# changelog

author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.20.1.el6]
changelog:
  - [scsi] hpsa: Use LUN reset instead of target reset (Tomas Henzl) [884422 875091]
  - [char] tty: Fix possible race in n_tty_read() (Stanislaw Gruszka) [891580 765665]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.21.1.el6]
changelog:
  - [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [888818 829149]
  - [net] bonding: Bonding driver does not consider the gso_max_size setting of slave devices (Ivan Vecera) [886618 883643]
  - [netdrv] tg3: Do not set TSS for 5719 and 5720 (John Feeney) [888215 823371]
  - [kernel] kmod: make __request_module() killable (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] kmod: introduce call_modprobe() helper (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] usermodehelper: implement UMH_KILLABLE (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] usermodehelper: introduce umh_complete(sub_info) (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] call_usermodehelper: simplify/fix UMH_NO_WAIT case (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] wait_for_helper: SIGCHLD from user-space can lead to use-after-free (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [net] sunrpc: Ensure that rpc_release_resources_task() can be called twice (Jeff Layton) [880928 878204]
  - [scsi] qla2xxx: Don't toggle RISC interrupt bits after IRQ lines are attached. (Chad Dupuis) [886760 826565]
  - [kernel] rcu: Remove function versions of __kfree_rcu and offset (Doug Ledford) [880085 873949]
  - [kernel] rcu: define __rcu address space modifier for sparse (Doug Ledford) [880085 873949]
  - [kernel] rcu: Add rcu_access_pointer and rcu_dereference_protected (Doug Ledford) [880085 873949]
  - [kernel] rcu: Add lockdep checking to rhel (Doug Ledford) [880085 873949]
  - [kernel] rcu: Make __kfree_rcu() less dependent on compiler choices (Doug Ledford) [880085 873949]
  - [kernel] rcu: introduce kfree_rcu() (Doug Ledford) [880085 873949]
  - [net] rcu: add __rcu API for later sparse checking (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix AB-BA deadlock when deleting neighbours (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix memory leak in the neigh table deletion flow (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix RCU pointer dereference of wrong object (Doug Ledford) [880085 873949]
  - [misc] Make rcu_dereference_bh work (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Use a private hash table for path lookup in xmit path (Doug Ledford) [880085 873949]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.22.1.el6]
changelog:
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862903 862904] {CVE-2012-4461}
  - [fs] fuse: optimize __fuse_direct_io() (Brian Foster) [865305 858850]
  - [fs] fuse: optimize fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] fuse: use get_user_pages_fast() (Brian Foster) [865305 858850]
  - [fs] fuse: pass iov[] to fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] mm: minor cleanup of iov_iter_single_seg_count() (Brian Foster) [865305 858850]
  - [fs] fuse: use req->page_descs[] for argpages cases (Brian Foster) [865305 858850]
  - [fs] fuse: add per-page descriptor <offset, length> to fuse_req (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_do_ioctl() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_perform_write() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_readpages() (Brian Foster) [865305 858850]
  - [fs] fuse: categorize fuse_get_req() (Brian Foster) [865305 858850]
  - [fs] fuse: general infrastructure for pages[] of variable size (Brian Foster) [865305 858850]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [scsi] have scsi_internal_device_unblock take new state (Frantisek Hrbata) [878774 854140]
  - [scsi] add new SDEV_TRANSPORT_OFFLINE state (Chris Leech) [878774 854140]
  - [kernel] cpu: fix cpu_chain section mismatch (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: Don't modify cpusets during suspend/resume (Frederic Weisbecker) [876090 852148]
  - [kernel] sched, cpuset: Drop __cpuexit from cpu hotplug callbacks (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: adjust when cpu_active and cpuset configurations are updated during cpu on/offlining (Frantisek Hrbata) [876090 852148]
  - [kernel] cpu: return better errno on cpu hotplug failure (Frederic Weisbecker) [876090 852148]
  - [kernel] cpu: introduce cpu_notify(), __cpu_notify(), cpu_notify_nofail() (Frederic Weisbecker) [876090 852148]
  - [fs] nfs: Properly handle the case where the delegation is revoked (Steve Dickson) [846840 842435]
  - [fs] nfs: Move cl_delegations to the nfs_server struct (Steve Dickson) [846840 842435]
  - [fs] nfs: Introduce nfs_detach_delegations() (Steve Dickson) [846840 842435]
  - [fs] nfs: Fix a number of RCU issues in the NFSv4 delegation code (Steve Dickson) [846840 842435]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.5.2.el6]
changelog:
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-350.el6]
changelog:
  - [powerpc] perf: power_pmu_start restores incorrect values, breaking frequency events (Jiri Olsa) [880525]
  - [netdrv] mlx4: Allow choosing flow steering mode (Doug Ledford) [885191]
  - [netdrv] mlx4: Adjustments to Flow Steering activation logic for SRIOV (Doug Ledford) [885191]
  - [netdrv] mlx4: Fix wrong error flow in the flow steering wrapper (Doug Ledford) [885191]
  - [netdrv] mlx4: Add QPN enforcement for flow steering rules set by VFs (Doug Ledford) [885191]
  - [infiniband] mlx4: 64-byte CQE/EQE support (Doug Ledford) [885191]
  - [netdrv] mlx4: Fix potential deadlock in mlx4_eq_int() (Doug Ledford) [885191]
  - [infiniband] mlx4: Fix spinlock order to avoid lockdep warnings (Doug Ledford) [885191]
  - [netdrv] mlx4: Removing reserve vectors (Doug Ledford) [885191]
  - [netdrv] mlx4: Fix double-release-range in tx-rings (Doug Ledford) [885191]
  - [infiniband] mlx4: Fix QP1 P_Key processing in the Primary Physical Function (PPF) (Doug Ledford) [885191]
  - [infiniband] mlx4: Synchronize cleanup of MCGs in MCG paravirtualization (Doug Ledford) [885191]
  - [net] bonding: Bonding driver does not consider the gso_max_size setting of slave devices (Ivan Vecera) [883643]
  - [net] tcp: Fix >4GB writes on 64-bit (Daniel Borkmann) [885238]
  - [net] bridge: skip forwarding delay if not using STP (Thomas Graf) [881682]
  - [fs] nfs: Fix open(O_TRUNC) and ftruncate() error handling (Steve Dickson) [884263]
  - [fs] nfsd: add proc file listing kernel's gss_krb5 enctypes (Steve Dickson) [877113]
  - [fs] nfs: add nfs_sb_deactive_async to avoid deadlock (Steve Dickson) [871968]
  - [fs] nfs: fix page dirtying in NFS DIO read codepath (Jeff Layton) [876514]
  - [fs] nfs: don't zero out the rest of the page if we hit the EOF on a DIO READ (Jeff Layton) [876514]
  - [fs] handle null sb in get_super_thawed (Eric Sandeen) [874521]
  - [scsi] Fix race when removing SCSI devices (Tomas Henzl) [820880]
  - [netdrv] be2net: enable GRO by default (Ivan Vecera) [849930]
  - [netdrv] igb: fix compile warning if CONFIG_IGB_PTP is not set (Stefan Assmann) [886519]
  - [netdrv] bnx2x: Prevent link flaps when booting from SAN (Michal Schmidt) [881068]
  - [netdrv] bnx2x: Activate LFA (Michal Schmidt) [881068]
  - [acpi] apei: Fixup common access width firmware bug (Prarit Bhargava) [880465]
  - [acpi] apei: Avoid too much error reporting in runtime (Prarit Bhargava) [880465]
  - [acpi] apei: Fix incorrect APEI register bit width check and usage (Prarit Bhargava) [880465]
  - [virt] vhost: fix length for cross region descriptor (Michael S. Tsirkin) [862265]
  - [fs] nfs: Use FS-Cache invalidation (David Howells) [699931]
  - [fs] cachefiles: Implement invalidation (David Howells) [699931]
  - [fs] vfs: Make more complete truncate operation available to CacheFiles (David Howells) [699931]
  - [fs] fscache: Provide proper invalidation (David Howells) [699931]
  - [fs] fscache: Fix operation state management and accounting (David Howells) [699931]
  - [fs] fscache: Make cookie relinquishment wait for outstanding reads (David Howells) [699931]
  - [fs] cachefiles: Make some debugging statements conditional (David Howells) [699931]
  - [fs] fscache: Check cookie is still correct in __fscache_read_or_alloc_pages() (David Howells) [699931]
  - [fs] fscache: Check that there are no read ops when cookie relinquished (David Howells) [699931]
  - [fs] cachefiles: Downgrade the requirements passed to the allocator (David Howells) [699931]
  - [fs] fscache: Validate page mapping pointer value (David Howells) [699931]
  - [fs] fscache: Fix the marking of cached pages (David Howells) [699931]
  - [fs] fscache: nfs_migrate_page() does not wait for FS-Cache to finish with a page (David Howells) [699931]
  - [fs] fscache: Fix __fscache_uncache_all_inode_pages()'s outer loop (David Howells) [699931]
  - [fs] fscache: Add a helper to bulk uncache pages on an inode (David Howells) [699931]
  - [scsi] qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low (Chad Dupuis) [829739]
  - [scsi] qla2xxx: Determine the number of outstanding commands based on available resources (Chad Dupuis) [829739]
  - [s390] zfcp: return early from slave_destroy if slave_alloc returned early (Hendrik Brueckner) [878372]
  - [scsi] fcoe: fix fcoe enable on link toggle while it is still disabled (Neil Horman) [875271]
  - [scsi] Log thin provisioning threshold event (Ewan Milne) [847998]
  - [netdrv] qlge: NETIF_F_GRO needs to be part of hw_features instead of features (John Green) [849749]
  - [s390] qeth: set new mac even if old mac is gone (Hendrik Brueckner) [883458]
  - [s390] qeth: Fix IPA_CMD_QIPASSIST return code handling (Hendrik Brueckner) [882792]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-351.el6]
changelog:
  - [kernel] ptrace-utrace: fix PTRACE_GETEVENTMSG(pid) in sub-namespace (Oleg Nesterov) [782330]
  - [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [829149]
  - [mm] memcontrol: propagate LRU accounting state when splitting THP (Johannes Weiner) [881714]
  - [net] sctp: proc: protect bind_addr->address_list accesses with rcu_read_lock() (Thomas Graf) [706038]
  - [net] sctp: Add RCU protection to assoc->transport_addr_list (Thomas Graf) [706038]
  - [s390] zfcp: Adapt to new FC_PORTSPEED semantics (Hendrik Brueckner) [855128]
  - [virt] virtio_net: allow to change mac when iface is running (Jiri Pirko) [882868]
  - [virt] kvm: Minimal hyper-v support (Vadim Rozenfeld) [871350]
  - [fs] gfs2: Journal DLM lock has wrong label (Steven Whitehouse) [884822]
  - [mm] huge_memory: fix typo in transparent_hugepage sysfs symlink (Jeremy Eder) [887308]
  - [mm] ksm: numa awareness sysfs knob (Petr Holasek) [743643]
  - [fs] btrfs: handle IS_ERR(inode) in btrfs_lookup() (Zach Brown) [870944]
  - [kernel] sched: Add irq_{enter,exit}() to scheduler_ipi() (Stanislaw Gruszka) [836964]
  - [kernel] panic: fix a possible deadlock in panic() (Tatsuya Kitamura) [871939]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-352.el6]
changelog:
  - [md] raid10: Do not call md_raid10_unplug_device while holding spinlock (Jonathan E Brassow) [886658]
  - [md] dm-thin: commit before gathering status (Mike Snitzer) [882426]
  - [md] dm-thin: cleanup dead code (Mike Snitzer) [882426]
  - [md] dm-thin: rename cell_defer_except to cell_defer_no_holder (Mike Snitzer) [882426]
  - [md] dm-thin: emit "ignore_discard" in status if discards are disabled (Mike Snitzer) [882426]
  - [md] dm-thin: wake the worker when a discard is prepared (Mike Snitzer) [882426]
  - [md] dm-thin: fix race between simultaneous io and discards to same block (Mike Snitzer) [882426]
  - [md] dm-thin: replace calls to cell_release_singleton with cell_defer_except (Mike Snitzer) [882426]
  - [mm] Revert: ksm: numa awareness sysfs knob (Jarod Wilson) [743643]
  - [fs] gfs2: Reset rd_last_alloc when it reaches the end of the rgrp (Robert S Peterson) [882381]
  - [fs] gfs2: Stop looking for free blocks at end of rgrp (Robert S Peterson) [882381]
  - [drm] nouveau: cache ramcfg value for RAM_RESTRICT_ZM_GROUP (Ben Skeggs) [878384]
  - [drm] nouveau: disable use of tesla/fermi copy engines for buffer moves (Ben Skeggs) [878384]
  - [fs] xfs: fix direct IO nested transaction deadlock (Dave Chinner) [876426]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-353.el6]
changelog:
  - [mm] pageattr: prevent PSE and GLOABL leftovers to confuse pmd/pte_present and pmd_huge (Andrea Arcangeli) [878877]
  - [fs] gfs2: Fix FITRIM argument handling (Abhijith Das) [866932]
  - [fs] gfs2: Require user to provide argument for FITRIM (Abhijith Das) [866932]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880146] {CVE-2012-4530}
  - [fs] btrfs: close exclusive opens with close_bdev_exclusive() (Zach Brown) [874505]
  - [kernel] sched_rt: Fix hang where umount is stuck in synchronize_sched_expedited (Larry Woodman) [814768]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-354.el6]
changelog:
  - [char] ipmi: add new kernel options to prevent automatic ipmi init (Tony Camuso) [877177]
  - [usb] xhci: New system added for Compliance Mode Patch on SN65LVPE502CP (Don Zickus) [856709]
  - [x86] quirks: Mark Haswell HDMI Audio as unsupported (Prarit Bhargava) [883428]
  - [scsi] bfa: fix crash in bfa_cb_ioim_done when performing failover/failback tests (Vijay Guvva) [878618]
  - [fs] autofs4: Fix sparse warning: context imbalance in autofs4_d_automount() different lock contexts for basic block (Ian Kent) [876795]
  - [fs] jbd, jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [886318]
  - [scsi] qla4xxx: v5.03.00.00.06.04-k2 (Rob Evers) [890727]
  - [scsi] qla4xxx: Correct the validation to check in get_sys_info mailbox (Rob Evers) [890727]
  - [scsi] qla4xxx: Pass correct function param to qla4_8xxx_rd_direct (Rob Evers) [890727]
  - [scsi] qla4xxx: v5.03.00.00.06.04-k1 (Chad Dupuis) [878048]
  - [scsi] qla4xxx: update copyrights in LICENSE.qla4xxx (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Disable generating pause frames for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix double clearing of risc_intr for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: IDC implementation for Loopback (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix panic while rmmod (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fail probe_adapter if IRQ allocation fails (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Prevent MSI/MSI-X falling back to INTx for ISP82XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Update idc reg in case of PCI AER (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix double IDC locking in qla4_8xxx_error_recovery (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Clear interrupt while unloading driver for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Print correct IDC version (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Added new mbox cmd to pass driver version to FW (Chad Dupuis) [878048]
  - [scsi] qla4xxx: fix various printk and comment typos (Chad Dupuis) [878048]
  - [fs] autofs4: use simple_empty() for empty directory check (Ian Kent) [876795]
  - [fs] autofs4: dont clear DCACHE_NEED_AUTOMOUNT on rootless mount (Ian Kent) [876795]
  - [fs] gfs2: Fix race in gfs2_rs_alloc (Abhijith Das) [878476]
  - [fs] xfs: fix broken error handling in xfs_vm_writepage (Dave Chinner) [874539]
  - [drm] radeon: force rn50 chip to always report connected on analog output (Jerome Glisse) [892723]
  - [sound] alsa: add support for Teradici 2200 host card audio (Jaroslav Kysela) [890581]
  - [md] dm-raid: Fix RAID10's check for sufficient redundancy (Jonathan E Brassow) [889358]
  - [scsi] hpsa: update version number to 3.2.0 (Tomas Henzl) [891935]
  - [netdrv] cxgb4: Initialize data structures before using (Steve Best) [885756]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-355.el6]
changelog:
  - [netdrv] qlge: remove NETIF_F_TSO6 flag (Amerigo Wang) [891839]
  - [fs] ext3: Remove BKL from ext3_put_super() and ext3_remount() (Carlos Maiolino) [885945]
  - [lib] switch the protection of percpu_counter list to spinlock (Carlos Maiolino) [885945]
  - [virt] hv: Add Hyper-V balloon driver (Jason Wang) [885572]
  - [mm] export a function to get vm committed memory (Jason Wang) [885572]
  - [drm] nouveau: extend prevent display switching issues by disabling pageflip (Ben Skeggs) [853226]
  - [netdrv] mlx4: Fix advertisement of wrong PF context behaviour (Alex Williamson) [894060]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-356.el6]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Prarit Bhargava) [890160]
  - [char] ipmi: handle run_to_completion properly in deliver_recv_msg() (Prarit Bhargava) [890160]
  - [usb] xhci: Reset reserved command ring TRBs on cleanup (Don Zickus) [843520]
  - [usb] xhci: handle command after aborting the command ring (Don Zickus) [874541]
  - [usb] xhci: cancel command after command timeout (Don Zickus) [874541]
  - [usb] xhci: add aborting command ring function (Don Zickus) [874541]
  - [usb] xhci: add cmd_ring_state (Don Zickus) [874541]
  - [usb] xhci: Fix Null pointer dereferencing with non-DMI systems (Don Zickus) [874542]
  - [usb] xhci: Intel Panther Point BEI quirk (Don Zickus) [874542]
  - [usb] xhci: Increase XHCI suspend timeout to 16ms (Don Zickus) [874542]
  - [powerpc] Revert: pseries/iommu: remove default window before attempting DDW manipulation (Steve Best) [890454]
  - [serial] 8250_pnp: add Intermec CV60 touchscreen device (Mauro Carvalho Chehab) [894445]
  - [char] ipmi: apply missing hunk from upstream commit 2407d77a (Tony Camuso) [882787]
  - [acpi] Fix broken kernel build if CONFIG_ACPI_DEBUG is enabled (Lenny Szubowicz) [891948]
  - [scsi] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically (Chad Dupuis) [854736]
  - [mm] vmalloc: remove guard page from between vmap blocks (Johannes Weiner) [873737]
  - [mm] vmalloc: vmap area cache (Johannes Weiner) [873737]
  - [fs] vfs: prefer EEXIST to EROFS when creating on an RO filesystem (Eric Sandeen) [878091]
  - [scsi] qla2xxx: change queue depth ramp print to debug print (Rob Evers) [893113]
  - [fs] nfs: Fix umount when filelayout DS is also the MDS (Steve Dickson) [895194]
  - [fs] nfs/pnfs: add set-clear layoutdriver interface (Steve Dickson) [895194]
  - [fs] nfs: Don't call nfs4_deviceid_purge_client() unless we're NFSv4.1 (Steve Dickson) [895194]
  - [fs] nfs: Wait for session recovery to finish before returning (Steve Dickson) [895176]
  - [mm] compaction: validate pfn range passed to isolate_freepages_block (Johannes Weiner) [889456 890498]
  - [drm] nouveau: ensure legacy vga is re-enabled during POST (Ben Skeggs) [625441]
  - [netdrv] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [894344]
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862904] {CVE-2012-4461}


author: Jarod Wilson <jarod@redhat.com> [2.6.32-357.el6]
changelog:
  - [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
  - [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
  - [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
  - [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]


author: Dave Young <dyoung@redhat.com> - 2.0.0-249
changelog:
  - improve warning message for remain size checking, resolve bug 857282
  - propagate_ssh_key remove selinux flips for ssh key generation, resolve bug 816467
  - random feeding fix, resolve bug 825640
  - do not print error when there's no vendor-model-type, resolve bug 801344, bug 628610


author: Dave Young <dyoung@redhat.com> - 2.0.0-250
changelog:
  - mkdumprd: Support line mode terminals for s390x, resolve bug 818645
  - Fix kdump documentation about vmcore-dmesg handling, resolve bug 850623


author: Dave Young <dyoung@redhat.com> - 2.0.0-252
changelog:
  - remove hardcode for including ata_generic driver, resolve bug 820474
  - mkdumprd: Fix /dev/mapper/* links not being created by default, resolve bug 874832
  - vmcore-dmesg: Determine correct machine pointer size, resolve bug 871292


author: Dave Young <dyoung@redhat.com> - 2.0.0-254
changelog:
  - blacklist IB module mlx4_core.ko, resolve bug 876891
  - create bonding device dynamiclly, resolve bug 859824


author: Dave Young <dyoung@redhat.com> - 2.0.0-255
changelog:
  - make the SCSI dump target work with Linux on System z, resolve bug 870957
  - extract Linux on System z device init into separate functions, resolve bug 870957
  - remove hwclock calls for Linux on System z, resolve bug 821376


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport changes to how and when we read and make use of SELinux labeling
    configuration (#852455)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.3
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (#852455)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-7.1
changelog:
  - resolves: #913282
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Don't print link state on iWARP links as it's always invalid
  - Don't try to do ud transfers in excess of port MTU
  - Resolves: bz822781


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3
changelog:
  - use the proper %patch stanza to make rpmdiff happy
  - related: rhbz#873422 - LDB 1.1.13 exports improper ABI


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: David Vossel <dvossel@redhat.com> - 0.14.2-2
changelog:
  - Fixes issue with qb_ipcc_recv() that resulted in nearly 100%
    cpu usage during certain situations. (#869446)


author: David Vossel <dvossel@redhat.com> - 0.14.2-3
changelog:
  - Additional upstream work to address 100% cpu usage bug in
    realtime environment.
    cpu usage during certain situations. (#869446)


author: Doug Ledford <dledford@redhat.com> - 1.0.17-0.git4b5c1aa
changelog:
  - Pre-release version of 1.0.17
  - Resolves a CVE vulnerability between librdmacm and ibacm
  - Fixes various minor bugs in sample programs
  - Resolves: bz866221, bz816074


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-6
changelog:
  - opt kernel out of showing smolt information in abrt bug reports. rhbz#795548
  - ABRT mailx plugin on by default causes crashes being always labelled as reported rhbz#803618
  - pkg-config --cflags libreport includs -fPIC rhbz#803736
  - Coverity revealed memory leaks and possibly other issues rhbz#809416
  - GLib warnings by report-gtk when crash dir does not exist rhbz#813283
  - `report' tool requires current working directory to be a crash dir rhbz#817051
  - Searching for duplicate anaconda bugs while reporting exception against partner-bugzilla during install fails rhbz#820985
  - Undefined non-weak symbols rhbz#826745
  - ABRT has wrong URL in dialog
  Resolves: #809416,#813283,#817051,#826745,#820985,#795548,#803618,#803736


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-7
changelog:
  - don't warn about daemon connection when deleting a problem rhbz#799909
  - ignore non problem dirs when cleaning old problems rhbz#847291
  - Resolves: #799909, #847291


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-8
changelog:
  - use the default template for bz reports rhbz#747410
  - fix adding users to CC in bugzilla rhbz#841338
  - Resolves: #747410, #841338


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-10
changelog:
  - updated translation rhbz#864025
  - fixed brewtap warnings rhbz#812283
  - silence few rpmdiff warnings rhbz#857425
  - Resolves: #864025, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-12
changelog:
  - fixed relro flags
  - removed confusing warning message
  - added versioned requirements to silence rpmdiff
  - Resolved: #847291, #812283, #857425


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-1
changelog:
  - New upstream version, resolves rhbz #766335
  - Build python bindings to satisfy Samba4 BuildRequires


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-2
changelog:
  - Obsolete older pytalloc{,-devel} releases to clear the upgrade path
    towards non-multilib pytalloc
  - Resolves: rhbz#862062


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.10-1
changelog:
  - Resolves: rhbz#766334 - Rebase libtdb to match the version required
                            by Samba4
  - Enable the Python bindings to satisfy samba4 BuildRequirements
  - Obsoletes tdb-1.2.9-limit-tdb_expand.patch


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-1
changelog:
  - Rebase to 0.9.16 to provide the version Samba4 needs
  - Resolves: rhbz#766336
  - Drop ABI compatibility patch (no longer needed)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-2
changelog:
  - Add BuildRequires on libxslt and docbook-style-xsl to enable
    building manual pages

  - Related: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.17-1
changelog:
  - Rebase to 0.9.17 to provide the version Samba4 needs
  - Drop EXCLUDE_PATTERNS workaround in specfile
  - Resolves: rhbz#766336


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885310


author: Hans de Goede <hdegoede@redhat.com> - 1.0.9-0.6.rc1
changelog:
  - Don't split bulk transfers unnecessary
  - Resolves: rhbz#830751
  - Don't let disconnect_kernel_driver detach the usbfs driver
  - Resolves: rhbz#820205


