1012672, #1064636, and #1049637
  - Add 0197-RHBZ-1049315-netapp-rw-change.patch
    * allow reload_rewrite to be set by device, and set it by default for
      netapp devices.
  - Add 0198-RHBZ-1080052-orphan-paths-on-reload.patch
    * make multipath orphan paths that are no longer included in the device
      when the table is reread.
  - Add 0199-RHBZ-1007719-multipath-man.patch
    * documentation update
  - Add 0200-RHBZ-1009061-allow_devt.patch
    * allow specifying paths to multipath by major:minor, instead of devname
  - Add 0201-RHBZ-1018697-cli-use-basename.patch
    * make multipathd interactive commands accept device names that start with
      /dev/
  - Add 0202-RHBZ-1024604-weighted-prio-man.patch
    * documentation update
  - Add 0203-RHBZ-1054046-mpathconf-typo.patch
    * fix command output typo
  - Add 0204-RHBZ-1067102-doc-add-selectors.patch
    * documentation update
  - Add 0205-RHBZ-1072974-alua-typo.patch
    * fix priritizer output typo
  - Add 0206-UPBZ-1020556-e-series-config.patch
    * udpate E-Series config to autodetect prio and hardware handler.
  - Resolves: bz #1049637, #1064636, #1049315, #1080052, #1007719, #1009061
  - Resolves: bz #1018697, #1024604, #1054046, #1067102, #1072974, #1020556


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.76
changelog:
  - Add 0207-UPBZ-1027061-sg-read-use-buffsize.patch
    * make readsector0 checker calculate the number of blocks to read based
      on the buffer size and the block size
  - Add 0208-UPBZ-1028220-datacore-config.patch
    * Add support for DataCore Virtual Disk
  - Add 0209-RHBZ-999766-update-annotated.patch
    * update multipath.conf.annotated
  - Add 0210-UPBZ-1099932-fast-io-fail-iscsi.patch
    * and iscsi support for fast_io_fail_tmo
  - Add 0211-UPBZ-1088013-reorder-paths-for-round-robin.patch
    * make multipathd order paths for better throughput in round-robin mode
  - Add 0212-RHBZ-1086417-orphan-path-on_failed-add.patch
    * If multipathd fails to add path correctly, it now fully orphans the path
  - Add 0213-RHBZ-1069641-config-error-checking.patch
    * Improve multipath.conf error checking.
  - Resolves: bz #1027061, #1028220, #999766, #1099932, #1088013, #1086417
  - Resolves: bz #1069641


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.77
changelog:
  - Add 0214-RHBZ-1078485-configurable-prio-timeout.patch
    * checker_timeout now adjusts the timeouts of the prioritizers as well.
  - Add 0215-RHBZ-1054747-add-noasync-option.patch
    * Add a new defaults option, "force_sync", that disables the async mode
      of the path checkers. This is for cases where to many parallel checkers
      hog the CPU
  - Add 0216-RHBZ-1095868-multipathd-man-typo.patch
  - Add 0217-RHBZ-1101101-add-w-options.patch
    * multipath now includes the -w and -W options. -w makes multipath remove
      a wwid from the wwids file. -W removes all of the wwids, except for the
      ones belonging to the current multipath devices, from the bindings file.
  - Resolves: bz #1078485, #1054747, #1095868, #1101101


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.78
changelog:
  - Modify 0196-RHBZ-1012672-fix-sysdev.patch
    * remove unused function, and fix NULL ptr dereference
  - Modify 0211-UPBZ-1088013-reorder-paths-for-round-robin.patch
    * Fix some pointer errors
  - Modify 0213-RHBZ-1069641-config-error-checking.patch
    * Stop allocating extra memory in config parser.
  - Related: bz #1049637, #1069641, #1088013


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.79
changelog:
  - Modify 0198-RHBZ-1080052-orphan-paths-on-reload.patch
    * Fix case where pathlist wasn't getting updated properly
  - Related: bz #1080052


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80
changelog:
  - Add 0218-RHBZ-1117714-configure-missing-devs.patch
    * handle externally removed devices during configuration.
  - Resolves: bz #1117714


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-15
changelog:
  - don't use " for saslauth user's description (#1081445)
  - backport the ad_compat option (#994242)
  - fixed a memory leak in the client side DIGEST-MD5 code (#838628)


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-58
changelog:
  - Applied patch to fix 'Bad request' errors as a result of adding in
    httpSetTimeout (STR #4440, also part of svn revision 9967).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-60
changelog:
  - CVE-2014-2856: cross-site scripting flaw (bug #1117798)
  - CVE-2014-3537: insufficient checking leads to privilege escalation (bug #1117794)


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-63
changelog:
  - Applied upstream patch to fix CVE-2014-5029 (bug #1122600),
    CVE-2014-5030 (bug #1128764), CVE-2014-5031 (bug #1128767).
  - Fix conf/log file reading for authenticated users (STR #4461).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-66
changelog:
  - More STR #4461 fixes from upstream: make rss feeds world-readable,
    but cachedir private.
  - Fix icon display in web interface during server restart (STR #4475).


author: Sumit Bose <sbose@redhat.com> - 2.5.1-1
changelog:
  - Update to ctdb version 2.5.1
   - Resolves: rhbz#1061630
   - Resolves: rhbz#1085447
   - Resolves: rhbz#987099
   - Resolves: rhbz#1085413


author: John W. Linville <linville@redhat.com> 1.1.3_2013.11.27-1
changelog:
  - Update for crda version 1.1.3
  - Update wireless-regdb to version 2013.11.27 
  - Correct version in previous changelog entry


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-18
changelog:
  - Resolves: rhbz#1001210
  - Resolves: rhbz#1011307
  - Resolves: rhbz#1018232
  - Resolves: rhbz#1025321
  - Resolves: rhbz#1067043

  - totemiba: Properly allocate RDMA buffers (rhbz#1001210)
  - merge upstream commit 795b04780ff6cd94b2e10aa1826a289f36119ce7 (rhbz#1001210)
  - totemiba: Del channel fd from poll before destroy (rhbz#1001210)
  - merge upstream commit 86fd9a14f6e74b711eb7e89cec72096bdcd1441b (rhbz#1001210)
  - totemiba: Fix parameters position for poll_add (rhbz#1001210)
  - merge upstream commit cba0f90af4af55702c1daa7afa03c8be10eaa5f3 (rhbz#1001210)
  - corosync to start in infiniband + redundant ring active/passive mode (rhbz#1001210)
  - merge upstream commit d0ca2ceb980242dd8c28b57f449eeeac1eb54176 (rhbz#1001210)
  - totemiba: Check if configured MTU is allowed by HW (rhbz#1001210)
  - merge upstream commit 3403fe06e8a915632679c48ccccb2662521746f2 (rhbz#1001210)
  - logsys: Handle full /dev/shm correctly (rhbz#1011307)
  - merge upstream commit 095a114ab84074e16d384f3ccaadfecff80b54a2 (rhbz#1011307)
  - ipcs: Backport socket creds handling from libqb (rhbz#1018232)
  - merge upstream commit 7897e4ae3e1c1ff20a2f375a0a5dc102ab0e98e8 (rhbz#1018232)
  - ipcs: Set SO_PASSCRED also on listening socket (rhbz#1018232)
  - merge upstream commit f11e5bf61941fd6aca018bb2f15f2371c668974f (rhbz#1018232)
  - cpg: Avoid list corruption (rhbz#1025321)
  - merge upstream commit 3c11ea7b84c109e6f8451229437351c5a14c7168 (rhbz#1025321)
  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1067043)
  - merge upstream commit e9d9c4be7293c04ca97bfd84f95b76a22690a92a (rhbz#1067043)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1067043)
  - merge upstream commit 0b825f22f2b95beca1aeb614d22a7e74a84c66b5 (rhbz#1067043)
  - cpg: Make sure left nodes are really removed (rhbz#1067043)
  - merge upstream commit b55f32fe2e1538db33a1ec584b67744c724328c6 (rhbz#1067043)
  - totemiba: Add multicast recovery (rhbz#1001210)
  - merge upstream commit 0ea20a3d545c4bf1a02306dd2152eb497a03b7d0 (rhbz#1001210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-19
changelog:
  - Related: rhbz#1001210

  - totemiba: Fix incorrect failed log message (rhbz#1001210)
  - merge upstream commit 4130d7448dcea024820d20e3c474c54e14ec9cb5 (rhbz#1001210)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-33
changelog:
  - su: don't terminate parent process upon SIGTERM(#1063887)
  - tail: do not show "reverting to polling" warning when not
    necessary (#1046818)
  - chcon: document default behaviour for symlink (#1064621)
  - fix dd sparse test failure on XFS (#1075679)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-34
changelog:
  - tail: disable inotify in --follow for vxfs (#1104244)
  - df: dereference symlinks to disk device nodes (#812449)
  - dd: add support for count_bytes iflag (#1098078)


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-1.2
changelog:
  - Don't bother passing in options that the 1.4.3 configure doesn't
    understand.
  - set XFLAGS on all archs, not just x86_64.
  - Copy requires/provides filtering from openmpi so this will stop
    providing libotf.so.0
    Resolves: rhbz1097290


author: Chrissie Caulfield <ccaulfie@redhat.com> - 3.0.12.1-60
changelog:
  - fenced: keep manual ACk fifo open for longer and also make fenced_external()
    write to it.
    Resolves: rhbz#1059269


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-61
changelog:
  - libgfs2: Fix up remove_mtab_entry
    Resolves: rhbz#1059853
  - fsck.gfs2: Check and repair per_node contents such as quota_changeX
    Resolves: rhbz#1062742
  - libgfs2: patch to update gfs1 superblock correctly
  - gfs2-utils: check and fix bad dinode pointers in gfs1 sb
    Resolves: rhbz#1053668


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-63
changelog:
  - gfs2_edit: Add a savemeta file metadata header
  - gfs2_edit: Fix loop arithmetic in restore_data
  - gfs2_edit: Ensure all leaf blocks in per_node are saved
  - gfs2_edit: Reinstate a check for system dinodes
    Resolves: rhbz#1081523


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-64
changelog:
  - qdisk: Check cman_wait() return value and report errors
    Resolves: rhbz#979313
  - libccs: Read daemon logging attributes correctly
    Resolves: rhbz#980575
  - qdisk: Quorum init complete after tko_up cycles, not tko
    Resolves: rhbz#1029210
  - config: Fix typos and phrasing in defaults file
    Resolves: rhbz#1035929
  - ccs_tool: Fix crash using --verbose
    Resolves: rhbz#1074551
  - manpage: Mention cluster.conf.html schema in man page
    Resolves: rhbz#981043
  - fenced: Remove mention of skip_undefined feature as it is not supported
    Resolves: rhbz#994234


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-67
changelog:
  - dlm_controld: Adjust fence time comparison
    Resolves: #rhbz843160
  - man: update fence_node options
    Resolves: #rhbz886016
  - fenced: Wait for ringid
    gfs_controld: Fix first recovery case
    Resolves: #rhbz982305


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.6-1
changelog:
  - avoid potential use-after-free and read overrun after a CA is added
    dynamically (thanks to Jan Cholasta)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-1
changelog:
  - fix an inconsistency in how we parse cookie values returned by CA helpers,
    in that single-line values would lose the end-of-line after a daemon
    restart, but not before
  - handle timeout values and exit status values when calling CA helpers
    in non-SUBMIT, non-POLL modes (#1118468)
  - rework how we save CA certificates so that we save CA certificates associated
    with end-entity certificates when we save that end-entity certificate, which
    requires running all of the involved pre- and post-save commands
  - drop package Requires: on systemd-sysv (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-2
changelog:
  - reintroduce package Requires: on systemd-sysv on F19 and EL6 and older,
    conditionalized it so that it's ignored on newer releases, and make
    whether or not we call systemd-sysv-convert in triggers depend on that,
    too (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.8-1
changelog:
  - add a 'refresh' option to the getcert command
  - add a '-a' flag to the getcert command's 'refresh-ca' option


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.9-1
changelog:
  - avoid potential use-after-free after a CA is removed dynamically (thanks to
    Keenan Brock) (#1125342)
  - add a "external-helper" property to CA objects


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.10-1
changelog:
  - when attempting to contact an IPA LDAP server, if no "ldap_uri" is set in
    default.conf, and no "host" is set either, try to construct the server URI
    using the "server" setting (#1126985)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.11-1
changelog:
  - when getcert is passed a -a flag, to indicate that CA root certificates
    should be stored in the specified database, don't ignore locations which
    don't include a storage scheme (#1129537)
  - when called to 'start-tracking' with the -a or -F flags, if we have
    applicable certificates on-hand for a CA that we're either told to use
    or which we decide is the correct one, save the certificates (#1129696)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-3
changelog:
  - Fall back to AF_INET when ares_gethostbyname() is called with AF_UNSPEC
  - Only set search domains from /etc/resolv.conf if there isn't a value
    already present in the channel (David Drisdale)
  - Related: rhbz#1077544 - Rebase c-ares to version 1.10


author: Petr Machata <pmachata@redhat.com> - 1.41.0-19
changelog:
  - Backport upstream patch for fixing of memory leaks in
    Boost.Serialization (boost-1.41.0-serialization-leak.patch)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-21
changelog:
  - Fix building of Python module for Boost-MPI and ship it
    (boost-1.41.0-mpi-python.patch, __init__.py)


author: Jonathan Wakely <jwakely@redhat.com> - 1.41.0-22
changelog:
  - Fix shared_ptr to work with recent GCC and C++11.
    (boost-1.41.0-shared_ptr-deleted-copy.patch)
  - Resolves: #1108268


author: Petr Machata <pmachata@redhat.com> - 1.41.0-23
changelog:
  - Fix conformance problems in Boost.Interprocess, Boost.Intrusive and
    Boost.Graph
    (boost-1.41.0-graph-conformance.patch,
    boost-1.41.0-interprocess-conformance.patch,
    boost-1.41.0-interprocess-conformance-maxval.patch,
    boost-1.41.0-intrusive-conformance.patch)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-24
changelog:
  - Fix conformance problems in Boost.Numeric (uBLAS) and
    Boost.CircularBuffer (boost-1.41.0-numeric-conformance.patch,
    boost-1.41.0-circular_buffer-adl.patch)


author: Michal Schmidt <mschmidt@redhat.com> - 1.41.0-25
changelog:
  - mpich obsoleted mpich2. Build against mpich and rename subpackages
    accordingly. Obsolete mpich2 subpackages.


author: Jeff Law <law@redhat.com> - 2.20.51.0.2-5.38
changelog:
  - Use thread-safe PLT stubs for Power. (#906079)
  - Avoid segfault when arch member uses long names, but no longname
    table exists.  (#909056)
  - Correct patch for 773526. (#922393)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.25.rc1
changelog:
  - configure with --enable-filter-aaaa to enable use of filter-aaaa-on-v4 option (#1025008)
  - Fix race condition when destroying a resolver fetch object (#993612)
  - Fix the RRL functionality to include referrals-per-second and nodata-per-second options (#1036700)
  - Fix segfault on SERVFAIL to NXDOMAIN failover (#919545)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.26.rc1
changelog:
  - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#846065)
  - Fix initscript to return correct exit value when calling checkconfig/configtest/check/test (#848033)
  - Don't (un)mount chroot filesystem when running initscript command configtest with running server (#851123)
  - Fix zone2sqlite tool to accept zones containing "." or "-" or starting with a digit (#919414)
  - Fix initscript not to mount chroot filesystem is named is already running (#948743)
  - Fix initscript to check if the PID in PID-file is really s PID of running named server (#980632)
  - Correct the installed documentation ownership (#1051283)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.27.rc1
changelog:
  - Fix segmentation fault in nsupdate when -r option is used (#1064045)
  - Fix race condition on send buffer in host tool when sending UDP query (#1008827)
  - Allow authentication using TSIG in allow-notify configuration statement (#1044545)
  - Fix SELinux context of /var/named/chroot/etc/localtime (#902431)
  - Include updated named.ca file with root server addresses (#917356)
  - Don't generate rndc.key if there is rndc.conf on start-up (#997743)
  - Fix dig man page regarding how to disable IDN (#1023045)
  - Handle ICMP Destination unreachable (Protocol unreachable) response (#1066876)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.28.rc1
changelog:
  - Add support for TLSA resource records (#956685)
  - Increase defaults for lwresd workers and make workers and client objects number configurable (#1092035)


author: Ian Kent <ikent@redhat.com> - 5.0.5-100
changelog:
  - bz994217 - RFE: RHEL6: Add am-utils RPM or equivalent am-utils functionality
    to other packages
    - once again actually change spec file revision.
  - Related: rhbz#994217


author: Ian Kent <ikent@redhat.com> - 5.0.5-101
changelog:
  - bz1059549 - autofs negative cache not working for included map
    - fix fix negative status being reset on map read.
    - and adjust dependent patches later in series.
  - Related: rhbz#1059549


author: Ian Kent <ikent@redhat.com> - 5.0.5-102
changelog:
  - bz994217 - RFE: RHEL6: Add am-utils RPM or equivalent am-utils functionality
    to other packages
    - fix expire when server not responding.
  - Related: rhbz#994217


author: Ian Kent <ikent@redhat.com> - 5.0.5-103
changelog:
  - bz994217 - RFE: RHEL6: Add am-utils RPM or equivalent am-utils functionality
    to other packages
    - fix ldap_uri config update.
    - fix typo in conf_load_autofs_defaults().
    - fix hash on confg option add and delete.
    - add plus to path match pattern.
    - fix multi entry ldap option handling.
    - cleanup options in amd_parse.c.
    - allow empty value for some map options.
    - allow empty value in macro selectors.
  - Related: rhbz#994217


author: Ian Kent <ikent@redhat.com> - 5.0.5-104
changelog:
  - bz1081285 - automount segfaults in tlsm_deferred_init
    - add serialization to sasl init.
  - Resolves: rhbz#1081285


author: Ian Kent <ikent@redhat.com> - 5.0.5-105
changelog:
  - bz1081479 - autofs service fails to start when scheduling through satellite
    via remote command
    - dont allocate dev_ctl_ops too early.
  - Resolves: rhbz#1081479


author: Ian Kent <ikent@redhat.com> - 5.0.5-106
changelog:
  - bz994217 - RFE: RHEL6: Add am-utls RPM or equivalent am-utils functionality
    to other packages
    - Covarity motivated corrections.
      - fix leak in cache_push_mapent().
      - fix config entry read buffer not checked.
      - fix FILE pointer check in defaults_read_config().
      - fix memory leak in conf_amd_get_log_options().
      - fix signed comparison in inet_fill_net().
      - fix buffer size checks in get_network_proximity().
      - fix leak in get_network_proximity().
      - fix buffer size checks in merge_options().
      - check amd lex buffer len before copy.
      - add return check in ldap check_map_indirect().
      - check host macro is set before use.
      - check options length before use in parse_amd.c.
      - fix some out of order evaluations in parse_amd.c.
      - fix copy and paste error in dup_defaults_entry().
      - fix leak in parse_mount().
      - add mutex call return check in defaults.c.
  - Related: rhbz#994217


author: Ian Kent <ikent@redhat.com> - 5.0.5-107
changelog:
  - bz994217 - RFE: RHEL6: Add am-utls RPM or equivalent am-utils functionality
    to other packages
    - force disable browse mode for amd format maps.
    - fix hosts map options check in lookup_amd_instance().
  - Related: rhbz#994217


author: Ian Kent <ikent@redhat.com> - 5.0.5-108
changelog:
  - bz1130833 - Memory leak in get_exports
    - fix memory leak in create_client().
    - fix memory leak in get_exports().
  - Resolves: rhbz#1130833


author: Ian Kent <ikent@redhat.com> - 5.0.5-109
changelog:
  - bz994217 - RFE: RHEL6: Add am-utls RPM or equivalent am-utils functionality
    to other packages
    - fix memory leak in get_defaults_entry().
    - fix out of order clearing of options buffer.
    - fix reset amd lexer scan buffer.
    - ignore multiple commas in options strings.
  - Related: rhnz#994217


