# changelog

author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-3
changelog:
  - Related: rhbz#604173 - Added patch set for MRG 1.3. Modified spec file
    to set the lib versions for each of the libs produced by the build
    independently of each other and pass that info as params to make.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-5
changelog:
  - Related: rhbz#609298 - ruby QMF bindings can't query agents
    Fix in undelying c++ code for ruby QMF bindings.


author: Jiri Skala <jskala@redhat.com> - 0.99.12-1
changelog:
  - update to latest upstream version
  - fix #499960 - BGPd in Quagga prior to 0.99.12 has a serious assert problem crashing with ASN4's


author: Jiri Skala <jskala@redhat.com> - 0.99.12-3
changelog:
  - fixed #516005 - Errors installing quagga-0.99.11-2.fc11.i586 with --excludedocs
  - fixed #522787 - quagga: build future versions without PAM


author: Jiri Skala <jskala@redhat.com> - 0.99.11-3
changelog:
  - fix #498832 - bgpd crashes on as paths containing more 6 digit as numbers
  - corrected release number


author: Ondrej Vasik <ovasik@redhat.com> 1:3.17-4
changelog:
  - clarify statements about LDAP in warnquota conf
    (related to #490106)
  - fix parsing issue in warnquota.c(#490125)
  - enable rpcsetquota by default(#159292, #469753)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.4.16-1
changelog:
  - Update to 1.4.16 (for Soprano 2, also lots of bugfixes).
  - Specify LGPL version in License tag.
  - Update URLs.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.9.15-1
changelog:
  - Update to 0.9.15 (for redland 1.0.7, also lots of bugfixes)
  - Update minimum raptor version
  - BR perl(XML::DOM) (needed by the testsuite)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 5.7-36
changelog:
  - fixes based on review
  - Add dependency on diffutils.
  - Apply build tweaks patch from Debian (incl installing rcsfreeze).
  - BuildRequire autoconf instead of automake.
  - Actually configure instead of shipping a pregenerated conf.h (#226356).
  - Ship docs as PDF rather than troff source.
  - Run test suite during build.
  - Include COPYING.
  - Resolves: #543948


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Add missing documentation for resource agents
    (add_missing_resource_docs.patch)
  - Clean up recursion in scheman output and documentation
    (clean_up_recursion_and_documentation.patch)
    Resolves: rhbz#606470


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-7
changelog:
  - Make vm.sh honor start and stop timeouts
    (Make_vm.sh_use_stop_start_timeouts.patch)
    Resolves: rhbz#606754


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-8
changelog:
  - Make fs-lib resolve links before checking for block devices
    (fix_incorrect_link_resolution_in_fs_lib.patch)
    Resolves: rhbz#609579


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Add NFSv4 server support
    (add_nfsv4_support.patch)
    (install_nfsv4_agent.patch)
    Resolves: rhbz#595547
  - Fix migration mapping behavior
    (fix_migration_mapping_behavior.patch)
    Resolves: rhbz#596918


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Fix changelog for 3.0.12-9 date
  - Add RHEVM status program
    (add_rhevm_status_program.patch)
    Resolves: rhbz#609497


author: Marek Grac <mgrac@redhat.com> - 3.0.12-12
changelog:
  - postgres RA will fail to stop gracefully if there 
    is active client connected
    (sigquit_if_sigterm_was_not_fast_enough.patch)
    Resolves: rhbz#612165
  - new RA for tomcat6
    (resource_agent_tomcat-6.patch)
    (tomcat-6_change_build_system.patch)
    Resolves: rhbz#593721


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-13
changelog:
  - Allow other values for "yes" in fs-lib when unmounting
    file systems
    (fs-lib_allow_other_values_for_yes.patch)
    Resolves: rhbz#614421


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-14
changelog:
  - resource-agents: Drop tomcat-5 from build
    (drop_tomcat_5_from_build.patch)
    Resolves: rhbz#593721


author: Marek Grac <mgrac@redhat.com> - 3.0.12-15
changelog:
  - postgresql RA does not work correctly with netmask
    (psql_does_not_work_correctly_with_netmask.patch)
    Resolves: rhbz#614457


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-15.el6_0.1
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#640190


author: Harald Hoyer <harald@redhat.com> 1.5.1-1
changelog:
  - readahead-1.5.1
  - add syslog() to collector
  - translation update
  - let upstart set console owner for collector


author: Harald Hoyer <harald@redhat.com> 1.5.3-1
changelog:
  - fix readhead for new libaudit (bug #523400)
  - don't leak file descriptors (bug #525893)
  - also collect openat() calls
  - ignore files > 10MB


author: Harald Hoyer <harald@redhat.com> 1.5.5-1
changelog:
  - version 1.5.5
  - exit readahead-collector correctly, if audit is not enabled
  - make delay of services configurable
  - make minimum memory requirement configurable
  - log to /dev/kmsg in upstart scripts
  - upstart scripts updated for upstart 0.6 (#546077, #575114)
  - Resolves: rhbz#575119, rhbz#561486


author: Harald Hoyer <harald@redhat.com> 1.5.6-1
changelog:
  - version 1.5.6
  - various bugfixes by Raphael Geissert 
    (#527498, #527505, #527508, #527509, #528781, #528785)
  - Related: rhbz#543948


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-8
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - merge review fixes (#226361)
  - fix source URL


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-3
changelog:
  - include patch 004
  - suppress install-info errors (#515910)
  - remove dir* in infodir after install (#492097)


author: Vivek Lakshmanan <vivekl at redhat.com> 0:1.4-3jpp.1.fc7
changelog:
  - Resync with JPP
  - Use the upstream tar ball as JPP does since they clean it off jars anyway
  - Use JPackage exception compliant naming scheme
  - Remove section definition
  - Install unversioned symlink
  - Add missing ghost for unversioned link
  - Add requires on java


author: Gavin Romig-Koch <gavin@redhat.com> 0.15-1
changelog:
  - Update version after release
  - fixed: subpackage name change causes dependency failures (RHEL 594047)


author: Gavin Romig-Koch <gavin@redhat.com> 0.16-1
changelog:
  - Insure correct PRODUCT and VERSION used in the Bugzilla and Strata plugins 
        under Anaconda (RHEL 586147)
  - Prepare for the switch from RHEL-bugzilla to Strata (RHEL 567972 partial)
  - allow canceling out of input with ctrl-D (RHEL 604030)
  - pretty up Newt IO a bit (RHEL 603067)
  - clean up documentation a bit (RHEL 604045)
  - remove the unused 'username' command line and configuration option. 
        (RHEL 604195)
  - fix the worst of the problems with the ftp plugin (RHEL 604782)(RHEL 604780)
  - Need to add -DFORTIFY_SOURCE=2 (RHEL 599342)
  - fix command line crash on empty or non-existant input file 
      (RHEL 594892)(Fedora 594890)
      with help from Adam Stokes <astokes@redhat.com>
  - make target buttons list vertically, improve 'Query' titles 
      (RHEL 594897)(Fedora 594895)
  - change the config file parser to make config names case sensitive 
      (Fedora 594863)(RHEL 594865)
      from Adam Stokes <astokes@redhat.com>
  - change "localsave" button to "local" (Fedora 594899)(RHEL 594901)
      from Adam Stokes <astokes@redhat.com>
  - fix bug in localsave to /tmp (Fedora 595854)(RHEL 595855)
      from Adam Stokes <astokes@redhat.com>
  - Strata client now handles 305 redirects (RHEL 591907)
  - Add po/ru.po to the list of PO files
  - fix so that we continue to build on RHEL/EPEL-5: old libcurl version
  - l10n: Updates to Ukrainian (uk) translation
      from yurchor <yurchor@fedoraproject.org> -


author: Gavin Romig-Koch <gavin@redhat.com> 0.17-1
changelog:
  - better fix for bug in localsave to /tmp
      (Fedora 595854)(RHEL 595855)(RHEL 607507)
  - Revert "fix bug in localsave to /tmp (Fedora 595854)(RHEL 595855)"
  - correct SyntaxWarning: name 'HAVE_gnomekeyring' is used prior to
      global declaration. (Fedora 604235)
      Author: Ales Kozumplik <akozumpl@redhat.com>
  - l10n: Updates to Polish (pl) translation
      Author: raven <raven@fedoraproject.org>
  - l10n: Updates to Ukrainian (uk) translation
      Author: yurchor <yurchor@fedoraproject.org>


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-1
changelog:
  - strata plugin buttonURLXxxx (RHEL 589704)
  - improve strata server testing scripts
  - reorg functions in strata_client_lib (RHEL 591922 related)
  - improved error checking of C compiler
  - Eliminate crash in DisplayXXXMessage


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-2
changelog:
  - fix crash in ftp plugin (Fedora 610870)(RHEL 609480)
  - Production/GA configuration of report, enable Strata plugin (RHEL 567972)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-3
changelog:
  - correct Obsoletes for report-*-RHEL-*
  - strata: handle self signed certs
  - strata-test.conf: setup URL translation
  - add html and xml response translation to strata_client_lib


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-5
changelog:
  - scp plugin: force password auth (RHEL 589702)
  - fix known hosts bug for strata scp target (RHEL 589702)
  - GTKIO: only show 'clickable' button if displaying the link is possible (RHEL 594827)
  - strata client needs to attach each file as separate file (RHEL 591922)
  - report cmd: check access to file immediatly (RHEL 614274)
  - Report throws traceback when there is a configuration for a non-present plugin (RHEL 614139)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-6
changelog:
  - Correct the order of target choices
  - remove http headers from user display (RHEL 621354)
  - correct GTKIO success dialog box (partial RHEL 621354)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-5
changelog:
  - Fix incorrect default for VM.sh agent
    (resolve_incorrect_default_for_vm_agent.patch)
    Resolves: rhbz#599643


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-2
changelog:
  - Fix 2+ simultaneous relocation crash
    (fix_2_or_more_simultaneous_relocation_crash.patch)
    Resolves: rhbz#577856
  - Fix meory leaks during relocation
    (fix_memory_leaks_during_relocation.patch)
    (fix_memory_leak_during_reconfig.patch)
    Resolves: rhbz#578249


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * Addresses the follwing issues from 3.0.12 release:
    Resolves: rhbz#588890, rhbz#588925, rhbz#589131, rhbz#588010
    * Rebase:
    Resolves: rhbz#582350
  - Stop build on ppc and ppc64.
    Resolves: rhbz#591000


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-2
changelog:
  - Pass timeouts to resource agents
    (pass_timeouts_to_resource_agents.patch)
    Resolves: rhbz#606480


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-7
changelog:
  - Fix rgmanager init script to be more LSB compliant
    (rgmanager_init_lsb_compliant.patch)
    Resolves: rhbz#612110


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Make clulog filter correctly based on cluster.conf
    (make_clulog_filter_correctly.patch)
    Resolves: rhbz#609866


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-10
changelog:
  - Add failover domain documentation and other improvements
    (man_page_improvements.patch)
    Resolves: rhbz#557563


author: Tom Lane <tgl@redhat.com> 8.4.0-3
changelog:
  - Add -fno-strict-aliasing to CFLAGS per rpmdiff complaint, and -fwrapv
    too just to be on the safe side.
  Resolves: #596204


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - updated 'delloem setled' command to indicate SES status and drive
    activities for a PCI-e SSD (#727314)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - added -Y option for ipmitool to hide Kg key from cmdline (#698647)
  - added 'channel setkg' command to set Kg encryption key on remote machine
    (#726390)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-11
changelog:
  - fixed delloem powermonitor on bigendian systems (#731718)
  - fixed memory leak in Serial-over-Lan module (#731977)


author: Than Ngo <than@redhat.com> - 3.10-4
changelog:
  - add feature, save and restore all information about default routes bz#191242
  - add startup script for pppoe-server bz#507123


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.1
changelog:
  - Rebase to Ruby 1.8.7.  Based on Mohammed Morsi's port of the 1.9.1
    spec file to Fedora 11: <http://mo.morsi.org/blog/node/318>.
    * ruby-multilib.patch (aka patch23): Rewrite the mkconfig.rb patch so that
    it may be applied unconditionally.  This addresses an rpmlint complaint
    about the arch-dependent patch.  Now, the script itself tests the target
    architecture.  Remove the ".ifarch ppc64 s390x sparc64 x86_64" conditional.


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.2
changelog:
  - Integrate addition of patch101 by Mohammed Morsi.  This fixes
    the segv-inducing marshaling bug affecting rails-3.0.0.
  - Integrate Mamoru Tasaka's path-fixing feedback, including
    updates to ruby-1.8.7-lib-paths.patch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.3
changelog:
  - split some long lines; as in Mamoru Tasaka's 1.8.7.x spec file
  - don't require emacs; remove vestiges of emacs


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-1
changelog:
  - Resolves: rhbz#602435
  - (sitelib2): remove unused definition
  - correct search path, using changes from Mohammed Morsi's
    http://mo.morsi.org/files/ruby-1.8.7.249-5.fc13.src.rpm


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-2
changelog:
  - Rebase to ruby-1.8.7.299
    * remove patch30, aka ruby-1.8.7-openssl-1.0.patch; subsumed
    * remove patch101, aka ruby-1.8.7-rb_gc_guard_ptr-optimization.patch; subsumed


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-4
changelog:
  - Address CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    by applying the patch from Apple as included in
    http://bugzilla.redhat.com/587731.
    * ruby-1.8.7-webrick-CVE.patch: New file.
  - Resolves: rhbz#605418


author: Troy Dawson <dawson@fnal.gov> - 1.8.7.299-4.0.sl6.1
changelog:
  - Fix the shellwords arguments building bug with Patch300
    http://bugs.gentoo.org/show_bug.cgi?id=234877


author: Chris Feist <cfeist@redhat.com> - 0.16.2-3
changelog:
  - An issue with calling 'virsh nodelist' would cause ricci to hang for
    30 seconds during most requests resulting in timeouts to the web interface.
  - Resolves: rhbz#580575


author: Chris Feist <cfeist@redhat.com> - 0.16.2-6
changelog:
  - Init script now complies more closely with Fedora Guidelines
  - Passing a bad node to ccs_sync no longer results in a segfault
  - Resolves: rhbz#585126 rhbz#587526


author: Jeff Garzik <jgarzik@redhat.com> - 2-6
changelog:
  - Resolves: bz#576678
  - increase version number of rng-utils that we obsolete
  - use global rather than define, for sbindir (Fedora pkg review)
  - improve BuildRoot (Fedora pkg review)


author: David Howells <dhowells@rehdat.com> - 2-7
changelog:
  - Resolves: bz#597221
  - Fix some compiler warnings thus dealing with the SEGV
  - Make do_loop() correctly interpret the result of iter->xread()


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-5
changelog:
  - fix segfault on failed url retrieval (#557118)
  - fix verification error code depending on verbosity level (#557101)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-6
changelog:
  - Permit em64t architecture in query/erasure too (#547341)
  - Avoid accessing unrelated mount points in disk space checking (#495623)
  - Fix disk space reporting with erasures present in transaction (#561160)
  - Teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - Fix python match iterator regression wrt boolean representation
  - Support parallel python versions in python dependency extractor (#532118)
  - Python byte-compilation fixes + improvements (#538101)
  - Preserve empty lines in spec prep section (#573339)
  - Fix nosrc package generation regression
  - Avoid owning localized man directories through find_lang (#569536)
  - Lose useless symlink to berkeley_db_svc


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-9
changelog:
  - Handle non-existent dependency sets correctly in python (#593621)
  - Permit DOS-style line-endings in PGP armor headers (#532992)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-10
changelog:
  - Fix empty reply from server on url retrieve (#598988)
  - Drop suid/sgid bits and capabilities on upgrade/erase (#598832)


author: Adam Tkac <atkac redhat com> 0.17-51
changelog:
  - updated ipv6 patch due rpm 4.6 (#465053)
  - make in.rshd working on kernels without audit support (#448904)


author: Adam Tkac <atkac redhat com> - 0.17-60
changelog:
  - merge review related fixes (#226379)
  - remove unused patches
    - netkit-rsh-0.16-pamfix.patch
    - netkit-rsh-0.16-jbj2.patch
    - netkit-rsh-0.16-jbj3.patch


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
    Resolves: #554998
  - add support for arbitrary number of open file descriptors
  - run libtoolize to avoid errors due mismatching libtool version
  - change exec-prefix to /


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-3
changelog:
  - remove '_smp_mflags' make argument as it seems to be
    producing corrupted builds
    Resolves: #556522


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
    Resolves: #554998
  - correct the default value of the OMFileFlushOnTXEnd directive
  - add upstream fix for message-induced off-by-one error
  - change the default value of the HUPisRestart directive to enabled
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil
  - redefine _libdir as it doesn't use _exec_prefix
    Resolves: #591860


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-2
changelog:
  - Fix a potential segfault upon SIGHUP induced restart
    Resolves: #598421
  - Add Obsoletes: sysklogd
    Resolves: #513277


author: Lennart Poettering <lpoetter@redhat.com> - 0.5-1
changelog:
  - New release
  - By default don't demote unknown threads
  - Make messages less cute
  - Resolves: #530582


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Steve Dickson <steved@redaht.com> 0.17-51
changelog:
  - Removed portmap dependency and re-worked when the user
    privilege are drop; allowing port registration with
    rpcbind. (#247985)


author: Warren Togami <wtogami@redhat.com> - 2.29.5-0.1.rc2
changelog:
  - Update to 2.95.5-rc2
  - glade removed, replaced by GNOME Builder 
  - /etc/desktop-profile moved to /etc/sabayon/profiles
    Manual Migration:
    mv /etc/desktop-profiles/*.xml /etc/sabayon
    mv /etc/desktop-profiles/*.zip /etc/sabayon/profiles


author: Warren Togami <wtogami@redhat.com> - 2.29.91-1
changelog:
  - 2.29.91 with important bug fixes
    Saves and Restores File Permissions
    Details pane is now less confusing
    Common Editor Crasher Fixed


author: Nils Philippsen <nphilipp@redhat.com> 1.0.14-3
changelog:
  - merge review (#226389):
    - add version info to obsoletes/provides
    - no config files in /usr
    - use %configure macro
  - add dist tag


author: Nils Philippsen <nils@redhat.com> 1.0.14-6
changelog:
  - don't require libieee2384-devel, libjpeg-devel but require fixed
    sane-backends-devel for building


author: Nils Philippsen <nils@redhat.com> - 1.0.14-9.2
changelog:
  - add missing documentation files AUTHORS, COPYING, README
  - don't distribute sane-style.rc
  - use %buildroot consistently
  - explain missing xcam.desktop file


author: Rafael Schloming <rafaels@redhat.com> - 0.1.897961-1
changelog:
  - Added groups to subpackages.
  - Replaced python_sitelib with python_sitearch, use %global instead of %define, and killed unused ruby_sitelib.


author: Nils Philippsen <nils@redhat.com> - 1.0.21-1
changelog:
  - version 1.0.21
  - remove obsolete rpath, hal, genesys-gl841-registers patches
  - update pkgconfig, udev, man-utf8->man-encoding, epson-expression800,
    docs-utf8 patches
  - remove hal conditional
  - package man pages


author: Nils Philippsen <nils@redhat.com> - 1.0.21-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because SANE-enabled software is likely to deal with data coming
    from untrusted sources (client <-> saned via network)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Hans de Goede <hdegoede@redhat.com> 1.2.13-7
changelog:
  - Rewrite pulseaudio support to stop the crackle crackle with the
    new glitch free pulseaudio, this also gives us much better latency,
    as good as with directly using alsa (rh 474745, sdl 698)
  - Workaround an obscure bug in the inline-asm revcpy function (by disabling it) 
    This fixes Ri-li crashing on i386 (rh 484121, rh 484362, sdl 699)


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-11
changelog:
  - removed joyos2.h from source archive, because of licensing issues
    Resolves: rhbz#537918
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-13
changelog:
  - added repackage.sh script to remove joyos2,h and symbian.zip (really)
  - added comment about riva_mmio.h license


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - rebase to 1.2.14
  - fixed build for libtool 2.2.6 and newer
  - fix from Josh Boyer <jwboyer@gmail.com>:
    - disable ps3 video support that was added in 2.14.  It fails to
      build on ppc/ppc64


author: mrueckert@suse.de
changelog:
  - update to 0.4.2
    ind_helper.c, ind_helper.h:
    Bugs: 1203849 (side effect) made a lot of function arguments
    const in order to remove the cmpi-base warnings.
    added sblim-indication_helper-0.4.2_warnings.patch
    fixes a small warning regarding pointer size


author: <praveen_paladugu@dell.com>- 1.3.4-9
changelog:
  - LocalInterfaceInvokeMethodFix: CHARS and string were handled the same.
  -  They are differentiated in this patch.
  - destroyThreadKey: Local sfcb connect was creating thread specific data
  -  associating a key to it. This won't get deleted resulting in crash
  -  of opwsman, sfcc and sfcb. This patch deletes that data.


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Hans de Goede <hdegoede@redhat.com> - 0.9.11-1.20091205snap
changelog:
  - Rebase to 0.9.11 + some fixes from git (git id
    97832d8dcd00202a493290b5d134b581ce20885c)
  - Rewrite initscript, make it follow:
    http://fedoraproject.org/wiki/Packaging/SysVInitScript
    And merge in RHEL-5 initscript improvements:
    - Parse /etc/tgt/targets.conf, which allows easy configuration of targets
    - Better initiator status checking in stop
    - Add force-stop, to stop even when initiators are still connected
    - Make reload reload configuration from /etc/tgt/targets.conf without
      stopping tgtd (but only for unused targets)
    - Add force-reload (reloads configs for all targets including busy ones)


author: Mike Christie <mchristie@redhat.com> - 1.0.4-0
changelog:
  - 587072 Fix tgt-admin logic error with shared accounts in targets.conf 
  - Rebase to 1.0.4 to sync fixes.


author: Matthias Clasen <mclasen@redhat.com> 2.28.1-2
changelog:
  - Don't call problematic functions in an atexit handler,
    since this can lead to segfaults at session end (#524415)


author: Petr Machata <pmachata@redhat.com> - 4.1.5-8
changelog:
  - tidy up the specfile per rpmlint comments
  - use utf-8 and fix national characters in contributor's names


author: Jiri Moskovcak <jmoskovc@redhat.com> - 4.2.1-1
changelog:
  - new version
  - obsoletes previous patches
  - added patch to maintain backwards compatibility for scripts using -c/--copy
  - Resolves: #502934


author: Jiri Moskovcak <jmoskovc@redhat.com> 4.2.1-4
changelog:
  - added libselinux-devel to buildrequires rhbz#514182
  - fixed problem with --excludedocs rhbz#515913


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-10
changelog:
  - fix verification of SSL certificate with NUL in name (#553390, CVE-2009-4565)
  - don't start service by default (#529686)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - dropped patches (fixed upstream): exitpanic, certcnnul


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-5
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Dan Walsh <dwalsh@redhat.com> - 2.2.86-1
changelog:
  - Fix permission on icons
  - Add man pages for setroubleshoot and sedispatch
  - Fix desktop file
  Resolves: #594352


author: Dan Walsh <dwalsh@redhat.com> - 2.2.91-1
changelog:
  - Fix os.exists call in setroubleshoot
  - Update po
  - Use -s flag in python to prevent using user site directory


author: Tim Waugh <twaugh@redhat.com> 2.17-20
changelog:
  - Fixed mandir in fhs patch (bug #226411).
  - Don't run strip (bug #226411).
  - Fixed readme patch to talk about Fedora not Red Hat Linux (bug #226411).
  - Fixed build root tag (bug #226411).
  - Use SMP make flags (bug #226411).
  - Avoid %makeinstall (bug #226411).
  - Fixed summary (bug #226411).


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Dan Horák <dan@danny.cz> - 1.28-2
changelog:
  - include rescan-scsi-bus script 1.35
  - rebase patches and add fix for issue mentioned in #538787
  - Related: #538787


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: - Bastien Nocera <bnocera@redhat.com> - 0.60-3
changelog:
  - Remove Totem as handling Blu-ray and HD-DVD
  - Use brasero-ncb.desktop instead of nautilus-cd-burner for blank devices
  - Update media mime-types for Rhythmbox/Totem


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Rex Dieter <rdieter@fedoraproject.org> - 2.2.3-2
changelog:
  - %files: drop ownership of %_datadir/dbus-1.0/interfaces (#334681)
  - %files: track shlib sonames
  - make -apidocs noarch


author: Richard Hughes <rhughes@redhat.com> - 2.28.0-3
changelog:
  - Apply a patch from upstream to inhibit gnome-session, rather than
    gnome-power-manager. This fixes a warning on rawhide when using sound-juicer.


author: Uri Lublin <uril@redhat.com> - 0.4.2-10
changelog:
  - spice: server: new-api (4 more patches)
       + streaming-video, agent-mouse, playback-compression.
  Related: #571286


author: Uri Lublin <uril@redhat.com> - 0.4.2-13
changelog:
  - remove Requires and BuildRequires mesa-libGLU-devel
    + open-gl is now disabled.
  - bumped release to -13 due to tag issue
  Related: #482556


author: Uri Lublin <uril@redhat.com> - 0.4.2-15
changelog:
  - Fix unsafe accesses
    + fix unsafe guest data accessing.
    + fix unsafe free() call.
    + fix unsafe cursor items handling.
    + add missing overflow check.
  Resolves: #568811


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected


author: Tomas Hoger <thoger@redhat.com> - 1.2-0.7.beta3
changelog:
  - Security update: Add mode checks to speex_packet_to_header() to protect
    applications using speex library and not having proper checks
    (CVE-2008-1686, #441239, https://trac.xiph.org/changeset/14701)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2.el6_0.5
changelog:
  - Add fixes from upstream git for a number of serious bugs:
    - ctrl / alt getting stuck
    - a client hang
    - a client crash
    - showing nothing but a white screen in fullscreen mode
    Related: rhbz#644840


author: Uri Lublin <uril@redhat.com> - 0.4.2-3
changelog:
  - Remove BuildRequires: pkgconfig
   - Move Requires: pkgconfig to -devel subpackage.
  Related: #543948


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Kyle McMartin <kyle@redhat.com> - 4.0-3
changelog:
  - Add .el6 tag to Release.
  - Use upstream tarball (instead of CVS snapshot.)
    (There's no code difference.)


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.15-4
changelog:
  - Related: rhbz#543948
  - TPROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-1
changelog:
  - Resolves: #564296 - Rebase to new upstream tarball (fixes licensing issues)
  - Resolves: #561743 - CVE-2010-0308 squid: temporary DoS (assertion failure) triggered by truncated DNS packet (SQUID-2010:1)
  - fixes rpmlint issues in spec file
  - fixed rpmlint issue initscript file


author: Jiri Skala <jskala@redhat.com> -7:3.1.4-1
changelog:
  - Resolves: #564296 - Rebase squid to stable upstream tarball 3.1.4
  - bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Doug Ledford <dledford@redhat.com> - 0.0.4-8.el6
changelog:
  - Update to latest upstream version so we can have an actual URL that works
  - Fix ups for pkgwrangler import and also fix bug reported against rhel5
    version of package (552915)
  - Related: bz543948


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
changelog:
  - Resolves: rhbz#598670 - Ccache file of a user is removed too early
  - Resolves: rhbz#599057 - Incomplete comparison of a service name in
  -                         IPA access provider
  - Resolves: rhbz#598496 - Failure with IPA access provider
  - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
  -                         kernel keyring


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
changelog:
  - Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart
  - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
  -                         parentheses causes ldap_search_ext to fail
  - Resolves: rhbz#600468 - Segfault in krb5_child
  - Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.


author: Ondrej Vasik <ovasik@redhat.com> 1.5-7
changelog:
  - Merge review (#226434) changes: convert AN-1.5 to utf-8,
    spec file cosmetic/policy changes, ship README.linux in doc


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Rex Dieter <rdieter@fedoraproject.org> 0.7-0.1.RC1
changelog:
  - strigi-0.7-RC1
  - use %_isa where appropriate
  - %files: track lib sonames
  - strigi-daemon.desktop: +Hidden=true (ie, disable autostart by default)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.7-1
changelog:
  - Rename to system-setup-keyboard, update the URL and Source0 accordingly.
    Obsoletes fedora-setup-keyboard.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.7-4
changelog:
  - system-setup-keyboard-0.7-all-keyboards.patch: apply keyboard layout to
    all key devices, not just those with input.keyboard capabilities (#595654).


author: Avesh Agrwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Ville Skyttä <ville.skytta@iki.fi> - 1.6.5-3
changelog:
  - Apply svn2cl upstream patch to fix newline issues with libxml2 2.7.4+,
    see http://bugs.debian.org/546990 for details.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.6.6-5
changelog:
  - Include svn2cl and its man page only in the -svn2cl subpackage (#558598).
  - Do not include bash completion in docs, it's installed.


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
changelog:
  - new upstream version
    Resolves: rhbz#554321
  - drop *.pod man page duplicates from docs
  - commented out unused aliases in sudoers to make visudo happy (#550239)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-5
changelog:
  - added patch that fixes insufficient environment sanitization issue (#598154)
    Resolves: rhbz#598383


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-7
changelog:
  - move the sudo_end* calls before closefrom()
  - close audit_fd before exec
  - fixed typo in Makefile.in
    Resolves: rhbz#569313


author: Adam Tkac <atkac redhat com> 1.3.39-1
changelog:
  - update to 1.3.39
  - swig-1.3.38-rh485540.patch was merged
  - add Example/ to -doc again (#489077), filter provides correctly


author: Tim Waugh <twaugh@redhat.com> 1.2-29
changelog:
  - Use smp_mflags (bug #226445).
  - Better default attributes (bug #226445).
  - Make setup macro quiet (bug #226445).
  - Clean build root in %install section (bug #226445).


author: Ivana Varekova <varekova@redhat.com> - 9.0.4-3
changelog:
  - fix init script - add INIT INFO flags (#522740)
    and add condrestart, try-restart and force-reload (#522743)


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-9
changelog:
  - Fixed pycups to be more cautious when removing
    the Connection object from the list (bug #571451).
  - No longer requires usermode (bug #572138).
  - Fixed jobviewer traceback when closing
    not yes shown notification (bug #572142).
  - Treat hpcups-requiring-plugin as 3rd party proprietary (bug #572143).


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-10
changelog:
  - Import modules we catch exceptions from (bug #574131).
  - Fixed reconnection error handling in IPPAuthOperation class (bug #575798).
  - Initialize downloadable_drivers when OpenPrinting query fails (bug #575916).
  - Fixed race condition in asyncipp (bug #576934).
  - Fixed possible traceback in the SMB handling part of probe_printer.py (bug #579864).


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-12
changelog:
  - Fixed localized state reasons (bug #587719).
  - Always use close_fds=True in subprocess.Popen calls (bug #590065).
  - cups-pk-helper support: FileGet requires a file it can write to (bug #592343).
  - Initialise auto_make to the empty string (bug #592346).


author: Frank Ch. Eigler <fche@redhat.com> - 1.2-5
changelog:
  - Backported fixes for rhbz596085 rhbz580917 rhbz604294 rhbz602386
    rhbz599498 rhbz580197 rhbz597329 rhbz599430


author: Petr Lautrbach <plautrba@redhat.com> 2.87-3.dsf
changelog:
  - Add -w option to last command for wide output (#585907)
  - Changed IPv4 vs IPv6 heuristic in last command (#585880)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6
changelog:
  - Resolves: #556398
  - Directly included relevant patches, scripts and man pages from Debian
  - Removed rpath
  - rpmlint is silent now


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.5-6
changelog:
  - Add %check section and conditionally build with tests.
  - Update descriptions (and mention the additional file formats).
  - Cherry-pick bug-fix patches from 1.6 development (also replaces the
    old taglib-1.5-kde#161721.patch):
    * Fixed crash when saving a Locator APEv2 tag. (BUG:169810)
    * TagLib can now use FLAC padding block. (BUG:107659)
    * Fixed overflow while calculating bitrate of FLAC files with a very
      high bitrate.
    * XiphComment::year() now falls back to YEAR if DATE doesn't exist
      and XiphComment::year() falls back to TRACKNUM if TRACKNUMBER doesn't
      exist. (BUG:144396)
    * Fixed a bug in ByteVectorList::split().
    * Fixed a possible crash in the non-const version of String::operator[]
      and in String::operator+=. (BUG:169389)
    * ID3v2.2 frames are now not incorrectly saved. (BUG:176373)
    * Support for ID3v2.2 PIC frames. (BUG:167786)
    * Improved ID3v2.3 genre parsing. (BUG:188578)
    * Better checking of corrupted ID3v2 APIC data. (BUG:168382)
    * Bitrate calculating using the Xing header now uses floating point
      numbers. (BUG:172556)
    * Added support for PRIV ID3v2 frames.
    * Empty ID3v2 genres are no longer treated as numeric ID3v1 genres.
    * Added support for the POPM (rating/playcount) ID3v2 frame.
    * Fixed crash on handling unsupported ID3v2 frames, e.g. on encrypted
      frames. (BUG:161721)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.5-8
changelog:
  - Merge another bug-fix from 1.6rc1 (this adds 3 symbols) and
    really add tstring bug-fix:
    * Split Ogg packets larger than 64k into multiple pages. (BUG:171957)
    * Fixed a possible crash in the non-const version of String::operator[]
      and in String::operator+=. (BUG:169389)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.6-0.1.rc1
changelog:
  - Update to 1.6rc1 (further bug-fixes and support for AIFF and WAV).
  - Build optional support for MP4 and ASF/WMA files.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.6.1-1
changelog:
  - Update to 1.6.1 (bug-fixes, of which one is considered a fix for
    a serious bug: saving of Ogg FLAC comments).


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-34
changelog:
  - Add dist tag, fix buildroot, defattr, obsoletes, provides and summary,
    comment patches and sources


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.8-5
changelog:
  - update config.{guess,sub} when building tcpslice
  - remove -D_GNU_SOURCE from CFLAGS
  - disable libsmi check in configure


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:4.0.0-1.20090818git832d2c
changelog:
  - update to post 4.0.0 git snapshot 20090818git832d2c
  - print retrans and reachable times in ICMPv6 as milliseconds (#474264)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-10
changelog:
  - store xattrs for symlinks (#525992) - by Kamil Dudka
  - update tar(1) manpage (#539787)
  - fix memory leak in xheader (#518079)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-11
changelog:
  - fix segfault with corrupted metadata in code_ns_fraction
    (#531441)
  - commented patches and sources


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-13
changelog:
  - do not fail with POSIX 2008 glibc futimens()
  - temporarily disable fix for #531441, causing stack smashing
    with newer glibc


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-15
changelog:
  - CVE-2010-0624 tar, cpio: Heap-based buffer overflow
    by expanding a specially-crafted archive (#571842)
  - realloc within check_exclusion_tags() caused invalid write
    (#571523)
  - not closing file descriptors for excluded files/dirs with
    exlude-tag... options could cause descriptor exhaustion
    (#571523)
  - support for "lustre.*" extended attributes (#572442)
  - allow build without SELinux support


author: Radek Novacek <rnovacek@redhat.com> - 2.4.3-4
changelog:
  - Changed licence from GPL+ to GPLv2
  - Fixed mixed tabs and spaces in specfile
  - Add %post and %postun sections for libs subpackage


author: Tom Lane <tgl@redhat.com> 1.6.2-1
changelog:
  - Created package by stripping down postgresql specfile and adjusting
    to meet current packaging guidelines for Tcl extensions.


author: Tomas Janousek <tjanouse@redhat.com> - 7.6-50
changelog:
  - license tag update (and rebuild for BuildID, etc.)
  - include docs in the -libs subpackage, as it is the only one installed on most
    systems (and to comply with the license text)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.16-1
changelog:
  - Update to tcsh-6.16.00
  - Merge Review (fix License, add BUGS and WishList to documentation, convert Fixes and
    WishList to UTF-8, remove root checking from buildroot cleaning, preserve timestamps,
    use smp_flags, remove unused patches, improve postun script and minor fix to %files)
    Resolves: #226483


author: Jindrich Novy <jnovy@redhat.com> 2.2.1-0.2
changelog:
  - review fixes (#247615)
  - add libtool BR
  - enable parallel build
  - fix filelist
  - run ldconfig in post


author: Adam Tkac <atkac redhat com> - 1:0.17-38.fc7
changelog:
  - added -c option which disables reverse dns checking (#223448)
  - added smp_mflags to make
  - start using dist macro


author: Adam Tkac <atkac redhat com> 1:0.17-46
changelog:
  - changes related package review (#226484)
  - remove unused patches
    - telnet-0.17-linemode.patch
    - telnet-0.17-env-5x.patch


author: Jindrich Novy <jnovy@redhat.com> 2007-48
changelog:
  - add missing defattr to filelists
  - do not own /var/lib/texmf/web2c/, it is owned by texlive-texmf
  - use official tarball for dvipsk-jpatch


author: John Kacur <jkacur@redhat.com>
changelog:
  - disabled #patch01
  - Updated the trace-cmd source
  - Changed version to 0.7.0
  - Added bogus patch to satisfy rpm requirements
  - Related:bz519630


author: John Kacur <jkacur@redhat.com>
changelog:
  - Added trace-cmd-Makefile-EXTRAVERSION-should-be-set-withou.patch
  - Added trace-cmd-Makefile-use-a-substitution-reference.patch
  - add-DESTDIR-to-make.patch
  - Related: rhbz599507


author: John Kacur <jkacur@redhat.com>
changelog:
  - Rebasing to trace-cmd-1.0.2
  - Added parse-events-Do-not-fail-on-FORMAT-TOO-BIG-event-err.patch
  - Added trace-cmd-Prevent-latency-tracer-plugins-from-doing-.patch
  - Added trace-cmd-Prevent-print_graph_duration-buffer-overfl.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.1.20100115svn3945
changelog:
  - update to 1.0.90 snapshot
  - X.Org 1.7 support
  - accelerated Tight encoding on x86_64
  - patches merged
    - tigervnc10-compat.patch
    - tigervnc10-rh510185.patch
    - tigervnc10-rh516274.patch
    - tigervnc10-rh524340.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100115svn3945
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.7.20100115svn3945
changelog:
  - make libvnc.so module working again (r4005, r4024, r4025)
  - vncviewer could crash on slow links (r4003, r4004)


author: Adam Tkac <atkac redhat com> 1.0.90-0.8.20100115svn3945
changelog:
  - fix memory leak in Xvnc (#603731)
  - update URL about SSH tunneling in the sysconfig file (#601996)
  - add pam-devel to BuildRequires, X server needs it


author: Karsten Hopp <karsten@redhat.com> 1.7-29
changelog:
  - remove trailing dot from summary
  - replace tabs with spaces
  - replace PreReq with Requires(post)/Requires(preun)
  - include license file in %doc
  - add smp flags
  - use make install DESTDIR=


author: Miloslav Trmač <mitr@redhat.com> - 2.9.13-1
changelog:
  - New home page at https://fedorahosted.org/tmpwatch/ .
  - tmpwatch is now licensed under GPLv2.
  - Address issues from reviews by Adel Gadllah and Jason Tibbitts:
    - Run (make) with %{?_smp_mflags}
    - Add a comment describing the origin of the tarball to the spec file
    - Use a better BuildRoot:


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: Karel Klic <kklic@redhat.com> - 1.4.33-5
changelog:
  - Add more volatile marks to prevent race conditions,
    this is how the upstream fixed it in 1.4.43
  - Fix memory leaks in tchdbvanishimpl() and tcfdbvanishimpl()
    Taken from tokyocabinet-1.4.35
  - Fix a bug related to emulation of the UBCACHE
    Taken from tokyocabinet-1.4.35
  - Fix a bug related to the limit parameters in search operations
    Taken from tokyocabinet-1.4.34


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 3:2.0.12-1
changelog:
  - update to 2.0.12 (fixes #461278 and #461626)
  - this release adds support for icmp extensions (including MPLS),
    which was expected for a long time (#176588)
  - drop "tracert" symlink (#461109)


author: Jiri Skala <jskala@redhat.com> - 3:2.0.14-1
changelog:
  - Resolves: #586109 - traceroute don't like -l flowlabel, -t priority and -g nexthop option
  - update to latest upstream


author: Ville Skyttä <ville.skytta at iki.fi> - 1:3.2.5-7
changelog:
  - Get rid of csh dependency, add missing one on bc (#435993).
  - Build with $RPM_OPT_FLAGS (#329831).
  - Convert specfile to UTF-8.
  - Add URL, fix source URL.
  - Escape macros in changelog.
  - Improve summary.


author: Dan Winship <dwinship@redhat.com> - 2.0.1-2
changelog:
  - Fix crash when building without optimization on x86_64
  - Allow VNC connections with no password (#460708)
  - Allow VNC connections to use remote screen size as window size (#460709)
  - Fix VNC code to work with RealVNC's vncviewer rather than TightVNC's


author: Robert Scheck <robert@fedoraproject.org> 0.9.3-1
changelog:
  - Upgrade to 0.9.3 (#466825, thanks to Hans de Goede)
  - Enabled libv4l support for the new gspca kernel driver


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS 
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file 
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed 
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability 
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch, 
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because 
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line 
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Harald Hoyer <harald@redhat.com> 147-2.22
changelog:
  - fixed random MAC address handling 
  - honor ifcfg HWADDR settings for 70-persistent-net.rules
  Resolves: rhbz#596464


author: Harald Hoyer <harald@redhat.com> 147-2.26
changelog:
  - more quirk for virtual machines, which do not report correct
    CDROM information
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.27
changelog:
  - added ID_SERIAL_RAW to scsi_id export output, which is not
    whitespace stripped
  Resolves: rhbz#612173


author: Harald Hoyer <harald@redhat.com> 147-2.28
changelog:
  - quirk for cisco virtual cdrom was not complete, reports
    blank media, rhbz#628962
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.29
changelog:
  - set the selinux context for "add" events, regression
    the fix for rhbz#575128 caused a lot of selinux errors like
    rhbz#603729
  Resolves: rhbz#575128


author: Matthias Saou <http://freshrpms.net/> 1.0.0b3-6
changelog:
  - Add ncurses-devel build requirement, since it's not pulled in anymore.
  - Add patch to fix as many trivial warnings as possible. Some stuff seems to
    still not be 64bit clean, though.


author: David Zeuthen <davidz@redhat.com> - 1.0.0-0.git20100223.1.el6
changelog:
  - Update to git snapshot for LVM2/Multipath support
  - Bump lvm2 version requirement to 2.02.61
  - Don't include compat devkit-disks symlinks
  - Don't advertise remote access support via Avahi
  - Related: rhbz#548874
  - Related: rhbz#548870


author: David Zeuthen <davidz@redhat.com> - 1.0.0-1.el6
changelog:
  - Update to release 1.0.0
  - Build without LVM2 and Multipath support for now (#548870, #548874)
  - Related: rhbz#575889


author: Richard Hughes <rhughes@redhat.com> - 1.0.4-1
changelog:
  - Update to latest upstream version
   * Plug a leak in UniqueMessageData
   * Fix linking with --as-needed
   * Do not export private functions symbols


author: Richard Hughes <rhughes@redhat.com> - 1.0.8-1
changelog:
  - Update to latest upstream version
   * Unbreak subclassing of UniqueApp
   * Remove upstreamed patches


author: Tim Waugh <twaugh@redhat.com> 2.2-27
changelog:
  - Preserve timestamps on install (bug #226514).
  - Fixed summary (bug #226514).
  - Fixed build root (bug #226514).
  - Don't explicitly require perl for build (bug #226514).
  - Added dist to release tag (bug #226514).
  - Don't build with '-Wall' since RPM_OPT_FLAGS already includes it
    (bug #226514).
  - Fixed macros in changelog (bug #226514).


author: Tim Waugh <twaugh@redhat.com> 2.2-31
changelog:
  - Removed patch fuzz.
  - Preserve file modes (bug #437469).
  - Fixed grammar in man page (bug #460731).
  - Explicitly apply patch0.


author: Tom Lane <tgl@redhat.com> 2.2.12-8
changelog:
  - Install icons in /usr/share/pixmaps, not /usr/share/icons as this package
    has historically done; the former is considered correct.