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.1-4.el6
changelog:
  - Fix an incomplete substitution in Makefile (rhbz#805892)
  - Only deregister cim classes on uninstall (rhbz#864096)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-9
changelog:
  - util: Improve error reporting from absolutePathFromBaseFile helper (rhbz#874860)
  - storage: Fix broken backing chain (rhbz#874860)
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#874050)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#874050)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#874050)
  - virsh: save: Report an error if XML file can't be read (rhbz#876868)
  - virsh: Fix uninitialized variable in cmdSnapshotEdit (rhbz#877303)
  - qemu: Allow larger discrepency between memory & currentMemory in domain xml (rhbz#873134)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-10
changelog:
  - Add note about numeric domain names to manpage (rhbz#824253)
  - Use virNetServerRun instead of custom main loop (rhbz#867246)
  - qemu: Fix RBD attach regression (rhbz#878862)
  - qemu: Stop recursive detection of image chains when an image is missing (rhbz#878862)
  - Fix exiting of libvirt_lxc program on container quit (rhbz#879360)
  - snapshot: qemu: Add support for external inactive snapshots (rhbz#876816)
  - conf: Fix private symbols exported by files in conf (rhbz#876816)
  - snapshot: qemu: Fix detection of external snapshots when deleting (rhbz#876816)
  - snapshot: Require user to supply external memory file name (rhbz#876816)
  - snapshot: Add two more filter sets to API (rhbz#876817)
  - snapshot: Add virsh back-compat support for new filters (rhbz#876817)
  - snapshot: Implement new filter sets (rhbz#876817)
  - snapshot: Expose location through virsh snapshot-info (rhbz#876817)
  - sanlock: Retry after EINPROGRESS (rhbz#820173)
  - storage: Fix logical volume cloning (rhbz#879780)
  - cpu: Add Intel Haswell cpu model (fix previous downstream definition) (rhbz#879282)
  - virsh: Report error when taking a snapshot with empty --memspec argument (rhbz#879130)
  - lxc: Don't crash if no security driver is specified in libvirt_lxc (rhbz#880064)
  - lxc: Avoid segfault of libvirt_lxc helper on early cleanup paths (rhbz#880064)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-11
changelog:
  - Fix uninitialized variable in virLXCControllerSetupDevPTS (rhbz#880064)
  - storage: Fix device detach regression with cgroup ACLs (rhbz#876828)
  - storage: Fix bug of fs pool destroying (rhbz#878400)
  - qemu: Fix a crash when save file can't be opened (rhbz#880919)
  - bitmap: Fix typo to use UL type of integer constant in virBitmapIsAllSet (rhbz#876415)
  - virsh: Rewrite cmdDomDisplay (rhbz#878779)
  - network: Fix crash when portgroup has no name (rhbz#879473)
  - util: Capabilities detection for dnsmasq (rhbz#882265)
  - util: New virSocketAddrIsPrivate function (rhbz#882265)
  - network: Use dnsmasq --bind-dynamic when available (rhbz#882265)
  - storage: Fix scsi detach regression with cgroup ACLs (rhbz#876828)
  - libssh2_session: Support DSS keys as well (rhbz#878376)
  - virsh: Fix error messages in iface-bridge (rhbz#878376)
  - virsh: Check the return value of virStoragePoolGetAutostart (rhbz#878376)
  - conf: Check the return value of virXPathNodeSet (rhbz#878376)
  - conf: snapshot: Check return value of virDomainSnapshotObjListNum (rhbz#878376)
  - util: Fix virBitmap allocation in virProcessInfoGetAffinity (rhbz#878376)
  - virsh: Use correct sizeof when allocating cpumap (rhbz#878376)
  - rpc: Don't destroy xdr before creating it in virNetMessageEncodeHeader (rhbz#878376)
  - virsh: Do timing even for unusable connections (rhbz#878376)
  - conf: Fix uninitialized variable in virDomainListSnapshots (rhbz#878376)
  - Fix error handling in virSecurityManagerGetMountOptions (rhbz#878376)
  - conf: Prevent crash with no uuid in cephx auth secret (rhbz#878376)
  - conf: Fix virDomainNetGetActualDirect*() and BridgeName() (rhbz#881480)
  - virsh: Report errors if arguments of the schedinfo command are incorrect (rhbz#882915)
  - systemd: Require dbus service (rhbz#830201)
  - spec: Require dbus-daemon when using libvirtd in Fedora (rhbz#830201)
  - qemu: Don't free PCI device if adding it to activePciHostdevs fails (rhbz#877095)
  - util: Slightly refactor PCI list functions (rhbz#877095)
  - qemu: Fix memory (and FD) leak on PCI device detach (rhbz#877095)
  - util: Do not keep PCI device config file open (rhbz#877095)
  - node_memory: Improve the docs (rhbz#872656)
  - node_memory: Do not fail if there is parameter unsupported (rhbz#872656)
  - node_memory: Fix bug of node_memory_tune (rhbz#872656)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-12
changelog:
  - qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
  - remote: Avoid the thread race condition (rhbz#866524)
  - storage: Error out earlier if the volume target path already exists (rhbz#832302)
  - dnsmasq: Fix parsing of the version number (rhbz#885727)
  - qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
  - examples: Fix balloon event callback (rhbz#884650)
  - util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
  - util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
  - util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
  - util: Fix warning message in previous patch (rhbz#883832)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-13
changelog:
  - network: Prevent dnsmasq from listening on localhost (rhbz#886821)
  - sanlock: Re-add lockspace unconditionally (rhbz#820173)
  - Fix "virsh create" example (rhbz#887187)
  - docs: Fix some typos in examples (rhbz#887187)
  - network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-14
changelog:
  - util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
  - util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
  - util: Fix botched check for new netlink request filters (rhbz#889319)
  - blockjob: Fix memleak that prevented block pivot (rhbz#888426)
  - sanlock: Chown lease files as well (rhbz#820173)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-15
changelog:
  - snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
  - snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
  - snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
  - snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
  - util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
  - qemu: Add a hash table for the shared disks (rhbz#878578)
  - docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
  - conf: Parse and format the new XML (rhbz#878578)
  - qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
  - qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
  - qemu: Relax hard RSS limit (rhbz#891653)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-16
changelog:
  - qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
  - Add RESUME event listener to qemu monitor. (rhbz#894085)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-17
changelog:
  - storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
  - qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
  - qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18
changelog:
  - rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
  - spec: Disable libssh2 support (rhbz#513363)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.5
changelog:
  - security: Fix libvirtd crash possibility (CVE-2012-4423)
  - Fix augeas test of shared sanlock leases (rhbz#858988)
  - qemu augeas: Add spice_tls/spice_tls_x509_cert_dir (rhbz#858988)
  - Fix mistakes in augeas lens (rhbz#858988)
  - qemu: Fix failure path in disk hotplug (rhbz#859376)
  - blockjob: Relabel entire existing chain (rhbz#860720)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.6
changelog:
  - rpc: Switch to dynamically allocated message buffer (rhbz#869650)
  - rpc: Size up RPC limits (rhbz#869650)
  - client: Free message when freeing client (rhbz#869650)
  - nodeinfo_test: Enhance test data before changing nodeinfo gathering (rhbz#869723)
  - nodeinfo: Fix gathering of nodeinfo data structure (rhbz#869723)
  - test: Add new test case for nodeinfotest (rhbz#869723)
  - test: Add test case for nodeinfotest if host machine doesn't have NUMA (rhbz#869723)
  - nodeinfo: Deal with offline cpus in a node (rhbz#869723)
  - qemu: Always format CPU topology (rhbz#868972)
  - iohelper: Fdatasync() at the end (rhbz#873292)
  - iohelper: Don't report errors on special FDs (rhbz#873292)
  - Introduce new VIR_DOMAIN_EVENT_SUSPENDED_API_ERROR event (rhbz#874235)
  - qemu: Emit event if 'cont' fails (rhbz#874235)
  - qemu: Allow migration to be cancelled at prepare phase (rhbz#875770)
  - AbortJob: Fix documentation (rhbz#875770)
  - qemu: Avoid deadlock on HandleAgentEOF (rhbz#875788)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.10-21.el6_3.7
changelog:
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#877024)
  - tests: Reduce length of nodeinfodata test names (rhbz#877024)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#877024)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#877024)
  - Wire up handling for QMP's BALLOON_EVENT (rhbz#884713)


author: Matthias Clasen <mclasen@redhat.com> - 1.1.10-4
changelog:
  - Make default cursor theme inherit dmz-aa instead of Bluecurve
  - Also require the cursor theme package


author: Adam Jackson <ajax@redhat.com> 1.1.1-3
changelog:
  - REVERT-libXdmcp-1.1.1-xalloc.patch: Restore definitions (but not
    declarations) of Xalloc and friends for RHEL6 ABI compat.


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.5.20121109git4e8107
changelog:
  - update to 20121109git4e8107
  - install unchanged default.cfg as ptp4l.conf
  - update phc2sys service description


author: Petr Šabata <contyk@redhat.com> - 0.9.45-4
changelog:
  - The devel subpackage now properly requires the base package to avoid
    multilib conflicts (#869633)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Michal Minar <miminar@redhat.com> - 3.1.1-11
changelog:
  - Resolves: #623587 - lm_sensors doesn't find/ load coretemp module automatically
  - Resolves: #768365 - sensors-detect reports error when run without user input
  - coretemp_detect function in sensors-detect updated


author: Michal Minar <miminar@redhat.com> - 3.1.1-16
changelog:
  - Related: #610000
  - fixed requirements among packages
  - spelling corrections of summaries and description


author: Michal Minar <miminar@redhat.com> - 3.1.1-17
changelog:
  - Related: #768365
  - Related: #623587
  - Solves spitting of "uninitialized values" messages occuring on ppc64
    architectures.
  - Added generic detection of Intel CPUs for coretemp module to sensors-detect.


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-29
changelog:
  - luci: Fix the interaction of the force_unmount and nfsrestart checkboxes
    Resolves: rhbz#822502
  - luci: Error out if max_restarts is set but not restart_expire_time is not
    luci: Fix handling of subtree options
    Resolves: rhbz#877188
  - luci: Fix value for LVM self_fence
    Resolves: rhbz#877392
  - Remove trailing commas that cause problems for some old
    Resolves: rhbz#881796
  - luci: Audit of resource agent checkbox input
    Resolves: rhbz#881955


author: John Ruemker <jruemker@redhat.com> - 0.26.0-36
changelog:
  - Correctly display the 'type' attribute value when editing an oracledb resource
    Resolves: rhbz#886678


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.1
changelog:
  - Fix test for PV with unknown VG in process_each_pv to ignore ignored mdas.
  - Fix _alloc_parallel_area to avoid picking already-full areas for raid devices.
  - Fix extending RAID 4/5/6 logical volumes.
  - Never issue discards when LV extents are being reconfigured, not deleted.
  - Allow release_lv_segment_area to fail as functions it calls can fail.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.2
changelog:
  - Make lvremove ask before discarding data areas.
  - Don't try to issue discards to a missing PV to avoid segfault.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-1
changelog:
  - Don't try to issue discards to a missing PV to avoid segfault.
  - Fix vgchange -aay not to activate non-matching LVs that follow a matching LV.
  - Fix lvchange --resync for RAID LVs which had no effect.
  - Add RAID10 support (--type raid10).
  - Introduce blkdeactivate script to deactivate block devs with dependencies.
  - Apply 'dmsetup mangle' for dm UUIDs besides dm names.
  - Use -q as short form of --quiet.
  - Suppress non-essential stdout with -qq.
  - Add log/silent to lvm.conf equivalent to -qq.
  - Add (p)artial attribute to lvs.
  - Implement devices/global_filter to hide devices from lvmetad.
  - Add lvmdump -l, to collect a state dump from lvmetad.
  - Add --discards to lvconvert.
  - Add --poolmetadata to lvconvert and support thin meta/data dev stacking.
  - Support creation of read-only thin volumes (lvcreate -p r).
  - Support changes of permissions for thin snapshot volumes.
  - Make lvremove ask before discarding data areas.
  - Prohibit not yet supported change of thin-pool to read-only.
  - Using autoextend percent 0 for thin pool fails 'lvextend --use-policies'.
  - Make vgscan --cache an alias for pvscan --cache.
  - Clear lvmetad metadata/PV cache before a rescan.
  - Fix a segmentation fault upon receiving a corrupt lvmetad response.
  - Give inconsistent metadata warnings in pvscan --cache.
  - Avoid overlapping locks that could cause a deadlock in lvmetad.
  - Fix memory leaks in libdaemon and lvmetad.
  - Optimize libdaemon logging for a fast no-output path.
  - Only create lvmetad pidfile when running as a daemon (no -f).
  - Warn if lvmetad is running but disabled.
  - Warn about running lvmetad with use_lvmetad = 0 in example.conf.
  - Update lvmetad help output (flags and their meaning).
  - Make pvscan --cache read metadata from LVM1 PVs.
  - Make libdaemon buffer handling asymptotically more efficient.
  - Make --sysinit suppress lvmetad connection failure warnings.
  - Prohibit usage of lvcreate --thinpool with --mirrors.
  - Fix lvm2api origin reporting for thin snapshot volume.
  - Add implementation of lvm2api function lvm_percent_to_float.
  - Allow non power of 2 thin chunk sizes if thin pool driver supports that.
  - Allow limited metadata changes when PVs are missing via [vg|lv]change.
  - Do not start dmeventd for lvchange --resync when monitoring is off.
  - Remove pvscan --cache from lvm2-lvmetad init script.
  - Report invalid percentage for property snap_percent of non-snaphot LVs.
  - Disallow conversion of thin LVs to mirrors.
  - Fix lvm2api data_percent reporting for thin volumes.
  - Do not allow RAID LVs in a clustered volume group.
  - Enhance insert_layer_for_lv() with recursive rename for _tdata LVs.
  - Skip building dm tree for thin pool when called with origin_only flag.
  - Ensure descriptors 0,1,2 are always available, using /dev/null if necessary.
  - Use /proc/self/fd when available for closing opened descriptors efficiently.
  - Fix inability to create, extend or convert to a large (> 1TiB) RAID LV.
  - Update lvmetad communications to cope with clients using different filters.
  - Clear LV_NOSYNCED flag when a RAID1 LV is converted to a linear LV.
  - Disallow RAID1 upconvert if the LV was created with --nosync.
  - Disallow addition of RAID images until the array is in-sync.
  - Fix RAID LV creation with '--test' so valid commands do not fail.
  - Add lvm_lv_rename() to lvm2api.
  - Fix setvbuf code by closing and reopening stream before changing buffer.
  - Disable private buffering when using liblvm.
  - When private stdin/stdout buffering is not used always use silent mode.
  - Fix 32-bit device size arithmetic needing 64-bit casting throughout tree.
  - Fix dereference of NULL in lvmetad error path logging.
  - Fix buffer memory leak in lvmetad logging.
  - Change lvmetad logging syntax from -ddd to -l {all|wire|debug}.
  - Add new libdaemon logging infrastructure.
  - Support unmount of thin volumes from pool above thin pool threshold.
  - Update man page to reflect that dm UUIDs are being mangled as well.
  - Add 'mangled_uuid' and 'unmangled_uuid' fields to dmsetup info -c -o.
  - Mangle device UUID on dm_task_set_uuid/newuuid call if necessary.
  - Add dm_task_get_uuid_mangled/unmangled to libdevmapper.
  - Always reset delay_resume_if_new flag when stacking thin pool over anything.
  - Don't create value for dm_config_node and require dm_config_create_value call.
  - Check for existing new_name for dmsetup rename.
  - Fix memory leak in dmsetup _get_split_name() error path.
  - Add Requires: bash >= 4.0 for blkdeactivate script.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-3
changelog:
  - Init lvmetad lazily to avoid early socket access on config overrides.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid reading mirrors with failed devices in its mirrored log.
  - Avoid reading from mirrors that have failed devices if they block I/O.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add Requires: device-mapper-persistent-data for thin provisioning support.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-4
changelog:
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - Automatically deactivate failed preloaded dm tree node.
  - Fix lvm2app to return all property sizes in bytes.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvconvert support to swap thin pool metadata volume.
  - Implement internal function detach_pool_metadata_lv().
  - Fix lvm2app and return lvseg discards property as string.
  - Allow forced vgcfgrestore of lvm2 metadata with thin volumes.
  - Add lvm.conf thin pool defs thin_pool_{chunk_size|discards|zero}.
  - Support discards for non-power-of-2 thin pool chunks.
  - Support allocation of pool metadata with lvconvert command.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  - Use lv_is_active() instead of lv_info() call.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Automatically restore MISSING PVs with no MDAs.
  - Do not allow --splitmirrors on RAID10 logical volumes.
  - When no '-i' argument is given for RAID10, default to 2 stripes.
  - Mirrored log is now fixed before its mirror when double-fault occurs.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-5
changelog:
  - Avoid a global lock in pvs when lvmetad is in use.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Fix memleak in device_is_usable mirror testing function.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Fix regression that caused inability to create a snapshot of an inactive LV.
  - Remove warning about unsupported discards for non-power-of-2 thin pool chunks.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-6
changelog:
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-7
changelog:
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Fix lvmetad updates for lvm1 format and fix reported internal errors.


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-18
changelog:
  - fix #834023 - escape From in email body properly
  - fix #832920 - fix word-wrap in web front-end
  - fix #772998 - fix reset_pw.py script
  - fix #799323 - handle urlhost in newlist script


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-11
changelog:
  - Fix case where reshape of IMSM RAID fails because we don't check the
    return value when trying to read the word 'degraded' from sysfs,
    resulting in the use of random stack data.
  - Resolves bz824815


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-1
changelog:
  - Update mdadm to upstream release v3.2.5
    This includes all current patches, except for
    mdadm-3.2.3-imsm-fix-correct-checking-volume-s-degradation.patch
  - Resolved bz812358


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Avoid corruption by prohibiting an IMSM array from spanning multiple
    controllers (bz878810)
  - Prevent creation of a second IMSM array of size 0 (bz880208)
  - Avoid segfault when running mdadm --detail on an IMSM raid1 array
    where two drives have been disabled (bz880225)
  - Resolves bz878810, bz880208, bz880225


author: Adam Jackson <ajax@redhat.com> 8.1-0.19
changelog:
  - Fix pthread linkage of glapi and osmesa
  - Drop llvmpipe-related patches
  - Don't require mesa-dri1-drivers on s390{,x}


author: Kai Tietz <ktietz@redhat.com>
changelog:
  - Change release number to 4.
  - Added patch libxml2-Fix-an-off-by-one-pointer-access.patch
  - Added patch libxml2-Fix-a-segfault-on-XSD-validation-on-pattern-error.patch
  - Added patch libxml2-Fix-entities-local-buffers-size-problems.patch
  - Added patch libxml2-gnome-bug-561340-fix.patch
  - Added patch for CVE-2012-0841
  - Added patch for CVE-2011-0216
  - Added patch for CVE-2011-2834
  - Added patch for CVE-2011-3919
  - Added patch for CVE-2011-1944
  - Added patch for CVE-2011-3905
    Related: rhbz#891477


author: Miloslav Trmač <mitr@redhat.com> - 0.22.2-4
changelog:
  - Fix a typo in locate(1)
    Resolves: #690800
  - When encountering an empty file name in updatedb, print the name of the
    offending directory instead of aborting
    Resolves: #699363


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-10
changelog:
  - Bugzilla Bug #861999 - mod_revocator exec CLR URIs fail to load: unable to
    load Revocation module, NSS error -8187 - stephen.capstick64@gmail.com
    (mod_revocator-waitpid.patch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-7
changelog:
  - Fix kMG option with more number of values causes segmentation fault
    Resolves: #707188
  - Fix cfgmaker doesn't use ifHighSpeed on IBM FibreChannel switches
    Resolves: #836197


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.2-3
changelog:
  - Drop xorg-x11-util-macros build requires, not needed anymore
  - Don't build on s390 (or ppc, if on RHEL)
  - Force autoreconf to avoid libtool errors


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871813


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901380


author: Laine Stump <laine@redhat.com> - 0.1.9-3
changelog:
  - resolves rhbz#886862
    - libnl addr and link caches are not thread-safe, leading to
      libvirtd crashes


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-43
changelog:
  - fixed value of UCD-SNMP-MIB::extCommand to contain full command
    line (#842279)
  - fixed rpath to perl.so (#848319)
  - added support for port numbers in 'clientaddr' configuration
    option (#833013)
  - fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
    is used (#824402)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#800671)
  - updated documentation of '-c' option of snmptrapd (#784502)
  - fixed endless loop when SIGTEM arrives in middle of internal query
    processing (#851637)
  - fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
  - removed various error log messages related to counte64 expansions
    (#846906)
  - removed various error log messages when IPv6 is disabled (#845157)
  - added support of cvfs filesystem in hrStorageTable (#846532)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#846436)
  - added support of simfs filesystem in hrStorageTable (#861152)
  - fixed responding to requests on a multihost machine (#825889)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-34
changelog:
  - core: always use Opportunistic Key Caching with WPA-Enterprise (rh #834444)
  - ifcfg-rh: fix handling of EAP-LEAP connections (rh #833199)
  - applet: preserve WPA protocol and ciphers when editing connections (rh #834349)
  - applet: show WPA protocol widget when GConf key is set (rh #813573)


author: Dan Winship <danw@redhat.com> - 1:0.8.1-34
changelog:
  - connection-editor: switch from notebook to tree (part of rh #465345)
  - connection-editor: add InfiniBand support (rh #685096)


author: Dan Winship <danw@redhat.com> - 1:0.8.1-35
changelog:
  - ifcfg-rh: fix writing of bond connections (rh #717475, rh #838907)
  - ifcfg-rh: fix reading of InfiniBand bond slaves (rh #717475)
  - connection-editor: add bond support (rh #465345)


author: Dan Winship <danw@redhat.com> - 1:0.8.1-36
changelog:
  - connection-editor: add VLAN support (rh #712302)
  - libnm-util: add API for VLAN connection editor
  - core: add more checks to VLAN creation
  - ifcfg-rh: fix writing of VLAN connections
  - misc other small connection editor UI updates


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-37
changelog:
  - core: fix 802.1x credentials being requested twice (rh #837056)
  - core: inherit leasefiles from the initramfs (rh #817660)
  - core: periodically retry connections even if they have failed (rh #829499)


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-41
changelog:
  - core: additional fixes for bridging and bonding operation (rh #558983)
  - applet: add support for Bridge, Bond, and VLAN devices


author: Steve Dickson <steved@redhat.com> 1.2.3-29
changelog:
  - V4 mounts hang on exports to netgroups (bz 815673)
  - Strip the '[]' off of ipv6 addresses (bz 811882)
  - Removed a use_ipaddr race in mountd (bz 797209)


author: Steve Dickson <steved@redhat.com> 1.2.3-30
changelog:
  - gssd: Don't link with libgssapi_krb5 (bz 784909)
  - Fix referrals that use IPv6 addresses (bz 820737)
  - Add -l option to gssd to force legacy behaviour (bz 802469)
  - Add support to svcgssd to limit the negotiated enctypes (bz 802469)
  - Changed nfs.init to allow umounts to happen cleanly during 
    system shutdown (bz 856923)


author: Steve Dickson <steved@redhat.com> 1.2.3-34
changelog:
  - Update the default encryption types in svcgssd (bz 877636)
  - Added the -v 4.1 mount option (bz 877052)


author: Steve Dickson <steved@redhat.com> 1.2.3-35
changelog:
  - Fixed a regession in mountd that cause a localhost mounts to hang (bz 797209)
  - Make sure mount tries all the addresses returned by getaddrinfo (bz 876847)


author: Elio Maldonado <emaldona@redhat.com> - 4.9.2-0.1
changelog:
  - Retagging to ensure n-v-r is lower than the one for rhel-6.4
  - Resolves: rhbz#891661 - [RFE] Rebase nspr to 4.9.2 due to Firefox 17 ESR


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-1
changelog:
  - Update to NSS_3_13_6_RTM
  - Resolves: rhbz#891663 - Update to 3.13.5 for mozilla 10.0.6
  - Resolves: rhbz#891151 [CVE-2013-0743]


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-2
changelog:
  - Retagging for rhel-6.3 z-stream
  - Update to NSS_3_13_6_RTM
  - Resolves: rhbz#891663 - Update to 3.13.5 for mozilla 10.0.6
  - Resolves: rhbz#891151 [CVE-2013-0743]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-16
changelog:
  - Do not print a "Broken Pipe" error message after requesting a large group
    (#791042)
  - Fix a typo in the disconnection logic (#747281), patch by Martin Poole


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
  - Add -L${libdir}/nss3 to Libs: line in nspr.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Petr Holasek <pholasek@redhat.com> - 2.0.7-4
changelog:
  - Symbol numa_num_possible_cpus exported (bz804827)
  - miscalculating of numa_num_configured_cpus was fixed (bz804480)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-29
changelog:
  - fix: invalid order of TLS shutdown operations (#818572)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
  - fix: reading pin from file can make all TLS connections hang (#829319)
  - fix: replication with TLS does not work (#707599)
  - fix: some TLS ciphers cannot be enabled (#852339)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
  - fix: MozNSS certificate database in SQL format cannot be used (#857390)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
  - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
  - fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed use after free with comboboxes and XIM (rhbz#866499)
    (MotifZone bug #1559)
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#866496)
    (MotifZone bug #1552)
  - fixed copy/paste problem with Clipboard (rhbz#867463)
    (MotifZone bug #1529)


author: Doug Ledford <dledford@redhat.com> - 3.3.15-1
changelog:
  - Update to latest upstream source (adds more SRIOV support)
  - Fix init script when no config files are present
  - Related: bz756396


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-82
changelog:
  - check return value of PK11_Authenticate in ssh-add -n (#782912)
  - document available methods to RequiredAuthentications[12] (#821641)
  - fix ssh-copy-id (#836650)
  - fix segmentation fault in ssh client (#836655)
  - update pam_ssh_agent_auth to 0.9.3 upstream version
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running (#834404)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25.1
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-1
changelog:
  - Rebuild for upstream 1.1.8 release
  - Resolves: rhbz#816875 