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-15
changelog:
  - save backups of password files when toggling shadow support (#852997)
  - read and overwrite only the general ldap base (#912851)
  - use sss for automount
  - more robust initialization of SSSDConfig (#1016404)
  - output error message from write error
  - properly set IPAV2DOMAINJOINED and call ipa client uninstall
    when appropriate (#1023286)
  - add umask=0077 to initial pam_mkhomedir args (#1025065)
  - fix broken --help output (#1066811)
  - check whether ldap URI is valid (#707590)
  - restart only services affected by configuration changes (#1023293, #975203)
  - report error from winbind and ipa domain joins


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-6
changelog:
  - Fix CVE-2013-6412, incorrect permissions under strict umask (RHBZ#1036080)
  - Grub: support 'setkey' and 'lock' directives (RHBZ#1001635)
  - ActiveMQ: add ActiveMQ lens (RHBZ#1016899)
  - Splunk: add Splunk lens (RHBZ#1016900)
  - Sudoers: user aliases fail to parse (RHBZ#1016904)
  - Tests: testPermsError during compilation (RHBZ#1024275)
  - Shellvars: multi-variable export lines (RHBZ#1033795)
  - Shellvars: case statements with same-line ;; tokens (RHBZ#1033799)
  - Sysconfig: permit empty comments (RHBZ#1043636)
  - Grub: support 'foreground' directive (RHBZ#1059383)
  - Yum: permit space after equals sign (RHBZ#1062091)
  - IniFile: add generic INI lenses (RHBZ#1073072)
  - Automounter: permit hostnames with hyphens (RHBZ#1075112)
  - Rsyslog: parse property filters and templates (RHBZ#1083016)
  - Ldso: parse hwcap lines (RHBZ#1083021)
  - Sudoers: permit underscores in group names (RHBZ#1093711)
  - augtool: remove dump-xml filename arg (RHBZ#1100182)
  - augtool: add commands to autocomplete (RHBZ#1100184)
  - docs: update command and arg lists (RHBZ#1100186)
  - Nrpe: parse unknown config options (RHBZ#1100237)


author: Steve Grubb <sgrubb@redhat.com> 2.2-4
changelog:
  - Revised patch based on upstream commit 895
  resolves: #1028635 audisp-remote reconnect problems after transient network err


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1065067 - Audit package rebase
  resolves: #810749 - audit allows tcp_max_per_addr + 1 connections
  resolves: #869555 - ausearch -i does not interpret execve arguments always
  resolves: #888348 - auditd won't start when some actions send mail
  resolves: #922508 - confusing aulast records for bad logins
  resolves: #950158 - man page unclear wrt num_logs affecting keep_logs setting
  resolves: #967238 - Audit rules are built from a directory of rule files
  resolves: #967240 - ausearch to checkpoint so only reports new events
  resolves: #970675 - auparse is truncating path context after first category
  resolves: #1011052 - Missing text in auditd.conf man page
  resolves: #1022035 - Case values for actions unclear in auditd.conf man page
  resolves: #1029981 - ausearch help typo for "-x" option
  resolves: #1049916 - ausearch issues found by ausearch-test
  resolves: #1053424 - Error in auparse-defs.h
  resolves: #1071580 - audispd config file parser fails on long input
  resolves: #1089713 - limit of 30 for system call in audit.rules


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-4
changelog:
  resolves: #1049916 - Handle i386 session ID's better
  resolves: #1120286 - ausearch -i does not display commas between categories


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.221-1
changelog:
  - Add BuildRequires: gdk-pixbuf2-devel (sbueno+anaconda)
    Resolves: rhbz#1109298
  - If kernel-kdump is installed, don't set it as the default kernel.
    (sbueno+anaconda)
    Resolves: rhbz#734121
  - Close yum objects before running post scripts (bcl)
    Resolves: rhbz#1110148
  - Catch custom partitioning problems on UEFI (bcl)
    Resolves: rhbz#991620
  - Mark dracut-network for installation on mpath. (sbueno+anaconda)
    Resolves: rhbz#1007463
  - Write --percent to kickstart output even if --grow was used (mkolman)
    Resolves: rhbz#1046320


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.222-1
changelog:
  - Rm device from lvm reject filter if in action list. (sbueno+anaconda)
    Resolves: rhbz#885755
  - The boot menu entry should contain the RHEL major release number (mkolman)
    Resolves: rhbz#1001960


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.223-1
changelog:
  - Change pixbuf loaders path. (sbueno+anaconda)
    Resolves: rhbz#1110834
  - Remove unnecessary drivers to contain the size of ppc64.img.
    (sbueno+anaconda)
    Resolves: rhbz#1112405


author: Brian C. Lane <bcl@redhat.com> - 13.21.225-1
changelog:
  - Allow missing swap devices to be skipped during upgrade (dshea)
    Resolves: rhbz#1044716
  - Don't force installation of authconfig, chkconfig, or system-config-firewall.
    (clumens)
    Resolves: rhbz#1123481
  - Provide ways in kickstart to skip kernel and bootloader. (clumens)
    Related: rhbz#1123481
  - Implement %packages --instLangs. (clumens)
    Related: rhbz#1123481
  - Allow skipping installation of the core group, if asked for in kickstart.
    (clumens)
    Related: rhbz#1123481
  - Fix ks fetching on nfs via vlan (sbueno+anaconda)
    Resolves: rhbz#1067857
  - Fix traceback when rpm scriptlets fail during pkg install. (sbueno+anaconda)
    Resolves: rhbz#1122532


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.226-1
changelog:
  - Let tmp use more than 250M when there is more RAM (bcl)
    Resolves: rhbz#1123791
  - Move totalMemory into its own file (bcl)
    Related: rhbz#1123791
    Resolves: rhbz#1123791


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.229-1
changelog:
  - Revert "Use edd fcoe boot option instead of enumerating all ifaces"
    (rvykydal)
    Resolves: rhbz#1103920


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-17
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports MacroSurprise or SetuidMissingRELRO rhbz#812284
  - abrt missing dependency: libreport-plugin-bugzilla rhbz#828673
  - Same values for variables  'DumpLocation' & 'WatchCrashdumpArchiveDir'  stops mailx plugin rhbz#854668
  - abrt-vmcore repeats processing old vmcores on the service (re)start rhbz#885044
  - abrt-gui help menu item points to generic RHEL documentation rhbz#903195
  - Desktop file is named redhat-abrt.desktop rhbz#905822
  - 'post-create' on 'xxx' exited with 1 Corrupted or bad directory xxx, deleting rhbz#909617
  - abrt.pth prevents python virtualenv creation rhbz#912672
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - provide the python API for abrt rhbz#952704
  - abrtd marks problems having count > 1 as duplicates rhbz#886631
  - Resolves: #886631, #905429, #961231, #961231, #961231, #961231, #812284, #828673, #828673, #759443, #759443, #903195, #854668, #905822, #909617, #885044, #912672, #912672, #952704, #875260


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-22
changelog:
  - desktop file is named redhat-abrt.desktop rhbz#905822
  - dependency missing for abrt-addon-vmcore
  - removed unnecessary debug message "Can't open file '/*/uid': No such file or directory"
  - fix post-create reporter-uploader examples
  - add abrt-harvest-vmcore manual page
  - Resolves: #812284, #888282, #905822, #984065, #1022160


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-38
changelog:
  - Release 1.2.11.15-38
  - Resolves: bug 1080185 - revert - Creating a glue fails if one above level is a conflict or missing (DS 47750;Patch233)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-39
changelog:
  - Release 1.2.11.15-39
  - Resolves: #1123863
    EMBARGOED CVE-2014-3562 - unauthenticated information disclosure (Bug 1123477)
  - Resolves: #1123863
    High contention on computed attribute lock (DS 616)
  - Resolves: #1062763
    single valued attribute replicated ADD does not work (DS 47692)
  - Resolves: #1121596
    Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443)
  - Resolves: #1014111
    Repl-monitor.pl ignores the provided connection parameters (DS 47862)
  - Resolves: #1115281
    New defects found in 389-ds-base-1.2.11 (DS 47863)
  - Resolves: #1112729
    paged results control is not working in some cases when we have a subsuffix. (DS 47824)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-40
changelog:
  - Release 1.2.11.15-40
  - Resolves: #1130252 - dirsrv not running with old openldap (DS 47875)
  - Resolves: #1103287 - logconv.pl memory continually grows (DS 47446)
  - Resolves: #1121596 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443)
  - Resolves: #1109381 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist (DS 415)
  - Resolves: #1128759 - Performance degradation with scope ONE after some load (DS 47874)
  - Resolves: #1127612 - Filter AND with only one clause should be optimized (DS 47872)
  - Resolves: #1014111 - repl-monitor fails to convert "*" to default values (DS 47862)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-42
changelog:
  - Release 1.2.11.15-42
  - Resolves: #1129660 - Adding users to user group throws Internal server error.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-43
changelog:
  - Release 1.2.11.15-43
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-44
changelog:
  - Release 1.2.11.15-44
  - Resolves: #1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Simple bind hangs after enabling password policy


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-45
changelog:
  - Release 1.2.11.15-45
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-47
changelog:
  - Release 1.2.11.15-47
  - Resolves: #1147479 - Memory leak during Reliab15 execution (6.6.z - #47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-37
changelog:
  - Release 1.2.11.15-37
  - Resolves: bug 1113606 - server restart wipes out index config if there is a default index (DS 47831)
  - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47821)
  - Resolves: bug 1080185 - Creating a glue fails if one above level is a conflict or missing (DS 47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-36
changelog:
  - Release 1.2.11.15-36
  - Resolves: bug 1088171 - revert - 7-bit check plugin does not work for userpassword attribute (DS 47423)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.39.1.el6]
changelog:
  - [scsi] megaraid_sas: fix a small problem when reading state value from hw (Tomas Henzl) [1078640 1065187]
  - [fs] gfs2: Increase the max number of ACLs (Robert S Peterson) [1078873 1075713]
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1071245 1067451] {CVE-2014-0101}
  - [fs] dcache: fix cleanup on warning in d_splice_alias (J. Bruce Fields) [1063198 1042731]
  - [fs] vfs: remove unused __d_splice_alias argument (J. Bruce Fields) [1028593 820446]
  - [fs] vfs: stop d_splice_alias creating directory aliases (J. Bruce Fields) [1028593 820446]
  - [scsi] scsi_dh: cosmetic change to sizeof() (Ewan Milne) [1075553 1062494]
  - [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1078492 1023272]
  - [netdrv] mlx4: allow order-0 memory allocations in RX path (Frantisek Hrbata) [1078512 1018715]
  - [netdrv] mlx4_en: nullify cq->vector field when closing completion queue (Amir Vadai) [1078512 1018715]
  - [kernel] pidns: Support unsharing the pid namespace (Frantisek Hrbata) [1017904 919065]
  - [kernel] pidns: Deny strange cases when creating pid namespaces (Frantisek Hrbata) [1017904 919065]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.46.2.el6]
changelog:
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP (Petr  Matousek) [1119464 1119462] {CVE-2014-4943}
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1117227 1115933] {CVE-2014-4699}


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-146.SLx
changelog:
  - 1.6.5.1 bugfix release
  - modify buildroot to use mktemp, allowing simultaneous builds (Pat)
  - fix the AFS mountpoint in the cacheinfo file generated in the SPEC


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033500


author: Michal Novotny <minovotn@redhat.com> - 0.12.1.2-2.415.el6_5.1
changelog:
  - kvm-block-Avoid-unecessary-drv-bdrv_getlength-calls.patch [bz#1022548]
  - Resolves: bz#1022548
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.2
changelog:
  - kvm-block-Round-up-total_sectors.patch [bz#1025596]
  - Resolves: bz#1025596
    (Read/Randread/Randrw performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.3
changelog:
  - kvm-monitor-monitor_puts-bail-out-when-mon-NULL.patch [bz#1015979 bz#1029329]
  - kvm-qcow2-Flush-image-after-creation.patch [bz#1029327]
  - kvm-vmdk-Fix-vmdk_parse_extents.patch [bz#1029331]
  - kvm-vmdk-fix-VMFS-extent-parsing.patch [bz#1029331]
  - Resolves: bz#1015979
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1029327
    ('qemu-img info' take too much time with 'cluster_size=512,preallocation=metadata' in the first time)
  - Resolves: bz#1029329
    ([FJ6.5 Bug]:[REG] live migration with "--copy-storage-{all,inc}" option fails)
  - Resolves: bz#1029331
    (fix vmdk support to ESX images)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-40.2
changelog:
  - Fix netnfs unmount self_fence integration in netfs.sh
  - Ship send_ua helper binary to allow IPaddr2 to manage IPv6 addresses

    Resolves: rhbz#1027410
    Resolves: rhbz#1027412


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.4
changelog:
  - Med: oracledb.sh: Remove quotes around listener name
  - Add no_unmount functionality back into netfs.sh agent
  - Use crm_node instead of uname -n when referencing cluster nodes.
  - Adds Delay agent back into package.
  - Drops nginx rsyslog mysql-proxy tomcat and slapd agents.

    Resolves: rhbz#1031789
    Resolves: rhbz#1031791
    Resolves: rhbz#1031940
    Resolves: rhbz#1032778
    Resolves: rhbz#1032777


author: Alex Wood <awood@redhat.com> 1.9.1-1
changelog:
  - fix config failure (ckozak@redhat.com)
  - 988476, 988085: fix default hostname, remove excess config list output
    (ckozak@redhat.com)
  - rev master to 1.9.x (alikins@redhat.com)
  - add compliance date option (ckozak@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.9.2-1
changelog:
  - remove rhel 5.9, 5.10, 6.3, 6.4 (jesusr@redhat.com)
  - Fedora 17 is at end of life. (awood@redhat.com)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-147.SLx
changelog:
  - patch1080 with http://gerrit.openafs.org/10578 to fix RHBZ #1038315 on EL 4.6
  - fix build on EL 5.10


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-59.1
changelog:
  - config: Add missing @ to logging path so logging changes are read correctly
    Resolves: rhbz#1037510


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-6
changelog:
  - Kernel module aliases configuration for kmod. (#1032965)
  - Big-Endian authentication fix. (#1032963)
  - Revert short options removal to preserve 0.7.16 command line parameters.


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.4.el6
changelog:
  -  patch111 - nss-config-2.patch applied jsut as dry-run
    (== not applied) as it have invalid consequences
  - Resolves: rhbz#1036813


author: Chris Feist <cfeist@redhat.com> - 0.16.2-69.el6_5.1
changelog:
  - Added ability to create/remove uidgid entries for corosync in cluster.conf
  - Resolves: rhbz#1038272


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.1.el6]
changelog:
  - [netdrv] mlx4_en: Check device state when setting coalescing (Amir Vadai) [1032395 975908]
  - [net] ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] sunrpc: Fix a data corruption issue when retransmitting RPC calls (Jeff Layton) [1032424 1030046]
  - [fs] gfs2: Implement a rgrp has no extents longer than X scheme (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Drop inadequate rgrps from the reservation tree (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: If requested is too large, use the largest extent in the rgrp (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Add allocation parameters structure (Robert S Peterson) [1032162 998625]
  - [fs] nfs: Don't check lock owner compatability unless file is locked - part 2 (Jeff Layton) [1032260 1007039]
  - [fs] nfs: Don't check lock owner compatibility in writes unless file is locked (Jeff Layton) [1032260 1007039]
  - [netdrv] ixgbevf: move API neg to reset path (Andy Gospodarek) [1032168 1019346]
  - [netdrv] ixgbe: fix inconsistent clearing of the multicast table (Andy Gospodarek) [1032170 975248]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [1020518 876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [1020518 876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [1020518 876275]
  - [fs] nfs: Fix the sync mount option for nfs4 mounts (Scott Mayhew) [1030171 915862]
  - [fs] nfsv4: Missing Chunk of Back Port Patch Causes Hang (Steve Dickson) [1032250 1024006]
  - [fs] xfs: Ensure sync updates the log tail correctly (Dave Chinner) [1032249 1025439]
  - [fs] xfs: only update the last_sync_lsn when a transaction completes (Dave Chinner) [1032249 1025439]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1032688 1014867]
  - [kernel] signal: stop info leak via the tkill and the tgkill syscalls (Petr Holasek) [970876 970878] {CVE-2013-2141}
  - [block] rsxx: Disallow discards from being unmapped (Steve Best) [1028278 1023897]
  - [netdrv] brcmsmac: Module alias support missing from backport (John Green) [1029330 1020461]
  - [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1027343 1023272]
  - [netdrv] mlx4_en: Fix BlueFlame race (Amir Vadai) [1029997 987634]
  - [scsi] lpfc 8.3.42: Fixed failure to allocate SCSI buffer on PPC64 platform for SLI4 devices (Rob Evers) [1030713 1024683]
  - [scsi] Revert: qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low. [1032167 995576]
  - [netdrv] tg3: avoid double-freeing of rx data memory (Ivan Vecera) [1032423 1020685]
  - [hda] alsa: Final fix for the Haswell HDMI audio 44.1kHz rate (Jaroslav Kysela) [1032247 1024548]
  - [input] wacom: do not report ABS_MISC on TPC2FG touch device (Aristeu Rozanski) [1032426 1032256]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.2.el6]
changelog:
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032485 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Enable patch with fix for deadlock in trust domain lock and object lock
  - Resolves: Bug 1036477 - deadlock in trust domain lock and object lock
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038985 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.41
changelog:
  - Allow use sandbox to follow homedirs symlinks
  Resolves:#913175
  - Make sure file equivalance target and source do not end
   with a /
  - Allow make only valid domains as permissive domains
  - Fix polgen.py to allow "_" in a policy file.
  - Implement --noreload option to semanage
  - Add missing long options in sandbox man page


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.42
changelog:
  - Fail properly on invalid options for restorecon/setfiles when using -R or -r
  - Check if all files exist for setfiles and restorecon
  - Remove handling of cgroups from sandbox. 
  Resolves:#1091139
  - Make -q and -d options mutually exclusive


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.43
changelog:
  - Fix semanage man page to contain also noreload option
  Resolves:#1032828
  - Fix sandbox man page
  - Make setfiles more informative if bad option is given


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.46
changelog:
  - Make semanage -i working on empty file
  - Fix setfiles man page
  - Fix setfiles -r option to be working correctly
  Resolves:#1086456


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.47
changelog:
  - Fix setfiles man page
  Resolves:#1086456
  - Fix  semanage fcontext  error message when non-existing context given
  Resolves:#1122023


author: Miloslav Trmač <mitr@redhat.com> - 0.96-6
changelog:
  - Use real --help text and error messages instead of showing a man page in
    pkaction and pkcheck.  Fix description of (pkaction --action-id) in the man 
    page.
    Resolves: #628862
  - Add support for Identity=default in .pkla files
    Resolves: #812684
  - Use a consistent order for .pkla files within a directory.  Based on a patch
    by Jared Jennings <jared.jennings.ctr@eglin.af.mil>.
    Resolves: #864613
  - Build using PIE and relro
    Resolves: #927406


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-26
changelog:
  - #1089817 - Return value of pgrep is incorrect
  - #950748 - /lib64/libproc.so package both in procps and procps-devel
  - #1011216 - Backport man page fix of top utility - RES = CODE + DATA
  - #1082877 - top/man: RES - physical memory a task 'has used'->'is using'
  - #1034337 - Include man pages for openproc(), readproc() and readproctab()
  - Resolves: rhbz#1089817 rhbz#950748 rhbz#1011216 rhbz#1082877 rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-27
changelog:
  - #1060681 - ps -p cycles over all PIDs instead of just one
  - #963799 - Should shared memory be accounted in cached in free output?
  - Resolves: rhbz#1060681 rhbz#963799