author: Tom Lane <tgl@redhat.com> 2.2.14-1
changelog:
  - Update to unixODBC 2.2.14.  Note this involves an ABI break and a consequent
    soname version bump, because upstream fixed some mistakes in the widths of
    some API datatypes for 64-bit platforms.  Also, the formerly embedded
    mysql, postgresql, and text drivers have been removed.  (For mysql and
    postgresql, use the separate mysql-connector-odbc and postgresql-odbc
    packages, which are far more up to date.  The text driver is not currently
    shipped by upstream at all, but might get revived as a separate SRPM later.)
  - Stop shipping .a library files, per distro policy.
  - Fixes for libtool 2.2.


author: Peter Lemenkov <lemenkov@gmail.com> - 2.2.14-4
changelog:
  - Properly install *.desktop files
  - No need to ship INSTALL in docs
  - Use macros instead of hardcoded /usr/share and /usr/include
  - fixed permissions on some doc- and src-files
  - Almost all rpmlint messages are gone now


author: Tom Lane <tgl@redhat.com> 2.2.14-6
changelog:
  - Switch to building against qt4, not qt3.  This means the DataManager,
    DataManagerII, and odbctest applications are gone.
  Resolves: #514064
  - Use Driver64/Setup64 to eliminate need for hand-adjustment of odbcinst.ini
  Resolves: #514688
  - Fix misdeclaration of SQLBIGINT and SQLUBIGINT in generated header files
  Resolves: #518623


author: Tom Lane <tgl@redhat.com> 2.2.14-9
changelog:
  - Sync with Fedora head
  - Fix bug preventing drivers from being selected in ODBCConfig
  Resolves: #554501
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparcv9 isn't a possible uname -i output


author: Karsten Hopp <karsten@redhat.com> 0.82-5
changelog:
  - drop ExcludeArch: s390 s390x as we need this package on s390x to be able to build
    p.e. udev without any hacks


author: Karsten Hopp <karsten@redhat.com> 7.2.411-1.1
changelog:
  - augroup "fedora" in /etc/vimrc renamed to "redhat"
  - Resolves: #578785
  - fix vim.csh  'tcsh -e' scripts
  - Resolves: #578795


author: Miloslav Trmač <mitr@redhat.com> - 1.99-2
changelog:
  - Fix problems pointed out in merge review:
    - Drop Conflicts: SysVinit < very-old
    - Remove very old version requirements from Requires and BuildRequires
    - Make /etc/security/console.apps/* %config(noreplace)
    - Update BuildRoot


author: Miloslav Trmač <mitr@redhat.com> - 1.102-2
changelog:
  - Use %{?_smp_mflags}
  - Use the four-parameter version of %defattr
  - Be more paranoid about dropping privileges
  - Set PAM_TTY


author: Dennis Gilmore <dennis@ausil.us> - 1.0.3-5
changelog:
  - set broken_fed_dbg_opts to 0 its the recomended option upstream
  - this works around sparc GCC problems
  - add smpflags and cflags to make check


author: Karel Zak <kzak@redhat.com> 2.17.1-1
changelog:
  - upgrade to 2.17.1 (bugfix release, #567555)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ChangeLog
  - spec file fixes:
    fix floppyutil URL in specfile
    add missing liceces to License field
    fix mixed-use-of-spaces-and-tabs
  - fix #565888 - uuidd initscript lsb compliance
  - remove util-linux-ng-2.17-mount-mtabfake.patch (merged upstream)


author: Karel Zak <kzak@redhat.com> 2.17.1-3
changelog:
  - fix #572121 - RHEL6: reset tiny flag in libblkid
  - fix #572122 - RHEL6: blkid (and related) should be a bit more robust


author: Karel Zak <kzak@redhat.com> 2.17.2-1
changelog:
  - upgrade to the bugfix release 2.17.2 (#575722)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ChangeLog
  - remove: util-linux-ng-2.17-blkid-alignment-offset.patch
            util-linux-ng-2.17-blkid-minix.patch
            util-linux-ng-2.17-blkid-tinyflag.patch
  - fix #572937 - RHEL6: use microsecond resolution for blkid cache entries


author: Karel Zak <kzak@redhat.com> 2.17.2-2
changelog:
  - fix #588248 - RHEL6: don't probe for RAIDs on CD-ROMs
  - fix #586368 - RHEL6: mdraid assembles incorrectly
  - fix #586942 - Add utempter support to "script"
  - fix #588298 - RHEL6: improve fdisk(8) move command.


author: Karel Zak <kzak@redhat.com> 2.17.2-3
changelog:
  - fix #592958 - whole disk raid members to not be identified
  - fix #594689 - partx infinite loop
  - fix #589955 - add command-line interface for libblkid topology support


author: Karel Zak <kzak@redhat.com> 2.17.2-4
changelog:
  - fix #604875 - memory usage in wipefs(8)
  - fix #591133 - udev /dev/disk/by-uuid not populated
  - fix #602657 - fdisk -l does not show correctly partitions names for FCoE volumes
  - fix #591617 - lscpu does not use cpu masks properly


author: Karel Zak <kzak@redhat.com> 2.17.2-5
changelog:
  - fix #561111 - remount of tmpfs fails on RHEL6 alpha
  - fix #612668 - backport fsfreeze from util-linux-ng 2.18
  - fix #598631 - shutdown, reboot, halt and C-A-D don't work


author: Marek Kasik <mkasik@redhat.com> 2.28.1-2
changelog:
  - Don't crash when the history file is empty (#552076)
  - Fix mixed use of spaces and tabs in spec file
  - Set %defattr for devel subpackage
  - Add ChangeLog to docs of devel subpackage
  - Related: #543948


author: Daniel P. Berrange <berrange@redhat.com> - 0.0.3-5.fc12
changelog:
  - Fix auth against libvirt (rhbz #499594)
  - Fix confusion of VNC credentials (rhbz #499595)
  - Correct keyboard grab handling (rhbz #499362)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-1
changelog:
  - update to 1.2.0
  - remove libcurl and oggdec patches, applied upstream
  - drop unneeded autoconf BR
  - fix BuildRoot


author: Hans de Goede <j.w.r.degoede@hhs.n> - 1:1.2.0-2
changelog:
  - Stop calling autoconf, this was no longer necessarry and in current
    rawhide breaks us from building (because aclocal.m4 does not match
    the new autoconf version)
  - Drop our last 2 patches, they were modifying configure, but since we called
    autoconf after that in effect they were not doing anything, review has
    confirmed that they indeed are no longer needed)
  - Drop using system libtool hack, this is dangerous when the libtool used
    to generate ./configure and the one used differ
  - Remove various antique checks (for example check if RPM_BUILD_ROOT == /) 
  - Drop unnecessary explicit library Requires
  - Cleanup BuildRequires


author: Jiri Skala <jskala@rehat.com> - 2.2.2-1
changelog:
  - Resolves: #555321 - vsftpd segfaults with passive mode and SSL
  - updated to latest upstream version - fixes the bug #555321


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 0.5.2-11
changelog:
  - Add BR: lynx which provides "text-www-browser" virtual Provides
    to avoid BR dependency loop between gtk2-devel and w3m (shorter name wins
    the game with yum)
    Proposed by drago01 <drago01@gmail.com> rh#455734


author: Karsten Hopp <karsten@redhat.com> 1.12-1
changelog:
  - update to wget-1.12
  - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate
    with NUL in name


author: Steven Fernandez <steve@lonetwin.net> - 3.0-7
changelog:
  - Modified the %files sections for both packages to only include the link in
    the devel package and the .so in the main package.
  - Added %pre and %post sections


author: Petr Pisar <ppisar@redhat.com> - 3.0-12
changelog:
  - Install wishwn(1) manual page
  - Remove libX11-devel and libXft-devel BuildRequires as they are inherited
    from tk-devel. Keep tcl-devel as tcl.h is included directly.
  - Devel subpackage requires tcl-devel and tk-devel.


author: Joe Orton <jorton@redhat.com> 2.01_10-35
changelog:
  - use %{_localestatedir}, remove tabs, require httpd not
    webserver, mark webalizer.conf config(noreplace) (#226536)


author: Peter Gordon <peter@thecodergeek.com> - 1.1.15.1-3
changelog:
  - Forcibly disable JIT until we can properly resolve the execmem-caused
    segfaulting. (Temporary workaround until bug #516057 can be properly fixed.)
  - Remove the gnome-keyring build option (no longer used by the build scripts).
  - Correct release value of previous %changelog entry.


author: Matthias Clasen <mclasen@redhat.com> - 1.1.15.2-1
changelog:
  - Update to 1.1.15.2, which has multiple crash and other fixes
  - See https://lists.webkit.org/pipermail/webkit-gtk/2009-October/000040.html


author: Matthias Clasen <mclasen@redhat.com> - 1.1.15.3-1
changelog:
  - Update to 1.1.15.3, more crash fixes and important media player fixes
  - See https://lists.webkit.org/pipermail/webkit-gtk/2009-October/000047.html


author: Radek Vokal <rvokal@redhat.com> - 1.2.5-1
changelog:
  - upgrade to 1.2.5
  - fixes security vulnaribilities, see http://www.wireshark.org/security/wnpa-sec-2009-09.html


author: Radek Vokal <rvokal@redhat.com> - 1.2.6-1
changelog:
  - upgrade to 1.2.6
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.6.html 
  - minor spec file tweaks for better svn checkout support (#553500)
  - init.lua is present always and not only when lua support is enabled
  - fix file list, init.lua is only in -devel subpackage (#552406)
  - Autoconf macro for plugin development.


author: Radek Vokal <rvokal@redhat.com> - 1.2.8-1
changelog:
  - upgrade to 1.2.8
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.8.html
  - use sitearch instead of sitelib to avoid pyo and pyc conflicts 
  - bring back -pie
  - add patch to allow decode of NFSv4.0 callback channel
  - add patch to allow decode of more SMB FIND_FILE infolevels


author: Radek Vokal <rvokal@redhat.com> - 1.2.9-1
changelog:
  - upgrade to 1.2.9
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.9.html
  - Resolves: #604312


author: Jan Safranek <jsafrane@redhat.com> 1.2.10-1
changelog:
  - upgrade to 1.2.10
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.10.html
  - Resolves: #604312 (proper fix for CVE-2010-2284)


author: Jan Safranek <jsafrane@redhat.com> 1.2.13-1
changelog:
  - upgrade to 1.2.13
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.11.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.12.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.13.html
  - Resolves: #657534 (CVE-2010-4300 CVE-2010-3445)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.8-3
changelog:
  - Ensure the supplicant starts and ends with clean driver state
  - Handle driver disconnect spammage by forcibly clearing SSID
  - Don't switch access points unless the current association is dire (rh #493745)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.8-7
changelog:
  - Fix supplicant initscript return value (rh #521807)
  - Fix race when connecting to WPA-Enterprise/802.1x-enabled access points (rh #508509)
  - Don't double-scan when attempting to associate


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.1.0-5
changelog:
  - Use tarball from upstream
  - Add COPYING, README and AUTHORS to sources (previously placed in the, probably modified, tarball)


author: Ondrej Vasik <ovasik@redhat.com> - 1.60-4
changelog:
  - added support for up to 9 alternative numbers instead of 4
    (#178025, patch by V.Mencl)
  - gcc43 rebuild


author: Ondrej Vasik <ovasik@redhat.com> - 1.60-5
changelog:
  - fixed wvdial.conf (5) manpage (#440161)
  - change Compuserve "Classic" login prompt to the "new"
    style (#146664)


author: Ondrej Vasik <ovasik@redhat.com> - 1.60-11
changelog:
  - Merge review cleanup (#226546), comment patches, license
    to LGPLv2+, specify names in files section, fix source0 link...


author: Matthias Clasen <mclasen@redhat.com - 0.8-7
changelog:
  - Add translations for as, bn_IN, gu, hi, kn, ml, or, pa, ru,
    ta, te, zh_CN, zh_TW
  Resolves: #586399


author: Hans de Goede <hdegoede@redhat.com> 3.2.5-16
changelog:
  - Fix Text size field inserts characters on left instead of right (#490257)
  - Fix xfig-Xaw3d does not display messages in message panel (#490259)


author: Hans de Goede <hdegoede@redhat.com> 3.2.5-17
changelog:
  - Add various patches from Debian (doc updates, new figures in the lib,
    better fix for modepanel resizing)
  - Do not crash when inserting a character from the charmap into a text string


author: Hans de Goede <hdegoede@redhat.com> 3.2.5-18.a
changelog:
  - Rebase to new upstream 3.2.5a release, this was made available to me by
    the Debian maintainer who is in contact with upstream, which appearantly
    is still somewhat alive (but not alive enough to put the tarbal on the
    homepage ??)


author: Hans de Goede <hdegoede@redhat.com> 1.5E-12
changelog:
  - Remove obsolete PreReq and Prefix stuff from specfile
  - Fix BuildRoot to match the guidelines
  - Require base package by full EVR from devel package
  - Drop non relevant Patches and Sources
  - Rebase the still relevant patches
  - Actually apply the still relevant patches
  - Add a patch from Debian fixing an infinite loop (rh436998)
  - Add patches from Debian fixes various potential bufferoverflows


author: Michal Nowak <mnowak@redhat.com> - 0.3.2-1
changelog:
  - 0.3.2
  - remove rpath (x86-64)
  - xcb_keysyms: remove xcb_lookup_t
  - Revert "keysyms: use xcb_key_lookup_t type for col paramter"
  - temporary disabled %check due to RPATH regression


author: Neal Becker <ndbecker2@gmail.com> - 0.4-2
changelog:
  - Drop Vendor
  - Add Req dvipdfmx
  - Add doc
  - Add BR libpaper-devel
  - Drop Req fontconfig
  - Req changed to tex(tex)


author: Kalev Lember <kalev@smartlink.ee> 3.0.1-16
changelog:
  - Reintroduce a patch for CVE-2009-1885
  - Don't build static library
  - Use parallel make
  - Spec file clean up


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-4
changelog:
  - Two important fixes from 3.1.2 release (#590773)
  - Fix up attribute handling in xfs_fsr
  - Make sure xfs_admin writes both sb fields when changing lazy_count


author: Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-21
changelog:
  - fix glitches found during package review (#226560)
  - make all files in .debuginfo package readable by everyone


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-24
changelog:
  - select() function and it's supporting macros replaced by poll() and it's supporting macros
  - added patch of configure.in for clean compilation


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-27
changelog:
  - last update of init script modified to work with SELinux correctly
  - added support for new configuration option - file limit for service


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-28
changelog:
  - fixed an issue with flooding log with error messages (see fedora bug #573764)
  - fixed issue with segfaulting tcpmux service (fedora bug #543968)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.13.8-2
changelog:
  - fixed cmake quoting so that pkgconfig files get correct version number
  - fixed handling of 'server-util' and '--cflags' within xmlrpc-c-config


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.4.1567-2
changelog:
  - updated to 1.16.4
  - rediffed/updated patches
  - splitted some subpackages (c++, client) out of main package as they
    introduce additional dependencies (c++, curl)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.24-1200.1840
changelog:
  - updated to 1.16.24
  - rediffed patches
  - added patch fix handling of wrong certificates (Nikola Pajkovsky)
  - added support for $XMLRPC_TRACE_CURL env (John Dennis)
  - fixed 'xmlrpc-c-config --help' output (#531910)
  - build xmlrpc_pstream tool


author: Peter Hutterer <peter.hutterer@redhat.com> 2.3.2-2
changelog:
  - remove references to git builds and matching sources aux files.
  - remove libxkbfile-devel BuildRequires
  - actually disable autoreconf this time.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.3.2-7
changelog:
  - evdev-2.3.2-max-valuators-oob.patch: avoid OOB access when a device has
    more than MAX_VALUATORS axes (#609333)


author: Adam Jackson <ajax@redhat.com> 2.3.2-8
changelog:
  - 10-x11-lid.fdi: Add so switch devices appear to have an X driver in hal.
  - evdev-2.3.2-lid.patch: Scan for lid switch devices, translate events on
    them into RANDR rescans so the desktop will pick them up. (#618845)


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.21-6
changelog:
  - fix cleaning up of temporary files with libpaper(Debian)
  - fix xmllint postvalid (added noent option), use nonet
    switch


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.22-1
changelog:
  - New version 0.0.22
  - autodetection for tools/program paths, consolidated
    error code handling, build warnings cleanup


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.23-1
changelog:
  - New version 0.0.23
  - added autodetection for more common tools like
    gnu cp or tail
  - added option --noautosize to prevent overriding
    of user-defined or system-default paper size
  - use shell built-in 'type -t' instead of 'which'
    utility for detection of file availability


author: Adam Jackson <ajax@redhat.com> 1.2.0-5
changelog:
  - cirrus-1.2.0-qemu.patch: Detect qemu virtual video when we can, and default
    to 1024x768 in that case. (#251264)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.4.0-5
changelog:
  - fbdev-0.4.0-Make-ISA-optional.patch: to make next patch apply cleanly.
  - fbdef-0.4.0-Remove-useless-loader-symbol-lists.patch:
    fix linker error against X server >= 1.6.99.1


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3.0-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix indentation of Version and Release.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3.0-4
changelog:
  - User global instead of define as per Packaging Guidelines.
  - Fix indentation for Version and Release.


author: Xavier Bachelot <xavier@bachelot.org> - 0.2.903-10
changelog:
  - Update to latest snapshot (svn 740) :
    - Fix panel resolution detection fallback (RHBZ#491417).
    - Fix 2D engine initialization.
    - Add support for CX700 integrated TMDS encoder.


author: Xavier Bachelot <xavier@bachelot.org> - 0.2.903-11
changelog:
  - Update to latest snapshot (svn 751) :
    - Add support for VX800 integrated TMDS encoder.
    - Make sure Chrome9 chipsets use software rasterizer for 3D.
    - Various small fixes.
  - Add patch for VX855 support.
  - Add patch to fix cursor on secondary display.
  - Add patch to disable TMDS by default.


author: Xavier Bachelot <xavier@bachelot.org> - 0.2.903-12
changelog:
  - Update to latest snapshot (svn 758) :
    - Basic VX855 support.
    - Fix pci space corruption on P4M900 (RHBZ#506622).
    - Fix null pointer dereference in viaExaCheckComposite (RHBZ#449034).
  - Add patch to allow 1200x900 panel (X0-1.5).
  - Add patch to remove loader symbol lists, needed for xserver 1.7 (RHBZ#510206).
  - Add experimental patch for better VT1625 support.
  - Drop upstreamed patches.


author: Adam Jackson <ajax@redhat.com> 2.11.0-2
changelog:
  - intel-2.11.0-vga-clock-max.patch: Clamp VGA pixel clock to 250MHz,
    anything higher's going to look awful anyway. (#559426)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.0-3
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix tab/space mixup.
  - Remove obsolete (and commented-out) keyboard_drv files.
  - Remove traces from building from git


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix indentation for Version and Release.


author: Ben Skeggs <bskeggs@redhat.com> 0.0.15-19.20091105gite1c2efd
changelog:
  - Sync up fixes from current F12 package
  - nouveau-kms-noaccel-fixes.patch: fix crash on fb resize when using
    shadowfb (rh#538238)
  - nouveau-nv04_nodcb.patch: assume nv04 doesn't have a DCB table (rh#555202)
  - nouveau-randr-fixes.patch: fix fb resize/rotate on <nv50 (rh#532978)
  - nouveau-libdrm-compat.patch: fix build against libdrm 2.4.17


author: Adam Jackson <ajax@redhat.com> 2.1.15-2
changelog:
  - nv-2.1.15-g80-nop-gamma.patch: Install a no-op gamma hook so we don't
    crash immediately on init.


author: Hans de Goede <hdegoede@redhat.com> 0.0.12-2.1.el6_0.1
changelog:
  - Fix crash and vga font corruption when switching vc
    Resolves: rhbz#648935
  - Add support for many more resolutions and enable resolutions > 1024x768
    without requiring an xorg.conf
    Resolves: rhbz#648933


author: Peter Hutterer <peter.hutterer@redhat.com> 12.6.3-3
changelog:
  - Revert last commit, this is against Fedora policy.
    https://fedoraproject.org/wiki/Packaging:Guidelines#Configuration_files


author: Adam Jackson <ajax@redhat.com> 1.2.0-3
changelog:
  - synaptics-1.2.0-timer-fix.patch: Don't free the timer in DeviceClose, since
    that gets called on VT switch. (#540248)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.0-4
changelog:
  - remove references to git builds and git matching sources aux files.
  - disable autoreconf, we're building from a tarball.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.0-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Remove spaces/tabs mixup to silence rpmlint.


author: Adam Jackson <ajax@redhat.com> 1.2.1-1
changelog:
  - rebase to 1.2.1
  - synaptics-1.2.1-timer-fix.patch: Don't clobber the timer immediately after
    creating it. (#573669)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-2
changelog:
  - synaptics-1.2.1-clickfinger-defaults: disable clickfingers if middle or
    right button was detected (#588612)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-4
changelog:
  - synaptics-1.2.1-man-page-fixes.patch: Update man page to bring it more
    in-line with the real information (#604483)
  - synaptics-1.2.1-force-mode.patch: don't allow any mode but Relative
    (#604485)


author: Adam Jackson <ajax@redhat.com> 2.3.0-1
changelog:
  - vesa 2.3.0
  - vesa-avoid-24bpp.patch: Avoid 24bpp if 16bpp is available, ugly workaround
    for an xserver crash with virt (#555221)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.1-1
changelog:
  - wacom 0.10.1
  - Remove unnecessary 'find' directive, changed upstream.
  - Add GPL document
  - Install 10-wacom.fdi file.
  - Provides: linuxwacom


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.1-2
changelog:
  - 10-linuxwacom.fdi: squash extra entry for bluetooth tablet into general
    Wacom match. 
  - 10-linuxwacom.fdi: remove info.parent condition for N-Trig (#538036)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.4-1
changelog:
  - wacom 0.10.4
  - Update sources to point to sourceforge.
  - Install the upstream fdi file instead of our custom one.
  - Update Requires and BuildRequires for xsetwacom.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-2
changelog:
  - wacom-0.10.5-linuwacom-man-page.patch: drop reference to linuxwacom from
    man page (#584588)
  - wacom-0.10.5-pad-scrolling.patch: force relative mode for pad (#584589)
  - wacom-0.10.5-tpcbutton-on.patch: enable TPCButton for ISDV4 devices
    (#584597)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-4
changelog:
  - Remove wacom-0.10.5-axis-mode.patch: this is an X server bug (#594523)
  - wacom-0.10.5-relative-pressure.patch: subtract old pressure from new
    pressue values to get a relative value (#597932)
  - wacom-0.10.05-xsetwacom-man-page.patch: add xsetwacom man page (#598312)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-5
changelog:
  - wacom-0.10.5-wheel-events.patch: don't convert the wheel events to scroll
    events for anything but the pad (#593948)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-6
changelog:
  - wacom-0.10.5-keycodes-not-keysyms.patch: load keycodes into the driver,
    not keysyms. Avoids server hangs when XkbGetCoreMap() allocs in signal
    handler (#616653)
  - wacom-0.10.5-scroll-wheel-zoom.patch: zoom with wheel, not ctrl+/- since
    the latter is now layout-dependent.


author: Adam Jackson <ajax@redhat.com> 1:7.2-3
changelog:
  - Move bdftruncate (and its perl dependency) to a subpackage.
  - %doc for the non-empty READMEs and non-stub COPYINGs.


author: Nils Philippsen <nils@redhat.com> 0.997-3
changelog:
  - Merge Review (#226658):
    - replace %desktop_vendor macro with "fedora"
    - fix xsane-gimp requirements
    - move EULA and documentation into -common subpackage


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.7-17
changelog:
  - xserver-1.7.7-xkb-purge-includes.patch: purge some includes, from master,
    prep-work for lockedPtrBtns.
  - xserver-1.7.7-xkb-rename-fakebutton.patch: rename + move XKB fake PointerKey
    event functions, prep-work for lockedPtrBtns.
  - xserver-1.7.7-xkb-pointerkeys-on-master.patch: don't send key and motion
    events for PointerKeys motion events. (related #607150)
  - xserver-1.7.7-xkb-lockedPtrBtns-state-merge.patch: merge the state from
    SD's lockedPtrBtns to the MD to avoid stuck buttons (#607150)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.7-19
changelog:
  - xserver-1.7.7-release-xtest-on-phys-buttons.patch: release XTEST buttons
    on physical button releases (#607150)


author: Adam Jackson <ajax@redhat.com> 1.7.7-20
changelog:
  - xserver-1.7.7-xephyr-24bpp.patch: Fix crash in Xephyr when running on a
    24bpp host framebuffer. (#581505)


author: Adam Jackson <ajax@redhat.com> 1.7.7-21
changelog:
  - xserver-1.7.7-int10-reserved-areas.patch: Fix vesa driver (and int10
    services generally) when VBIOS code exists below the VGA memory
    hole. (#605302)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.7-22
changelog:
  - xserver-1.7.7-postfix-DCE-PointerKeys.patch: post-fix event sequences by
    PointerKeys with DeviceChangeEvents (#618422)
  - xserver-1.7.7-reset-unused-classes.patch: reset the classes after copying
    them from the buffer. Fixes double-free on CloseDownDevices() exposed
    by xserver-1.7.7-postfix-DCE-PointerKeys.patch.


author: Adam Jackson <ajax@redhat.com> 1.7.7-23
changelog:
  - xserver-1.7.7-lid-hack.patch: Account for lid status when multiple outputs
    appear to be connected. (#601319)
  - xserver-1.6.99-randr-error-debugging.patch: Fix thinko to print the
    contents of the triggering request, not the address.


author: Adam Jackson <ajax@redhat.com> 1.7.7-24
changelog:
  - xserver-1.7.7-randr-cursor-dead-zones.patch: Clip cursor motion to CRTC
    boundaries if all your CRTCs are contiguous. (#585283)


author: Adam Jackson <ajax@redhat.com> 7.4-5
changelog:
  - Split xkeystone into a subpackage for nickle dependency.  Also, don't build
    it by default, since we don't have the cairo bindings packaged yet.


author: Adam Jackson <ajax@redhat.com> 7.4-14
changelog:
  - Drop xcmsdb, no one uses XCMS.
  - rgb 1.0.3
  - xgamma 1.0.3
  - xhost 1.0.3
  - xrefresh 1.0.3
  - xsetroot 1.0.3


author: Mike A. Harris <mharris@redhat.com> 1:1.0.1-3
changelog:
  - Bump and rebuild with minor specfile cleanups.
  - Add documentation to doc list, even though half of it is 0 bytes. Ah well.


author: Adam Jackson <ajax@redhat.com> 7.3-3
changelog:
  - xdpyinfo-1.0.2-silence-misc-errors.patch: Make xf86misc and xf86dga protocol
    errors non-fatal. (#442176)


author: Adam Jackson <ajax@redhat.com> 7.4-3
changelog:
  - Drop xdriinfo.  Would be better suited to being in Mesa's glx-utils
    subpackage anyway. (#456609)


author: Matthias Clasen <mclasen@redhat.com> 1.0.9-4
changelog:
  - Make the gnome session actually take the gnome case in the switch (#458694)
  - Update patches
  - Drop upstreamed patch


author: Adam Tkac <atkac redhat com> 1.0.9-5
changelog:
  - run ck-xinit-session for all sessions where the xdg cookie isn't already
    set (#452156, patch from Patrice Dumas)
  - add which Requires (#413041, patch from Patrice Dumas)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.9-8
changelog:
  - have ck-xinit-session tell the session bus to set
    XDG_SESSION_COOKIE for services which it autostarts (#502258)
  - add direct build dependency on dbus-devel, since we call it
    directly now


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-9
changelog:
  - consider scripts in /etc/X11/xinit/Xclients.d/ as well
  - add back scripts in Release -7 and -8 from F11 branch.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-7
changelog:
  - xkbcomp 1.0.5
  - Remove xkbcomp-1.0.4-open-less.patch.
  - xkbcomp-1.0.5-dont-overwrite.patch: Don't overwrite groups unnecessarily.


author: Milan Zazrivec <mzazrivec@redhat.com> 2.1.3-0.2
changelog:
  - Rebased XQilla to latest upstream version 2.1.3
  - Fixed files section in spec (documentation was included twice)


author: Kalev Lember <kalev@smartlink.ee> - 2.2.3-8
changelog:
  - Require fully versioned main package for -devel subpackage
  - Don't build static library
  - Removed library Requires which are automatically picked up by rpm
  - Removed spurious BR autoconf automake libtool
  - Build -doc subpackage as noarch
  - Install documentation with %doc macro
  - Use %{_prefix} instead of hardcoding /usr
  - Use parallel make
  - Various other spec file clean ups


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-20
changelog:
  - Bind to domain even if not using NetworkManager
    The fix uses  only the code from upstream ypbind-mt-1.29.91
    Resolves: #531398


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-21
changelog:
  - Added signalstate patch, which fixes compilation with
    NetworkManaged-devel headers installed. Resolves 537064.
    Related: rhbz#543948


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-22
changelog:
  - Rewrote initscript to become closer to Packaging:SysVInitScript
    Fedora guildeline. The change also fixes bug 523913


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-25
changelog:
  - Moved /sbin/ypbind to /usr/sbin/ypbind, as the package
    depends on several utilities from /usr (selinuxenabled,
    rpcinfo, ypwhich), and /usr/lib/libdbus-glib-1.so
    Resolves: #593271
  - Fixed previous ChangeLog entry header


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-26
changelog:
  - Fix "dereferencing type-punned pointer will break strict-aliasing rules"
    GCC warning
    Resolves #596221


author: Bill Nottingham <notting@redhat.com> 4.999.8-0.6.beta
changelog:
  - fix release versioning to match guidelines
  - fix up lzma-compat summary/description
  - tweak licensing


author: Jindrich Novy <jnovy@redhat.com> 4.999.9-0.3.20091007.beta
changelog:
  - move xz man pages to main package, leave lzma ones where they belong
  - remove URL from Source0, it is a git snapshot


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-7
changelog:
  - Translation updates for Red Hat Supported Languages (RH bug #575674).
  - This also includes the fix for the or_IN crasher (RH bug #578094).


author: Karel Klic <kklic@redhat.com> - 2.19-14
changelog:
  - Removed Prereq use in the spec file
  - Removed usage of RPM_SOURCE_DIR from the spec file
  - Removed --enable-yppasswd from configure, as this option
    is ignored


author: Karel Klic <kklic@redhat.com> - 2.19-15
changelog:
  - Added patch for rpc.ypxfrd to create a pid file
  - Rewrote initscripts to become closer to Packaging:SysVInitScript
    Fedora guildeline
  - Fixed initscript for ypserv (bug 523438)
  - Fixed initscript for yppasswdd (bug 523394)
  - Fixed initscript for ypxfrd (bug 523397)


author: Seth Vidal <skvidal at fedoraproject.org> - 1.1.2-14
changelog:
  - apply latest patches from upstream - consolidate into one big patch
  - test before a 1.1.3 from upstream


author: Ivana Varekova <varekova@redhat.com> - 2.31-4
changelog:
  - fix "zip does not honor umask setting when creating archives"
  - fix "zip segfaults by attempt to archive big file"
  - spec file cleanup


author: Karel Klic <kklic@redhat.com> - 3.0-1
changelog:
  - New upstream version
  - Removed zip23.patch, because ZMEM is not used anyway
  - Removed zip-2.31-install.patch, problem solved in upstream
  - Removed zip23-umask.patch, upstream uses mkstemp which solves the problem
  - Removed zip-2.31-near-4GB.patch, because upstream version 
    handles large files well
  - Removed zip-2.31-configure.patch, configure is better in the current version
  - Removed zip-2.3-sf.patch, the error message doesn't exist in upstream anymore
  - Removed zip-2.31-umask_mode.patch, which fixes also removed near-4GB patch
  - Updated zip-2.31-time.patch for zip 3.0
  - Updated exec-shield.patch for zip 3.0
  - Updated zip-2.3-currdir.patch for zip 3.0


author: Stepan Kasal <skasal@redhat.com> - 1.2.3-21
changelog:
  - consolidate the autoconfiscation patches into one and clean it up
  - consequently, clean up the %build and %install sections
  - zconf.h includes unistd.h again (#479133)


author: James Antill <james@fedoraproject.org> - 4.3.4-7
changelog:
  - Tweak /etc/zshrc to source /etc/profile.d/*.sh in ksh compat. mode
  - Tweak /etc/zprofile to source /etc/profile in ksh compat. mode
  - Resolves: rhbz#430665


author: James Antill <james@fedoraproject.org> - 4.3.6-5
changelog:
  - Import new upstream 4.3.6
  - Rebase 8bit prompt patch
  - Add patch fuzz=2
  - Add BuildReq on /bin/hostname directly
  - FIXME: These should all be unpatched, at some point.
  - Don't test /dev/fd as mock doesn't like it
  - Don't test the modload module, as mock doesn't like loading them all
  - Don't test the select test in A01grammar, stdin/stderr racy?


author: Stephan Wiesand <stephan wiesand desy de> 1.5.74-79.SLx
changelog:
  - 1.5.74 release
  - F10 -> SL6
  - changed how to determine the domain (hostname -d/-f may not work)
  - restorevol moved from sbin to bin


author: Stephan Wiesand <stephan wiesand desy de> 1.5.74-80.z1.SLx
changelog:
  - more SL6 changes:
  - use afsvers macro instead of PACKAGE_VERSION which is no longer available
  - patch1075 to fix kernel panic on module load
  - and: buildrequire make...


author: Stephan Wiesand <stephan wiesand desy de> 1.5.76-81.SLx
changelog:
  - update to latest feature release
  - patch1075 should no longer be required
  - libkopenafs is now 1.1
  - DAFS is built by default - added files to openafs-server
  - added the new krb.excl(5) manpage to openafs-server


author: Stephan Wiesand <stephan wiesand desy de> 1.5.78-83.SLx
changelog:
  - update to latest feature release
  - enable dugging symbols by default
  - there is no more /usr/include/potpourri.h
  - module is called ...mp.ko again?


author: Stephan Wiesand <stephan wiesand desy de> 1.5.78-84.SLx
changelog:
  - removed support for SL3/4, greatly simplifying the spec
  - removed support for ia32e, ia64, athlon, ...
  - removed all old patches and obsolete sources (like openafs-krb5.tar.gz)
  - relaxed requirements between userland and kernel-module package
  - updated Changelog & Relnotes, and made sure we do so in the future
  - don't package the afs_compile_et manpage in the main packages as well
  - don't add -fPIC to CFLAGS (be compatible with openafs.org spec)
  - configure: no --enable-debug[-kernel] by default (be compatible with openafs.org spec)
  - configure: added --disable-strip-binaries (be compatible with openafs.org spec)
  - configure: added --with-linux-kernel-packaging (be compatible with openafs.org spec)
  - this also renames the module to openafs.ko, so change in rc script
  - configure: added --disable-kernel-module to non-module builds
  - and moved the build requirement on kernel-devel to the module package
  - the server package shouldn't require the kernel module
  - debugspec can now be defined on the command line, and defaults to 0
  - moved much of the kernel/kvers/****dir voodoo into openafs-sl-defs.sh
  - which also replaces openas-lslrelease-helper.sh (and no longer stes SL5 on SL6)
  - updated CellServDB to latest from grand.central.org (Dec 13, 2010)


author: Stephan Wiesand <stephan wiesand desy de> 1.5.78-86.SLx
changelog:
  - don't strip any binaries, let rpm do the job
  - new in openafs-debug: cacheout, afscp, fsx
  - new in openafs-client: afsio
  - moved into main package: restorevol
  - moved into openafs-server: ka-forwarder + manpage
  - server package should own /usr/afs/etc
  - moved into openafs-authlibs: libkopenafs.so.1[.1]
  - moved into openafs-authlibs-devel: libkopenafs.{a,so}, kopenafs.h, libafs{authent,rpc}.a 
  - fixed chcon in server's post script for SL6
  - introduced the ability to build a kabi-tracking kmod (define build_kmod 1)
  - introduced a switch to disable building the fuse client
  - and unless that switch is used, buildrequire fuse-devel and package afsd.fuse
  - other minor changes to make rpmlint less unhappy
  - renamed openafs-debug to openafs-plumbing-tools
  - moved fssync-debug and manpages into -plumbing-tools
  - enabled debugsyms by default again, no effect on kernel module


author: Peter Robinson <pbrobinson@gmail.com> - 3.2.1-1
changelog:
  - Ekiga 3.2.1 stable - Changelog
    http://mail.gnome.org/archives/ekiga-devel-list/2009-May/msg00054.html


author: Peter Robinson <pbrobinson@gmail.com> - 3.2.4-1
changelog:
  - Ekiga 3.2.4 stable - Changelog
    http://mail.gnome.org/archives/ekiga-devel-list/2009-May/msg00062.html
    http://mail.gnome.org/archives/ekiga-devel-list/2009-May/msg00064.html


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.9.1.el6]
changelog:
  - [fs] Do not mix FMODE_ and O_ flags with break_lease() and may_open() (Harshula Jayasuriya) [648408 642677]
  - [fs] aio: check for multiplication overflow in do_io_submit (Jeff Moyer) [629450 629451] {CVE-2010-3067}
  - [net] fix info leak from kernel in ethtool operation (Neil Horman) [646727 646728] {CVE-2010-3861}
  - [net] packet: fix information leak to userland (Jiri Pirko) [649899 649900] {CVE-2010-3876}
  - [net] clean up info leak in act_police (Neil Horman) [636393 636394] {CVE-2010-3477}
  - [kernel] sys_semctl: fix kernel stack leakage (Danny Feng) [648723 648724] {CVE-2010-4083}
  - [sound] sound/pci/rme9652: prevent reading uninitialized stack memory (Stanislaw Gruszka) [648710 648715 648711 648716] {CVE-2010-4080 CVE-2010-4081}
  - [mm] Prevent Out Of Memory when changing cpuset's mems on NUMA (Larry Woodman) [651996 597127]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.10.1.el6]
changelog:
  - [fs] xfs: prevent reading uninitialized stack memory (Dave Chinner) [630808 630809] {CVE-2010-3078}
  - [net] fix rds_iovec page count overflow (Jiri Pirko) [647423 647424] {CVE-2010-3865}
  - [scsi] Fix megaraid_sas driver SLAB memory leak detected with CONFIG_DEBUG_SLAB (Shyam Iyer) [649436 633836]
  - [usb] serial/mos*: prevent reading uninitialized stack memory (Don Zickus) [648697 648698] {CVE-2010-4074}
  - [kernel] ecryptfs_uid_hash() buffer overflow (Jerome Marchand) [626320 611388] {CVE-2010-2492}
  - [sound] seq/oss - Fix double-free at error path of snd_seq_oss_open() (Jaroslav Kysela) [630554 630555] {CVE-2010-3080}
  - [virt] virtio-net: init link state correctly (Jason Wang) [653340 646369]
  - [netdrv] prevent reading uninitialized memory in hso driver (Thomas Graf) [633143 633144] {CVE-2010-3298}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.11.1.el6]
changelog:
  - [kernel] posix-cpu-timers: workaround to suppress the problems with mt exec (Oleg Nesterov) [656267 656268] {CVE-2010-4248}
  - [fs] bio: take care not overflow page count when mapping/copying user data (Danny Feng) [652530 652531] {CVE-2010-4162}
  - [net] can-bcm: fix minor heap overflow (Danny Feng) [651846 651847] {CVE-2010-3874}
  - [net] filter: make sure filters dont read uninitialized memory (Jiri Pirko) [651704 651705] {CVE-2010-4158}
  - [net] inet_diag: Make sure we actually run the same bytecode we audited (Jiri Pirko) [651268 651269] {CVE-2010-3880}
  - [v4l] ivtvfb: prevent reading uninitialized stack memory (Mauro Carvalho Chehab) [648832 648833] {CVE-2010-4079}
  - [drm] via/ioctl.c: prevent reading uninitialized stack memory (Dave Airlie) [648718 648719] {CVE-2010-4082}
  - [char] nozomi: clear data before returning to userspace on TIOCGICOUNT (Mauro Carvalho Chehab) [648705 648706] {CVE-2010-4077}
  - [serial] clean data before filling it on TIOCGICOUNT (Mauro Carvalho Chehab) [648702 648703] {CVE-2010-4075}
  - [net] af_unix: limit unix_tot_inflight (Neil Horman) [656761 656762] {CVE-2010-4249}
  - [block] check for proper length of iov entries in blk_rq_map_user_iov() (Danny Feng) [652958 652959] {CVE-2010-4163}
  - [net] Limit sendto()/recvfrom()/iovec total length to INT_MAX (Jiri Pirko) [651894 651895] {CVE-2010-4160}
  - [netdrv] mlx4: Add OFED-1.5.2 patch to increase log_mtts_per_seg (Jay Fenlason) [643815 637284]
  - [kernel] kbuild: fix external module compiling (Aristeu Rozanski) [658879 655231]
  - [net] bluetooth: Fix missing NULL check (Jarod Wilson) [655667 655668] {CVE-2010-4242}
  - [kernel] ipc: initialize structure memory to zero for compat functions (Danny Feng) [648694 648695] {CVE-2010-4073}
  - [kernel] shm: fix information leak to userland (Danny Feng) [648688 648689] {CVE-2010-4072}
  - [md] dm: remove extra locking when changing device size (Mike Snitzer) [653900 644380]
  - [block] read i_size with i_size_read() (Mike Snitzer) [653900 644380]
  - [kbuild] don't sign out-of-tree modules (Aristeu Rozanski) [655122 653507]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.12.1.el6]
changelog:
  - [netdrv] igb: only use vlan_gro_receive if vlans are registered (Stefan Assmann) [652804 660192] {CVE-2010-4263}
  - [net] core: neighbour update Oops (Jiri Pirko) [660591 658518]
  - [scsi] lpfc: Set heartbeat timer off by default (Rob Evers) [660244 655935]
  - [scsi] lpfc: Fixed crashes for BUG_ONs hit in the lpfc_abort_handler (Rob Evers) [659611 645882]


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.3
changelog:
  - Support repetition of --addtag and --deltag arguments.
  - Add infrastructure for specific cmdline arguments to be repeated in groups.
  - Split the_args cmdline arguments and values into arg_props and arg_values.
  - Fix fsadm to not require '-f' for resize of unmounted filesystem.
  - Fix fsadm to detect mounted filesystems on older system
  - Fix regex optimiser not to ignore RHS of OR nodes in _find_leftmost_common.
  - Update VG metadata only once in vgchange when making multiple changes.
  - Allow independent vgchange arguments to be used together.
  - Fix vgchange to process -a, --refresh, --monitor and --poll like lvchange.
  - Don't take write lock in vgchange --refresh, --poll or --monitor.
  - Skip dm devices in scan if they contain only error targets or are empty.