  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

    + New IPC implementation from libqb
    + New logging implementation from libqb
    + Quieter - info, debug and trace logs are no longer sent to syslog
    + Dropped dependancy on cluster-glue
    + Config and core directories no longer located in heartbeat directories
    + Support for managing systemd services
    + Rewritten local resource management daemon
    + Version bumps for every shared library due to API cleanups
    + Removes crm shell, install/use pcs shell and GUI instead


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested 
    + Warn about node names containing a capital letter 
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-4
changelog:
  - Resolves: rhbz#816875
  - Update to upstream db9410b

    + Cluster: Detect node name collisions in corosync
    + Cluster: Strip domains from node names by default
    + Core: Prevent ordering changes when applying xml diffs
    + Fencing: On failure, only try a topology device once from the remote level.
    + Fencing: Retry stonith device for duration of action's timeout period.
    + Fencing: Support 'on_target' option in fencing device metadata for forcing unfence on target node
    + mcp: Re-attach to existing pacemaker components when mcp fails
    + pengine: Bug cl#5101 - Ensure stop order is preserved for partially active groups
    + pengine: Bug cl#5111 - When clone/master child rsc has on-fail=stop, insure all children stop on failure.
    + pengine: Correctly unpack active anonymous clones
    + pengine: Support a 'requires' resource meta-attribute for controlling whether it needs quorum, fencing or nothing
    + pengine: Support resources that require unfencing before start


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-5
changelog:
  - Resolves: rhbz#877364
  - Update to upstream e69dfc1

    + attrd: Correctly handle deletion of non-existant attributes
    + cib: Do not pass local variables to mainloop_add_fd() when creating remote connections
    + Cluster: Do not strip the domain from node names calculated from uname(2)
    + Core: Supply the correct number of arguments for the format string
    + corosync: Avoid errors when closing failed connections
    + fencing: Automatically append 'nodeid' to fencing agent args if it is detected agent supports 'nodeid' parameter
    + mcp: chmod the correct directory instead of /var/run
    + pengine: Prevent double-free for cloned primitive from template


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-6
changelog:
  - Resolves: rhbz#877364
  - Update to upstream d20d06f

    + cib: Avoid use-after-free by correctly support cib_no_children for non-xpath queries
    + cib: Remove text nodes from cib replace operations
    + Cluster: Preserve corosync membership state when matching node name/id entries
    + cman: Do not wait for unmanaged resources during shutdown
    + cman: Ensure reliable shutdown
    + cman: Ignore qdisk 'nodes'
    + Core: Prevent use-of_NULL in IPC code
    + corosync: Ensure peer state is preserved when matching names to nodeids
    + crmd: Avoid filling the ipc queue with data we don't need
    + crmd: Prevent election storms caused by getrusage() values being too close
    + Fencing: Correctly terminate when all device options have been exhausted
    + Fencing: Record delegated self-fencing operations in case they fail
    + legacy: Re-enable logging from the pacemaker plugin
    + pengine: Bug rhbz#880249 - Ensure orphan masters are demoted before being stopped
    + pengine: Bug rhbz#880249 - Teach the PE how to recover masters into primitives
    + pengine: Ensure previous migrations are completed before attempting another one
    + tools: crm_report - Fix node list detection


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-7
changelog:
  - Resolves: rhbz#880249
  - Update to upstream ca7bf5e

    + Fencing: Only try peers for non-topology based operations once
    + tools: Have crm_resource generate a valid transition key when sending resource commands to the crmd


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-12
changelog:
  - add character sequence test to pam_cracklib
  - drop unused difignore option from pam_cracklib (#811243)
  - add enforce_for_root option to pam_cracklib (#588893)
  - mention limits.d in the limits.conf(5) manpage (#723297)
  - add ability to lock out inactive accounts to pam_lastlog
  - fix require_selinux option in pam_namespace (#750601)
  - add mntopts flag for tmpfs polyinstantiation method
  - preserve authtok_type in pam_get_authtok() (#811168)
  - fix username mismatch in pam_unix remember feature (#815516)
  - relax restriction of root in pam_pwhistory
  - relax soft nproc limit for root in 90-nproc.conf


author: Brian C. Lane <bcl@redhat.com> 2.1-19
changelog:
  - libparted: HFS/HFS+ probe: don't let a corrupt FS evoke failed assertion
    Resolves: #797979
  - tests: exercise and document the HFS-probe bug fix
    Resolves: #797979
  - libparted: use largest_partnum in dm_reread_part_table
    Resolves: #803108
  - tests: test creating 20 device-mapper partitions
    Resolves: #803108
  - libparted: preserve the uuid on dm partitions
    Resolves: #832145
  - tests: Make sure dm UUIDs are not erased
    Resolves: #832145


author: Petr Pisar <ppisar@redhat.com> - 7.8-5
changelog:
  - Reintroduce RE::Init(const char*) to restore ABI with pcre-6
    (Resolves: #842000)
  - Fix spelling formfeed, runtime, whitespace in manual pages
    (Resolves: #799003)


author: Petr Pisar <ppisar@redhat.com> - 7.8-6
changelog:
  - Fix repeated forward reference needing a character (Resolves: #756105)
  - Fix caseless match if cases differ in encoding length (Resolves: #759475)


author: Petr Pisar <ppisar@redhat.com> - 0.26-6
changelog:
  - Do not source /etc/profile.d/krb5-devel.sh as krb5-devel-1.8.1-6 does not
    provide it and places executables into standard PATH (Resolves: #657274)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-1
changelog:
  - Update to 0.10.2 release (rhbz #836955)
  - Fix passing flags with schedular parameters (rhbz #848309)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-4
changelog:
  - Fix mistakes in POD docs (rhbz #869130)
  - Fix updating of node memory params (rhbz #865310)
  - Make flags parameters optional (rhbz #873203)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-5
changelog:
  - Fix module type in list_all_nwfilters (rhbz #883775)
  - Fix POD doc errors in StoragePool module (rhbz #882829)
  - Fix return value checks (rhbz #886028)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix permission on source files (#676364)
  - fix negative keys with var_export (#771738)
  - fix setDate when DateTime created from timestamp (#812819)
  - add php(language) and missing provides (#837042)
  - use arch-specific requires (#833545)
  - fix possible buffer overflow in pdo_odbc (#836264)
  - fix possible segfault in pdo_mysql (#824199)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-16
changelog:
  - fix stream support in fileinfo (#858653)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Ryan O'Hara <rohara@redhat.com> 0.8.6-1
changelog:
  - Resolves: #846035 - rebase to upstream version 0.8.6
  - Resolves: #857917 - piranha gui does not set ipvs timeout values


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-1
changelog:
  - update to 0.26.0
  - patch to add missing emms instructions
  - reenable iwmmxt since configure should now detect if it can't built


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-2
changelog:
  - Add experimental patch to use OpenMP
    If this causes your X server to misbehave, please file bugs.


author: Ade Lee <alee@redhat.com> 9.0.3-26
changelog:
  - Resolves #844459 - Increase audit cert renewal range to 2 years (mharmsen)
  - Resolves #841663 - serial number incorrectly cast from BigInt to integer in
    installation wizard (mharmsen)
  - Resolves #858864 - create/ identify a mechanism for clients to determine that
    the pki subsystem is up (alee)


author: Ade Lee <alee@redhat.com> 9.0.3-27
changelog:
  - Resolves #867640 - ipa-replica-install Configuration of CA failed
    by REVERTING #819111 - Non-existent container breaks replication


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.25
changelog:
  - Make restorecon to return proper exit codes on failure
  Resolves:#824779
  - Fix generated role_types for *.te
  Resolves:#843727


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.27
changelog:
  - Fix restorecond usage
  - Add missing te_stream_rules and if_stream_rules templates
  Resolves:#816460
  - Print a message if no default labels are assigned
  Resolves:#851479


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.28
changelog:
  - Allow to define sock file in /etc directory 
  Resolves:#816460
  - Make output of audit2allow when AVC can be allowed by boolean more readable


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.30
changelog:
  - Fix restorecond init script
  - Make setools.seinfo working only on SELinux enabled systems in seobjet.py
  Resolves:#893065


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-24
changelog:
  - fix for #851664 - vmstat -S M 1' and 'vmstat -S m 1' erronously
  - ... output constant 'si' and 'so' value of 0
  - Resolves: rhbz#851664


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#757411, add missing qnetwork-deleteResource
  - Resolves: bz#821061, add missing qmenubar-cornerWidget


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-29.el6_3.3
changelog:
  - add an RPATH to pyexpat.so to avoid ImportError on XML_SetHashSalt when a
  vanilla build of expat is present in LD_LIBRARY_PATH
  Resolves: rhbz#833271


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-30
changelog:
  - oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
  variable, to provide an opt-in way to protect against denial of service
  attacks due to hash collisions within the dict and set types
  Resolves: CVE-2012-1150


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-31
changelog:
  - fix endless loop in SimpleXMLRPCServer upon malformed POST request
  Resolves: CVE-2012-0845
  - send encoding in SimpleHTTPServer.list_directory to protect IE7 against
  potential XSS attacks
  Resolves: CVE-2011-4940


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-35
changelog:
  - add -DNDEBUG to OPT during the build, disabling C-level assertions
  Resolves: rhbz#810847
  Resolves: rhbz#841748
  - avoid allocating thunks in ctypes unless absolutely necessary, to avoid
  generating SELinux denials on "import ctypes" and "import uuid" when
  embedding Python within httpd
  Resolves: rhbz#814391
  - avoid infinite loop in logging.handlers.SysLogHandler with eventlet when
  the syslog daemon is stopped
  Resolves: rhbz#835460


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-36
changelog:
  - disable patch 110 (python-2.6.5-ctypes-noexecmem.patch)
  Related: rhbz#707944
  - disable patch 129 (python-2.6.6-gc-assertions.patch) now that we're
  building with -DNDEBUG
  Related: rhbz#810847
  Related: rhbz#841748
  Related: rhbz#614680


author: David Malcolm <dmalcolm@redhat.com> - 0.6-2
changelog:
  - fix typo in pethtool --help
  Resolves: rhbz#692028
  - fix memory leaks
  Resolves: rhbz#698125
  - add IPv6 information to pifconfig
  Resolves: rhbz#698192
  - respect interface arguments to pifconfig
  Resolves: rhbz#714753
  - add a get_ipv4_addresses() method to ethtool.etherinfo to support devices
  with multiple IPv4 addresses
  Resolves: rhbz#759150


author: David Malcolm <dmalcolm@redhat.com> - 0.6-3
changelog:
  - update python-ethtool-0.6-add-get_ipv4_addresses-method.patch, addressing
  bug 886644, memory leaks, and a crasher when the broadcast address is NULL
  Resolves: rhbz#886644


author: John Dennis <jdennis@redhat.com> - 0.13-0
changelog:
  - Resolves: #827616
  - Resolves: #642795
  - Resolves: #698663
  - Resolves: #796295

    Introduced in 0.13:

    * Fix NSS SECITEM_CompareItem bug via workaround.

    * Fix incorrect format strings in PyArg_ParseTuple* for:
      - GeneralName
      - BasicConstraints
      - cert_x509_key_usage

    * Fix bug when decoding certificate BasicConstraints extension

    * Fix hang in setup_certs.

    * For NSS >= 3.13 support CERTDB_TERMINAL_RECORD

    * You can now query for a specific certificate extension
      Certficate.get_extension()

    * The following classes were added:
      - RSAGenParams

    * The following class methods were added:
      - nss.nss.Certificate.get_extension
      - nss.nss.PK11Slot.generate_key_pair
      - nss.nss.DSAPublicKey.format
      - nss.nss.DSAPublicKey.format_lines

    * The following module functions were added:
      - nss.nss.pub_wrap_sym_key

    * The following internal utilities were added:
      - PyString_UTF8
      - SecItem_new_alloc()

    * The following class constructors were modified to accept
      intialization parameters

      - KEYPQGParams (DSA generation parameters)

    * The PublicKey formatting (i.e. format_lines) was augmented
      to format DSA keys (formerly it only recognized RSA keys).

    * Allow lables and values to be justified when printing objects

    * The following were deprecated:
      - nss.nss.make_line_pairs (replaced by nss.nss.make_line_fmt_tuples)

      Deprecated Functionality:
      -------------------------
      - make_line_pairs() has been replaced by make_line_fmt_tuples()
        because 2-valued tuples were not sufficently general. It is
        expected very few programs will have used this function, it's mostly
        used internally but provided as a support utility.

    Introduced in 0.12:

    * Major new enhancement is additon of PKCS12 support and
      AlgorithmID's.

    * setup.py build enhancements
      - Now searches for the NSS and NSPR header files rather
        than hardcoding their location. This makes building friendlier
        on other systems (i.e. debian)
      - Now takes optional command line arguments, -d or --debug
        will turn on debug options during the build.

    * Fix reference counting bug in PK11_password_callback() which
      contributed to NSS not being able to shutdown due to
      resources still in use.

    * Add UTF-8 support to ssl.config_server_session_id_cache()

    * Added unit tests for cipher, digest, client_server.

    * All unittests now run, added test/run_tests to invoke
      full test suite.

    * Fix bug in test/setup_certs.py, hardcoded full path to
      libnssckbi.so was causing failures on 64-bit systems,
      just use the libnssckbi.so basename, modutil will find
      it on the standard search path.

    * doc/examples/cert_dump.py uses new AlgorithmID class to
      dump Signature Algorithm

    * doc/examples/ssl_example.py now can cleanly shutdown NSS.

    * Exception error messages now include PR error text if available.

    * The following classes were replaced:
      - SignatureAlgorithm replaced by new class AlgorithmID

    * The following classes were added:
      - AlgorithmID
      - PKCS12DecodeItem
      - PKCS12Decoder

    * The following class methods were added:
      - PK11Slot.authenticate()
      - PK11Slot.get_disabled_reason()
      - PK11Slot.has_protected_authentication_path()
      - PK11Slot.has_root_certs()
      - PK11Slot.is_disabled()
      - PK11Slot.is_friendly()
      - PK11Slot.is_internal()
      - PK11Slot.is_logged_in()
      - PK11Slot.is_removable()
      - PK11Slot.logout()
      - PK11Slot.need_login()
      - PK11Slot.need_user_init()
      - PK11Slot.user_disable()
      - PK11Slot.user_enable()
      - PKCS12DecodeItem.format()
      - PKCS12DecodeItem.format_lines()
      - PKCS12Decoder.database_import()
      - PKCS12Decoder.format()
      - PKCS12Decoder.format_lines()

    * The following class properties were added:
      - AlgorithmID.id_oid
      - AlgorithmID.id_str
      - AlgorithmID.id_tag
      - AlgorithmID.parameters
      - PKCS12DecodeItem.certificate
      - PKCS12DecodeItem.friendly_name
      - PKCS12DecodeItem.has_key
      - PKCS12DecodeItem.shroud_algorithm_id
      - PKCS12DecodeItem.signed_cert_der
      - PKCS12DecodeItem.type
      - SignedData.data
      - SignedData.der

    * The following module functions were added:
      - nss.nss.dump_certificate_cache_info()
      - nss.nss.find_slot_by_name()
      - nss.nss.fingerprint_format_lines()
      - nss.nss.get_internal_slot()
      - nss.nss.is_fips()
      - nss.nss.need_pw_init()
      - nss.nss.nss_init_read_write()
      - nss.nss.pk11_disabled_reason_name()
      - nss.nss.pk11_disabled_reason_str()
      - nss.nss.pk11_logout_all()
      - nss.nss.pkcs12_cipher_from_name()
      - nss.nss.pkcs12_cipher_name()
      - nss.nss.pkcs12_enable_all_ciphers()
      - nss.nss.pkcs12_enable_cipher()
      - nss.nss.pkcs12_export()
      - nss.nss.pkcs12_map_cipher()
      - nss.nss.pkcs12_set_nickname_collision_callback()
      - nss.nss.pkcs12_set_preferred_cipher()
      - nss.nss.token_exists()
      - nss.ssl.config_mp_server_sid_cache()
      - nss.ssl.config_server_session_id_cache_with_opt()
      - nss.ssl.get_max_server_cache_locks()
      - nss.ssl.set_max_server_cache_locks()
      - nss.ssl.shutdown_server_session_id_cache()

    * The following constants were added:
      - nss.nss.int.PK11_DIS_COULD_NOT_INIT_TOKEN
      - nss.nss.int.PK11_DIS_NONE
      - nss.nss.int.PK11_DIS_TOKEN_NOT_PRESENT
      - nss.nss.int.PK11_DIS_TOKEN_VERIFY_FAILED
      - nss.nss.int.PK11_DIS_USER_SELECTED
      - nss.nss.int.PKCS12_DES_56
      - nss.nss.int.PKCS12_DES_EDE3_168
      - nss.nss.int.PKCS12_RC2_CBC_128
      - nss.nss.int.PKCS12_RC2_CBC_40
      - nss.nss.int.PKCS12_RC4_128
      - nss.nss.int.PKCS12_RC4_40

    * The following files were added:
      - test/run_tests
      - test/test_cipher.py (replaces cipher_test.py)
      - test/test_client_server.py
      - test/test_digest.py (replaces digest_test.py)
      - test/test_pkcs12.py

    * The following were deprecated:
      - SignatureAlgorithm


author: John Dennis <jdennis@redhat.com> - 0.13-1
changelog:
  - Resolves: #642795
    add python-nss-size_t.patch, some types involved with ssize_t were
    improperly defined causing a segfault on the s390x and ppc64 arches.


author: Tom Lane <tgl@redhat.com> 2.0.14-1
changelog:
  - Update to 2.0.14 to get the last few upstream fixes in this release series,
    and to not be behind what MRG has shipped for RHEL-5
  - Fix refcount leaks in _mogrify()
  Resolves: #765998


author: Alex Wood <awood@redhat.com> 1.0.6-1
changelog:
  - 848742: support arbitrary bit length serial numbers (jbowes@redhat.com)
  - Stop doing F15 Fedora builds, add EL5 public builds. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.1.1-1
changelog:
  - Read certv3 detached format (jbowes@redhat.com)
  - Read file content types from certificates (mstead@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.3-1
changelog:
  - 863961: add test case for id cert default version (alikins@redhat.com)
  - 857426: Do not pass None when body is empty collection (mstead@redhat.com)
  - 863961: set a default version for id certs (alikins@redhat.com)
  - 859652: Subscribe with service level being ignored (wpoteat@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.4-1
changelog:
  - fixing a bug where certificates with carriage returns could not be parsed.
    (mhrivnak@redhat.com)
  - 790481: Send up headers with the subscription-manager and python-rhsm version
    info. (bkearney@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.6-1
changelog:
  - Making product and order info optional for a v3 EntitlementCertificate, since
    the server side will never have that data. (mhrivnak@redhat.com)
  - Adding path authorization checking for both v1 and v3 entitlement
    certificates (mhrivnak@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.8-1
changelog:
  - 884259: If LANG is unset, do not attempt to send up a default locale in
    redeem call (bkearney@redhat.com)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.2-1
changelog:
  - Add get_priority_{min,max} methods
  - Add constants for SCHED_{BATCH,FIFO,OTHER,RR}
  - Implement get_priority method
  - Add pchrt utility for testing the bindings, chrt clone
  - Add ptaskset utility for testing the bindings, taskset clone


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.347.el6
changelog:
  - kvm-qxl-vnc-register-a-vm-state-change-handler-for-dummy.patch [#873563]
  - kvm-hyper-v-Minimal-hyper-v-support-v5.patch [#801196]
  - kvm-audio-split-sample-conversion-and-volume-mixing.patch [bz#884253]
  - kvm-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
  - kvm-audio-don-t-apply-volume-effect-if-backend-has-VOICE.patch [bz#884253]
  - kvm-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
  - kvm-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
  - kvm-hw-ac97-add-support-for-volume-control.patch [bz#884253]
  - kvm-audio-spice-add-support-for-volume-control.patch [bz#884253]
  - Resolves: bz#873563
    (Guest aborted when boot with vnc and qxl)
  - Resolves: bz#801196
    (Win28k KVM guest on RHEL6.1 BSOD with CLOCK_WATCHDOG_TIMEOUT)
  - Resolves bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.348.el6
changelog:
  - kvm-spice-add-new-spice-server-callbacks-to-ui-spice-dis.patch [bz#879559]
  - kvm-vmmouse-add-reset-handler.patch [bz#884450]
  - kvm-vmmouse-fix-queue_size-field-initialization.patch [bz#884450]
  - kvm-hw-vmmouse.c-Disable-vmmouse-after-reboot.patch [bz#884450]
  - kvm-block-Fix-vpc-initialization-of-the-Dynamic-Disk-Hea.patch [bz#887897]
  - kvm-block-vpc-write-checksum-back-to-footer-after-check.patch [bz#887897]
  - Resolves: bz#879559
    (spice with non-qxl vga dumps core)
  - Resolves: bz#884450
    (after change mac address of guest, mouse inside guest can not be used after system_reset in qemu)
  - Resolves: bz#887897
    (Backport vpc initialization of the Dynamic Disk Header fix)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.349.el6
changelog:
  - kvm-pc-rhel6-compat-enable-S3-S4-for-6.1-and-lower-machi.patch [bz#886798]
  - kvm-e1000-no-need-auto-negotiation-if-link-was-down.patch [bz#890288]
  - kvm-rtl8139-preserve-link-state-across-device-reset.patch [bz#890288]
  - kvm-pci-assign-Enable-MSIX-on-device-to-match-guest.patch [bz#886410]
  - Resolves: bz#886410
    (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)
  - Resolves: bz#886798
    (Guest should get S3/S4 state according to machine type to avoid cross migration issue)
  - Resolves: bz#890288
    (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
  - Resolves: bz#886410
    (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.350.el6
changelog:
  - kvm-raw-posix-add-raw_get_aio_fd-for-virtio-blk-data-pla.patch [bz#877836]
  - kvm-configure-add-CONFIG_VIRTIO_BLK_DATA_PLANE.patch [bz#877836]
  - kvm-vhost-make-memory-region-assign-unassign-functions-p.patch [bz#877836]
  - kvm-dataplane-add-host-memory-mapping-code.patch [bz#877836]
  - kvm-dataplane-add-virtqueue-vring-code.patch [bz#877836]
  - kvm-event_notifier-add-event_notifier_set.patch [bz#877836]
  - kvm-dataplane-add-event-loop.patch [bz#877836]
  - kvm-dataplane-add-Linux-AIO-request-queue.patch [bz#877836]
  - kvm-iov-add-iov_discard_front-back-to-remove-data.patch [bz#877836]
  - kvm-iov-add-qemu_iovec_concat_iov.patch [bz#877836]
  - kvm-virtio-blk-Turn-drive-serial-into-a-qdev-property.patch [bz#877836]
  - kvm-virtio-blk-define-VirtIOBlkConf.patch [bz#877836]
  - kvm-virtio-blk-add-scsi-on-off-to-VirtIOBlkConf.patch [bz#877836]
  - kvm-dataplane-add-virtio-blk-data-plane-code.patch [bz#877836]
  - kvm-virtio-blk-add-x-data-plane-on-off-performance-featu.patch [bz#877836]
  - kvm-virtio-pci-fix-virtio_pci_set_guest_notifiers-error-.patch [bz#877836]
  - Resolves: bz#877836
    (backport virtio-blk data-plane patches)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.351.el6
changelog:
  - kvm-qxl-save-qemu_create_displaysurface_from-result.patch [bz#885644]
  - Resolves: bz#839832
    (qemu-ga: document selinux policy for read/write of guest files)
  - Resolves: bz#885644
    (Memory leak and use after free in qxl_render_update_area_unlocked())


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.352.el6
changelog:
  - kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
  - kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
  - kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
  - Resolves: bz#895392
    (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.353.el6
changelog:
  - kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
  - kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
  - kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
  - kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
  - kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
  - Resolves: bz#869981
    (Cross version migration between different host with spice is broken)
  - Resolves: bz#876982
    (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
  - Resolves: bz#894995
    (core dump when install windows guest with x-data-plane=on)
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.354.el6
changelog:
  - spec: add Epoch to old_conflict_ver
  - Resolves: bz#895954
    (qemu-kvm-rhev conflicts and provides qemu-kvm)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6
changelog:
  - kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
  - kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
  - kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
  - kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
  - kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
  - kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
  - Resolves: bz#884253
    (Allow control of volume from within Windows Guests (Volume Mixture))


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-18
changelog:
  - Do not use real domains in warnquota example (bug #680919)
  - Disable grace period/times remote setting (bug #683554)
  - Initialize v2r1 ddquot padding in dump (bug #692390)
  - Make dirname static to work with nss_db (bug #704216)
  - Do not report missing utmp record to syslog (bug #730057)


author: Adam Jackson <ajax@redhat.com> 1.6.0-10
changelog:
  - Don't Require: libao-devel at runtime (#820008)
  - rdesktop-1.6.0-ts2008-licence.patch: Fix licence handling against some
    versions of Terminal Services. (#831095)
  - rdesktop-1.6.0-cursor.patch: Fix cursor rendering for Windows Server 2008
    (#782494)
  - rdesktop-1.6.0-smart-card-lp64.patch: Fix smartcard support on 64-bit
    hosts (#772020, #680917)
  - rdesktop-1.6.0-scard-crash.patch: Fix a crash in smartcard support (#680926)


author: Ondrej Vasik <ovasik@redhat.com> - 4.0-6
changelog:
  - fix the split-core stuff to allow benefits from it, use
    versioned/arched requirements for the subpackages
  - file /etc/lsb-release should be present on the system
  - Resolves: Bug 833058


author: Chris Feist <cfeist@redhat.com> - 3.9.2-12.2
changelog:
  - Fixed an issue causing HA LVM to be unable to shutdown when device failures
    cause LVs to go missing
  - Resolves: rhbz#878023