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-28
changelog:
  - #1105125 - Locale dependent float delay in top and watch utilities
  - #1039013 - Include an API in RHEL to return the number of opened file descriptors for a process
  - Resolves: rhbz#1105125
  - Related: rhbz#1034337


author: Rob Crittenden <rcritten@redhat.com> - 1.1-7
changelog:
  - Fix calculation of username string length in authenticate_gss_client_wrap
    (#1057333)
  - Fix version in setup.py so egg information is correct (#973379)


author: ckozak <ckozak@redhat.com> 1.11.4-1
changelog:
  * Thu Apr 10 2014 Alex Wood <awood@redhat.com> 1.11.3-1
  - Specifically check for brand_name/brand_type="" (alikins@redhat.com)
  - Support new apis for guests and hypervisors (ckozak@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.11.5-1
changelog:
  - 1090350: fix time drift detection (ckozak@redhat.com)
  - 1096676: Use simplejson on RHEL 5. (dgoodwin@redhat.com)
  - 1094492: Alternate Subject needs different type that allows more characters.
    (wpoteat@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.1-1
changelog:
  - bump version to 1.12 (jesusr@redhat.com)
  - Add connection method to get available releases (mstead@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.12.2-1
changelog:
  - Detect when operating in container mode and load host system's config.
    (dgoodwin@redhat.com)
  - Convert doc strings to sphinx/restructuredtext (alikins@redhat.com)
  - Add setup for using sphinx for docs. (alikins@redhat.com)


author: Michael Stead <mstead@redhat.com> 1.12.3-1
changelog:
  - Add 6.6/7.1 release targets. (dgoodwin@redhat.com)
  - Add a key_path() to EntitlementCertificate (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.4-1
changelog:
  - Add required bz flags to tito releasers. (dgoodwin@redhat.com)
  - Remove pyqver verbose flag. (alikins@redhat.com)
  - Use tox.ini to setup pep8 for 'make stylish' (alikins@redhat.com)
  - Update pyqver setup. Set min version of 2.7. (alikins@redhat.com)
  - Add libcrypto to list of libs to link to. (bcourt@redhat.com)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.436.el6
changelog:
  - kvm-qcow2-Reject-too-large-header-extensions.patch [bz#1124443]
  - kvm-block-Fix-is_allocated_above-with-resized-files.patch [bz#1122992]
  - kvm-block-mirror-Use-bdrv_is_allocated_above.patch [bz#1122992]
  - kvm-qemu-io-New-command-map.patch [bz#1122410]
  - kvm-qemu-io-Implement-write-c-for-compressed-clusters.patch [bz#1122410]
  - kvm-qemu-img-Add-compare-subcommand.patch [bz#1122410]
  - kvm-qemu-img-Fix-overwriting-ret-before-using.patch [bz#1122410]
  - kvm-QMP-add-get_events-wait-True-option.patch [bz#1122410]
  - kvm-qmp-Check-for-returned-data-from-__json_read-in-get_.patch [bz#1122410]
  - kvm-QMP-add-server-mode-to-QEMUMonitorProtocol.patch [bz#1122410]
  - kvm-qemu-iotests-Import-from-upstream.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-tests-that-require-sample-image.patch [bz#1122410]
  - kvm-block-parse-cache-mode-flags-in-a-single-place.patch [bz#1122410]
  - kvm-qemu-io-Add-command-line-switch-for-cache-mode.patch [bz#1122410]
  - kvm-qemu-io-correctly-print-non-integer-values-as-decima.patch [bz#1122410]
  - kvm-qemu-iotests-Modify-scripts-to-run-with-qemu-kvm-rhe.patch [bz#1122410]
  - kvm-qemu-iotests-Disable-cases-requiring-not-backported-.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-028.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-029.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-030.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-060.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-031.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-040.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-041.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-049.patch [bz#1122410]
  - kvm-qemu-iotests.-Backport-067.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-080.patch [bz#1122410]
  - kvm-qemu-iotests-Backport-086.patch [bz#1122410]
  - kvm-qemu-iotests-Trivial-test-case-backports.patch [bz#1122410]
  - kvm-virtio-rng-Add-human-readable-error-message-for-nega.patch [bz#1119207]
  - kvm-virtio-rng-Move-error-checking-forward-to-prevent-me.patch [bz#1119207]
  - Resolves: bz#1119207
    ([rng]qemu-kvm process still can start when specify negative value for max-bytes)
  - Resolves: bz#1122410
    (backport qemu-iotests to the RHEL 6 internal repository)
  - Resolves: bz#1122992
    (Full mirroring with smaller backing file causes qemu to hang)
  - Resolves: bz#1124443
    (qcow2 doesn't catch invalid header extension sizes)


author: Jeff E. Nelson <> - 0.12.1.2-2.437.el6
changelog:
  - kvm-vmschk-check-rhel6.py-quickly-compare-RHEL6-jsons-ba.patch [bz#1125792]
  - kvm-tests-add-rhel6.0-to-rhel6.6-vmstate-json-files.patch [bz#1125792]
  - kvm-scsi-Ensure-command-and-transfer-lengths-are-set-for.patch [bz#1113068]
  - kvm-Documentation-qemu-img-Mention-SIGUSR1-progress-repo.patch [bz#1122885]
  - Resolves: bz#1113068
    (Qemu crashes when some commands are passed from guest to host tape device.)
  - Resolves: bz#1122885
    (qemu-img man doc should tell "should report progress bar when receives "SIGUSR1" signal if -p option is not used")
  - Resolves: bz#1125792
    (Add vmstate json representation files for RHEL6 releases to source tree)


author: Jeff E. Nelson <> - 0.12.1.2-2.438.el6
changelog:
  - kvm-hda-audio-fix-non-mixer-codecs.patch [bz#1080546]
  - kvm-spice-stop-server-for-qxl-hard-reset.patch [bz#995931]
  - kvm-spice-move-qemu_spice_display_-from-spice-graphics-t.patch [bz#995931]
  - kvm-spice-move-spice_server_vm_-start-stop-calls-into-qe.patch [bz#995931]
  - Resolves: bz#1080546
    (pulse sound no longer works after changing KVM win 7 guest SID in RHEL 6.5)
  - Resolves: bz#995931
    (Qemu core dump (red_get_image: unknown type 184) when reboot a RHEL.6.4-64 guest 25 times)


author: Jeff E. Nelson <> - 0.12.1.2-2.439.el6
changelog:
  - kvm-spice-fix-libvirt-snapshots.patch [bz#1010670]
  - kvm-ide-Ignore-double-DMA-transfer-starts-stops.patch [bz#1104573]
  - kvm-ide-Reset-current_addr-after-stopping-DMA.patch [bz#1104573]
  - kvm-ide-Reset-BMIDEA-bit-when-the-bus-master-is-stopped.patch [bz#1104573]
  - Resolves: bz#1010670
    (spice session is closed when taking snapshot with ram)
  - Resolves: bz#1104573
    (DMA error when install RHEL.5.11.x86_64 guest (ide drive) on RHEL6.5.z host)


author: Jeff E. Nelson <> - 0.12.1.2-2.440.el6
changelog:
  - kvm-hw-qdev-emit-DEVICE_DELETED-event-only-if-the-device.patch [bz#1124314]
  - kvm-ide-Fix-segfault-when-flushing-a-device-that-doesn-t.patch [bz#1120541]
  - Resolves: bz#1120541
    (qemu-kvm crashed when doing iofuzz testing)
  - Resolves: bz#1124314
    (incorrect event reported by QMP on hot plugging an in-use VF to guest)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.441.el6
changelog:
  - kvm-block-Improve-bdrv_aio_co_cancel_em.patch [bz#1018537]
  - kvm-usb-Avoid-reentrancy-of-ehci_advance_async_state-dow.patch [bz#1018537]
  - kvm-scripts-add-sample-model-file-for-Coverity-Scan.patch [bz#1102409]
  - Resolves: bz#1018537
    (qemu core dump after run read/randwr fio in guest with usb or scsi disk)
  - Resolves: bz#1102409
    (Unable to handle NULL pointer dereference in qcow2_check_refcounts)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.442.el6
changelog:
  - kvm-Fix-TEXI-section-mark-imbalance-in-qemu-img-cmd.hx.patch [bz#1116558]
  - kvm-qemu-img-Allow-source-cache-mode-specification.patch [bz#1116558]
  - kvm-vl-Change-mem-prealloc-to-match-upstream.patch [bz#1006027]
  - Resolves: bz#1006027
    (-mem-prealloc option behaviour is opposite to expected)
  - Resolves: bz#1116558
    (Allow qemu-img to bypass the host cache (check, compare, convert, rebase, amend))


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-char-add-a-dummy-fe_open-implementation.patch [bz#1027181]
  - kvm-char-restore-read-callback-on-a-reattached-hotplug-c.patch [bz#1027181]
  - Resolves: bz#1027181
    (Guest can't receive any character transmitted from host after hot unplugging virtserialport then hot plugging again)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.443.el6
changelog:
  - kvm-qxl-render-add-more-sanity-checks.patch [bz#1095612]
  - Resolves: bz#1095612
    (Machine type rhel6.0.0 & -vga qxl & vnc cause qemu-kvm core dump)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.445.el6
changelog:
  - kvm-trace-add-systemtap-initscript-README-file-to-RPM.patch [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: David Vossel <dvossel@redhat.com> - 3.9.5-3
changelog:
  - Fix usage of findmnt in fs-lib.sh based rgmanager agents.
  - When executing force kill of processes using a mountpoint,
    take into account those processes accessing shared memory.
  - Add force_unount=safe option to avoid blocking Filesystem
    agent during the stop operation.
  - Do not fail during stop if oracle listener is already down. 
  - Correctly detect oracledb and orainstanch.sh shutdown.
  - Remove unused patches left over from before patches were
    consolidated into the new source files.

    Resolves: rhbz#1038474
    Resolves: rhbz#1089004
    Resolves: rhbz#1095943
    Resolves: rhbz#1047999
    Resolves: rhbz#960186
    Resolves: rhbz#993431


author: David Vossel <dvossel@redhat.com> - 3.9.5-5
changelog:
  - Add support for pacemaker db2 agent
  - Fix syntax error in nfsserver.sh
  - Updates pacemaker nfs server agents. Adds support for
    nfsnotify agent.

    Resolves: rhbz#1059981
    Resolves: rhbz#1091102
    Resolves: rhbz#974239


author: David Vossel <dvossel@redhat.com> - 3.9.5-7
changelog:
  - Update force_unmount=safe option so it does not process
    duplicate process ids.

    Resolves: rhbz#1095943


author: David Vossel <dvossel@redhat.com> - 3.9.5-8
changelog:
  - Revert accidental modification of exportfs's
    unlock_on_stop option.
  - Add on/off as valid value for ip.sh monitor_link

    Resolves: rhbz#1091102
    Resolves: rhbz#1039119


author: David Vossel <dvossel@redhat.com> - 3.9.5-9
changelog:
  - When signalling pids accessing a mount_point to exit,
    make sure to only signal each pid once.

    Resolves: rhbz#1089004


author: David Vossel <dvossel@redhat.com> - 3.9.5-11
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1094789


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-20
changelog:
  - rgmanager: clusvcadm: If service doesn't exist, try
    Resolves: rhbz#952729
  - rgmanager: Don't crash if a resource agent does not
    Resolves: rhbz#1018079
  - rgmanager: Fix rg_test exit status on failures
    Resolves: rhbz#1033162
  - rgmanager: resrules: make expand_time buffer-less
    Resolves: rhbz#1036652
  - rgmanager: Fix error logging when building the resource
    Resolves: rhbz#1053739


author: Chris Feist <cfeist@redhat.com> - 0.16.2-70
changelog:
  - Added ability to create/remove uidgid entries for corosync in cluster.conf
  - Resolves: rhbz#1025053


author: Chris Feist <cfeist@redhat.com> - 0.16.2-71
changelog:
  - Added --noenable/--nodisable options when starting/stoping cluster
  - Only propagate/activate cluster on last node when using --activate
  - ccs no longer returns 0 when --startall/--stopall fails on a node
  - If not hostname or filename is specified, use 'localhost'
  - Don't leave tempfiles around from schema tests
  - Resolves: rhbz#1090642 rhbz#917809 rhbz#1062402 rhbz#1024962 rhbz#996196


author: Chris Feist <cfeist@redhat.com> - 0.16.2-72
changelog:
  - Added '-s' option to disable SSLv2 connections to ricci
  - Added ability to configure RICCIOPTS variable in /etc/sysconfig/cluster
    or /etc/sysconfig/ricci
  - Resolves: rhbz#1075176


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-73
changelog:
  - ricci: fix end-use modules do not handle stdin polling correctly
  - ricci: fix missing deployment-time dependencies
  - ricci: prevent possible reboot loop
  - Resolves: rhbz#1076713 rhbz#1106842 rhbz#1044122


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-74
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
  - ricci: enhance possible reboot loop prevention (avoid stale batches)
  - Resolves: rhbz#1055424 rhbz#1044122


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-75
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp)
  - Resolves: rhbz#1055424


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-1
changelog:
  - initial import of rsyslog7
    changes since rsyslog-5.8.10-8:
    - rebase to 7.4.10
    - drop patches merged upstream
    - regenerate patches for rhbz820311, rhbz886117
    - add a patch to remove dependency on liblogging-stdlog
    - add a patch to fix compilation of omelasticsearch
      on platforms without atomic instructions
    - mark package as conlicting with rsyslog
    - update specification of dependencies
    - add the rsyslog-recover-qi.pl script
    - add new plugins
      imdiag, mmanon, mmjsonparse, mmsnmptrapd, omelasticsearch,
      pmaixforwardedfrom, pmcisconames, pmsnare
    - add new subpackage rsyslog-elasticsearch
    - make the build more verbose by adding 'V=1' to make
    - update conf file for new omusrmsg syntax
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - drop default compatibility mode from SYSLOGD_OPTIONS
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - fix typos in the spec file
    resolves: #869600


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-2
changelog:
  - amend rsyslog.conf man page with information on omitting file sync
    resolves: #994127
  - add a patch to support TCP KEEPALIVE in imrelp
    resolves: #1009048
  - add a patch to fix missing note about message repetition in imuxsock
    resolves: #1020431
  - add a patch to prevent division-by-zero errors
    resolves: #996862
  - add a patch to fix the name of the PID file in man page
    resolves: #1009882
  - add a patch to remove references to Google ads from the html docs
    resolves: #1030040
  - add missing image files referenced from the html docs
    resolves: #1031673
  - add a patch to backport the mmcount module
    resolves: #1030206
  - add a patch to support arbitrary number of listeners in imuxsock
    resolves: #1096732
  - remove clean section
    resolves: #869600
  - add a list of bugs fixed by rebasing to 7.4.10
    resolves: #996857, #1007409, #1029910, #1061614, #1070689


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033502


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-1
changelog:
  - Update to Ruby 1.8.7-p374.
    * Remove Patch41: ruby-ppc64-segv-fix.patch; subsumed
    * Remove Patch45: ruby-1.8.7-CVE-2011-0188.patch; subsumed
    * Remove Patch46: ruby-1.8.7-FIPS.patch; subsumed
    * Remove Patch47: ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch; subsumed
    * Remove Patch48: ruby-1.8.7-p352-CVE-2011-4815.patch; subsumed
    * Remove Patch49: ruby-1.8.7-p358-marshal-load-segv-fix.patch; subsumed
    * Remove Patch50: ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch; subsumed
    * Remove Patch51: ruby-2.0.0-add-missing-rexml-require.patch; subsumed
    * Remove Patch52: ruby-1.8.7-p371-CVE-2012-4481.patch; subsumed
    * Remove Patch53: ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch; subsumed
    Resolves: rhbz#830098
  - Enable ECC support, provided by OpenSSL, in Ruby
    * ruby-1.9.3-p482-Fix-build-against-OpenSSL-with-enabled-ECC-curves.patch
    Resolves: rhbz#1033864
  - Exclude test that fails when issuing a certificate with RSA signature and
    DSS1 digest for earlier OpenSSL versions when used in conjunction with
    OpenSSL 1.0.1.
    * ruby-1.9.3-p172-Exclude-failing-tests-written-for-earlier-OpenSSL.patch
    Resolves: rhbz#1034351
  - Rename Tracer.fire to SystemTap.fire to avoid conflict with Ruby's tracer.
    Resolves: rhbz#784766


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-2
changelog:
  - Replace hardcoded MD5 by sha256 to prevent SSL server failure in FIPS mode.
    * ruby-1.8.7-p374-Replace-md5-by-sha256-to-fix-SSL-server-FIPS-compatibility.patch
  - Resolves: rhbz#802946


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-61.rc4
changelog:
  - resolves: #1073356 - Fix CVE-2012-6150.
  - resolves: #1073356 - Fix CVE-2013-4496.
  - resolves: #1073356 - Fix CVE-2013-6442.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.0.0-62.rc4
changelog:
  - resolves: #1105502 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108843 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105572 - CVE-2014-0178: Uninitialized memory exposure.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-4
changelog:
  - resolves: #1051656 - Fix gecos field copy debug warning.
  - resolves: #1061301 - Add glusterfs vfs module.
  - resolves: #1087472 - Fix libsmbclient crash when HOME variable isn't set.
  - resolves: #1099443 - 'net ads testjoin' fails with IPv6.
  - resolves: #1100670 - Fix 'force user' with 'security = ads'.
  - resolves: #1096522 - Fix enabling SMB2 causes file operations to fail.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-6
changelog:
  - resolves: #1105500 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108841 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-8
changelog:
  - resolves: #1110733 - Fix write operations as guest with 'security = share'.
  - resolves: #1053886 - Fix receiving the gecos field with winbind.


author: Daniel Kopecek <dkopecek@redhat.com> 2.2-2
changelog:
  - added support for scrubing only allocated file extents (option -E)
  - added patch to fix scrub-freespace
    Resolves: rhbz#907173
    Resolves: rhbz#903890


author: Andy Grover <agrover@redhat.com> - 1.0.24-14
changelog:
  - Add patches for write and verify support, rhbz #1094084
    * 0021-DPO-Add-emulation-of-DPO-bit-for-READ-WRITE-VERIFY10.patch
    * 0022-Add-support-for-WRITEVERIFY10-12-16.patch
    * 0023-sbc-Add-residual-handling-for-WRITE6-10-12-16-and-WR.patch


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-16
changelog:
  - document that parent of a new user's home directory must exist
  - avoid skipping 2nd consecutive failures in pwconv grpconv (#787742)
  - avoid segfault when merging group entries in useradd
  - properly report that userdel found process with user's uid
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - mention that PAM is not configured with login.defs in the man page
  - create new shadow entry if missing in usermod (#1016516)
  - report error if usermod asked for moving homedir and it does not
    exist (#1089666)
  - fix various typos and mistakes in useradd manpage (#907837)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-6
changelog:
  - backport fix to not ignore modifications that affect whether or not an
    entry shows up in a compat map (#1056648)
  - backport fix to avoid potential crashes on domain or map removal (#1043639)


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.22-4
changelog:
  - Remove CAD rhel-only patches. Resolves: rhbz#1108628
  - Add rhel-only SPICE_NOSCALE. Resolves: rhbz#1054757
  - Check that clipboard request does not belong to remote. Resolves: rhbz#1108642


author: Pavel Šimerda <psimerda@redhat.com> - 7:3.1.10-22
changelog:
  - Resolves: #1066368 - memory utilization of Squid becomes very large
  - Resolves: #1011952 - cachemgr.cgi doesn't work by default
  - Resolves: #876980 - Init script: missing condrestart in Usage
  - Resolves: #1058207 - Child process of squid exited abnormally and generated core files
  - Resolves: #998809 - assert(!fd_table[fd].closing()) failed in comm_write()


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-21
changelog:
  - Add notes about offline mode to sssd.conf
  - Related: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-22
changelog:
  - Use the correct sudo iterator
  - Related: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-23
changelog:
  - Resolves: rhbz#1099290: RFE: Be able to configure sssd to honor openldap
                            account lock to restrict access via ssh key


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-25
changelog:
  - Resolves: rhbz#1111528 - Expired shadow policy user(shadowLastChange=0)
                             is not prompted for password change


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-26
changelog:
  - Resolves: rhbz#1130017 - Saving group membership fails if provider is AD,
                             POSIX attributes are used and primary group contains
                             the user as a member