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid thread-related segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
    Do not ignore test failure on ppc64.
  - Resolves: rhbz#653824


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.4
changelog:
  - Resolves: rhbz#660592 - SSSD shutdown sometimes hangs
  - Resolves: rhbz#660585 - getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.10-43
changelog:
  - 630019 set correct (f)pie build flags
  - 615104 fix double echo in initscript
  - 589099 Wrong file permissions for atd configuration
  - Resolves: rhbz#630019, rhbz#615104, rhbz#589099


author: Stephan Wiesand <stephan wiesand desy de> 1.6.0-90.pre1.SLx
changelog:
  - let openafs-client own the /afs mountpoint to avoid selinux troubles
  - change initdir macro to /etc/rc.d/init.d (like upstream), and use it everywhere


author: Stephan Wiesand <stephan wiesand desy de> 1.6.0-91.pre2.SLx
changelog:
  - update to next prerelease
  - package /afs as ghost, and create it in post again - and fix the label


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.33.b17
changelog:
  - bumped release number, it was accidentaly reduced, and now lower version then last one was released.
  - Resolves: rhbz#676295


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.15.1.el6]
changelog:
  - [net] bonding: prevent oopsing on calling pskb_may_pull on shared skb (Andy Gospodarek) [671342 665110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.16.1.el6]
changelog:
  - [net] ipsec: fragment locally generated tunnel-mode IPSec6 packets as needed (Herbert Xu) [670421 661113]
  - [net] tcp: Increase TCP_MAXSEG socket option minimum to TCP_MIN_MSS (Frantisek Hrbata) [652510 652511] {CVE-2010-4165}
  - [perf] perf_events: Fix perf_counter_mmap() hook in mprotect() (Oleg Nesterov) [651672 651673] {CVE-2010-4169}
  - [md] dm mpath: revert "dm: Call blk_abort_queue on failed paths" (Mike Snitzer) [658854 636771]
  - [x86] UV: Address interrupt/IO port operation conflict (George Beshers) [662921 659480]
  - [mm] guard page for stacks that grow upwards (Johannes Weiner) [666796 630562]
  - [scsi] enable state transistions from OFFLINE to RUNNING (Mike Christie) [660590 643237]
  - [scsi] set queue limits no_cluster for stacked devices (Mike Snitzer) [662050 658293]
  - [mm] Out-of-memory under memory cgroup can call both of oom-killer-for-memcg and oom-killer-for-page-fault (Larry Woodman) [661732 592879]
  - [scsi] libfc: possible race could panic system due to NULL fsp->cmd (Mike Christie) [662049 638297]
  - [kernel] exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [kernel] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [virt] virtio: console: Send SIGIO in case of port unplug (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO on new data arrival on ports (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO to processes that request it for host events (Amit Shah) [652720 624628]
  - [virt] virtio: console: Reference counting portdev structs is not needed (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add reference counting for port struct (Amit Shah) [662721 628805]
  - [virt] virtio: console: Use cdev_alloc() instead of cdev_init() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a find_port_by_devt() function (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a list of portdevs that are active (Amit Shah) [662721 628805]
  - [virt] virtio: console: open: Use a common path for error handling (Amit Shah) [662721 628805]
  - [virt] virtio: console: remove_port() should return void (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make write() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make read() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Unblock poll on port hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Un-block reads on chardev close (Amit Shah) [662721 628805]
  - [virt] virtio: console: Check if portdev is valid in send_control_msg() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Remove control vq data only if using multiport support (Amit Shah) [662721 628805]
  - [virt] virtio: console: Reset vdev before removing device (Amit Shah) [662721 628805]
  - [fs] Fix nfsv4 client lock reclaim behaviour (Sachin Prabhu) [661730 638269]
  - [scsi] scsi_dh_alua: Handle all states correctly (Mike Snitzer) [659610 636994]
  - [kernel] execve: improve interactivity and respond to SIGKILL with large arguments (Dave Anderson) [661731 629178]
  - [virt] xen: handle events as edge-triggered (Andrew Jones) [661737 550724]
  - [virt] xen: use percpu interrupts for IPIs and VIRQs (Andrew Jones) [661737 550724]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.17.1.el6]
changelog:
  - [s390x] kdump: allow zfcpdump to mount and write to ext4 file systems (Amerigo Wang) [661667 628676]
  - [scsi] qla2xxx: Properly set the return value in function qla2xxx_eh_abort (Chad Dupuis) [664398 635710]
  - [scsi] qla2xxx: Drop srb reference before waiting for completion (Chad Dupuis) [664398 635710]
  - [virt] KVM: VMX: Really clear cr0.ts when giving the guest ownership of the fpu (Avi Kivity) [658891 645898]
  - [virt] KVM: SVM: Initialize fpu_active in init_vmcb() (Avi Kivity) [658891 645898]
  - [virt] KVM: x86: Use unlazy_fpu() for host FPU (Avi Kivity) [658891 645898]
  - [virt] KVM: Set cr0.et when the guest writes cr0 (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Give the guest ownership of cr0.ts when the fpu is active (Avi Kivity) [658891 645898]
  - [virt] KVM: Lazify fpu activation and deactivation (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Allow the guest to own some cr0 bits (Avi Kivity) [658891 645898]
  - [virt] KVM: Replace read accesses of vcpu->arch.cr0 by an accessor (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: trace clts and lmsw instructions as cr accesses (Avi Kivity) [658891 645898]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.18.1.el6]
changelog:
  - [netdrv] ixgbe: make sure FCoE DDP user buffers are really released by the HW (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: invalidate FCoE DDP context when no error status is available (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: avoid doing FCoE DDP when adapter is DOWN or RESETTING (Frantisek Hrbata) [674002 617193]
  - [fcoe] libfc: remove tgt_flags from fc_fcp_pkt struct (Mike Christie) [666797 633915]
  - [fcoe] libfc: use rport timeout values for fcp recovery (Frantisek Hrbata) [666797 633915]
  - [fcoe] libfc: incorrect scsi host byte codes returned to scsi-ml (Mike Christie) [666797 633915]
  - [scsi] scsi_dh_alua: fix overflow in alua_rtpg port group id check (Mike Snitzer) [673978 670572]


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error, and hang or crash in the KDC when using
    the LDAP kdb backend (CVE-2010-4022, CVE-2011-0281, CVE-2011-0282, #671101)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.6
changelog:
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681564)


author: Jan Safranek <jsafrane@redhat.com> 0.36-6.1
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Tom Lane <tgl@redhat.com> 5.1.52-1.1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652553
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Jan Vcelak <jvcelak@redhat.com> 2.4.19-15.1
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.1
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.2
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.3
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: Tom Lane <tgl@redhat.com> 8.4.7-1.el6_0.1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672634


author: Jan Safranek <jsafrane@redhat.com> 1.2.15-1
changelog:
  - upgrade to 1.2.15
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.14.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html
  - Resolves: CVE-2011-0444 CVE-2011-0538 CVE-2011-0713 CVE-2011-1139
    CVE-2011-1140 CVE-2011-1141 CVE-2011-1143


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6_0.4
changelog:
  - kvm-spice-qxl-make-draw_area-and-vgafb-share-memory.patch [bz#653334]
  - kvm-spice-qxl-update-modes-ptr-in-post_load.patch [bz#653334]
  - kvm-spice-qxl-enable-some-highres-modes.patch [bz#653329]
  - kvm-add-MADV_DONTFORK-to-guest-physical-memory-v2.patch [bz#653343]
  - kvm-qxl-clear-dirty-rectangle-on-resize.patch [bz#653341]
  - kvm-fix-and-on-russian-keymap.patch [bz#653337]
  - kvm-net-delay-freeing-peer-host-device.patch [bz#648821]
  - Resolves: bz#648821
    ([RHEL6 Snap13]: Hot-unplugging of virtio nic issue in Windows2008 KVM guest.)
  - Resolves: bz#653329
    (support high resolutions)
  - Resolves: bz#653334
    (spice: prepare qxl for 6.1 update.)
  - Resolves: bz#653337
    (Incorrect russian vnc keymap)
  - Resolves: bz#653341
    (Qemu becomes unresponsive during unattended_installation)
  - Resolves: bz#653343
    (Cannot hot-plug nic in windows VM when the vmem is larger)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6_0.5
changelog:
  - kvm-cleanup-block-driver-option-handling-in-vl.c.patch [bz#662058]
  - kvm-Add-cache-unsafe-parameter-to-drive.patch [bz#662058]
  - kvm-move-unsafe-to-end-of-caching-modes-in-help.patch [bz#662058]
  - kvm-qemu-img-Eliminate-bdrv_new_open-code-duplication.patch [bz#662058]
  - kvm-qemu-img-Fix-BRDV_O_FLAGS-typo.patch [bz#662058]
  - kvm-qemu-img-convert-Use-cache-unsafe-for-output-image.patch [bz#662058]
  - Resolves: bz#662058
    (qemu-img convert poor performance)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6_0.6
changelog:
  - kvm-Revert-spice-qxl-make-draw_area-and-vgafb-share-memo.patch [bz#653334]
  - kvm-Revert-spice-qxl-update-modes-ptr-in-post_load.patch [bz#653334]
  - Related: bz#653334
    (spice: prepare qxl for 6.1 update.)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6_0.7
changelog:
  - kvm-ide-Remove-redundant-IDEState-member-conf.patch [bz#677170]
  - kvm-ide-Split-ide_init1-off-ide_init2-v2.patch [bz#677170]
  - kvm-ide-Change-ide_init_drive-to-require-valid-dinfo-arg.patch [bz#677170]
  - kvm-ide-Split-non-qdev-code-off-ide_init2.patch [bz#677170]
  - kvm-qdev-Don-t-leak-string-property-value-on-hot-unplug.patch [bz#677170]
  - kvm-blockdev-New-drive_get_by_blockdev-v2.patch [bz#677170]
  - kvm-blockdev-Clean-up-automatic-drive-deletion-v2.patch [bz#677170]
  - kvm-qdev-Decouple-qdev_prop_drive-from-DriveInfo-v2.patch [bz#677170]
  - kvm-block-Catch-attempt-to-attach-multiple-devices-to-a-.patch [bz#677170]
  - kvm-Implement-drive_del-to-decouple-block-removal-from-d.patch [bz#677170]
  - kvm-blockdev-check-dinfo-ptr-before-using-v2.patch [bz#677170]
  - kvm-blockdev-Fix-drive_del-not-to-crash-when-drive-is-no.patch [bz#677170]
  - kvm-Fix-CVE-2011-0011-qemu-kvm-Setting-VNC-password-to-e.patch [bz#668598]
  - Resolves: bz#668598
    (CVE-2011-0011 qemu-kvm: Setting VNC password to empty string silently disables all authentication [rhel-6.0.z])
  - Resolves: bz#677170
    (drive_del command to let libvirt safely remove block device from guest)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6_0.8
changelog:
  - kvm-Revert-blockdev-Fix-drive_del-not-to-crash-when-driv.patch [bz#677170]
  - kvm-Revert-blockdev-check-dinfo-ptr-before-using-v2.patch [bz#677170]
  - kvm-Revert-Implement-drive_del-to-decouple-block-removal.patch [bz#677170]
  - kvm-Revert-block-Catch-attempt-to-attach-multiple-device.patch [bz#677170]
  - kvm-Revert-qdev-Decouple-qdev_prop_drive-from-DriveInfo-.patch [bz#677170]
  - kvm-Revert-blockdev-Clean-up-automatic-drive-deletion-v2.patch [bz#677170]
  - kvm-Revert-blockdev-New-drive_get_by_blockdev-v2.patch [bz#677170]
  - kvm-Revert-qdev-Don-t-leak-string-property-value-on-hot-.patch [bz#677170]
  - kvm-Revert-ide-Split-non-qdev-code-off-ide_init2.patch [bz#677170]
  - kvm-Revert-ide-Change-ide_init_drive-to-require-valid-di.patch [bz#677170]
  - kvm-Revert-ide-Split-ide_init1-off-ide_init2-v2.patch [bz#677170]
  - kvm-Revert-ide-Remove-redundant-IDEState-member-conf.patch [bz#677170]
  - Related: bz#677170
    (drive_del command to let libvirt safely remove block device from guest)


author: Jeff Layton <jlayton@redhat.com> 4.4-5.el6.0.1
changelog:
  - cifs.upcall: set GSSAPI checksum in SPNEGO blobs (bz 668366)
  - cifs.upcall: fix '-l' option (bz 668366)


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-23.el6_0.6
changelog:
  - gfs2_convert: corrupts file system when directory has di_height 3
    (gfs2_convert_corrupts_file_system_when_directory_has_di_height_3.patch)
    Resolves: rhbz#643279


author: Steven Dake <sdake@edhat.com> 1.2.3-21.1
changelog:
  - Resolves: rhbz#638592
  - merge upstream commit bab4945b57c150301c034085f3ce7b4187b6c864
  -  Works around problem where some switch hardware delays multicast
  -  packets compared to the unicast token.  This would result in messages
  -  being retransmitted when no retransmission was necessary.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.31.el6_0.1
changelog:
  - Add 0065-RHBZ-635088-update-priority.patch
      * refresh all priorities when a new path comes online
  - Resolves: bz #658937


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.2
changelog:
  - Add 0066-RHBZ-672151-fix-sysfs-caching.patch
      * Remove attribute value caching, and free cached parent devices on remove
  - Resolves: bz #672151


author: Jan Kaluza <jkaluza@redhat.com> 5.04-6
changelog:
  - fix #637782 - identify the zip64 format correctly
  - fix #643046 - recognize volume_key escrow packets
  - fix #594083 - improve Python recognition
  - fix #608686 - mention return code in manpage
  - fix #610795 - recognize webm content
  - fix #670125 - don't identify GFS2 filesystems as GFS1 filesystems


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-2
changelog:
  - backport patch to stop trying to close a stale connection to the bus,
    which used to generate a warning from libdbus, but which now causes an
    assertion failure (#634356)
  - when creating home directories, default to the UMASK setting from
    /etc/login.defs (part of #659681) and ensure the execute bit is set
    on any intermediate directories we create (the rest of #659681)
  - make sure the test helper has consistent permissions and make sure our
    self-tests verify them (#612617)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - make the init script exit with status 2 when given an unknown command, rather
    than with status 1 (#674534)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-5
changelog:
  - signal the system message bus to reload its configuration whenever we
    drop a new configuration file in place for it during package %post (#678345)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-3.el6_0.1
changelog:
  - backport subprocess fixes to use the "poll" system call, rather than "select"
  Resolves: rhbz#668975


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-3.el6_0.2
changelog:
  - allow the "no_proxy" environment variable to override "ftp_proxy" in
  urllib2 (patch 128)
  Resolves: rhbz#671343


author: Karel Klic <kklic@redhat.com> - 7.19.0-6
changelog:
  - Added do_curl_reset-refcount.patch: Fixed reference counting of
    Py_None in reset function
    Resolves: rhbz#624559
  - Added do_curl_reset-reinitialize-handle.patch: Proper
    re-initialization of internal settings in reset function
    Resolves: rhbz#565654


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-9
changelog:
  - Don't set $REMOTEHOST on the local machine
    Resolves: #669176
  - Don't print history in verbose mode
    Resolves: #658171


author: Miloslav Trmač <mitr@redhat.com> - 0.3.1-4
changelog:
  - Clarify documentation about which block device to use as an argument
    Resolves: #636541
  - Report readable error messages instead of random characters in some cases
    Resolves: #638732
  - Make passphrase prompts interruptable, report incorrect passphrases
    Resolves: #641111
  - Ask for passphrases only after checking for easily detectable problems
    Resolves: #643897


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-1.1
changelog:
  - Multiple patches to address issues with TwinView calibration and setting
    (#624560)
  - requires xorg-x11-drv-wacom-0.10.5-7 for TwinView fixes.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-1.2
changelog:
  - Multiple patches to address button mapping issues (#624560, z-stream #642915).
  - update the screen number when updating
  - requires updated xorg-x11-drv-wacom for the matching fixes to xsetwacom
    and the driver.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-6.1
changelog:
  - wacom-0.10.5-xsetwacom-add-super-and-hyper-to-modifiers.patch: parse Hyper
    and Super as modifiers.
  - wacom-0.10.5-xsetwacom-fix-strjoinsplit.patch: fix parameter advancement.
  - A list of patches to improve TwinView configuration (#624560).


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-6.2
changelog:
  - Several patches related to bug #624560 (zstream-bug #642915)
    - xsetwacom: remove core keyword parsing, has no effect
    - fix button map handling in xsetwacom
    - add more keywords and special characters
    - twinview and calibration fixes


author: Jay Fenlason <fenlason@redhat.com> - 2.0.25-5.el6.0.1
changelog:
  - Backport the dapl-2.0.25-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz673989
  - Backport the dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz673993


author: Jay Fenlason <fenlason@redhat.com> - 2.0.25-5.el6_0.2
changelog:
  - Backport dapl-2.0.25-dat_ia_open_hang.patch
    Resolves: bz675205
  - Backport dapl-2.0.25-new-providers.patch
    Resolves: bz675202
  - Backport dapl-2.0.25-signal-handler.patch
    Resolves: bz675198


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.5.a3
changelog:
  - Bug 676598 - 389-ds-base multilib: file conflicts
  - split off libs into a separate -libs package
  - remove old crufty fedora-ds stuff


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Resolves: Bug 680575 - Rebase 389-ds-base to pick the latest features and fixes 
  - Resolves: Bug 681720 - setup-ds-admin.pl - improve hostname validation
  - Resolves: Bug 681611 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Resolves: Bug 681550 - setup-ds-admin.pl --debug does not log to file
  - Resolves: Bug 681379 - ns-slapd segfaults if I have more than 100 DBs
  - Resolves: Bug 680290 - setup-ds.pl should set SuiteSpotGroup automatically
  - Resolves: Bug 681351 - crash in ldap-agent when using OpenLDAP
  - Resolves: Bug 681332 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Resolves: Bug 680305 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.7.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689908 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689895 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 689889 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 688730 - Exported tombstone cannot be imported correctly
  - Bug 684349 - slapd crashing when traffic replayed
  - Bug 682897 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - introduce the concept of the srcprerel - with rc2, we did not rebase
  - the source, we are still using the .rc1 source tarball, so we use
  - srcprerel of .rc1 but package pre-release is .rc2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
  - bump version to 1.2.8.rc4 - bump ds console version to 1.2.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693523 - Unable to change schema online
  - Bug 693520 - matching rules do not inherit from superior attribute type
  - Bug 693522 - nsMatchingRule does not work with multiple values
  - Bug 693519 - cannot use localized matching rules
  - Bug 693516 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-2
changelog:
  - added srcver because the version from the source is now
  - different than the source in the package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.14-1
changelog:
  - updated po files (jmoskovc@redhat.com)
  - GUI: make how to mandatory (jmoskovc@redhat.com)
  - silent rules (npajkovs@redhat.com)
  - fixed segv in abrt-hook-ccpp rhbz#652338 (jmoskovc@redhat.com)
  - rhbz 623142 (npajkovs@redhat.com)
  - GUI: make the "install debuginfo" hint selectable rhbz#644343 (jmoskovc@redhat.com)
  - GUI: wrap howto and comments rhbz#625237 (jmoskovc@redhat.com)
  - GUI: show horizontal scrollbar when needed (jmoskovc@redhat.com)
  - GUI: wrap lines in the backtrace window rhbz#625232 (jmoskovc@redhat.com)
  - GUI: changed '*' to '•' rhbz#625236 (jmoskovc@redhat.com)
  - rm abrt_test.py (jmoskovc@redhat.com)
  - added utf-8 coding tag into .py files (jmoskovc@redhat.com)
  - GUI: show the scrollbar in summary only when needed (jmoskovc@redhat.com)
  - GUI: added accelerator key "Delete" to the delete button rrakus@redhat.com (jmoskovc@redhat.com)
  - backtrace rating check in abrt-cli (mtoman@redhat.com)
  - Localization of [y/n] response in abrt-cli (kklic@redhat.com)
  - abrt-cli --info: Make coredump and rating fields optional (kklic@redhat.com)
  - GUI: increase dbus timeout in Report() call (vda.linux@googlemail.com)
  - GUI: make the bt viewer not-editable rhbz#621871 (jmoskovc@redhat.com)
  - increased version to 1.1.14 (jmoskovc@redhat.com)
  - new bt parser (kklic) (jmoskovc@redhat.com)
  - disable polkit (jmoskovc@redhat.com)
  - add example of tainted kernel module (npajkovs@redhat.com)


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.15-1
changelog:
  - removed unused files (jmoskovc@redhat.com)
  - update po files (jmoskovc@redhat.com)
  - removed some unused files (jmoskovc@redhat.com)
  - pass old pattern to ccpp hook and use it (dvlasenk@redhat.com)
  - GUI: added warning when gnome-keyring can't be accessed rhbz#576866 (jmoskovc@redhat.com)
  - 666893 - Unable to make sense of XML-RPC response from server (npajkovs@redhat.com)
  - PyHook: ignore SystemExit exception rhbz#636913 (jmoskovc@redhat.com)
  - 665405 - ABRT's usage of sos does not grab /var/log/messages (npajkovs@redhat.com)
  - add a note in report if kernel is tainted (npajkovs@redhat.com)
  - KerneloopsScanner.cpp: make a room for NULL byte (npajkovs@redhat.com)
  - fix multicharacter warring (npajkovs@redhat.com)
  - open help page instead of about rhbz#666267
  - Resolves: #665405, #576866, #649309, #623142, #614486, #650975, #666267


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.16-1
changelog:
  - added list of attachments to comment rhbz#668875
  - stop consuming non-standard header rhbz#670492
  - Resolves: #670492, #668875


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.16-3
changelog:
  - improved support for GSS customer portal
    - fixed the hash generating: use component name instead of package NVR
    - added a user-agent header to rhtsupport requests for easier hash algorithm
      matching
  - Resolves: #694410


author: David Cantrell <dcantrell@redhat.com> - 13.21.108-1
changelog:
  - Fix missed conversion of createMetadataVer->metadataVersion. (dlehman)
    Resolves: rhbz#690469
  - Ensure new kernel is default in zipl.conf on upgrade installs (dcantrell)
    Resolves: rhbz#683891


author: David Cantrell <dcantrell@redhat.com> - 13.21.109-1
changelog:
  - timeout= in yaboot.conf is in tenths of seconds (dcantrell)
    Resolves: rhbz#692409
  - Install dracut-fips package when fips=1 is specified (dcantrell)
    Resolves: rhbz#692350
  - Don't write HWADDR into ifcfg files (rvykydal)
    Resolves: rhbz#690589
  - Stop user if we have no /boot and / is an LV (dcantrell)
    Related: rhbz#618376
  - Prevent singlePV lv requests from being > the size of any pv (dcantrell)
    Related: rhbz#618376
  - Implement a general version of InstallInterfaceBase.methodstrRepoWindow().
    (akozumpl)
    Related: rhbz#688757


author: Martin Sivak <msivak@redhat.com> - 13.21.110-1
changelog:
  - Use correct interface to obtain HwAddress property (rvykydal)
    Resolves: rhbz#693614
  - Ignore --device=ibft in stage 2 kickstart handling (rvykydal)
    Related: rhbz#638131
    Resolves: rhbz#638131
  - loader.c: remove stage2param, unused. (akozumpl)
    Related: rhbz#688757
  - nfs/kickstart: do not throw away the --opts part (akozumpl)
    Related: rhbz#688757


author: David Cantrell <dcantrell@redhat.com> - 13.21.111-1
changelog:
  - Add libraries needed for fips mode to initrd on s390 (mgracik)
    Resolves: rhbz#692825
  - Prevent debug and kdump kernels from becoming the default (dcantrell)
    Resolves: rhbz#693702
  - Use znet_cio_free to clear network devices from cio_ignore. (dcantrell)
    Related: rhbz#633469


author: Martin Sivak <msivak@redhat.com> - 13.21.112-1
changelog:
  - Add more files needed by sshd in fips mode (mgracik)
    Resolves: rhbz#692825
  - Fix traceback of network --device=<MAC> (rvykydal)
    Resolves: rhbz#694768
  - Remove maximum limit on EFI partition (bcl)
    Resolves: rhbz#684860


author: Martin Sivak <msivak@redhat.com> - 13.21.113-1
changelog:
  - If there are no RAID arrays, do not write an mdadm.conf (clumens).
    Resolves: rhbz#696907
  - fipscheck has to be in /usr/bin (mgracik)
    Resolves: rhbz#692825
  - Revert "Don't write HWADDR into ifcfg files (rvykydal)"
    Related: rhbz#690589
  - Revert "Fix traceback of network --device=<MAC> (rvykydal)"
    Related: rhbz#694768


author: Martin Sivak <msivak@redhat.com> - 13.21.114-1
changelog:
  - Fix SIGSEGV for netwowrk --device=<MAC> which is not found (rvykydal)
    Resolves: rhbz#697432
  - Set mainWindow size request to current res reported by xrandr (dcantrell)
    Resolves: rhbz#694760


author: Steve Grubb <sgrubb@redhat.com> 2.0.6-1
changelog:
  resolves: #584981 - ausearch/report performance improvement needed
  resolves: #640948 - inodes display incorrectly when listing rules
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #647131 - Man page for audit_encode_nv_string() is incorrect
  resolves: #670938 - searching on auid = -1 results in all events


author: Steve Grubb <sgrubb@redhat.com> 2.1-1
changelog:
  resolves: #688664 - Logging does not resume from SYSLOG on full disk action
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #584981 - ausearch/report performance improvement needed


author: Steve Grubb <sgrubb@redhat.com> 2.1-4
changelog:
  resolves: #584981 - Improvements needed for Common Criteria
  resolves: #697463 - Broken autrace -r on s390x


author: Tomas Mraz <tmraz@redhat.com> - 6.1.8-1
changelog:
  - add pam_systemd to the PAM configuration (#612712)
  - fix force smarcard setting read when Kerberos enabled (#620475)
  - fix duplication of dialogs when the revert is cancelled (#621632)
  - add --enable/disableforcelegacy option (#605857)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.9-1
changelog:
  - removed support for setting up pam_smb_auth authentication - long
    ago deprecated
  - added code for better synchronization of files with duplicate
    settings such as login.defs, libuser.conf and system-auth-ac (#565521)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.11-1
changelog:
  - do not restart services when configuration did not change
  - dissallow setting identity or authentication services with missing
    installed files (#590447)
  - eliminate unnecessary updates of PAM config files and sssd.conf (#639978)
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-1
changelog:
  - give proper warnings on missing packages if configuration
    supported by SSSD (#663882)
  - do not delete mdns4_minimal from nsswitch.conf (#645295)
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-5
changelog:
  - prevent the traceback also when std file descriptors are not
    tty, print out an error message instead of executing authconfig


author: Ian Kent <ikent@redhat.com> - 5.0.5-23.el6_0.1
changelog:
  - bz689754 - automount hangs on startup when started with an already
    mounted cifs share
    - fix remount locking
  - Resolves: rhbz#689754


author: Ian Kent <ikent@redhat.com> - 5.0.5-24
changelog:
  - bz572608 - autofs has unncessary wakeups
    - remove state machine timed wait.
  - bz577099 - RFE: Add locality LDAP attribute to
    - add locality as valid ldap master map attribute
  - bz650009 - automount hangs on startup when started with an already
    mounted cifs share
    - fix remount locking
  - bz624444 - 'Restart' option does not work for autofs initd script
    - fix restart.
  - bz630954 - "service autofs reload" does not pick the updated entry
    from NIS autofs direct map
    - fix direct map not updating on reread
  - bz629480 - include autofs support for SASL External authentication
    using certificates
    - add external bind method
  - bz579963 - autmount maps stored in LDAP can not be read using simple
    authenticated binds
    - add simple bind authentication
  - bz520844 - [RFE] autofs should honor admin supplied server weights in
    maps
    - use weight only for server selection.
  - Resolves: rhbz#572608 rhbz#577099 rhbz#650009 rhbz#624444 rhbz#630954
  - Resolves: rhbz#629480 rhbz#579963 rhbz#520844


author: Ian Kent <ikent@redhat.com> - 5.0.5-26
changelog:
  - bz666340 - autofs handle isspace() char incorrectly
    - fix isspace() wild card substition.
  - Resolves: rhbz#666340


author: Ian Kent <ikent@redhat.com> - 5.0.5-27
changelog:
  - bz616426 - autofs initscript should implement force-reload and try-restart
    - add lsb force-reload and try-restart
  - bz629359 - [RFE] Automounter debug mode should include IP addresses
    - include ip address in debug logging.
    - mount using address for DNS round robin host names.
  - Resolves: rhbz#616426 rhbz#629359


author: Ian Kent <ikent@redhat.com> - 5.0.5-28
changelog:
  - bz630954 - "service autofs reload" does not pick the updated entry
    from NIS autofs direct map
    - fix patch not actually applied.
  - Related: rhbz#630954


author: Ian Kent <ikent@redhat.com> - 5.0.5-29
changelog:
  - bz579963 - autmount maps stored in LDAP can not be read using simple
    authenticated binds
    - deal with Kerberos library dependency.
  - Related: rhbz#579963


author: Ian Kent <ikent@redhat.com> - 5.0.5-30
changelog:
  - bz579963 - autmount maps stored in LDAP can not be read using simple
    authenticated binds
    - remove ERR_remove_state() openssl call. 
  - bz520844 - [RFE] autofs should honor admin supplied server weights in maps
    - update patch, also override proximity.
  - Related: rhbz#579963 rhbz#520844


author: Ian Kent <ikent@redhat.com> - 5.0.5-31
changelog:
  - bz700691 - autofs sometimes stops expiring mounts
    - fix next task list update race.
    - fix stale map read.
  - bz700697 - autofs with null maps specified in auto.master segfaults on reload
    - fix null cache clean.
  - Resolves: rhbz#700691 rhbz#700697


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-4
changelog:
  - don't segfault when trying to bind int variable to array
    with bad array subsrcipt
    Resolves: #618289


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-5
changelog:
  - Builtins like echo and printf won't report errors
    when output does not succeed due to EPIPE
    Resolves: #664468


author: Adam Tkac <atkac redhat com> 32:9.7.2-1.P3
changelog:
  - update to 9.7.2-P3 (#623122)
  - patch bind97-managed-keyfile.patch replaced by bind97-compat-keysdir.patch
  - patches merged
    - bind97-rh554316.patch
    - bind97-rh576906.patch


author: Adam Tkac <atkac redhat com> 32:9.7.2-2.P3
changelog:
  - host utility now honors "attempts", "timeout" and "debug" options in
    resolv.conf (#622764)
  - initscript should kill only the "correct" named process (#622785)
  - attempt to reconnect to PostgreSQL during each query if the initial
    connection failed (#623190)


author: Adam Tkac <atkac redhat com> 32:9.7.2-3.P3
changelog:
  - use same atomic operations on both ppc and ppc64 (#623638)
  - add new option DISABLE_ZONE_CHECKING to sysconfig/named (#623673)
  - document dig exit codes
  - add Requires: bind-libs to bind subpkgs
  - remove statement about system-config-bind from named.8 manpage (#660676)


author: Adam Tkac <atkac redhat com> 32:9.7.2-4.P3
changelog:
  - solve conflict between i686 and x86_64 bind-devel packages (#658045)
  - fix "service named status" when used with named-sdb
  - fix "krb5-self" update-policy rule processing (#664401)
  - don't check MD5, size and mtime of sysconfig/named


author: Adam Tkac <atkac redhat com> 32:9.7.2-7.P3
changelog:
  - improve host/dig resolv.conf parser (#rh669163)
  - improve internal test suite
  - don't mention that HMAC-MD5 is the only one TSIG algorighm
    in nsupdate manpage
  - initscript: sybsys name is always named, not named-sdb


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3 (CVE-2011-0414)
  - patches merged
    - bind97-gsstsig.patch
    - bind97-rh664401.patch
    - bind97-rh623638.patch


author: Harald Hoyer <harald@redhat.com> 0.3.6-3
changelog:
  - turn off biosdevname by default
    can be turned on by: udevadm control --property=UDEV_BIOSDEVNAME=1
    and retriggering the network devices
  Resolves: rhbz#653901


author: Harald Hoyer <harald@redhat.com> 0.3.6-4
changelog:
  - use the new IMPORT{cmdline} feature to get the biosdevname
    kernel command line parameter
  Resolves: rhbz#653901


author: Harald Hoyer <harald@redhat.com> 0.3.6-5
changelog:
  - don't use '#' in names, use 'p' instead, by popular demand
  - fix segfault when BIOS advertises zero sized PIRQ Routing Table
  - don't build and include dump_pirq
  - add 'bonding' and 'openvswitch' to the virtual devices list
  - fix test for PIRQ table version
  Resolves: rhbz#653901


author: Edward Shishkin <edward@redhat.com> - 1.0.1-4
changelog:
  - blktrace doesn't run when device name is duplicated (#583615)
  - blktrace prints incorrect usage when running w/o parameters (#619201)
  - btreplay cannot work for /dev/cciss/c0d0 device (#650229)
  - option -k doesn't kill running trace (#583624)
  - blkiomon prints nothing when blktrace works with logical volume (#650243)
  - blkparese exit with non-zero status when tracefile doesn't exist (#583695)
  - run time went but blktrace is still running (#595356)
  - inconsistencies in btrecord man page (#595413)
  - undocumented options in blkiomon (#595419)
  - undocumented options in blkparce (#595615)
  - undocumented options in blktrace (#595620)
  - undocumented options in btreplay (#595623)
  - undocumented options in btt (#595628)


author: Nalin Dahyabhai <nalin@redhat.com> 0.35.1-1
changelog:
  - fix a self-test that broke because one-year-from-now is now a day's worth
    of seconds further out than it was a few days ago


author: Nalin Dahyabhai <nalin@redhat.com> 0.36-1
changelog:
  - update to 0.36
    - fix some use-after-free bugs in the daemon (#689776)
    - fix a copy/paste error in certmonger-ipa-submit(8)
    - getcert now suppresses error details when not given its new -v option
      (#683926, more of #681641/#652047)
    - updated translations
      - de, es, pl, ru, uk
      - indonesian translation is now for "id" rather than "in"


author: Nalin Dahyabhai <nalin@redhat.com> 0.37-1
changelog:
  - update to 0.37
    - be more careful about checking if we can read a PIN file successfully
      before we even call an API that might need us to try (#688229)
    - fix strict aliasing warnings


author: Nalin Dahyabhai <nalin@redhat.com> 0.38-1
changelog:
  - update to 0.38
    - catch cases where we can't read a PIN file, but we never have to log
      in to the token to access the private key (more of #688229)


author: Nalin Dahyabhai <nalin@redhat.com> 0.39-1
changelog:
  - update to 0.39
    - fix use of an uninitialized variable in the xmlrpc-based submission
      helpers (#690886)


author: Nalin Dahyabhai <nalin@redhat.com> 0.40-1
changelog:
  - update to 0.40
    - fix validation check on EKU OIDs in getcert (#691351)
    - get session bus mode sorted
    - add a list of recognized EKU values to the getcert-request man page


author: Nalin Dahyabhai <nalin@redhat.com> 0.41-1
changelog:
  - read information about the keys we've just generated before proceeding
    to generating a CSR (part of #694184, part of #695675)
  - when processing a "resubmit" request from getcert, go back to key
    generation if we don't have keys yet, else go back to CSR generation as
    before (#694184, #695675)
  - configure with --with-tmpdir=/var/run/certmonger and own /var/run/certmonger
    (#687899), and add a systemd tmpfiles.d control file for creating
    /var/run/certmonger on Fedora 15 and later
  - let session instances exit when they get disconnected from the bus
  - use a lock file to make sure there's only one session instance messing
    around with the user's files at a time
  - fix errors saving certificates to NSS databases when there's already a
    certificate there with the same nickname (#695672)
  - make key and certificate location output from 'getcert list' more properly
    translatable (#7)


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1
changelog:
  - getcert: fix a buffer overrun preparing a request for the daemon when
    there are more parameters to encode than space in the array (#696185)
  - updated translations: de, es, id, pl, ru, uk


author: Jeff Layton <jlayton@redhat.com> 4.7-2
changelog:
  - rebase to version 4.7 (bz 658981)
  - fix hardcoded paths in manpages (bz 658981)
  - set GSSAPI checksum in SPNEGO blobs (bz 645127)


author: Jeff Layton <jlayton@redhat.com> 4.7-4
changelog:
  - make cifs.upcall take the '-l' flag (bz 667382)
  - fix segfault in cifs.upcall when passing an invalid option (bz 667382)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-32
changelog:
  - gfs2_edit enhancements:
    * gfs2_edit: handle corrupt file systems better
      (gfs2_edit_handle_corrupt_filesystems_better.patch)
    * gfs2_edit: print large block numbers better
      (gfs2_edit_print_large_block_numbers_better.patch)
    * gfs2_edit: has problems printing gfs1 journals
      (gfs2_edit_has_problems_printing_gfs1_journals.patch)
    * gfs2_edit: add -d option for printing journal details
      (gfs2_edit_add_d_option_for_printing_journal_details.patch)
    * gfs2_edit: Fix error message on blockalloc when outside bitmap
      (gfs2_edit_fix_error_message_blockalloc_when_outside_bitmap.patch)
    * gfs2_edit: fix careless compiler warning
      (gfs2_edit_fix_careless_compiler_warning.patch)
    * gfs2_edit: Fix bitmap editing function
      (gfs2_edit_fix_bitmap_editing_function.patch)
    * gfs2_edit: fix segfault in set_bitmap when block is in rgrp
      (gfs2_edit_fix_segfault_in_set_bitmap_when_block_is_rgrp.patch)
    Resolves: rhbz#674843
  - fenced: emit dbus signals to be handled by foghorn package for SNMP traps
    (fenced_send_dbus_signals_when_node_is_fenced.patch)
    (fenced_update_fenced_man_page_with_q_option.patch)
    (build_allow_dbus_notification_code_to_be_disabled.patch)
    Resolves: rhbz#592964
  - config: Update relax ng schema 
    (config_update_schema_2.patch)
  - doc: Update cluster_conf.html to match schema
    (doc_update_cluster_conf_html.patch)
    Resolves: rhbz#618705


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-33
changelog:
  - qdiskd: Fix auto-vote calculation loop
    (qdiskd_fix_auto_vote_calculation_loop.patch)
    Resolves: rhbz#663433


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-34
changelog:
  - fenced: don't ignore victim_done messages for reduced victims
    (fenced_do_not_ignore_victim_done_messages_for_reduced_victims.patch)
    Resolves: rhbz#678704


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-35
changelog:
  - config_xml: stop leaking memory on config reload
    (config_stop_leaking_memory_on_config_reload.patch)
    Resolves: rhbz#680155


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-36
changelog:
  - Fix race condition at startup that affects dlm based applications
    (dlm_controld_always_return_error_if_daemon_is_not_ready_to_operate.patch)
    (cman_init_wait_for_dlm_controld_to_be_fully_operational_before_proceeding.patch)
    Resolves: rhbz#595725


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-37
changelog:
  - cman-preconfig: allow cman to configure corosync multicast ttl
    (cman_preconfig_allow_cman_to_configure_multicast_ttl.patch)
    Resolves: rhbz#684020


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-38
changelog:
  - qdiskd: Fix bad timer check
    (qdiskd_fix_bad_timer_check.patch)
    Resolves: rhbz#688154
  - cman init: increase the default timeout waiting for quorum
    (cman_init_increase_default_timeout_waiting_for_quorum.patch)
    Resolves: rhbz#688201


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-39
changelog:
  - config: Add DRBD 0.8.3 metadata back to schema
    (add_drbd_0_8_3_metadata_back_to_schema.patch)
    Resolves: rhbz#680172


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-40
changelog:
  - gfs2_convert: exits with success without doing anything
    (gfs2_convert_exists_with_success_without_doing_anything.patch)
    Resolves: rhbz#688734


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-41
changelog:
  - gfs2_convert: exits with success without doing anything
    (gfs2_convert_exists_with_success_without_doing_anything_part2.patch)
    Resolves: rhbz#688734


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-10
changelog:
  - compile coreutils su with RELRO and PIE again(#630017)
  - document rare usefulness of tail options --sleep-interval
    and --max-unchanged-stats with inotify support(#662900)
  - fix double free error in tac for input line longer
    than 16KiB(#628212)
  - fix segfault in sort if LC_TIME differs from the rest
    of locales(#649224)
  - fix support for DTR/DSR control flow in stty(#598631)
  - clarify mkdir --mode behaviour in info documentation
    (#609262)
  - inform about dropped ninth bit of 3-digit octal values in byte
    representations in info documentation(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-11
changelog:
  - adjust the wording in the octal value byte representation
    documentation to match with upstream(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-12
changelog:
  - document that dd's iflag=fulblock prevents dd's oflag=direct
   automatic turn off when reading via pipe(#614605)


author: Steven Dake <sdake@redhat.com> 1.2.3-27
changelog:
  - Resolves: rhbz#680258
  - Resolves: rhbz#675099
  - Fix problem where corosync can't be built on an older
    installation. (rhbz#680258)
  - merge upstream commit 5ee4fe19db4b1e9c3984a9bf1645b8cf6d711f3d
  - Avoid abort if existing ring id file does not contain
    atleast 8 bytes.  (rhbz#675099)
  - merge upstream commit bb35b86fef4f256a21993f73b71fd512d4763e2f


author: Steven Dake <sdake@redhat.com> 1.2.3-28
changelog:
  - Resolves: rhbz#677975
  - Fix problem where objdb handle destroy is not called in
    clear_object.  (rhbz#677975)
  - merge upstream commit ea18c71936edf8cdc647245374f3a7932ac7e686
  - Fix problem where all items are not iterated in
    object_reload_notification.  (rhbz#677975)
  - merge upstream commit 7f2e1da84d5883176f0f95936b8a4bf21de12a0a


author: Steven Dake <sdake@redhat.com> 1.2.3-29
changelog:
  - Resolves: rhbz#675783
  - Fix problem that leads to abort when token lost in
    recovery sate.  (rhbz#675783)
  - merge upstream commit 6aa47fde953bf2179f5bd2dd07815fc7d80f47bb


author: Steven dake <sdake@redhat.com> 1.2.3-30
changelog:
  - Resolves: rhbz#684928
  - Resolves: rhbz#684930
  - Fix ttl defaults and range checking.  (rhbz#684928)
  - merge upstream commit c5ee8757eb2a7026b26a6410f3f068c4797abcf8 (rhbz#684928)
  - Remove the ttl option from the udpu code and rely on kernel
    ttl defaults (rhbz#684930)
  - merge upstream commit 48cbb33d11fed7ed9db5e7c723cf84eb35cd9d29 (rhbz#684930)


author: Steven Dake <sdake@redhat.com> 1.2.3-31
changelog:
  - Resolves: rhbz#688691
  - Remove assertion during corosync shutdown.  (rhbz#688691)
  - merge upstream commit 92a3a1aa9d07e769eb6bc59467454e0316549cf6 (rhbz#688691)


author: Steven Dake <sdake@redhat.com> 1.2.3-32
changelog:
  - Resolves: rhbz#629380
  - Resolves: rhbz#688691
  - Resolves: rhbz#675783
  - Only dispatch notification messages one message at a time. (rhbz#629380)
  - merge upstream commit fbae3de885843debe9ccccb363e9ca8e98d5afea. (rhbz#629380)
  - Send confdb notifications from the main thread.  (rhbz#629380)
  - merge upstream commit abeb02277ee374531b910ce793213e60addb0fb5. (rhbz#629380)
  - Remove recv_flush operations from totemsrp to remove recursion
    error.  (rhbz#688691)
  - merge upstream commit 336741ee96caf3ae435b609ee8a76788902c9edf. (rhbz#688691)
  - Only restore old ring id information once before operational
    state.  (rhbz#675783)
  - merge upstream commit 0eabeee63eca7a4cc1d907607057ac668fafbcae.  (rhbz#675783)
  - Free recovery messages during operational enter rather then
    via message_free() call.  (rhbz#675783)
  - merge upstream commit 0fcf760977a73ef78bacff47e61c30ba21929faa.  (rhbz#675783)


author: Steven Dake <sdake@redhat.com> 1.2.3-33
changelog:
  - Resolves: rhbz#629380
  - Fix retrieving application's parent name in notifyd.  (rhbz#629380)
  - merge upstream commit 1b7b4f0f888621aff2f8866ac81b4930b4b07c63 (rhbz#629380)
  - Remove duplicate quarote events (rhbz#629380)
  - merge upstream commit 821e031b925ad3a15ca057f816fecb3568c96cb9 (rhbz#629380)
  - Add the service name to the connection name in statistics (rhbz#629380)
  - merge upstream commit 78ae800f80fa9cd0fe593724f5c64138c205fec5 (rhbz#629380)
  - Fix shutdown when a confdb client is still connected (rhbz#629380)
  - merge upstream commit 8b1492b50b64725d72ae9c301682ad9a489de344 (rhbz#629380) 
  - Fix compiler error with previous commit (rhbz#629380)
  - merge upstream commit 5da31206bbb9bb0d1f80907e53a5798204eaf594 (rhbz#629380)


author: Steven Dak <sdake@redhat.com> 1.2.3-34
changelog:
  - Resolves: rhbz#629380
  - merge non-committed patch which fixes stack protector failure.  (rhbz#629380)


author: Steven Dake <sdake@redhat.com> 1.2.3-35
changelog:
  - Reverts: rhbz#599327
  - revert upstream commit 061b770b83a9533dad527eda5f7d41e763cb40da (rhbz#599327)
  - revert upstream commit 2f1b7a962911670493d0db3695fc9fb91ceb0c82 (rhbz#599327)
  - Display warning and add object database feature to indicate when system
    firewall is enabled. (rhbz#599327)


author: Steven Dake <sdake@redhat.com> 1.2.3-36
changelog:
  - Resolves: rhbz#629380
  - merge upstream commit fd78f27715be326c6fe5439fa7e8d8077642db64 (rhbz#629380)
  - Place statistics changes outside of IPC mutexes to avoid deadlocks (rhbz#629380)


author: Dave Anderson <anderson@redhat.com> - 5.1.1-1.el6
changelog:
  - Add support for s390x ELF dumpfile format.  
    Resolves: rhbz#633449
  - Add support for s390x compressed/filtered dumpfiles generated by 
    makedumpfile.
    Resolves: rhbz#637197
  - Fix for the "bt" command with 2.6.27 and later x86_64 kernels to
    prevent the possible display of a an invalid "vgettimeofday" frame
    above the topmost "system_call_fastpath" frame, followed by two
    read errors indicating "bt: read error: kernel virtual address:
    ffffffffff600000  type: gdb_readmem_callback".
    Resolves: rhbz#637735
  - Save the per-cpu register contents stored in the "cpu" devices of 
    x86_64 KVM dumpfiles, and use their contents for x86_64 backtrace RSP
    and RIP hooks in the case of KVM "live dumps" where the guest system 
    was not in a crashed state when the "virsh dump" operation was done
    on the KVM host.  If an active task was running in user space when 
    a live dump was taken, that will be indicated by the "bt" output, 
    along with the user-space register contents.  The x86_64 register set 
    saved for each cpu may be displayed with the "help -[D|n]" command.
  - Fix for the x86_64 "bt" command to more correctly find the starting
    backtrace RIP and RSP hooks in KVM dumpfiles.  Without the patch,
    backtraces that should start in the interrupt or exception stacks
    were not being detected correctly.
    Resolves: rhbz#649050
  - Fix to utilize the correct "cpu" device format in x86 KVM dumpfiles
    Without the patch, the x86 registers were read in a 32-bit format, 
    which is only true if the host machine was running a 32-bit kernel.
    With the patch, the format defaults to the 64-bit format, and is
    switched to the 32-bit format if it can be determined that the host
    machine was running a 32-bit kernel.
  - Save the per-cpu register contents stored in the "cpu" devices of
    x86 KVM dumpfiles, and use their contents for x86 backtrace ESP and
    EIP hooks in the case of KVM "live dumps", i.e., where the guest
    system was not in a crashed state when the "virsh dump" operation
    was done on the KVM host.  If an active task was running in user
    space when a live dump was taken, that will be indicated by the
    "bt" output, along with the user-space register contents.  The saved
    x86 register set for each cpu may also be displayed with the
    "help -[D|n]" command.
  - Fix for the x86 "bt" command to correctly find the starting backtrace
    EIP and ESP hooks for the active tasks in KVM dumpfiles where the
    kernel had crashed.
    Resolves: rhbz#649051
  - Fix for the cpu count determination in crashed x86 KVM dumpfiles, 
    where the non-crashing cpus are marked offline in the kernel's
    cpu_online_mask by smp_stop_cpu().  Depending upon the cpu number
    of the crashing task, the cpu count may be set to a value that is
    less than the number of present cpus.
  - Change to the manner in which the cpu count is determined for x86_64
    kernels.  SLES11 2.6.32 kernels delay the call to crash_kexec() until
    after smp_send_stop() is called by panic(), and so the cpu_online_map
    cannot be used for determining the cpu count.  With the patch, the
    cpu_present_map is used.
    Resolves: rhbz#649053
  - Rebase to upstream version 5.1.1.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.1-2.el6
changelog:
  - Fix for x86 "bt" command to account for movement of ia32_sysenter_target()
    assembly function to a separate text section, and for the failure to
    resolve the backtrace of a non-active swapper task.
    Resolves: rhbz#682129
  - Upstream equivalency with 5.1.3 patch.
    Resolves: rhbz#649070