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-13
changelog:
  - Add nfsrestart option to fs and clustefs agents as last resource to umount the filesystem
  - Resolves: rhbz#822053


author: Chris Feist <cfeist@redhat.com> - 3.9.2-14
changelog:
  - Fixed issue causing fs.sh to fail when a device is still mounted
  - Fixed random servie failures when starting multiple HA LVM services
  - Tomcat resource now uses the proper defaults
  - The pacemaker SAPInstance and SAPDatabase resources were updated to their
    latest version
  - Updated lvm resource agent to not produce errors when used with pacemaker
  - oracledb.sh script now properly checks the status of the Oracle database
  - HA-LVM now supports RAID logical volumes
  - ip.sh now properly assignes the ip address to the correct interface on
    hosts with multiple interfaces on the same network
  - Stopping a filesystem when a device doesn't exist no longer results in
    failure
  - Log output from the 'status' action from netfs is now properly logged
  - In HA LVM clusters using tags, changing the lvm.conf file is now possible
  - Using rg_test with HA LVM resources no longer results in a
    "too many arguments" error 
  - Resolves: rhbz#728365 rhbz#714156 rhbz#853249 rhbz#843049 rhbz#817550 rhbz#729812 rhbz#839181 rhbz#824153 rhbz#822244 rhbz#860328 rhbz#847335 rhbz#834293


author: Chris Feist <cfeist@redhat.com> - 3.9.2-15
changelog:
  - Fixes issue with rgmanager not recognizing a mounted cifs share due to
    trailing slashes
  - Resolves: rhbz#848642


author: Chris Feist <cfeist@redhat.com> - 3.9.2-16
changelog:
  - Add support for 'volume group per service HA-LVM support for RAID logical
    volumes'
  - Resolves: rhbz#824153


author: Chris Feist <cfeist@redhat.com> - 3.9.2-17
changelog:
  - HA LVM is now able to properly shutdown when device failures cause LVs
    to go missing which allows the service to migrate to another machine
  - Resolves: rhbz#860981


author: Chris Feist <cfeist@redhat.com> - 3.9.2-19
changelog:
  - Better error messages for the script resource have been added to aid
    debugging
  - Resolves: rhbz#773478


author: Chris Feist <cfeist@redhat.com> - 3.9.2-20
changelog:
  - Update the rgmanager SAPInstance agent so resource limits configured in
    /usr/sap/services are properly applied.
  - Resolves: rhbz#869695


author: Chris Feist <cfeist@redhat.com> - 3.9.2-21
changelog:
  - Fixed missing '$' in lvm_by_vg.sh script
  - Retry VG shutdown to cope with udev collisions
  - Resolves: rhbz#729812


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-13
changelog:
  - rgmanager: Fix a crash when dbus notifications are
    Resolves: rhbz#825375
  - rgmanager: Fix for deadlock
    Resolves: rhbz#861157


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-15
changelog:
  - rgmanager: Randomize node list when relocating with no
    Resolves: rhbz#831648
  - rgmanager: Fix return code when a service would deadlock
    Resolves: rhbz#861157


author: Chris Feist <cfeist@redhat.com> - 0.16.2-56
changelog:
  - Fixed traceback when using ccs --stopall
  - Fixed return codes from ccs_sync
  - Fixed listing altmulticast with ccs --lsmisc
  - Ricci & ccs_sync should no longer crash when trying to update a cluster.conf 
    file that is too large 
  - Resolves: rhbz#811702 rhbz#841288 rhbz#839039 rhbz#815752 rhbz#818335


author: Chris Feist <cfeist@redhat.com> - 0.16.2-57
changelog:
  - Updated --addresource to properly add resources when rm section is missing
  - Fixed redirect which wouldn't allow creation of keys in a read-only folder
  - Resolves: rhbz#867019 rhbz#866894


author: Chris Feist <cfeist@redhat.com> - 0.16.2-60
changelog:
  - Fix issue causing conga to be unable to find/install packages due to line
    breaks in yum output
  - Resolves: rhbz#842939


author: Chris Feist <cfeist@redhat.com> - 0.16.2-63
changelog:
  - Synced cluster schema with latest cman, resource-agents, fence-agents
    fence-sanlock & fence_virt
  - Resolves: rhbz#878108


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-28
changelog:
  - Handle identical binaries for debug-info (#727872)
  - Fix typos in Japanese rpm man page (#845065)
  - Document -D and -E options in man page (#845063)
  - Add --setperms and --setuids to the man page (#839126)
  - Update man page that SHA256 is also used for file digest (#804049)
  - Remove --fileid from man page to get rid of md5
  - Remove -s from patch calls (#773503)
  - Force _host_vendor to redhat to better match toolchain (#743229)
  - Backport reloadConfig for Python API (#825147)
  - Support for dpkg-style sorting of tilde in version/release (#825087)
  - Fix explicit directory %attr() when %defattr() is active (#730473)
  - Don't load keyring if signature checking is disabled (#664696)
  - Retry read() to fix rpm2cpio with pipe as stdin (#802839)


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-54.rc4
changelog:
  - Fix summary and description of dc subpackages.
  - resolves: #896142
  - Remove conflicting libsmbclient.7 manpage.
  - resolves: #896240


author: Tomas Tomecek <ttomecek@redhat.com> - 0.7.2-6
changelog:
  - Resolves: rhbz#697530
  - ExcludeArch s390 -- tests fail there
  - ExcludeArch ppc -- package won't build there
  - ExcludeArch s390x -- package won't build there


author: Jindrich Novy <jnovy@redhat.com> 20120613-2
changelog:
  - backport patch from upstream to correctly process buildroot
    after installation (compress man pages, etc.) (#844028)


author: Miroslav Grepl <mgrepl@redhat.com> - 3.0.47-4
changelog:
  - Make sealert working if description contains parenthesis
  - Remove -H from man page
  Resolves:#788196


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-2
changelog:
  - add explicit build-time and install-time dependencies on 389-ds-base 1.2.10,
    so that we know we build with transaction support (#829502)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-3
changelog:
  - backport fix for a slow memory leak (#840926)
  - tweak configure to disable explicit (wrong) transaction support (#829502)


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-3
changelog:
  - Add info message when USB dialog is empty
    Resolves: rhbz#804187
  - Properly reset usb channels after non-seamless migration
    Resolves: rhbz#861332
  - Fix read error handling for USB redirection
    Related: rhbz#842354
  - Auto-discover already plugged-in USB devices
    Resolves: rhbz#820964
  - Add support for disabling Ctrl+Alt+Del
    Resolves: rhbz#807771


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-4
changelog:
  - Fix application of Patch2, it includes the git commit log which
    contained a diff hunk which %patch happily applied, which caused
    https://bugzilla.redhat.com/show_bug.cgi?id=804187#c9
    Related: rhbz#804187


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.14-5
changelog:
  - Apply color conversion when creating image
    Resolves: rhbz#843134
  - Show correct ungrab key combination in spicy
    Resolves: rhbz#851090
  - Fix sending 00 scancodes to guests
    Resolves: rhbz#868237
  - Improve open_host() debugging message
    Resolves: rhbz#858232
  - Empty host subject from qemu should only validate hostname
    Resolves: rhbz#858228
  - Fix disabling mouse acceleration on X11
    Resolves: rhbz#867885
  - use more explicit SSL error message
    Resolves: rhbz#846666


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14-6
changelog:
  - Don't ask for root/admin password when users want to redirect USB
    devices
    Resolves: rhbz#859392


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
    Resolves: rhbz#842355
  - This switches to syslog for logging, adding timestamps, etc. to the logs
    Resolves: rhbz#747894
  - This adds support for dynamically adding monitors and resolutions
    Resolves: rhbz#842298


author: Michal Luscon <mluscon@redhat.con> - 7:3.1.10-8
changelog:
  - Resolves: #844723 - NTLM pass-through authentication does not work
  - Resolves: #832484 - Squid exits when IPv6 is disabled and request contains IPv6 address


author: Michal Luscon <mluscon@redhat.com> - 7:3.1.10-10
changelog:
  - Resolves #798090 - Client timeout uses server-side "read_timeout"
  - Resolves #833086 - Private md5 hash function does not comply FIPS
  - Resolves #782732 - Squid crashes by segfault when it reboots
  - Resolves #797571 - Squid userid is not added to wbpriv group
  - Disable strict-error-checking on account of squid-fips.patch


author: Jiri Skala <jskala@redhat.com> -7:3.1.10-2
changelog:
  - Resolves: #735448 - CVE-2011-3205 squid: buffer overflow flaw in Squid's Gopher reply parser
  - removed unused patch from cvs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-73
changelog:
  - Resolves: rhbz895615 - ipa-client-automount: autofs failed in s390x and
                           ppc64 platform


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-74
changelog:
  - Resolves: rhbz894381 - memory cache is not updated after user is deleted
                           from ldb cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-76
changelog:
  - Resolves: rhbz#895132 - Modifications using sss_usermod tool are not
                            reflected in memory cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-78
changelog:
  - Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning
                            value is higher than passwordWarning LDAP attribute.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-79
changelog:
  - Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh
                            on ppc64 and s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-80
changelog:
  - Resolves: rhbz#903078 - Out-of-bounds read flaws in
                            autofs and ssh services responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-81
changelog:
  - Resolves: rhbz#903078 - TOCTOU race conditions by copying
                            and removing directory trees


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed
                            database update


author: Jeff Law <law@redhat.com> - 4.5.19-1.11.el6_3.1
changelog:
  - Use PTRACE_SETOPTIONS to set behaviour of ptrace at fork/vfork/clone
    syscalls rather than buggy magic breakpoint methods (#849052).


author: Jeff Law <law@redhat.com> - 4.5.19-1.12
changelog:
  - Fix semtimedop decoding for S390/S390x (#759569)
  - Use PTRACE_SETOPTIONS to set behaviour of ptrace at fork/vfork/clone
    syscalls rather than buggy magic breakpoint methods (#837183).


author: Jeff Law <law@redhat.com> - 4.5.19-1.13
changelog:
  - build strace32 on ppc and s390 which can be installed alongside
    strace/strace64 on ppc64 and s390x (#809917)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-1
changelog:
  - rebase to 1.8.6p3
  - new -devel subpackage
  - new configuration file: /etc/sudo.conf
    Resolves: rhbz#852045 - ulimit -c got Operation not permitted
    Resolves: rhbz#804123 - sudo does not call pam_close_session() or pam_end()
    Resolves: rhbz#828707 - sudo fails to report error correctly when execv(3) fails
    Resolves: rhbz#844691 - Cannot set RLIMIT_NPROC to unlimited via pam_limits when running sudo
    Resolves: rhbz#759480 - Rebase sudo to 1.8 in RHEL 6.4
    Resolves: rhbz#846117 - Sudo interpretation of wildcard command arguments is more lenient providing a security risk
    Resolves: rhbz#789937 - [RFE] Add ability to treat files authoritatively in sudoers.ldap
    Resolves: rhbz#836242 - sudo -s -u USERNAME can't change ulimit -c


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
changelog:
  - extended the default sudo-ldap.conf file
  - corrected default file permissions on sudo.conf, sudo-ldap.conf
  - added patch that introduces the cmnd_no_wait Defaults option
    Resolves: rhbz#840980 - sudo creates a new parent process
    Resolves: rhbz#860397 - new /etc/sudo-ldap.conf configuration file problems


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-5
changelog:
  - Include just one sample plugin in the documentation for the -devel
    subpackage. Don't include architecture specific files.
  - patch: Do not inform the user that the command was not permitted by
    the policy if they do not successfully authenticate.
    Resolves: rhbz#759480
    Resolves: rhbz#871303
    Resolves: rhbz#872740


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-6
changelog:
  - added patches to address a number of issues in ldap & sssd plugins
  - fixed README.LDAP updating in the spec file
    Resolves: rhbz#860397
    Resolves: rhbz#876208
    Resolves: rhbz#876578
    Resolves: rhbz#879675
    Resolves: rhbz#879633


author: Frank Ch. Eigler <fche@redhat.com> - 1.7-5.1
changelog:
  - Backported fix for bz828103
  - Added backported form of upstream git#9ebdd422 patch for ppc64
    crash buildability.


author: Frank Ch. Eigler <fche@redhat.com> - 1.8-5
changelog:
  - rebased to systemtap 1.8, including scox's fixes from rhel-5.9:
  - rhbz844910: grumble quietly about preexisting gid/uid conflicts in .spec  
  - rhbz843480: systemtap-server should work without systemtap-runtime preinstalled
  - rhbz843392: systemtap-testsuite unresolved deps
  - rhbz843389: sdt.c on systemtap-testsuite cannot be compiled
  - rhbz835027: systemtap-testsuite requires prelink on ia64
  - Backported fix for pr14325
  - No publican in rhel 5.
  - Add s390 to the publican blacklist.
  - rebase
  - Backported fixes for pr14230 pr14296


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-8
changelog:
  - fix for bad file matching during extracting concrete files from an archive
    (backported fix from fedora 14) (#841308)
  - typo - better separate comments in spec file


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-9
changelog:
  - backport also --listed-incremental crash fix, this patch is in upstream and in
    fedora from f14 (related to #841308)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-10
changelog:
  - backport upstream patch to make sure that file matching is done before file
    file-name transformation (#875727)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-11
changelog:
  - avoid crash by backporting upstream patch for internal construction of
    file-name hash table (#877769).


author: Petr Machata <pmachata@redhat.com> - 2.0-2.20070927
changelog:
  - Review fixes
    - GCC 4.3 patchset
    - Add BR util-linux net-tools
    - Add full URL to Source0
    - Build in debug mode to work around problems with GCC 4.3


author: Petr Machata <pmachata@redhat.com> - 2.2-2.20090809
changelog:
  - Replace mfence instruction with xchg to make it run on ia32-class
    machines without SSE2.
  - Resolves: #600654


author: Roman Kollar <rkollar@redhat.com> 6.17-21
changelog:
  - Fix dosource() calls after history file locking patch, requested release number bump
    Resolves: #847102


author: Roman Kollar <rkollar@redhat.com> 6.17-22
changelog:
  - Fixed .history patch issue breaking upstream multibyte tests
    Resolves: #821796
  - Revert history handling in loops
    Resolves: #814069


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-1
changelog:
  - Update to upstream version 2.12.0
    Resolves: #825471, #739118, #716474
  - Change post created symlinks group owner to 'pegasus'
    Resolves: #759064
  - Fix invocation of useradd without specifying a UID
    Resolves: #800319
  - Fix initscript is not world readable
    Resolves: #824297


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-2
changelog:
  - Fix local-or-remote-auth patch to work with IPv6 and with enabled
    privilege separation
    Resolves: #869664


author: John Kacur <jkacur@redhat.com> - 1.0.5-8
changelog:
  - trace-cmd: Use splice to filter out rest of buffer {746656}
  - trace-cmd: Do not use threads for extract {746656}
  Resolves:bz746656


author: Harald Hoyer <harald@redhat.com> 147-2.43
changelog:
  - add cciss handling to path_id
  Resolves: rhbz#784697
  - add kmsg alias logger
  Resolves: rhbz#826396
  - extend udev(7) man page about character encoding in symlinks
  Resolves: rhbz#790321
  - fix cdrom_id to honor feature profiles, if no medium is present
  Resolves: rhbz#847925


author: Harald Hoyer <harald@redhat.com> 147-2.46
changelog:
  - make symlink/rename failure info() only
    this can happen for multipath devices
  Resolves: rhbz#838451


author: Hans de Goede <hdegoede@redhat.com> - 0.5.1-1
changelog:
  - Update to upstream 0.5.1 release
  - Resolves: rhbz#842356
  - Remove bulk packets time out, this fixes various devices not working
  - Resolves: rhbz#834560
  - Add support to libusbredirparser for state serialization
  - Resolves: rhbz#842316
  - Drop isochronous packets when the network is too slow to keep up
  - Resolves: rhbz#855737


author: Karel Zak <kzak@redhat.com> 2.17.2-12.8
changelog:
  - fix #679833 - [RFE] tailf should support `-n 0`
  - fix #719927 - [RFE] add adjtimex --compare functionality to hwclock
  - fix #730272 - losetup does not warn if backing file is < 512 bytes
  - fix #730891 - document cfdisk and sfdisk incompatibility with 4096-bytes sectors
  - fix #736245 - lscpu segfault on non-uniform cpu configuration
  - fix #783514 - default barrier setting for EXT3 filesystems in mount manpage is wrong
  - fix #790728 - blkid ignores swap UUIDs if the first byte is a zero byte
  - fix #818621 - lsblk should not open device it prints info about
  - fix #819945 - hwclock --systz causes a system time jump
  - fix #820183 - mount(8) man page should include relatime in defaults definition
  - fix #823008 - update to the latest upstream lscpu and chcpu
  - fix #837935 - lscpu coredumps on a system with 158 active processors
  - fix #839281 - inode_readahead for ext4 should be inode_readahead_blks
  - fix #845477 - Duplicate SElinux mount options cause mounting from the commandline to fail
  - fix #845971 - while reading /etc/fstab, mount command returns a device before a directory
  - fix #858009 - login doesn't update /var/run/utmp properly
  - fix #809449 - Backport inverse tree (-s) option for lsblk and related patches
  - fix #809139 - lsblk option -D missing in manpage


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add vino-2.8.1-sanity-check-fb-update.patch
    Fix for CVE-2011-0904 and CVE-2011-0904
    - Bugs #694456, #694455


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add reachability.patch
    Remove UI about whether the is only reachable locally or not.
    Fix for CVE-2011-1164
    - Bug #553477


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.0-15
changelog:
  - Only reboot VM if it had an install phase (rhbz#824275)
  - Match usb device with vendorID, productID, bus, device (rhbz#820303)
  - Change Mbps to MB/s in migration dialog (rhbz#802639)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-12
changelog:
  - Use real binary name in help message (rhbz #814150)
  - Correctly detect IPv6 any address (rhbz #832121)
  - Add --title option to remote-viewer (rhbz #828339)
  - Add newline at end of verbose info output (rhbz #822794)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-15
changelog:
  - Fix crash starting remote-viewer from XPI plugin (rhbz #867459)
  - Fix crash connecting with wrong spice password (rhbz #867248)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-16
changelog:
  - Don't resize to 50x50 when toggling autoresize (rhbz #856610)
  - Allow zooming beyond normal size (rhbz #856678)
  - Allow changing resolution when in fullsreen (rhbz #864929)


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-18
changelog:
  - Fix resolution when switching to fullscreen (rhbz #881020)
  - Ensure correct file extension on screenshots (rhbz #875126)


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.2
changelog:
  - Add patch to fix dmidecode detection of Hitachi Virtage
    (thanks Satoru Moriya, Masaki Kimura)
    resolves: rhbz#829427


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-4
changelog:
  - Fix issues with Opportunistic/Proactive Key Caching (OKC) (rh #813579)
  - Be less aggressive when choosing to roam (rh #837402)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.3-4
changelog:
  - Fix issues with Opportunistic/Proactive Key Caching (OKC) (rh #813579)
  - Be less aggressive when choosing to roam (rh #837402)
  - Don't install manpage for wpa_gui (rh #672976)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-8
changelog:
  - mkfs.xfs: better handle misaligned 4k devices (#836433)
  - mkfs.xfs: default to physical sectorsize (#836433)
  - mkfs.xfs: clarify errors when specified AG size is too large (#730433)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-2
changelog:
  - oclock 1.0.2
  - xclock 1.0.5
  - xconsole 1.0.4
  - xbiff 1.0.2
  - luit 1.1.0
  - x11perf 1.5.2
  - xcursorgen 1.0.4
  - xeyes 1.1.0
  - xload 1.1.0
  - xlogo 1.0.3
  - xmag 1.0.4
  - xmessage 1.0.3
  - xfd 1.1.0
  - xfontsel 1.0.3
  - xvidtune 1.0.2


author: Ulrich Obergfell <uobergfe@redhat.com> - 0.0.14-14.el6
changelog:
  - backport of upstream commit 30b4b72cdbdf9f0e92a8d1c4e01779f60f15a741
    support _ASYNC io calls and interrupt handling (busy wait)
    Related: #888364


author: Matěj Cepl <mcepl@redhat.com> - 7.5-7
changelog:
  - Fix BuildRequires ... xbitmaps-devel does not exist anymore (RHBZ #744751)
  - Upgrade to the latest upstream iceauth, rgb, sessreg, and xrandr


author: Honza Horak <hhorak@redhat.com> - 3:1.20.4-30
changelog:
  - Modified the chkconfig priorities from 27/73 to 24/76, to move ypbind
    before netfs. This is useful for hosts that mount NFS file systems
    that reside on a server which is resolvable through NIS.
    Resolves: #647495


author: Honza Horak <hhorak@redhat.com> - 2.19-23
changelog:
  - fix memory leak when malformed request is received
    Resolves: #845283
  - Fixed returned value when all entries requested and no such
    map exists
    Resolves: #790812


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.3-28
changelog:
  - resolves: #823007
    optimized deflate function on s390(x)
  - resolves: #754694
    added zlib.map file to provide better version information


author: Zach Brown <zab@redhat.com> 0.20-0.2.git91d9eec
changelog:
  - bring btrfs-progs uptodate with current upstream git
  - updated patch to allow fs labels with slashes
  - btrfs-find-root, btrfs-restore, and btrfs-zero-log are now available
  - build with -fno-strict-aliasing


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.30-3
changelog:
  - Force krb5 version that contains new build layout.
  - Add non-upstream patch to exclude iptables from the appliance.
    resolves: rhbz#858648


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-1
changelog:
  - Rebase to libguestfs 1.16.31.
  - Backport mount-local feature.
    resolves: rhbz#830135
  - Include copy-patches.sh shell script.
  - Simplify .gitignore.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-3
changelog:
  - Add dependency on fuse.
    resolves: rhbz#836501
  - Clarify the error message from resize2fs-M.
    resolves: rhbz#801640
  - Increase limit on size of Windows registry for inspection (RHBZ#852396).
  - Change virt-sparsify to work with old 'file' command (RHBZ#853763).
  - Enable tests by adding an LD_PRELOAD workaround for RHBZ#563103.
  - Tidy up comments in the check section.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-4
changelog:
  - Fix inspection of Windows guests (RHBZ#858126).
  - Fix list-devices when different drive interfaces are used (RHBZ#858128).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.32-2
changelog:
  - Rebase to libguestfs 1.16.32 which includes a fix for inspection
    of Windows guests.
    resolves: rhbz#858126
  - Skip test-mdadm.sh.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.32-3
changelog:
  - Set permissions of .guestfish files in home directories to 0600
    resolves: rhbz#843068
  - Ignore /etc/release if /etc/redhat-release exists
    resolves: rhbz#872454


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.34-1
changelog:
  - Rebase to latest stable-1.16 branch version libguestfs 1.16.34.
  - Include missing patch which adds <locale.h> to fuse/guestmount.c
    resolves: rhbz#883338
  - Fix link to engineering git repo.
  - Add workaround for bug in yum: RHBZ#883463.