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-28
changelog:
  - Resolves: rhbz#1125187 - simple_allow_groups does not lookup groups from
                             other AD domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-29
changelog:
  - Resolves: rhbz#1103487 - CVE-2014-0249 - sssd: incorrect expansion of group
                             membership when encountering a non-POSIX group


author: Jeff Law <law@redhat.com> - 4.5.19-1.18
changelog:
  - Fix output string for getsockopt (#862321)
  - Handle MADV_DONTDUMP and MADV_DODUMP (#921548)
  - Do not segfault when sorting by name and name is NULL (# 1044605)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-13
changelog:
  - RHEL-6.6 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - fix sesh login shell argv[0]
    - handle the "(none)" hostname correctly
    - SSSD: fix ipa_hostname handling
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    Resolves: rhbz#1065415
    Resolves: rhbz#1078338
    Resolves: rhbz#1052940
    Resolves: rhbz#1083064
    Resolves: rhbz#1033703
    Resolves: rhbz#1006447
    Resolves: rhbz#1006463
    Resolves: rhbz#1070952


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-14
changelog:
  - RHEL-6.6 erratum
    - SSSD: fixed netgroup filter patch
    - SSSD: dropped serparate patch for #1006463, the fix is now part
      of the netgroup filter patch
    Resolves: rhbz#1006463
    Resolves: rhbz#1083064


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-15
changelog:
  - RHEL-6.6 erratum
    - SSSD: dropped the ipahostnameshort patch, as it is not
      needed. rhbz#1033703 is a configuration issue.
    Related: rhbz#1033703


author: Peter Jones <pjones@redhat.com> - 4.02-9
changelog:
  - Avoid a workaround that causes machines to stall in PXE boots that
    use the local disk.
    ResolveS:rhbz#980671


author: Peter Jones <pjones@redhat.com> - 4.04-2
changelog:
  - Make the subpackages noarch, not i686, so rel-eng doesn't have to fight
    it to get working dependency resolution.
    Related: rhbz#980671


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-23
changelog:
  - resolves: #1088998
    count with xz compressed files as well in sa2 script
  - resolves: #1012575
    fix file mode of sysstat cron file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-24
changelog:
  - resolves: #921612
    fix issues when sa data files weren't correctly overwritten in some cases.
    Part of this fix is lowering the line when the sa data files are kept
    in subfolders (from 28 to 25 days), and because of this, the default history
    value was also lowered from 28 to 25 days.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-25
changelog:
  - related: #921612
    reverted the boundary when the sa data files are stored in directories
    and default history value back to 28. Without the revert, backward
    compatibility could be broken in some cases.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-26
changelog:
  - resolves: #1110851
    added sysstat(5) man page describing /etc/sysconfig/sysstat file
  - resolves: #1102603
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-27
changelog:
  - resolves: #1124180
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-1
changelog:
  - rebase to upstream 2.5 release, including fixes for:
  - rhbz1027459: staprun/stapio fails if trace1 file is in same dir
  - rhbz1074541: kernel crash on netfilter_drop.stp sample
  - rhbz1038692: systemtap missing syscall pwritev


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-4
changelog:
  - added BZ1099133.patch: at_var_cu test
  - added BZ1099472.patch: cast-scope.exp test
  - added BZ1099555.patch: gtod.exp test 
  - added BZ1099757.patch: vars.exp test
  - added BZ1099791.patch: vma_vdso test
  - added BZ1099825.patch: probe_by_pid test
  - added BZ1100813.patch: buildok tests
  - added BZ1109084.patch: initscript name sensitivity


author: David Knox <dknox@redhat.com> 0:6.0.24-80
changelog:
  - Related: CVE-2013-4590  - remove xml schema names javaee_5,
  - javaee_web_services_1_2, and javaee_web_services_1_2_client
  - from descriptor.DigesterFactory initialization. These
  - schema definitions are not relevant to 6.0.24 as the version
  - of their spec did not exist at the time.
  - Resolves: rhbz#1140855 - request parameter truncated


author: John Kacur <jkacur@redhat.com> - 1.0.5-11
changelog:
  - Rework spec to use apply patches separate from upstream
  - trace-cmd-Add-checks-for-invalid-pointers-to-fix-seg.patch (879814)
  Resolves:bz879814


author: Steve Grubb <sgrubb@redhat.com> 0.3.13-1
changelog:
  - New upstream bug fix release
  resolves: #633584 - Pick up latest TrouSerS package
  resolves: #1074634 - Buffer overflow detected in TrouSerS daemon


author: Harald Hoyer <harald@redhat.com> 147-2.53
changelog:
  - add rule for idrac interface renaming
  Resolves: rhbz#1054482
  - for every modprobe locked worker, increase max_childs
  Resolves: rhbz#1028174
  - increase firmware timeout to 600 seconds
  Resolves: rhbz#1077186
  - add nvme pcie ssd scsi_id ENV
  Resolves: rhbz#1020856
  - scsi_id: add short option "-b" parsing
  Resolves: rhbz#910168
  - add  by-id (hardware serial number) for Micron PCIe SSDs
  Resolves: rhbz#839172
  - 80-iosched.rules: check for attributes
  Resolves: rhbz#1008341


author: Karel Zak <kzak@redhat.com> 2.17.2-12.16
changelog:
  - fix #1033309 - man rename references mmv command which is not available
  - fix #1039187 - taskset man page PERMISSIONS section is incorrect
  - fix #999625 - mount does not appear to be correctly documented for default mount options
  - fix #1004021 - document blkid -w behaviour
  - fix #1011590 - fdisk: Floating point exception on multipath mapped device
  - fix #1031641 - findmnt should handle better trailing "/" in /proc/mounts entries
  - fix #1104575 - kill(1) doesn't check errno after calling strtol()
  - fix #1049055 - backport PID ns support to unshare(1) in util-linux-ng
  - fix #957906 - backport 'nsenter' utility to util-linux
  - fix #619521 - requesting to add logins(1m) command to distribution of Red Hat


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-20
changelog:
  - virt-manager shows the right guest status when guest is pmsuspended (rhbz#1091292)
  - Make consistent virt-manager's option "--profile=File" between manual page and help page. (rhbz#1069090)
  - Virt-manager: Add Virtio SCSI disk option. (rhbz#1049781)
  - Allow changing the default new VM CPU model. (rhbz#1046583)
  - virt-manager supports native gluster fs (rhbz#1040172)
  - virt-manager doesn't cause a python trace-back when it cannot open display (rhbz#1025706)
  - AttributeError: 'NoneType' object has no attribute 'storagePoolLookupByName' (rhbz#927257)
  - virt-manager doesn't set up TCP net console mode properly (rhbz#918451)
  - virt-manager cannot open console through IPV6. (rhbz#870383)
  - Support SPICE auto-redir in virt-manager (rhbz#807277)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-21
changelog:
  - Fix error reporting (rhbz#1093980)
  - Fix parser error when install virt-manager (rhbz#1093979)
  - Fix Preferences/Feedback UI alignment (rhbz#1094083)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-22
changelog:
  - Fix alignment of Preferences/VM Details (rhbz#1094083)
  - Fix description of "Source Name" in create-pool (rhbz#1094005)
  - Handle ipv6 addresses (rhbz#870383)
  - virt-manager: escape host string (rhbz#1094600)


author: Marc-André Lureau <marcandre.lureau@redhat.com> 0.6.0-2
changelog:
  - Use a USB icon instead of a generic settings icon
    Resolves: rhbz#804184
  - Remove menu item "Automatically resize"
    Resolves: rhbz#1007649
  - Client doesn't send monitor config when launched via browser plugin
    Resolves: rhbz#1038726
  - Screen is blurry for some resolutions when spice window is maximized
    Resolves: rhbz#1056041
  - Remove some couldn't load configuration messages
    Resolves: rhbz#1006737


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.6.0-4
changelog:
  - Fixed coverity errors discovered in 0.6.0-1 build
    Related:  rhbz#1097038
  - Remote-Viewer: Zoom Out Behavior Is Not Consistent
    Resolves: rhbz#1004051


author: Christophe Fergeau <cfergeau@redhat.com> 0.6.0-5
changelog:
  - Fix authentication after failed attempt with VNC
    Resolves: rhbz#1007295
  - Fix broken 'release-cursor' accel when not specified in --hotkeys
    Resolves: rhbz#1029108


author: Marc-André Lureau <marcandre.lureau@redhat.com> 0.6.0-6
changelog:
  - Remove some warnings in kiosk mode
    Resolves: rhbz#1107518
  - Register remote-viewer.desktop as a handler for application/x-virt-viewer
    Resolves: rhbz#1063238
  - New display will be zoomed out to a very small display size
    Resolves: rhbz#1104064
  - Guest can not be resized to expected window size after zoom out
    Resolves: rhbz#1105528


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Decrease debuginfo verbosity for s390 reduce memory consumption
  - Resolves: rhbz#1033151


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-2
changelog:
  - Create symlinks to the libwebkitgtk library with the old name (libwebkit)
  - Resolves: rhbz#1033151


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-3
changelog:
  - Compile with --disable-geolocation
  - Resolves: rhbz#1119647
  - Restore symlinks after ldconfig call in post to avoid their removal
  - Resolves: rhbz#1118424


author: Tomas Popela <tpopela@redhat.com> - 1.4.3-8
changelog:
  - Fix more of the wrongly aligned memory commits on ppc64
  - Fix crash in Yarr JIT
  - Resolves: rhbz#1136299


author: Tomas Hozza <thozza@redhat.com> 1.12-5
changelog:
  - Fix the parsing of weblink when doing recursive retrieving (#960137)
  - Fix errors found by static analysis of source code (#873216)


author: Adam Jackson <ajax@redhat.com> 0.3.6-5
changelog:
  - Add <xcb/xcb_util.h> and xcb-util.pc for source compat with >= 0.3.8
  - Backport pkgconfig fix from upstream
  - Don't install -{icccm,image,keysyms}, they live in their own srpms now


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-15
changelog:
  - libxfs: restrict platform_test_xfs_fd to regular files (#1018751)
  - xfs_repair: avoid segfault if reporting progress early in repair (#1020438)
  - xfs_fsr: fix SWAPEXT failures under selinux (#1024702)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-16
changelog:
  - xfs_copy: do not exit with error code if we succeed (#1100107)
  - xfs_copy: fix corruption when source fs sector size is > 512 bytes (#1104956)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.2.19-3
changelog:
  - Fix duplicate documentation (#1001250)
  - Turn on verbose build output via V=1 make
  - Use %?_isa in explicit package deps
  - Fix base package Group tag to "System Environment/Libraries"
  - Remove %defattr


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - New upstrema version with memleaks, crl checks and other fixes
  - enable make check during build
  - drop ecdsa patch as it has been included upstream


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-3
changelog:
  - luit 1.1.1
  - oclock 1.0.3
  - xclock 1.0.6
  - xbiff 1.0.3
  - xpr 1.0.4
  - xcursorgen 1.0.5
  - xclipboard 1.1.2
  - xfontsel 1.0.4
  - xfd 1.1.1
  - xlogo 1.0.4
  - xvidtune 1.0.3


author: Adam Jackson <ajax@redhat.com> 7.7-1
changelog:
  - rgb 1.0.5
  - xsessreg 1.0.8
  - xgamma 1.0.5
  - xhost 1.0.5
  - xmodmap 1.0.7
  - xsetroot 1.1.1
  - xstdcmap 1.0.3


author: Bala FA <barumuga@redhat.com> - v3.6.0.24-1
changelog:
  - fixes bugs bz#1104153 bz#1109149 bz#1112582 bz#1113961 bz#1114008 
    bz#1114592 bz#1115266 bz#1115267


author: Bala FA <barumuga@redhat.com> - v3.6.0.25-1
changelog:
  - fixes bugs bz#1007033 bz#1101910 bz#1104121 bz#1104921 bz#1109150 
    bz#1116376 bz#1116703 bz#1116992 bz#1117135 bz#1120198 bz#1120245 bz#BUG:


author: Bala FA <barumuga@redhat.com> - v3.6.0.26-1
changelog:
  - fixes bugs bz#1111029 bz#1111577 bz#1113852 bz#1116761 bz#1117135 
    bz#1117283 bz#1119223 bz#1120830 bz#1121059 bz#1121603


author: Bala FA <barumuga@redhat.com> - v3.6.0.28-1
changelog:
  - fixes bugs bz#1110694 bz#1116150 bz#1121099 bz#1124692 bz#1127234 
    bz#1136711 bz#921528 bz#969298


author: Bala FA <barumuga@redhat.com> - v3.6.0.29-2
changelog:
  - fixes bugs bz#1136711 bz#1138288 bz#1139213 bz#1139273 bz#1139473 
    bz#1140643 bz#1143960
  - build to make higher release with rhs-3.0-client to avoid build
    collision


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-3
changelog:
  - Fix .new method in Ruby bindings.
    resolves: rhbz#1072062
  - Properly use timeout --foreground when running tests
    resolves: rhbz#1025269
  - Fix cancellation on errors in tar-in
    resolves: rhbz#1091805
  - Check whether something has been mounted to / when using mount-local* APIs
    resolves: rhbz#1057510


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-4
changelog:
  - Don't inhibit partition detection if LDM not available
    resolves: rhbz#1079182
  - Deprecate blockdev_setbsz and make it do nothing
    resolves: rhbz#624335
  - Disable fstrim API
    resolves: rhbz#982979
  - Backport virt-sysprep from libguestfs 1.24, with few backports from
    greater versions too
    resolves: rhbz#1037166
  - virt-sparsify: don't overwrite block or char devices if used as output files
    resolves: rhbz#1056558
  - fix few typos in the documentation
    resolves: rhbz#1099332


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-7
changelog:
  - FUSE: fix access as root to files and directories not owned by root
    resolves: rhbz#1106548
  - virt-sparsify: check for available space before starting
    resolves: rhbz#1097359
  - Enable gdisk support to make part-get-gpt-type and part-set-gpt-type work
    resolves: rhbz#965495


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-11
changelog:
  - virt-sysprep: Fix locking accounts with passwords.
    resolves: rhbz#1037166
  - Update copy-patches script to RHEL 6.6.


author: Doug Ledford <dledford@redhat.com> - 1.2-5
changelog:
  - Update to git repo archive from upstream
  - Add truescale-serdes.cmds and related code from git archive
  - Resolves: bz1024903


author: Doug Ledford <dledford@redhat.com> - 1.3-3
changelog:
  - Add missing files to dracut install command, including bash
    as the truescale-serdes.cmds will not work with dash and
    can not be reasonably ported to dash.
  - Related: bz1024903


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20120814_2-0.14
changelog:
  - add /etc/logrotate.d/mcelog file [849252]
  - add chkconfig levels to mcelogd initscript [1006293]
  - fix IvyBridge detection (commits b29cc4d and 2577aeb) [1079360]
  - cleanup .orig and .rej patch files [1059227]
  - add Haswell CPUID 0x3f [1079501]
  - Modify --daemon logic to allow syslog-only output [872387]


author: Prarit Bhargava <prarit@redhat.com> 2:101.0
changelog:
  - Decode MISC register when IO MCA occurs
  - add and fix leaky bucket logging
  - exit with EXIT_SUCCESS (aka 0) when stopped by signal
  - Fix missing handling for flag MCE_GETCLEAR_FLAGS
  - Decode new simple error code number 6
  - introduce new NVR scheme to sync with upstream


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix bad dates in changelog
    Resolves: rhbz#1038670
  - Fix crash on migration during reboot
    Resolves: rhbz#1004443
  - Use TLS 1.0 or better
    Resolves: rhbz#1035695


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-9
changelog:
  - Fix potential infinite loop on long running VMs (> 46 days)
    Resolves: rhbz#1072700
  - Fix assertion in video streaming code
    Resolves: rhbz#1086820


author: Samantha N. Bueno <sbueno@redhat.com> - 1.8.1-1
changelog:
  - Upgrade to 1.8.1 release
    Resolves: rhbz#1037469
  - Rebase patches, including one I missed a chunk of last release
    Resolves: rhbz#1065320


author: Eric Sandeen <sandeen@redhat.com> 3.0.4-4
changelog:
  - Add /var/lib/xfsdump/inventory to file list (was created runtime) (#1055655)
  - Preserve file capabilities on restore (#905585)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-1
changelog:
  - rebase to 2.4.39 (#923680)
    + drop a lot of upstreamed patches, backport the rest
    + compile in mdb
    + remove automatic slapd.conf -> slapd-config conversion


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - add another missing patch forgotten during the rebase
  - fix: enable dynamic linking - unresolved symbols in the smbk5pwd module


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: Dan Winship <danw@redhat.com> - 0.3.0-6
changelog:
  - Fix build with xulrunner 17 (#916973)
  - Fix to not look for proxy.conf in current directory (#802765)
  - Fix a crash with webkit and invalid PAC file (#874492)
  - Fix a crash with URLs containing a username but no password (#979356)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.4-10
changelog:
  - Minor source hardening (bz 878001)
  - Migrating algorithm fix (bz 1031230)
  - Introducing deepestcache option (bz 1052166)
  - Debug option behavior fix (bz 1096392)


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-1
changelog:
  - Rebase to 2.24.23
  - Make immodule cache handling the same as in gtk3. The cache
    file is now in $libdir, no longer in /etc
  - Disable tracker explicitly
  - Initialize variable "key" in gtk_print_backend_cups_set_password()
  - Modify fresh-tooltips.patch so the "new-tooltip-style" property
    is still accepted
  - Revert deprecations added between 2.20 and 2.24 so that building
    of dependent packages don't fail
  - Update relevant patches so that they apply correctly
  - Resolves: #1100886


author: Ray Strode <rstrode@redhat.com> - 2.24.23-5
changelog:
  - Don't crash if enumeration finishes just as it gets cancelled
    in file selector. Fixes crash in libreoffice when saving to
    SFTP mounts.
    Resolves: #1129605


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-6
changelog:
  - Set "entry-text-column" property in constructor of GtkComboBoxText.
  - Fixes crash in evolution when creating new appointment.
  - Resolves: #1126916


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-6
changelog:
  - Enable deprecated GLib/GTK+ symbols since Devhelp uses some of them
    since the GLib rebase. Apps should not be shipping with these build
    flags anyway.
  - Resolves: rhbz#1136304


author: Tim Waugh <twaugh@redhat.com> 1.1.0-9
changelog:
  - Init script fixes:
    - Attempt to start all configured servers (bug #562669, bug #768405).
    - Avoid problems when user's configured shell is not bash (bug #949522).
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #958988, bug #920373).
  - Avoid initializing the vnc extension twice (bug #1004093).
  - Use exceptions instead of asserts for ZRLE decoding boundary checks
    (bug #1078508).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-13
changelog:
  - Added versioned pixman and libX11 dependencies (bug #917717,
    bug #991285).
  - Link against system-wide libjpeg-turbo (bug #956779).
  - Describe -SecurityTypes option in man pages (bug #882952).
  - Fixed kbase URL in sysconfig file (bug #728981).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-16
changelog:
  - Unknown pseudo-encodings (those with negative values) would cause
    vncviewer to crash (bug #1121041).
  - Set source as well as target when building java as some JDKs require
    this (bug #1078427).


author: Peter Hutterer <peter.hutterer@redhat.com> 2.8.2-3
changelog:
  - Drop undef for HAVE_SMOOTH_SCROLLING. Nothing client-side can make use of
    this anyway so enabling has no drawbacks but aligns the code with the
    other products.
  - Don't crash when exceeding MAXDEVICES


author: Adam Jackson <ajax@redhat.com> 6.9.3-4
changelog:
  - Disable DRI support, we've never built the 3D driver and it's been nuked
    from upstream Mesa anyway.


author: Adam Jackson <ajax@redhat.com> 6.9.3-5
changelog:
  - mach64-6.9.3-shadowfb.patch: Allow Render even when doing ShadowFB.
  - Disable EXA as well, it's completely broken.
  - mach64-6.9.3-fix-no-exa-build.patch: Fix building with neither XAA nor EXA.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.5.901-1
changelog:
  - synaptics 1.7.5.901 (#1077486)
  - set secondary top buttons on INPUT_PROP_TOPBUTTONPAD (#1026577)
  - fix bogus changelog date