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-3
changelog:
  - 624043 selinux issue done by leaking file decriptor
  - crontab has wrong permission 676081 & fix in files section 6755->4755
  - 615107 echos twice OK in init script
  - 677364 common criteria - freeing, cleaning code
  - 676040 add relro and PIE into compiler flags
  - Resolves: rhbz#624043, rhbz#676081, rhbz#615107, rhbz#677364, rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-4
changelog:
  - 675077 anacron runs hourly instead of daily=>wrong option in bash script
  - fix common criteria patch 677364
  - Resolves: rhbz#675077


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-6
changelog:
  - apply relro (CFLAGS&DFLAGS) in specfile, because in configure we
   need to call autoreconf.
  - Resolve: rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-7
changelog:
  - switch off --enable-pie, because it's overloaded with flags in spec
  - added RPM_OPT_FLAGS into CFLAGS
  - Related: rhbz#676040


author: Milan Broz <mbroz@redhat.com> - 1.2.0-1
changelog:
  - Update to cryptsetup 1.2.0
  - Use generic crypto backend interface.
  - Add fipscheck compile option.
  - Use gcrypt RNG in FIPS mode for key generation.
  - Add FAQ to documentation.
    Resolves: #658817 #663870 #663869


author: Milan Broz <mbroz@redhat.com> - 1.2.0-2
changelog:
  - Require libgcrypt and device-mapper versions supporting FIPS extensions.
  - Request buffer wipe for dm-ioctl when sending key data.
    Resolves: #674825


author: Milan Broz <mbroz@redhat.com> - 1.2.0-3
changelog:
  - Require updated device mapper library (secure flag).
  - Use FIPS RNG for keyslot salt in FIPS mode.
    Resolves: #692512 #693371


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-37
changelog:
  - Fixed cupsSNMPQuirks parsing code in cups-snmp-quirks.patch (bug #580604).
  - lpstat -p reported current job as job id zero (STR #3627, bug #614908).
  - Set the default RIPCache to 128m (STR #3535, bug #616864).
  - Scheduler tracks whether we are shutting down and doesn't start
    new jobs if so (STR #3679, bug #624441).
  - Added 'restartlog' action to initscript usage output (bug #632180).
  - Fixed following rpmlint errors and warnings (bug #634931):
    - Fix character encoding in CREDITS.txt.
    - Mark D-Bus configuration file as config file.
    - Don't mark MIME types and convs files as config files.  Overrides
      can be placed as new *.types/*.convs files in /etc/cups.
    - Don't mark banners as config files.  Better is to provide new banners.
    - Don't mark initscript as config file.
    - Don't mark templates and www files as config files.  A better way to
      provide local overrides is to use a different ServerRoot setting.
      Note that a recent security fix required changed to template files.
    - Provide versioned LPRng symbol for rpmlint.
    - Use mode 0755 for binaries and libraries where appropriate.
    - Move /etc/cups/pstoraster.convs to /usr/share/cups/mime/.
    - Move cups-config man page to the devel sub-package.
  - Revert STR #2537 so non-UTF-8 clients continue to be accepted (bug #642448).
  - The php sub-package now explicitly requires the libs package with
    the same version and release (bug #646814).
  - Added tolerance for DNS failures (bug #654667).
  - Fixed initscript to stop service on reboot/halt (bug #659692).


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-17
changelog:
  - avoid CURLE_OUT_OF_MEMORY given a file name without any slash (#623663)
  - proxy tunnel support for LDAP requests (#655134)
  - proxy with kerberos authentication for https (#625685)
  - improve handling of FTP server session timeout (#651592)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26
changelog:
  - force NSS to ask for a new client certificate when connecting second time
    to the same host (#694294)


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.3
changelog:
  - Add 0067-RHBZ-684684-sysfs-device-cleanup.patch
     * Make sure to remove the sysfs device from cache when the path is
       removed. Also, only search the sysfs device cache under the vecs lock
  - Resolves: bz #684684


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.32
changelog:
  - Add 0064-RHBZ-612173-fix-reverse-lookup.patch
      * don't terminate WWID at whitespace on reverse lookup.
  - Add 0065-RHBZ-635088-update-priority.patch
      * refresh all priorities when a new path comes online
  - Add 0066-RHBZ-636071-mpathconf-variable_names.patch
      * don't use DISPLAY variable name. It configs with X. Also, unset all
        the variable names, so this doesn't happen again.
  - Add 0067-RHBZ-622569-symmetrix-config.patch
  - Add 0068-RHBZ-632734-nvdisk-config.patch
  - Add 0069-RHBZ-636246-hp-open-config.patch
  - Add 0070-RHBZ-639037-hitachi-open-config.patch
  - Add 0071-RHBZ-611779-fix-whitespace-crash.patch
      * get_cmdvec wasn't setting the passed in vector to NULL, when
        there was no command.
  - Add 0072-RHBZ-651389-change-scsi-tmo-order.patch
      * Make multipath set fast_io_fail_tmo before dev_loss_tmo, so that
        you can set dev_loss_tmo above 600.
  - Resolves: bz #651389, #611779, #639037, #636246, #632734, #622569, #636071
  - Resolves: bz #635088, #612173


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.33
changelog:
  - Add 0073-RHBZ-650664-clarify-error-msg.patch
      * tell users to increase max_fds, if multipath gets EMFILE trying to
        open a file.
  - Add 0074-RHBZ-602883-dont-print-change.patch
      * don't print messages for every change uevent
  - Add 0075-RHBZ-576919-log-checker-err.patch
      * add log_checker_err default config option, to control the verbosity
        of repeated checker error messages
  - Add 0076-RHBZ-599690-update-multipath-conf.patch
  - Add 0077-RHBZ-622608-nvdisk-config.patch
  - Add 0078-RHBZ-628095-config-warnings.patch
      * print warning messages for invalid config parameters
  - Add 0079-RHBZ-650797-display-iscsi-tgt-name.patch
      * get tgt name for iscsi devices
  - Add 0080-RHBZ-622731-fix-no-config-value-segfault.patch
      * check that a config option has a value before trying to get the
        strlen of the value.
  - Resolves: bz #576919, #599690, #602883, #622608, #622731, #628095, #650664
  - Resolves: bz #650797


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.34
changelog:
  - Add 0081-RHBZ-623644-fix-sysfs-caching.patch
      * Remove attribute value caching, and free cached parent devices on remove
  - Resolves: bz #623644


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.35
changelog:
  - Add 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
      * Set DM_UDEV_DISABLE_DISK_RULES_FLAG in dm_simplecmd to stop blkid from
        running on reloads
  - Add 0083-RHBZ-636213-633643-new-configs.patch
      * Autoconfigs for HP P2000 family and NEC Storage M Series arrays
  - Resolves: bz #631009, #636213, #636213


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.36
changelog:
  - Add 0084-RHBZ-644111-read-only-bindings.patch
      * Add -B multipath and multipathd option, to make the bindings file
        read-only. This is to be used by the initramfs
  - Resolves: bz #644111


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.37
changelog:
  - Add 0085-RHBZ-645605-fix-offline-check.patch
     * Make path_offline return false if it can't deterime a paths state.
  - Rename 0080-RHBZ-622731-fix-no-config-value-segfault.patch to
           0080-RHBZ-662731-fix-no-config-value-segfault.patch
     * accidentally used the wrong bug number
  - Resolves: bz #645605, #662731


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.38
changelog:
  - Remove 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
     * This patch was causing a serious regression (677937), and resolving
       it requires changes in /etc/rc.sysinit, so I'm backing it out for
       now.
  - Resolves: bz #677937
  - Related: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.39
changelog:
  - Add 0086-RHBZ-681144-sysfs-device-cleanup.patch
     * Make sure to remove the sysfs device from cache when the path is
       removed. Also, only search the sysfs device cache under the vecs lock
  - Resolves: bz #681144


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.40
changelog:
  - Add 0087-RHBZ-680480-skip-if-no-sysdev.patch
     * Don't check the path if it has no sysdev, since it is about to
       be removed.
  - Resoves: bz# 680480


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.41
changelog:
  - Add 0088-RHBZ-693524-fix-prio-segfault.patch
     * Don't reuse the the path argument as a variable in the vector
       loop.
  - Resolves: bz# 696157


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13.P1
changelog:
  - Add LICENSE file to dhclient subpackage (#613683)
  - Add DHCRELAYARGS variable to /etc/sysconfig/dhcrelay (#625846)
  - dhclient logs its pid to make troubleshooting systems
    with multiple dhclients running easier (#627257)
  - Fix parsing of date (#631071)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)
  - Fix for CVE-2010-3611 (#651914)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-16.P1
changelog:
  - Unexpected abort caused by a DHCPv6 decline message (CVE-2011-0413, #672995)
  - Write/accept a semi-colon at the end of the max-life and preferred-life
    clauses in dhcpv6 lease files (#672551)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-3
changelog:
  - New upstream release 0.1.2
  - Fixes a serious issue with libdhash where hash_enter() would never update
  - existing entries for a key.


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-6
changelog:
  - Resolves: rhbz#668586 - ding-libs subpackages should have explicit version
  -                         requirements


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8 (fixes #654226), pigeonhole updated to 0.2.2
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.
  - mdbox: Fixed potential assert-crash when saving multiple messages
    in one transaction
  - dsync: a lot of fixes
  - fixed lda + sieve crash


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Jeff Johnston <jjohnstn@redhat.com> 1:3.6.1-5
changelog:
  - Remove work around for openjdk bug#647737 as openjdk has
    posted its own work around and will shortly be fixing problem 
    correctly.


author: Andrew Overholt <overholt@redhat.com> 1:3.6.1-6.11
changelog:
  - Bring in line with Fedora.
  - Remove some stuff that is now done in eclipse-build.
  - Fix sources URL.
  - Add PDE dependency on zip for pdebuild script.
  - Use new eclipse-build targets.
  - Increase minimum required memory in eclipse.ini.


author: Mauro Carvalho Chehab <mchehab@redhat.com> - 0.9-12
changelog:
  - Add improvements from upstream version 0.16, in order to support newer
    edac drivers. Also, sync edac labels with RHEL5 package


author: Roland McGrath <roland@redhat.com> - 0.149-1
changelog:
  - Update to 0.149
    - libdw: Decode new DW_OP_GNU_implicit_pointer operation;
             new function dwarf_getlocation_implicit_pointer.
    - libdwfl: New function dwfl_dwarf_line.
    - eu-addr2line: New flag -F/--flags to print more DWARF line info details.
    - eu-readelf: better .debug_loc processing (#627729)
    - eu-strings: Fix non-mmap file reading. (#609468)
    - eu-strip: -g recognizes .gdb_index as a debugging section. (#631997)


author: Roland McGrath <roland@redhat.com> - 0.150-1
changelog:
  - Update to 0.150
    - libdw: Fix for handling huge .debug_aranges section. (#638432)
    - libdwfl: Fix for handling prelinked DSO with separate debug file. (#652857)
    - findtextrel: Fix diagnostics to work with usual section ordering.


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Karel Klic <kklic@redhat.com> 1:23.1-21
changelog:
  - Added jis2004 patch to prefer non-JIS X 0213:2004 compliant fonts
    for Japanese texts (IPA fonts are counted as JIS X 0213:2004
    compliant)
    Resolves: #612385
  - Removed dependency on aspell and hunspell
    Resolves: #613759


author: Milan Crha <mcrha@redhat.com> - 2.28.3-13.el6
changelog:
  - Add patch for RH bug #634949 (crash with google address book)
  - Add patch for RH bug #660356 (crash with calendar views and webcal)


author: Milan Crha <mcrha@redhat.com> - 2.28.3-20.el6
changelog:
  - Add versioned evolution-conduits to evolution-devel Requires
  - Add nss/nspr libraries to LDAP_LIBS, because latest openldap requires it


author: Petr Sabata <psabata@redhat.com> - 1.0.17-2
changelog:
  - Changing fcoemon.c includes temporarily to address open-lldp header changes
  - Related: rhbz#672453


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-13
changelog:
  - fence_scsi: need stricter regular expression when looking for specific keys
    (fence_scsi_fix_regular_expression_for_grep.patch)
    Resolves: rhbz#670910
  - fence_scsi: unfencing fails when device reports "unit attention"
    (fence_scsi_always_do_sg_turs_before_registration.patch)
    (fence_scsi_always_do_sg_turs_on_dm_mp_devices.patch)
    Resolves: rhbz#640343
  - fence_scsi: verify that actions were successful
    (fence_scsi_verify_that_on_off_actions_succeed.patch)
    Resolves: rhbz#644385
  - fence_scsi: identify dm-multipath devices correctly
    (fence_scsi_identify_dm_multipath_devices_correctly.patch)
    Resolves: rhbz#644389
  - fence_scsi: properly log errors for all commands
    (fence_scsi_properly_log_errors_for_all_commands.patch)
    Resolves: rhbz#672597


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-17
changelog:
  - Allow fence_scsi to use any valid hexadecimal key
    (fence_scsi_allow_use_of_any_valid_hexadecimal_key.patch)
  - fence_scsi: grep for keys should be case insensitive
    (fence_scsi_grep_for_keys_should_be_case_insensitive.patch)
    Resolves: rhbz#653504


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-18
changelog:
  - fence_wti: Unable to parse output when split into several screens
    (fence_wti_unable_to_parse_output_when_split_into_several_screens_part1.patch)
    (fence_wti_unable_to_parse_output_when_split_into_several_screens_part2.patch)
    Resolves: rhbz#678522


author: Marek Grac <mgrac@redhat.com> - 3.0.12-20
changelog:
  - fencing: Accept other values for yes (on, true)
    (fence-agents-Accept-other-values-for-true.patch)
    Resolves: rhbz#679502


author: Marek Grac <mgrac@redhat.com> - 3.0.12-21
changelog:
  - fence_rhevm: Update URL for RHEV-M REST API
    (fence_rhevm-Update-URL-to-RHEV-M-REST-API.patch)
    Resolves: rhbz#681674


author: Marek Grac <mgrac@redhat.com> - 3.0.12-22
changelog:
  - fence_cisco_ucs: Add support for sub-organizations
    (fence_cisco_ucs-Support-for-sub-organization.patch)
    (fence_cisco_ucs-Fix-for-support-for-sub-organization.patch)
    Resolves: rhbz#678904


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-23
changelog:
  - fence_ipmilan: Correct return code for diag operation
    (fence_ipmilan_correct_return_code_for_diag_operation.patch)
    Resolves: rhbz#655764


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.1-6
changelog:
  - Fix man page references: fence_virtd.conf -> fence_virt.conf
    (fix_man_page_references_fence_virtd_conf_fence_virt_conf.patch)
    Resolves: rhbz#667170


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-5
changelog:
  - move library to /lib so the binaries needed when /usr might
    not be mounted can link to it (#669077)


author: John Dennis <jdennis@redhat.com> - 2.1.10-1
changelog:
  - Upgrade to latest upstream release
    Feature improvements
    * Install the "radcrypt" program.
    * Enable radclient to send requests containing MS-CHAPv1
      Send packets with: MS-CHAP-Password = "password".  It will
      be automatically converted to the correct MS-CHAP attributes.
    * Added "-t" command-line option to radtest.  You can use "-t pap",
     "-t chap", "-t mschap", or "-t eap-md5".  The default is "-t pap"
    * Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120
      This change and the previous one makes PEAP testing much easier.
    * Added more documentation and examples for the "passwd" module.
    * Added dictionaries for RFC 5607 and RFC 5904.
    * Added note in proxy.conf that we recommend setting
      "require_message_authenticator = yes" for all home servers.
    * Added example of second "files" configuration, with documentation.
      This shows how and where to use two instances of a module.
    * Updated radsniff to have it write pcap files, too.  See '-w'.
    * Print out large WARNING message if we send an Access-Challenge
      for EAP, and receive no follow-up messages from the client.
    * Added Cached-Session-Policy for EAP session resumption.  See
      raddb/eap.conf.
    * Added support for TLS-Cert-* attributes. For details, see
      raddb/sites-available/default, "post-auth" section.
    * Added sample raddb/modules/{opendirectory,dynamic_clients}
    * Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
    * Added RFCs 5607, 5904, and 5997.
    * For EAP-TLS, client certificates can now be validated using an
      external command.  See eap.conf, "validate" subsection of "tls".
    * Made rlm_pap aware of {nthash} prefix, for compatibility with
      legacy RADIUS systems.
    * Add Module-Failure-Message for mschap module (ntlm_auth)
    * made rlm_sql_sqlite database configurable.  Use "filename"
      in sql{} section.
    * Added %{tolower: ...string ... }, which returns the lowercase
      version of the string.  Also added %{toupper: ... } for uppercase.

    Bug fixes
    * Fix endless loop when there are multiple sub-options for
      DHCP option 82.
    * More debug output when sending / receiving DHCP packets.
    * EAP-MSCHAPv2 should return the MPPE keys when used outside
      of a TLS tunnel.  This is needed for IKE.
    * Added SSL "no ticket" option to prevent SSL from creating sessions
      without IDs.  We need the IDs, so this option should be set.
    * Fix proxying of packets from inside a TTLS/PEAP tunnel.
      Closes bug #25.
    * Allow IPv6 address attributes to be created from domain names
      Closes bug #82.
    * Set the string length to the correct value when parsing double
      quotes.  Closes bug #88.
    * No longer look users up in /etc/passwd in the default configuration.
      This can be reverted by enabling "unix" in the "authorize" section.
    * More #ifdef's to enable building on systems without certain
      features.
    * Fixed SQL-Group comparison to register only if the group
      query is defined.
    * Fixed SQL-Group comparison to register <instance>-SQL-Group,
      just like rlm_ldap.  This lets you have multiple SQL group checks.
    * Fix scanning of octal numbers in "unlang".  Closes bug #89.
    * Be less aggressive about freeing "stuck" requests.  Closes bug #35.
    * Fix example in "originate-coa" to refer to the correct packet.
    * Change default timeout for dynamic clients to 1 hour, not 1 day.
    * Allow passwd module to map IP addresses, too.
    * Allow passwd module to be used for CoA packets
    * Put boot filename into DHCP header when DHCP-Boot-Filename
      is specified.
    * raddb/certs/Makefile no longer has certs depend on index.txt and
       serial.  Closes bug #64.
    * Ignore NULL errorcode in PostgreSQL client.  Closes bug #39
    * Made Exec-Program and Exec-Program-Wait work in accounting
      section again.  See sites-available/default.
    * Fix long-standing memory leak in esoteric conditions.  Found
      by Jerry Nichols.
    * Added "Password-With-Header == userPassword" to raddb/ldap.attrmap
      This will automatically convert more passwords.
    * Updated rlm_pap to decode Password-With-Header, if it was base64
      encoded, and to treat the contents as potentially binary data.
    * Fix Novell eDir code to use the right function parameters.
      Closes bug #86.
    * Allow spaces to be escaped when executing external programs.
      Closes bug #93.
    * Be less restrictive about checking permissions on control socket.
      If we're root, allow connecting to a non-root socket.
    * Remove control socket on normal server exit.  If the server isn't
      running, the control socket should not exist.
    * Use MS-CHAP-User-Name as Name field from EAP-MSCHAPv2 for MS-CHAP
      calculations.  It *MAY* be different (upper / lower case) from
      the User-Name attribute.  Closes bug #17.
    * If the EAP-TLS methods have problems, more SSL errors are now
      available in the Module-Failure-Message attribute.
    * Update Oracle configure scripts.  Closes bug #57.
    * Added text to DESC fields of doc/examples/openldap.schema
    * Updated more documentation to use "Restructured Text" format.
      Thanks to James Lockie.
    * Fixed typos in raddb/sql/mssql/dialup.conf.  Closes bug #11.
    * Return error for potential proxy loops when using "-XC"
    * Produce better error messages when slow databases block
      the server.
    * Added notes on DHCP broadcast packets for FreeBSD.
    * Fixed crash when parsing some date strings.  Closes bug #98
    * Improperly formatted Attributes are now printed as "Attr-##".
      If they are not correct, they should not use the dictionary name.
    * Fix rlm_digest to be check the format of the Digest attributes,
      and return "noop" rather than "fail" if they're not right.
    * Enable "digest" in raddb/sites-available/default.  This change
      enables digest authentication to work "out of the box".
    * Be less aggressive about marking home servers as zombie.
      If they are responding to some packets, they are still alive.
    * Added Packet-Transmit-Counter, to track detail file retransmits.
      Closes bug #13.
    * Added configure check for lt_dladvise_init().  If it exists, then
      using it solves some issues related to libraries loading libraries.
    * Added indexes to the MySQL IP Pool schema.
    * Print WARNING message if too many attributes are put into a packet.
    * Include dhcp test client (not built by default)
    * Added checks for LDAP constraint violation.  Closes bug #18.
    * Change default raddebug timeout to 60 seconds.
    * Made error / warning messages more consistent.
    * Correct back-slash handling in variable expansion.  Closes bug #46.
      You SHOULD check your configuration for backslash expansion!
    * Fix typo in "configure" script (--enable-libltdl-install)
    * Use local libltdl in more situations.  This helps to avoid
      compile issues complaining about lt__PROGRAM__LTX_preloaded_symbols.
    * Fix hang on startup when multiple home servers were defined
      with "src_ipaddr" field.
    * Fix 32/64 bit issue in rlm_ldap.  Closes bug #105.
    * If the first "listen" section defines 127.0.0.1, don't use that
      as a source IP for proxying.  It won't work.
    * When Proxy-To-Realm is set to a non-existent realm, the EAP module
      should handle the request, rather than expecting it to be proxied.
    * Fix IPv4 issues with udpfromto.  Closes bug #110.
    * Clean up child processes of raddebug.  Closes bugs #108 and #109
    * retry OTP if the OTP daemon fails.  Closes bug #58.
    * Multiple calls to ber_printf seem to work better.  Closes #106.
    * Fix "unlang" so that "attribute not found" is treated as a "false"
      comparison, rather than a syntax error in the configuration.
    * Fix issue with "Group" attribute.


author: John Dennis <jdennis@redhat.com> - 2.1.10-3
changelog:
  - Resolves: #644100, Rebase to current release
  - Fix 666589 - removing freeradius from system does not delete the user "radiusd"
    fix scriptlet argument testing, simplify always exiting with zero


author: John Dennis <jdennis@redhat.com> - 2.1.10-5
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-1
changelog:
  - update from gcc-4_4-branch
    - GCC 4.4.5 release
    - PRs boehm-gc/34544, c++/44991, c++/45315, c/44555, fortran/31588,
  	fortran/43954, fortran/44660, fortran/45595, libffi/45677,
  	libfortran/45532, middle-end/40386, middle-end/41551,
  	middle-end/42245, middle-end/42509, middle-end/44554,
  	middle-end/44632, middle-end/44763, middle-end/45234,
  	middle-end/45262, middle-end/45312, middle-end/45423,
  	middle-end/45678, other/45443, rtl-optimization/39453,
  	rtl-optimization/40101, rtl-optimization/41697,
  	rtl-optimization/42246, rtl-optimization/42249,
  	rtl-optimization/42294, rtl-optimization/42388,
  	rtl-optimization/42389, rtl-optimization/42775,
  	rtl-optimization/44691, rtl-optimization/44919,
  	rtl-optimization/45353, rtl-optimization/45728, target/35664,
  	target/41484, target/44452, target/44575, target/44805,
  	target/45070, target/45296, target/45843, tree-optimization/44977,
  	tree-optimization/45109, tree-optimization/45709
  - yet another -Wunused-but-set* fix for C++ consts in
    templates (PR c++/45588)
  - emit slightly more compact .eh_frame
  - VTA backports
    - PRs debug/45055, debug/45500, middle-end/45484, rtl-optimization/45137
  - fix ICE in output_die with function local types (#527510, PR debug/41063)
  - speed up locale::locale() ctor if _S_global hasn't been changed
    (#635708, PR libstdc++/40088)
  - fix ICE in dwarf2out_finish (#632847, PR debug/45660)
  - fix VTA ICE in caller-save.c (#622060, PR debug/45259)
  - fix -freorder-blocks-and-partition -fnon-call-exceptions
    (PR middle-end/45458)
  - ivopts improvements (#592502)


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-2
changelog:
  - update from gcc-4_4-branch
    - PRs bootstrap/44621, c++/18451, c++/40738, c++/46024, fortran/33595,
  	fortran/42169, fortran/46140, libfortran/45710, libgfortran/46010,
  	libgfortran/46373, middle-end/43690, middle-end/44569,
  	middle-end/46019, middle-end/46419, target/45820, target/45946,
  	target/46419, testsuite/40858, testsuite/45543,
  	tree-optimization/46107
  - fix asm goto handling (PR rtl-opt/46226)
  - -Wunused-but-set* fix for computed goto (PR c/46015)
  - fix -Wunused-but-set* for ObjC and ObjC++
  - VTA backports
    - PRs debug/45656, debug/45939, debug/46252, debug/46255,
  	tree-optimization/46066, tree-optimization/46099


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-3
changelog:
  - update from gcc-4_4-branch
    - PRs c++/46538, fortran/45742, fortran/46638, fortran/46668,
  	fortran/46753, libgomp/45240, middle-end/46534,
  	rtl-optimization/46337, tree-optimization/46663
  - VTA backports
    - PRs debug/46258, debug/46387, debug/46771, rtl-optimization/46571,
  	target/45870
  - z196 support (#633375)
  - s390{,x} prefetch improvements (#632366)
  - s390{,x} literal pool ref handling fix for qrst constraints
    and fp zero load improvement (#632370)
  - power7 single precision smax/smin improvement (#630169)
  - power7 double precision sqrt improvement (PR target/42747)


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-4
changelog:
  - ppc64 -mcmodel={medium,large} support (#630166)
  - reserve outgoing parameter save area on ppc64 if there
    is just __tls_get_addr call (#624889)
  - optimize/target attribute fix (#659582)


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-5
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/45081, fortran/46794, fortran/46874, middle-end/45852,
  	preprocessor/39213, rtl-optimization/46865, target/22224,
  	target/40468, target/43309, target/45447, target/46880,
  	target/46915, testsuite/33033
  - VTA backports
    - PRs debug/46893, target/47201
  - fix regmove REG_EQUAL handling (PR rtl-optimization/46804)


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-6
changelog:
  - update from gcc-4_4-branch
    - PRs c++/45894, c++/47589, fortran/47569, libstdc++/47354,
  	rtl-optimization/46603, target/44606, target/46610
    - fix avxintrin.h _mm{,256}_mask{load,store}_p{d,s} (#635015,
      PR target/47318)
  - rebuilt against newer binutils to enable PowerPC64 -mcmodel={medium,large}
    support, define __CMODEL_MEDIUM__ or __CMODEL_LARGE__ in such cases
    and fix x+const@toc printing bug (#630166)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-42.fc14
changelog:
  - Fix occasionall unfound source lines (affecting at least glibc debugging).
  - Fix const/volatile qualifiers of C++ types (PR c++/12328).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-45.el6
changelog:
  - [vla] Disable the unfinished types garbage collector (BZ 682891).
  - [vla] New testcase for the unfinished types garbage collector (for BZ 682891).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-47.el6
changelog:
  - [ifunc] Fix ppc64 function descriptors compatibility.
  - detach-as-stopped kernel workaround is now always active, not just on RHEL-5.


author: Tim Waugh <twaugh@redhat.com> - 8.70-7
changelog:
  - Fixed jbig2dec-nullderef patch (bug #621118).
  - Applied upstream patch to fix iname.c segfault (bug #629562).


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.21.1
changelog:
  - Revert "Optimize memcpy, mempcpy and memmove" to let broken software
    continue to be broken (#676065)
  - Optimize memset (#676076)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.22.1
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)


author: Ray Strode <rstrode@redhat.com> 2.30.2-7
changelog:
  - Drop panel names from default config so they don't override
    translated fallback names
    Resolves: #633853


author: Ray Strode <rstrode@redhat.com> 2.30.2-10
changelog:
  - Fix monitor naming problem noticed by QE when testing fix
    that went in 2.30.2-8
    Related: #585312


author: Ray Strode <rstrode@redhat.com> 2.30.2-11
changelog:
  - Fix size negotiation problem noticed by QE and GSS when
    testing fix that went in 2.30.2-9
    Resolves: #671088
    Related: #607665


author: Ray Strode <rstrode@redhat.com> 2.30.2-12
changelog:
  - Fix positioning negotiation problem noticed by QE when
    testing fix that went in 2.30.2-11
    Resolves: #671088
  - Improve monitor labeling heuristics
    Related: #585312


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Do not ask the user to look at the help file on suspend failure,
    it is already out of date.
  - Resolves: #640296


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-5
changelog:
  - Reinstate the "Do nothing" option on the lid close combo because
    per-screen DPMS does not work in RHEL6.
  - Resolves: #623674


author: Matthias Clasen <mclasen@redhat.com> - 2.18.9-5
changelog:
  - Update Gujarati translation
  - Fix a problem with the location entry in file choosers
  Resolves: #636476, #625440. #647922, #647923


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-10
changelog:
  - Fix emblem handling in trash (#616145)
  - Require new gnome-disk-utility (#636540)
  - Hide mounts having a path element starting with dot (#624795)
  - Fix SELinux while accessing a leaked /dev/ptmx file descriptor (#616838)


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-9
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters.
  - Resolves: #576048


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-10
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters. This fixes the patch from -9.
  - Resolves: #576048


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Rebase to upstream version 1.2.4 (RHBZ#642631).
    * Python bindings (python-hivex subpackage).
    * Adds hivex_set_value API call (Conrad Meyer).
    * Miscellaneous small bug fixes.
  - Fix Source0.
  - Fix builds with recent perl (Dan Horák).


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-3
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-1
changelog:
  - Re-based to 3.10.9 with fixes from Fedora (bug #652255).
  - Change shebang /usr/bin/env python -> /usr/bin/python (bug #608003).
  - Added COPYING to common sub-package (bug #613707).
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #616569).
  - Fixed "CUPS Web Interface" button (bug #633899).


author: Joe Orton <jorton@redhat.com> - 2.2.15-6
changelog:
  - ab: fail gracefully for OOM allocating stats structures (#645846)
  - init script: use $STOP_DELAY as delay before SIGKILL of parent (#657480)
  - stop multiple invocations of filter init functions (#631849)
  - mod_ssl: avoid overlapping memcpy (#652335)
  - mark httpd.conf as noreplace


author: Joe Orton <jorton@redhat.com> - 2.2.15-7
changelog:
  - mod_ldap: fix caching with per-vhost directive use (#676635)
  - mod_ssl: fix startup with duplicate SSL vhost configurations (#676831)
  - prefork: ensure early child exit during graceful restart (#679476)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.1-0
changelog:
  - 1.1 rel# Patch to the 1.1 fix 2967 http://www.open-mpi.org/software/hwloc/nightly/v1.1/hwloc-1.1rc6r2967.tar.bz2
  - Fix hwloc_bitmap_to_ulong right after allocating the bitmap.
  - Fix the minimum width of NUMA nodes, caches and the legend in the graphical lstopo output.
  - Cleanup error management in hwloc-gather-topology.sh.
  - Add a manpage and usage for hwloc-gather-topology.sh on Linux.
  - Rename hwloc-gather-topology.sh to hwloc-gather-topology to be consistent with the upcoming version 1.2ease


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-4
changelog:
  - Resolves: #651915 Wrong window position with ibus-x11
    Added ibus-651915-x11-position.patch
  - Resolves: #633330 Fixed kn.po
  - Resolves: #635541 Fixed gu.po
    Added ibus-1.3.4-po-2010-11-17.tar.bz2


author: Daiki Ueno <dueno@redhat.com> - 1.3.0-2
changelog:
  - Add ibus-m17n-641243-indic-ranks.patch.
  - Fix bug 641243 - Ibus does not load all the keymaps for a language
    that is used for logging in
  - Add ibus-m17n-652201-altgr.patch.
  - Fix bug 652201 - [Indic] Rupee Symbol (U+20B9) Need to include in
    Indic Keyboard


author: Deepak Bhole <dbhole@redhat.com> - 1.0-3
changelog:
  - Bump to 1.0 proper
  - Install to jre dir only
  - Restrict access to net.sourceforge.jnlp.*
  - Resolves bugs 674519, 674517, 674524, 671470


author: Deepak Bhole <dbhole@redhat.com> - 1.0-5
changelog:
  - Minor comment/group/etc. updates from omajid@redhat.com
  - Added base package requirement for javadoc subpackage


author: Deepak Bhole <dbhole@redhat.com> - 1.0.1-1
changelog:
  - Bumped to 1.0.1
  - Removed icedtea-web-pkg-access.patch (now upstream)
  - Resolves CVE-2011-0706 and CVE-2010-4450


author: Deepak Bhole <dbhole@redhat.com> - 1.0.1-3
changelog:
  - Resolves rhbz#645781 (desktop sharing now works)
  - Updated the classloader sharing patch to fix loader sharing rules
  - Added version and release string in plugin display


author: Deepak Bhole <dbhole@redhat.com> 1.0.2-1
changelog:
  - Resolves rhbz#693601 
  - Update to IcedTea-Web 1.0.2
  - Dropped patch0 (instance validity check). Now part of 1.0.2
  - Also resolves #682674 by adding a javaws Provides


author: Jens Petersen <petersen@redhat.com> - 0.108.0-3.5
changelog:
  - only enable XIM for X locale compose for necessary locales (#616061)
    (for pt_BR, fi_FI, am_ET, el_GR, and ru_RU):
  - drop imsettings-none.conf-gtk-xim-default.patch
  - add imsettings-xinput-xcompose.patch


author: Petr Lautrbach <plautrba@redhat.com> 9.03.18-1
changelog:
  - don't use the ipv6_exec_ip wrapper
  - don't accidentally cause sit module to be loaded on shutdown. (#654098, <ejsheldrake@gmail.com>)
  - simplify various string match constructs. (#558575, <ville.skytta@iki.fi>)
  - explicitly pass both device and dir when remounting read-only (#620461, <phr@doc.ic.ac.uk>)
  - add infiniband mapping (#648524, <monis@voltaire.com>)
  - fix ifdown calling nmcli for NM-managed devices (#612934, <jklimes@redhat.com>)
  - allow 0 as a vlan tag. (#635360)
  - support multiple IP addreses via IPADDRn, PREFIXn (or NETMASKn) (#633984)
  - stop tty and serial also on runlevel 's' (#629257)
  - system z optimized sysctl settings per default (#633323)
  - don't run kexec-disable for runlevels [S016] (#658138)
  - add # as a valid character in network device names (<Matt_Domsch@dell.com>)
  - use SYSCTLDEVICE without . (#667211, <notting@redhat.com>)
  - handle 'MASTER' being quoted. (#651450, <gfidente@redhat.com>)
  - test if there is /dev/rtc before syncing hardware clock (#598850)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.19-1
changelog:
  - sys-unconfig(8) manpage fix (#674397)
  - set default shmmax and shmall for certain architectures (#660036)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.22-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode (#682879)
  - network-functions: fix check for unmanaged devices (#670154)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-14
changelog:
  - Update to upstream 2.0.0rc3 (#680993)
  - Set minimum version of sssd to 1.5.1-12
  - Remove SuitespotGroup patch
  - Rebase remove-pkinit patch


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-16
changelog:
  - Use realm provided by installer in LDAP Updater (#684744)
  - Use args for domain and server when doing DNS discovery in client (#684780)
  - Fix 2 SELinux issues in dogtag replication (#684269)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-17
changelog:
  - Wait for Directory Service ports to open (#688934)
  - Mixed case hostname can cause issues and confusion (#688622)
  - Wrong timeout parameter in ipapython (#684273)
  - Run ipa-ldap-updater on upgrades (#688931)
  - Internal Error and trace back when adding DNS AAAA record (#689452)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-19
changelog:
  - Port 7390 is managed by selinux-policy-3.7.19-80. Update
    ipa-repl_selinux.patch to not manage it any more. (#691883)
  - Patch to fix setting gidnumber when a user is created. (#692168)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-20
changelog:
  - Set min version of 389-ds-base to 1.2.8.0-1 for fix in BZ 693466.
  - Fix some problems in IPA schema (#692978)
  - postalCode should be a string not an integer (#692945)


author: Petr Sabata <psabata@redhat.com> - 2.6.32-13
changelog:
  - Do not segfault when creating veth with peer option without any name provided
  - link_veth_segv.patch
  - Resolves: rhbz#636943


author: Petr Sabata <psabata@redhat.com> - 2.6.32-14
changelog:
  - Fix'd to properly build against xtables interface
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986


author: Petr Sabata <psabata@redhat.com> - 2.6.32-16
changelog:
  - Link and install m_xt.so properly
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986
  - Related: rhbz#678986


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-4
changelog:
  - added IPv6 transparent proxy support (rhbz#590186)
  - added auditing support (rhbz#642393)
    Thanks to Thomas Graf for the patch
  - init: restore context for save and use /etc/sysconfig for temps (rhbz#644273)


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.12
changelog:
  - 442980 partial offload boot: Remove the OFFLOAD_BOOT_SUPPORTED ifdef. This
    effectively makes OFFLOAD_BOOT_SUPPORTED always enabled.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.14
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code.
  - 599539 document brcm_iscsiuio options in man page.
  - 599542 document iscsiadm host mode hostno argument.
  - 631821 iscsi discovery was not incrementing ITT when multiple text
  commands were sent. This prevented discovery from finding all targets.
  - 634021 iscsi init script did not shutdown all sessions during system
  shutdown/reboot causing the host to hang.
  - 658428 iscsi init script should not shutdown sessions when root is
  using them and should not fail startup on all iscsiadm login failures.
  - 635899 sync brcm_iscsiuio to 0.6.2.13 to add support for IPv6, VLAN,
  57711E, and 57712 hardware.
  - 640115 fix hang caused due to race in ISCSI_ERR_INVALID_HOST handling.
  - 640340 fix iscsiadm exit codes.
  - 624437 support hostnames in node mode.


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.16
changelog:
  - 529443 fwparam_sysfs: fix pathname manipulation error in
    fwparam_sysfs_boot_info.
  - 529443 Make libiscsi nodes remember the interface they connect through.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.17
changelog:
  - 634021 Fix in .14 added regression during iscsi startup that prevented
  sessions from getting created.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.18
changelog:
  - fix iscsiadm exit code when iscsid is not running and the
  discovery command is run.
  - 689359 Fix uIP when using DCB for FCoE
  - 691902 Fix iscsiadm SendTargets offload support when the PDU's data len
  is 8K.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.20
changelog:
  - 696267 Create a offloaded session if the iscsi_host MAC and ibft
  MAC match. This enables support for Broadcoms hba boot mode.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.21
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code [patch from .14 got dropped
  due to mismerge].