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.3
changelog:
  - kvm-block-don-t-create-mirror-block-job-if-the-target-bd.patch [bz#864962]
  - Resolves: bz#864962
    (mirroring starts anyway with "existing" mode and a non-existing target)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.4
changelog:
  - kvm-bitmap-add-a-generic-bitmap-and-bitops-library.patch [bz#852458]
  - kvm-bitops-fix-test_and_change_bit.patch [bz#852458]
  - kvm-add-hierarchical-bitmap-data-type-and-test-cases.patch [bz#852458]
  - kvm-block-implement-dirty-bitmap-using-HBitmap.patch [bz#852458]
  - kvm-block-return-count-of-dirty-sectors-not-chunks.patch [bz#852458]
  - kvm-block-allow-customizing-the-granularity-of-the-dirty.patch [bz#852458]
  - kvm-mirror-use-target-cluster-size-as-granularity.patch [bz#852458]
  - kvm-virtio-console-Fix-failure-on-unconnected-pty.patch [bz#861049]
  - Resolves: bz#852458
    ( copy cluster-sized blocks to the target of live storage migration)
  - Resolves: bz#861049
    (Fedora 16 and 17 guests hang during boot)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.5
changelog:
  - kvm-qxl-render-fix-broken-vnc-spice-since-commit-f934493-z.patch [bz#861906]
  - Resolves: bz#861906
    (qemu-kvm segfaulting when running a VM)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.6
changelog:
  - kvm-e1000-switch-to-symbolic-names-for-pci-registers.patch [bz#873270]
  - kvm-pci-interrupt-pin-documentation-update.patch [bz#873270]
  - kvm-e1000-Don-t-set-the-Capabilities-List-bit.patch [bz#873270]
  - Resolves: bz#873270
    ([hck][svvp] PCI Hardware Compliance Test for Systems job failed when e1000 is in use)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.7
changelog:
  - kvm-Revert-e1000-Don-t-set-the-Capabilities-List-bit.patch [bz#873270]
  - kvm-Revert-pci-interrupt-pin-documentation-update.patch [bz#873270]
  - kvm-Revert-e1000-switch-to-symbolic-names-for-pci-regist.patch [bz#873270]
  - Related: bz#873270
    ([hck][svvp] PCI Hardware Compliance Test for Systems job failed when e1000 is in use)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.8
changelog:
  - kvm-e1000-switch-to-symbolic-names-for-pci-registers-v5.patch [bz#873270]
  - kvm-pci-interrupt-pin-documentation-update-v5.patch [bz#873270]
  - kvm-e1000-Don-t-set-the-Capabilities-List-bit-v5.patch [bz#873270]
  - Resolves: bz#873270
    ([hck][svvp] PCI Hardware Compliance Test for Systems job failed when e1000 is in use)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.9
changelog:
  - kvm-trace-trace-monitor-qmp-dispatch-completion.patch [bz#886101]
  - kvm-Add-query-events-command-to-QMP-to-query-async-event.patch [bz#886101]
  - kvm-Add-event-notification-for-guest-balloon-changes.patch [bz#886101]
  - kvm-Add-rate-limiting-of-RTC_CHANGE-BALLOON_CHANGE-WATCH.patch [bz#886101]
  - Resolves: bz#886101
    (vdsm: vdsm is stuck in recovery for almost an hour on NFS storage with running vm's when blocking storage from host)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.10
changelog:
  - kvm-Revert-Add-rate-limiting-of-RTC_CHANGE-BALLOON_CHANG.patch [bz#886101]
  - kvm-Revert-Add-event-notification-for-guest-balloon-chan.patch [bz#886101]
  - kvm-Revert-Add-query-events-command-to-QMP-to-query-asyn.patch [bz#886101]
  - kvm-Revert-trace-trace-monitor-qmp-dispatch-completion.patch [bz#886101]
  - kvm-trace-trace-monitor-qmp-dispatch-completion-take2.patch [bz#886101]
  - kvm-monitor-allow-qapi-and-old-hmp-to-share-the-same-dis.patch [bz#886101]
  - kvm-Add-query-events-command-to-QMP-to-query-async-event-take2.patch [bz#886101]
  - kvm-Add-event-notification-for-guest-balloon-changes-take2.patch [bz#886101]
  - kvm-Add-rate-limiting-of-RTC_CHANGE-BALLOON_CHANGE-WATCH-take2.patch [bz#886101]
  - Resolves: bz#886101
    (vdsm: vdsm is stuck in recovery for almost an hour on NFS storage with running vm's when blocking storage from host)


author: David Teigland <teigland@redhat.com> - 2.5-1
changelog:
  - Resolves: rhbz#826022 rhbz#830736 rhbz#830848 rhbz#831906 rhbz#832935 rhbz#840063 rhbz#841305 rhbz#843073


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-5
changelog:
  - Fix various migration related bugs
    * don't process both cmd ring and dispatcher queue till migration data is received
    * fix assigning bad memory references to marshaller
    * fix memory corruption when receiving display migration data that exceeds 1024 bytes
    Resolves: rhbz#866929
    Resolves: rhbz#862352
    Resolves: rhbz#878700


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-7
changelog:
  - Fix mishandling of agent data received from the client after agent disconnection
    Resolves: rhbz#881980


author: Uri Lublin <uril@redhat.com> 0.12.0-9
changelog:
  - Fix calling set_client_capabilities when it is unsupported by qemu
    (fixes a crash when qemu-kvm is started with spice but without qxl)
    Resolves: rhbz#880276


author: Peter Hutterer <peter.hutterer@redhat.com> 0.16.1-2
changelog:
  - Fix crash for xorg.conf devices with same device node (#862939)
  - Fix spurious cursor jump when using I5 express keys (#859851)


author: Adam Jackson <ajax@redhat.com> 1.6.0-18
changelog:
  - Silence amazing amounts of log spam in the i2c code (#888607)
  - Fix a crash in DDC fetch (#888607)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-17.el6
changelog:
  - ipa delegation-find --group option returns internal error (#888524)
  - Add missing Requires for python-crypto replacement (#878969)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-19.el6
changelog:
  - Client installation crashes when Kerberos SRV record is not found (#889583)
  - Fix typo in patch 0048 for CVE-2012-5484 (#878220)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-20.el6
changelog:
  - Set maxbersize to a large value to accomondate large CRLs during replica
    installation. (#888956)
  - Set minimum version of pki-ca, pki-slient and pki-setup to 9.0.3-29 to
    pick up default CA validity period of 20 years. (#891980)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-21.el6
changelog:
  - Properly handle migrated uniqueMember attributes (#894090)
  - ipa permission-find using valid targetgroup throws internal error (#893827)
  - Fix migration of CRLs to new directory location (#893722)
  - Installing IPA with a single realm component sometimes fails (#893187)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-22.el6
changelog:
  - Set minimum version of bind-dyndb-ldap to 2.3-2 to pick up missing DNS
    zone SOA serial fix (#894131)
  - Stopped named service crashed ipa-upgradeconfig program (#895298)
  - ipa-replica-prepare crashed when manipulating DNS zone without SOA
    serial (#894143)
  - Use new certmonger locking to prevent NSS database corruption during
    CA subsystem renewal (#883484)
  - Set minimum selinux-policy to 3.7.19-193 to allow certmonger to talk
    to dbus in an rpm scriptlet. (related #883484)
  - Set minimum vresion of certmonger to 0.61-3 for new locking scheme
    (related #883484)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-23.el6
changelog:
  - Installer should not connect to 127.0.0.1. (#895561)
  - Don't initialize NSS if we don't have to. (#878220)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-24.el6
changelog:
  - Add certmonger condrestart to server post scriptlet (#903758)
  - Make certmonger a (pre) Requires (#903758)
  - Add selinux-policy to Requires(pre) to avoid post scriptlet AVCs
    (#903758)
  - Set minimum version of pki-ca to 9.0.3-30 and add to Requires(pre)
    to pick up certmonger upgrade fix (#902474)
  - Update anonymous access ACI to protect secret attributes (#902481)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.3-2
changelog:
  - Merge evdev 2.7.3 from F18 (#835225)
  - Restore RHEL6.x middle mouse button emulation default (auto)
  - Restore RHEL6.x lid patch to re-scan xrandr outputs
  - Disable smooth scrolling, no client stack support


author: Adam Jackson <ajax@redhat.com> 6.9.3-4
changelog:
  - Disable EXA and DRI, use ShadowFB by default, and don't gratuitously disable
    Render when using ShadowFB. (#860676)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.2-7
changelog:
  - Merge from F18 (#835257)
    - disable xorg.conf, enable HAL files instead
    - disable smooth scrolling
    - disable coasting by default to maintain RHEL6.0 behavior


author: Adam Jackson <ajax@redhat.com> 2.3.2-4
changelog:
  - vesa-2.3.0-no-virt-shadowfb.patch: Don't bother with a shadowfb on known
    virtual machine GPUs, it won't help. (#795686)


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-79
changelog:
  - Scan for virtio disks
    Resolves: rhbz#814014
  - Let user specify efi boot disk as root
    Resolves: rhbz#737732
  - Pass hig order bits to EFI system map and memory map
    Resolves: rhbz#825054


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-16
changelog:
  - Fixes Bugzilla Bug #769906 - mod_nss insists on Required value
    NSSCipherSuite not set. (mod_nss-proxyvariables.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-17
changelog:
  - Fixes Bugzilla Bug #816394 - [RFE] Provide Apache 2.2 support for TLS v1.1
    via NSS through mod_nss . . .
  - Bumped version build/runtime requirements for NSPR and NSS


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-18
changelog:
  - Fixes Bugzilla Bug #835071 - [RFE] Support ability to share mod_proxy with
    other SSL providers (w/jorton, nkinder, & rcritten)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-29
changelog:
  - initialize NSS with no database if the selected database is broken (#772642)
  - use NSS_InitContext() to avoid a collision with OpenLDAP (#738456)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-30
changelog:
  - print reason phrase from HTTP status line on error (#676596)
  - fix typo in curl.1 man page (#729984)
  - introduce the --delegation option of curl (#730445)
  - enforce versioned libssh2 dependency for libcurl (#741935)
  - nss: select client certificates by DER (#746629)
  - fix a build failure when building against newer libssh2-devel (#841905)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-33
changelog:
  - SCP: send large files properly with new enough libssh2 (#879592)
  - fix handling of errors returned from libssh2 when sending data (#873789)


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.0.1.el6]
changelog:
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.356.el6
changelog:
  - kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
  - Resolves: bz#907397
    (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)


author: Than Ngo <than@redhat.com> - 6:4.3.4-6
changelog:
  - Resolves: bz#608007, "Show menu bar" is always checked
  - Resolves: bz#729307, not possible to set default konsole size


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-50:.1
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Stephan Wiesand <stephan wiesand desy de> 1.6.1-113.SLx
changelog:
  - added patch 1077 to fix buffer overflows (from 1.6.2 release)
  - added a purgecache action to the client init script (Pat Riehecky)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.136.1.pre4.SLx
changelog:
  - pseudo pre4 - has gerrit 8912, 8937, 8940, 8939, 8945, + bos.patch
  - this could be 1.6.2 final
  - require /sbin/modprobe, not modutils (SL7/FC18)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.137.1.pre4.SLx
changelog:
  - update to current head of 1.6.x (a15c406) + gerrit 9895, 8750 + bos patch
  - updated CellServDB to latest from grand.central.org (Jan 28, 2013)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.138.1.pre4.SLx
changelog:
  - the actual pre4, downloaded from grand.central.org, + bos.patch
  - adapted client init script to changed ifconfig output on F18 (->EL7)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.141.SLx
changelog:
  - (untested, unfinished)
  - use our own script for dealing with "weak updates", don't patch weak-modules
  - use different paths, don't interfere with weak-modules
  - new subpackage for the script: module-tools (license), require from kmods
  - script is run from scripts and triggers in the kmods
  - no longer provide kabi-mods
  - added a purgecache action to the client init script (Pat Riehecky)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.144.SLx
changelog:
  - do some more work in modules script
  - print debug output from kmod scripts if variable "verbose" is set


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27.2
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Don't dim the screen by default on battery power -- it was never a
    good default, and we're doing this a different way in GNOME 3.
  - Resolves: #912270


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-26.el6_4
changelog:
  - Significant decrease in migration performance. (#908308)
  - ipa-client-install failed to fall over to replica with master down (#909161)
  - During Migration - If Schema is unavailable migration fails (#908400)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.2
changelog:
  - Missing LDAP schema attributeType and objectClass after upgrade (#916535)
  - ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
    correctly and crash (#917065)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Access gnome bridge jar is forced to have 644 permissions
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911525


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el6.2
changelog:
  - Added nss support (see 831733)
    -added  enable_nss variable, set to true - 1 as default
    -added and applied if enable_nss true patch108 java-1.7.0-openjdk-aes-buffering.patch
    -added and applied if enable_nss true patch109 java-1.7.0-openjdk-nss-config-1.patch
    -added and applied if enable_nss true patch111 java-1.7.0-openjdk-nss-config-2.patch
    -added and applied if enable_nss true patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - openjdk-nss-config-2.patch, is dynamically modified after build time and is
    changing build dependence (nss last) to runtime depndecne (nss first)
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#871771


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Disabled nss - enable_nss set to 0
  - Resolves: rhbz#895034


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.2.el6
changelog:
  - Unapplied but kept (for 2.3revert) patch110,  java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch
  - Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch
  - Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch
  - NSS enabled by default - enable_nss set to 1
  - rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch
  - rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch
  - Resolves: rhbz#831734


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el6
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.2
changelog:
  - kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
  - kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
  - Resolves: bz#910841
    (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768833


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915379


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-12
changelog:
  - Resolves: Bug 910994 - PamConfig schema not updated during upgrade
  - Resolves: Bug 910995 - Valgrind reports memleak in modify_update_last_modified_attr
  - Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
  - Resolves: Bug 911467 - DNA: use event queue for config update only at the start up
  - Resolves: Bug 911468 - Error messages encountered when using POSIX winsync
  - Resolves: Bug 911469 - dse.ldif is 0 length after server kill or machine kill
  - Resolves: Bug 911474 - Invalid chaining config triggers a disk full error and shutdown
  - Resolves: Bug 914305 - ns-slapd segfaults while trying to delete a tombstone entry
  - Resolves: Bug 913228 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.1.1.el6]
changelog:
  - [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
  - [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
  - [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
  - [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
  - [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
  - [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
  - [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
  - [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
  - [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
  - [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
  - [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
  - [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
  - [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
  - [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
  - [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
  - [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
  - [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
  - [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
  - [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
  - [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
  - [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
  - [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
  - [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
  - [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.22.1.el6]
changelog:
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862903 862904] {CVE-2012-4461}
  - [fs] fuse: optimize __fuse_direct_io() (Brian Foster) [865305 858850]
  - [fs] fuse: optimize fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] fuse: use get_user_pages_fast() (Brian Foster) [865305 858850]
  - [fs] fuse: pass iov[] to fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] mm: minor cleanup of iov_iter_single_seg_count() (Brian Foster) [865305 858850]
  - [fs] fuse: use req->page_descs[] for argpages cases (Brian Foster) [865305 858850]
  - [fs] fuse: add per-page descriptor <offset, length> to fuse_req (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_do_ioctl() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_perform_write() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_readpages() (Brian Foster) [865305 858850]
  - [fs] fuse: categorize fuse_get_req() (Brian Foster) [865305 858850]
  - [fs] fuse: general infrastructure for pages[] of variable size (Brian Foster) [865305 858850]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [scsi] have scsi_internal_device_unblock take new state (Frantisek Hrbata) [878774 854140]
  - [scsi] add new SDEV_TRANSPORT_OFFLINE state (Chris Leech) [878774 854140]
  - [kernel] cpu: fix cpu_chain section mismatch (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: Don't modify cpusets during suspend/resume (Frederic Weisbecker) [876090 852148]
  - [kernel] sched, cpuset: Drop __cpuexit from cpu hotplug callbacks (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: adjust when cpu_active and cpuset configurations are updated during cpu on/offlining (Frantisek Hrbata) [876090 852148]
  - [kernel] cpu: return better errno on cpu hotplug failure (Frederic Weisbecker) [876090 852148]
  - [kernel] cpu: introduce cpu_notify(), __cpu_notify(), cpu_notify_nofail() (Frederic Weisbecker) [876090 852148]
  - [fs] nfs: Properly handle the case where the delegation is revoked (Steve Dickson) [846840 842435]
  - [fs] nfs: Move cl_delegations to the nfs_server struct (Frantisek Hrbata) [846840 842435]
  - [fs] nfs: Introduce nfs_detach_delegations() (Steve Dickson) [846840 842435]
  - [fs] nfs: Fix a number of RCU issues in the NFSv4 delegation code (Steve Dickson) [846840 842435]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.23.1.el6]
changelog:
  - [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916956 915135]
  - [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915582 876600]
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [913074 912074] {CVE-2013-0871}
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909158 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908735 905126]


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.7-1
changelog:
  - I18N update. (dgoodwin@redhat.com)
  - Add test case for entitlement certs with no products (alikins@redhat.com)
  - Fix problem with subscribing to products with no product certs
    (alikins@redhat.com)
  - Remove unneeded for loop around getProduct (alikins@redhat.com)
  - Fix typo in partially valid syslog message (jbowes@redhat.com)
  - 733042: Update default rhsm.conf values for production. (dgoodwin@redhat.com)
  - 732499: Fix redeem command error handling. (dgoodwin@redhat.com)
  - Move the project to the public zanata server (bkearney@redhat.com)
  - implement red/yellow/green for the cli (jesusr@redhat.com)
  - Add 'partially valid' status to syslog and nag icon (jbowes@redhat.com)
  - Add a debugging cli arg to rhsmd to force a signal (jbowes@redhat.com)
  - Group All Available subscriptions by stack id (mstead@redhat.com)
  - Add stacking_id grouping to Subscription Assistant (mstead@redhat.com)
  - Update man page. (bkearney@redhat.com)
  - Refactor facts to use the cache manager logic. (dgoodwin@redhat.com)
  - Fix "import" cli with no certs (alikins@redhat.com)
  - Upload info about the installed products on the system. (dgoodwin@redhat.com)
  - Add "partially valid entitlement coverage" status to top-left sm-gui icon.
    (cduryee@redhat.com)
  - Aligned stacking id up with other subscription properties.
    (mstead@redhat.com)
  - Display My Subscriptions as a tree grouped by stacking_id.
    (mstead@redhat.com)
  - Created a MappedTreeStore implementation. (mstead@redhat.com)
  - Created StackingGroupSorter class to sort entitlements into groups based on
    stacking_id (mstead@redhat.com)
  - Make the environemnt output look like all the others (bkearney@redhat.com)
  - Client-side changes for healing (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.8-1
changelog:
  - Fix issues with list --installed/consumed with deletion of certs
    (alikins@redhat.com)
  - Display a dialog box when subscription import was successful.
    (cduryee@redhat.com)
  - In the mysubs tab, title stacked groups by product name (jbowes@redhat.com)
  - Removed icons for virt/phys machines and replaced with text column
    (mstead@redhat.com)
  - 730018: Update for new registered with rhn classic msg (jbowes@redhat.com)
  - 717629: Clear user credentials on registration dialog after register/cancel
    (mstead@redhat.com)
  - 717405: Return to credentials dialog after cancelled registration.
    (mstead@redhat.com)
  - 733658: Check if directory exists before listing files. (mstead@redhat.com)
  - Correction to config command remove logic. Changes for List Formatting and
    Messages. (wpoteat@redhat.com)
  - Support "yellow" icon for partially covered products (cduryee@redhat.com)
  - Make cert_sorter show valid/partially_valid/unentitled mutually exclusive
    (alikins@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.9-1
changelog:
  - 734880: Handle bundled certs in the installed produict status.
    (bkearney@redhat.com)
  - Center the machine type column header. (mstead@redhat.com)
  - Move quantity column to the end. (mstead@redhat.com)
  - Center the Arch column header (mstead@redhat.com)
  - Center tree view table properties. (mstead@redhat.com)
  - Add '* Click to Adjust Quantity' label to places allowing editable
    subscription quantity. (mstead@redhat.com)
  - managerlib was expecting a single ent_cert, but we return a list
    (alikins@redhat.com)
  - Add the coverage tool detritus to .gitignore (alikins@redhat.com)
  - Only autoheal when required (cduryee@redhat.com)
  - 735226: Importing should fail without a valid key and cert
    (bkearney@redhat.com)
  - Add a "refresh" method to cert_sorter (cduryee@redhat.com)
  - Double click or button press (enter, return, space) on row will
    expand/collapse row. (mstead@redhat.com)
  - Update to All Available Subscriptions tab to put stacked subscriptions under
    parent node. (mstead@redhat.com)
  - Display subscription assistant's subscriptions as a tree. (mstead@redhat.com)
  - Add a require_connection callback to commands (bkearney@redhat.com)
  - 730020: Change the help text to show that config can list or set changes
    (bkearney@redhat.com)
  - New icons for red/green (cduryee@redhat.com)
  - Add virt_only attribute to subscription detail pane (cduryee@redhat.com)
  - Use server side consumer autoheal flag. (dgoodwin@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.10-1
changelog:
  - 706853: Do not perform local cleanup if unregister server call fails
    (mstead@redhat.com)
  - 737684: replace through with until in sub assistant (jbowes@redhat.com)
  - 739796: replace certificate column with status (jbowes@redhat.com)
  - 736784: Incorrect use of sys.exit in option checking (wpoteat@redhat.com)
  - 738549: Allow subscription-manager to run without dbus (jbowes@redhat.com)
  - 739714: Fix typo in the clean help text (bkearney@redhat.com)
  - 736424: list --installed only shows installed products (alikins@redhat.com)
  - 718045: Registration dialog remains open on invalid credentials.
    (mstead@redhat.com)
  - 642660: [First Boot] Disable 'Back' button once registered and on
    subscription-manager screen (RHEL6) (mstead@redhat.com)
  - 739595: [Fistboot] Ensure the credentials screen is reset on FB module
    initialization. (mstead@redhat.com)
  - 739227: make healFrequency non-mandatory (cduryee@redhat.com)
  - Applying "indent -linux -pcs -psl -ci8 -cs -cli8 -cp0" to codebase.
    (cduryee@redhat.com)
  - 738549: remove dbus dependency in post/postun steps (cduryee@redhat.com)
  - 737841: Handle dates beyond 2038 on 32-bit systems. (dgoodwin@redhat.com)
  - 707641: CLI auto-subscribe tries to re-use basic auth credentials.
    (wpoteat@redhat.com)
  - 712047: yum prints non-error messages when running in quiet mode
    (cduryee@redhat.com)
  - 736784: Subscription-manager config --remove add config property to rhsm.conf
    if it doesn't exist. (wpoteat@redhat.com)
  - Update translations (bkearney@redhat.com)
  - 735338: Subscription Manager CLI tool does not allow unsubscribe when not
    registered. (wpoteat@redhat.com)
  - 735695: add support for multiple config "--remove" options via cli
    (cduryee@redhat.com)
  - 734606: ImportFileExtractor now creates cert/key files based on serial number
    of the cert. (mstead@redhat.com)
  - 736166: move certs from subscription-manager to python-rhsm
    (cduryee@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.13-1
changelog:
  - 743082: don't show stale subscriptions after autosub (jbowes@redhat.com)
  - 740773: Do not delete certs if we have repo metadata errors
    (alikins@redhat.com)
  - 742416: Remove the close button from our progress dialog (jbowes@redhat.com)
  - 742013: sub-mgr translations not showing up in firstboot (cduryee@redhat.com)
  - 742425: Extra strings are in the translation files (bkearney@redhat.com)
  - 742473: Extra strings are in the Korean translations (bkearney@redhat.com)
  - 742027: Certificate status does not account for rhn classic
    (cduryee@redhat.com)
  - 741563: Wrapped Type column name in gettext (mstead@redhat.com)
  - 741863: Made the date box larger. (mstead@redhat.com)
  - 741850: Properly wrapped with gettext. (mstead@redhat.com)
  - 741293: Ensure that blank gpg urls do not have the baseurl prepended to them
    (bkearney@redhat.com)
  - 741857,741820: Fixed issue where i18n was not being loaded before constants,
    causing untranslated text (mstead@redhat.com)
  - 737553: Change criteria for system.entitlements_valid comsumer fact
    (wpoteat@redhat.com)
  - 725535: check that fopen was successful before writing to timestamp
    (cduryee@redhat.com)
  - 740675: do a condrestart on rhsmcertd when we upgrade subscription-manager
    (cduryee@redhat.com)
  - 741335: Fix a date comparison bug for healing. (dgoodwin@redhat.com)
  - 740877: autosubscribe output was showing ver instead of status
    (alikins@redhat.com)
  - 741335: heal for today and future (jesusr@redhat.com)
  - 740046: Change entitlement match to product hash for date detection
    (wpoteat@redhat.com)
  - 730020: Change if error logging to stderr (wpoteat@redhat.com)
  - 740831: set subscribe button insensitive if nothing is selected
    (alikins@redhat.com)
  - 692242: rhsm_icon disappears and will not return (cduryee@redhat.com)
  - Pull in the latest translations from zanata (bkearney@redhat.com)
  - 720022: Update man page for new command line options (bkearney@redhat.com)
  - 740046: Ensure common behavior on dates between CLI and GUI
    (wpoteat@redhat.com)
  - 688454: On error, set DatePicker's date to the previously accepted date.
    (mstead@redhat.com)
  - 733873: disable proxy options for cert import command (cduryee@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.14-1
changelog:
  - 743732: French and Chinese Usage strings were incomplete
    (bkearney@redhat.com)
  - 743732: typo in the as.po file caused the entire language to be dropped
    (bkearney@redhat.com)
  - 744110: Fuzzy strings from translation tool are visibile in the UI
    (bkearney@redhat.com)
  - 742128: Newlines in strings cause the Usage line in help to not be
    translated. (bkearney@redhat.com)
  - 737145: prevent whitespace from building up in redhat.repo
    (jbowes@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.15-1
changelog:
  - 744536: handle unicode and plain str types passed to systemExit
    (alikins@redhat.com)
  - 744136: workaround date parsing problems in some locales (alikins@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.16-1
changelog:
  - 742013: Fix for translations in firstboot (alikins@redhat.com)
  - 692242: subscription-manager does not force a dbus status check when certs
    are updated (cduryee@redhat.com)
  - 717654: subscription-manager lock file should be created with the correct
    label (awood@redhat.com)
  - 746257: update activationkey man page example (jbowes@redhat.com)
  - 737145: remove successive newlines on write (jbowes@redhat.com)
  - 694450: Updated chinese string which was incorrect (bkearney@redhat.com)
  - 743704: Fix healing date issues. (dgoodwin@redhat.com)
  - 580905: include help documentation for the gui (jbowes@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.17-1
changelog:
  - 747024: restore previous behaviour for unhandled exceptions
    (alikins@redhat.com)
  - 747630: fit allsubs tab in firstboot for verbose locales (jbowes@redhat.com)
  - 747630: use shorter strings for 'Entitlement Platform Registration'
    (jbowes@redhat.com)


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts at
    the same time
    - use numeric protocol ids instead of protoent structs.
  - Resolves: rhbz#921147


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts
    at the same time
    - correct patch name in spec file.
  - Related: rhbz#921147