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Don't fail on invalid action properties, just ignore them. g-s-d can't
    handle that, see #1095019. (#1077478)
  - Drop all now unused patches


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-3
changelog:
  - Merge RHEL7 extra patches, add RHEL6 compat patch to enable INPUT_PROP
    checking
  - Grab the event device by default for backwards-compat (#1077478)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-32
changelog:
  - Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.5.z] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-33
changelog:
  - Release 1.2.11.15-33
  - Resolves: Bug 1094412 - fix memleak introduced by "Simple paged results should support async search (957864)" (DS 47623)
  - Resolves: Bug 1094413 - rhds91 389-ds-base-1.2.11.15-31.el6_5 crash on paged searches followed by simple srch (DS 47707)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-34
changelog:
  - Release 1.2.11.15-34
  - Resolves: #1123861
    EMBARGOED CVE-2014-3562 unauthenticated information disclosure [rhel-6.5.z] (DS 616, BZ 1123477)


author: Daniel Vrátil <dvratil@redhat.com> 1.2.1-3
changelog:
  - Backport couple upstream patches to support running Akonadi when $HOME is on AFS (resolves #1073939)


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89
changelog:
  - bz1067774 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - fix options compare.
  - Resolves: rhbz#1067774


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89.el6_5.1
changelog:
  - bz1067774 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - fix fix options compare.
  - Related: rhbz#1067774


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89.el6_5.2
changelog:
  - bz1089889 - autofs can ghost non-existent map entries given the right timing
    - fix use cache entry after free in lookup_prune_one_cache().
    - check for non existent negative entries in lookup_ghost().
  - Resolves: rhbz#1089889


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964687


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-59.2
changelog:
  - fenced: keep manual ACk fifo open for longer and also make fenced_external()
    write to it.
    Resolves: rhbz#1079991


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-17.1
changelog:
  - Resolves: rhbz#1080103

  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1080103)
  - merge upstream commit e9d9c4be7293c04ca97bfd84f95b76a22690a92a (rhbz#1080103)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1080103)
  - merge upstream commit 0b825f22f2b95beca1aeb614d22a7e74a84c66b5 (rhbz#1080103)
  - cpg: Make sure left nodes are really removed (rhbz#1080103)
  - merge upstream commit b55f32fe2e1538db33a1ec584b67744c724328c6 (rhbz#1080103)


author: Neil Horman <nhorman@redhat.com> 1.2-1.1
changelog:
  - Fixed wildcatpass error message (bz 1056310)
  - Fixed rapl register reads (bz 1080631
  - Enalbed haswell power states (bz 1008033)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.1
changelog:
  - refresh expired cookie in test172 from upstream test-suite (#1092486)
  - fix a memory leak caused by write after close (#1092479)
  - nss: implement non-blocking SSL handshake (#1092480)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.3
changelog:
  - fix re-use of wrong HTTP NTLM connection (CVE-2014-0015)
  - fix connection re-use when using different log-in credentials (CVE-2014-0138)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.1
changelog:
  - Add 0194-RHBZ-997570-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync
      version
  - Resolves: bz #1069435


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.2
changelog:
  - Add 0195-UPBZ-1024103-alua-prio-timeout.patch
    * Change alua prioritizer timeout from 5 minutes to one minute
  - Resolves: bz #1078491


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.3
changelog:
  - Add 0196-RHBZ-1099530-orphan-paths-on-reload.patch
    * make multipath orphan paths that are no longer included in the device
      when the table is reread.
  - Resolves: bz #1099530


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.4
changelog:
  - Add 0197-UPBZ-1137017-fast-io-fail-iscsi.patch
    * add iscsi support for fast_io_fail_tmo
  - Resolves: bz #1137017


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-3
changelog:
  - Add critical needs_check flag support
  - No support for the cache target in RHEL-6.5, thus avoid packaging cache tools and man pages
    Resolves: #1086824


author: Anton Arapov <anton@redhat.com> - 1:2.11-7
changelog:
  - Add "PXE" to HP OEM Type 209 record output
  - Properly print the hexadecimal value of invalid string characters


author: Jay Fenlason <fenlason@redhat.com> 3.5-1.2
changelog:
  - Backport two patches to improve register dumps on ixgbe devices
    Resolves: bz#1038956
  - Backport two patches to fix lro support
    Resolves: bz#1038955


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6_4.2
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1108489).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6_4.3
changelog:
  - One more fix needed for 'gdb crashes while thread apply all bt is run on
    the core file' (Jan Kratochvil, RH BZ 1108489).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6_4.4
changelog:
  - Yet another fix needed for ''gdb crashes while thread apply all bt is run
    on the core file' (Tom Tromey and Paul Pluzhnikov, RH BZ 1108489).
  - Fix NVR on last ChangeLog entry.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 947564).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.1
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1108490).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.2
changelog:
  - Improve fix to ''gdb crashes while thread apply all bt is run on the core
    file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov, RH BZ 1108490).


author: Daiki Ueno <dueno@redhat.com> - 0.17-18
changelog:
  - drop BR: java-1.6.0-openjdk-devel, because:
    - it was only needed for javadoc, but the regeneration of javadoc
      files is not necessary
    - the s390/s390x buildroots are lacking the package for el6


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1065429


author: Colin Walters <walters@redhat.com> - 2.26.1-7
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1065429


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.132.3
changelog:
  - Don't use alloca in addgetnetgrentX (#1087789).
  - Adjust pointers to triplets in netgroup query data (#1087789).


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.14-8
changelog:
  - fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
  - add missing initialization of libgcrypt in gpgv
  - properly encode s2k iteration count in gpg-agent (#638635)


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-84
changelog:
  - grub-install: add regex for partition and multipath when
    use_friendly_names is off
    Resolves: rhbz#1121321


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-30
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1078174)
  - mod_log_config: add security fix for CVE-2014-0098 (#1078174)


author: Jay Fenlason <fenlason@redhat.com> - 1.5-2
changelog:
  - Build the 1.1 version as well, so we have the old library for backward
    compatability.
    Resolves: rhbz1070347


author: Michal Schmidt <mschmidt@redhat.com> - 1.5-3
changelog:
  - Make libhwloc.so point to the current library version, not the compat one.
    Resolves: rhbz1135040


author: Petr Šabata <contyk@redhat.com> - 2.6.32-32
changelog:
  - Fix a floating point exception regression introduced with the
    incorrect fix of #859145 (#1045200)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050190


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085009


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115580
  - Resolves: rhbz#1115867


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.0-7.1.13.4
changelog:
  - Add fix for ArrayIndexOutOfBoundsException when certain glyphs are processed
  - Resolves: rhbz#1132523


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.0.el6
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 0
  - sync with fedora
   - added and applied patch411 1029588.patch (rh 1029588)
   - added aand applied patch410, 1015432 (rh 1015432)
  - Resolves: rhbz#1050935


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.7.0.el6
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed upstreamed patch402 gstackbounds.patch
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - fixed FT2_CFLAGS and FT2_LIBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085002