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.33.1.b20
changelog:
  - Bump to IcedTea 1.9.3
  - Build with --disable-webstart and remove all javaws and plugin references
  - Moved pre 2009 changelog entries to a separate file to keep spec file small
  - Resolves: rhbz#658208


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-1
changelog:
  - Resolves: bug 455305 - <cfu@redhat.com>
    CA ECC Signing Key Failure
  - Resolves: bug 502111 - <cfu@redhat.com>
    Need JSS interface for NSS's PK11_GenerateKeyPairWithOpFlags() function
  - Resolves: bug 503809 - <mharmsen@redhat.com>
    Update JSS version to 4.2.6
  - Resolves: bug 503817 - <mharmsen@redhat.com>
    Create JSS Javadocs as their own RPM


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-4
changelog:
  - Resolves: bug 224688 - <cfu@redhat.com>
    Support ECC POP on the server
  - Resolves: bug 469456 - <jmagne@redhat.com>
    Server Sockets are hard coded to IPV4
  - Resolves: bug 509183 - <mharmsen@redhat.com>
    Set NSS dependency >= 3.12.3.99


author: John Dennis <jdennis@redhat.com> - 4.2.6-10
changelog:
  - Resolves: bug 656094 - <jdennis@redhat.com>
    Rebase jss to at least jss-4.2.6-9
  - <jdennis@redhat.com>
    merge in updates from Fedora
    move jar location to %{_libdir}/jss and provide symlinks, on 32bit looks like this:
      /usr/lib/java/jss4.jar -> /usr/lib/jss/jss4.jar
      /usr/lib/jss/jss4-<version>.jar
      /usr/lib/jss/jss4.jar -> jss4-<version>.jar
      /usr/lib/jss/libjss4.so
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 647364 - <cfu@redhat.com>
    Expose updated certificate verification function in JSS
  - bug 529945 - <cfu@redhat.com>
    expose NSS calls for OCSP settings
  - bug 638833 - <cfu@redhat.com>
    rfe ecc - add ec curve name support in JSS and CS
  - <rcritten@redhat.com>
    Need to explicitly catch UnsatisfiedLinkError exception for System.load()
  - bug 533304 - <rcritten@redhat.com>
    Move location of libjss4.so to subdirectory and use System.load() to
    load it instead of System.loadLibrary() for Fedora packaging compliance


author: Christina Fu <cfu@redhat.com> - 4.2.6-11
changelog:
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 661142 - <cfu@redhat.com>
    Verification should fail when a revoked certificate is added


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.7.el6]
changelog:
  - [virt] x86: better fix for race between nmi injection and enabling nmi window (Aristeu Rozanski)
  - [virt] x86: revert "fix race between nmi injection and enabling nmi window" (Aristeu Rozanski)


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.8.el6]
changelog:
  - [scsi] mark bfa fc adapters tech preview (Rob Evers) [698384]
  - [virt] Revert pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Aristeu Rozanski) [691310]
  - [i686] nmi watchdog: Enable panic on hardlockup (Don Zickus) [677532]
  - [netdrv] Adding Chelsio Firmware for cxgb4 (Neil Horman) [691929]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.9.el6]
changelog:
  - [net] limit socket backlog add operation to prevent possible DoS (Jiri Pirko) [694396] {CVE-2010-4251}
  - [scsi] mpt2sas: prevent heap overflows and unchecked (Tomas Henzl) [694023] {CVE-2011-1494 CVE-2011-1495}
  - [fs] epoll: prevent creating circular epoll structures (Don Howard) [681683] {CVE-2011-1082}
  - [mm] Prevent page_fault at do_mm_track_pte+0xc when Stratus dirty page tracking is active (Larry Woodman) [693786]
  - [fs] GFS2 causes kernel panic in spectator mode (Steven Whitehouse) [696535]
  - [net] bonding: interface doesn't issue IGMP report on slave interface during failover (Flavio Leitner) [640690]
  - [scsi] isci: validate oem parameters early, and fallback (David Milburn) [698016]
  - [scsi] isci: fix oem parameter header definition (David Milburn) [698016]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.10.el6]
changelog:
  - [netdrv] cnic: fix hang due to rtnl_lock (Mike Christie) [694874]
  - [netdrv] firmware: re-add the recently deleted bnx2x fw 6.2.5.0 (Michal Schmidt) [690470]
  - [netdrv] firmware/bnx2x: add 6.2.9.0 fw, remove unused fw (Michal Schmidt) [690470]
  - [netdrv] bnx2x, cnic: Disable iSCSI if DCBX negotiation is successful (Michal Schmidt) [690470]
  - [netdrv] bnx2x: don't write dcb/llfc fields in STORM memory (Michal Schmidt) [690470]
  - [netdrv] bnx2x: Update firmware to 6.2.9 (Michal Schmidt) [690470]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.12.el6]
changelog:
  - [scsi] beiscsi: update version (Mike Christie) [674340]
  - [scsi] be2iscsi: fix chip cleanup (Mike Christie) [674340]
  - [scsi] be2iscsi: fix boot hang due to interrupts not getting rearmed (Mike Christie) [674340]
  - [scsi] bnx2fc: fix regression due to incorrect setup of em for npiv port (Mike Christie) [700672]
  - [ppc] pseries: Use a kmem cache for DTL buffers (Steve Best) [695678]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.13.el6]
changelog:
  - [scsi] hpsa: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] cciss: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] ibft: fix oops during boot (Mike Christie) [698737]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.14.el6]
changelog:
  - [scsi] hpsa: fix reading a write only register causes a hang (Rob Evers) [703262]
  - [scsi] mpt2sas: remove the use of writeq, since writeq is not atomic (Tomas Henzl) [701947]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.19.1.el6]
changelog:
  - [crypto] sha-s390: Reset index after processing partial block (Herbert Xu) [678996 626515]
  - [net] clear heap allocations for privileged ethtool actions (Jiri Pirko) [672434 672435] {CVE-2010-4655}
  - [usb] iowarrior: don't trust report_size for buffer size (Don Zickus) [672421 672422] {CVE-2010-4656}
  - [virt] virtio: console: Wake up outvq on host notifications (Amit Shah) [678558 643750]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] sctp: fix kernel panic resulting from mishandling of icmp dest unreachable msg (Neil Horman) [667028 667029] {CVE-2010-4526}
  - [mm] install_special_mapping skips security_file_mmap check (Frantisek Hrbata) [662198 662199] {CVE-2010-4346}
  - [kdump] vt-d: Handle previous faults after enabling fault handling (Takao Indoh) [678485 617137]
  - [kdump] Enable the intr-remap fault handling after local apic setup (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Fix the vt-d fault handling irq migration in the x2apic mode (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Quirk for masking vtd spec errors to platform error handling logic (Takao Indoh) [678485 617137]
  - [virt] virtio: console: Don't block entire guest if host doesn't read data (Amit Shah) [678562 643751]
  - [virt] virtio: console: Prevent userspace from submitting NULL buffers (Amit Shah) [678559 635535]
  - [virt] virtio: console: Fix poll blocking even though there is data to read (Amit Shah) [678561 634232]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.20.1.el6]
changelog:
  - [dvb] kernel: av7110 negative array offset (Mauro Carvalho Chehab) [672403 672404] {CVE-2011-0521}
  - [fs] sunrpc: Correct a misapplied patch (J. Bruce Fields) [678094 678146] {CVE-2011-0714}
  - [netdrv] orinoco: fix TKIP countermeasure behaviour (Stanislaw Gruszka) [667908 667909] {CVE-2010-4648}
  - [kernel] /proc/vmcore: speed up access to vmcore file (Neil Horman) [683442 672937]
  - [netdrv] cnic: Fix big endian bug (Steve Best) [678484 676640]
  - [scsi] fcoe: drop FCoE LOGO in FIP mode (Mike Christie) [683814 668114]
  - [s390x] remove task_show_regs (Danny Feng) [677854 677855] {CVE-2011-0710}
  - [ib] cm: Bump reference count on cm_id before invoking callback (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [rdma] cm: Fix crash in request handlers (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [net] bridge: Fix mglist corruption that leads to memory corruption (Herbert Xu) [678172 659421] {CVE-2011-0716}
  - [netdrv] r8169: use RxFIFO overflow workaround and prevent RxFIFO induced infinite loops (Ivan Vecera) [680080 630810]
  - [s390x] kernel: nohz vs cpu hotplug system hang (Hendrik Brueckner) [683815 668470]
  - [netdrv] cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory (Doug Ledford) [633156 633157] {CVE-2010-3296}
  - [configs] redhat: added CONFIG_SECURITY_DMESG_RESTRICT option (Frantisek Hrbata) [683822 653245]
  - [kernel] restrict unprivileged access to kernel syslog (Frantisek Hrbata) [683822 653245]
  - [fs] cifs: allow matching of tcp sessions in CifsNew state (Jeff Layton) [683812 629085]
  - [fs] cifs: fix potential double put of TCP session reference (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent possible memory corruption in cifs_demultiplex_thread (Jeff Layton) [683812 629085]
  - [fs] cifs: eliminate some more premature cifsd exits (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent cifsd from exiting prematurely (Jeff Layton) [683812 629085]
  - [fs] CIFS: Make cifs_convert_address() take a const src pointer and a length (Jeff Layton) [683812 629085]
  - [kdump] kexec: accelerate vmcore copies by marking oldmem in /proc/vmcore as cached (Neil Horman) [683445 641315]
  - [virt] KVM: VMX: Disallow NMI while blocked by STI (Avi Kivity) [683783 616296]
  - [virt] kvm: write protect memory after slot swap (Michael S. Tsirkin) [683781 647367]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.21.1.el6]
changelog:
  - [netdrv] ixgbe: limit VF access to network traffic (Frantisek Hrbata) [684129 678717]
  - [netdrv] ixgbe: work around for DDP last buffer size (Frantisek Hrbata) [684129 678717]
  - [net] gro: reset dev and skb_iff on skb reuse (Andy Gospodarek) [688311 681970]
  - [x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs (Frank Arnold) [683813 652208]
  - [virt] virtio_net: Add schedule check to napi_enable call (Michael S. Tsirkin) [684268 676579]
  - [s390x] mm: add devmem_is_allowed() for STRICT_DEVMEM checking (Hendrik Brueckner) [684267 647365]
  - [powerpc] Don't use kernel stack with translation off (Steve Best) [684266 628951]
  - [powerpc] Initialise paca->kstack before early_setup_secondary (Steve Best) [684266 628951]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.23.1.el6]
changelog:
  - [x86] Revert "[x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs" (Frank Arnold) [683813 652208]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.24.1.el6]
changelog:
  - [fs] Revert "[fs] inotify: stop kernel memory leak on file creation failure" (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.26.1.el6]
changelog:
  - [net] bnep: fix buffer overflow (Don Howard) [681315 681316] {CVE-2011-1079}
  - [scsi] aic94xx: world-writable sysfs update_bios file (Don Howard) [679306 679307]
  - [x86] tc1100-wmi: world-writable sysfs wireless and jogdial files (Don Howard) [679306 679307]
  - [x86] acer-wmi: world-writable sysfs threeg file (Don Howard) [679306 679307]
  - [mfd] ab3100: world-writable debugfs *_priv files (Don Howard) [679306 679307]
  - [v4l] sn9c102: world-wirtable sysfs files (Don Howard) [679306 679307]
  - [x86] Fix EFI pagetable to map whole memory (Takao Indoh) [670850 664364]
  - [kernel] CAP_SYS_MODULE bypass via CAP_NET_ADMIN (Phillip Lougher) [681772 681773] {CVE-2011-1019}
  - [kernel] failure to revert address limit override in OOPS error path (Dave Anderson) [659572 659573] {CVE-2010-4258}
  - [fs] xfs: zero proper structure size for geometry calls (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [fs] xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1 (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [tty] tty_audit: fix tty_audit_add_data live lock on audit disabled (Danny Feng) [684275 680126]
  - [kernel] proc: protect mm start_code/end_code in /proc/pid/stat (Eugene Teo) [684572 684573] {CVE-2011-0726}
  - [net] dccp oops (Eugene Teo) [682957 682958] {CVE-2011-1093}
  - [firmware] dcdbas: force SMI to happen when expected (Shyam Iyer) [683440 664832]
  - [security] ima: fix add LSM rule bug (Eric Paris) [667914 667915] {CVE-2011-0006}
  - [sound] caiaq: Fix possible string buffer overflow (Jaroslav Kysela) [678475 678476] {CVE-2011-0712}
  - [net] ixgbe: add option to control interrupt mode (Andy Gospodarek) [670114 670110 622640 637332]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.27.1.el6]
changelog:
  - [scsi] megaraid: give FW more time to recover from reset (Tomas Henzl) [695322 692673]
  - [netdrv] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [683820 669231]
  - [sound] ALSA: hda - nvhdmi: Add missing codec IDs, unify names (Jaroslav Kysela) [683817 636922]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Larry Woodman) [695256 691310]
  - [net] fix ebtables stack infoleak (Eugene Teo) [681322 681323] {CVE-2011-1080}
  - [drm] fix unsigned vs signed comparison issue in modeset ctl ioctl (Don Howard) [679927 679928] {CVE-2011-1013}
  - [pci] Enable ASPM state clearing regardless of policy (Alex Williamson) [694073 681017]
  - [pci] Disable ASPM if BIOS asks us to (Alex Williamson) [694073 681017]
  - [mm] do not keep kswapd awake for an unreclaimable zone (Johannes Weiner) [694186 633825]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.28.1.el6]
changelog:
  - [net] bonding: fix jiffy comparison issues (Andy Gospodarek) [698109 696337]
  - [drm] radeon/kms: check AA resolve registers on r300 + regression fix (Dave Airlie) [680001 680002] {CVE-2011-1016}
  - [infiniband] uverbs: Handle large number of entries in poll CQ (Eugene Teo) [688429 696137] {CVE-2011-1044 CVE-2010-4649}
  - [net] sctp: fix the INIT/INIT-ACK chunk length calculation (Thomas Graf) [695386 690743] {CVE-2011-1573}
  - [net] CAN: Use inode instead of kernel address for /proc file (Danny Feng) [664560 664561] {CVE-2010-4565}
  - [fs] inotify: fix double free/corruption of stuct user (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] netfilter: ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689341 689342]
  - [net] bonding: change test for presence of VLANs (Jiri Pirko) [696487 683496]
  - [scsi] scsi_dh: fix reference counting in scsi_dh_activate error path (Mike Snitzer) [696889 680140]
  - [net] enable VLAN NULL tagging (Neil Horman) [683810 633571]
  - [scsi] scsi_dh: propagate SCSI device deletion (Mike Snitzer) [698114 669411]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.29.1.el6]
changelog:
  - [mm] Revert "[mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode" (Larry Woodman) [695256 691310]


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#632442, RT#6773)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.7
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696341,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, CVE-2011-0281,
    CVE-2011-0282, #671102, CVE-2011-0283, #669423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - switch to revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - add backported patch to not fail receipt of an AP-REQ if the signature check
    on the included PAC (if there is one) fails (#679612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696342,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-3
changelog:
  - fix file io race condition when file was created, but still does not exist (#660319)
  - use 'alternatives' for (m)ksh switching (#659658)
  - do not forget to restore file handles after execution of sourced script (#651888)
  - fix bug when here document got sometimes truncated (#644362)
  - do not forget to close autoloaded file with function definition (#643811)
  - fix wrong typeset handling of arrays that could caused a crash (#637052)
  - fix minor issues in man page (#619692)
  - fix crash when ksh get SIGPIPE while already executing signal handler (#616691)
  - fix wrong output redirection in SIGPIPE trap (#616684)
  - add RLIMIT_RTPRIO and RLIMIT_NICE support to ulimit (#582690)


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-6
changelog:
  - Resolves: bug 684028 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream mozilla id=640750


author: Alon Levy <alevy@redhat.com> - 0.1.0-4
changelog:
  - address review issues:
   - Group for main and devel and tools
   - Requires for devel and tools
  - fix changelog for previous entry (day was wrong, and macro quoting)


author: Alon Levy <alevy@redhat.com> - 0.1.2-1
changelog:
  - bump version to 0.1.2
   - style fixes
   - vscclient.c: fix tabulation
    - add copyright header
    - send init on connect, only start vevent thread on response
    - use hton,ntoh
    - read payload after header check, before type switch
    - update for vscard_common changes, empty Flush implementation
   - vcard_emul_nss: load coolkey in more situations
   - vscard_common.h:
    - VSCMsgInit capabilities and magic
    - VSCMsgReconnect stringified
    - define VSCARD_MAGIC
    - update copyright
    - fix message type enum
   - bump version to 0.1.1
    - vcard_emul,vcard_emul_nss
     - add VCARD_EMUL_INIT_ALREADY_INITED
     - add vcard_emul_replay_insertion_events
   - vreader: add vreader_queue_card_event
    Resolves: rhbz#663063


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Daniel Veillard <veillard@redhat.com> - 0.5.4-1
changelog:
  - update to new version to fix problems in libvirt-cim rebase
  - Resolves: rhbz#633332
  - fix a packaging naming problem on previous build
  - Resolves: rhbz#604551


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Petr Sabata <psabata@redhat.com> - 1.0.10-2
changelog:
  - Avoid NULL dereference when parsing supported_classes sys entry
  - Remove redundant buildroot definition
  - Resolves: rhbz#690014


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-3
changelog:
  - Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
  -                         the size of its entries are very large


author: Tom Lane <tgl@redhat.com> 3.9.4-1.el6_0.2
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688829
  - Add fix for CVE-2011-1167
  Resolves: #688742


author: Daniel Veillard <veillard@redhat.com> - 0.5.11-1.el6
changelog:
  - Rebase to 0.5.11 for RHEL-6.1
  - needed to bump libcmpiutil requirement to 0.5.4 due to incompatibilities
  - Resolves: rhbz#633336
  - Resolves: rhbz#633331


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.1
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#658143)
  - Make SASL work over UNIX domain sockets (rhbz#658144)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#656972)
  - Fix save/restore on root_squashed NFS (rhbz#656355)
  - Fix race on multiple migration (rhbz#658141)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Support forcing a CDROM eject (rhbz#658147)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.2
changelog:
  - spec file cleanups (rhbz#662045)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#662043)
  - Fix off-by-one error in clock-variable (rhbz#662046)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Ensure device is deleted from guest after unplug (rhbz#662041)
  - Distinguish between QEMU domain shutdown and crash (rhbz#662042)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.3
changelog:
  - Remove patches not suitable for proper Z-stream:
      - Export host information through SMBIOS to guests (rhbz#652678)
      - Support forcing a CDROM eject (rhbz#658147)
  - Plug several memory leaks (rhbz#672549)
  - Avoid memory overhead of matchpathcon (rhbz#672554)
  - Do not start libvirt-guests if that service is off (rhbz#668694)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.6
changelog:
  - Properly initialize supplementary groups for qemu process (rhbz#668692)
  - Make error reporting in libvirtd thread safe (CVE-2011-1486)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-9.el6
changelog:
  - Reorder nwfilter match extensions relative to state match (rhbz#678139)
  - Avoid overwriting error message in qemu driver (rhbz#678870)
  - Allow removing hash entries in virHashForEach (rhbz#681459)
  - Avoid double close on qemu domain restore (rhbz#672725)
  - Fix DomainObj refcounting/hashtable races in qemu driver (rhbz#670848)
  - Fix several memory leaks (rhbz#682249)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-11.el6
changelog:
  - Support vram specification for qxl graphics (rhbz#673578)
  - Fix parsing int options in virsh (rhbz#639587)
  - Use -o encryption=on instead of -e for qemu-img (rhbz#676984)
  - Support domain snapshots with current QMP (rhbz#589076)
  - Update auditing support (rhbz#642785)
  - Only request sound cgroup ACL when required (rhbz#680398)
  - Allow fine-tuning of device ACL permissions (rhbz#683163)
  - Support vhost in attach-interface (rhbz#683276)
  - Don't request cgroup ACL access for /dev/net/tun (rhbz#683305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-12.el6
changelog:
  - Fix vram settings for qxl graphics (rhbz#673578)
  - Free stream when domain shuts down while its console is open (rhbz#682741)
  - Use hardcoded python path in libvirt.py (rhbz#684204)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Eliminate potential null pointer deref when auditing macvtap devices (rhbz#642785)
  - Insert error messages to avoid a quiet abortion of commands (rhbz#605660)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-13.el6
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Handle DNS over IPv6 (rhbz#687896)
  - Start dnsmasq even if no dhcp ranges/hosts are specified (rhbz#687291)
  - Use a separate dhcp leases file for each network (rhbz#687551)
  - Fix a possible crash in storage driver (rhbz#684712)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-14.el6
changelog:
  - Fix delayed events when SASL is active (rhbz#624252)
  - Fix ref-counting bugs (rhbz#688774)
  - Log an error if on failure to connect to netlink socket (rhbz#689001)
  - Log error and abort network startup when radvd isn't found (rhbz#688957)
  - Add PCI sysfs reset access rights to qemu (rhbz#689002)
  - Fix regression with qemu:///session URI (rhbz#684655)
  - Avoid leaking PCI config fd into qemu (rhbz#687993)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-15.el6
changelog:
  - Fix return value for virJSONValueFromString if it fails (rhbz#688723)
  - Fix positioning to end of qemu log file (rhbz#689986)
  - Initialization error of qemuCgroupData in Qemu host usb hotplug (rhbz#690183)
  - 8021Qbh: Use preassociate-rr during the migration prepare stage (rhbz#684870)
  - Make error reporting in libvirtd thread safe (rhbz#689374)
  - Add missing dependencies (rhbz#690022)
  - Fix restoring a compressed save image (rhbz#691034)
  - Fix label restore bugs in qemu driver (rhbz#690737)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Petr Sabata <psabata@redhat.com> - 0.9.38-4
changelog:
  - patch to resolve hang observed during FCoE boot due to dcbx failing to initiate PFC and FCoE app priority negotiations
  - Resolves: rhbz#631587


author: Petr Sabata <psabata@redhat.com> - 0.9.41-4
changelog:
  - Upstream sync up to 4bf0f2db41be0b282e63646fb6b31f0a938d3865
  - Resolves: rhbz#694671
  - Resolves: rhbz#694323
  - Resolves: rhbz#694925


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-10
changelog:
  - Fix possible exception path in the luci cluster model object related to bz624558 (replace broadcast option with udpu)
  - Correct duplication of the fence brocade menu item in the fence devices section related to bz681506 (readd urgently fence_brocade to the list of shipped fence_agents in luci)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-11
changelog:
  - Additional fix for bz613871 (luci should not give ungraceful error messages when encountering fence devices that it does not recognize/support)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-12
changelog:
  - Fix bz617587 (Luci doesn't display underlying errors)
  - Fix bz617586 (Implement progress dialog for long-running operations)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-13
changelog:
  - More fixes for bz617586 (Implement progress dialog for long-running operations)
  - More fixes for bz616239 (Need option to completely destroy cluster)
  - More fixes for bz557234 ([RFE] luci update to handle private network/hostnames for cluster create/config)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.82-1
changelog:
  - Allow exclusive activation of snapshots in a cluster.
  - Add addnodeonresume and addnodeoncreate switch to dmsetup.
  - Add dm_tak_secure_data fn to libdevmapper to wipe all ioctl buffers in kernel.
  - Increase hash table size to 1024 LV names and 64 PV uuids.
  - Fix node and symlink operations in /dev for recent udev_sync optimalisation.
  - Remove unneeded checks for open_count in lv_info().
  - Synchronize with udev before checking open_count in lv_info().
  - Remove fs_unlock() from lv_resume path.
  - Allow CLVMD_CMD_SYNC_NAMES to be propagated around the cluster if requested.
  - Avoid rebuilding of uuid validation table.
  - Improve lvcreate "insufficient extents" errors to "insufficient free space".
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-1
changelog:
  - Fix CRC32 calculation on big endian CPU (2.02.75).
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-3
changelog:
  - Mitigate annoying error warning from device is usable check if run as non-root.
  - Fallback to control node creation only if node doesn't exist yet.
  - Avoid possible endless loop in _free_vginfo when 4 or more VGs have same name.
  - Fix to make resuming exclusive cluster mirror use local target type.
  - Lower secure data flag warning to verbose level if unsupported by kernel.


author: Andrew Beekhof <andrew@beekhof.net> - 0.4.0-0.28.0b41287.git
changelog:
  - Refresh from upstream
  - Local broker is now optional
  - Functional Host, Network and Services (including support for OCF Resources) agents
    Related: rhbz#658828


author: Andrew Beekhof <andrew@beekhof.net> - 0.4.0-0.29.0b41287.git
changelog:
  - Update to upstream version 2798d52.git
    + Support password authentication to qpid
    + Prevent errors when matahari is started at boot
    Related: rhbz#658828


author: Andrew Beekhof <abeekhof@redhat.com> - 0.4.0-1
changelog:
  - Split the packaging up, one subpackage per agent 
  - Remove dependancy on qpid-cpp-server-devel
  - Convert agents to the QMFv2 API
  - Rebuild for updated qpid-cpp
    Related: rhbz#658828


author: Andrew Beekhof <abeekhof@redhat.com> - 0.4.0-2
changelog:
  - Add explicit versioned dependancies between relevant sub-packages
  - Avoid the -libs package depending on QMF libraries
  - Fix post and postun scripts for matahari-service
  - Resolves: rhbz#688164 rhbz#692400 rhbz#688197 
  - Resolves: rhbz#674185 rhbz#690587


author: Doug Ledford <dledford@redhat.com> - 3.2-1
changelog:
  - Update to latest upstream release
  - Related: bz633306, bz633667, bz633671, bz633688, bz633690, bz633692
  - Fix mdadm udev rules file
  - Resolves: bz605710
  - Process the Y option
  - Resolves: bz636883


author: Doug Ledford <dledford@redhat.com> - 3.2.1-1
changelog:
  - Update to latest upstream release
  - Don't report mismatch counts on either raid1 or raid10 devices
  - Check both active and idle arrays during raid check runs
  - Move raid-check script to /usr/sbin, add a crontab entry to /etc/cron.d
    and mark it config(noreplace) so that users can select their own
    raid check frequency and it will be preserved across updates
  - Allow the raid check script to set both the cpu and io priority on the
    raid check process in an effort to minimize the impact to users on the
    system
  - Related: bz633306


author: Thomas Sailer <t.sailer@alumni.ethz.ch> - 1.37.0-1
changelog:
  - update to 1.37.0
  - actually tell the build system about the target os
  - build also boost DLL's that depend on other boost DLL's


author: Thomas Sailer <t.sailer@alumni.ethz.ch> - 1.37.0-2
changelog:
  - fix %defattr
  - fix description of static package
  - add comments that detail the failures linking the test framework / exec monitor DLL's


author: Richard W.M. Jones <rjones@redhat.com> - 0.1-0.2.r11
changelog:
  - Import into fedora-mingw temporary repository because there are packages
    which will depend on this.
  - Fix the version/release according to packaging guidelines.
  - Tidy up the spec file.
  - Use dos2unix and keep the timestamps.


author: Richard W.M. Jones <rjones@redhat.com> - 0-0.3.r11
changelog:
  - Use Version 0
    (https://www.redhat.com/archives/fedora-packaging/2009-January/msg00064.html)
  - Revert use of dos2unix for now
    (https://www.redhat.com/archives/fedora-packaging/2009-January/msg00066.html)
  - Use _smp_mflags.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0-0.7.r11
changelog:
  - Use %global instead of %define
  - Automatically generate debuginfo subpackage
  - Fixed %defattr line
  - Added -static subpackage
  - Fixed linker error with C++ applications


author: Andrew Beekhof <abeekhof@redhat.com> - 0-0.7.r11.2
changelog:
  - The use of ExclusiveArch conflicts with noarch, using an alternate COLLECTION to limit builds
    Related: rhbz#658833


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-1
changelog:
  - Update to gcc 4.4.1 20090818 svn 150873.
  - Patches taken from native Fedora gcc-4.4.1-6.
  - Replaced %define with %global and updated %defattr.
  - Changed license to match native Fedora gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-2
changelog:
  - Update to gcc 4.4.1 20090902 svn 151328.
  - Patches taken from native Fedora gcc-4.4.1-8.
  - Another license update to keep it in sync with native gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.2-1
changelog:
  - Update to gcc 4.4.2 20091114 svn 154179, which includes
    VTA backport from 4.5 branch.
  - Patches taken from native Fedora gcc-4.4.2-10.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.12-11
changelog:
  - Fixed %defattr line
  - Added -static subpackage
  - Use %global instead of %define
  - Automatically generate debuginfo subpackage


author: Richard W.M. Jones <rjones@redhat.com> - 1.6-9
changelog:
  - Verify that we are still matching current native package.
  - Use auto-buildrequires to identify more accurate list of BRs:
      + BR gettext (for /usr/bin/msgfmt etc)
      + BR mingw32-dlfcn
      + BR mingw32-iconv
  - Use _smp_mflags.
  - Use find_lang.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.7.4-2
changelog:
  - Always use the native win32 thread API even when pthreads is available
  - Dropped a patch which isn't necessary anymore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.7.6-1
changelog:
  - Update to 2.7.6
  - Updated the configure arguments so that the native Win32 thread API
    will be used instead of pthreads


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.1.25-1
changelog:
  - Update to 1.1.25
  - Dropped upstreamed CVE patch
  - Dropped upstreamed mingw32 patches
  - Added a patch to never use pthreads even if it's available
  - Automatically generate debuginfo subpackages


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.43-4
changelog:
  - Updated 64bit-fixes patch (remove some more -m32 use)
  - Drop ExclusiveArch, not needed with the above
  - Obsoletes/Provides nsis and nsis-data for migration path from CalcForge
  - Disable NSIS Menu (does not work on *nix, see specfile comment for details)
  - Drop BR wxGTK-devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.43-6
changelog:
  - Don't build the MinGW parts with debugging information, NSIS corrupts the
    debugging information in the stubs when building installers from them
  - Drop debian-debug-opt patch, all its changes are either taken care of by our
    rpm-opt patch, unwanted (see above) or unneeded


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-9
changelog:
  - Add man page for gencert (#605376)
  - Fix hang when handling large POST under some conditions (#634687)


author: Laine Stump <laine@redhat.com> - 0.1.7-1
changelog:
  - rebase to netcf-0.1.7
    - Resolves: rhbz#651032
    - remove all iptables manipulation
    - Resolves: rhbz#633346
    - Resolves: rhbz#629206


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-27.1
changelog:
  - fixed truncation of sysObjectID (#641113)
  - fixed assertions in calculating of statistics in IF-MIB (#621664)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-28
changelog:
  - fixed recompilation of the package on machine without IPv6 (#657835)
  - fixed SMUX getting stuck on big-endian platforms (#665053)
  - fixed OID comparsion in snmpwalk, now the output does not include
    objects outside requested subtree (#636890)
  - fixed IPv4 address creation in ipAddressTable (#616764)
  - added IPv6 address creation to ipAddressTable (#616336)
  - fixed value of ipAddressPrefixAutonomousFlag OID (#625262)
  - fixed ipv6IfTable - new interfaces were not added there (#627564)
  - extended BRIDGE-MIB implementation to cover RFC 4363 (#630157)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-31
changelog:
  * fixed BRIDGE-MIB implementation in /usr/bin/snmp-bridge-mib,
    now it supports embedded perl and answers GETNEXT requests correctly
    (#630157).


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-103
changelog:
  - improved statistics-doubleword.patch (Bug #580054)
  - improved netstat(8) man page (#614931)
  - HFI support (#633506)
  - fixed memory leak in netstat when run with -c option (#634539)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-105
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since RHEL-6.1 network devices can have arbitrary names (#682368)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-7
changelog:
  - core: add DHCP lease-change events to the dispatcher (rh #662730)
  - core: validate Enable/Disable WiFi and WWAN requests (rh #626337)
  - core: don't update /etc/hosts with current hostname (rh #668830)
  - wifi: ensure Enabled state is preserved regardless of rfkill (rh #584271)
  - ifcfg-rh: respect GATEWAYDEV for ibft/iSCSI configs (rh #665027)
  - ifcfg-rh: handle IPv6 gateway correctly for static addressing configs (rh #666078)


author: Jiří Klimeš <jklimes@redhat.com> - 0.8.1-8
changelog:
  - applet: display IPv6 info under applet's 'Connection Information' (rh #634152)
  - applet,nm: fix translations (rh #589230)


author: Steve Dickson <steved@redhat.com> 1.2.3-1
changelog:
  - Initscripts changes needed to support NFS over RDMA (bz 631012)
  - Initscripts changes needed for NFS to shutdown cleanly (bz 636513)
  - Initscripts changes needed for rpcbind to be running 
    when nfs is started (bz 641291)


author: Steve Dickson <steved@redhat.com> 1.2.3-6
changelog:
  - Added support for AD style kerberos to rpc.gssd (bz 671474)
  - Disabled the installing of the nfsidmap command


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Updated to latest upstream release: libnfsidmap-0.24-rc1 (bz 650970)
  - Reset default values in /etc/idmap.conf (bz 650997)
  - Remove some warnings in the RPMdiff run (bz 594279)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-4
changelog:
  - tweak the pre-generated man pages to avoid a syntax error warning with older
    versions of groff (#676483)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-5
changelog:
  - backport support for the "validnames" option from SVN and use it to allow
    parentheses characters by modifying the default setting (#690870)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-6
changelog:
  - backport patches from 0.7.10 to interpret more types of errors as indicators
    that we need to ask a different server (#692817) and from 0.7.12 to not
    get stuck while cleaning up SSL/TLS encrypted connections


author: Ade Lee <alee@redhat.com> 1.0.0-14
changelog:
  - Resolves: #643546 - [RFE] Add nuxwdog to RHEL.
  - Remove old encryption scheme
  - Store passwords in kernel keyring


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: some server certificates refused with inadequate type error (#669846)
  - fix: default encryption strength dropped in switch to using NSS (#669845)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-10
changelog:
  - fix: add symlinks for libraries moved in 2.4.23-5 to allow building
    packages which require these libraries in the old location (#678105)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-11
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend
  - fix: openldap startup script ignores ulimit settings (#679356)
  - fix: add symlinks into /usr/lib*/ (#680139)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-13
changelog:
  - fix update: openldap can't use TLS after a fork() (#671553)
  - fix: possible NULL pointer dereferences in NSS non-blocking patch (#684035)
  - fix: move libldif to /lib for consistency (#548475)
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-14
changelog:
  - fix update: openldap startup script ignores ulimit settings (#679356)
  - fix update: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-15
changelog:
  - fix: rpm -V fail when upgrading with openldap-devel installed (#693716)
    (remove devel *.so symlinks from /lib and leave them in /usr/lib)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-7
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers (#619762)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-8
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-1
changelog:
  Resolves: 642722
  Resolves: 642724
  Resolves: 646718
  Resolves: 628879
  Resolves: 621790
  Resolves: 668785
  Resolves: 658253
  Resolves: 658121


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-7
changelog:
  - Add missing openwsman headers to libwsman-devel
    Resolves: #615922
  - Move initscript to the right place
    Resolves: #626773
  - Fix return values from initscript according to guidelines
    Resolves: #613031
  - Fix ssl check behaviour in initscript
    Resolves: #617549
  - Fix openwsman crashes when sfcb is stopped
    Resolves: #625160


author: Will Cohen <wcohen@redhat.com> - 0.9.6-10
changelog:
  - Corrections for i386/arch_perfmon filters.
  - Make nehalem events available.
  - Add AMD family 12/14/15h support. Resolves: rhbz #650126
  - Add Intel westmere support. Resolves: rhbz #643478
  - opcontrol numeric argument checking. Resolves: rhbz #589638


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-2
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Complied with Fedora JNI packaging logic


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-3
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Removed LICENSE logic from installation section
  - Take ownership of library directory


author: Matthew Harmsen <mharmsen@redhat.com> 2.0.1-1
changelog:
  - Removed version information from NSPR and NSS build/runtime requires
  - Bugzilla Bug #638377 - Generate PKI UI components which exclude
    a GUI interface
  - Bugzilla Bug #643206 - New CMake based build system for Dogtag
  - Bugzilla Bug #644056 - CS build contains warnings
  - Bugzilla Bug #667556 - Consolidate 'osutil' SVN source code with
    'osutil' GIT source code


author: Andrew Beekhof <andrew@beekhof.net> 1.1.4-1
changelog:
  - Resolves: rhbz#668466
  - Update tarball to upstream version: 3ac6ac993d6d
    + Performance improvements for larger clusters
    + Miscellaneous bug fixes


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-1
changelog:
  - Fix rpmlint warnings
  - Rebase on new upstream release 
    See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details
    + Bugs lf#2445, lf#2493, lf#2508, lf#2518, lf#2527, lf#2544, 
  	 lf#2545, lf#2550, lf#2551, lf#2554, lf#2558, bnc#665131
  - Resolves: rhbz#676286 - Add per device 'diag' option to pacemaker stonith action


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-2
changelog:
  - Fix cman integration
  - Resolves: rhbz#684838 - Correctly notify fenced of a successful fencing event 
  - Resolves: rhbz#684825 - Ensure Pacemaker uses the most recent membership/quorum information


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-14
changelog:
  - When using PackageKit with RHN, do not try to setup from prerepoconf
    twice, to prevent an ugly python backtrace at startup.
  - This is a simple patch backported from Fedora 14.
  - Resolves: #670163


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-15
changelog:
  - Do not emit a critical warning on the console when trying to install
    a local package with PackageKit.
  - This is a simple patch backported from Fedora 14.
  - Resolves: #667923


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-16
changelog:
  - By default, firefox is compiled with an internal version of sqlite
    and when packagekit-glib uses the system shared copy in the running
    firefox process, hilarity ensues.
  - Icons are less important than a crashed browser.
  - Resolves: #617734


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-17
changelog:
  - Do not exit the cron job with an error code if PackageKit is just
    disabled in sysconfig.
  - Resolves: #626867


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-18
changelog:
  - Wrap _getEVR in a try,catch block to deal with invalid version
    numbers in update changelogs.
  - Resolves: #634560


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-5
changelog:
  - fix insecure dropping of priviledges in pam_xauth, pam_env,
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-6
changelog:
  - do not overwrite /var/log/tallylog on package update (#614766)
  - add support for uid and gid ranges in limits.conf (#622847)
  - add new pam_faillock module (#644971)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-7
changelog:
  - fix a few memory leaks in error paths and other mistakes
    found by a code review
  - add rhost and tty to auditing data in modules (#677664)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-2
changelog:
  - backport fixes to make the libdefaults verify_ap_req_nofail setting control
    what happens when we can't read keytabs, and enable TGT validation by
    default, with "novalidate" as an option which takes a list of services for
    which TGT validation shouldn't be attempted (#622938)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-6
changelog:
  - backport the change to prefer krb5_change_password() over krb5_set_password()
    again from 2.3.12 (#690583)


author: Nalin Dahyabhai <nalin@redhat.com> 185-6
changelog:
  - add a proposed patch to avoid losing password expiration warnings relayed
    via policy controls when expiration is less than a day away (based on
    patch from Masahiro Matsuya, #637190, upstream #407)


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-11.1
changelog:
  - Silence expected errors from the console
  - make sure change log has correct dates and email
    Resolves: #654460, #586149


author: Brian C. Lane <bcl@redhat.com> 2.1-11
changelog:
  - Document the align-check command
    Resolves: #642476
  - Default to 1MiB partition alignment
    Resolves: #618255


author: Brian C. Lane <bcl@redhat.com> 2.1-13
changelog:
  - Double the buffer for fdasd_check_api_version
    Resolves: #693852
  - Disable tests that fail when run as root


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - require Digest::SHA 640716
  - remove removal of NDBM 640729
  - remove unsupported option fork from prove's documentation 609492
  - Thread desctructor leaks 640720
  - update threads to 1.82 (bugfixes releases) 626330
  - remove unused patches from cvs
  - Resolves: rhbz#640729, rhbz#640716, rhbz#609492, rhbz#640720, rhbz#626330


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-119
changelog:
  - 692862 - lc launders tainted flag, CVE-2011-1487
  - make SOURCE1 executable, because it missed +x in brew
  - Resolves: rhbz#692862


author: Rich Megginson <rmeggins@redhat.com> - 1.5.2-6.2
changelog:
  - fixes for RHEL-6 pkgwrangler review
  - Makefile.PL.rpm is not an upstream source
  - Source URL was pointing to the wrong location
  - change Release so dist tag is last


author: Rich Megginson <rmeggins@redhat.com> - 1.5.3-1
changelog:
  - new version 1.5.3 with openldap support
  - Resolves: bug 610902 - Modify perl-Mozilla-LDAP to use open ldap library


author: Joe Orton <jorton@redhat.com> - 5.3.3-1
changelog:
  - update to 5.3.3 (#645591)
  - add security fixes for CVE-2010-3709, CVE-2010-3710,
    CVE-2010-3870, CVE-2009-5016 (#651953)
  - prevent extract() cloberring $GLOBALS (#655118)
  - ensure correct mysql_config is used in biarch builds


author: Joe Orton <jorton@redhat.com> - 3.0.5-1
changelog:
  - rebase to 3.0.5 (#638892, #638887)
  - fix casting in memcache_pool.c (#672363)
  - fix Release (#604559)


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.9-1.el6
changelog:
  - Update to 2.7.9 (RH bug #616917).
  - Remove patches now included upstream:
      pidgin-2.6.6-clientLogin-proxy-fix.patch
      pidgin-2.6.6-clientLogin-use-https.patch
      pidgin-2.6.6-CVE-2010-1624.patch
      pidgin-2.6.6-CVE-2010-3711.patch
  - Disable the translation updates patch.  It doesn't apply anymore and
    will have to be redone.  Saving the patch for now in case some parts
    are still useful to translators.


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - 'pki-common'
  -     Bugzilla Bug #674894 - ipactl restart : an annoy output line
  -     Bugzilla Bug #675179 - ipactl restart : an annoy output line


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - 'pki-common'
  -     Bugzilla Bug #676051 - IPA installation failing - Fails to create CA
        instance
  -     Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
        instance


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-3
changelog:
  - Resolves #676873 - Rebase pki-core again to pick the latest features and fixes
  -     Resolves #676048 - Installation within IPA hangs, r1846
  -     Resolves #679173 - uninitialized variable warnings from Perl, r1860
  -     Resolves #679174 - netstat loop fixes needed, r1862
  -     Resolves #679580 - Velocity fails to load all dependent classes, r1864


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-8
changelog:
  - Resolves 645097 
  - Resolves #683172 - pkisilent needs to provide option to set
    nsDS5ReplicaTransportInfo to TLS in replication agreements
    when creating a clone, r1886


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-10
changelog:
  - Resolves #688251 - Dogtag installation under IPA takes too much
    time - SELinux policy compilation, r1908


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.4
changelog:
  - fix to sandbox 
    - Fix seunshare to use more secure handling of /tmp
      - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
     - Change to allow sandbox to run on nfs homedirs, add start python script
     - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
     - Move seunshare to sandbox package
     - Fix sandbox to show correct types in  usage statement


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-4
changelog:
  - Backported turbo detection (turbo patch, #610464)
  - Show all P-states in dump mode (dump-all-pstates patch, accepted by upstream)
  - Backported tty handling for non-interactive mode (notty patch, #628514)
  - Output error in interactive mode if there is no tty (checktty patch,
    posted upstream)
  - Fixed rpmlint warning about mixed tabs and spaces


author: Jakub Jelinek <jakub@redhat.com> 0.4.4-1
changelog:
  - support copying over extended attributes (#456105)
  - handle DW_OP_GNU_implicit_pointer, fix handling of DW_OP_call_ref


author: Jan Görig <jgorig@redhat.com> 3.2.8-15
changelog:
  - fix #622389 - The sysctl command's man page doesn't describe the option -A correctly
  - minor changelog fix


author: Jan Görig <jgorig@redhat.com> 3.2.8-17
changelog:
  - fixed bugs in procps-3.2.7-ps-cgroup.patch and procps-3.2.8-pmap-smaps.patch
  - fixed memory leaks in vmstat
  - Resolves: rhbz#684031


author: Miroslav Suchý <msuchy@redhat.com> 0.5.0-4
changelog:
  - 612998 - remove binaries. Just in case
  - 612998 - filter provide PAMmodule.so()(64bit)
  - 612998 - do not use INSTALLED_FILES feature, and enumerate files manualy
  - 612998 - use %{__python} in %build section
  - 612998 - fix buildrequires for PyPAM
  - 612998 - add macros for rhel5


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-11
changelog:
  - fix incompatibility between 2.6.6 and our non-standard M2Crypto.SSL.SSLTimeoutError
  Resolves: rhbz#681811


author: Jeff Garzik <jgarzik@redhat.com> - 0.3-5.2
changelog:
  - Import man page patch from Fedora BZ# 638475
  - Fix description spelling errors found by rpmlint.
  - Fixes BZ# 605535


author: David Malcolm <dmalcolm@redhat.com> - 0.6-1
changelog:
  - cherrypick fixes for Py_None reference leak, and for some error-handling bugs
  Resolves: rhbz#680269


author: John Dennis <jdennis@redhat.com> - 1.0.90-2
changelog:
  - Resolves: bug 642414
    Update to latest upstream release (includes the following)
    - return the contents of the AP_REP message from rd_rep()
    - improved memory handling
    - removed use of KRB_PRIVATE
    - better docstrings


author: John Dennis <jdennis@redhat.com> - 0.10-1
changelog:
  - Resolves: #619743, Update to latest upstream, changes include:
  - The following classes were added:
      InitParameters
      InitContext

  -The following module functions were added:
      nss.nss.nss_initialize()
      nss.nss.nss_init_context()
      nss.nss.nss_shutdown_context()
      nss.nss.nss_init_flags()

  - add nss_is_initialized()

  - Remove nss_init_nodb() when nss modules loads from previous version
    apparently this prevents subsequent calls to nss_init with a
    database to silently fail.
  - Clean up some cruft in doc/examples/verify_server.py

  - Invoke nss_init_nodb() when nss modules loads, this prevents segfaults
    in NSS if Python programmer forgot to call one of the NSS
    initialization routines.