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.1
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#908836)
  - schema: Make the cpuset type reusable across schema files (rhbz#908836)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
  - capabilities: Add additional data to the NUMA topology info (rhbz#908836)
  - test: Add support for thread and core information for the test driver (rhbz#908836)
  - xen: Initialize variable before using (rhbz#908836)
  - xen: Actually fix the uninitialized variable (rhbz#908836)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913624)
  - qemu_agent: Ignore expected EOFs (rhbz#915344)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
  - qemu: Destroy domain on decompression binary error (rhbz#915347)
  - qemu: Run lzop with '--ignore-warn' (rhbz#915347)
  - Don't ignore return value of qemuProcessKill (rhbz#915353)
  - Fix race condition when destroying guests (rhbz#915353)
  - Log warning if storage magic matches, but version does not (rhbz#915354)
  - Add lots of debugging to storage file probing code (rhbz#915354)
  - Fix probing of QED file format (rhbz#915354)
  - util: Add virendian.h macros (rhbz#915354)
  - util: Use new virendian.h macros (rhbz#915354)
  - storage: Rearrange functions (rhbz#915354)
  - storage: Prepare for refactoring (rhbz#915354)
  - storage: Refactor metadata lookup (rhbz#915354)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
  - storage: Test backing chain traversal (rhbz#915354)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
  - qemu: Add checking in helpers for sgio setting (rhbz#919504)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
  - qemu: Fix the memory leak (rhbz#919504)
  - Fix crash changing CDROM media (rhbz#919504)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
  - qemu: Fix QMP detection of QXL graphics (rhbz#915352)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
  - conf: Add optional attribte primary to video <model> element (rhbz#915352)
  - qemu: Use newer -device video device in qemu commandline (rhbz#915352)
  - tests: Add one -device video device testcase (rhbz#915352)
  - qemu: Detect VGA_QXL capability correctly (rhbz#915352)
  - qemu: Support ram bar size for qxl devices (rhbz#915352)
  - conf: Don't leak 'primary' video property on error (rhbz#915352)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
  - storage: Cleanup logical volume creation code (rhbz#918754)
  - docs: Clarify semantics of sparse storage volumes (rhbz#918754)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
  - locking: Resolve resource leaks on non error path (rhbz#922095)
  - selinux: Resolve resource leak using the default disk label (rhbz#922095)
  - storage: Resolve resource leaks with cmd processing (rhbz#922095)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
  - storage: Need to add virCommandFree() (rhbz#922095)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.1
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917909, CVE-2012-1016)


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.2
changelog:
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos
  - Fix the NVR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.3
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.4
changelog:
  - Resolves: rhbz#911298 - sssd: simple access provider flaw prevents intended
                             ACL use when client to an AD provider


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915692 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915692 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915692 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-16
changelog:
  - Fix a GCC warning for looser throw specifier in
    boost::exception_ptr::~exception_ptr.
    (boost-1.41.0-exception_ptr.patch)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.1
changelog:
  - revert to polling for unknown filesystems, update
    known fs for tail and stat based on coreutils-8.21 (#924711)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.24.1.el6]
changelog:
  - [fs] NFS: Don't allow NFS silly-renamed files to be deleted, no signal (Frantisek Hrbata) [920264 905095]
  - [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920267 916324]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.25.1.el6]
changelog:
  - [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911266 887006]
  - [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [923850 913704]
  - [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921960 896224]
  - [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921960 896224]
  - [mm] fix potential anon_vma locking issue in mprotect() (Andrea Arcangeli) [924838 858389]


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-13
changelog:
  - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)
  - Resolves: Bug 929111 - Coverity issue 13091
  - Resolves: Bug 929196 - Deadlock in DNA plug-in (ticket 634)
  - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 929115 - crash in aci evaluation (ticket 628)
  - Resolves: Bug 923240 - unintended information exposure when anonymous access is set to rootdse (ticket 47308)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-14
changelog:
  - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-15
changelog:
  - Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half.  (Ticket 47385)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-17
changelog:
  - Resolves: Bug 970995 - DS not shutting down when disk monitoring threshold is reached to half. (Ticket 47385)
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold. (ticket 47427)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.18
changelog:
  - Bump version to 1.2.11.15-18
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 2). (ticket 47427)
  - Resolves: Bug 987850 - Disk Monitoring not checking filesystem with logs (ticket 47741)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.19
changelog:
  - Bump version to 1.2.11.15-19
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 3). (ticket 47427)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.19
changelog:
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 4). (ticket 47427)
  - Patch was not added


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.20
changelog:
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 5 limits not displayed correctly). (ticket 47427)


author: Martin Stransky <stransky@redhat.com> - 17.0.8-3
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4:.1
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: httpd-spec_sl_index.html.sl.patch
  -->  The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Ran Regex: vstring Red Hat => vstring Scientific Linux
  -->  This package must not feature TUVs branding
  - Ran Regex: distro Red Hat => distro Scientific Linux
  -->  This package must not feature TUVs branding
  - Added Source: httpd-sl_index.html.sl.patch
  -->  This patch removes TUV branding from the default index.html
  - Added Source: httpd.ini
  -->  Config file for automated patch script
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-0
changelog:
  - Updated to latest ustream release of 1.2 branch - 1.2.3
   - Security Updates
    - CVE-2013-1927, RH884705 - fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
   - Plugin
    - PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch 0- icedtea-web-PR1161.patch
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-1
changelog:
  - fixed postun - removal of alternatives for plugin restricted to 
    (correct) removal process only
  - fixed date in changelog previous entry
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-2
changelog:
  - Added (temporally!) posttrans forcing creation of symlinks
    - should be removed next release
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.58.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.60.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.62.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973129


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.13
changelog:
  - removed upstreamed  patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.13
  - Resolves: rhbz#992909


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - removed useless runtests parts
  - included also java.security.old files
  - Resolves: rhbz#1017618


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.68.1.11.14
changelog:
  - updated to icedtea6-1.11.14.tar.gz
  - added and applied 1.11.14-fixes.patch, patch10 to fix build issues
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - Resolves: rhbz#1017618


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.8.1.el6
changelog:
  - Added and applied patch 116 - patch 116 rh905128-non_block_ciphers.patch
  - Added and applied patch 117 - patch 117 java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
   - to enable handleStartupErrors = ignoreMultipleInitialisation in icedtea 2.3
  - Restorered removed nss support
  - Fixed java-1.7.0-openjdk-nss-config-{1,2} patches to be valid for icedtea 2.3.x
  - enable_nss switch to 0 - disabled
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.8.2.el6
changelog:
  - Added latest Fedora spec changes
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - classes.jsa marked as ghost on full path
    - see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
  - nss.cfg was marked as config(noreplace)
  - Add symlink to default soundfont (see 541466)
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.9.0.el6
changelog:
  - updated to IcedTea  2.3.9 with latest security patches
  - buildver sync to b19
  - rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.1.el6
changelog:
  - updated to updated IcedTea  2.3.9 with fix to one of security fixes
    -  fixed font glyph offset
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.el6
changelog:
  - Updated to latest IcedTea7-forest 2.3.10
  - patch 107 renamed to 500 for cosmetic purposes
  - improved handling of patch111 - nss-config-2.patch
  - removed patch 117, java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
    duplicated with patch 108 (java-1.7.0-openjdk-nss-icedtea-e9c857dcb964)
  - Added client/server directories so they can be owned
  - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.el6
changelog:
  - added patch1000 MBeanFix.patch to fix regressions caused by security patches
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.3.el6
changelog:
  - removed upstreamed patch1000 MBeanFix.patch
  - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
  - Resolves: rhbz#973119


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.25-2.3.10.4.el6
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.3.el6:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - Related: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.0.el6
changelog:
  - security update to 2.3.13
  - adapted java-1.7.0-openjdk-disable-system-lcms.patch (and redeclared to 105)
  - removed bootstrap
  - fixed nss
  - fixed buildver and updatever (Set to 25,30)
  - moved to xz compression of sources
  - all patches moved correctly to prep
  - added patch404 tck20131015_1.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.1.el6
changelog:
  - removed useless  patch404 tck20131015_1.patch
  - added patch405 tck20131015_2.patch, to resolve one of tck failures
  - added patch406 tck20131015_3.patch, to resolve one of tck failures
  - added patch407 tck20131015_4.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.2.el6
changelog:
  - updated to newer security tarball of 2.3.13
  - removed patch405 tck20131015_2.patch, no longer necessary to fix tck failures
  - removed patch406 tck20131015_3.patch, no longer necessary to fix tck failures
  - removed patch407 tck20131015_4.patch, no longer necessary to fix tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.3.el6
changelog:
  - added back patch404 tck20131015_1.patch, to resolve one of tck failures
  - added back patch405 tck20131015_2.patch, to resolve one of tck failures
  - added back patch406 tck20131015_3.patch, to resolve one of tck failures (modified)
  - added back patch407 tck20131015_4.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.1.el6
changelog:
  - sync with rhel 6.5 to icedtea 2.4 because of pernament tck failures
   - nss kept disabled
  - Resolves: rhbz#1017626


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.4.1.el6]
changelog:
  - [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [921150 913704]
  - [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921961 896224]
  - [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921961 896224]
  - [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920268 916324]
  - [powerpc] pseries: Fix partition migration hang in stop_topology_update (Steve Best) [921963 910597]
  - [infiniband] qib: correction for faulty sparse warning correction (Jay Fenlason) [922154 901701]
  - [usb] io_ti: Fix NULL dereference in chase_port() (Nikola Pajkovsky) [916198 916200] {CVE-2013-1774}
  - [net] bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Nikola Pajkovsky) [914690 914691] {CVE-2013-0349}
  - [char] tty: set_termios/set_termiox should not return -EINTR (Oleg Nesterov) [921145 904907]
  - [netdrv] ehea: fix VLAN support (Steve Best) [921535 911359]
  - [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919388 919389] {CVE-2013-1826}
  - [net] dccp: check ccid before NULL poiter dereference (Weiping Pan) [919187 919188] {CVE-2013-1827}
  - [mm] tmpfs: fix use-after-free of mempolicy object (Nikola Pajkovsky) [915714 915715] {CVE-2013-1767}
  - [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916957 915135]
  - [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915583 876600]
  - [fs] cifs: after upcalling for krb5 creds, invalidate key rather than revoking it (Niels de Vos) [912452 885899]
  - [fs] cifs: tmp_key_invalidate() should not set key->expiry to 0 (Niels de Vos) [912452 885899]
  - [block] disable discard request merge temporarily (Mike Snitzer) [911475 907844]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.5.1.el6]
changelog:
  - [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [921958 883905]
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_auth() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [fs] nls: improve UTF8 -> UTF16 string conversion routine (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [fs] fat: Fix stat->f_namelen (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [netdrv] tun: fix ioctl() based info leaks (Thomas Graf) [922350 922351] {CVE-2012-6547}
  - [virt] x86: Add a check to catch Xen emulation of Hyper-V (Andrew Jones) [923204 918239]
  - [fs] cifs: fix expand_dfs_referral (Sachin Prabhu) [923098 902492]
  - [fs] cifs: factor smb_vol allocation out of cifs_setup_volume_info (Sachin Prabhu) [923098 902492]
  - [fs] cifs: have cifs_cleanup_volume_info not take a double pointer (Sachin Prabhu) [923098 902492]
  - [fs] nfs: Dont allow NFS silly-renamed files to be deleted, no signal (Dave Wysochanski) [920266 905095]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.6.1.el6]
changelog:
  - [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
  - [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
  - [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
  - [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
  - [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
  - [net] sunrpc: Get rid of the redundant xprt->shutdown bit field (J. Bruce Fields) [915579 893584]
  - [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
  - [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
  - [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
  - [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
  - [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.8.1.el6]
changelog:
  - [fs] raw: don't call set_blocksize when not changing the blocksize (Jeff Moyer) [951406 909482]
  - [x86] Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [952570 876275]
  - [netdrv] ixgbe: Only set gso_type to SKB_GSO_TCPV4 as RSC does not support IPv6 (Michael S. Tsirkin) [927292 908196]
  - [netdrv] bnx2x: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] qlcnic: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] ixgbe: fix gso type (Michael S. Tsirkin) [927292 908196]
  - [fs] gfs2: Allocate reservation structure before rename and link (Robert S Peterson) [924847 922999]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.9.1.el6]
changelog:
  - [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
  - [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
  - [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
  - [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
  - [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
  - [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
  - [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
  - [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
  - [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
  - [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
  - [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
  - [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
  - [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
  - [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
  - [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
  - [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
  - [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
  - [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
  - [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
  - [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
  - [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
  - [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
  - [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
  - [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
  - [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
  - [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
  - [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.10.1.el6]
changelog:
  - [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
  - [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
  - [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
  - [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
  - [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
  - [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
  - [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
  - [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
  - [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
  - [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
  - [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
  - [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
  - [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
  - [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
  - [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
  - [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
  - [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
  - [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
  - [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
  - [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.11.1.el6]
changelog:
  - [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.12.1.el6]
changelog:
  - [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
  - [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
  - [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
  - [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
  - [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
  - [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
  - [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.13.1.el6]
changelog:
  - [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
  - [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
  - [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
  - [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
  - [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
  - [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [963564 886420]
  - [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [963564 886420]
  - [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [963564 886420]
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
  - [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
  - [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
  - [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
  - [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
  - [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
  - [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
  - [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
  - [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
  - [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
  - [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
  - [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
  - [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
  - [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.15.1.el6]
changelog:
  - [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
  - [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
  - [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
  - [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
  - [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
  - [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
  - [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.16.1.el6]
changelog:
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559]
  - [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
  - [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
  - [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.17.1.el6]
changelog:
  - [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
  - [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
  - [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.18.1.el6]
changelog:
  - [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
  - [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
  - [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
  - [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
  - [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
  - [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
  - [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
  - [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
  - [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
  - [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
  - [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
  - [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
  - [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
  - [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
  - [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
  - [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
  - [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
  - [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
  - [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.19.1.el6]
changelog:
  - [fs] gfs2: Reserve journal space for quota change in do_grow (Robert S Peterson) [988384 976823]
  - [netdrv] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [995458 988460]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [996014 987426]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.20.1.el6]
changelog:
  - [fs] nfs: Add functionality to allow waiting on all outstanding reads to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Ensure that NFS file unlock waits for readahead to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Convert nfs_get_lock_context to return an ERR_PTR on failure (Dave Wysochanski) [996424 976915]
  - [x86] thermal: Disable power limit notification interrupt (Shyam Iyer) [999328 908990]
  - [x86] thermal: Delete power-limit-notification console messages (Shyam Iyer) [999328 908990]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.21.1.el6]
changelog:
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1000314 947275]
  - [net] sctp: Fix list corruption resulting from freeing an association on a list (Jiri Pirko) [1002184 887868]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.22.1.el6]
changelog:
  - [x86] Round the calculated scale factor in set_cyc2ns_scale() (Prarit Bhargava) [1001954 975507]
  - [x86] sched: Fix overflow in cyc2ns_offset (Prarit Bhargava) [1001954 975507]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.23.1.el6]
changelog:
  - [md] raid1, raid10: use freeze_array in place of raise_barrier in various places (Jes Sorensen) [1003765 997845]
  - [scsi] megaraid_sas: megaraid_sas driver init fails in kdump kernel (Nikola Pajkovsky) [1001963 833299]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (Nikola Pajkovsky) [988228 876778]
  - [net] bridge: Add multicast_querier toggle and disable queries by default (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Fix fatal typo in setup of multicast_querier_expired (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Restart queries when last querier expires (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Add br_multicast_start_querier (Flavio Leitner) [995334 905561]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1006932 1002765]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [1006956 998752]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [993547 867689]
  - [net] bridge: do not call setup_timer() multiple times (Amerigo Wang) [997746 994430]
  - [fs] lockd: protect nlm_blocked list (David Jeffery) [993544 967095]
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Jiri Benc) [987649 987651] {CVE-2013-4162}
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988708 981741]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988708 981741]
  - [fs] cifs: fix issue mounting of DFS ROOT when redirecting from one domain controller to the next (Sachin Prabhu) [994866 976535]
  - [fs] nfs: Make nfs_readdir revalidate less often (Scott Mayhew) [994867 976879]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Scott Mayhew) [994867 976879]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Scott Mayhew) [994867 976879]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Scott Mayhew) [987262 983288]
  - [fs] nfs: fix a leak at nfs_lookup_revalidate() (Dave Wysochanski) [987261 975211]
  - [acpi] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [993547 867689]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [993547 867689]
  - [acpi] Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [993547 867689]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [997745 952012]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [997745 952012]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [997745 952012]
  - [net] bridge: Replace mp->mglist hlist with a bool (Amerigo Wang) [997745 952012]
  - [mm] fadvise: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages (Larry Woodman) [994140 957821]
  - [net] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1003931 955712]
  - [virt] xen-netfront: reduce gso_max_size to account for max TCP header (Andrew Jones) [1004657 957231]
  - [pps] Fix a use-after free bug when unregistering a source (Jiri Benc) [997916 920155]
  - [scsi] fnic: Fix SGEs limit (Chris Leech) [991346 829506]


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-145.SLx
changelog:
  - 1.6.5 security release addressing openafs-sa-2013-0003 and -0004
  - see SECURITY.txt for important info on how to actually secure your site
  - just updating to this build is *not* sufficient


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.2
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950342)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.5
changelog:
  - daemon: Fix leak after listing volumes (CVE-2013-1962)
  - Don't try to add non-existant devices to ACL (rhbz#958837)
  - Avoid spamming logs with cgroups warnings (rhbz#958837)
  - audit: Properly encode device path in cgroup audit (rhbz#958839)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.6
changelog:
  - qemu: Set correct migrate host in client_migrate_info (rhbz#966587)
  - qemu: Fix crash in migration of graphics-less guests. (rhbz#966587)
  - Fix F_DUPFD_CLOEXEC operation args (rhbz#966707)
  - cgroup: Be robust against cgroup movement races (rhbz#966710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.7
changelog:
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#966587)
  - qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#966587)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.9
changelog:
  - qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976543)
  - build: Fix build with -Werror (rhbz#976543)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.10
changelog:
  - qemu: Avoid leaking uri in qemuMigrationPrepareDirect (rhbz#984578)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#984578)
  - conf: Don't fail to parse <boot> when parsing a single device (rhbz#1003934)
  - Plug leak in virCgroupMoveTask (rhbz#984556)
  - Fix invalid read in virCgroupGetValueStr (rhbz#984561)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.12
changelog:
  - Introduce APIs for splitting/joining strings (rhbz#1006265)
  - Rename virKillProcess to virProcessKill (rhbz#1006265)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006265)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006265)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006265)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006265)
  - Include process start time when doing polkit checks (rhbz#1006265)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.3
changelog:
  - util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
  - security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
  - security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
  - libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
  - security_manager.c: Append seclabel iff generated (rhbz#928879)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.4
changelog:
  - rpc: Fix client crash when server drops connection (rhbz#950601)
  - storage: Fix volume cloning for logical volume. (rhbz#950604)
  - qemu: Allow migration over IPv6 (rhbz#950597)
  - qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
  - remote: Don't call NULL closeFreeCallback (rhbz#950599)
  - libvirt: Increase connection reference count for callbacks (rhbz#950599)
  - virsh: Unregister the connection close notifier upon termination (rhbz#950599)
  - virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
  - virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
  - rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
  - tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
  - Avoid use of free'd memory in auto destroy callback (rhbz#951073)
  - Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)


author: Dave Airlie <airlied@redhat.com> 9.0-0.8
changelog:
  - CVE-2013-1872: memory corruption oob read/write on intel (#963063)
  - CVE-2013-1993: interger overflows in protocol handling (#961613)


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871814


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901381


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953084


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-2
changelog:
  - Update to NSPR_4_9_5_RTM
  - Resolves: rhbz#927186 - Rebase to nspr-4.9.5
  - Add upstream URL for an existing patch per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado - 3.12.9-12
changelog:
  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#927158 - rebase nss-softokn to 3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#927171 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.3
changelog:
  - kvm-Fix-regression-introduced-by-machine-accel.patch [bz#929105]
  - Resolves: bz#929105
    ([RHEL6.4] [regression] qemu-kvm does not enable ioeventfd)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.4
changelog:
  - kvm-virtio-balloon-fix-integer-overflow-in-BALLOON_CHANG.patch [bz#958750]
  - Resolves: bz#958750
    (QMP event shows incorrect balloon value when balloon size is grater than or equal to 4G)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.5
changelog:
  - kvm-e1000-fix-link-down-handling-with-auto-negotiation.patch [bz#907716]
  - kvm-e1000-unbreak-the-guest-network-when-migration-to-RH.patch [bz#907716]
  - kvm-reimplement-error_setg-and-error_setg_errno-for-RHEL.patch [bz#957056]
  - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch [bz#957056]
  - kvm-qga-distinguish-binary-modes-in-guest_file_open_mode.patch [bz#957056]
  - kvm-qga-unlink-just-created-guest-file-if-fchmod-or-fdop.patch [bz#957056]
  - Resolves: bz#907716
    (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
  - Resolves: bz#957056
    (CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode [rhel-6.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.6
changelog:
  - kvm-qga-cast-to-int-for-DWORD-type.patch [bz#980758]
  - kvm-qga-remove-undefined-behavior-in-ga_install_service.patch [bz#980758]
  - kvm-qga-diagnostic-output-should-go-to-stderr.patch [bz#980758]
  - kvm-qa_install_service-nest-error-paths-more-idiomatically.patch [bz#980758]
  - kvm-qga-escape-cmdline-args-when-registering-win32-service.patch [bz#980758]
  - Resolves: bz#980758
    (qemu-kvm: CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path [rhel-6.4.z])


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979300


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979300


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: xorg-x11-server.ini
  -->  Config file for automated patch script
  - Added Source: xorg-x11-server-SPEC-remove-TUV.patch
  -->  Redirect support requests to SL
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes


author: Martin Stransky <stransky@redhat.com> - 17.0.9-2
changelog:
  - Added patch for rhbz#983488 - Resizing window changes window
    size to 0 with third party window manager.


author: Martin Stransky <stransky@redhat.com> - 17.0.6-4
changelog:
  - Added a workaround for rhbz#961687 - Prelink throws message 
    "Cannot safely convert .rel.dyn' section from REL to RELA"


author: Ian Kent <ikent@redhat.cem> - 5.0.5-75.el6_4
changelog:
  - bz1006163 - Race condition or other deadlocking issue on expire code path
    - expire thread use pending mutex.
  - Resolves: rhbz#1006163


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #982610


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-49.2
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts
  - libgfs2: check return code of rename
  - libgfs2: Correct error message in mtab update code
  - libgfs2: Set umask before calling mkstemp
  - gfs2_grow: report bad return codes on error
    Resolves: rhbz#1001504


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.2
changelog:
  - fix parsing of field regression in sort command
    (introduced between RHEL5 and RHEL6 upstream) (#963327)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15.1
changelog:
  - Resolves: rhbz#929101

  - Put handle to hdb in dispatch on unknown message (rhbz#929101)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#929101)
  - Properly check result of coroipcc_dispatch_put (rhbz#929101)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#929101)
  - coroipcs: Ensure rb data are not overwritten (rhbz#929101)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#929101)
  - Properly lock pending_semops (rhbz#929101)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#929101)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.1
changelog:
  - Add 0168-RHBZ-988704-fix_cli_resize.patch
    * deal with resize happening while path device is being removed.
  - Resolves: bz #988704


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.2
changelog:
  - Add 0169-RHBZ-993545-rw-change.patch
    * reload a readonly multipath device if a path device has become
      read/write
  - Resolves: bz #993545


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-5
changelog:
  - Make .modulespath a config file (bug #918540)
  - Do not replace modified profile.d scripts (bug #953198)
  - Remove use of test command in csh alias (bug #929007)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-6
changelog:
  - Call test command in csh alias by its full path (bug #929007)
  - Correctly preserve the target file that the config symlink points to
    (this change makes the previous fix for bug #953198 whole)


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-2
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2964, bug #727016).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-3
changelog:
  - Too few arguments for format in a debugging string (bug #726385).
  - Fixed perl installation locations for build (bug #661770).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 954300).


author: Patsy Franklin <pfrankli@redhat.com> - 2.12.1.107.3
changelog:
  - Consistantly MANGLE/DEMANGLE function pointers and
      fix use after free in dcigettext.c (#989558).


author: Ray Strode <rstrode@redhat.com> 2.28.3-24.1
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #994868


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Daiki Ueno <dueno@redhat.com> - 1.3.0.20100329-5
changelog:
  - Add workaround for the race of XIM client and IBUS_ENGINE_PREEDIT_COMMIT
  - Fix bug 965554 - ibus-hangul may not handle key event after focus change


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-3
changelog:
  - added patch1 b25-appContextFix.patch to make it run with future openjdk
  - rmeoved posttrans
  - Resolves: rhbz#975426


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-4
changelog:
  - improved patch1 b25-appContextFix.patch to make it run with future openjdk better
  - Resolves: rhbz#975426


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.3
changelog:
  - client installation fails with anonymous binds set to rootdse (#952741)
  - LDAP upload CA cert sometimes double-encodes the value (#964128)
  - wrong trust argument assigned to renewed certs in ipa cert automatic
    renew (#964130)


author: Baoquan He <bhe@redhat.com> -2.0.0-258.1
changelog:
  - kexec-tools: Map network devices based on MAC address
  - kexec-tools: Allow mkdumprd modules blacklist to be overwritten by extra_modules


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.4
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#978312)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.5
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #1000313)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.6
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #1002179)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.1
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#951402)
  - Need to initialize domain->type to UNKNOWN (rhbz#951402)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.2
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1009117)
  - Update spec file to more closely match upstream
  - Uninstall open-pegasus-specific providers from sfcb.eml (rhbz#833633)
  - Don't install open-pegasus' specific providers (rhbz#859122)
  - Fixed dates in changelog