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115874


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.37.1.el6]
changelog:
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064912 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064912 1024024]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058417 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062112 1043353]
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1053191 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1052132 1032213] {CVE-2013-6367}
  - [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) [1052832 1034266] {CVE-2013-6381}
  - [net] ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1052129 1023491] {CVE-2013-4470}
  - [net] ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1052129 1023491] {CVE-2013-4470}
  - [netdrv] mlx4_en: Fix BlueFlame race (Nikola Pajkovsky) [1041143 987634]
  - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1063880 1011876]
  - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1061110 1011930] {CVE-2013-4387}
  - [fs] gfs2: dirty inode correctly in gfs2_write_end (Benjamin Marzinski) [1056143 991596]
  - [kernel] pidns: fix two invalid task_active_pid_ns() usages (Aristeu Rozanski) [1038122 984597]
  - [fs] ext4: introduce reserved space (Lukas Czerner) [1059382 916592]
  - [fs] ext4: don't let i_reserved_meta_blocks go negative (Lukas Czerner) [1059382 916592]
  - [block] do not pass disk names as format strings (Alexander Gordeev) [971371 971372] {CVE-2013-2851}
  - [base] core: Don't remove kobjects in device_shutdown (Mateusz Guzik) [1063353 972831]
  - [kernel] pid: remove the child_reaper special case in init/main.c (Aristeu Rozanski) [1017904 919065]
  - [kernel] pidns: Use task_active_pid_ns where appropriate (Aristeu Rozanski) [1017904 919065]
  - [kernel] namespaces, pid_ns: fix leakage on fork() failure (Aristeu Rozanski) [1017904 919065]
  - [kernel] pidns: call pid_ns_prepare_proc() from create_pid_namespace() (Nikola Pajkovsky) [1017904 919065]
  - [fs] nfs: Check for buffer length in __nfs4_get_acl_uncached (Sachin Prabhu) [1052136 906056] {CVE-2013-4591}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.3.1.el6]
changelog:
  - [net] don't drop TSO features for NO_CSUM devices (Ivan Vecera) [1037812 1030631]
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.4.1.el6]
changelog:
  - [powerpc] signals: Improved mark VSX not saved with small contexts fix (Seth Jennings) [1044566 1044117]
  - [powerpc] signals: Mark VSX not saved with small contexts (Seth Jennings) [1044566 1044117]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.5.1.el6]
changelog:
  - [net] sctp: fix checksum marking for outgoing packets (Daniel Borkmann) [1046041 1040385]
  - [kernel] ptrace: Cleanup useless header (Aaron Tomlin) [1046043 1036312]
  - [kernel] ptrace: kill BKL in ptrace syscall (Aaron Tomlin) [1046043 1036312]
  - [fs] nfs: Prevent a 3-way deadlock between layoutreturn, open and state recovery (Steve Dickson) [1045094 1034487]
  - [fs] nfs: Ensure that rmdir() waits for sillyrenames to complete (Steve Dickson) [1051395 1034348]
  - [fs] nfs: wait on recovery for async session errors (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Re-use exit code in nfs4_async_handle_error() (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Update list of irrecoverable errors on DELEGRETURN (Steve Dickson) [1051393 1030049]
  - [exec] ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039486 1039487] {CVE-2013-2929}
  - [net] ipv6: router reachability probing (Jiri Benc) [1043779 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1043779 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1043779 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1043779 1029585]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Jiri Benc) [1040826 1030094]
  - [net] ndisc: Update neigh->updated with write lock (Jiri Benc) [1040826 1030094]
  - [net] ipv6: prevent fib6_run_gc() contention (Jiri Benc) [1040826 1030094]
  - [net] netfilter: push reasm skb through instead of original frag skbs (Jiri Pirko) [1049590 1011214]
  - [net] ip6_output: fragment outgoing reassembled skb properly (Jiri Pirko) [1049590 1011214]
  - [net] netfilter: nf_conntrack_ipv6: improve fragmentation handling (Jiri Pirko) [1049590 1011214]
  - [net] ipv4: fix path MTU discovery with connection tracking (Jiri Pirko) [1049590 1011214]
  - [net] ipv6: Make IP6CB(skb)->nhoff 16-bit (Jiri Pirko) [1049590 1011214]
  - [edac] Add error decoding support for AMD Fam16h processors (Prarit Bhargava) [1051394 1020290]
  - [netdrv] bnx2x: correct VF-PF channel locking scheme (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: handle known but unsupported VF messages (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: Lock DMAE when used by statistic flow (Michal Schmidt) [1040497 1029200]
  - [net] ipv6: fix leaking uninitialized port number of offender sockaddr (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: fix addr_len/msg->msg_namelen assignment in recv_error functions (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: prevent leakage of uninitialized memory to user in recv syscalls (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] ipvs: Add boundary check on ioctl arguments (Denys Vlasenko) [1030817 1030818] {CVE-2013-4588}
  - [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) [1038935 1034266]
  - [md] fix calculation of stacking limits on level change (Jes Sorensen) [1035347 1026864]
  - [ata] ahci: fix turning on LEDs in ahci_start_port() (David Milburn) [1035339 1017105]
  - [ata] libata: implement cross-port EH exclusion (David Milburn) [1035339 1017105]
  - [ata] libata add ap to ata_wait_register and intro ata_msleep (David Milburn) [1035339 1017105]
  - [netdrv] igb: Update link modes display in ethtool (Stefan Assmann) [1032389 1019578]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.6.1.el6]
changelog:
  - [mm] memcg: fix oom schedule_timeout() (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: change memcg_oom_mutex to spinlock (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: fix hierarchical oom locking (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: make oom_lock 0 and 1 based rather than counter (Ulrich Obergfell) [1054072 1034237]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.7.1.el6]
changelog:
  - [char] n_tty: Fix unsafe update of available buffer space (Jiri Benc) [1060491 980188]
  - [char] n_tty: Fix stuck throttled driver (Jiri Benc) [1060491 980188]
  - [char] tty: Add safe tty throttle/unthrottle functions (Jiri Benc) [1060491 980188]
  - [char] tty: note race we need to fix (Jiri Benc) [1060491 980188]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.10.1.el6]
changelog:
  - [fs] xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (Brian Foster) [1067775 1059334]
  - [x86] apic: Map the local apic when parsing the MP table (Prarit Bhargava) [1063507 1061873]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.1.el6]
changelog:
  - [net] netpoll: take rcu_read_lock_bh() in netpoll_send_skb_on_dev() (Florian Westphal) [1063271 1049052]
  - [fs] cifs: sanity check length of data to send before sending (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [fs] cifs: ensure that uncached writes handle unmapped areas correctly (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [infiniband] ipoib: Report operstate consistently when brought up without a link (Michal Schmidt) [1064464 995300]
  - [security] selinux: fix broken peer recv check (Paul Moore) [1059991 1043051]
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064913 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064913 1024024]
  - [fs] nfs: always make sure page is up-to-date before extending a write to cover the entire page (Scott Mayhew) [1066942 1054493]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058418 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062113 1043353]
  - [security] selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: look for IPsec labels on both inbound and outbound packets (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() (Paul Moore) [1055364 1024631]
  - [edac] e752x_edac: Fix pci_dev usage count (Aristeu Rozanski) [1058420 1029530]
  - [s390] mm: handle asce-type exceptions as normal page fault (Hendrik Brueckner) [1057164 1034268]
  - [s390] mm: correct tlb flush on page table upgrade (Hendrik Brueckner) [1057165 1034269]
  - [net] fix memory information leaks in recv protocol handlers (Florian Westphal) [1039868 1039869]
  - [usb] cdc-wdm: fix buffer overflow (Alexander Gordeev) [922000 922001] {CVE-2013-1860}
  - [usb] cdc-wdm: Fix race between autosuspend and reading from the device (Alexander Gordeev) [922000 922001] {CVE-2013-1860}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.2.el6]
changelog:
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.12.1.el6]
changelog:
  - [mm] vmscan: re-introduce the ZONE_RECLAIM_NOSCAN bailout for zone_reclaim() (Rafael Aquini) [1073562 1039534]
  - [mm] vmscan: compaction works against zones, not lruvecs (Johannes Weiner) [1073564 982770]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-431.13.1.el6]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (J. Bruce Fields) [1063201 1042731]
  - [net] sctp: fix sctp_connectx abi for ia32 emulation/compat mode (Daniel Borkmann) [1076242 1053547]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.14.1.el6]
changelog:
  - [net] ip_tunnel: (revert old)/fix ecn decapsulation behaviour (Jiri Pirko) [1078011 1059402]
  - [net] ipv6: del unreachable route when an addr is deleted on lo (Vivek Dasgupta) [1078798 1028372]
  - [net] ipv6: add ip6_route_lookup (Vivek Dasgupta) [1078798 1028372]
  - [net] packet: improve socket create/bind latency in some cases (Daniel Borkmann) [1079870 1045150]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.15.1.el6]
changelog:
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1083350 844450]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.17.1.el6]
changelog:
  - [scsi] qla2xxx: Fixup looking for a space in the outstanding_cmds array in qla2x00_alloc_iocbs() (Chad Dupuis) [1085660 1070856]
  - [scsi] isci: fix reset timeout handling (David Milburn) [1080600 1040393]
  - [scsi] isci: correct erroneous for_each_isci_host macro (David Milburn) [1074855 1059325]
  - [kernel] sched: Fix small race where child->se.parent, cfs_rq might point to invalid ones (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: suppress RCU lockdep splat in task_fork_fair (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: add local variable to store task_group() to avoid kernel stall (Naoya Horiguchi) [1081908 1043733]
  - [fs] cifs: mask off top byte in get_rfc1002_length() (Sachin Prabhu) [1085358 1069737]
  - [kernel] Prevent deadlock when post_schedule_rt() results in calling wakeup_kswapd() on multiple CPUs (Larry Woodman) [1086095 1009626]
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033533 1033534] {CVE-2013-6383}
  - [md] dm-thin: fix rcu_read_lock being held in code that can sleep (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: irqsave must always be used with the pool->lock spinlock (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: sort the per thin deferred bios using an rb_tree (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use per thin device deferred bio lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: simplify pool_is_congested (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: take care to copy the space map root before locking the superblock (Mike Snitzer) [1086007 1060381]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix refcount decrement below 0 which caused corruption (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix Documentation for held metadata root feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix noflush suspend IO queueing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix deadlock in __requeue_bio_list (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix out of data space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: ensure user takes action to validate data and metadata consistency (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: synchronize the pool mode during suspend (Mike Snitzer) [1086007 1060381]
  - [md] fix Kconfig indentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow metadata space larger than supported to go unused (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix the error path for the thin device constructor (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: avoid metadata commit if a pool's thin devices haven't changed (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix bug in resizing of thin metadata (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix pool feature parsing (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix extending the space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-common: make sure new space is used during extend (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix set_pool_mode exposed pool operation races (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: eliminate the no_free_space flag (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add error_if_no_space feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: requeue bios to DM core if no_free_space and in read-only mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: cleanup and improve no space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: log info when growing the data or metadata device (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: handle metadata failures more consistently (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: factor out check_low_water_mark and use bools (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add mappings to end of prepared_* lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: return error from alloc_data_block if pool is not in write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use bool rather than unsigned for flags in structures (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: cleanup dm-thin specific references in text (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: limit errors in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix discard support to a previously shared block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: initialize dm_thin_new_mapping returned by get_next_mapping (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: disallow decrementing a reference count below zero (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow pool in read-only mode to transition to read-write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: re-establish read-only state when switching to fail mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always fallback the pool mode if commit fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read-only mode if metadata space is exhausted (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read only mode if a mapping insert fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: return on failure in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-disk: optimise sm_disk_dec_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-table: print error on preresume failure (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: do not expose non-zero discard limits if discards disabled (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always return -ENOSPC if no_free_space is set (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: set pool read-only if breaking_sharing fails block allocation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: prefix pool error messages with pool device name (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: optimise sm_ll_dec and sm_ll_inc (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: prefetch child nodes when walking tree for a dm_btree_del (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: use pop_frame in dm_btree_del to cleanup code (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix stacking of geometry limits (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add data block size limits to Documentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix metadata dev resize detection (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: generate event when metadata threshold passed (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-metadata: add space map threshold callback (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: add threshold callback to space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: detect metadata device resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: support space map resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: refactor data dev resize (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: initialize read-only module parameters (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: submit writes outside lock (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: add recursive IO request BUG_ON (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: prefetch (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: fix slow IO latency issue specific to RHEL6 (Mike Snitzer) [1086490 1058528]
  - [netdrv] mlx4_en: Fixed crash when port type is changed (Amir Vadai) [1085658 1059586]
  - [netdrv] vmxnet3: fix netpoll race condition (Neil Horman) [1083175 1073218]
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1077345 1077346] {CVE-2014-2523}
  - [scsi] megaraid_sas: fix a small problem when reading state value from hw (Tomas Henzl) [1078641 1065187]
  - [fs] gfs2: Increase the max number of ACLs (Robert S Peterson) [1078874 1075713]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Daniel Borkmann) [1079872 960275]
  - [net] introduce SO_BPF_EXTENSIONS (Daniel Borkmann) [1079872 960275]
  - [scsi] scsi_dh: cosmetic change to sizeof() (Ewan Milne) [1075554 1062494]
  - [acpi] thermal: Check for thermal zone requirement (Nigel Croxon) [1075651 1021044]
  - [acpi] thermal: Don't invalidate thermal zone if critical trip point is bad (Nigel Croxon) [1075651 1021044]
  - [mm] flush pages from pagevec of offlined CPU (Naoya Horiguchi) [1078007 1037467]
  - [fs] xfs: deprecate nodelaylog option (Eric Sandeen) [1076056 1055644]
  - [fs] Fix mountpoint reference leakage in linkat (Jeff Layton) [1069848 1059943]
  - [net] sock: Fix release_cb kABI brekage (Thomas Graf) [1066535 1039723]
  - [vhost] fix total length when packets are too short (Michael S. Tsirkin) [1064442 1064444] {CVE-2014-0077}
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.19.1.el6]
changelog:
  - [kernel] sched: fix cpu_power initialization (Radim Krcmar) [1091826 1065304]
  - [fs] gfs2: Fix uninitialized VFS inode in gfs2_create_inode (Abhijith Das) [1092002 1059808]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.1.el6]
changelog:
  - [net] rtnetlink: Only supply IFLA_VF_PORTS information when RTEXT_FILTER_VF is set (Jiri Pirko) [1092870 1081282]
  - [net] rtnetlink: Warn when interface's information won't fit in our packet (Jiri Pirko) [1092870 1081282]
  - [net] bridge: Correctly receive hw-accelerated vlan traffic (Vlad Yasevich) [1096214 1067722]
  - [net] vlan: Allow accelerated packets to flow through the bridge (Vlad Yasevich) [1096214 1067722]
  - [infiniband] qib: Add missing serdes init sequence (Doug Ledford) [1080104 1005491]
  - [infiniband] qib: Fix txselect regression (Doug Ledford) [1080104 1005491]
  - [netdrv] ixgbevf: fix vlan acceleration (Nikolay Aleksandrov) [1094287 1069028]
  - [security] selinux: Fix kernel BUG on empty security contexts (Paul Moore) [1062502 1064545] {CVE-2014-1874}
  - [netdrv] libertas: potential oops in debugfs (Denys Vlasenko) [1034176 1034177] {CVE-2013-6378}
  - [kernel] cgroup: move put_css_set() after setting CGRP_RELEASABLE bit to fix notify_on_release (Naoya Horiguchi) [1081909 1037465]
  - [kernel] sched: Use exit hook to avoid use-after-free crash (Naoya Horiguchi) [1081914 1032347]
  - [kernel] cgroup: replace list_del() with list_del_init() to avoid panic (Naoya Horiguchi) [1081915 1032343]
  - [x86] turbostat: display C8, C9, C10 residency (Neil Horman) [1096711 1080637]
  - [scsi] lpfc 8.3.44: Fix kernel panics from corrupted ndlp list (Rob Evers) [1086839 1063699]
  - [s390] fix kernel crash due to linkage stack instructions (Hendrik Brueckner) [1067678 1067679] {CVE-2014-2039}
  - [x86] kvm: rate-limit global clock updates (Andrew Jones) [1090750 1072373]
  - [kernel] hrtimers: Move SMP function call to thread context (Mateusz Guzik) [1079869 1073129]
  - [kernel] hrtimers: Support resuming with two or more CPUs online (Mateusz Guzik) [1079869 1073129]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - [fs] ext4: fix WARN_ON from ext4_releasepage() (Carlos Maiolino) [1063508 1036814]
  - [fs] vfs: fix getname() && do_getname() interaction (Oleg Nesterov) [1075653 1024689]
  - [x86] apic: Make disabled_cpu_apicid static read_mostly, fix typos (Nigel Croxon) [1082622 980621]
  - [x86] kexec: Add disable_cpu_apicid kernel parameter (Nigel Croxon) [1082622 980621]
  - [kvm] x86: use kvm_read/write_guest_virt_system in task switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: small cleanups to kvm_task_switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: propagate error from kvm_load_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: improve save_guest_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: introduce kvm_write_guest_virt_system (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: Fix task switch privilege checks (Paolo Bonzini) [1070296 1018581]
  - [powerpc] Make function that parses RTAS error logs global (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Add RTAS event log v6 definition (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Parse and handle EPOW interrupts (Steve Best) [1091424 1028682]
  - [fs] nfsd: don't try to reuse an expired DRC entry off the list (Jeff Layton) [1088779 1036972]
  - [fs] nfsd: when reusing an existing repcache entry, unhash it first (Jeff Layton) [1088779 1036972]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.2.el6]
changelog:
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [fs] vfs: fix autofs/afs/etc magic mountpoint breakage (Frantisek Hrbata) [1094370 1079347] {CVE-2014-0203}
  - [char] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094236 1094237] {CVE-2014-0196}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.3.el6]
changelog:
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - Revert: [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.4.el6]
changelog:
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1115932 1115933] {CVE-2014-4699}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.5.el6]
changelog:
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP [1119461 1119462] {CVE-2014-4943}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.21.1.el6]
changelog:
  - [kvm] mmu: fix incorrect check of guest cr4 bits (Bandan Das) [1103821 1007164]
  - [drm] nouveau: fix nasty bug which can clobber SOR0's clock setup (Ben Skeggs) [1100574 1095796]
  - [net] tcp: tsq: restore minimal amount of queueing (Jiri Pirko) [1103825 1044053]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.22.1.el6]
changelog:
  - [fs] cifs: Check if prefixpath starts with '\' in cifs_parse_mount_options (Sachin Prabhu) [1107503 1104268]
  - [virt] kvm: enable PCI multiple-segments for pass-through device (Michael S. Tsirkin) [1103972 1103471]
  - [fs] GFS2: Lock i_mutex and use a local gfs2_holder for fallocate (Robert S Peterson) [1102313 1061910]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.23.1.el6]
changelog:
  - [net] ip_tunnel: fix ip_tunnel_find to return NULL in case the tunnel is not there (Jiri Pirko) [1107931 1104503]
  - [netdrv] bnx2x: Fix kernel crash and data miscompare after EEH recovery (Michal Schmidt) [1109269 1029600]
  - [netdrv] bnx2x: Adapter not recovery from EEH error injection (Michal Schmidt) [1109269 1029600]
  - [scsi] qla2xxx: Don't check for firmware hung during the reset context for ISP82XX (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Clear loop_id for ports that are marked lost during fabric scanning (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Issue abort command for outstanding commands during cleanup when only firmware is alive (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Reduce the time we wait for a command to complete during SCSI error handling (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Avoid escalating the SCSI error handler if the command is not found in firmware (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Set host can_queue value based on available resources (Chad Dupuis) [1110658 1054299]
  - [net] filter: prevent nla extensions to peek beyond the end of the message (Jiri Benc) [1096778 1096779] {CVE-2014-3144 CVE-2014-3145}
  - [net] bridge: add empty br_mdb_init() and br_mdb_uninit() definitions (Vlad Yasevich) [1106472 1097915]
  - [net] bridge: Correctly unregister MDB rtnetlink handlers (Vlad Yasevich) [1106472 1097915]
  - [net] rds: prevent dereference of a NULL device in rds_iw_laddr_check (Radomir Vrbovsky) [1083276 1083277] {CVE-2014-2678}
  - [s390] crypto: fix aes, des ctr mode concurrency finding (Hendrik Brueckner) [1110168 1096328]
  - [s390] crypto: fix des and des3_ede ctr concurrency issue (Hendrik Brueckner) [1109885 1065404]
  - [s390] crypto: fix des and des3_ede cbc concurrency issue (Hendrik Brueckner) [1109883 1065398]
  - [kernel] futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi() (Mateusz Guzik) [1097759 1097760] {CVE-2012-6647}
  - [libata] ahci: accommodate tag ordered controller (David Milburn) [1099725 1083748]
  - [net] mac80211: crash dues to AP powersave TX vs. wakeup race (Jacob Tanenbaum) [1083531 1083532] {CVE-2014-2706}
  - [netdrv] ath9k: tid->sched race in ath_tx_aggr_sleep() (Jacob Tanenbaum) [1083249 1083250] {CVE-2014-2672}
  - [kernel] hrtimer: Prevent all reprogramming if hang detected (Prarit Bhargava) [1096059 1075805]
  - [net] ipv4: current group_info should be put after using (Jiri Benc) [1087412 1087414] {CVE-2014-2851}
  - [kernel] tracing: Reset ring buffer when changing trace_clocks (Marcelo Tosatti) [1093984 1018138]
  - [net] rds: dereference of a NULL device (Jacob Tanenbaum) [1079218 1079219] {CVE-2013-7339}
  - [s390] crypto: fix concurrency issue in aes-ctr mode (Hendrik Brueckner) [1110169 1063478]
  - [net] ipv4: processing ancillary IP_TOS or IP_TTL (Francesco Fusco) [1094403 990694]
  - [net] ipv4: IP_TOS and IP_TTL can be specified as ancillary data (Francesco Fusco) [1094403 990694]
  - [s390] crypto: Fix aes-xts parameter corruption (Hendrik Brueckner) [1110170 1043540]
  - [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [1103068 1007459]
  - [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [1103068 1007459]
  - [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [1103068 1007459]
  - [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [1103068 1007459]
  - [fs] ext4: replace cut'n'pasted llseek code with generic_file_llseek_size (Eric Sandeen) [1103068 1007459]
  - [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [1103068 1007459]
  - [net] bridge: disable snooping if there is no querier (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: only expire the mdb entry when query is received" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: fix some kernel warning in multicast timer" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: do not call setup_timer() multiple times" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: update mdb expiration timer upon reports" (Vlad Yasevich) [1090749 1090670]
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - Revert: [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [fs] vfs: fix autofs/afs/etc magic mountpoint breakage (Frantisek Hrbata) [1094370 1079347] {CVE-2014-0203}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.24.1.el6]
changelog:
  - [alsa] aloop: Close races at restarting the stream (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Export snd_pcm_constraint_mask64() (Jaroslav Kysela) [1112492 1078592]
  - [alsa] pcm: Warn when buffer preallocation fails (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Add SNDRV_PCM_STATE_PAUSED case in wait_for_avail function (Jaroslav Kysela) [1112492 1078592]
  - [alsa] jack: Unregister input device at disconnection (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Optimize module name check (Jaroslav Kysela) [1112492 1078592]
  - [alsa] pcm: Add fallthru comments (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: Fix Oops while PM resume (Jaroslav Kysela) [1112492 1078592]
  - [alsa] aloop: add locking to timer access (Jaroslav Kysela) [1112492 1078592]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.25.1.el6]
changelog:
  - [net] sctp: Fix sk_ack_backlog wrap-around problem (Daniel Borkmann) [1113969 1085932] {CVE-2014-4667}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.26.1.el6]
changelog:
  - [net] gro: fix deliver of trunk packets to VLAN interfaces (Marcelo Ricardo Leitner) [1116231 1112324]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.27.1.el6]
changelog:
  - [scsi] fix performance regression due to inverted blk_get_queue return (Mike Snitzer) [1117582 1098658]
  - [net] openvswitch: fix use-after-free bug in netns (Flavio Leitner) [1120651 1100127]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.28.1.el6]
changelog:
  - [kernel] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102704 1102705] {CVE-2014-3917}
  - [net] ipv4: fix route cache rebuilds (Jiri Pirko) [1113824 1111631]
  - [fs] nfsd: notify_change needs elevated write count (Mateusz Guzik) [1110177 1105057]
  - [fs] nfsv4: close needs to handle NFS4ERR_ADMIN_REVOKED (Dave Wysochanski) [1096397 1082127]
  - [fs] pipe: skip file_update_time on frozen fs (Eric Sandeen) [1114405 1093077]
  - [fs] nfs: Fail the truncate() if the lock/open stateid is invalid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Servers should only check SETATTR stateid open mode on size change (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Fail data server I/O if stateid represents a lost lock (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Fix the return value of nfs4_select_rw_stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Use the open stateid if the delegation has the wrong mode (Steve Dickson) [1090613 1075123]
  - [fs] nfs: nfs4_stateid_is_current should return 'true' for an invalid stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: fix error return in nfs4_select_rw_stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Document the recover_lost_locks kernel parameter (Jeff Layton) [1089359 963785]
  - [fs] nfs: Don't try to recover NFSv4 locks when they are lost (Jeff Layton) [1089359 963785]
  - [fs] nfs: Fix handling of partially delegated locks (Jeff Layton) [1120074 959788]
  - [fs] nfs: Convert the nfs4_lock_state->ls_flags to a bit field (Jeff Layton) [1120074 959788]
  - [x86] Optimize switch_mm() for multi-threaded workloads (Rik van Riel) [1115821 991518]
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP [1119461 1119462] {CVE-2014-4943}
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1115932 1115933] {CVE-2014-4699}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.29.1.el6]
changelog:
  - [mm] hugetlb: ensure hugepage access is denied if hugepages are not supported (Gustavo Duarte) [1118782 1086450]
  - [security] keys: Increase root_maxkeys and root_maxbytes sizes (Steve Dickson) [1115542 1113607]
  - [fs] lockd: Ensure that nlmclnt_block resets block->b_status after a server reboot (Steve Dickson) [1110180 959006]
  - [net] filter: add vlan tag access (Jiri Benc) [1108526 1082097]
  - [net] filter: add XOR operation (Jiri Benc) [1108526 1082097]
  - [net] filter: add SKF_AD_RXHASH and SKF_AD_CPU (Jiri Benc) [1108526 1082097]
  - [net] filter: Socket filter ancilliary data access for skb->dev->type (Jiri Benc) [1108526 1082097]
  - [net] filter: Add SKF_AD_QUEUE instruction (Jiri Benc) [1108526 1082097]
  - [net] filter: ingress socket filter by mark (Jiri Benc) [1108526 1082097]
  - [netdrv] bonding: look for bridge IPs in arp monitoring (Veaceslav Falico) [1102794 704190]
  - [s390] af_iucv: wrong mapping of sent and confirmed skbs (Hendrik Brueckner) [1112390 1102248]
  - [s390] af_iucv: recvmsg problem for SOCK_STREAM sockets (Hendrik Brueckner) [1112390 1102248]
  - [s390] af_iucv: fix recvmsg by replacing skb_pull() function (Hendrik Brueckner) [1112390 1102248]
  - [s390] kernel: avoid page table walk on user space access (Hendrik Brueckner) [1111194 1099146]
  - [s390] qeth: postpone freeing of qdio memory (Hendrik Brueckner) [1112134 1094379]
  - [s390] qeth: Fix retry logic in hardsetup (Hendrik Brueckner) [1112134 1094379]
  - [s390] qeth: Recognize return codes of ccw_device_set_online (Hendrik Brueckner) [1112134 1094379]
  - [s390] qdio: remove API wrappers (Hendrik Brueckner) [1112134 1094379]
  - [scsi] Ensure medium access timeout counter resets (David Jeffery) [1117153 1036884]
  - [scsi] Fix error handling when no ULD is attached (David Jeffery) [1117153 1036884]
  - [scsi] Handle disk devices which can not process medium access commands (David Jeffery) [1117153 1036884]
  - [fs] nfs: Fix calls to drop_nlink() (Steve Dickson) [1099607 1093819]
  - [mm] swap: do not skip lowest_bit in scan_swap_map() scan loop (Rafael Aquini) [1099728 1060886]
  - [mm] swap: fix shmem swapping when more than 8 areas (Rafael Aquini) [1099728 1060886]
  - [mm] swap: fix swapon size off-by-one (Rafael Aquini) [1099728 1060886]
  - [md] avoid deadlock when dirty buffers during md_stop (Jes Sorensen) [1121541 994724]
  - [x86] hyperv: bypass the timer_irq_works() check (Jason Wang) [1112226 1040349]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.29.2.el6]
changelog:
  - [kernel] futex: Fix errors in nested key ref-counting (Denys Vlasenko) [1094457 1094458] {CVE-2014-0205}
  - [net] vxlan: fix NULL pointer dereference (Jiri Benc) [1114549 1096351] {CVE-2014-3535}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.2.1.el6]
changelog:
  - [netdrv] bonding: Remove redundant VLAN tag insertion logic (Nikolay Aleksandrov) [1039562 1025224]


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15.1
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1081611)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: Jasper St. Pierre <jasper@redhat.com> - 2.26.0-6.1
changelog:
  - Fix build by linking in -lm
  - io: Implement strict network policy (CVE-2013-1881)
    Resolves: #1049155


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885311


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6_5.1
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1055626)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.2
changelog:
  - qemuDomainDestroyFlags: Don't allow @vm to disappear while executing API (rhbz#1038816)
  - python: Return dictionary without value in case of no blockjob (rhbz#1038815)
  - remote: Fix regression in event deregistration (rhbz#1038814)
  - Add virtio-scsi to fallback models of scsi controller (rhbz#1040141)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.3
changelog:
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1055578)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1054804)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.4
changelog:
  - Block info query: Add check for transient domain (rhbz#1059904)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1062708)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1062708)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.6
changelog:
  - Remove contiguous CPU indexes assumption (rhbz#1080439)
  - qemu: monitor: Fix error message and comment when getting cpu info (rhbz#1080439)
  - qemu: monitor: Filter out thread ids of CPUS that were unplugged (rhbz#1080439)
  - qemu: monitor: Fix invalid parentheses (rhbz#1080471)
  - virNetClientSetTLSSession: Restore original signal mask (rhbz#1080501)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.8
changelog:
  - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)
  - QoS: make tc filters match all traffic (rhbz#1096806)
  - use virBitmapFree instead of VIR_FREE for cpumask (rhbz#1091206)
  - Properly free vcpupin info for unplugged CPUs (rhbz#1091206)
  - sanlock: code movement in virLockManagerSanlockAcquire (rhbz#1097227)
  - sanlock: don't fail with unregistered domains (rhbz#1097227)
  - sanlock: avoid leak in acquire() (rhbz#1097227)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.9
changelog:
  - qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1100671)
  - qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1100671)
  - qemu: Ignore temporary job errors when checking migration status (rhbz#1100671)
  - qemu: Send migrate_cancel when aborting migration (rhbz#1100642)
  - qemu: add host-pci-multidomain capability (rhbz#1100737)
  - qemu: specify domain in host-side PCI addresses when needed/supported (rhbz#1100737)
  - spec: Switch to "git am" for applying patches


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.10
changelog:
  - qemu: Properly format the uuid string in error messages (rhbz#1110185)
  - qemu: Use maximum guest memory size when getting NUMA placement advice (rhbz#1112819)
  - qemu: fix live pinning to memory node on NUMA system (rhbz#1112820)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1112820)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.11
changelog:
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1120669)
  - virsh: Use inactive definition when removing disk from config (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1120669)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.12
changelog:
  - rpc: message related sizes enlarged (rhbz#1128603)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1128603)
  - Fix max stream packet size for old clients (rhbz#1128603)
  - Adjust legacy max payload size to account for header information (rhbz#1128603)
  - rpc: Correct the wrong payload size checking (rhbz#1128603)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-14.el6_5.1
changelog:
  - Improve handling of xmlStopParser(CVE-2013-2877)
  - Do not fetch external parameter entities (CVE-2014-0191)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7.1
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1077131


author: Michal Hlavinka <mhlavink@redhat.com> - 39-9
changelog:
  - tab completion did not work correctly with files containing multibyte 
    characters in name (#771198)


author: Jan Pacner <jpacner@redhat.com> - 5:1.5.20-5.20091214hg736b6a
changelog:
  - Resolves: #1083524 (segmentation fault when sending an e-mail from a command
    line)
  - Resolves: #750929 (SIGSEGV Crash while parsing certificates file)
  - Resolves: #690409 (mutt crash; seg fault in mx_update_context)
  - Resolves: #674271 (SIGSEGV when browsing pop account)


author: Jakub Dorňák <jdornak@redhat.com> - 5.1.73-1
changelog:
  - Update to MySQL 5.1.73, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html
    (CVE-2014-0412, CVE-2014-0437, CVE-2013-5908, CVE-2014-0393,
    CVE-2014-0386, CVE-2014-0401, CVE-2014-0402)
    Resolves: #1055880


author: Honza Horak <hhorak@redhat.com> 5.1.73-2
changelog:
  - Make mysqld init script more robust and ignore existing but
    non-being-used unix socket file
    Resolves: #1058719