  - Rename the classes X500Name, X500RDN, X500AVA to DN, RDN, AVA
    respectively.

  - DN and RDN objects now return a list of their contents when indexed by
    type, this is to support multi-valued items.

  - Fix bug where AVA object's string representation did not include it's
    type.

  - Enhance test/test_cert_components.py unit test to test for above
    changes.

  - Add CertificateRequest object

  - Fix incomplete read bug (due to read ahead buffer bookkeeping).
  - Remove python-nss specific httplib.py, no longer needed
    python-nss now compatible with standard library
  - Rewrite httplib_example.py to use standard library and illustrate
    ssl, non-ssl, connection class, http class usage

  - add nss.cert_usage_flags(), use it in ssl_example.py

  - Add format_lines() & format() methods to the new certificate extension objects.
  - Add printing of certificate extensions.
  - Add BasicContstraints certificate extension.
  - Fix several reference counting and memory problems discovered with valgrind.

  - fold in more ref counting patches from Miloslav Trmač <mitr@redhat.com>
    into upstream.
    Did not bump upstream version, just bumped release ver in this spec file.

  - Unicode objects now accepted as well as str objects for
    interfaces expecting a string.

  - Sockets were enhanced thusly:
      - Threads will now yield during blocking IO.
      - Socket.makefile() reimplemented
            file object methods that had been missing (readlines(), sendall(),
            and iteration) were implemented, makefile now just returns the same
            Socket object but increments an "open" ref count. Thus a Socket
            object behaves like a file object and must be closed once for each
            makefile() call before it's actually closed.
      - Sockets now support the iter protocol
      - Add Socket.readlines(), Socket.sendall()

  - The following classes were added:
      AuthKeyID
      BasicConstraints
      CRLDistributionPoint
      CRLDistributionPts
      CertificateExtension
      GeneralName
      SignedCRL
      X500AVA
      X500Name
      X500RDN

  - The following module functions were added:
      nss.nss.cert_crl_reason_from_name()
      nss.nss.cert_crl_reason_name()
      nss.nss.cert_general_name_type_from_name()
      nss.nss.cert_general_name_type_name()
      nss.nss.cert_usage_flags()
      nss.nss.decode_der_crl()
      nss.nss.der_universal_secitem_fmt_lines()
      nss.nss.import_crl()
      nss.nss.make_line_pairs()
      nss.nss.oid_dotted_decimal()
      nss.nss.oid_str()
      nss.nss.oid_tag()
      nss.nss.oid_tag_name()
      nss.nss.read_der_from_file()
      nss.nss.x509_alt_name()
      nss.nss.x509_ext_key_usage()
      nss.nss.x509_key_usage()

  - The following class methods and properties were added:
    Note: it's a method if the name is suffixed with (), a propety otherwise
      Socket.next()
      Socket.readlines()
      Socket.sendall()
      SSLSocket.next()
      SSLSocket.readlines()
      SSLSocket.sendall()
      AuthKeyID.key_id
      AuthKeyID.serial_number
      AuthKeyID.get_general_names()
      CRLDistributionPoint.issuer
      CRLDistributionPoint.get_general_names()
      CRLDistributionPoint.get_reasons()
      CertDB.find_crl_by_cert()
      CertDB.find_crl_by_name()
      Certificate.extensions
      CertificateExtension.critical
      CertificateExtension.name
      CertificateExtension.oid
      CertificateExtension.oid_tag
      CertificateExtension.value
      GeneralName.type_enum
      GeneralName.type_name
      GeneralName.type_string
      SecItem.der_to_hex()
      SecItem.get_oid_sequence()
      SecItem.to_hex()
      SignedCRL.delete_permanently()
      X500AVA.oid
      X500AVA.oid_tag
      X500AVA.value
      X500AVA.value_str
      X500Name.cert_uid
      X500Name.common_name
      X500Name.country_name
      X500Name.dc_name
      X500Name.email_address
      X500Name.locality_name
      X500Name.org_name
      X500Name.org_unit_name
      X500Name.state_name
      X500Name.add_rdn()
      X500Name.has_key()
      X500RDN.has_key()

  - The following module functions were removed:
    Note: use nss.nss.oid_tag() instead
      nss.nss.sec_oid_tag_from_name()
      nss.nss.sec_oid_tag_name()
      nss.nss.sec_oid_tag_str()

  - The following files were added:
      doc/examples/cert_dump.py
      test/test_cert_components.py

  - Apply patches from  Miloslav Trmač <mitr@redhat.com>
    for ref counting and threading support. Thanks Miloslav!

  - Review all ref counting, numerous ref counting fixes

  - Implement cyclic garbage collection support by
    adding object traversal and clear methods

  - Identify static variables, move to thread local storage


author: John Dennis <jdennis@redhat.com> - 0.10-2
changelog:
  - Related: #619743
  - split documentation out into separate doc sub-package
    and make building api documentation optional


author: John Dennis <jdennis@redhat.com> - 0.10-3
changelog:
  - Related: #619743
  - Fix all rpmlint warnings
  - doc for license, changelog etc. now in main package,
    doc subpackage now only contains api doc, examples, test, etc.
  - Filter provides for .so files
  - Remove execute permission on everything in docdir
  - Capitalize description


author: John Dennis <jdennis@redhat.com> - 0.11-1
changelog:
  - Resolves: #670951
  - Resolves: #674014

    * Better support for IPv6

    * Add AddrInfo class to support IPv6 address resolution. Supports
      iteration over it's set of NetworkAddress objects and provides
      hostname, canonical_name object properties.

    * Add PR_AI_* constants.

    * NetworkAddress constructor and NetworkAddress.set_from_string() added
      optional family parameter. This is necessary for utilizing
      PR_GetAddrInfoByName().

    * NetworkAddress initialized via a string paramter are now initalized via
      PR_GetAddrInfoByName using family.

    * Add NetworkAddress.address property to return the address sans the
      port as a string. NetworkAddress.str() includes the port. For IPv6 the
      a hex string must be enclosed in brackets if a port is appended to it,
      the bracketed hex address with appended with a port is unappropriate
      in some circumstances, hence the new address property to permit either
      the address string with a port or without a port.

    * Fix the implementation of the NetworkAddress.family property, it was
      returning bogus data due to wrong native data size.

    * HostEntry objects now support iteration and indexing of their
      NetworkAddress members.

    * Add io.addr_family_name() function to return string representation of
      PR_AF_* constants.

    * Modify example and test code to utilize AddrInfo instead of deprecated
      NetworkAddress functionality. Add address family command argument to
      ssl_example.

    * Fix pty import statement in test/setup_certs.py

      Deprecated Functionality:
      -------------------------

    * NetworkAddress initialized via a string paramter is now
      deprecated. AddrInfo should be used instead.

    * NetworkAddress.set_from_string is now deprecated. AddrInfo should be
      used instead.

    * NetworkAddress.hostentry is deprecated. It was a bad idea,
      NetworkAddress objects can support both IPv4 and IPv6, but a HostEntry
      object can only support IPv4. Plus the implementation depdended on
      being able to perform a reverse DNS lookup which is not always
      possible.

    * HostEntry.get_network_addresses() and HostEntry.get_network_address()
      are now deprecated. In addition their port parameter is now no longer
      respected. HostEntry objects now support iteration and
      indexing of their NetworkAddress and that should be used to access
      their NetworkAddress objects instead.


author: John Dennis <jdennis@redhat.com> - 0.11-2
changelog:
  - Resolves: #670951
  - Resolves: #674014
    Rebuild enabling api doc generation, it had been disabled because
    the buildroots on 6.1 contained a verion of epydoc that crashed,
    release engineering has updated epydoc in the buildroots.
    There are NO changes in the package source.


author: John Dennis <jdennis@redhat.com> - 0.11-3
changelog:
  - Resolves: #689807
    Add family parameter to Socket constructors in examples and doc.
    Mark implicit family parameter as deprecated.
    Raise exception if Socket family does not match NetworkAddress family.
    Add --server-subject to setup_certs.py (made testing IPv6 easier without DNS)


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-10
changelog:
  - Related: rhbz#631002 - Synchronize qpid-cpp build to MRG 1.3.
    This build synchronizes with RHEL-{4,5} qpid-cpp-mrg-0.7.946106-26.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-11
changelog:
  - Related: rhbz#631002 - Synchronize qpid-cpp build to MRG 1.3.
    This build synchronizes with RHEL-{4,5} qpid-cpp-mrg-0.7.946106-28 (MRG 1.3.2 RC2).
    Updated lib version numbers for RHEL 6.1.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.7.946106-12
changelog:
  - Related: rhbz#659098 - QMFv2 API for C++
  - Related: rhbz#617260 - qmf agent crashes broker when queue limits exceeded
  - Related: rhbz#659100 - QMFv2 API for Python
  - Related: rhbz#662826 - Support for federated brokers in QMF
    This build adds QMF v.2 to the previous MRG 1.3.2 RC2 build, and a
    new python-qmf2 subpackage (rpm).


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.9.1073306-1
changelog:
  - Related: rhbz#675821 - Rebase qpid-cpp to 0.10 for snapshot 3
    Note that the current qpid trunk is still in 0.9, but will branch onto
    the 0.10 release branch soon. This is a test build only.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.9.1078967-1
changelog:
  - Related: rhbz#675821 - First build of 0-10 branch, but because final
    numbering strategy is still undecided, the 0.9.x label persists for this
    build. QMF has been removed entirely and placed into its own package, as
    there were not only inconsistencies in the old packaging, but also name
    clashes.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-1
changelog:
  - Related: rhbz#675821 - Rebase to upstream 0.10 rev 1083082 (store rev
    remains 4446)
  - Removing svn rev no. from the package names


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-11
changelog:
  - Add support for 64-bit vfsv1 quota format (bugs #609795, #669598)
  - Use /proc/mounts for mountpoint scanning (#623656)
  - Add quota_nld deamon init script (bug #634137)
  - Comment example quotatab to silent warnquota (bug #663027)
  - Add GFS2 query support via RPC (bug #547748)
  - Document --always-resolve option (bug #662997)
  - Use rq_bsize to convert quotas transferred by RPC (bug #667755)
  - Make RPC block factor dynamic (bug #667755)
  - Check whether set limits fit into the range supported by quota format
    (bug #668709)
  - Check set limits fit into the range supported by RPC transport (bug #668710)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-12
changelog:
  - Do not own common directories under /etc (bug #634137)
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-13
changelog:
  - Correct spec file comment (bug #634137)
  - Add quotasync tool (bug #658586)
  - Implement quotacheck for GFS2 (bug #658586)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-14
changelog:
  - Fix vfsv0 format detection (bug #609795)
  - Initialize vfsold block and inode value boundries for new quota file
    (bug #668709)


author: Prarit Bhargava <prarit@redhat.com> 1.0.0
changelog:
  - initial import of aer-inject
  - 0.1 from http://www.kernel.org/pub/linux/utils/pci/aer-inject/
  - http://git.kernel.org/?p=utils/pci/aer-inject/aer-inject.git;a=summary
  - initial import of mce-inject
  - 22b6fd9d6c53de44e612f31b78b964c3a10a24a1 from
    http://git.kernel.org/?p=utils/cpu/mce/mce-inject.git;a=summary


author: Doug Ledford <dledford@redhat.com> - 2.0.4-2
changelog:
  - Add a modprobe conf file to automatically load rds_tcp and rds_rdma when
    we load the base rds module
  - Resolves: bz643113


author: Lawrence Lim <llim@redhat.com> - 4.0-3
changelog:
  - apply redhat-lsb.spec.diff-stewb <Stew Benedict - stewb@linuxfoundation.org>
  - Resolved: Bug 585947


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-16
changelog:
  - resource-agents: fix utility to obtain data from ccs_tool
    (fix_utility_to_obtain_data_from_ccs_tool.patch)
    Resolves: rhbz#631943


author: Marek Grac <mgrac@redhat.com> - 3.0.12-17
changelog:
  - fix resource agent for named
    (resource-agents-fix-resource-agent-for-named.patch)
    Resolves: rhbz#648897


author: Marek Grac <mgrac@redhat.com> - 3.0.12-18
changelog:
  - Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#621538


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-19
changelog:
  - resource-agents: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629275
  - resource-agents: Stop using '-' as 1st char of log messages
    (stop_using_as_1st_char_of_log_messages.patch)
    Resolves: rhbz#633856
  - resource-agents: Use literal quotes for tr calls
    (use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#639252
  - resource-agents: Fix migrateuriopt setting
    (fix_migrateuriopt_setting.patch)
    Resolves: rhbz#660337
  - resource-agents: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    rgmanager: Add failure tolerances to resources.rng
    (add_failure_tolerances_to_resources_rng.patch)
    Resolves: rhbz#674710


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - resource-agents: fs-lib: fix do_monitor device mapping
    (fs_lib_fix_do_monitor_device_mapping.patch)
    Resolves: rhbz#669832


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - Mirror dev failure in HA LVM can cause service failur
    (fix_bug_683213_mirror_dev_failure_in_ha_lvm_can_cause_service_failure.patch)
    Resolves: rhbz#683213


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-11
changelog:
  - rgmanager: Present flags in clustat output
    (present_flags_in_clustat_output.patch)
    Resolves: rhbz#634298
  - rgmanager: Fix clustat return code
    (fix_clustat_return_code.patch)
    Resolves: rhbz#621562
  - rgmanager: Honor restricted FDs during migrations
    (honor_restricted_fds_during_migrations.patch)
    Resolves: rhbz#621694
  - rgmanager: Add non-critical flag to resources
    (add_non_critical_flag_to_resources.patch)
    rgmanager: Add non-critical base behavior
    (add_non_critical_base_behavior.patch)
    rgmanager: Header cleanup
    (header_cleanup.patch)
    rgmanager: Use rg_strings.c for flags
    (use_rg_strings_c_for_flags.patch)
    rgmanager: Present all flags in clustat output
    (present_all_flags_in_clustat_output.patch)
    rgmanager: Mark non-critical resources disabled
    (mark_non_critical_resources_disabled.patch)
    rgmanager: Add convalesce operation
    (add_convalesce_operation.patch)
    rgmanager: Allow restart,disable recovery policy
    (allow_restart,disable_recovery_policy.patch)
    rgmanager: Ensure state is preserved across config changes
    (ensure_state_is_preserved_across_config_changes.patch)
    rgmanager: Fix handling of independent subtrees
    (fix_handling_of_independent_subtrees.patch)
    rgmanager: Do not fail service if non-critical resources fail to stop
    (do_not_fail_service_if_non_critical_resources_fail_to_stop.patch)
    rgmanager: Add -c option to man page & clusvcadm -h
    (add_c_option_to_man_page_clusvcadm_h.patch)
    rgmanager: Add independent subtree restart thresholds
    (add_independent_subtree_restart_thresholds.patch)
    rgmanager: clean up independent subtree restart handling
    (clean_up_independent_subtree_restart_handling.patch)
    rgmanager: Fix corner case in critical/non-critical handling
    (fix_corner_case_in_critical_non_critical_handling.patch)
    rgmanager: Support convalesce w/ central_processing
    (support_convalesce_w_central_processing.patch)
    Resolves: rhbz#634277
  - rgmanager: Update last_owner on failover
    (update_last_owner_on_failover.patch)
    Resolves: rhbz#639103
  - rgmanager: DBus notifications for service state changes
    (dbus_notifications_for_service_state_changes.patch)
    rgmanager: Clean up dbus notifications
    (clean_up_dbus_notifications.patch)
    rgmanager: Retry dbus if we get disconnected
    (retry_dbus_if_we_get_disconnected.patch)
    rgmanager: minor dbus cleanups
    (minor_dbus_cleanups.patch)
    rgmanager: Match fenced's option to disable DBus
    (match_fenced_s_option_to_disable_dbus.patch)
    rgmanager: allow dbus notification code to be disabled
    (allow_dbus_notification_code_to_be_disabled.patch)
    Resolves: rhbz#657756
  - rgmanager: Make clufindhostname -i predictable
    (make_clufindhostname_i_predictable.patch)
    Resolves: rhbz#661881
  - rgmanager: Fix nofailback when service is in 'starting' state
    (fix_nofailback_when_service_is_in_starting_state.patch)
    Resolves: rhbz#672841


author: Chris Feist <cfeist@redhat.com> - 0.16.2-27
changelog:
  - More fixes for ccs
  - Ricci no longer sends non-SSL over an SSL connection
  - Resolves: rhbz#652837 rhbz#614647


author: Chris Feist <cfeist@redhat.com> - 0.16.2-30
changelog:
  - Added ability to configure unfence section in ccs
  - Fixed --setmulticast to properly remove multicast settings
  - Resolves: rhbz#683192 rhbz#681646


author: Chris Feist <cfeist@redhat.com> - 0.16.2-32
changelog:
  - Add validation logic when first looking at the config file and after
    changing it
  - Resolves: rhbz#682868


author: Chris Feist <cfeist@redhat.com> - 0.16.2-34
changelog:
  - Fixed several minor documentation issues
  - Fixed --status errors
  - Fixed missing --debug option
  - Fixed traceback when using --help as an argument
  - Related: rhbz#682868


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-13
changelog:
  - Require matching arch for freshen on colored transactions (#553108, #479608)
  - Verify that generated signature can be used by rpm (#608599)
  - Fix broken pipe on font provide generation + better error message (#609117)
  - Fix find-debuginfo.sh behavior on cross-directory hardlinks (#618428)
  - Generate gdb index for debuginfos (#652787)
  - Fix verifyscript return code on failure (#668629)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-14
changelog:
  - Fix signature comparison on package resigning (#608608)
  - Let error messages from gpg through on passphrase checking (#607222)
  - Only enforce default umask during transaction (#565843)


author: Vojtech Vitek <vvitek@redhat.com> - 3.0.6-5.1
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments
    Resolves: #684932


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-3
changelog:
  - build rsyslog with PIE and RELRO
    Resolves: #642994
  - add ChangeLog file to documentation
  - add /etc/pki/rsyslog directory


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid a false-positive readline-related test failure
    * ruby-readline-TERM-dumb.patch: New file.
    * Run "make test-all" in addition to "make test", in spite of its known
    failures (e.g., when using out of date gdbm).  Suggested by Ondrej Moris.
  - skip minor gdbm test to avoid failure
    * ruby-skip-gdbm-test.patch: New file.
  - avoid segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
  - Resolves: rhbz#628715


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-6
changelog:
  - Now that ruby uses the two-clause BSDL, it may once again use the
  latest readline, which is covered by the LGPLv3.  2-clause BSDL is
  GPLv3-compatible, per http://www.gnu.org/philosophy/license-list.html
  Before, ruby used the GPLv2, which precluded use of readline6, so it
  had to resort to using the old readline5 library.
  Remove references to the old readline5 library.
  - Resolves: rhbz#631701


author: Mike Christie <mchristie@redhat.com> - 1.0.13-0
changelog:
  - Rebase to upstream 1.0.13.
  - Add upstream iser target. This requires setting the driver/lld
  type to iser. See targets.conf for example or the README.iscsi for
  a tgtadm example.
  - 616402 read-only support


author: Mike Christie <mchristie@redhat.com> - 1.0.13-1
changelog:
  - Drop scsi-target-utils-dynamic-link-iser.patch patch. It turns out
  in 6.0 this patch was broken and linked against rdma libs, so
  the got brought in by yum. The new patch was not broken and did not
  force linking but yum/iser users are not expecting the depencies
  to be broken.


author: Andrew Beekhof <andrew@beekhof.net> - 1.6.5-0.1.git833ca18
changelog:
  - Incorporate review feedback
    + Add calls to ldconfig
    + Fix package group
    + Resolve rpmlint warnings
    + Added LICENSE, NOTICE and AUTHORS to the doc list
    + Document how the tarball was generated
    + Update version number to be a .5 pre-release snapshot


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.39.1-3
changelog:
  - extended smartctl man pages with examples how to use cciss
  - fix crash when starting selftest on megaraid controller


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-8
changelog:
  - Add fixes from upstream git for a number of serious bugs:
    - ctrl / alt getting stuck
    - a client hang
    - a client crash
    - showing nothing but a white screen in fullscreen mode
    Related: rhbz#644258


author: Hans de Goede <hdegoede@redhat.com> - 0.7.1-1
changelog:
  - New upstream release 0.7.1
  - Drop all patches (all upstreamed)
  - Enable smartcard (CAC) support
    Related: rhbz#641829


author: Hans de Goede <hdegoede@redhat.com> - 0.7.2-1
changelog:
  - Rebase to new upstream release 0.7.2
    Resolves: rhbz#671383
  - This fixes:
  - Blinking keyb leds in spice client causes capslock to turn on / off
    all the time in other windows
    Resolves: rhbz#626975
  - jpeg messages encoding is transfered as 4 and not 1, breaking client
    Resolves: rhbz#670238
  - fix warnings from AC_COMPILE_IFELSE
    Resolves: rhbz#670271
  - Clearer error message when subject-host differs from server
    Resolves: rhbz#670274
  - long arguments are incorrectly parsed when an equal sign is used
    Resolves: rhbz#670276


author: Uri Lublin <uril@redhat.com> - 0.7.2-3
changelog:
  - smartcard -- libcacard 0.1.2 updates:
   - server (not part of this package -- in spice-server)
    - use network byte order when talking to device.
   - both
    - no more reader_id_t, uint32_t instead
    - no more ReaderAddResponse, use VSC_Error with
      code==VSC_SUCCESS instead.
    - change an assert to a red_printf("error:..")
      if got an unexpectedly undefined reader id.
   - client
    - track number of expected reader insertions
  Resolves: #641829


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-1
changelog:
  - Rebase to new upstream release 0.8.0
  Resolves: rhbz#671383
  - Exit with error instead of crash for --controller with no SPICE_XPI_SOCKET
  Resolves: rhbz#644292
  - Use _exit rather then exit on X errors
  Resolves: rhbz#680763
  - Fix keyb modifiers not syncing from guest to client
  Resolves: rhbz#679467


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-2
changelog:
  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)
  Resolves: rhbz#675767


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-6
changelog:
  - Fix setting of the guest resolution from a multi monitor client
    Resolves: rhbz#680227
  - Limit build archs to i686 and x86_64
    Related: rhbz#658464


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-7
changelog:
  - Daemonize per user session vdagent process on startup, this avoids a long
    delay after logging in
  - Fix mouse not working with the agent installed
    Resolves: rhbz#688257


author: Hans de Goede <hdegoede@redhat.com> 0.6.3-8
changelog:
  - Fix chunk demultiplexing when chunks from messages for different ports
    get intermixed
    Related: rhbz#658464


author: Uri Lublin <uril@redhat.com> 2.4-2
changelog:
  - add npplat.h to Makefile.am sources
  - add nsISpicec.xpt to Makefile.am EXTRA_DIST
  - add version to plugin name string
  Resolves: #672761
  - change location & name  of logfile & unix-domain-socket
  Resolves: #630601
  - look for spicec in /usr/bin if not found in /usr/libexec
  Resolves: #672497


author: Jiri Skala <jskala@redhat.com> -7:3.1.10-1
changelog:
  - Resolves: #639365 - Rebase squid to version 3.1.10
  - Resolves: #666533 - small memleak in squid-3.1.4


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#694444 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-32
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix typo causing build breakage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701700 - sssd client libraries use select() but should use
  -                         poll() instead


author: Jeff Law <law@redhat.com> - 2.12-1.47.el6_2.4
changelog:
  - Make implementation of ARENAS_TEST and ARENAS_MAX match
    documentation (#769594)
  - Check malloc arena atomically  (#769594)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-1
changelog:
  - rebase to latest stable version
  - sudo now uses /var/db/sudo for timestamps
  - new command available: sudoreplay
  - use native audit support
  - sync configuration paths with the nss_ldap package
    Resolves: rhbz#615087
    Resolves: rhbz#652726
    Resolves: rhbz#634159
    Resolves: rhbz#603823


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-3
changelog:
  - Bump spec rev to 3
  - Remove unneeded buildrequires perl, gawk, sed
  - Remove leading / from path macros
  - Remove provides for package name - done automatically
  - Move pkgconfig file stuff under install
  - Added LICENSE and README under docs


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.3.01-0
changelog:
  - Fixed support for windows build by moving old makefile to src/Makefile.win
  - and updating instructions - I could not get configure/libtool to work
  - with cygwin and the msvc compiler
  - Added support for --with-nspr and --with-nss and finding nspr/nss
  - "in-tree" when building with other mozilla components
  - Use PK11_TokenKeyGenWithFlags instead of PK11_KeyGen


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.4-1
changelog:
  - Removed some autoconf generated files which were GPL only - all
  - code needs to be tri-licensed
  - updated version to 4.0.4
  - added empty COPYING file - do not use the one generated by autoreconf
  - use bz2 for source tarball instead of gz


author: Peter Jones <pjones@redhat.com> - 4.02-2
changelog:
  - Split out extlinux and tftpboot.
  - remove duplicate syslinux/com32/ left in base package after 3.83-2


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-14
changelog:
  - Resolves: #637705
    'sar -u ALL' doesn't report an correct value
  - Resolves: #631841
    fix the tickless kernel output of sar command
  - Resolves: #592283
    add CIFS support to iostat


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-16
changelog:
  - Related: #592283
    improved support of cifs mount points (mounting and unmounting during
    cifsiostat run)


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20110117svn4237
changelog:
  - rebase to r4237
  - patches merged
    - tigervnc11-noexecstack.patch
    - tigervnc11-r3963.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch
    - tigervnc11-r4003.patch
    - tigervnc11-r4004.patch
    - tigervnc11-r4005.patch
    - tigervnc11-r4024.patch
    - tigervnc11-r4025.patch
    - tigervnc11-rh603731.patch
    - tigervnc11-options.patch
  - build with TLS support


author: Adam Tkac <atkac redhat com> 1.0.90-0.12.20110117svn4237
changelog:
  - tigervnc-server now requires perl (#634161)
  - use locales specified in sysconfig/i18n (#632530)
  - read password file correctly when fread is interrupted (#645755)


author: Adam Tkac <atkac redhat com> 1.0.90-0.15.20110314svn4359
changelog:
  - flush internal Xvnc event queue early to avoid overflowing
  - improve compatibility with viewers with wrong VeNCrypt implementation
    (vinagre)
  - link libvnc.so with "-z now" to catch all undefined symbols
  - fix undefined symbol "getvnchomedir" in libvnc.so


author: Harald Hoyer <harald@redhat.com> 147-2.30
changelog:
  - fixed udevadm segfault, if log is set to debug
  Resolves: rhbz#657360
  - fixed keyboard handling for extra keys, especially volume
    control
  Resolves: rhbz#617572
  - quote output of 'udevadm info --query=shenv' or
                    'udevadm info --query=shproperty'
  Resolves: rhbz#644330


author: Harald Hoyer <harald@redhat.com> 147-2.31
changelog:
  - fixed zero macs in 70-persistent-net.rules
  Resolves: rhbz#656059
  - add 42-qemu-usb.rules
  Resolves: rhbz#663064
  - create /dev/hugepages directory
  Resolves: rhbz#667750


author: Harald Hoyer <harald@redhat.com> 147-2.32
changelog:
  - added new page codes for scsi_id, to export ID_SERIAL_80 and ID_SERIAL_83.
  Resolves: rhbz#644902
  - correctly handle ENV{ACL_MANAGE}==0
  Resolves: rhbz#674168


author: Harald Hoyer <harald@redhat.com> 147-2.34
changelog:
  - add CFLAGS and LDFLAGS to add missing PIE and RELRO flags
  Resolves: rhbz#676004
  - fixed udevadm trigger segmentation fault
  Resolves: rhbz#677857


author: Karel Zak <kzak@redhat.com> 2.17.2-8
changelog:
  - fix #619139 - fsck returns zero instead of error code 
  - fix #621312 - losetup --help returns 1 (fail) for successful command execution
  - fix #651035 - misleading reference to samba-client in mount man page, cifs options
  - fix #612325 - RHEL6.0 Beta-1: Add mkfs.ext4 to mkfs man page
  - fix #650879 - RHEL6: /usr/bin/column segmentation fault
  - fix #626374 - fdisk incorrectly checks alignment for non-512-byte *logical* sectors
  - fix #663731 - sfdisk -d and fdisk -l print /dev/dm-<N>
  - fix #650953 - wipefs(8) does not erase LUKS
  - fix #656453 - libblkid incorrectly revalidated cache entries
  - fix #623012 - lscpu return error after offline cpu
  - fix #616393 - tmpfs mount fails with 'user' option
  - fix #561111 - remount of tmpfs fails on RHEL6 alpha
  - fix #624521 - fsck seems to run quasi-serially
  - fix #657082 - Add lsblk (list block devices) utility
  - fix #625064 - fuse-sshfs mounts cannot be unmounted as user
  - fix #615389 - Output of "mount" is missing mapping displays for loop-mounts
  - fix #616325 - Include findmnt in util-linux-ng package
  - fix #665376 - incorrectly documented the mount "atime" option
  - fix #670770 - lscpu does not identify 32bit capability on AMD
  - fic #671357 - mount.8 man page update for ext{3,4} options


author: Karel Zak <kzak@redhat.com> 2.17.2-11
changelog:
  - fix #678306 - introduce safe variant of uuid_generate_time(), fix locking of counter file
  - fix #678378 - util-linux-ng code review


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.1
changelog:
  - Add support for IBM PowerVM Lx86 Linux/x86 emulator (RHBZ#668857).
  - Move configure into build (not prep).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.2
changelog:
  - Add support for Microsoft HyperV (RHBZ#670272).
  - Add support for Hitachi Virtage (RHBZ#670530).
  - Add support for EC2 (Xen) instances (RHBZ#671126).  This includes
    backporting the test framework and enabling tests.
  - Add support for IBM Systemz z/VM, LPAR (RHBZ#671132).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.4
changelog:
  - Various improvements to the wording in the manual page.
    resolves: rhbz#672285
  - Confirm support for Microsoft HyperV and add a regression test.
    resolves: rhbz#670272


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-3
changelog:
  - Multiple patches to address button mapping issues (#624560).
  - update the screen number when updating
  - requires updated xorg-x11-drv-wacom for the matching fixes to xsetwacom
    and the driver.


author: Lon Hohberger <lhh@redhat.com> - 5.5-8
changelog:
  - Add watchdog.d handling
    (bz657750-1-add-watchdog-d.patch)
    This makes the scripts in /etc/watchdog.d behave slightly differently
    (bz657750-2-script-handling.patch)
    Add test-directory to configuration file
    (bz657750-3-add_test_directory_to_configuration_file.patch)
    Log which binaries fail
    (bz657750-4-Log-binary-names.patch)
    Resolves: rhbz#657750


author: Lon Hohberger <lhh@redhat.com> - 5.5-9
changelog:
  - Add man page information on test-directory
    (bz657750-5-man_page_information_for_test_directory.patch)
    Resolves: rhbz#657750


author: Richard W.M. Jones <rjones@redhat.com> - 5.5-10
changelog:
  - Import watchdog initscript from Rawhide, includes some LSB-compliance
    fixes.
    Resolves: rhbz#584701


author: Ben Skeggs <bskeggs@redhat.com> 0.0.16-9.20110107gitb795ca6
changelog:
  - rebase to today's git snapshot
  - nouveau-exa-no-pa_fa.patch: dropped, upstream
  - nouveau-zfill-fallback: dropped, upstream
  - nouveau-server-regen: dropped, upstream
  - Resolves: rhbz#633226


author: Hans de Goede <hdegoede@redhat.com> 0.0.12-3.el6
changelog:
  - Fix crash and vga font corruption when switching vc
    Resolves: rhbz#626508
  - Add support for many more resolutions and enable resolutions > 1024x768
    without requiring an xorg.conf
    Resolves: rhbz#623652


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-8
changelog:
  - Several patches related to bug #624560
    - xsetwacom: remove core keyword parsing, has no effect
    - fix button map handling in xsetwacom
    - add more keywords and special characters
    - twinview and calibration fixes


author: Adam Jackson <ajax@redhat.com> 1.7.7-28
changelog:
  - xserver-1.7.7-classic-default-mode.patch: Bump classic driver default mode
    to 1024x768. (#638234)


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.1.el6
changelog:
  - dapl-2.0.25-signal-handler.patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel
  - dapl-2.0.25-new-providers.patch
    Resolves: bz636596
  - dapl-2.0.25-dat_ia_open_hang.patch
    Resolves: bz649360
  - dapl-2.0.25-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz626541
  - dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz637980


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.2.el6
changelog:
  - Actually install the signal-handler patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel


author: Richard W.M. Jones <rjones@redhat.com> - 2.10-2
changelog:
  - Rebase to version 2.10 (RHBZ#628849).
  - Include fixes for building on ppc and ppc64 ...
  - ... but set ExclusiveArch x86_64.


author: Richard W.M. Jones <rjones@redhat.com> - 2.11-3
changelog:
  - Backport patch to improve the stability of the checksum and reduce
    the need to rebuild the appliance.
  - Add BR + Requires on insmod.static.


author: Richard Jones <rjones@redhat.com> - 2.11-6
changelog:
  - Split package into febootstrap (for building) and febootstrap-supermin-helper
    (for running).  Note that febootstrap depends on febootstrap-supermin-helper,
    but you can install febootstrap-supermin-helper on its own (RHBZ#669839).


author: Richard Jones <rjones@redhat.com> - 2.11-7
changelog:
  - Splitting the package broke RHEL 6.0 -> 6.1 upgrades.  Add an Obsoletes
    header to fix this.
    resolves: RHBZ#669839


author: Doug Ledford <dledford@redhat.com> - 0.5-3
changelog:
  - Upstream has updated the libnes tarball without changing the version.  Pick
    up the libnes-0.5.tar.gz tarball that's dated 13-Jun-2008
  - Resolves: bz451470


author: Doug Ledford <dledford@redhat.com> - 0.5-5.el5
changelog:
  - Fix a minor memleak (from upstream)
  - Rebuild against libibverbs that has xrc support
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 0.6-1.el5
changelog:
  - Build against non-XRC libibverbs
  - Update to ofed 1.4.1 final bits
  - Remove no longer needed memleak patch
  - Related: bz506258, bz506097


author: Richard W.M. Jones <rjones@redhat.com> - 2.19.1-4
changelog:
  - Switch to using upstream (GNU) binutils 2.19.1.  It's exactly the
    same as the MinGW version now.


author: Uri Lublin <uril@redhat.com> - 0.7.2-2
changelog:
  - Rebase to spice upstream release 0.7.2
  - Drop all patches (all upstreamed)
  - Enable smartcard (CAC) support
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.7.2-4
changelog:
  - smartcard -- libcacard 0.1.2 updates:
   - server
    - use network byte order when talking to device.
   - both
    - no more reader_id_t, uint32_t instead
    - no more ReaderAddResponse, use VSC_Error with
      code==VSC_SUCCESS instead.
    - change an assert to a red_printf("error:..")
      if got an unexpectedly undefined reader id.
   - client (not part of this package)
    - track number of expected reader insertions
  Resolves: #674937


author: Uri Lublin <uril@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream 0.7.3:
    + Mostly smart-card updates:
      - including all the changes in 0.7.2.4
    + Some gcc warning cleanups.
  - Fix permissions of spice-server.pc
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.8.0-1
changelog:
  - Rebase to upstream 0.8.0
    + Includes "Fix segfault on migration" patch
    + Some spice-client bug fixes.
  Resolves: #672035


author: Jan Friesse <jfriesse@edhat.com> 1.2.3-21.2
changelog:
  - Resolves: rhbz#696735
  - Resolves: rhbz#696734
  - Resolves: rhbz#681258
  - Resolves: rhbz#696733
  - Resolves: rhbz#696732

  - Remove shared memory leak in clients if corosync faults (rhbz#665165)
  - merge upstream commit b57573b037aa2737aed2ba706bf55a4599884641 (rhbz#665165)
  - Avoid abort if existing ring id file does not contain
    atleast 8 bytes.  (rhbz#696734)
  - merge upstream commit bb35b86fef4f256a21993f73b71fd512d4763e2f (rhbz#696734)
  - Fix problem where objdb handle destroy is not called in
    clear_object.  (rhbz#681258)
  - merge upstream commit ea18c71936edf8cdc647245374f3a7932ac7e686 (rhbz#681258)
  - Fix problem where all items are not iterated in
    object_reload_notification.  (rhbz#681258)
  - merge upstream commit 7f2e1da84d5883176f0f95936b8a4bf21de12a0a (rhbz#681258)
  - Only restore old ring id information once before operational
    state.  (rhbz#696733)
  - merge upstream commit 0eabeee63eca7a4cc1d907607057ac668fafbcae (rhbz#696733)
  - Free recovery messages during operational enter rather then
    via message_free() call.  (rhbz#696733)
  - merge upstream commit 0fcf760977a73ef78bacff47e61c30ba21929faa (rhbz#696733)
  - Fix problem that leads to abort when token lost in
    recovery sate. (rhbz#696733)
  - merge upstream commit 6aa47fde953bf2179f5bd2dd07815fc7d80f47bb (rhbz#696733)
  - Remove recv_flush operations from totemsrp to remove recursion
    error.  (rhbz#696732)
  - backport of upstream commit 336741ee96caf3ae435b609ee8a76788902c9edf (rhbz#696732)
  - Remove assertion during corosync shutdown.  (rhbz#696732)
  - merge upstream commit 92a3a1aa9d07e769eb6bc59467454e0316549cf6 (rhbz#696732)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-8
changelog:
  - Backport patches up to upstream 1.8.1. (RHBZ#613593)
  - Fixes:
     * guestfish: fails to tilde expand '~' when $HOME unset (RHBZ#617440)
     * libguestfs: unknown filesystem /dev/fd0 (RHBZ#666577)
     * libguestfs: unknown filesystem label SWAP-sda2 (RHBZ#666578)
     * libguestfs: unknown filesystem /dev/hd{x} (cdrom) (RHBZ#666579)
     * virt-filesystems fails on guest with corrupt filesystem label (RHBZ#668115)
     * emphasize "libguestfs-winsupport" in error output (RHBZ#627468)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-10
changelog:
  - Remove external hexedit script and make guestfish users set $HEXEDITOR.
    This is because requiring emacs pulls in all of X (RHBZ#641494).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-12
changelog:
  - Fix typo in virt-make-fs manual page.
    resolves: rhbz#673721
  - Add a grep-friendly string to LIBGUESTFS_TRACE output.
    resolves: rhbz#673477


author: Joshua Daniel Franklin <joshuadfranklin@yahoo.com> 2.00-2
changelog:
  - Fix package Summary text to not include package name
  - http://www.redhat.com/archives/fedora-devel-list/2008-November/msg01484.html


author: Caolán McNamara <caolanm@redhat.com> - 2.00-6
changelog:
  - --with-spellcheck-prog isn't a configure option use
    --with-simple-spellcheck/--with-interactive-spellcheck and patch
    to prefer hunspell to aspell (#509387)


author: Michal Hlavinka <mhlavink@redhat.com> - 39-5
changelog:
  - fix crash when bad substitution is used
  - fix crash when alias contains alias
  - fix crash when xtrace is enabled
  - use alternatives for ksh/mksh selection


author: Ray Strode <rstrode@redhat.com> 0.8.3-18
changelog:
  - Handle underpowered video cards that force multiple monitors
    to use one controller
    Resolves: #625209
  - Fix serial console crash
  - Resolves: #631924
  - Remove plymouth-text-and-details-only obsoletes
    Resolves: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-19
changelog:
  - Add explicit, versioned dep on core-libs subpackage to various
    parts of the spec file to silence rpmdiff
    Related: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-21
changelog:
  - Update lock icon dimensions to match dimensions of old
    icon to silence rpmdiff
    Related: #612665