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.15
changelog:
  - network: Allow <vlan> in type='hostdev' networks (rhbz#1014445)
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1017196)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#1017194)
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1017198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1017198)


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-17
changelog:
  - fix #841520 - do not try to change owner of log if it is not needed
  - fix #848131 - fix bad umask value while creating temp file
  - fix #920030 - set SELinux context before compress files creation
  - fix #922169 - remove temp files on error
  - fix #847338 - do not overwrite create directive value by ACL setting
  - fix #847339 - fix race condition between fchmod and acl_set_fd


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-37.1
changelog:
  - Add support for fence device attributes
    Resolves: rhbz#969328
  - Add support for missing fence devices
    Resolves: rhbz#996423


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-9.el6_4.1
changelog:
  - Fix alignment of PV data area if detected alignment less than 1 MB (2.02.74).
  - Give precedence to EMC power2 devices with duplicate PVIDs


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.1
changelog:
  - Z-Stream fix
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Fix problem with IMSM RAID5 not rebuilding after reboot
  - Resolves bz958024, bz960612


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.2
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1001493


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.3
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1009243


author: <jsafrane@redhat.com> - 1:5.5-44.4
changelog:
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.1
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#915336),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #915336


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.2
changelog:
  - add mssing sensor RDRs for the fan resource (#969003)
  - fix openhpi connection failures with redundant OAs (#969004)
  - fix segfaults when retrieving thermal info (#969005)
  - add missing thermal sensors (#969006)
  - Resolves: #969003, #969004, #969003, #969006


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#796014)
    (MotifZone bug #1552)
  - fixed use after free with comboboxes and XIM (rhbz#836892)
    (MotifZone bug #1559)


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21.1
changelog:
  - Resolves: #1013971 - Openswan does not support IKE Fragmentation extension
  - Resolves: #1013985 - Openswan does not support RFC2407 Notify Payload
  - Resolves: #1012736 - initial loading of CRL always fails on pluto startup
  - Resolves: #1012735 - crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: #1015810 - openswan does not allow SHA2 auth algorithms under FIPS


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21.2
changelog:
  - Resolves: #1013925 - Openswan does not fully establish IKE tunnel with modecfgclient disabled 
  - Resolves: #1013984 - NAT-T transport bug affects Openswan+L2TP connections with NATed clients


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested
    + Warn about node names containing a capital letter
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.1
changelog:
  - Update source tarball to revision: Pacemaker-1.1.10
    Resolves: rhbz#1016617
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details
  - Additional patches:
    + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
    + Fencing: Support agents that need the host to be unfenced at startup
    + Fix: crm_report: Collect corosync quorum data
    + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed
    + Fix: crmd: Prevent crash by passing log arguments in the correct order
    + Fix: pengine: Do not re-allocate clone instances that are blocked in the Stopped state
    + Fix: pengine: Do not allow colocation with blocked clone instances
    + Fix: pengine: Do not restart resources that depend on unmanaged resources
    + Fix: crmd: Prevent recurring monitors being cancelled due to notify operations


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.2
changelog:
  - Fix: xml: Location constraints are allowed to specify a role
  - Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
    Resolves: rhbz#1016617


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.3
changelog:
  - Log: crmd: Supply arguments in the correct order
  - Fix: Invalid formatting of log message causes crash
  - Fix: cman: Start clvmd and friends from the init script if enabled
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
  - Fix: crm_resource: Observe --master modifier for --move
  - Fix: cman: Do not start pacemaker if cman startup fails
  - Fix: Fencing: Observe pcmk_host_list during automatic unfencing
  - Remove unsupported resource agent
  - Provide a meaningful error if --master is used for primitives and groups
    Resolves: rhbz#1016617


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3.1
changelog:
  - fix saving of cache if some dependencies are unprelinkable and their                                            
    dependencies bad (#788238)                                                                                      
  - fix up DWARF4 DW_AT_data_member_location handling                                                               
  - add .debug_macro support                                                                                        
  - add DWZ multifile support


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.8-1
changelog:
  - no 'json' module in rhel5, use simplejson instead (alikins@redhat.com)
  - Adding plugin directory config option. (awood@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.9-1
changelog:
  - add note about check_path squashing '//' in paths (alikins@redhat.com)
  - normalizing path before checking (jsherril@redhat.com)
  - two new candlepin API methods (cduryee@redhat.com)
  - remove redundant \'s and slight formatting cleanup (alikins@redhat.com)
  - replace if "a == None" calls with if a is None (alikins@redhat.com)
  - Additional methods for working with owners (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.10-1
changelog:
  - Added core limit to entitlement object. (mstead@redhat.com)
  - Codestyle cleanup. (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.11-1
changelog:
  - Don't attach a question mark to the request if not necessary.
    (awood@redhat.com)
  - Sanitize consumerId input. (awood@redhat.com)
  - Add more test cases for Content.arches (alikins@redhat.com)
  - add 'arches' list of arches to Content object (alikins@redhat.com)
  - Add optional consumer to getPool. (awood@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.12-1
changelog:
  - Update the releasers with a 6.3 (bkearney@redhat.com)
  - 967566: Enhance the ssl bindings to expose the issuer. (bkearney@redhat.com)
  - Update the dist-git releasers (bkearney@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.17-1
changelog:
  - 997194: fix interpolation of default values (ckozak@redhat.com)
  - keep rhel-5.9, 5.10, 6.3, 6.4 releasers (jesusr@redhat.com)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.385.el6_4.7
changelog:
  - kvm-qcow2-Reinitialise-counter-when-restarting-alloc-r64.patch [bz#996151]
  - Resolves: bz#996151
    (qcow2 corruption bug in cluster allocation code)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.8
changelog:
  - kvm-ccid-card-emul-do-not-crash-if-backend-is-not-provid.patch [bz#965152]
  - kvm-ccid-make-backend_enum_table-static-const-and-adjust.patch [bz#965152]
  - kvm-ccid-declare-DEFAULT_ATR-table-to-be-static-const.patch [bz#965152]
  - kvm-libcacard-vscclient-fix-error-paths-for-socket-creat.patch [bz#965152]
  - kvm-libcacard-Use-format-specifier-u-instead-of-d-for-un.patch [bz#965152]
  - kvm-Spelling-fixes-in-comments-it-s-its.patch [bz#965152]
  - kvm-libcacard-Fix-unchecked-strdup-by-converting-to-g_st.patch [bz#965152]
  - kvm-libcacard-split-vscclient-main-from-socket-reading.patch [bz#965152]
  - kvm-libcacard-vscclient-to-use-QemuThread-for-portabilit.patch [bz#965152]
  - kvm-libcacard-teach-vscclient-to-use-GMainLoop-for-porta.patch [bz#965152]
  - kvm-libcacard-use-system-config-directory-for-nss-db-on-.patch [bz#965152]
  - kvm-libcacard-remove-sql-prefix.patch [bz#965152]
  - kvm-libcacard-remove-default-libcoolkey-loading.patch [bz#965152]
  - kvm-dev-smartcard-reader-nicer-debug-messages.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-remove-aborts-never-tr.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader-support-windows-guest.patch [bz#965152]
  - kvm-libcacard-change-default-ATR.patch [bz#965152]
  - kvm-hw-ccid-card-passthru.c-add-atr-check.patch [bz#965152]
  - kvm-ccid-card-passthru-dev-smartcard-reader-add-debug-en.patch [bz#965152]
  - kvm-usb-ccid-Drop-unused-CCIDCardInfo-callback-print.patch [bz#965152]
  - kvm-hw-usb-dev-smartcard-reader.c-define-structs-for-CCI.patch [bz#965152]
  - kvm-dev-smartcard-reader-change-default-protocol-to-T-0.patch [bz#965152]
  - kvm-dev-smartcard-reader-copy-atr-protocol-to-ccid-param.patch [bz#965152]
  - kvm-libcacard-vreader-add-debugging-messages-for-apdu.patch [bz#965152]
  - kvm-dev-smartcard-reader-empty-implementation-for-Mechan.patch [bz#965152]
  - kvm-libcacard-cac-change-big-switch-functions-to-single-.patch [bz#965152]
  - kvm-usb-smartcard-reader-Properly-NAK-interrupt-eps-when.patch [bz#965152]
  - kvm-uhci-Don-t-allow-the-guest-to-set-port-enabled-when-.patch [bz#965152]
  - kvm-usb-ccid-remote-wakeup-support.patch [bz#965152]
  - kvm-uhci-egsm-fix.patch [bz#965152]
  - Resolves: bz#965152
    (Smartcard emulation with Windows guest fails)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.9
changelog:
  - kvm-Fix-off-by-one-error-in-page_l1_map.patch [bz#996791]
  - Resolves: bz#996791
    (Off-by-one error in page_l1_map() can lead to out-of-bounds access)


author: David Vossel <dvossel@redhat.com> - 3.9.2-21-8
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#1001519


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)
    Resolves: #868905
  - Remove tog-pegasus requires
    Resolves: #745264


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-2.3
changelog:
  - Allow overriding values in macro scl_package (#960556)
  - Delete redundant argument from check_asprintf (#961424)
  - Enable all collections given as arguments, not just the first one (#961430)
  - Prevent collections to be enabled multiple times (#961429)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.6
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.9
changelog:
  - Resolves: #996020 - sssd fails instead of skipping when a sudo ldap
                        filter returns entries with multiple CNs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.10
changelog:
  - Resolves: #1003567 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.11
changelog:
  - Resolves: #1022708 - RHEL6 sssd upgrade restorecon workaround for
                         /var/lib/sss/mc context


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-10.1
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#971698)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#976217)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.2-10.1
changelog:
  - Disable driver-based resolutions scaling on ABI 18.1 (#1012816)
  - Conflict with X server's that don't provide the proper scaling (#1012816)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-21
changelog:
  This patch is found broken and duplicated.  Getting rid of it in 1.2.11.15-22.
    commit 2b3a50d55707ffa281c922ec188850576b757934
    Author: Mark Reynolds <mreynolds@redhat.com>
    Date:   Tue Jul 23 10:28:45 2013 -0400
    Add patch 0049 for Tickets-47427-47441


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-22
changelog:
  - Bump version to 1.2.11.15-22
  - Resolves: Bug 923909 - 389-ds-base cannot handle Kerberos tickets with PAC (ticket 632)
  - Resolves: Bug 928159 - CVE-2013-1897 389-ds: unintended information exposure when rootdse is enabled
  - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47367)
  - Resolves: Bug 951616 - error syncing group if group member user is not synced (ticket 47327)
  - Resolves: Bug 953052 - DESC should not be empty as per RFC 2252 (ldapv3) (ticket 47376)
  - Resolves: Bug 957305 - DS instance crashes under a high load (ticket 47349)
  - Resolves: Bug 957864 - Simple paged results should support async search (ticket 47347)
  - Resolves: Bug 958522 - loading an entry from the database should use str2entry_fast (ticket 531)
  - Resolves: Bug 962885 - RHEL 6.2 to 6.4 ipa upgrade selinuxusermap data not replicating (ticket 47362)
  - Resolves: Bug 963234 - When integrating with Red Hat IDM/DS, an LDAP protocol error is thrown (ticket 47361)
  - Resolves: Bug 966781 - new ldap connections can block ldaps and ldapi connections (ticket 47359)
  - Resolves: Bug 968383 - Wrong error code return when using EXTERNAL SASL and untrusted certificate (ticket 580)
  - Resolves: Bug 968503 - flush_ber error sending back start_tls response will deadlock (ticket 47375)
  - Resolves: Bug 969210 - make listen backlog size configurable (ticket 47377)
  - Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half. (ticket 47385)
  - Resolves: Bug 971033 - connections attribute in cn=snmp,cn=monitor is counted twice (ticket 47383)
  - Resolves: Bug 971966 - 389 DS Replication failures due to Fractional updates (ticket 47386)
  - Resolves: Bug 972976 - ldbm errors when adding/modifying/deleting entries (ticket 47392)
  - Resolves: Bug 973583 - ns-slapd instance crashed with signal 11 SIGSEGV (ticket 47391)
  - Resolves: Bug 974361 - Account policy plugin fails to lock user when policy is created for individual users to lock based to createtimestamp. (ticket 47397)
  - Resolves: Bug 974719 - rhds90 crash on tombstone modrdn (ticket 47396)
  - Resolves: Bug 974875 - Attributes fail to be encrypted/decrypted properly when replicated (ticket 47393)
  - Resolves: Bug 975243 - DS9 still observes altStateAttrName as createTimestamp when attribute is removed from the account policy (ticket 47395)
  - Resolves: Bug 975250 - Changelog deadlock replication failures with DNA (ticket 47410)
  - Resolves: Bug 976546 - Attribute names are incorrect in search results (ticket 47402)
  - Resolves: Bug 979169 - allow setting db deadlock rejection policy (ticket 47409)
  - Resolves: Bug 979435 - Replication problem with add-delete requests on single-value (ticket 47424)
  - Resolves: Bug 979515 - CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold (ticket 47427)
  - Resolves: Bug 983091 - Memory leak in 389-ds-base 1.2.11.15 (ticket 47428)
  - Resolves: Bug 986131 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. (ticket 47435)
  - Resolves: Bug 986424 - fix recent compiler warnings (ticket 47378)
  - Resolves: Bug 986857 - Disk Monitoring not checking filesystem with logs (ticket 47441)
  - Resolves: Bug 987703 - memleaks in set_krb5_creds (ticket 47421)
  - Resolves: Bug 988562 - deadlock after adding and deleting entries (ticket 47449)
  - Resolves: Bug 989692 - Sorting with attributes in ldapsearch gives incorrect result (ticket 543)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-23
changelog:
  - Bump version to 1.2.11.15-23
  - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN
  - Resolves: Bug 1002260 - server fails to start after upgrade(schema error) (ticket 47318)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-24
changelog:
  - Bump version to 1.2.11.15-24
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold; Changed CONFIG_INT to CONFIG_LONG for nsslapd-disk-monioring-threshold (ticket 47427)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-25
changelog:
  - Bump version to 1.2.11.15-25
  - Resolves: Bug 1006846 - 2Master replication with SASL/GSSAPI auth broken (ticket 47523)
  - Resolves: Bug 1007452 - Under specific values of nsDS5ReplicaName, replication may get broken or updates (ticket 47489)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-26
changelog:
  - Bump version to 1.2.11.15-26
  - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47534)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-27
changelog:
  - Bump version to 1.2.11.15-27
  - Resolves: Bug 1013735 - CLEANALLRUV doesnt run across all replicas (ticket 47509)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-28
changelog:
  - Bump version to 1.2.11.15-28
  - Resolves: Bug 1016038 - Users from AD sub OU does not sync to IPA (ticket 47488)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-30
changelog:
  - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-17
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports MacroSurprise or SetuidMissingRELRO rhbz#812284
  - abrt missing dependency: libreport-plugin-bugzilla rhbz#828673
  - Same values for variables  'DumpLocation' & 'WatchCrashdumpArchiveDir'  stops mailx plugin rhbz#854668
  - abrt-vmcore repeats processing old vmcores on the service (re)start rhbz#885044
  - abrt-gui help menu item points to generic RHEL documentation rhbz#903195
  - Desktop file is named %{desk-vendor}-abrt.desktop rhbz#905822
  - 'post-create' on 'xxx' exited with 1 Corrupted or bad directory xxx, deleting rhbz#909617
  - abrt.pth prevents python virtualenv creation rhbz#912672
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - provide the python API for abrt rhbz#952704
  - abrtd marks problems having count > 1 as duplicates rhbz#886631
  - Resolves: #886631, #905429, #961231, #961231, #961231, #961231, #812284, #828673, #828673, #759443, #759443, #903195, #854668, #905822, #909617, #885044, #912672, #912672, #952704, #875260


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-19
changelog:
  - fixed problem with wrong kernel oops duplicates - rhbz#953813
  - updated translation rhbz#993564
  - Resolves: #953813


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-21
changelog:
  - updated translation (ko, po) #952773
  - added support for MCE errors rhbz#812537
  - Resolves: #812537, #952773


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.207-1
changelog:
  - Remove firmware from the boot image that does not apply to ppc64 (dcantrell)
    Resolves: rhbz#1006043
  - fcoe: adapt bnx2fc detection to changed sysfs path structure (rvykydal)
    Resolves: rhbz#1008731
  - Do not select FS packages over and over (vpodzime)
    Resolves: rhbz#994504
  - Check size of images/netboot/ppc64.img to see if it's larger than 32M.
    (dcantrell)
    Related: rhbz#1006043


author: David Cantrell <dcantrell@redhat.com> - 13.21.208-1
changelog:
  - Catch BUILDARCH set to 'ppc' or 'ppc64' when trimming down the image.
    (dcantrell)
    Related: rhbz#1014719
  - Move and fix the ppc64 image size check (dshea)
    Resolves: rhbz#1014719
  - Whitespace changes for mk-images.ppc (dshea)
    Related: rhbz#1014719


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.209-1
changelog:
  - Forced removal of some kernel modules in the ppc64 ramdisk (dcantrell)
    Resolves: rhbz#1014719
  - Add some more safety checks for the initrd.img size check on ppc64.
    (dcantrell)
    Related: rhbz#1014719


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.210-1
changelog:
  - Fix bootloader issues on s390x. (sbueno+anaconda)
    Resolves: rhbz#1008941
    Resolves: rhbz#875644
    Resolves: rhbz#894050


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.211-1
changelog:
  - Do not limit swap size to 10 % of disk space for hibernation (vpodzime)
    Resolves: rhbz#1003844
  - Fix the display of multipath devices (dshea)
    Related: rhbz#914637
    Resolves: rhbz#1007641
  - Fix traceback in s390x bootloader code. (sbueno+anaconda)
    Resolves: rhbz#1017068
  - Support bonding in %pre section (rvykydal)
    Resolves: rhbz#971961


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.212-1
changelog:
  - Fix getDiskPart for nvme devices (vpavlin)
    Resolves: rhbz#1018703
  - fcoe: rise fipvlan timeout to 100 (rvykydal)
    Resolves: rhbz#1009691
  - Revert "Check if disklabel is set (mkolman)"
    Resolves: rhbz#1007683
  - Check if disklabel is set (mkolman)
    Resolves: rhbz#1007683


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.213-1
changelog:
  - Remove manual call to recreate initrd if installing on iSCSI.
    (sbueno+anaconda)
    Resolves: rhbz#1007884
  - Some devices may not be present during kickstart parse, so when there is no
    match revert to previous behavior and just use the name as-is. (bcl)
    Resolves: rhbz#1014658


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-no-addons-recognize-sl.patch
  -->  Disables the check for the TUV addons during a DVD install
  - Added Patch: anaconda-scientific-linux-installclasses.patch
  -->  Add the Scientific Linux install classes
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes
  - Added Source: anaconda.ini
  -->  Config file for automated patch script


author: Matthew Barnes <mbarnes@redhat.com> - 1.30.0-1
changelog:
  - Rebase to 1.30.0 based on the Fedora 13 package.
  - Build with introspection disabled since glib-introspection is not
    avalable in rhel6.
  Resolves: #883027


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-4
changelog:
  - Rebase to Augeas 1.0.0
    resolves: rhbz#817753
  - Add dependency on libxml2-devel.
  - Remove all patches (all upstream and included in 1.0.0).
  - Print tests/test-suite.log when the tests fail.
  - Add fix for regression added in 1.0.0 (RHBZ#920609).
  - Fix tests/test-run.


author: Ian Kent <ikent@redhat.com> - 5.0.5-79
changelog:
  - bz982103 - default timeout is inconsistent in the configuration file
    /etc/sysconfig/autofs
    - improve timeout option description.
  - bz852327 - RFE: feature to dump automount maps in native file format
    - make dump maps check for duplicate indirect mounts.
    - fix dumpmaps multi output.
    - try and cleanup after dumpmaps.
    - teach dumpmaps to output simple key value pairs.
  - Resolves: rhbz#98210 rhbz#852327


author: Ian Kent <ikent@redhat.cem> - 5.0.5-80
changelog:
  - bz994296 - "autofs reload" causes automount to stop running when multiple
    maps are removed from auto.master
    - syncronize handle_mounts() shutdown.
  - bz994297 - Wildcard in nested mounts regression
    - fix wildcard multi map regression.
    - fix fix wildcard multi map regression.
  - Resolves: rhbz#994296 rhbz#994297


author: Ian Kent <ikent@redhat.cem> - 5.0.5-81
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - update automount(8) usage message also.
  - Related: rhbz#852327


author: Ian Kent <ikent@redhat.cem> - 5.0.5-82
changelog:
  - bz859078 - NFSv4 UDP packet sent during automounting
    - only probe specific nfs version when requested
  - Related: rhbz#859078


author: Ian Kent <ikent@redhat.cem> - 5.0.5-83
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - add missing "\n" to usage output.
  - Related: rhbz#852327


author: Ian Kent <ikent@redhat.cem> - 5.0.5-84
changelog:
  - bz1002896 - Race condition or other deadlocking issue on expire code path
    - expire thread use pending mutex.
  - Resolves: rhbz#1002896


author: Ian Kent <ikent@redhat.cem> - 5.0.5-85
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - add missing ">" to usage output.
  - Related: rhbz#852327


author: Ian Kent <ikent@redhat.cem> - 5.0.5-86
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - add missing ">" to man page.
    - handle path name when when given instead of only map name.
  - Related: rhbz#852327


author: Ian Kent <ikent@redhat.cem> - 5.0.5-87
changelog:
  - bz1004129 - automounter load balancing with replicated servers broken
    by whitespace patch
    - fix get_nfs_info() probe.
  - Resolves: rhbz#1004129


author: Ian Kent <ikent@redhat.cem> - 5.0.5-88
changelog:
  - bz996749 - segmentation fault in ber_memalloc_x function when running automount
    - fix crash due to thread unsafe use of libldap.
  - Resolves: rhbz#996749


author: Petr Spacek <pspacek redhat com> - 2.3-4
changelog:
  - update-policy with match type 'zonesub' lead to crash (#921167)
  - zones without idnsUpdatePolicy attribute produced error messages (#908780)


author: Martin Milata <mmilata@redhat.com> - 0.17-2
changelog:
  - Backport commit ec1bf395 that fixes several memory leaks
  - Backport abf036d5 that fixes a NULL dereference
  - Backport 6e0f49a3 that adds version to the manual page
  - Resolves: #803774, #903140, #905854


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-50
changelog:
  - gfs2_grow: report bad return codes on error
    Resolves: rhbz#886585
  - fsck.gfs2: fix misplaced directory leaf blocks (50 patches)
    Resolves: rhbz#902920


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-52
changelog:
  - fsck.gfs2: Handle multiple occurrences of one leaf in a directory hash table (6 patches)
    Resolves: rhbz#984085
  - fsck.gfs2: Don't rely on cluster.conf when rebuilding sb
    resolves: rhbz#985796


author: Chrissie Caulfield <ccaulfie@redhat.com> - 3.0.12.1-53
changelog:
  - ccs_tool: Fix example fence device in "ccs_tool create" help
    Resolves: rhbz#871603
  - libccs: don't use uninitialized value in xpathlite
    Resolves: rhbz#874538
  - qdiskd: change log level for an error message
    Resolves: rhbz#888318
  - fenced/dlm_controld/gfs_controld: use cluster_dead for corosync connections
    Resolves: rhbz#888857
  - gfs_controld: avoid mismatching messages with old cgs
    Resolves: rhbz#889564
  - cman|fenced: Fix node killing in case of a 2node cluster that suffers brief network out
    Resolves: rhbz#893925
  - config: fix cluster.conf man page to reflect correct syslog_facility default
    Resolves: rhbz#896191
  - qdiskd: Do not count missed updates from offline nodes
    Resolves: rhbz#920358
  - cman: create and destroy lockfile on restart
    Resolves: rhbz#982670


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-55
changelog:
  - Remove .patch from some patch tmp file names
  - gfs2_edit: Fix bug and add functions from upstream (6 patches)
    Resolves: rhbz#987508


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-57
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts (3 patches)
    Resolves: rhbz#996233


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-28
changelog:
  - Fix cluster-snmp module causes net-snmp to SEGV when told to reload
    Resolves: rhbz#888543
  - Fix modclusterd crashes with segfault in IPv4 only environment
    Resolves: rhbz#951470


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-2
changelog:
  * Also include 1.5.3 libraries so users of RHEL-6.5+ can run
    programs compiled on RHEL-6.2-
    Resolves: rhbz876315


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.5-2.5
changelog:
  - Forward-porting fixes from RHEL6.
  - Enlarge buffer used for formatting date in a string format.
  - Resolves: rhbz#891938.
  - Allow configuration of the maximum number of open files.
  - Resolves: rhbz#738967.