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.1
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073222)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.2
changelog:
  - added cache to hrSWRunTable to provide consistent results (#1085315)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086683)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.5.pre1
changelog:
  - when the initgroups function needs to parse a group entry which contains a
    large list of users, reinitialize the buffer that we pass to the parsing
    function, which destroyed what we passed to it the previous time (#751461)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042685 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Make pem's derEncodingsMatch function work with encrypted keys
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Remove two unused patches and apply a needed one that was missed
  - Resolves: Bug 1112136 - Rebase nss in RHEL 6.5.Z to NSS 3.16.1


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-7
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1145431 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-10
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1082900 - Admin server segfault when configuration DS configured on SSL port
  - Add workaround to %check
  unset DISPLAY
   section for RHEL-5 based build machines where kernel lacks support for hardware GCM


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096754)
  - fixed missing outline in mwm while moving window (rhbz#1096749)
    (copy of rhbz#997241)


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-27.3
changelog:
  - Resolves: rhbz#1089395 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1090273 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1090614 pluto cannot write to directories not owned by root


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.2
changelog:
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1052346


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.3
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1087754


author: Akira TAGOH <tagoh@redhat.com> - 1.28.1-10
changelog:
  - Avoid the error message at %postun on upgrading to rhel7. (#1086690)
  - Use correct rpm macro for man page (#885846)


author: Michal Hlavinka <mhlavink@redhat.com> - 3.1.10-4
changelog:
  - close directory after processing pci.ids.d directory (#684000)
  - sysfs: do not warn on incomplete slot addresses (#1032827)


author: Petr Pisar <ppisar@redhat.com> - 0.57-17
changelog:
  - Link to the ca-certificates ca-bundle.crt instead of shipping our own,
    outdated copy (bug #1059992)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.1
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.2
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Ray Strode <rstrode@redhat.com> 0.8.3-27.1
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1125325


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
  -->  If we remove this patch everything turns blue, not TUV red
  - Added Source: plymouth.ini
  -->  Config file for automated patch script
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.4
changelog:
  - kvm-vmdk-Allow-read-only-open-of-VMDK-version-3.patch [bz#1056642 bz#1063202]
  - Resolves: bz#1063202
    (qemu-img fails to convert vmdk v3 image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.5
changelog:
  - kvm-monitor-Cleanup-mon-outbuf-on-write-error.patch [bz#1069239]
  - Resolves: bz#1069239
    (QMP socket breaks on unexpected close)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.6
changelog:
  - kvm-block-Pass-filename-to-bdrv_get_full_backing_filenam.patch [bz#1071740]
  - Resolves: bz#1071740
    (RHEV: Cannot start VMs that have more than 23 snapshots.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.7
changelog:
  - kvm-ACPI-level-VCPU-enablement-info-for-libvirt-RHEL-6-o.patch [bz#1080436]
  - Resolves: bz#1080436
    ([Intel 6.5.z Bug] virsh setvcpus can not setup correct vcpu number)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.8
changelog:
  - kvm-virtio-net-fix-guest-triggerable-buffer-overrun.patch [bz#1078605 bz#1078849]
  - kvm-qcow2-Check-backing_file_offset-CVE-2014-0144.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Check-refcount-table-size-CVE-2014-0144.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Validate-refcount-table-offset.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Validate-snapshot-table-offset-size-CVE-2014-0.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Validate-active-L1-table-offset-and-size-CVE-2.patch [bz#1079452 bz#1079453]
  - kvm-qcow2-Fix-backing-file-name-length-check.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_refc.patch [bz#1079337 bz#1079338]
  - kvm-qcow2-Avoid-integer-overflow-in-get_refcount-CVE-201.patch [bz#1079318 bz#1079319]
  - kvm-qcow2-Check-new-refcount-table-size-on-growth.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Fix-types-in-qcow2_alloc_clusters-and-alloc_cl.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Protect-against-some-integer-overflows-in-bdrv.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Catch-some-L1-table-index-overflows.patch [bz#1079518 bz#1086678]
  - kvm-qcow2-Fix-new-L1-table-size-check-CVE-2014-0143.patch [bz#1079318 bz#1079319]
  - kvm-qcow2-Fix-NULL-dereference-in-qcow2_open-error-path-.patch [bz#1079330 bz#1079331]
  - kvm-qcow2-Limit-snapshot-table-size.patch [bz#1079518 bz#1086678]
  - kvm-block-cloop-validate-block_size-header-field-CVE-201.patch [bz#1079452 bz#1079453]
  - kvm-block-cloop-prevent-offsets_size-integer-overflow-CV.patch [bz#1079318 bz#1079319]
  - kvm-block-cloop-refuse-images-with-huge-offsets-arrays-C.patch [bz#1079452 bz#1079453]
  - kvm-block-cloop-Fix-coding-style.patch [bz#1079518 bz#1086678]
  - kvm-cloop-Fix-bdrv_open-error-handling.patch [bz#1079518 bz#1086678]
  - kvm-block-cloop-refuse-images-with-bogus-offsets-CVE-201.patch [bz#1079452 bz#1079453]
  - kvm-block-cloop-Use-g_free-instead-of-free.patch [bz#1079518 bz#1086678]
  - kvm-block-cloop-fix-offsets-size-off-by-one.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Fix-bdrv_open-error-handling.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Unify-header-structs-and-make-them-QEMU_PACKED.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Use-unsigned-variables-for-offsets-and-sizes-C.patch [bz#1079337 bz#1079338]
  - kvm-bochs-Check-catalog_size-header-field-CVE-2014-0143.patch [bz#1079318 bz#1079319]
  - kvm-bochs-Check-extent_size-header-field-CVE-2014-0142.patch [bz#1079313 bz#1079314]
  - kvm-bochs-Fix-bitmap-offset-calculation.patch [bz#1079518 bz#1086678]
  - kvm-vpc-vhd-add-bounds-check-for-max_table_entries-and-b.patch [bz#1079452 bz#1079453]
  - kvm-vpc-Validate-block-size-CVE-2014-0142.patch [bz#1079313 bz#1079314]
  - kvm-vdi-add-bounds-checks-for-blocks_in_image-and-disk_s.patch [bz#1079452 bz#1079453]
  - kvm-vhdx-Bounds-checking-for-block_size-and-logical_sect.patch [bz#1079343 bz#1079344]
  - kvm-curl-check-data-size-before-memcpy-to-local-buffer.-.patch [bz#1079452 bz#1079453]
  - kvm-dmg-Fix-bdrv_open-error-handling.patch [bz#1079518 bz#1086678]
  - kvm-dmg-coding-style-and-indentation-cleanup.patch [bz#1079518 bz#1086678]
  - kvm-dmg-prevent-out-of-bounds-array-access-on-terminator.patch [bz#1079518 bz#1086678]
  - kvm-dmg-drop-broken-bdrv_pread-loop.patch [bz#1079518 bz#1086678]
  - kvm-dmg-use-appropriate-types-when-reading-chunks.patch [bz#1079518 bz#1086678]
  - kvm-dmg-sanitize-chunk-length-and-sectorcount-CVE-2014-0.patch [bz#1079323 bz#1079324]
  - kvm-dmg-use-uint64_t-consistently-for-sectors-and-length.patch [bz#1079518 bz#1086678]
  - kvm-dmg-prevent-chunk-buffer-overflow-CVE-2014-0145.patch [bz#1079323 bz#1079324]
  - kvm-block-Limit-request-size-CVE-2014-0143.patch [bz#1079318 bz#1079319]
  - kvm-parallels-Fix-catalog-size-integer-overflow-CVE-2014.patch [bz#1079318 bz#1079319]
  - kvm-parallels-Sanity-check-for-s-tracks-CVE-2014-0142.patch [bz#1079313 bz#1079314]
  - kvm-bochs-Fix-memory-leak-in-bochs_open-error-path.patch [bz#1079518 bz#1086678]
  - kvm-bochs-Fix-catalog-size-check.patch [bz#1079518 bz#1086678]
  - Resolves: bz#1078849
    (EMBARGOED CVE-2014-0150 qemu-kvm: qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function [rhel-6.5.z])
  - Resolves: bz#1079313
    (CVE-2014-0142 qemu-kvm: qemu: crash by possible division by zero [rhel-6.5.z])
  - Resolves: bz#1079318
    (CVE-2014-0143 qemu-kvm: Qemu: block: multiple integer overflow flaws [rhel-6.5.z])
  - Resolves: bz#1079323
    (CVE-2014-0145 qemu-kvm: Qemu: prevent possible buffer overflows [rhel-6.5.z])
  - Resolves: bz#1079330
    (CVE-2014-0146 qemu-kvm: Qemu: qcow2: NULL dereference in qcow2_open() error path [rhel-6.5.z])
  - Resolves: bz#1079337
    (CVE-2014-0147 qemu-kvm: Qemu: block: possible crash due signed types or logic error [rhel-6.5.z])
  - Resolves: bz#1079343
    (CVE-2014-0148 qemu-kvm: Qemu: vhdx: bounds checking for block_size and logical_sector_size [rhel-6.5.z])
  - Resolves: bz#1079452
    (CVE-2014-0144 qemu-kvm: Qemu: block: missing input validation [rhel-6.5.z])
  - Resolves: bz#1086678
    (qemu-kvm: include leftover patches from block layer security audit)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.415.el6_5.9
changelog:
  - kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087978]
  - Resolves: bz#1087978
    (CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-6.5.z])


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.10
changelog:
  - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1095692]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1095743]
  - kvm-usb-sanity-check-setup_index-setup_len-in-post_load-2.patch [bz#1095743]
  - kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095739]
  - kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1095735]
  - kvm-virtio-validate-num_sg-when-mapping.patch [bz#1095763 bz#1096124]
  - kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1095763 bz#1096124]
  - kvm-enable-PCI-multiple-segments-for-pass-through-device.patch [bz#1099941]
  - kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1095675]
  - kvm-virtio-validate-config_len-on-load.patch [bz#1095779]
  - kvm-usb-fix-up-post-load-checks.patch [bz#1096825]
  - kvm-CPU-hotplug-use-apic_id_for_cpu-round-2-RHEL-6-only.patch [bz#1100575]
  - Resolves: bz#1095675
    ()
  - Resolves: bz#1095692
    ()
  - Resolves: bz#1095735
    ()
  - Resolves: bz#1095739
    ()
  - Resolves: bz#1095743
    ()
  - Resolves: bz#1095763
    ()
  - Resolves: bz#1095779
    ()
  - Resolves: bz#1096124
    ()
  - Resolves: bz#1096825
    ()
  - Resolves: bz#1099941
    ()
  - Resolves: bz#1100575
    (Some vCPU topologies not accepted by libvirt)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.11
changelog:
  - kvm-block-Fix-bdrv_is_allocated-for-short-backing-files.patch [bz#1109715]
  - Resolves: bz#1109715
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)


author: Jeff E. Nelson <jenelson@redhat.com> - 0.12.1.2-2.415.el6_5.12
changelog:
  - kvm-qcow-Return-real-error-code-in-qcow_open.txt [bz#1097225]
  - kvm-qcow1-Make-padding-in-the-header-explicit.txt [bz#1097225]
  - kvm-qcow1-Check-maximum-cluster-size.txt [bz#1097225]
  - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.txt [bz#1097225]
  - kvm-qcow1-Validate-image-size-CVE-2014-0223.txt [bz#1097234]
  - kvm-qcow1-Stricter-backing-file-length-check.txt [bz#1097234]
  - Resolves: bz#1097225
    (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-6.5.z])
  - Resolves: bz#1097234
    (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-6.5.z])


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.415.el6_5.13
changelog:
  - kvm-block-Create-proper-size-file-for-disk-mirror.patch [bz#1109715]
  - kvm-block-Fix-bdrv_is_allocated-return-value.patch [bz#1109715]
  - kvm-scsi-bus-prepare-scsi_req_new-for-introduction-of-pars.patch [bz#1125131]
  - kvm-scsi-bus-introduce-parse_cdb-in-SCSIDeviceClass-and-SC.patch [bz#1125131]
  - kvm-scsi-block-extract-scsi_block_is_passthrough.patch [bz#1125131]
  - kvm-scsi-block-scsi-generic-implement-parse_cdb.patch [bz#1125131]
  - kvm-virtio-scsi-implement-parse_cdb.patch [bz#1125131]
  - kvm-virtio-scsi-Fix-reset-callback-for-virtio-scsi.patch [bz#1123271]
  - kvm-virtio-scsi-add-ioeventfd-support.patch [bz#1123271]
  - Resolves: bz#1109715
    (live incremental migration of vm with common shared base, size(disk) > size(base) transfers unallocated sectors, explodes disk on dest)
  - Resolves: bz#1123271
    (Enable ioenventfd for virtio-scsi-pci)
  - Resolves: bz#1125131
    ([FJ6.5 Bug] SCSI command issued from KVM guest doesn't reach target device)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.415.el6_5.14
changelog:
  - The commit for zrelease .13 was incomplete; the changes to qemu-kvm.spec
    did not include the "%patchNNNN -p1" lines for patches 4647 through 4655;
    so although the patch files themselves were committed, the srpm build
    did not pick them up. In addition, the commit log did not describe the
    patches.

    This commit corrects these problems and bumps the zrelease to .14.


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.5
changelog:
  - High: fs-lib.sh: Fixes failure to unmount local fs
    when process runs with cwd inside fs mount.

    Resolves: rhbz#1051185


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.7
changelog:
  - High: Adds ability to monitor VirtualDomain instances using
    kvm without requiring libvirtd.

    Resolves: rhbz#1054327


author: David Vossel <dvossel@redhat.com> - 3.9.2-40.10
changelog:
  - Updates required, unique, and primary fields in bind-mount.sh
    metadata

    Resolves: rhbz#1115498


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-61.rc4
changelog:
  - resolves: #1073913 - Fix CVE-2012-6150.
  - resolves: #1073913 - Fix CVE-2013-4496.
  - resolves: #1073913 - Fix CVE-2013-6442.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.0.0-62.rc4
changelog:
  - resolves: #1105501 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108842 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105571 - CVE-2014-0178: Uninitialized memory exposure.


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.9-169
changelog:
  - resolves: #1105499 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108840 - CVE-2014-3493: DoS in smbd with unicode path names.


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-8.1
changelog:
  - add scl_source script for intercollection dependencies (#874417)
  - updated macros in macros.scl-filesystem (#1029515, #1029516)
  - add delimiter between collections and command (#1029517)


author: Jan Zeleny <jzeleny@redhat.com> - 20120827-11
changelog:
  - reverted the last patch, as it breaks some collections. The revert
    is necessary for RHSCL compose, we are looking for other solutions.


author: Marc-Andre Lureau <marcandre.lureau@gmail.com> 0.20-11.1
changelog:
  - Fix crash when audio stream isn't started yet.
    Resolves: rhbz#1090000
  - Fix memory leak of primary surface.
    Resolves: rhbz#1090001


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.1
changelog:
  - Inherit UID limits for subdomains
  - Resolves: #1028046 - Creating system accounts on a IdM client takes up
                         to 10 minutes when AD trust is configured in the IdM.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.2
changelog:
  - Allow combination of proxy id backend and LDAP auth backend
  - Resolves: #1032966 - SSSD: Allow for custom attributes in RDN when using
                         id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.3
changelog:
  - Resolves: #1036168 - sssd can't retrieve auto.master when using the
                         "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129.4
changelog:
  - Resolves: #1044905 - sssd_nss grows memory footprint when netgroups
                         are requested


author: Peter Jones <pjones@redhat.com> - 4.02-9
changelog:
  - Avoid a workaround that causes machines to stall in PXE boots that
    use the local disk.
    Resolves: rhbz#980671


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-20.el6_4.1
changelog:
  - resolves: #1127068
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-22.el6_5.1
changelog:
  - resolves: #1127069
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Michal Sekletar <msekleta@redhat.com> 1:0.17-48
changelog:
  - reuse utmp entries correctly
  - break out from infinite loop if we tried to bind to non-existing address (#772912)
  - mitigate possibility of self-deadlock while updating utmp or wtmp (#832059)


author: Peter Hatina <phatina@redhat.com> 1.8.10-5
changelog:
  - security patches
  - Resolves: CVE-2013-6336
              CVE-2013-6338
              CVE-2013-6339
              CVE-2013-6340
              CVE-2013-7112
              CVE-2013-7114


author: Soren Sandmann <ssp@redhat.com> 1.13.0-23.1
changelog:
  * Wed Oct 23 2013 Adam Jackson <ajax@redhat.com> 1.13.0-23
  - Fix root window damage reports when Xinerama is active (#919165)


author: Pavel Raiskup <praiskup@redhat.com> - 4.999.9-0.4.beta.20091007git
changelog:
  - fix 'xzgrep -h' to behave as expected (#850898)
  - fix 'xzgrep -l' to behave as expected (#863024)
  - fix 'xzfgrep -F' to behave as expected (#988703)


author: Ravishankar N <ranaraya@redhat.com> - 3.4.0.47.1u2rhs-1
changelog:
  - This build has fixes for bugs in glusterd, gNFS, dht, afr, gfapi, fuse,
    cli, gsyncd etc.
    1035519, 1028325, 1034547, 1037274, 1034238, 1027727, 1030443, 1024316,
    1028282, 1032359, 1030021, 1020995, 979861, 1032558, 929036, 1033469,
    916857


author: Ravishankar N <ranaraya@redhat.com> - 3.4.0.49rhs-1
changelog:
  - This build has fixes for bugs in cli, glusterd, fuse, dht etc.
    1023950, 1032081, 923809, 1028995, 1023921, 1037851, 956655, 1015630, 1010975,


author: Ravishankar N<ranaraya@redhat.com> - 3.4.0.52rhs-1
changelog:
  - fixes bugs in guota, gNFS, glusterd, afr etc.
    1024371, 1024316, 1021776, 1043535, 1019908, 965400, 1020816


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.53rhs-1
changelog:
  - fixes bug 916857 1005663 1032034 1046294 1046318 1042830 1045313
    1046571 1046604 1045991 1022822 1031687 1045374 972021


author: Jan Kaluza <jkaluza@redhat.com> - 1.4.6-2
changelog:
  - initial spec rewrite for scl build
  - fix strict-aliasing gcc warning
  - remove unused SHA384 and SHA512 code
  - update license


author: Honza Horak <hhorak@redhat.com> 5.5.30-2
changelog:
  - Fix includedir path in my.cnf
  - Fix Environment variable name in the init script
  - All subpackages should require meta-runtime package
  - Preserve timestamps when using install or cp
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.5.30-6
changelog:
  - Fix reporting of service starting
    Resolves: #958098
  - Include mysqlhotcopy utility and -devel sub-package for building
    daemon plugins
  - Use correct service name in the init script
  - Use correct log file path in the logrotate script


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Rebase to 5.5.31
    https://kb.askmonty.org/en/mariadb-5531-changelog/
    Resolves: #966951
  - Restore SELinux context of log file
    Resolves: #971380
  - Add README.mariadb-devel to document how -devel package should be used
    Resolves: #971808


author: Honza Horak <hhorak@redhat.com> 5.5.31-3
changelog:
  - Apply fixes found by Coverity static analysis tool
    Resolves: #976765
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #966873


author: Honza Horak <hhorak@redhat.com> 5.5.35-1.1
changelog:
  - Rebase to 5.5.35
    https://kb.askmonty.org/en/mariadb-5535-changelog/
    Also fixes: CVE-2014-0001, CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2014-0420, CVE-2014-0393, CVE-2013-5891, CVE-2014-0386, CVE-2014-0401,
    CVE-2014-0402
    Resolves: #1055884