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-8
changelog:
  - honor the options in [main]  (RHEL 624676) (Fedora 635107)
  - Allow Strata plugin to send original filenames from report to server (Fedora 635118)(RHEL 626994)
  -  add _isa macro to spec file. (RHEL 672647)(Fedora 670215)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-9
changelog:
  - Correct the patch for Allow Strata plugin to send original filenames from report to server (RHEL 626994)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.151.el6
changelog:
  - kvm-net-Add-the-missing-option-declaration-of-vhostforce.patch [bz#683295]
  - kvm-vhost-fix-dirty-page-handling.patch [bz#684076]
  - kvm-block-qcow2.c-rename-qcow_-functions-to-qcow2_.patch [bz#688119]
  - kvm-Add-proper-errno-error-return-values-to-qcow2_open.patch [bz#688119]
  - kvm-QCOW2-bug-fix-read-base-image-beyond-its-size.patch [bz#688147]
  - kvm-qcow2-Fix-error-handling-for-immediate-backing-file-.patch [bz#688146]
  - kvm-qcow2-Fix-error-handling-for-reading-compressed-clus.patch [bz#688146]
  - kvm-qerror-Add-QERR_UNKNOWN_BLOCK_FORMAT_FEATURE.patch [bz#688119]
  - kvm-qcow2-Report-error-for-version-2.patch [bz#688119]
  - kvm-qcow2-Fix-order-in-L2-table-COW.patch [bz#688146]
  - kvm-pci-assign-Catch-missing-KVM-support.patch [bz#688428]
  - Resolves: bz#683295
    (qemu-kvm: Invalid parameter 'vhostforce')
  - Resolves: bz#684076
    (Segfault occurred during migration)
  - Resolves: bz#688119
    (qcow2: qcow2_open doesn't return useful errors)
  - Resolves: bz#688146
    (qcow2: Some paths fail to handle I/O errors)
  - Resolves: bz#688147
    (qcow2: Reads fail with backing file smaller than snapshot)
  - Resolves: bz#688428
    (qemu-kvm -no-kvm segfaults on pci_add)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.152.el6
changelog:
  - kvm-device-assignment-register-a-reset-function.patch [bz#685147]
  - kvm-device-assignment-Reset-device-on-system-reset.patch [bz#685147]
  - Resolves: bz#685147
    (guest with assigned nic got kernel panic when send system_reset signal in QEMU monitor)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.153.el6
changelog:
  - kvm-Revert-spice-qxl-locking-fix-for-qemu-kvm.patch [bz#678208]
  - kvm-qxl-spice-display-move-pipe-to-ssd.patch [bz#678208]
  - kvm-qxl-implement-get_command-in-vga-mode-without-locks.patch [bz#678208]
  - kvm-qxl-spice-remove-qemu_mutex_-un-lock_iothread-around.patch [bz#678208]
  - kvm-hw-qxl-render-drop-cursor-locks-replace-with-pipe.patch [bz#678208]
  - kvm-spice-qemu-char.c-add-throttling.patch [bz#672191]
  - kvm-spice-qemu-char.c-remove-intermediate-buffer.patch [bz#672191]
  - kvm-spice-qemu-char-Fix-flow-control-in-client-guest-dir.patch [bz#672191]
  - kvm-chardev-Allow-frontends-to-notify-backends-of-guest-.patch [bz#688572]
  - kvm-virtio-console-notify-backend-of-guest-open-close.patch [bz#688572]
  - kvm-spice-chardev-listen-to-frontend-guest-open-close.patch [bz#688572]
  - kvm-Fix-performance-regression-in-qemu_get_ram_ptr.patch [bz#690267]
  - kvm-virtio-pci-fix-bus-master-work-around-on-load.patch [bz#682243]
  - kvm-Use-getaddrinfo-for-migration.patch [bz#680356]
  - kvm-net-socket-allow-ipv6-for-net_socket_listen_init-and.patch [bz#680356]
  - kvm-block-Fix-serial-number-assignment.patch [bz#688058]
  - Resolves: bz#672191
    (spicevmc: flow control on the spice agent channel is missing in both directions)
  - Resolves: bz#678208
    (qemu-kvm hangs when installing guest with -spice option)
  - Resolves: bz#680356
    (Live migration failed in ipv6 environment)
  - Resolves: bz#682243
    ([KVM] pci hotplug after migration breaks virtio_net.)
  - Resolves: bz#688058
    (Drive serial number gets truncated)
  - Resolves: bz#688572
    (spice-server does not switch back to server mouse mode if guest spice-agent dies.)
  - Resolves: bz#690267
    (Backport qemu_get_ram_ptr() performance improvement)
  - Related: bz#672191
    (spicevmc: flow control on the spice agent channel is missing in both directions)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.154.el6
changelog:
  - kvm-add-a-service-to-reap-zombies-use-it-in-SLIRP.patch [bz#678524]
  - kvm-Don-t-allow-multiwrites-against-a-block-device-witho.patch [bz#654682]
  - kvm-Do-not-delete-BlockDriverState-when-deleting-the-dri.patch [bz#654682]
  - kvm-virtio-serial-don-t-crash-on-invalid-input.patch [bz#690174]
  - Resolves: bz#678524
    (Exec based migration randomly fails, particularly under high load)
  - Resolves: bz#690174
    (virtio-serial qemu-kvm crash on invalid input in migration)
  - Resolves: bz#654682
    (drive_del command to let libvirt safely remove block device from guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.155.el6
changelog:
  - kvm-configure-fix-out-of-tree-build-with-enable-spice.patch [bz#641833]
  - kvm-ccid-card-emulated-replace-DEFINE_PROP_ENUM-with-DEF.patch [bz#641833]
  - kvm-Revert-qdev-properties-add-PROP_TYPE_ENUM.patch [bz#641833]
  - kvm-Revert-qdev-add-data-pointer-to-Property.patch [bz#641833]
  - kvm-Revert-qdev-add-print_options-callback.patch [bz#641833]
  - kvm-ccid-v18_upstream-v25-cleanup.patch [bz#641833]
  - kvm-libcacard-vscard_common.h-upstream-v18-v25-diff.patch [bz#641833]
  - kvm-ccid-card-passthru-upstream-v18-upstream-v25-diff.patch [bz#641833]
  - kvm-qemu-thread-add-qemu_mutex-cond_destroy-and-qemu_mut.patch [bz#641833]
  - kvm-adding-qemu-thread.o-to-obj-y.patch [bz#641833]
  - kvm-ccid-card-emulated-v18-v25.patch [bz#641833]
  - kvm-libcacard-v18-upstream-v25.patch [bz#641833]
  - Resolves: bz#641833
    (Spice CAC support - qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.156.el6
changelog:
  - kvm-Revert-net-socket-allow-ipv6-for-net_socket_listen_i.patch [bz#680356]
  - kvm-Revert-Use-getaddrinfo-for-migration.patch [bz#680356]
  - Related: bz#680356
    (Live migration failed in ipv6 environment)
  - Fixes bz#694196
    (RHEL 6.1 qemu-kvm: Specifying ipv6 addresses breaks migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.157.el6
changelog:
  - kvm-qemu-img-rebase-Fix-read-only-new-backing-file.patch [bz#693741]
  - kvm-floppy-save-and-restore-DIR-register.patch [bz#681777]
  - kvm-block-Do-not-cache-device-size-for-removable-media.patch [bz#687900]
  - kvm-cdrom-Allow-the-TEST_UNIT_READY-command-after-a-cdro.patch [bz#683877]
  - kvm-cdrom-Make-disc-change-event-visible-to-guests.patch [bz#683877]
  - Resolves: bz#681777
    (floppy I/O error after live migration while floppy in use)
  - Resolves: bz#683877
    (RHEL6 guests fail to update cdrom block size on media change)
  - Resolves: bz#687900
    (qemu host cdrom support not properly updating guests on media changes at physical CD/DVD drives)
  - Resolves: bz#693741
    (qemu-img re-base  fail with read-only new backing file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.158.el6
changelog:
  - kvm-bz-691704-vhost-skip-VGA-memory-regions.patch [bz#691704]
  - kvm-ide-atapi-add-support-for-GET-EVENT-STATUS-NOTIFICAT.patch [bz#558256]
  - kvm-atapi-Allow-GET_EVENT_STATUS_NOTIFICATION-after-medi.patch [bz#558256]
  - kvm-atapi-Move-GET_EVENT_STATUS_NOTIFICATION-command-han.patch [bz#558256]
  - kvm-atapi-GESN-Use-structs-for-commonly-used-field-types.patch [bz#558256]
  - kvm-atapi-GESN-Standardise-event-response-handling-for-f.patch [bz#558256]
  - kvm-atapi-GESN-implement-media-subcommand.patch [bz#558256]
  - Resolves: bz#558256
    (rhel6 disk not detected first time in install)
  - Resolves: bz#691704
    (Failed to boot up windows guest with huge memory and cpu and vhost=on within 30 mins)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.159.el6
changelog:
  - kvm-acpi_piix4-Maintain-RHEL6.0-migration.patch [bz#694095]
  - Resolves: bz#694095
    (Migration fails when migrate guest from RHEL6.1 host to RHEL6 host with the same libvirt version)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6
changelog:
  - kvm-virtio-blk-fail-unaligned-requests.patch [bz#698910]
  - kvm-Ignore-pci-unplug-requests-for-unpluggable-devices.patch [bz#699789]
  - Resolves: bz#698910
    (CVE-2011-1750 virtio-blk: heap buffer overflow caused by unaligned requests [rhel-6.1])
  - Resolves: bz#699789
    (CVE-2011-1751 acpi_piix4: missing hotplug check during device removal [rhel-6.1])


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1.1
changelog:
  - note: following the z-stream N-V-R convention - this is a z-stream
  - package for rhel-6.1.z - the .1 at the end means this is the first
  - z-stream release for the 389-ds-base-1.2.8.2 package in RHEL 6.1
  - this package is really 389-ds-base-1.2.8.3
  - Resolves: Bug 701560 - memory leak: entryusn value is leaked when an entry is deleted
  - Resolves: Bug 701556 - windows sync can lose old multi-valued attribute values when a new value is added
  - Resolves: Bug 701558 - ldclt core dumps
  - Resolves: Bug 701559 - Linked attributes callbacks access free'd pointers after close
  - Resolves: Bug 701554 - userpasswd not replicating


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1.3
changelog:
  - Resolves: Bug 705837 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory
  - Add ExclusiveArch for x86 and x86_64 only


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-5
changelog:
  - clarify that removing a non-existent acl entry is not an error (#674883)
  - update project URL in package specification (#702638)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-23.el6_1.1
changelog:
  - Wait for 389-ds tasks to complete (#709329)
  - Set replica to restart ipa on boot (#709330)
  - Managed Entries not configured on replicas (#709331)
  - Don't create bogus aRecord when creating new zone (#709332)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-19
changelog:
  - Fix IDN encoding failed with error code 5
    Resolves: #682832
  - Update jwhois.conf for dotEmarat extension
    Resolves: #664449


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.1.1.el6]
changelog:
  - [net] dccp: handle invalid feature options length (Jiri Pirko) [703012 703013] {CVE-2011-1770}
  - [fs] cifs: check for private_data before trying to put it (Jeff Layton) [703017 702642] {CVE-2011-1771}
  - [net] can: add missing socket check in can/raw and can/bcm release (Jiri Pirko) [698482 698483] {CVE-2011-1748 CVE-2011-1598}
  - [netdrv] ixgbe: do not clear FCoE DDP error status for received ABTS (Andy Gospodarek) [704011 695966]
  - [netdrv] ixgbe: DCB remove ixgbe_fcoe_getapp routine (Andy Gospodarek) [704002 694358]
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645228 645229] {CVE-2010-3858}
  - [scsi] bfa: change tech-preview to cover all cases (Rob Evers) [704014 703251]
  - [scsi] bfa: driver version update (Rob Evers) [704282 703265]
  - [scsi] bfa: kdump fix (Rob Evers) [704282 703265]
  - [scsi] bfa: firmware download fix (Rob Evers) [704282 703265]
  - [netdrv] bna: fix memory leak during RX path cleanup (Ivan Vecera) [704000 698625]
  - [netdrv] bna: fix for clean fw re-initialization (Ivan Vecera) [704000 698625]
  - [scsi] ipr: improve interrupt service routine performance (Steve Best) [704009 696754]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.2.1.el6]
changelog:
  - [kernel] lib/vsprintf.c: add %pU to print UUID/GUIDs (Frantisek Hrbata) [704280 700299]
  - [scsi] megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [704601 619422]


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-4
changelog:
  - Related rhbz#706120
  - Catch-up build corresponding to RHEL-5 builds 0.10-4 -5 -6 and -7:
  - RHEL-5 0.10-4:
    - 2.0 RC build 1
    - BZs: 690261,693407,695263,695716,696637,696655,696698
  - RHEL-5 0.10-5:
    - Intermediate build to address rpmdiff/multilib problems
    - BZs: 689907
    - Now sourcing the doxygen-generated HTML from distcvs
  - RHEL-5 0.10-6:
    - 2.0 RC build 2
    - BZs: 675921,681313,689907,698254,700822,701709,701777,701786,701804
  - RHEL-5 0.10-7:
    - 2.0 RC build 3
    - BZs: 693895,698721


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-5
changelog:
  - Related rhbz#706120
    The patch file for the -4 build was not updated, this respin corrects
    that mistake. The fixes described below for -4 should now correctly
    apply to the -5 build.


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-6
changelog:
  - Related rhbz#706120
  - MRG 2.0 GA build, equates to 0.10-8.el5 build
  - The mrg-2.0.x patch file was updated to include:
    - BZ 707023: RPMdiff failure (multilib regressions) in qpid-qmf
    - BZ 709343: Packaging problem in qpid-qmf-devel (qmf-gen templates)
    - BZ 709862: dash-7 source RPM does not build
    - BZ 671369: RDMA client can segfault when no SASL mechanism specified


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-20.P1
changelog:
  - The 'hardware [ethernet|etc] ...;' parameter in host records has been
    extended to attempt to match DHCPv6 clients by the last octets
    of a DUID-LL or DUID-LLT provided by the client. (#706974)
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#694799)
  - Use PID for seeding the random number generator in dhclient (#694798)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-21.P1
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729885)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - Build libraries with -fpic/-fPIC, not with -fPIE (#736999)
  - Add dhcp-common subpackage (#736194)
  - Do not run dhcpd as root (#693381)
    - Use '--enable-paranoia' configure flag
    - Create dhcpd user in %pre
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'
    - Move changing of the effective user/group ID after writing new PID file.


author: David Cantrell <dcantrell@redhat.com> - 13.21.141-1
changelog:
  - grub: write 'ip=eth0:dhcp,auto6' instead of 'ip=eth0:dhcp ip=eth0:auto6'
    (akozumpl)
    Resolves: rhbz#740222


author: David Cantrell <dcantrell@redhat.com> - 13.21.143-1
changelog:
  - Remove references to 'ku', 'lo', and 'my' languages. (dcantrell)
    Related: rhbz#744094
  - Ignore po/*.po (dcantrell)
    Related: rhbz#744094
  - Remove po/*.po files as we are using transifex now. (dcantrell)
    Related: rhbz#744094
  - Use transifex to pull translations for rhel6-branch (dcantrell)
    Related: rhbz#744094
  - Update ja translations (dcantrell)
    Resolves: rhbz#744094
  - fcoe: modprobe the VLAN layer module. (akozumpl)
    Related: rhbz#641420
  - Wait after udev settles in DD code as usb has hardcoded timeout in kernel
    module (msivak)
    Related: rhbz#732496
  - Fix intendation error (dcantrell)
    Resolves: rhbz#740870
  - Only check relevant devices for dirty filesystems. (dlehman)
    Resolves: rhbz#741206


author: David Cantrell <dcantrell@redhat.com> - 13.21.147-1
changelog:
  - Make sure to clean up temp vg paths after lvm edit. (dlehman)
    Resolves: rhbz#747606
  - Add xenfs module to initrd.img (dcantrell).
    Resolves: rhbz#747388


author: Chris Lumens <clumens@redhat.com> - 13.21.148-1
changelog:
  - Support prefix length in ipv6= cmdline option (rvykydal)
    Resolves: rhbz#679108
    Related: rhbz#679108


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV> 13.21.149-1.sl6
changelog:
  These are changes we make to anaconda for the SL installation process
  - Added patch anaconda-no-addons-recognize-sl.patch
    Disables the check for the TUV addons during a DVD install
  - Added patch anaconda-scientific-linux-installclasses.patch
    Add the Scientific Linux install classes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34.1
changelog:
  - Resolves: rhbz#708352 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf
  - Resolves: rhbz#708353 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.39.1.9.8
changelog:
  - Resolves: rhbz#709375
  - Bumped to IcedTea6 1.9.8
  - Copy fontconfig files to match names for current and next release
  - RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
    disabled get still selected for read ops (win)
  - RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
  - RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
    FileDialog.show()
  - RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
    code
  - RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
    bindings
  - RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
  - RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
  - RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
    with scale close to zero
  - RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
  - RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
    size variables


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713341)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9.1
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#714866)


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-7.1
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709963


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6_1
changelog:
  - kvm-Fix-phys-memory-client-pass-guest-physical-address-n.patch [bz#701771]
  - kvm-virtio-prevent-indirect-descriptor-buffer-overflow.patch [bz#713592]
  - Resolves: bz#701771
    (Fix phys memory client for vhost)
  - Resolves: bz#713592
    (EMBARGOED CVE-2011-2212 virtqueue: too-large indirect descriptor buffer overflow [rhel-6.1.z])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.160.el6_1.2
changelog:
  - kvm-virtio-guard-against-negative-vq-notifies.patch [bz#717403]
  - Resolves: bz#717403
    (qemu-kvm: OOB memory access caused by negative vq notifies [rhel-6.1.z])


author: Jan Kaluza <jkaluza@redhat.com> 5.04-8
changelog:
  - fix #676045 - detect all RPM architectures
  - fix #712992 - detect noarch RPM packages
  - fix #688700 - detect s390 kernel
  - fix #692098 - do not try to get coredump informations from normal binary
  - fix #712988 - do not handle Python scripts as binary files
  - fix #690801 - fixed grammar mistakes in man page
  - fix #675691 - improve TeX recognition


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34.2
changelog:
  - Resolves: rhbz#716905 - sssd shuts down if inotify crashes
  - Resolves: rhbz#716909 - libsss_ldap segfault at login against OpenLDAP


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.5.1.el6]
changelog:
  - [kernel] cgroupfs: use init_cred when populating new cgroupfs mount (Eric Paris) [713135 700538]
  - [netdrv] ixgbe: adding FdirMode module option (Andy Gospodarek) [711550 707287]
  - [crypto] testmgr: add xts-aes-256 self-test (Jarod Wilson) [711548 706167]
  - [fs] ext3: Fix lost extented attributes for inode with ino == 11 (Eric Sandeen) [712413 662666]
  - [mm] Prevent Disk IO throughput degradation due to memory allocation stalls (Larry Woodman) [711540 679526]
  - [net] sock: adjust prot->obj_size always (Jiri Pirko) [709381 704231]
  - [fs] GFS2: resource group bitmap corruption resulting in panics and withdraws (Robert S Peterson) [711528 702057]
  - [x86] kprobes: Disable irqs during optimized callback (Jiri Olsa) [711545 699865]
  - [mm] slab, kmemleak: pass the correct pointer to kmemleak_erase() (Steve Best) [712414 698023]
  - [net] fix netns vs proto registration ordering (Wade Mealing) [702305 702306] {CVE-2011-1767 CVE-2011-1768}
  - [ppc] Fix oops if scan_dispatch_log is called too early (Steve Best) [711524 696777]
  - [virt] i8259: initialize isr_ack (Avi Kivity) [711520 670765]
  - [virt] VMX: Save and restore tr selector across mode switches (Gleb Natapov) [711535 693894]
  - [virt] VMX: update live TR selector if it changes in real mode (Gleb Natapov) [711535 693894]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.6.1.el6]
changelog:
  - [audit] ia32entry.S sign extend error codes when calling 64 bit code (Eric Paris) [713831 703935]
  - [audit] push audit success and retcode into arch ptrace.h (Eric Paris) [713831 703935]
  - [x86] intel-iommu: Flush unmaps at domain_exit (Alex Williamson) [713458 705441]
  - [x86] intel-iommu: Only unlink device domains from iommu (Alex Williamson) [713458 705441]
  - [virt] x86: Mask out unsupported CPUID features if running on xen (Igor Mammedov) [711546 703055]
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [682989 669363]
  - [net] vlan: remove multiqueue ability from vlan device (Neil Horman) [713494 703245]
  - [net] Fix netif_set_real_num_tx_queues (Neil Horman) [713492 702742]
  - [scsi] mpt2sas: move event handling of MPT2SAS_TURN_ON_FAULT_LED in process context (Tomas Henzl) [714190 701951]
  - [mm] thp: simple fix for /dev/zero THP mprotect bug (Andrea Arcangeli) [714762 690444]


author: Jan Görig <jgorig@redhat.com> 5.0.0-8
changelog:
  - added applybaculadate (#651776)
  - fixed umask in make_catalog_backup.pl (#651780)
  - added support for changing bacula user and group in syconfig files
    and changed privilegies of bacula-dir.conf (#651786)
  - fixed bscan alternatives links (#651787)
  - fixed tray monitor default config (#657297)
  - fixed showing wrong size of incremental backup (#689400)


author: Jan Görig <jgorig@redhat.com> 5.0.0-9
changelog:
  - upgrade scriptlet for (#651787)
  - added chkconfig dependency (#712804)
  - added shadow-utils dependency (#712794)


author: Richard Hughes <rhughes@redhat.com> - 014-3
changelog:
  - Fix the multilib file conflict when installing DeviceKit-power-devel
    by splitting out a noarch DeviceKit-power-devel-docs subpackage.
  - The reason this is required is that gtk-doc generates random link
    targets in the autogenerated documentation which upsets rpm as the
    files no longer have the same checksum.
  - Resolves: #727544


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 733443 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 734267 - upgradednformat failed to add RDN value - subtree and user account lockout policies implemented?
  - Bug 733434 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 733442 - Ignore an error 32 in this case since we're adding a new AutoMember definition
  - Bug 733440 - RFE: add option to allow server to start with an expired certificate


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.11-1
changelog:
  - Bug 739196 - Consolidate DS and DS replication bits in one package in RHEL 6.2
  - There were two patches in ds-replication for RHEL 6.2 that were added post
  - rebase - the two patches for 722292 - these are now in the 389-ds-base package
  - and have been cherry-picked to the RHEL-6 internal branch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.12-1
changelog:
  - Bug 742661 - allow resource limits to be set for paged searches
  -  independently of limits for other searches/operations
  - Bug 742381 - part2 - MOD operations with chained delete/add get
  -  back error 53 on backend config
  - Bug 742382 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
  - Bug 742381 - MOD operations with chained delete/add get back
  -  error 53 on backend config
  - Bug 739959 - Allow separate fractional attrs for incremental and total protocols


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.13-1
changelog:
  - Bug 742381 - part3 - MOD operations with chained delete/add get
  -  back error 53 on backend config


author: Kamil Dudka <kdudka@redhat.com> 2.4.44-5
changelog:
  - encode NULs properly with getfattr --encoding=text (#651119)
  - return non-zero exit code on failure of getfattr (#665050)
  - document supported encodings of values (#674870)
  - update project URL in package specification (#702639)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11.1
changelog:
  - Add an upstream patch that fixes computation of CRC in zlib streams.
  - Turn off mpich2 support on platforms where it's not shipped.
  - Resolves: #723503


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11.2
changelog:
  - Build with -fno-strict-aliasing due to the sheer amount of warnings
    that we get.
  - Related: #723503


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1.1
changelog:
  - backport support for enabling delegation of GSSAPI credentials when we
    use Negotiate authentication for XML-RPC (#729804), and backport the
    option for making the ipa-submit helper use the current ccache, which
    makes it easier to test


author: Jan Friesse <jfriesse@edhat.com> 1.2.3-36.1
changelog:
  - Resolves: rhbz#726608
  - Resolves: rhbz#727962

  - Fix problem where corosync will segfault if there are gaps in recovery queue (rhbz#727962)
  - merge upstream commit b8a061ae28e7c874b66fa1d35ab01f53d1d36b42 (rhbz#727962)
  - Revert "totemsrp: Remove recv_flush code" (rhbz#726608)
  - merge upstream commit ee0a0dd75e248d5ad777f0beb77e98baddf0a23f (rhbz#726608)
  - main: let poll really stop before totempg_finalize (rhbz#726608)
  - merge upstream commit b620cd7d562643ec794113f948d6904c29791e21 (rhbz#726608)


author: Jan Friesse <jfriesse@redhat.com> 1.2.3-36.2
changelog:
  - Resolves: rhbz#734997
  - Ignore memb_join messages during flush operations (rhbz#734997)
  - merge upstream commit be608c050247e5f9c8266b8a0f9803cc0a3dc881 (rhbz#734997)


author: Jan Friesse <jfriesse@redhat.com> 1.2.3-36.3
changelog:
  - Resolves: rhbz#727962

  - Deliver all messages from my_high_seq_recieved to the last gap (rhbz#727962)
  - merge upstream commit e530376a60dc862f135bd0d4c52aebb43d948423 (rhbz#727962)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-39.1
changelog:
  - The scheduler might leave old job data files in the spool directory
    (STR #3795, STR #3880, bug #736304).


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.41.el6_1.1
changelog:
  - Add 0089-RHBZ-732384-check-return-value.patch
     * Don't try to update path groups on a path priority change if the
       multipath device has disappeared.
  - Resolves: bz# 732384


author: Adam Tkac <atkac redhat com> 0.4-0.6.b42
changelog:
  - call clone(2) syscall with correct args on s390
  - `dump -w` didn't recognize ext4 filesystems as supported (#658890)
  - fix incorrect hole handling (#691434)


author: Richard W.M. Jones <rjones@redhat.com> - 2.9-24.5.el6.1
changelog:
  - Properly fix multilib issue in shell script /usr/bin/fakechroot
    and remove ExclusiveArch.
    resolves: rhbz#730647


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.25.el6_1.1
changelog:
  - Define initgroups callback for nss_files (#705465)
  - Schedule nscd cache pruning more accurately from re-added values
    (#703481)
  - Use mmap for allocation of buffers used for __abort_msg (#676591)


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.20.6-11
changelog:
  - add manpages
  - add Requires: gpm-libs = 1.20.6-12.el6
  - Resolves: #605053 - RPMdiff run failed for package gpm-1.20.6-10.el6
  [snip from email]
   npajkovs@redhat.com: I'd like to ask you what kind of license did you use for inputattach?
   steve@sk2.org: I didn't mention it in debian/copyright, but
   all the packaging (including the manpages) are licensed under the same
   terms as the packaged source, ie. GPL-2 or later.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-5
changelog:
  - Fixed broken links in index.html (doc-index-fix patch)
    Resolves: rhbz#624658
  - Enabled and fixed testsuite (testsuite-sigsegv-fix, rtest-errout-fix patches)
    Resolves: rhbz#624690
  - Fixed rpmlint warnings on spec file
  - Rebuilt with updated swig
    Resolves: rhbz#679715
  - Fixed gtk plugin program-name (gtk-progname patch)
    Resolves: rhbz#640247
  - Added urw-fonts to BuildRequires
  - Compiled with -fno-strict-aliasing


author: Tomas Bzatek <tbzatek@redhat.com> - 0.17-4
changelog:
  - Require gnome-terminal to have at least one terminal installed (#716398)
  - Update japanese translation (#630236)
  - Fix terminal invocation parameters (#640496)


author: Peter Jones <pjones@redhat.com> - 0.97-70.1
changelog:
  - Fix error on invocation of "grub-install /dev/cciss/c0d0" (patch from jnevill)
    Resolves: rhbz#742976


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.1-3
changelog:
  - Fixed Bug 661597 - the latest page_size for ibus.LookupTable.
  - Added -fno-strict-aliasing option in CFLAGS for rpmdiff


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-23.el6_1.2
changelog:
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#729805) 
  - Set minimum requires of xmlrpc-c to 1.16.24-1200.1840.el6_1.4
  - Set minimum requires of libcurl to 7.19.7-26.el6_1.2


author: Than Ngo <than@redhat.com> - 4.3.4-5
changelog:
  - Resolves: bz#692737, hidde Network Settings in Control Center
  - Resolves: bz#587904, add missing hicolor icons


author: Than Ngo <than@redhat.com> - 6:4.3.4-5
changelog:
  - Resolves: bz#631481, Undecodable sequence message starting konsole
  - Resolves: bz#609039, Password & User account becomes non responding


author: Than Ngo <than@redhat.com> - 4.3.4-22
changelog:
  - Resolves: bz#666295, Missing help page(s) for Plasma workspace
  - Resolves: bz#587917, gnome/kde system monitor tool use same icon


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-17
changelog:
  - fix #703389 - fixed file permissions in /usr/lib/mailman
  - fix #636825 - fix #!/usr/bin/env python shebang in migrate-fhs
  - fix #704699 - fixed directories permissions in /usr/lib/mailman
  - fix #684622 - do not create and install /etc/mailman/mm_cfg.pyc and pyo files


author: Doug Ledford <dledford@redhat.com> - 3.2.2-1.el6_1.1
changelog:
  - Update to latest upstream release (many bugfixes related to the new
    automatic rebuild support: bz723135, bz723137, bz723139, bz723140,
    bz723141, bz723142)
  - Correct typo in /etc/sysconfig/raid-check file
  - Fix a bug related to readding devices into an array
  - Resolves: bz723135, bz723137, bz723139, bz723140, bz723141, bz723142


author: Petr Pisar <ppisar@redhat.com> - 1.08-5
changelog:
  - Check chroot(), chdir(), and nice() (bug #640933)
  - Limit TTY name length to prevent buffer overflow (bug #640940)
  - Allow login name up to LOGIN_NAME_MAX length (bug #651955)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28.4-17
changelog:
  - Fix bookmark renaming from browser Places sidebar (#636881)
  - Refresh desktop location after xdg-dirs change (#661589)
  - Fix saving window geometry (#654091)
  - Prevent a crash when deleting files (#652607)
  - Prevent deadlock on recursive dbus sync calls (#666086)


author: Jiří Klimeš <jklimes@redhat.com> - 0.8.1-10
changelog:
  - wifi: use nl80211 supplicant driver and background scanning (rh #713283)
  - applet: pressing Enter in secrets dialogs comfirms them (rh #696585)
  - applet: fix freed memory access on reading gconf entries (rh #696916)
  - core: send hostname to DHCP server by default (rh #590096)
  - core: handle s390 CTC-type devices (rh #660666)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-15
changelog:
  - wifi: calculate quality correctly with nl80211/mac80211 drivers (rh #748075)
  - wifi: fix Ad-Hoc associations when using nl80211/mac80211 drivers (rh #747066)
  - vpn: fix D-Bus interface properties export (rh #659685)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-3
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets (#707704)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1.1
changelog:
  - import patch to handle initgroups directly rather than forcing libc to
    use the enumeration interfaces, which could result in two threads calling
    initgroups() at the same time to both get a subset of the right answers
    (#718203)


author: Dan Horák <dhorak@redhat.com> 2.3.3-2.1
changelog:
  - properly check CKA_MODULUS_BITS to establish key length for ica token (#743556)
  - Resolves: #743556


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-4.1
changelog:
  Resolves: #718078: zstream clone of 711975
  Resolves: #712114: zstream clone of 703985
  Resolves: #712112: zstream clone of 703473
  Resolves: #712168: zstream clone of 704548


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-6
changelog:
  - Improved sigwinch handling
    Resolves: rhbz#698422

    * Tue Aug 02 2011 Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-5
  - Fixed sigwinch handling
    Resolves: rhbz#698422


author: Roman Rakus <rrakus@redhat.com> - 3.10.12-1.1
changelog:
  - Fixed an issue causing SEGV on some hardware when dmi_processor_id()
    is called
    Resolves: #726614


author: Justin Ross <jross@redhat.com> - 0.10-8
changelog:
  - Related rhbz#743512 - mrg_2.0.x patch was updated to include:
    - BZ 690107: Too many 'task overran' warnings in qpid broker logs
    - BZ 728586: Broker memory bloat due to leak of messages.
    - BZ 730017: Cluster authentication ignores cluster-* settings
    - BZ 732063: creating invalid federation link causes file descriptor
      leak
    - BZ 733543: Client freezes up when sending a large message
    - BZ 734608: qpidd core dump when accessed from a 1.2 client
    - BZ 736160: Qpidd possible memory leaks


author: Don Zickus <dzickus@redhat.com> - 2-8.1
changelog:
  - Resolves: bz#749183
    Add patch from James M. Leddy <james.leddy@redhat.com> to add
    an option to ignore FIPS failures.
  - Resolves: bz#751356
    add ignorefail option to manpage


author: Peter Vrabec <pvrabec@redhat.com> 4.6.2-3.el6_1.3
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #742275


author: Tomas Bzatek <tbzatek@redhat.com> - 2.29.92-2
changelog:
  - Fix profile saving if file/folder names contain an apostrophe (#654567)
  - Fix sabayon crash when getting details of a profile (#674012)


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.1-7
changelog:
  - improve man/usage documentation of the -i/--in-place option
    in the case of symlinks/hardlinks(#679921)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-6
changelog:
  - removed the --with-ldap-*conf options
  - added RELRO flags
    Resolves: rhbz#709235
    Resolves: rhbz#709859


author: Jiri Skala <jskala@redhat.com> - 0.49-6
changelog:
  - Resolves: #655830 - transferring small files using -v returns strange values
  - Resolves: #714240 - utimeout option parsing buffer overflow


author: Kamil Dudka <kdudka@redhat.com> - 0.9.5-5
changelog:
  - fix provides for libunicap, libunicapgtk and libucil (#612693)
  - fix SIGSEGV in ucil_alsa_fill_audio_buffer (#635644)
  - check return value of theora_encode_init() (#635645)
  - avoid a multilib conflict on unicap-devel (#658059)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.el6_1.1
changelog:
  - backported GSSAPI delegation from upstream version 1.27.04 with strong attention
    to libxmlrpc++ client ABI backward compatibility (#729793)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.el6_1.2
changelog:
  - added Requires libcurl to the client/apps packages (.so libraries needed)
  - specified BuildRequires curl-devel version for CURLOPT_GSSAPI_DELEGATION option


author: Michal Hlavinka <mhlavink@redhat.com> - 82-6.1
changelog:
  - security fixes:
  - privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
  - race condition when checking source during mount (CVE-2011-1833)
  - mtab corruption via improper handling (CVE-2011-1834)
  - key poisoning via insecure temp directory handling (CVE-2011-1835)
  - arbitrary file overwrite via lock counter race (CVE-2011-1837)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.39
changelog:
  - Make sure AVC thread has capabilities (#700507)
  - Fix memory leak in dlopen with RTLD_NOLOAD (#699724)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-40
changelog:
  - Map ASCII to ISO-8859-1 in the transcoding code (STR #3832, bug #681836).
  - Check for empty values for some configuration directives (STR #3861, bug #706673).
  - The network backends no longer try to collect SNMP supply and status
    information for raw queues (STR #3809, bug #709896).
  - Handle EAI_NONAME when resolving hostnames (bug #712430).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-43
changelog:
  - The scheduler might leave old job data files in the spool directory
    (STR #3795, STR #3880, bug #735505).


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-6.4
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Colin Walters <walters@verbum.org> - 1:1.2.24-5
changelog:
  - Merge changes from RHEL-6 branch:
    * Drop default patch fuzz
    * Merge CVE-2010-4352.patch from RHEL-6_0-Z
  - Apply patches for CVE-2011-2200
  - Resolves: #725313


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-19.P1.1
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729883)


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-1:.1
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2697, bug #721001).


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_0.2
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651761


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_1.3
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723467


author: Joe Orton <jorton@redhat.com> - 2.2.15-9.3
changelog:
  - add security fixes for CVE-2011-3347, CVE-2011-3368 (#743901)
  - fix regressions in CVE-2011-3192 patch (#736592)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.40.1.9.10
changelog:
  - Resolves: rhbz#744788
  - Bumped to IcedTea6 1.9.8
  -removed font copying
   Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: JSSE
    - S7070134, CVE-2011-3558: Hotspot unspecified issue
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
   NetX
    - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.8.1.el6]
changelog:
  - [fs] GFS2: force a log flush when invalidating the rindex glock (Benjamin Marzinski) [717018 702263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.9.1.el6]
changelog:
  - [scsi] cciss: Annotate cciss_kdump_soft_reset and cciss_sent_reset as __devinit (Tomas Henzl) [715397 698268]
  - [scsi] cciss: Don't wait forever for soft reset to complete, give up after awhile (Tomas Henzl) [715397 698268]
  - [scsi] cciss: use cmd_alloc not cmd_special_alloc for the kdump soft reset command (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do not use bit 2 doorbell reset (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do not attempt PCI power management reset method if we know it won't work (Tomas Henzl) [715397 698268]
  - [scsi] cciss: increase timeouts for post-reset no-ops (Tomas Henzl) [715397 698268]
  - [scsi] cciss: remove superfluous sleeps around reset code (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do soft reset if hard reset is broken (Tomas Henzl) [715397 698268]
  - [scsi] cciss: clarify messages around reset behavior (Tomas Henzl) [715397 698268]
  - [scsi] cciss: increase time to wait for board reset to start (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out irq_request code (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out scatterlist allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out command pool allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] cciss: use new doorbell-bit-5 reset method (Tomas Henzl) [715397 698268]
  - [scsi] cciss: wait longer for no-op to complete after resetting controller (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do a better job of detecting controller reset failure (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do not attempt PCI PM reset if we know it will not work (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: remove superfluous sleeps around reset code (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do soft reset if hard reset is broken (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: clarify messages around reset behavior (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: factor out irq request code (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: factor out cmd_pool allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do not use bit 2 doorbell reset, it causes NMIs (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: wait longer for no-op to complete after resetting controller (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: use new doorbell-bit-5 reset method (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: adjust timing of post-reset sleeps (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do a better job of detecting controller reset failure (Tomas Henzl) [715397 698268]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.10.1.el6]
changelog:
  - [virt] ksm: fix race between ksmd and exiting task (Andrea Arcangeli) [710340 710341] {CVE-2011-2183}
  - [kernel] proc: signedness issue in next_pidmap() (Jerome Marchand) [697824 697825] {CVE-2011-1593}
  - [net] bluetooth: Prevent buffer overflow in l2cap config request (Jiri Pirko) [716809 716810] {CVE-2011-2497}
  - [fs] NLM: Don't hang forever on NLM unlock requests (Jeff Layton) [709548 709549] {CVE-2011-2491}
  - [fs] NFS: Fix NFSv3 exclusive open semantics (Jeff Layton) [719925 694210]
  - [fs] GFS2: Incorrect inode state during deallocation (Steven Whitehouse) [714982 712139]
  - [virt] KVM: Fix register corruption in pvclock_scale_delta (Avi Kivity) [719910 712102]
  - [netdrv] ehea: Fix memory hotplug oops (Steve Best) [720914 702036]
  - [net] Fix memory leak/corruption on VLAN GRO_DROP (Herbert Xu) [695175 695176] {CVE-2011-1576}
  - [md] Fix resync hang after surprise removal (James Paradis) [719928 707268]
  - GFS2: make sure fallocate bytes is a multiple of blksize (Benjamin Marzinski) [720863 695763] {CVE-2011-2689}
  - [kernel] Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code (Oleg Nesterov) [715521 690033] {CVE-2011-1182}
  - [redhat] config: enable parallel port printer support (Aristeu Rozanski) [713827 635968]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.11.1.el6]
changelog:
  - [mm] hold the page lock until after set_page_stable_node (Andrea Arcangeli) [726095 683658]
  - [netdrv] be2net: remove certain cmd failure logging (Ivan Vecera) [725329 719304]
  - [net] nl80211: missing check for valid SSID size in scan operation (Stanislaw Gruszka) [718157 718158] {CVE-2011-2517}
  - [net] bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace. (Thomas Graf) [703022 703023] {CVE-2011-2492}
  - [net] inet_diag: fix validation of user data in inet_diag_bc_audit() (Thomas Graf) [714540 714541] {CVE-2011-2213}
  - [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716829 716830] {CVE-2011-2495}
  - [fs] validate size of EFI GUID partition entries (Anton Arapov) [703029 703030] {CVE-2011-1776}
  - [fs] ext4: Fix max file size and logical block counting of extent format file (Lukas Czerner) [722568 722569] {CVE-2011-2695}
  - [virt] kvm: Disable device assignment without interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [virt] iommu-api: Extension to check for interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [netdrv] r8169: fix Rx checksum offloading bugs (Ivan Vecera) [723807 635596]
  - [netdrv] be2net: changes for BE3 native mode support (Ivan Vecera) [723820 695231]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.13.1.el6]
changelog:
  - [net] af_packet: prevent information leak (Jiri Pirko) [728032 728033] {CVE-2011-2898}
  - [net] gro: Only reset frag0 when skb can be pulled (Jiri Pirko) [726555 726556] {CVE-2011-2723}
  - [fs] FS-Cache: Only call mark_tech_preview() when caching is actually begun (David Howells) [713463 696396]
  - [fs] Fix mark_tech_preview() to not disable lock debugging (David Howells) [713463 696396]
  - [fs] ext4: Rewrite ext4_page_mkwrite() to use generic helpers (Eric Sandeen) [723551 692167]
  - [fs] vfs: Block mmapped writes while the fs is frozen (Eric Sandeen) [723551 692167]
  - [fs] vfs: Create __block_page_mkwrite() helper passing error values back (Eric Sandeen) [723551 692167]
  - [mm] avoid wrapping vm_pgoff in mremap() and stack expansion (Jerome Marchand) [716540 716541] {CVE-2011-2496}
  - [pci] MSI: Restore read_msi_msg_desc(); add get_cached_msi_msg_desc() (Don Zickus) [728522 696511]
  - [pci] MSI: Remove unsafe and unnecessary hardware access (Don Zickus) [728522 696511]
  - [net] sock: do not change prot->obj_size (Jiri Pirko) [726626 725711]
  - [virt] x86: report valid microcode update ID (Marcelo Tosatti) [727838 694747]
  - [agp] fix arbitrary kernel memory writes (Jerome Marchand) [699307 699308] {CVE-2011-2022 CVE-2011-1745}
  - [agp] fix OOM and buffer overflow (Jerome Marchand) [699305 699306] {CVE-2011-1746}
  - [kernel] taskstats: don't allow duplicate entries in listener mode (Jerome Marchand) [715447 715448] {CVE-2011-2484}
  - [netdrv] bnx2x: remove a log-spamming message (Michal Schmidt) [732379 712000]
  - [scsi] ibmvscsi: Improve CRQ reset reliability (Steve Best) [727618 700165]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.14.1.el6]
changelog:
  - [scsi] megaraid_sas: Convert 6, 10, 12 byte CDB's for FastPath IO (Tomas Henzl) [710047 705835]
  - [x86] perf, x86: Fix Intel fixed counters base initialization (Don Zickus) [719229 736284] {CVE-2011-2521}
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}
  - [fs] Ecryptfs: Add mount option to check uid of device being mounted = expect uid (Eric Sandeen) [731175 731176] {CVE-2011-1833}
  - [char] tpm: Fix uninitialized usage of data buffer (Stanislaw Gruszka) [684674 684675] {CVE-2011-1160}
  - [kernel] perf: Fix software event overflow (Frantisek Hrbata) [730707 730708] {CVE-2011-2918}
  - [serial] 8250_pci: ifdef for powerpc, to only add functionality to this arch (Steve Best) [732382 696695]
  - [serial] 8250: Fix capabilities when changing the port type (Steve Best) [732382 696695]
  - [serial] 8250_pci Add EEH support to the 8250 driver for IBM/Digi PCIe 2-port Adapter (Steve Best) [732382 696695]
  - [serial] 8250_pci: Add support for the Digi/IBM PCIe 2-port Adapter (Steve Best) [732382 696695]
  - [ppc] pseries/iommu: Add additional checks when changing iommu mask (Steve Best) [736065 704401]
  - [ppc] pseries/iommu: Use correct return type in dupe_ddw_if_already_created (Steve Best) [736065 704401]
  - [ppc] iommu: Restore iommu table pointer when restoring iommu ops (Steve Best) [736065 704401]
  - [ppc] Fix kexec with dynamic dma windows (Steve Best) [736065 704401]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.16.1.el6]
changelog:
  - [net] br_multicast: Ensure to initialize BR_INPUT_SKB_CB(skb)->mrouters_only. (Frantisek Hrbata) [739477 738110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.17.1.el6]
changelog:
  - Revert: [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.18.1.el6]
changelog:
  - [sched] wait_for_completion_interruptible_timeout() should return signed long (J. Bruce Fields) [745413 738379]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.19.1.el6]
changelog:
  - [scsi] scan: don't fail scans when host is in recovery (Mike Christie) [734774 713682]
  - [netdrv] b43: allocate receive buffers big enough for max frame len + offset (RuiRui Yang) [738204 738205] {CVE-2011-3359}
  - [fs] fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message (RuiRui Yang) [736764 736765] {CVE-2011-3353}
  - [fs] cifs: fix possible memory corruption in CIFSFindNext (Jeff Layton) [737482 730354] {CVE-2011-3191}
  - [kernel] perf tools: do not look at ./config for configuration (Jiri Benc) [730203 730204] {CVE-2011-2905}
  - [x86] mm: Fix pgd_lock deadlock (Andrew Jones) [737570 691310]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Andrew Jones) [737570 691310]
  - [mm] Revert "fix pgd_lock deadlock" (Andrew Jones) [737570 691310]
  - [fs] corrupted GUID partition tables can cause kernel oops (Jerome Marchand) [695981 695982] {CVE-2011-1577}
  - [net] Compute protocol sequence numbers and fragment IDs using MD5. (Jiri Pirko) [732664 732665] {CVE-2011-3188}
  - [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732664 732665] {CVE-2011-3188}
  - [fs] SUNRPC: Fix use of static variable in rpcb_getport_async (Steve Dickson) [740230 723650]
  - [fs] NFSv4.1: update nfs4_fattr_bitmap_maxsz (Steve Dickson) [740230 723650]
  - [fs] SUNRPC: Fix a race between work-queue and rpc_killall_tasks (Steve Dickson) [740230 723650]
  - [fs] SUNRPC: Ensure we always run the tk_callback before tk_action (Steve Dickson) [740230 723650]
  - [misc] enclosure: fix error path to actually return ERR_PTR() on error (Tomas Henzl) [741166 713730]
  - [virt] KVM: make guest mode entry to be rcu quiescent state (Gleb Natapov) [740352 712653]
  - [virt] rcu: provide rcu_virt_note_context_switch() function (Gleb Natapov) [740352 712653]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.20.1.el6]
changelog:
  - [net] vlan: fix panic when handling priority tagged frames (Andy Gospodarek) [742849 714936] {CVE-2011-3593}
  - [netdrv] igb: fix WOL on second port of i350 device (Frantisek Hrbata) [743807 718293]
  - [kernel] fix taskstats io infoleak (Jerome Marchand) [716847 716848] {CVE-2011-2494}
  - [tpm] Zero buffer after copying to userspace (Jiri Benc) [732632 732633] {CVE-2011-1162}
  - [scsi] Revert megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [741167 736667]
  - [x86] acpi: Prevent acpiphp from deadlocking on PCI-to-PCI bridge remove (Prarit Bhargava) [745557 732706]
  - [net] sctp: deal with multiple COOKIE_ECHO chunks (Frantisek Hrbata) [743510 729220]
  - [scsi] iscsi_tcp: fix locking around iscsi sk user data (Mike Christie) [741704 647268]
  - [kernel] first time swap use results in heavy swapping (Hendrik Brueckner) [747868 722461]
  - [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [744811 691945]
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738301 692709] {CVE-2011-3363}
  - [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738301 692709] {CVE-2011-3363}
  - [net] ipv6: fix NULL dereference in udp6_ufo_fragment() (Jason Wang) [748808 740465]
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-14
changelog:
  - krb5kdc init script: pull in some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (#651466)
  - don't use %{?_smp_mflags} -- the build machinery doesn't always work
    right for those cases
  - tag the application of patches which we use to fix compile problems with
    %{_rawbuild} so that minimum-patches builds can be done (#711032)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-15
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-16
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#724033)
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-17
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-19
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-21
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth with AD KDCs (#734341)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22
changelog:
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#746341)
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (MITKRB5-SA-2011-006, #740085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22.1
changelog:
  - add candidate patch to fix a NULL pointer dereference while processing TGS
    requests (MITKRB5-SA-2011-007, #754046)