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1.3
changelog:
  - Update to MariaDB 5.5.37, for various fixes described at
    https://kb.askmonty.org/en/mariadb-5537-changelog/
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089366


author: Honza Horak <hhorak@redhat.com> 5.5.34-1
changelog:
  - Rebase to 5.5.34
  - Check if correct process is running in mysql-wait-ready script
    Related: #1025323


author: Honza Horak <hhorak@redhat.com> 5.5.35-6
changelog:
  - Rebase to 5.5.35
    https://kb.askmonty.org/en/mariadb-5535-changelog/
    Also fixes: CVE-2014-0001, CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2014-0420, CVE-2014-0393, CVE-2013-5891, CVE-2014-0386, CVE-2014-0401,
    CVE-2014-0402
    Resolves: #1056457
  - Use log file corresponding with RHEL-7 base
    Resolves: #1007861
  - Require /usr/bin/scl_source that is not in every scl-utils
    Resolves: #1054649
  - Fix advice after initialization of data stack
    Resolves: #1056135
  - Remove perl provides so no dependency can be made on them
    Resolves: #1042873


author: Honza Horak <hhorak@redhat.com> - 5.5.35-7
changelog:
  - Use correct path to tmp dir
    Related: #1056457
  - Rebase to 5.5.36
    https://kb.askmonty.org/en/mariadb-5536-changelog/


author: Jan Pacner <jpacner@redhat.com> - 2.0-16
changelog:
  - Related: #1035187 (disable checks about breaking strict-aliasing rules)
  - revert the previous restoration and allow fortifying symbols


author: Kyle McMartin <kmcmarti@redhat.com> 1.1-1
changelog:
  - Update to upstream v1.1
  - libunwind-install-ptrace.patch: drop upstream patch
  - libunwind-arm-register-rename.patch: fixed upstream
  - Add pkg-config files to libunwind-devel


author: Honza Horak <hhorak@redhat.com> 5.5.30-6
changelog:
  - Spec file fixes found in Package Review #950053
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Update to MySQL 5.5.31, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-31.html
  - Turn on hardened build


author: Honza Horak <hhorak@redhat.com> 5.5.31-4
changelog:
  - Fix reporting of service starting
    Resolves: #958098
  - Include mysqlhotcopy utility and -devel sub-package for building
    daemon plugins


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
  - Fix service status for unprivileged user
    Resolves: #967925
  - Add README.mariadb-devel to document how -devel package should be used
    Resolves: #967951


author: Honza Horak <hhorak@redhat.com> 5.5.32-2
changelog:
  - Fix issues found by Coverity
    Resolves: #976751
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #966645
  - Remove external man pages, upstream fixed man pages license


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    CVE-2014-0001
    Resolves: #1055883


author: Honza Horak <hhorak@redhat.com> - 5.5.37-5
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089209


author: Honza Horak <hhorak@redhat.com> 5.5.34-1
changelog:
  - Update to MySQL 5.5.34, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-34.html


author: Honza Horak <hhorak@redhat.com> 5.5.34-3
changelog:
  - Return correct code if stopping service
    Resolves: #986919
  - Use scl_source feature
  - Check if correct process is running in mysql-wait-ready script
    Related: #1025323


author: Honza Horak <hhorak@redhat.com> 5.5.35-1
changelog:
  - Update to MySQL 5.5.35, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-35.html
    Resolves: #1045081


author: Honza Horak <hhorak@redhat.com> 5.5.36-2
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    CVE-2014-0001
    Resolves: #1056440
  - Do not blindly remove socket during start
    Resolves: #1045401
  - Require /usr/bin/scl_source that is not in every scl-utils
    Resolves: #1054261
  - Fix advice after initialization of data stack
    Resolves: #1054458
  - Remove perl provides so no dependency can be made on them
    Resolves: #1042875


author: Jan Kaluza <jkaluza@redhat.com> - 1:1.4.4-8
changelog:
  - correct 404 and 50x error pages (#1065981)
  - use initscripts legacy actions for nginx-upgrade (#1065981)
  - expand nginx man page variables (#1066056)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.5-1
changelog:
  - New upstream release 1.7.5
  - Obsoletes patch #2
  - Rebase patch #1 (optflags) to match the 1.7.5 code
  - Fixed Source0 URL to point at the upstream tarball


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.0-1
changelog:
  - New upstream release 1.0
  - Remove patches, no longer needed for nodejs
  - Fix typo in -devel description
  - use github tarball instead of checkout


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-2.20121110git245f6f0
changelog:
  - latest git snapshot
  - fixes tests
  - use SMP make flags
  - build as Release instead of Debug
  - ship new strict variant


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.9.4-4.gitdc559a5
changelog:
  - Bump epoch for the version downgrade
  - The 0.9.7 version hit the Rawhide repo due to the mass rebuild, we need a
    clean upgrade path.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.0-2.git5462dab
changelog:
  - drop the patchlevel from the SONAME since libuv will retain binary
    compatibility for the life of the 0.10.x series


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.4-1
changelog:
  - new upstream release 0.10.4
    http://blog.nodejs.org/2013/04/11/node-v0-10-4-stable/
  - drop dependency generator files not supported on EL6
  - port nodejs_default_filter to EL6
  - add nodejs_find_provides_and_requires macro to invoke dependency generator
  - invoke the standard RPM provides and requires generators from the Node.js ones
  - write native module Requires from nodejs.req
  - change the c-ares-devel Requires in -devel to match the BuildRequires


author: Tomas Hrcka <thrcka@redhat.com> - 0.10.5-4
changelog:
  - strip openssl from the tarball it contains prohibited code (RHBZ#967736)
  - patch makefile so it do not use bundled deps
  - new stripped tarball


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:3.14.5.8-1
changelog:
  - new upstream release 3.14.5.8
  - backport security fix for remote DoS via crafted javascript (RHBZ#924495; CVE-2013-2632)


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:3.14.5.10-2
changelog:
  - backport fix for remote DoS or unspecified other impact via type confusion
    (RHBZ#991116; CVE-2013-2882)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.630-4
changelog:
  - Updated conditions to not require optional BRs (MLDBM, SQL::Statement) for SCL
  - Resolves: rhbz#1064855


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-3
changelog:
  - Merge the latest changes from perl-5.16.3-262.el7
    Some new sub-packages, update to Perl 5.16.3, some bug fixes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-5
changelog:
  - Fix rendering perlvar pod (rhbz#957079)
  - Sub-package Sys-Syslog (rhbz#956264)
  - Sub-package Time-HiRes (rhbz#956272)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-7
changelog:
  - Merge the latest changes from perl-5.16.3-271.el7
  - Stop building of dual life sub-packages. 
  - Fix unowned files (rhbz#956215)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-13
changelog:
  - Updated dependencies, filters and conditions for dual-life sub-packages
  - Used %perl_compat for dual-life dependencies


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Handle magic more correctly in add_symbol and get_or_add_symbol
  - Add upstream patch to avoid build dependency on Package::Stash
  - BR: perl(Variable::Magic) for the test suite
  - Update patch for building with old Test::More versions


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
  - Upstream update.
  - Update patch.
  - Update BRs.
  - Add %bcond --with network.
  - Fix up %changelog dates.


author: Paul Howarth <paul@city-fan.org> - 1.05-10
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't use macros for commands
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Rename makefile patch to include module name and version
  - Fix script interpreter for test suite since we're packaging it
  - Add filter for doc-file dependencies if we don't have %perl_default_filter
  - Make %files list more explicit
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.05-6
changelog:
  - Add patch for CPAN RT#50524 (copy contents of %DB::sub entry if it exists)
  - Reinstate compatibility with old distributions like EL-5
    - Add BuildRoot definition
    - Clean buildroot in %install
    - Restore %clean section
    - Restore %defattr
    - Don't use + to terminate find -exec commands
  - Spec clean-up
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Don't use macros for commands
    - Use tabs
    - Add buildreqs for Perl core modules that might be dual-lived
    - Explicit requires for "use base XXX;" only required prior to rpm 4.9


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.04-19
changelog:
  - Specify all dependencies
  - Drop %defattr, redundant since rpm 4.4
  - Fix mixed use of spaces and tabs


author: Remi Collet <rcollet@redhat.com> 5.4.16-1
changelog:
  - rebase to 5.4.16
  - fix hang in FindTishriMolad(), #965144
  - patch for upstream Bug #64915 error_log ignored when daemonize=0
  - patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error, #969103
  - patch for upstream bug #64960 Segfault in gc_zval_possible_root


author: Remi Collet <rcollet@redhat.com> 5.4.16-4
changelog:
  - improve mod_php, pgsql and ldap description
  - add missing man pages (phar, php-cgi)
  - add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
  - use %__isa_bits instead of %__isa in ABI suffix #985350


author: Remi Collet <rcollet@redhat.com> 5.4.16-8
changelog:
  - relocate RPM macro #1008483
  - remove ZTS conditional stuf for ligibility
  - add mod_php for httpd24 collection


author: Remi Collet <rcollet@redhat.com> 5.4.13-1
changelog:
  - update to 5.4.13
  - security fixes for CVE-2013-1635 and CVE-2013-1643
  - make php-mysql package optional (and disabled)
  - make ZTS build optional (and disabled)
  - always try to load mod_php (apache warning is usefull)
  - Hardened build (links with -z now option)
  - Remove %config from /etc/rpm/macros.php


author: Remi Collet <rcollet@redhat.com> 5.4.14-2
changelog:
  - rebuild for libjpeg (instead of libjpeg_turbo)
  - fix unowned dir %{_datadir}/fpm and %{_libdir}/httpd (#956221)


author: Remi Collet <remi@fedoraproject.org> - 3.1.13-1
changelog:
  - Version 3.1.13 (beta) - API 3.1.0 (stable)
  - add patches from upstream (fixes some tests)
  - change serveur port for tests (allow 32/64 bits build)


author: Remi Collet <remi@fedoraproject.org> - 3.1.15-0.1.svn329724
changelog:
  - update to 3.1.15dev with new directive 'enable_opcode_cache' (disabled)
    which allow to cache only user data and use another opcode cache
  - switch most configuration to upstream default


author: Remi Collet <remi@fedoraproject.org> - 3.0.7-5
changelog:
  - add patch for https://bugs.php.net/59602
    segfault in getExtendedStats
  - also provides php-memcache


author: Remi Collet <rcollet@redhat.com> - 7.0.1-2
changelog:
  - allow wildcard in opcache.blacklist_filename and provide
    default /etc/php.d/opcache-default.blacklist


author: Honza Horak <hhorak@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Honza Horak <hhorak@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Honza Horak <hhorak@redhat.com> 9.2.4-3
changelog:
  - All sub-packages require SCL runtime
  - Use only one Unix socket in /tmp
  - Use rpath since we call some commands by runuser in init script,
    so LD_LIBRARY_PATH doesn't work here


author: Honza Horak <hhorak@redhat.com> 9.2.4-4
changelog:
  - Do not include daemon of the previous version and support upgrade from
    the core system version 8.4
  - Pidfile used by init script should be in /opt
  - Fix advice in the init script to use proper service name
  - Include -devel sub-package for developing server-sice extensions
  - Prefix major soname version of all libraries with collection name


author: Jozef Mlich <jmlich@redhat.com> 9.2.5-1
changelog:
  - rebase to 9.2.5
    http://www.postgresql.org/docs/9.2/static/release-9-2-5.html
  - modified useradd command
    Resolves #1023113
  - modified bash-profile
    Resolves #1009365


author: Jozef Mlich <jmlich@redhat.com> 9.2.6-1
changelog:
  - rebase to 9.2.6
    http://www.postgresql.org/docs/9.2/static/release-9-2-6.html
    Resolves: #1038693
  - More details about replication issues are at
    https://wiki.postgresql.org/wiki/Nov2013ReplicationIssue


author: Jozef Mlich <jmlich@redhat.com> 9.2.7-1
changelog:
  - update to 9.2.7 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html
    Resolves: #1065861
    including fixes for CVE-2014-0066 CVE-2014-0064 CVE-2014-0065
    CVE-2014-0062 CVE-2014-0063 CVE-2014-0060 CVE-2014-0061


author: Jozef Mlich <jmlich@redhat.com> - 9.2.8-1
changelog:
  - update to 9.2.8 minor version per release notes:
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    Resolves: #1079994


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.5-3
changelog:
  - Properly generate bytecompilation files for Python itself
  Fixes:
  rhbz#967224
  rhbz#967288
  rhbz#968199


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.4-3
changelog:
  - Own directories that are not owned by stap and pkgconfig.
  - Own erroneously unowned include/python2.7-debug directory.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.4-4
changelog:
  - Make python-libs explicitly depend on python27-runtime to make them
  uninstall before python27-runtime, thus not leaving empty dirs behind.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.4-5
changelog:
  - Add python bytecompilation script and dependency generation script
  into python-devel, so that it can be utilized by depending collections.
  - Add __root_bindir wrapper script, rhbz#959791.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.9-3
changelog:
  - Fix failure in fips mode if index name is too long.
  - Also fix newly introduced failures in test suite by missing
  import logging.handlers.
  Resolves: rhbz#1054676


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Petr Machata <pmachata@redhat.com> - 4.1-2.20130314
changelog:
  - Fix mfence patch.  Since the __TBB_full_memory_fence macro was
    function-call-like, it stole () intended for function invocation.


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-9
changelog:
  - numpy should own /opt/rh/python33/root/usr/lib/python3.3/site-packages/numpy/__pycache__ (rhbz#1072424)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-5
changelog:
  - Disable default bytecompilation during build, fixes rhbz#971427.
  - Fix for gettext plural form headers, fixes rhbz#968928.
  - Compile debug build libraries with -O1, fixes rhbz#967900.
  - Print repr() in when C assert fails in debug build, fixes rhbz#971858.


author: Robert Kuska <rkuska@redhat.com> - 3.3.2-11
changelog:
  - Bytecompile all *.py files properly during build (rhbz#1023607)
  - Allow building depending packages with unversioned python macros
    i.e. %{__python} instead of %{__python3}


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-4
changelog:
  - Own the pkgconfig dir and tapsetdir, these are not owned by any
  the respective packages in SCL (rhbz#966547).


author: Robert Kuska <rkuska@redhat.com> - 2.5.2-4
changelog:
  * Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.5.2-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild


author: Vít Ondruch <vondruch@redhat.com> - 0.1.4-5.1
changelog:
  - Fix heap-based buffer overflow when parsing YAML tags.
    Resolves: CVE-2013-6393
  - Fix heap-based buffer overflow when parsing URLs.
    Resolves: CVE-2014-2525


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.429-34
changelog:
  - Update to 1.9.3 p429.
    - Fix object taint bypassing in DL and Fiddle (CVE-2013-2065)
  - Resolves: rhbz#964052


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.448-38
changelog:
  - Update to 1.9.3 p448.
    - Resolves: rhbz#979357
  - Fix hostname check bypassing vulnerability in SSL client (CVE-2013-4073).
    - Resolves: rhbz#980735
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#980735


author: Tom Callaway <spot@fedoraproject.org> - 1:3.13.7.5-1
changelog:
  - update to 3.13.7.5 (needed for chromium 23)
  - Resolves multiple security issues (CVE-2012-5120, CVE-2012-5128)
  - d8 is now using a static libv8, resolves bz 881973)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-147.SLx
changelog:
  - patch1080 with http://gerrit.openafs.org/10578 to fix RHBZ #1038315 on EL 6.5
  - fix build on EL 5.10


author: Stephan Wiesand <stephan wiesand desy de> 1.6.10-153.SLx
changelog:
  - update to release 1.6.10
  - patch 1084 to revert gerrit 11358
  - patch 1085 with aklog/krb524 fix from gerrit 11538
  - package the new volscan executable + manpage, in -server
  - don't package the xfs_size_check manpage
  - removed the old lwp versions of butc, fileserver, volserver
  - support for SL7
  -  support "--with modsign" to sign the kernel module
  -  ship systemd unit files on this platform, rather than init scripts
  -  the old init scripts are called in "prepare" mode from the unit files
  -  in this mode, they do the usual checks/autoconfig, ...
  -  and then they write the environment files used in the unit files
  - added BOSSERVER_OPTIONS variable to sysconfig (and server startup files)
  - added ENABLE_DYNROOT_SPARSE to sysconfig (and client init script)
  -  defaults to on on SL7, off on SL5/6
  - patches 1080..83 are already in
  - use the right path to depmod, and generally the right sbin


author: Peter Hatina <phatina@redhat.com> - 1.8.10-8
changelog:
  - security patches
  - Resolves: CVE-2014-6421
              CVE-2014-6423
              CVE-2014-6424
              CVE-2014-6425
              CVE-2014-6426
              CVE-2014-6427
              CVE-2014-6428
              CVE-2014-6429


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.446.el6
changelog:
  - Properly adding missing README.systemtap [bz#1139438]
  - Resolves: bz#1139438
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.447.el6
changelog:
  - kvm-net-Forbid-dealing-with-packets-when-VM-is-not-runni.patch [bz#1142756 bz#970103]
  - kvm-migration-set-speed-to-maximum-during-last-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-only-call-append-when-there-is-something-t.patch [bz#1142756 bz#970103]
  - kvm-migration-avoid-no-op-memmove-of-potential-large-buf.patch [bz#1142756 bz#970103]
  - kvm-migration-remove-not-needed-ram_save_remaining-funct.patch [bz#1142756 bz#970103]
  - kvm-migration-move-bandwidth-calculation-to-inside-stage.patch [bz#1142756 bz#970103]
  - kvm-migration-Don-t-calculate-bandwidth-when-last-cycle-.patch [bz#1142756 bz#970103]
  - Resolves: bz#1142756
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Resolves: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)
  - Properly include README.systemtap [bz#1145672]
  - Resolves: bz#1145672
    (README for qemu-kvm systemtap flight recorder)


author: Jeff E. Nelson <jen@redhat.com> - 0.12.1.2-2.448.el6
changelog:
  - kvm-Revert-migration-Don-t-calculate-bandwidth-when-last.patch [bz#970103]
  - kvm-Revert-migration-move-bandwidth-calculation-to-insid.patch [bz#970103]
  - kvm-Revert-migration-remove-not-needed-ram_save_remainin.patch [bz#970103]
  - kvm-Revert-migration-avoid-no-op-memmove-of-potential-la.patch [bz#970103]
  - kvm-Revert-migration-only-call-append-when-there-is-some.patch [bz#970103]
  - kvm-Revert-migration-set-speed-to-maximum-during-last-st.patch [bz#970103]
  - kvm-Revert-net-Forbid-dealing-with-packets-when-VM-is-no.patch [bz#970103]
  - Reverts attempt to solve: bz#970103
    (Downtime during live migration of busy VM is much higher than migration_downtime in vdsm.conf)


author: Albert Uchytil <auchytil@redhat.com> 20120827-14
changelog:
  - updated man pages
  - changed debuginfo package handling (#1113685)
  - capability to dynamically register and deregister collections (#1113686)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-20
changelog:
  - register and deregister: if there is an error registering or deregistering
    one or more collection, skip it but return non-zero return code
  - fix the problem with metapackage dependencies when BuildArch is specified


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-21
changelog:
  - fix an obscure segfault when listing collections on i386
  - fix registration to work with slash-ended paths
  - add the %scl_dependency_generators macro
  - drop recursive ownership of /usr/lib within SCL root


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-22
changelog:
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add capability to make collection nfs mountable using macro nfsmountable.
  - removed the dependency generators and all related changes
    (maintainers' demands)


author: Lubos Kardos <lkardos@redhat.com - 20120927-23
changelog:
  - Modified paths of state and conf files
  - Add owning and creating of state and conf files if nfsmountable is defined
  - Add printing file names in error messages


author: Albert Uchytil <auchytil@redhat.com> 20120827-14
changelog:
  - updated man pages
  - changed debuginfo package handling (#1071834)
  - added capability of dynamically registering and deregistering collections (#1099394)


author: Ales Ledvinka <aledvink@redhat.com> - 5.6-4
changelog:
  - With no value provided for watchdog-timeout do not attempt
    to set it. Avoid conflict with custom module parameter.
  - Resolves: rhbz#1099604


author: Remi Collet <rcollet@redhat.com> - 5.3.3-39
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