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-211.el6]
changelog:
  - [scsi] libsas: fix warnings when checking sata/stp protocol (David Milburn) [695950]
  - [scsi] libsas: disable scanning lun > 0 on ata devices (David Milburn) [695950]
  - [scsi] libsas: Allow expander T-T attachments (David Milburn) [695950]
  - [usb] xhci: Make xHCI driver endian-safe (Don Zickus) [745967]
  - [infiniband] RDMA/cxgb3: Don't post zero-byte read if endpoint is going away (Neil Horman) [717379]
  - [scsi] isci: atapi support (David Milburn) [743692]
  - [x86] amd: Move BSP code to cpu_dev helper (Larry Woodman) [739456]
  - [x86] Add a BSP cpu_dev helper (Larry Woodman) [739456]
  - [x86] amd: Avoid cache aliasing penalties on AMD family 15h (Larry Woodman) [739456]
  - [net] ipv6: fix NULL dereference in udp6_ufo_fragment() (Jason Wang) [740465]
  - [netdrv] cxgb4: Updating NIC driver firmware (Neil Horman) [717806]
  - [netdrv] cxgb3: Fix NULL pointer dereference in t3_l2t_get (Neil Horman) [729737]
  - [netdrv] bnx2x: remaining fixes from upstream 3.1 (Michal Schmidt) [743917]
  - [netdrv] e1000e: fix WoL on 82578DM and 82567V3 (Andy Gospodarek) [699042]
  - [netdrv] tg3: Use netif_set_real_num_tx_queues() (Jiri Pirko) [740477]
  - [netdrv] bnx2x: critical fixes (Veaceslav Falico) [745211]
  - [netdrv] bonding: properly stop queuing work when requested (Andy Gospodarek) [736904]
  - [netdrv] tg3: negate USE_PHYLIB flag check (Jiri Pirko) [746006]
  - [x86] Add new cpu capabilities to /proc/cpuinfo (Prarit Bhargava) [745799]
  - [kabi] add missing multipath symbols for s390x (Aristeu Rozanski) [714992]
  - [perf] sched: Fix script command documentation (Jiri Olsa) [726589]
  - [pm] hibernate: Fix memory corruption related to swap (Stanislaw Gruszka) [701857]
  - [scsi] hpsa: add heartbeat sysfs host attribute (Tomas Henzl) [730027]
  - [scsi] Revert megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [736667]
  - [fs] GFS2: Fix ->page_mkwrite() races (Steven Whitehouse) [725091]
  - [scsi] scsi_transport_fc: Fix deadlock during fc_remove_host (Mike Christie) [714320]
  - [kernel] workqueue: Fix workqueue deadlock during destroy_workqueue (Mike Christie) [714320]
  - [sched] Avoid expensive initial update_cfs_load() (Larry Woodman) [741569 742414]
  - [sched] Simplify update_cfs_shares parameters (Larry Woodman) [741569 742414]
  - [sched] Fix/remove redundant cfs_rq checks (Larry Woodman) [741569 742414]
  - [sched] Fix sign under-flows in wake_affine (Larry Woodman) [741569 742414]
  - [sched] Update effective_load() to use global share weights (Larry Woodman) [741569 742414]
  - [sched] Fix interactivity bug by charging unaccounted run-time on entity re-weight (Larry Woodman) [741569 742414]
  - [sched] Move periodic share updates to entity_tick() (Larry Woodman) [741569 742414]
  - [sched] Fix UP build breakage (Larry Woodman) [741569 742414]
  - [sched] Update tg->shares after cpu.shares write (Larry Woodman) [741569 742414]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-212.el6]
changelog:
  - [net] bridge: fix use after free in __br_deliver() (Amerigo Wang) [730756] {CVE-2011-2942}
  - [scsi] Update lpfc version for 8.3.5.45.4p driver release (Rob Evers) [746668]
  - [scsi] Fix crash when cfg_fcp_eq_count is zero (Rob Evers) [746668]
  - [scsi] Fix kernel crash during boot with SLI4 card installed (Rob Evers) [746668]
  - [scsi] Properly clean up EQ and CQ child lists to prevent kernel crash (Rob Evers) [746668]
  - [kabi] add missing symbols for Emulex be2net driver (Jiri Olsa) [745712]
  - [netdrv] netxen-firmware: Install the 4.0.579 firmware (Kyle McMartin) [741776]
  - [perf] symbols: Treat all memory maps without dso file as loaded (Jiri Olsa) [726582]
  - [debug] increase MAX_STACK_TRACE_ENTRIES (Kyle McMartin) [645777]
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [692709] {CVE-2011-3363}
  - [tpm] Zero buffer after copying to userspace (Jiri Benc) [732633] {CVE-2011-1161 CVE-2011-1162}
  - [pci] intel-iommu: IOTLB hang workaround (Dave Airlie) [728476]
  - [drm] i915: Fix hang on Ironlake mobile GPU with VT-d (Dave Airlie) [728476]
  - [drm] i915: Remove early exit on i915_gpu_idle (Dave Airlie) [728476]
  - [drm] nv50/bios: fixup mpll programming from the init table parser (Ben Skeggs) [744992]
  - [drm] nv50/vram: fix incorrect detection of bank count on newer chipsets (Ben Skeggs) [744992]
  - [drm] radeon: fix llano output setup + memory corruption (Dave Airlie) [747292]
  - [drm] radeon caicos enablement fixes (Dave Airlie) [747291]
  - [pci] Disable SRIOV on powerpc (Prarit Bhargava) [742089]
  - [pci] Add pci=nosriov to disable SRIOV (Prarit Bhargava) [742089]
  - [x86] apic: ack all pending irqs when crashed/on kexec (Takao Indoh) [704142]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-213.el6]
changelog:
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in niu.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in myri10ge.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in igb_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in cxgb4_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in cxgb3_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in bnx2.c (Neil Horman) [742117]
  - [ppc] kabi: add symbol 'paca' to ppc KABI (Jiri Olsa) [737466]
  - [fs] proc: fix oops on invalid /proc/pid/maps access (Johannes Weiner) [746613] {CVE-2011-3637}
  - [nfs] fix pNFS hang and oops on umounts (Steve Dickson) [746861]
  - [scsi] qla4xxx: export address/port of connection (Mike Christie) [728156]
  - [netdrv] Fix pktgen to not oops on unsupported drivers (Neil Horman) [678794]
  - [kernel] tracing: Update the comm field in the right variable in update_max_tr (Jiri Olsa) [736955]
  - [kernel] kabi: Add missing compat_alloc_user_space symbol to kABI (Jiri Olsa) [747047]
  - [kernel] fix taskstats io infoleak (Jerome Marchand) [716848] {CVE-2011-2494}
  - [x86] ACPI, APEI, HEST: Detect duplicated hardware error source ID (Don Zickus) [737189]
  - [netdrv] Add latest cxgb3 firmware (Neil Horman) [742011]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-214.el6]
changelog:
  - [dm] table: add immutable feature (Mike Snitzer) [747438]
  - [mm] reduce overhead on paravirt functions (Larry Woodman) [743554]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-215.el6]
changelog:
  - [virt] index of virtio disk is not decremented when removed (Mark Wu) [692767]
  - [edac] i7core_edac: Initialize memory name with cpu, channel, bank (Mauro Carvalho Chehab) [712957]
  - [kernel] perf: Optimize event scheduling locking (Steve Best) [744986]
  - [drm] i915: set the right SDVO transcoder for CPT (Adam Jackson) [735122]
  - [scsi] libfc: Prevent race that causes panic during FCoE port destroy (Neil Horman) [735959]
  - [scsi] qla4xxx: Update driver version to 5.02.00-k8 (Mike Christie) [732622]
  - [scsi] qla4xxx: updated device id check for BFS (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed target discovery failed issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed active session re-open issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed device blocked issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed session destroy issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Clear DDB map index on the basis of AEN (Mike Christie) [732622]
  - [scsi] qla4xxx: Free Device Database (DDB) reserved by FW (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix getting BIDI CHAP for boot targets (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix exporting boot targets to sysfs (Mike Christie) [732622]
  - [scsi] qla4xxx: Do not add duplicate CHAP entry in FLASH (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix bidirectional CHAP (Mike Christie) [732622]
  - [scsi] qla4xxx: Add new FLT firmware region (Mike Christie) [732622]
  - [scsi] qla4xxx: Update license (Mike Christie) [732622]
  - [scsi] iscsi class: fix vlan configuration (Mike Christie) [732622]
  - [scsi] qla4xxx: fix data alignment and use nl helpers (Mike Christie) [732622]
  - [scsi] iscsi class: fix link local mispelling (Mike Christie) [732622]
  - [scsi] qla4xxx: Added Get ACB support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added restore factory defaults support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] qla4xxx: Added vendor specific sysfs attributes (Mike Christie) [732622]
  - [scsi] qla4xxx: Add read/update NVRAM support for 40xx adapters using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Add get ACB state support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Code cleanup for read/update flash using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added support to update mtu (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update mtu (Mike Christie) [732622]
  - [scsi] libfc: improve flogi retries to avoid lport stuck (Mike Christie) [745667]
  - [scsi] libfc: avoid exchanges collision during lport reset (Mike Christie) [745667]
  - [scsi] libfc: fix checking FC_TYPE_BLS (Mike Christie) [745667]
  - [scsi] libfc: revert fix deadlock bug in fc_exch_abort_locked (Mike Christie) [745667]
  - [dm] log userspace: Allow for 'log device name' response in CTR msg exchange (Jonathan E Brassow) [746254]
  - [dm] kcopyd: fix job_pool leak (Mike Snitzer) [748441]
  - [netdrv] igb: Fix for Alt MAC Address feature on 82580 and later (Andy Gospodarek) [748503]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-216.el6]
changelog:
  - [scsi] lockless queuecommand dispatch fixup (Rob Evers) [749018]
  - [scsi] iscsi class: export pid of process that created session (Mike Christie) [747696]
  - [scsi] qla4xxx: Autologin persisted target entries (Mike Christie) [747696]
  - [netdrv] iwlagn: enable 11n aggregation without checking traffic load (John Linville) [744361]
  - [s390x] qdio: EQBS retry after CCQ 96 (Hendrik Brueckner) [747578]
  - [s390x] dasd: fix UID readout for z/VM (Hendrik Brueckner) [746000]
  - [x86] PCI: irq and pci_ids patch for Intel Panther Point DeviceIDs (Prarit Bhargava) [747638]
  - [netdrv] Help 6.1 out of tree drivers cope with ABI breakage (Thomas Graf) [746570]
  - [mm] shmem: let shared anonymous be nonlinear again (Larry Woodman) [690129]
  - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [742091] {CVE-2011-3638}
  - [ipc] mqueue: separate mqueue default value from maximum value (Motohiro Kosaki) [746606]
  - [ipc] mqueue: don't use kmalloc with KMALLOC_MAX_SIZE (Motohiro Kosaki) [746606]
  - [ipc] mqueue: revert bump up DFLT_*MAX (Motohiro Kosaki) [746606]
  - [kernel] ipc/mqueue: Up the hard limit on message queues per namespace (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: update maximums for the mqueue subsystem (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: enforce hard limits (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: switch back to using non-max values on create (Doug Ledford) [746606 746898]
  - [kernel] ipc/mqueue: cleanup definition names and locations (Doug Ledford) [746606]
  - [kernel] Revert "Restore max mqueue message size to its previous RHEL 5 value" (Doug Ledford) [746606]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-217.el6]
changelog:
  - [fs] GFS2: rewrite fallocate code to write blocks directly (Benjamin Marzinski) [750208] {CVE-2011-4098}
  - [netdrv] bnx2x: link fixes for 57810 (Andy Gospodarek) [749421]
  - [netdrv] enic: fix accidental GRO off by default (Stefan Assmann) [749390]
  - [scsi] qla2xxx: Correct inadvertent clearing of RISC_INTR status (Chad Dupuis) [748978]
  - [debug] lockdep: double MAX_LOCKDEP_ENTRIES (Kyle McMartin) [748941]
  - [x86] Add missing KERN_DEBUG to x86 module printk (Prarit Bhargava) [747837]
  - [x86] Update module alternatives message (Prarit Bhargava) [745596]
  - [x86] UV: KABI breakage in uv_blade_info (George Beshers) [745253]
  - [net] vlan: fix panic when handling priority tagged frames (Andy Gospodarek) [714936] {CVE-2011-3593}
  - [scsi] qla4xxx: Autologin persisted target entries update (Mike Christie) [747696]
  - [mm] oom: fix integer overflow of points in oom_badness (Frantisek Hrbata) [741207] {CVE-2011-4097}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-218.el6]
changelog:
  - [netdrv] benet: remove bogus "unlikely" on vlan check (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: non-member vlan pkts not received in promiscous mode (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736429] {CVE-2011-3347}
  - [mm] fix race between mremap and removing migration entry (Andrea Arcangeli) [751084]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-219.el6]
changelog:
  - [kernel] KEYS: Fix a NULL pointer deref in the user-defined key type (David Howells) [751190] {CVE-2011-4110}
  - [scsi] fc class: fix building of Fibre Channel DUP drivers in 6.2 (Mike Christie) [750268]
  - [fs] nfs: don't call __mark_inode_dirty while holding i_lock (Steve Dickson) [747391]
  - [netdrv] vxge: allow rebinding the driver with a different number of SR-IOV VFs (Michal Schmidt) [694742]
  - [netdrv] vxge: fix crash of VF when unloading PF (Michal Schmidt) [694742]
  - [ata] revert libata: remove SCSI host lock (David Milburn) [751426]
  - [crypto] ansi_cprng: enforce key != seed in fips mode (Jarod Wilson) [751198]
  - [net] mac80211: Fix reassociation processing within ESS roaming (John Linville) [750350]
  - [net] nl80211: Allow association to change channels during reassociation (John Linville) [750350]
  - [net] mac80211: let cfg80211 manage auth state (John Linville) [750350]
  - [net] cfg80211: avoid sending spurious deauth to userspace (John Linville) [750350]
  - [net] mac80211: recalculate idle later in MLME (John Linville) [750350]
  - [net] mac80211: avoid spurious deauth frames/messages (John Linville) [750350]
  - [net] cfg80211: Allow reassociation in associated state (John Linville) [750350]
  - [net] cfg80211: remove warning in deauth case (John Linville) [750350]
  - [net] netfilter: fix nf_conntrack refcount leak in l4proto->error() (Thomas Graf) [745472]
  - [scsi] qla2xxx: Remove check for null fcport from host reset handler (Chad Dupuis) [744741]
  - [scsi] qla2xxx: Perform implicit logout during rport tear-down (Chad Dupuis) [744741]
  - [scsi] Revert "qla2xxx: Remove host_lock in queuecommand function" (Chad Dupuis) [744741]
  - [drm] nv50/disp: shutdown display on suspend/hibernate (Ben Skeggs) [740857]
  - [edac] Add sb_edac driver into the Red Hat Building system (Mauro Carvalho Chehab) [647700]
  - [edac] Fix incorrect edac mode reporting in sb_edac (Mauro Carvalho Chehab) [647700]
  - [edac] Add an experimental new driver to support Sandy Bridge CPU's (Mauro Carvalho Chehab) [647700]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-220.el6]
changelog:
  - [drm] i915: fix unmap race condition introduced with VT-d fix (Dave Airlie) [750583]
  - [scsi] iscsi: revert lockless queuecommand dispatch (Rob Evers) [751426]


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9.2
changelog:
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (#740084)


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721305


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.1
changelog:
  - debug: Avoid null dereference on uuid lookup api (rhbz#728546)
  - Fix auditing of disk hotunplug operations (rhbz#728516)
  - storage: Fix regression with backing format (rhbz#726617)
  - Fix performance problem of virStorageVolCreateXMLFrom() (rhbz#715400)
  - qemu: Translate boot config into bootindex if possible (rhbz#715401)
  - remote: Protect against integer overflow (rhbz#717202)
  Resolves: rhbz#728546, rhbz#728516, rhbz#715400, rhbz#715401, rhbz#717202
  Resolves: rhbz#726617


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-1
changelog:
  - Change package name from libvirt-qpid to libvirt-qmf
  - Convert to QMFv2 API
  - Make libvirt-qmf a matahari agent
    Resolves: #688200
    Related: #688194


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-3
changelog:
  - Ensure all Domain properties are initialized immediately
  - Correct some erroneous error messages
  - Fix quoting of variables in init script
    Resolves: #729127


author: Russell Bryant <rbryant@redhat.com> 0.4.3-1
changelog:
  - Rebase to upstream release 0.4.3
  - Resolves: rhbz#733384, rhbz#733393, rhbz#733451, rhbz#731858
  - Resolves: rhbz#733150, rhbz#714249


author: Russell Bryant <rbryant@redhat.com> 0.4.4-1
changelog:
  - Rebase to upstream release 0.4.4
  - Resolves: rhbz#735419, rhbz#735429, rhbz#733483. rhbz#734981
  - Resolves: rhbz#735426, rhbz#734536, rhbz#733468, rhbz#734522
  - Resolves: rhbz#733393, rhbz#736468
  - Related: rhbz#674578


author: Russell Bryant <rbryant@redhat.com> 0.4.4-4
changelog:
  - Sync with upstream spec file fixes.
  - add man pages (rhbz#737088)
  - fix some sysconfig issues (rhbz#737137)
  - ensure old processes get cleaned up after an upgrade (rhbz#737618)
  - fix agent crash on NULL UUIDs (rhbz#739666)
  - don't list "LSB" as a valid standard on windows (rhbz#739952)
  - Resolves: rhbz#737088, rhbz#737137, rhbz#737618, rhbz#739666
  - Resolves: rhbz#739952, rhbz#737541


author: Russell Bryant <rbryant@redhat.com> 0.4.4-5
changelog:
  - remove hard puppet dependency
  - fix sysconfig agent no response (rhbz#740038)
  - Resolves: rhbz#740038
  - Related: rhbz#737137


author: Russell Bryant <rbryant@redhat.com> 0.4.4-6
changelog:
  - resolve coverity warnings in broker wrapper (rhbz#735426)
  - add validation on sysconfig keys (rhbz#740090)
  - store sysconfig keys in a subdir (rhbz#740091)
  - Resolves: rhbz#740090, rhbz#740091
  - Related: rhbz#735426


author: Russell Bryant <rbryant@redhat.com> 0.4.4-7
changelog:
  - Validate sysconfig keys sooner (rhbz#741965)
  - Add man pages in a patch instead of generating during build (rhbz#737088)
  - Update sigar version dependency (rhbz#737541)
  - Resolves: rhbz#741965, rhbz#737088, rhbz#737541


author: Zane Bitter <zbitter@redhat.com> 0.4.4-9
changelog:
  - Read the CPU features on non-x86 architectures (rhbz#746288)
  - Add daemons to chkconfig after installation (rhbz#746084)
  - Resolves: rhbz#746084
  - Related: rhbz#746288


author: Steve Dickson <steved@redhat.com> 1.2.3-8
changelog:
  - initscripts: just try to mount rpc_pipefs always (bz 692702) 
  - Rely on crypto module autoloading in init scripts
  - svcgssd: Document "-n" for svcgssd (bz 697359)
  - mount.nfs: anticipate RLIMIT_FSIZE (bz 697981)
  - exportfs manpage: Ipv6 update (bz 715078)
  - mountd: Stop segfault in mtab code (bz 723438)
  - exportfs: wilcards in exports can lead to unintended mounts (bz 715391)
  - umount: allow spaces in unmount paths (bz 702273)
  - specfile: reordered how libgssglue is linked in (bz 720479)


author: Steve Dickson <steved@redhat.com> 1.2.3-9
changelog:
  - umount.nfs: Got IPV6 unmounts working again (bz 732673)
  - mountd: return multiple hosts exporting the same directory (bz 726112) 
  - mount: Better error message for invalid version (bz 723780)


author: Steve Dickson <steved@redhat.com> 1.2.3-15
changelog:
  - mout.nfs: Don't roll back to IPv4 whe IPv6 fails (bz 744657)
  - rpcdebug: Added pNFS and FSCache debugging (bz 747400)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-119.1
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743090, rhbz#743092


author: Joe Orton <jorton@redhat.com> - 5.3.3-3.1
changelog:
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740731)


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740735


author: Kim van der Riet<kim.vdriet@redhat.com> - 0.10-4
changelog:
  - Related rhbz#711834
  - MRG 2.0 GA build for RHEL 6.1.z, equates to 0.10-8.el5 build
  - The mrg-2.0.x patch file was updated to include:
    - BZ 707023: RPMdiff failure (multilib regressions) in qpid-qmf
    - BZ 709343: Packaging problem in qpid-qmf-devel (qmf-gen templates)
    - BZ 709862: dash-7 source RPM does not build
    - BZ 671369: RDMA client can segfault when no SASL mechanism specified
  - Catch-up build corresponding to RHEL-5 builds 0.10-4 -5 -6 and -7:
  - RHEL-5 0.10-4:
    - 2.0 RC build 1
    - BZs: 690261,693407,695263,695716,696637,696655,696698
  - RHEL-5 0.10-5:
    - Intermediate build to address rpmdiff/multilib problems
    - BZs: 689907
    - Now sourcing the doxygen-generated HTML from distcvs
  - RHEL-5 0.10-6:
    - 2.0 RC build 2
    - BZs: 675921,681313,689907,698254,700822,701709,701777,701786,701804
  - RHEL-5 0.10-7:
    - 2.0 RC build 3
    - BZs: 693895,698721


author: Ted Ross<tross@redhat.com> - 0.12-3
changelog:
  - BZ 681680 - QMF agents wake up several times a second
  - BZ 699499 - [RFE] qmfv2 must provide mainloop integration


author: Justin Ross <jross@redhat.com> - 0.12-5
changelog:
  - Related: rhbz#742040
  - Remove the indirection for subpackage renaming; we no longer need it
  - Adapt spec file to use upstream qpid source tarball as-is
  - Rebase qpid and store source to 0.12
  - Restore changes for new architectures


author: Ted Ross <tross@redhat.com> - 0.12-2
changelog:
  - Related:rhbz#663461 - Enable new architectures
  - Remove python-qpid-qmf and ruby-qpid-qmf from ppc and s390 architectures


author: Ted Ross <tross@redhat.com> - 0.12-4
changelog:
  - Related:rhbz#681680 - QMF agents wake up several times a second
  - Related:rhbz#699499 - [RFE] qmfv2 must provide mainloop integration


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    resource-agents: Add resource type to logging
    oracledb.sh resource script should attempt a clean shutdown first
    resource-agent does not remove nfs service temp dirs when using nfslock=1
    Listen line in generated httpd.conf incorrect
    Include rhev-check upstream
  - spec file update:
    * drop all patches
    * resync with upstream spec file. See top section for local deltas
    Resolves: rhbz#707127, rhbz#705763, rhbz#667217
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Conflicts on rgmanager to avoid file conflicts
    Resolves: rhbz#693518


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-1
changelog:
  - Rebase package on top of new upstream
    * ship xsl and rng files required to build relaxng schema
    * drop local copy of sfex_init.8
    * drop bz711852-Fix-ASEHAagent-to-allow-for-multiple-ASEHA-agents-on.patch
      included upstream
  - spec file update:
    add %post to generate new relaxng schema
    Resolves: rhbz#707127


author: Chris Feist <cfeist@redhat.com> - 3.9.2-2
changelog:
  - Postgres-8 resource agent now properly detects if postgresql was started
  - fs.sh resource agent now returns the proper response code when a device
    does not yet exist.
  - Resolves: rhbz#709400 rhbz#694816


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3
changelog:
  - Main rgmanager resource agents now use proper return codes for use with
    pacemaker.
  - NFS mounts now unmount faster when the network is lost.
  - Resolves: rhbz#678497 rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-4
changelog:
  - Create a link for the modified dtd for rgmanager
  - Fix ocf-tester so rgmanager agents requiring bash don't cause syntax errors
  - Resolves: rhbz#727643


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-8
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709964


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-1
changelog:
  - Update to Ruby 1.8.7-p352.
    * Remove Patch43: ruby-1.8.7-CVE-2011-1004.patch; subsumed
    * Remove Patch44: ruby-1.8.7-CVE-2011-1005.patch; subsumed
    * Remove Patch200: ruby-1.8.7-webrick-CVE.patch; subsumed
  - Resolves: rhbz#706332
  - Fix of conflict between 32bit and 64bit library versions.
  - Resolves: rhbz#674787
  - Add systemtap static probes.
  - Resolves: rhbz#673162
  - Remove duplicate path entry
  - Resolves: rhbz#722887


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-3
changelog:
  - mkconfig.rb: fix for continued lines.
    * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
  - Resolves: rhbz#730287


author: Karel Zak <kzak@redhat.com> 2.17.2-12.1
changelog:
  - fix #723546 - Defects revealed by Coverity scan
  - fix #723352 - cfdisk cannot read default installer partitioning
  - fix #712158 - uid/gid overflow in ipcs
  - fix #696959 - wipefs(8) reject partitioned devices
  - fix #694648 - document blank line at head of fstab
  - fix #684203 - umount fails on inconsistent fstab
  - fix #679831 --lines does not work
  - fix #679741 - canonicalize swap device
  - fix #692119 - include fstrim tool
  - fix #675999 - blkid crashes on a server with more than 128 storage devices
  - fix #696731 - display failed login attempts
  - fix #726092 - Pass host name from agetty to login
  - fix #716995 - Remove Deprecation Statement in /etc/udev/rules.d/60-raw.rules
  - fix #712808 - uuidd should depend on chkconfig
  - fix #723638 - Backport upstream extensions for lsblk (RHEL6.2)


author: Karel Zak <kzak@redhat.com> 2.17.2-12.4
changelog:
  - fix CVE-2011-1675 - mount fails to anticipate RLIMIT_FSIZE
  - fix CVE-2011-1677 - umount may fail to remove /etc/mtab~ lock file


author: Karel Klíč <kklic@redhat.com> - 2.0.4-6
changelog:
  - Removed unconditioned `service abrt-ccpp restart` and `service
    abrt-oops restart` from %post sections, because services cannot be
    automatically started after package install. We start new daemons
    another way: if abrtd is running on the system being updated, run
    abrt-{oops,ccpp} services as well, because what was a part of abrtd
    service became a separate service.
    Resolves: #732535
  - Added proper fix for rhbz#729686 make check fails
    Related: #729686
  - Updated potfiles_in.patch with better solution (Making check in po:
    *** No rule to make target
    `../src/plugins/abrt-action-kerneloops.c', needed by `abrt.pot')
    Related: #729686
  - Added %check section to the spec file; it runs make check during
    compilation, to test that it finishes successfully
    Related: #729686
  - Updated helper_for_executing_shell_code.patch with better solution
    Related: #705768


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.4-8
changelog:
  - read DBPath from SQLite3.conf in abrt1-to-abrt2  rhbz#726122
    Resolves: #726122
  - update man pages
    Resolves: #727569


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.4-10
changelog:
  - abrtd daemon need "messagebus" daemon, please update "Required-Start" section of /etc/init.d/abrtd
  - move abrt-action-install-debuginfo-to-abrt-cache to libexec  rhbz#736068
  - fix possible NULL dereference  rhbz#735942
    Resolves: #735942, #736068, #733975


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.4-13
changelog:
  - fixed typo in ccpp_event.conf rhbz#744784
  - fixed return codes in abrt-cli rhbz#742474
  - Resolves: #744784, #742474


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-6
changelog:
  - add function acl_extended_file_nofollow() (#720318)
  - build with partial RELRO support as a security enhancement (#723998)


author: David Cantrell <dcantrell@redhat.com> - 13.21.140-1
changelog:
  - Exclude Xen guests when configuring tboot (dcantrell)
    Resolves: rhbz#737094
  - Fix format.majorminor caching. (akozumpl)
    Related: rhbz#731973
  - Fix detection of RAW driverdisc partitions while in manual selection mode
    (msivak)
    Related: rhbz#732496
  - fcoe: handle Broadcom fcoe devices correctly. (akozumpl)
    Resolves: rhbz#641420
  - fcoe: the control path in sysfs is now /sys/module/libfcoe (akozumpl)
    Related: rhbz#641420
  - fcoe: load bnx2fc if relevant. (akozumpl)
    Related: rhbz#641420
  - Fix the list-harddrives test script (mgracik)
    Resolves: rhbz#706099
  - Fix loadkeys-test (mgracik)
    Resolves: rhbz#706099
  - Fix PartitionDevice.path to work with device-mapper disks. (dlehman)
    Related: rhbz#731973
  - Allow DeviceFormat.cacheMajorminor to fail without an exception. (akozumpl)
    Resolves: rhbz#731973
  - Set formats' device attr when associating the format with a device. (dlehman)
    Related: rhbz#731973
  - Cache the value of Format.majorminor(). (akozumpl)
    Related: rhbz#731973
  - More partition dialogs focusing after error (mgracik)
    Resolves: rhbz#679810


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-1
changelog:
  resolves: #709345 auditctl -l returns 0 even if it fails on dropped capabilities
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #715315 remote client gets disk_error event instead of disk_full
  resolves: #728475 remove krb5 related options from audisp-remote.conf


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-2
changelog:
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #748124 Auditctl doesn't recognize accept4 syscall


author: Ian Kent <ikent@redhat.com> - 5.0.5-32
changelog:
  - bz704940 - autofs-5.0.1-0.rc2.131.el5_4.1 is missing man 8 auto.master
    - automount(8) man page correction.
  - bz704929 - automount hangs with nested mounts using YP lookups
    - don't hold lock for simple mounts.
  - bz703332 - autofs fails to find duplicate key after key removal
    - fix prune cache valid check.
    - fix map source check in file lookup.
  - bz704933 - [RHEL 5.4] automounter dies with pthreads error
    - wait for master source mutex.
  - bz704927 - autofs should support paged results from ldap server
    - auto adjust ldap page size.
    - fix paged ldap map read.
  - bz704932 - [RFE] Support for encrypted secret in /etc/autofs_ldap_auth.conf
    - add base64 password encode.
  - bz704416 - RFE: automounter to dump maps
    - add dump maps option.
  - bz704935 - [RFE] resolve negative cache invalidation on signal to automount
    - reset negative status on cache prune.
  - bz704937 - Segmentation fault when looking up '*.'
    - fix wildcard map entry match.
  - bz704228 - AD/LDAP connection using GSSAPI auth fails with Error: An invalid
    name was supplied (Hostname cannot be canonicalized)
    - fix sasl bind host name selection.
  - bz692816 - automount does not perform a sanity check of server name in
    configuration
    - fix sanity checks for brackets in server name.
  - bz704939 - automount segfaults in lookup_mount
    - mapent becomes negative during lookup.
  - Resolves: rhbz#704940 rhbz#704929 rhbz#703332 rhbz#704933 rhbz#704927
  - Resolves: rhbz#704932 rhbz#704416 rhbz#704935 rhbz#704937 rhbz#704228
  - Resolves: rhbz#692816 rhbz#704939


author: Ian Kent <ikent@redhat.com> - 5.0.5-33
changelog:
  - bz704228 - AD/LDAP connection using GSSAPI auth fails with Error: An invalid
    name was supplied (Hostname cannot be canonicalized)
    - check each dc server.
  - Related: rhbz#704228


author: Ian Kent <ikent@redhat.com> - 5.0.5-34
changelog:
  - bz718927 - Lock ordering problem on re-load of direct maps
    - fix null cache deadlock.
  - Resolves: rhbz#718927


author: Ian Kent <ikent@redhat.com> - 5.0.5-35
changelog:
  - bz725931 - Fix GPL v3 dependency in autofs.
    - replace GPLv3 with GPLv2 code for SRV record handling.
  - Resolves: rhbz#725931


author: Ian Kent <ikent@redhat.com> - 5.0.5-36
changelog:
  - bz704928 - autofs should support paged results from ldap server on
    ppc64 and s390x
    - fix paged query more results check.
  - Resolves: rhbz#704928


author: Ian Kent <ikent@redhat.com> - 5.0.5-37
changelog:
  - bz704416 - RFE: automounter to dump maps
    - fix dumpmaps not reading maps.
  - Related: rhbz#704416


author: Ian Kent <ikent@redhat.com> - 5.0.5-38
changelog:
  - bz700136 - autofs/automount 5.0.5 error in mounting expanded entry
    - improve mount location error reporting 
  - Resolves: rhbz#700136


author: Ian Kent <ikent@redhat.com> - 5.0.5-39
changelog:
  - bz732667 - Defects added by downstream patches
    - code analysis defect fixes, installment 1.
  - Resolves: rhbz#732667


author: Adam Tkac <atkac redhat com> 32:9.7.3-6.P3
changelog:
  - load/unload dyndb plugins on appropriate places to avoid crashes (#725577)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)
  - nsupdate returned zero when target zone didn't exist (#700097)
  - readd configtest target to initscript
  - print "the working directory is not writable" as debug message
  - fix some Coverity warnings


author: Andreas Schwab <schwab@redhat.com> - 2.20.51.0.2-5.21
changelog:
  - Copy over OSABI header (#698005)
  - Don't set OSABI_LINUX in dynamic ifunc-using executable (#689829)
  - Handle non-ASCII in readelf output (#664640)
  - Remove unneeded clearing (#674925)
  - Handle old ABI calls to new ABI code (#701586)


author: Nalin Dahyabhai <nalin@redhat.com> 0.44-1
changelog:
  - check specifically for cases where a specified token that we need to
    use just isn't present for whatever reason (#697058)


author: Nalin Dahyabhai <nalin@redhat.com> 0.46-1
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766, really this time)


author: Nalin Dahyabhai <nalin@redhat.com> 0.47-1
changelog:
  - getcert: distinguish between {stat() succeeds but isn't a directory} and
    {stat() failed} when printing an error message (#739903)
  - getcert resubmit/start-tracking: when we're looking for an existing request
    by ID, and we don't find one, note that specifically (#741262)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-1
changelog:
  - when using an NSS database, skip loading the module database (#743042)
  - when using an NSS database, skip loading root certs
  - generate SPKAC values when generating CSRs, though we don't do anything
    with SPKAC values yet
  - internally maintain and use challenge passwords, if we have them
  - behave better when certificates have shorter lifetimes
  - add/recognize/handle notification type "none"
  - getcert: error out when "list -c" finds no matching CA (#743488)
  - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-1
changelog:
  - really fix these this time:
   - getcert: error out when "list -c" finds no matching CA (#743488)
   - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-2
changelog:
  - incorporate patch from Rob Crittenden to start supplying Referer:
    headers when we submit XML-RPC requests (#750617)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-3
changelog:
  - tweak the patch for #750617 to handle the case where xmlrpc-c doesn't
    offer dont_advertise as an option (Rob Crittenden)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-3
changelog:
  - mount.cifs: reacquire CAP_DAC_READ_SEARCH before calling mount (bz 676439)
  - manpage: document missing mount.cifs options (bz 719363)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-19
changelog:
  - cman: fix multicast address in cman.5 man page
    Resolves: rhbz#735906
  - cman: default to 2 different mcast addresses in RRP mode and set
    rrp_problem_count_threshold
    cman now requires corosync > 1.4.1-3 for RRP operations
    Resolves: rhbz#735912
  - cman: improve cman/qdisk interactions
    * cman: do better logging/error reports/checking of the quorum API usage
    * qdiskd: allow qdiskd to update device name in cman
    * qdiskd: perform better error checking at startup
    Resolves: rhbz#735917


author: Ryan McCabe <rmccabe@redhat.com> - 0.16.2-14
changelog:
  - Fix bz733798 (modclusterd service start doesn't obey failover domain ordering)
  - Fix bz736818 (fix potential deadlocks when calling the execute() function)


author: Doug Ledford <dledford@redhat.com> - 1:1.2.19-1
changelog:
  - Update to latest upstream release (1.2.15 -> 1.2.19)
  - Remove 3 patches rolled into upstream
  - Update exclusive arch to accommodate i686 arch
  - Related: bz725016, bz724896


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-14
changelog:
  - tweak documentation of tail --sleep-interval (#725618)
  - prevent build failure on system with mock>=1.1.9 (#691292)
  - su: fix shell suspend in tcsh (#703712)
  - ls: use acl_extended_file_nofollow() to prevent unnecessary
    autofs mounts(#720325)
  - fix cp -Z functionality if the destination exists(#715557)


author: Jan Friesse <jfriesse@redhat.com> 1.4.0-1
changelog:
  - Resolves: rhbz#709758
  - Resolves: rhbz#722522
  - Resolves: rhbz#692620
  - Resolves: rhbz#529136
  - Resolves: rhbz#696883
  - Resolves: rhbz#707876
  - Resolves: rhbz#712115
  - Resolves: rhbz#722469
  - Resolves: rhbz#696887
  - Resolves: rhbz#707860
  - Resolves: rhbz#712126
  - Resolves: rhbz#712188
  - Resolves: rhbz#599327
  - Resolves: rhbz#667652
  - Resolves: rhbz#677583
  - Resolves: rhbz#688260
  - Resolves: rhbz#707862
  - Resolves: rhbz#707867
  - Resolves: rhbz#707873
  - Resolves: rhbz#707875
  - Resolves: rhbz#682813
  - Rebase to Corosync 1.4.0


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-2
changelog:
  - Resolves: rhbz#722469
  - Resolves: rhbz#732698
  - rrp: Handle endless loop if all ifaces are faulty (rhbz#722469)
  - merge upstream commit dc862e15cc084926eccc5e1ff3241611c0cb54f0 (rhbz#722469)
  - rrp: Higher threshold in passive mode for mcast (rhbz#722469)
  - merge upstream commit 4e32c3112a2f13a302709d72b0ae989287a48563 (rhbz#722469)
  - Ignore memb_join messages during flush operations (rhbz#732698)
  - merge upstream commit be608c050247e5f9c8266b8a0f9803cc0a3dc881 (rhbz#732698)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-3
changelog:
  - Resolves: rhbz#722469
  - totemconfig: change minimum RRP threshold
  - merge upstream commit b1aba94732edc2ff084b7dd559a08b687f464ed0 (rhbz#722469)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4
changelog:
  - Resolves: rhbz#722522

  - Deliver all messages from my_high_seq_recieved to the last gap (rhbz#722522)
  - merge upstream commit e530376a60dc862f135bd0d4c52aebb43d948423 (rhbz#722522)


author: Dave Anderson <anderson@redhat.com> - 5.1.7-1.el6
changelog:
  - Fix for "kmem -[sS]" if NUMA node 0 has no memory associated with it.
    Resolves: rhbz#716931
  - Fix for the x86_64 "bt" command stack transition error when a non-crashing
    CPU receives a NMI immediately after receiving an interrupt from another 
    source. 
    Resolves: rhbz#712214
  - Fix for the handling of x86_64 compressed kdump dumpfiles where
    the crashing system contains more than 454 cpus.
    Resolves: rhbz#705142
  - Added a new "--osrelease <dumpfile>" command line option that
    displays the OSRELEASE vmcoreinfo string from a kdump dumpfile.
    Resolves: rhbz#703467
  - Update to the crash(8) man page and the associated "crash -h" output.
    Resolves: rhbz#695413
  - Rebase to upstream version 5.1.7.
    Resolves: rhbz#710193


author: Sumit Bose <sbose@redhat.com> - 1.0.114.3-2
changelog:
  - Resolves: rhbz#728545 - ctdbd leaks a file descriptor
   - Resolves: rhbz#727913 - Coverity scan revealed defects


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.42
changelog:
  - Add 0089-RHBZ-694602-RSSM-config.patch
  - Add 0090-RHBZ-700169-fix-nr-active.patch
    * Make sure to always count ghost paths as active
  - Add 0091-RHBZ-699577-manpage-clarification.patch
  - Add 0092-RHBZ-689504-rdac-retry.patch
    * Make the rdac checker retry up to 5 times on errors that are likely
      transient.
  - Add 0093-RHBZ-677449-dont-remove-map-on-enomem.patch
    * Don't remove a multipath device if dm_map_present fails due to lack of
      memory
  - Add 0094-RHBZ-707560-check-return-value.patch
    * Don't try to update path groups on a path priority change if the 
      multipath device has disappeared.
  - Add 0095-RHBZ-678673-no-path-groups.patch
    * Allow multipath devices with no path groups
  - Add 0096-RHBZ-683616-ioship-support.patch
    * Modify the rdac checker to work better storage in IOSHIP mode
  - Add 0097-RHBZ-697386-fix-shutdown-crash.patch
    * Add missing test for thread cancellation to the checker thread.
  - Add 0098-RHBZ-706555-dont-update-pgs-in-manual.patch
    * When failback is set to manual, do not automatically reconfigure the
      pgs when a path changes priority
  - Add 0099-RHBZ-705854-warn-on-bad-dev-loss-tmo.patch
  - Add 0100-RHBZ-710478-deprecate-uid-gid-mode.patch
    * uid, gid and mode are now controlled by udev.
  - Add 0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
  - Remove 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
    * multipath and kpartx now have a "-u" option that forces the udev
      dm-disk rules to run.
  - Resolves: bz #694602, #700169, #689504, #677449, #707560, #678673
  - Resolves: bz #683616, #697386, #706555, #705854, #710478, #631009


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.43
changelog:
  - Add 0102-RHBZ-714821-dont-remove-map-twice.patch
    * multipathd was removing a map twice in one code path, causing
      double free errors
  - Add 0103-RHBZ-725541-09-no-partitions.patch
    * if a device has the "no_partitions" feature, kpartx ignores it
  - Add 0104-RHBZ-725541-10-force-devmap.patch
    * override "no_partitions"
  - Add 0105-RHBZ-725541-08-reset-running.patch
    * abort timed-out IO in directio checker
  - Add 0106-RHBZ-725541-07-tur-checker-reservation-conflict.patch
    * don't count a path as down if it has a reservation conflict. The
      kernel should be failing these errors up past multipath now.
  - Add 0107-RHBZ-725541-01-async-tur-checker.patch
    * Make tur checker async
  - Add 0108-RHBZ-725541-06-offline-check.patch
    * Don't get the priority of offline devies.
  - Add 0109-RHBZ-725541-05-only-count-up-and-ghost-paths.patch
    * fix path counting
  - Add 0110-RHBZ-725541-04-serialize-startup.patch
    * add the "show daemon" multipathd command, so users can check
      that the daemon has started up completely.
  - Add 0111-RHBZ-725541-03-handle-LBA_DEPENDENT-state.patch
    * handle LBA_DEPENDENT alua state.
  - Add 0112-RHBZ-725541-02-infinite-dev-loss-tmo.patch
    * allow dev_loss_tmo to be set to "inifinty", which sets it to
      the maximum allowed value.
  - Add 0113-RHBZ-719571-validate-guid-partitions.patch
    * don't build partition devices for invalid gpt's.
  - Add 0114-RHBZ-723168-adjust-messages.patch
  - Add 0115-RHBZ-713754-lower-minio.patch
    * add rr_min_io_rq parmeter, that sets the min_io to 1 for
      request based multipath
  Resolves: bz #699577, #713754, #714821, #719571, #723168, #725541


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.44
changelog:
  - Add 0116-RH-manpage-update.patch
    * update the manpages with new features
  - Add 0117-RHBZ-697386-logger-shutdown-crash.patch
    * The main multipathd thread was racing with the logger, now it
      waits for the logger thread to shutdown first.
  - Resolves: bz #697386