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-22
changelog:
  - wait for su child to prevent errorneous execution of some
    commands (#749679)
  - correct return values after signal termination (#889531)
    and propagation of child core dump info (#747592)
  - dd now accepts 'status=none' to suppress all
    informational output(#965654)
  - cut --output-delimiter option was ignored for multibyte
    locales (#867984)
  - remove redundant setpwent() and setgrent () syscalls
    from stat -U/-G to improve NIS performance (#911206)
  - date: deal correctly with invalid input with special
    characters (#960160)
  - dd: provide support for the conv=sparse (#908980)
  - su/runuser: clarify which envvars are preserved/initialized
    in -p/-m and -l help/man documentation (#967623)
  - du: properly detect bindmounts (#836557)
  - df: fix alignment of columns (#842040)
  - id,groups: fix correct group printing (#816708)
  - mv : replace empty directories in cross file
    system move (#980061)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-25
changelog:
  - pr -n no longer crashes when passed values >= 32.
    Also line numbers are consistently padded with spaces,
    rather than with zeros for certain widths. (#997537)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-29
changelog:
  - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various
    segmentation faults in sort, uniq and join(#1015019)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-16
changelog:
  - Resolves: rhbz#854216
  - Resolves: rhbz#877349
  - Resolves: rhbz#880598
  - Resolves: rhbz#881729
  - Resolves: rhbz#906432
  - Resolves: rhbz#907894
  - Resolves: rhbz#915490
  - Resolves: rhbz#915769
  - Resolves: rhbz#916227
  - Resolves: rhbz#922671
  - Resolves: rhbz#924261
  - Resolves: rhbz#947936
  - Resolves: rhbz#949491
  - Resolves: rhbz#959184
  - Resolves: rhbz#959189

  - If failed_to_recv is set, consensus can be empty (rhbz#854216)
  - merge upstream commit 81ff0e8c94589bb7139d89e573a75473cfc5d173 (rhbz#854216)
  - objdb: Don't read uninitialized memory in inc/dec (rhbz#880598)
  - merge upstream commit 0a11d261a361726703084897471608d9914e0548 (rhbz#880598)
  - log: Handle race in printf_to_logs and format_set (rhbz#881729)
  - merge upstream commit a282eeecb4899ec415f76442217836338edfbeec (rhbz#881729)
  - log: Avoid deadlock caused by previous commit (rhbz#881729)
  - merge upstream commit e69f322d52a967e19ac6cf4eba60c54fc64b1688 (rhbz#881729)
  - Handle colon in configuration file (rhbz#906432)
  - merge upstream commit c04af91ada3c4ca29643cad599ed5605f6bb10bd (rhbz#906432)
  - Handle unexpected closing brace in config file (rhbz#906432)
  - merge upstream commit 60a9f809c17d6cfe73c34263233dbf8e4677d6b5 (rhbz#906432)
  - Put handle to hdb in dispatch on unknown message (rhbz#922671)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#922671)
  - Properly check result of coroipcc_dispatch_put (rhbz#922671)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#922671)
  - Handle config file with service without name (rhbz#915769)
  - merge upstream commit 6b719961b36b3b780f2c9ff148aa2273872f8788 (rhbz#915769)
  - Move corosync exit semaphore initialization (rhbz#916227)
  - merge upstream commit b6aaa6e2af625467316e54e67a39c6327cf73cbc (rhbz#916227)
  - coroipcs: Ensure rb data are not overwritten (rhbz#922671)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#922671)
  - Properly lock pending_semops (rhbz#922671)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#922671)
  - cfg: When send_shutdown fails, clear shutdown_con (rhbz#924261)
  - merge upstream commit fd967b6db504b1fe6667da8ce8a141924e3914a9 (rhbz#924261)
  - cfgtool: Retry shutdown on CS_ERR_TRY_AGAIN (rhbz#924261)
  - merge upstream commit 3324d31819d359fae75d6f91a942fc84e3b9be23 (rhbz#924261)
  - totempg: Make iov_delv local variable (rhbz#907894)
  - merge upstream commit 3e3231375c29d562af050a48f18b301bf1cdca82 (rhbz#907894)
  - Fix race for sending_allowed (rhbz#907894)
  - merge upstream commit 94331b5e0226f985364ef0632fdf4d5f0d91d625 (rhbz#907894)
  - schedwrk: Set values before create callback (rhbz#907894)
  - merge upstream commit 7f00dcb548584911191f1e70483d4523c3ba1319 (rhbz#907894)
  - Remove exit thread and replace it by exit pipe (rhbz#907894)
  - merge upstream commit 9f8279a3f1853139e9bd472c23f905baf9298c32 (rhbz#907894)
  - totempg: Store and restore global variables (rhbz#907894)
  - merge upstream commit 5e6e1a000db8b066aff08b0649886e4ce07b843c (rhbz#907894)
  - Logsys: Ensure logging PID is really corosync (rhbz#915490)
  - merge upstream commit 830df013a853ffa7e9b49efb030ccc7920d2f683 (rhbz#915490)
  - fplay: Check minimum record size (rhbz#915490)
  - merge upstream commit ef63aae13945bd790e54181593561468426baca4 (rhbz#915490)
  - corosync-fplay: Check incorrect idx and cycle (rhbz#915490)
  - merge upstream commit d8761bae84c12285ef40426c0ad7f09f569c3d87 (rhbz#915490)
  - Improve handling of getpwnam_r() and getgrnam_r() (rhbz#947936)
  - merge upstream commit c3422128a45a2833103c8351e0adc84ba6c341be (rhbz#947936)
  - Detect big scheduling pauses (rhbz#949491)
  - merge upstream commit 7475db7102bf387cfcd16a65b0b0ace3e194bd4b (rhbz#949491)
  - Improve corosync-notifyd example (rhbz#877349)
  - merge upstream commit 614d897209c8d9d8b38bc583d0ce056a5d3445b6 (rhbz#877349)
  - Install sysconfig/corosync-notifyd in specfile (rhbz#877349)
  - merge upstream commit bc130cb10c4ec014829286ba61c0de544f82656d (rhbz#877349)
  - Free confdb message holder list on confdb exit (rhbz#959189)
  - merge upstream commit 013b4ba8ebdc089da76313d43b1454fe324d597b (rhbz#959189)
  - Handle SIGPIPE in req_setup_send (rhbz#959184)
  - merge upstream commit a9c4bbd9f10d9453730f71d8bd9a02ee8bcf2eed (rhbz#959184)
  - confdb: Make objdb_notify_dispatch preemptable (rhbz#959189)
  - merge upstream commit 0194e6455983947c9c496658b5d593c769e58bfe (rhbz#959189)
  - Lock sync_in_process variable (rhbz#907894)
  - merge upstream commit 460a495243b1ebb225e15c1757554ff625aca99e (rhbz#907894)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-17
changelog:
  - Resolves: rhbz#956739

  - Add timestamps to the Corosync black-box output (rhbz#956739)
  - merge upstream commit 3ede0352ea4a7ea71ebe16db59c0c7ad0a01f733 (rhbz#956739)


author: Neil Horman <nhorman@redhat.com> 1.1-2
changelog:
  - Removed set -m option from cpupower (bz 914623)
  - Added man pages for turbostat & perf policy (bz 886225)
  - Improved perf_poilcy usage (bz 886228)
  - Added check for root on energy_perf_poilcy (bz 886227)
  - Fixed crash when running cpufreq-bench as non-root (bz 886226)


author: Dave Anderson <anderson@redhat.com> - 6.1.0-4.el6
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1006622
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1017930
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1019483


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-9
changelog:
  - during spring DST change are jobs executed 61 times if they are set
    for 2:00 or 3:00 am.
  - 995089 - incorrectly running jobs when time difference is negative
  - cronie doesn't drop privileges before popen
  - adoptions at the crontab orphanage needed
  - config file permissions are world readable
  - 733697 - Service restart needlessly reports failure
  - 743473 - Confusing comments in /etc/cron.hourly/0anacron
  - 887859 - Incorrect example in anacrontab manpage
  - 990710 - cron disallows setting PATH via PAM
  - 985893 - do not use putenv
  - 985888 - cronie drops $LANG and never passes it on to jobs run
  - 829910 - random prefix in crontables for running jobs
  - 922829 - crond generating invalid emails 
  - 919440 - prevent new crond process when already running 
  - Resolves: rhbz#821046, rhbz#697485, rhbz#738232, rhbz#706979, rhbz#733697
  - Resolves: rhbz#743473, rhbz#887859, rhbz#990710, rhbz#985893, rhbz#985888
  - Resolves: rhbz#829910, rhbz#922829, rhbz#995089, rhbz#919440


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-16
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name
    (Resolves: #671460)
  - Set PAM_TTY and PAM_RHOST on PAM authentication (Resolves: #684789)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.65
changelog:
  - Add 0168-RHBZ-902585-fix-state-size.patch
  - Add 0169-RHBZ-895110-fix-params-size.patch
  - Add 0170-RHBZ-889441-fix-multipath.rules.patch
    * set multipath device link_priority on change events
  - Add 0171-RHBZ-904836-handle-other-sector-sizes.patch
    * handle non-512 byte GPT sector sizes
  - Add 0172-RHBZ-895110-fix-output-buffer.patch
    * make sure to allocate enough space to print the full list of multipath
      devices
  - Add 0173-RHBZ-889429-catch-early-uevents.patch
    * start up the uevent listening thread early, but don't start up the
      uevent servicing thread until after you configure
  - Add 0174-RHBZ-875199-null-vector-fix.patch
  - Add 0175-RHBZ-889987-detect_prio_fix.patch
    * make sure you can actually get the priority with ALUA before selecting it.
  - Add 0176-RHBZ-892292-listing-speedup.patch
    * don't get the wwid when you are just listing a device.
  - Add 0177-RHBZ-902593-multipath-c-manpage.patch
  - Add 0178-RHBZ-918825-kpartx-loop-devices.patch
    * remove tmp loopdev create by 'kpartx -l' in no partitions were found.
  - Add 0179-RHBZ-920448-bindings-fix.patch
    * try to find the smallest unused user friendly name
  - Add 0180-RHBZ-928831-check-dm-version-for-retain_hwhandler.patch
    * don't use retain_attached_hw_handler on kernels that don't support it.
  - Resolves: bz #875199, #889429, #889441, #889987, #892292, #902585
  - Resolves: bz #902593, #904836, #918825, #920448, #928831


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.66
changelog:
  - Modify 0179-RHBZ-920448-bindings-fix.patch
    * remove debug printing.
  - Add 0181-RHBZ-958091-check-for-erofs.patch
    * only retry loading a map read-only if the read/write load failed
      with EROFS
  - Add 0182-RHBZ-947798-rw-change.patch
    * add a new multipath.conf default keyword "reload_readwrite". If set
      to "yes", multipathd will listed to path device change events, and
      if they device has become read/write, it will reload the multipath
      device.
  - Add 0183-RHBZ-924924-replace_whitespace.patch
    * add a new multipath.conf default keyword "replace_wwid_whitespace".
      If set to "yes", multipath will add --replace-whitespace for devices
      That use the default getuid callout.
  - Add 0184-RHBZ-975676-fix_cli_resize.patch
    * deal with resize happening while path device is being removed.
  - Add 0185-RH-signal-waiter.patch
    * send waiter thread a signal to break out of waiting for dm events
  - Resolves: bz #958091, #947798, #924924, #975676


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.67
changelog:
  - Modify 0182-RHBZ-947798-rw-change.patch
    * Add documentation
  - Modify 0183-RHBZ-924924-replace_whitespace.patch
    * Add documentation
  - Add 0186-RHBZ-974129-delay_set_fast_io_fail.patch
    * fix issue with setting fast_io_fail_tmo past the old value of
      dev_loss_tmo
  - Resolves: bz #974129, #924924, #947798


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.68
changelog:
  - Modify 0172-RHBZ-895110-fix-output-buffer.patch
    * free buffer
  - Modify 0182-RHBZ-947798-rw-change.patch
    * don't access multipath device if it has been freed in setup_multipath
  - Add 0187-RH-fix-bad-derefs.patch
    * Fix places where we are dereferencing freed pointers
  - Resolves: bz #947798


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.69
changelog:
  - Add 0188-RH-add-all_devs.patch
    * Add new special "all_devs" devices identifier, that makes multipath
      update a the values on all devices
  - Add 0189-RHBZ-986767-blacklist-td-devs.patch
    * add td[a-z].* devices to the builtin blacklist
  - Add 0190-UPBZ-994277-handle-offline-states.patch
    * Handle "transport-offline" and "quiesce" path states
  - Add 0191-UPBZ-995251-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down
  - Resolves: bz #986767, #994277, #995251


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.70
changelog:
  - Modify 0185-RH-signal-waiter.patch
    * making the waiter threads exit correctly caused a race at shutdown.
  - Resolves: bz #996921


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.71
changelog:
  - Add 0192-RHBZ-916667-print-major-minor.patch
    * Make multipathd print major:minor on path and and remove events
  - Resolves: bz #916667


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72
changelog:
  - Add 0193-UPBZ-1011341-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.
  - Resolves: bz #1011341


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.6-1
changelog:
  - New upstream version 0.2.6; working around build system providing
    old boost-devel-1.41.0-17.el6_4 with constraints
    Resolves: #814790


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-2
changelog:
  - New upstream version 0.2.8 introducing cache_{check,dump,repair,restore}; missing patch
    Resolves: #1019217


author: Jiri Popelka - 12:4.1.1-35.P1
changelog:
  - various memory leaks in omapi (#978420)
  - Modify the reply handling in the server code to send to a specified port
    rather than to the source port for the incoming message. (#952126)
  - Multiple key statements in zone definition causes inappropriate error (#919221)
  - Make sure range6 is correct for subnet6 where it's declared (#902966)
  - Relay no longer crashes, when DHCP packet is received over interface
    without any IPv4 address assigned. (#863936)
  - Expose next-server DHCPv4 option to dhclient script. (#658855)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-15
changelog:
  - Enhance e2fsck detection of invalid extent trees (#922847)
  - Several filefrag fixes (#927541)
  - Clear errors stored in superblock by newer kernels (#895679)
  - Fix journal superblock error handling (#885083)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-18
changelog:
  - Fix e2fsck false positive when blocks exist past EOF (#994615)
  - Fix resize2fs shrink corruption when moving files with many extents (#873201)


author: Milan Crha <mcrha@redhat.com> - 3.2.6-4
changelog:
  - Rebuild against newer evolution-data-server.
  - Add patch to build break (include <bits/wordsize.h> where needed)
  Resolves: #973281


author: Jack Magne <jmagne@redhat.com>= 1.1.0-26
changelog:
  - Resolve bugs #981156 and #961582. One minor permissions issue, the other fix to malformed desktop file.


author: Milan Crha <mcrha@redhat.com> - 2.32.3-9.el6
changelog:
  - Add patch for RH bug #970013 (Disable IMAP+ QResync feature by default)
  - Add patch for RH bug #983031 (Google book saves other fax as business fax)
  - Add patch for RH bug #975409 (Custom alarm message for local calendars)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-10.el6
changelog:
  - Add patch for RH bug #950005 (Ignore cached zero-sized files)
  - Add patch for RH bug #983964 (Do calendar operations in a thread)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-28.el6
changelog:
  - Add patch for RH bug #1012399 (Fails to display task mail attachment)
  - Bump evolution-data-server version requirement (for RH bug #1009426)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-30.el6
changelog:
  - Update patch for RH bug #975409 (Custom message in alarm notification)
  - Add patch for RH bug #1014743 (Use system timezone has no effect)
  - Add patch for RH bug #1014677 (Search filter persists when changing folders)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-14.el6
changelog:
  - Add patch for RH bug #1009470 (evolution-ews crash when GAL not marked for offline sync)
  - Add patch for RH bug #1005888 (evolution-ews add 'no-alarm-after-start' calendar capability)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-10
changelog:
  - Add patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #906341 (Cannot create book/calendar)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-11
changelog:
  - Update patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #1017108 (Shorten delay of calendar open)


author: Petr Šabata <contyk@redhat.com> - 1.0.28-1
changelog:
  - Update to 1.0.28 (#829793)
  - Include a fix for #903099, destroying vports first to avoid a hang
  - Fix an old bogus date in the changelog


author: Petr Šabata <contyk@redhat.com> - 1.0.28-2
changelog:
  - Don't build on s390x (#693443)
  - Add a note to README about EL6 service already implementing the
    suggested function (#981062)
  - Use rtgenmsg when requesting RTM_GETLINK (#882139)


author: Marek Grac <mgrac@redhat.com> - 3.0.15-26
changelog:
  - fence_drac5: fix regression caused by missing detection of EOL
    Resolves: rhbz#905478
  - fence_vmware_soap: fix traceback when hostname cannot be resolved
    Resolves: rhbz#902404


author: Marek Grac <mgrac@redhat.com> - 3.0.15-27
changelog:
  - fence_ipmilan: Fix manual page to mention HP iLO3, iLO4
    Resolves: rhbz#872308
  - fence_cisco_ucs: Respect "delay" option
    Resolves: rhbz#896603
  - fence_scsi: Add "unfence" operation to manual page
    Resolves: rhbz#887349


author: Marek Grac <mgrac@redhat.com> - 3.0.15-28
changelog:
  - fence_scsi: Add delay option
    Resolves: rhbz#912773
  - fence_apc: Add support for firmware 5.x
    Resolves: rhbz#886614


author: Marek Grac <mgrac@redhat.com> - 3.0.15-29
changelog:
  - remove static parts from cluster schema templates
    Resolves: rhbz#917675
  - fence_cisco_ucs: agent did not respect login_timeout
    Resolves: rhbz#978325
  - fence_cisco_ucs: agent fail with traceback when hostname cannot be resolved
    Resolves: rhbz#978326
  - fencing: Validation if password/password_script or identity file is used was not processed
    Resolves: rhbz#959490
  - fence_scsi: support unfence action in pacemaker cluster
    Resolves: rhbz#978328


author: Marek Grac <mgrac@redhat.com> - 3.0.15-33
changelog:
  - fence_scsi: Fix error in XML metadata
    Resolves: rhbz#994186
  - fence_scsi: Add documention of "delay" into manual pages
    Resolves: rhbz#912773
  - fencing: Improve detection of EOL during login
    Resolves: rhbz#886614


author: Marek Grac <mgrac@redhat.com> - 3.0.15-34
changelog:
  - fence_cisco_ucs: Respect login timeout
    Resolves: rhbz#978325
  - fence_bladecenter: Telnet login failure
    Resolves: rhbz#997416


author: Marek Grac <mgrac@redhat.com> - 3.0.15-35
changelog:
  - fence_vmware_soap: Fix symlink vulnerability caused by python-suds temp directory
    Resolves: rhbz#1014000


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-1
changelog:
  - Rebase to upstream except changes in /etc/freeipmi/ config dir.
    preserving original locations.
  - 1.2.1:
  - Add ipmiseld daemon and subpackage.
  - Update paths for libfreeipmi changes.
  - Remove bmc-watchdog logrotate file.
  - 1.1.1:
  - Add contrib and ipmi-pet files.
  - Make main package own logdir.
  - 1.0.4:
  - Add pkgconfig files.
  - 0.9.0:
  - Add interpret sub-library.
  - Support new config files.
  - Support new ipmi_monitoring*.h files.
  - Support new manpages.
  - Support new compatability symlinks/manpages.
  - 0.8.0:
  - Update for dcmi.
  - Update for renaming of pef-config.
  - Update for new .h files.
  - Add new ipmimonitoring config manpages.


author: Soren Sandmann <ssp@redhat.com>
changelog:
  - Add two patches for the man page:
    - 0001-xfreerdp.1.xml-Don-t-claim-to-support-multiple-conne.patch
      Don't claim to support multiple connections, #988272
    - 0002-Replace-itemizedlist-s-with-variablelist-s.patch
      Work around a bug in RHEL 6 docbook, that causes <itemizedlist>
      to be mangled. This patch replaces them with <variablelist>s.


author: Soren Sandmann <ssp@redhat.com> - 1.0.2-2
changelog:
  - Add patch listing the plugins available in RHEL 6
    - 0003-List-plugins-available-in-RHEL-6.patch
    Related: #988272


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-4
changelog:
  - fix diagnostics reporting with digraphs (#906234)
  - handle %{, %| and %} in inline asm on multiple asm dialect
    targets as {, | and } rather than asm dialect separators (#908025)
  - fix ICE in build_zero_init_1 with va_list data member in a class
    (#921758, PR c++/56403)
  - ignore out of range registers in the unwinder (#959564, PR target/49146)
  - fix ICE in fold_stmt on debug stmts (#967003)


author: Ray Strode <rstrode@redhat.com> 2.30.4-45
changelog:
  - Fix smartcard crash if coolkey isn't installed
    Resolves: #953552
  - Forward port RHEL5 crasher/hang fixes
    Resolves: #874202


author: Ray Strode <rstrode@redhat.com> 2.30.4-50
changelog:
  - Quietly run headless if the X server isn't installed.
    Prevents warning on s390
    Resolves: #1006947


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.0-3
changelog:
  - Rebase to 2.26.0 based on the Fedora 14 package.
  - Retain glib-2.22.5-gio-hide-dot-mounts.patch
  - Drop all other patches.  Code patches were already merged into
    the 2.26.0 tarball, translation patches no longer apply.
  Resolves: #883021


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1 to pick up some additional bug fixes.
  - Remove 0001-message_to_write_data_free-Don-t-unref-data-message-.patch
    (included in 2.26.1).
  Resolves: #883021


author: Colin Walters <walters@redhat.com> - 2.26.1-3
changelog:
  - Explicitly disable systemtap for this rebase; I am not aware
    of a significant number of current users in upstream, and it
    has not to my knowledge been tested in RHEL6.
    Resolves: #1000287


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.123
changelog:
  - Backport GLIBC sched_getcpu and gettimeofday vDSO functions for ppc (#929302).
  - Fall back to local DNS if resolv.conf does not define nameservers (#928318).
  - Add systemtap probes to slowexp and slowpow (#905575).


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.132
changelog:
  - Revert the addition of gettimeofday vDSO function for ppc and ppc64 until
    OPD VDSO function call issues are resolved (#1026533).


author: Ray Strode <rstrode@redhat.com> 2.28.3-25
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #905935


author: Ray Strode <rstrode@redhat.com> 2.28.3-26
changelog:
  - Fix up fix-fade-on-nvidia patch from -19 to properly
    handle X servers that don't support setting gamma ramp.
    Resolves: #947671


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-82
changelog:
  - Disable the watchdog timer on EFI platforms
    Resolves: rhbz#911715
  - Add MACAPPEND command
    Resolves: rhbz#848628
  - Retry getting memory map and exit boot services on fail
    Resolves: rhbz#918824
  - Fixed regexps for matching devices in device.map and resolve symlinks
    when getting stats for block device
    Resolves: rhbz#928938
  - Remove grub.info when make clean is called to be sure that it is
    recreated with all changes.
    Resolves: rhbz#854652
  - Replace glibc-static with /usr/lib/libc.a in BuildRequires
    Resolves: rhbz#922705
  - If the title is too long, print remaining seconds to the new line
    Resolves: rhbz#851706
  - Recognize virtio-blk devices when running on OVMF
    Resolves: rhbz#916016


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-83
changelog:
  - Allocate size of struct instead of size of pointer
    Resolves: rhbz#1008305
  - Add support for NVMe to grub-install
    Resolves: rhbz#1017296


author: Matthew Barnes <mbarnes@redhat.com> - 2.20.1-2
changelog:
  - Rebase to 2.20.0 based on the Fedora 13 package.
  - Removed patches (merged into 2.20.0 tarball):
    0001-Avoid-spurious-notifications-from-GtkEntry.patch
    0001-Prevent-the-destruction-of-the-menu-label-on-page-re.patch
    0002-Yet-another-fix-for-shape-handling.patch
    allow-set-hint.patch
    filesystemref.patch
    gtk2-preview.patch
    gtk2-rotate-layout.patch
    o-minus.patch
    strftime-format.patch
  - Removed translation patches that no longer apply:
    gtk2-translations.patch
    gtk2-translations-gu.patch
  - Fixed conflicts in patches:
    gtk2-filechooser-empty-location.patch
    gtk2-filechooser-size-column-hiding-additional.patch
    gtk2-landscape-pdf-print.patch
    icon-padding.patch
    tooltip-positioning.patch
  Resolves: #883022


author: Milan Crha <mcrha@redhat.com> - 2.20.1-3
changelog:
  - Add patch for RH bug #970594 (a11y combo names not shown without string column in model)
  Resolves: #970594


author: Milan Crha <mcrha@redhat.com> - 2.20.1-4
changelog:
  - Add patch for RH bug #979049 (GtkTreeView: make tree expanding/collapsing more robust)
  Resolves: #979049


author: Milan Crha <mcrha@redhat.com> - 3.32.2-1.el6
changelog:
  - Rebase to 3.32.2
  - Remove patch for RH bug #588457 (part of rebase)
  - Remove patch for RH bug #590877 (part of rebase)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-2.el6
changelog:
  - Add patch for some issues found by Coverity scan
  - Add patch for RH bug #577797 (Cursor misplaced after paste)
  - Add patch for RH bug #615969 (Whitespaces drop on paste)
  - Add patch for RH bug #627199 (Underline/strikeout misplaced in printout)
  - Add patch for RH bug #626690 (Paragraph style not drawn after font style change)


author: Ryan O'Hara <rohara@redhat.com> - 1.4.24-1
changelog:
  - Rebase to upstream version 1.4.24.
    Resolves: rhbz#947987
  - Rewrite rules flaw can lead to arbitrary code execution (CVE-2013-1912).
    Resolves: rhbz#947701
  - Fix possible crash when using negative header occurrences (CVE-2013-2175).
    Resolves: rhbz#974263
  - Enable TPROXY support.
    Resolves: rhbz#921064


author: Tomas Hozza <thozza@redhat.com> - 0-0.10
changelog:
  - Fix segfault when cgred is running (#920032)
  - Fix errors found by static analysis of code (#965944)
  - Start hypervkvpd only if Hyper-V drivers are loaded (#962565)


author: Tomas Hozza <thozza@redhat.com> - 0-0.11
changelog:
  - Fix initscript test if Hyper-V drivers are loaded (#978300)
  - Build the daemon with full RELRO and PIE (#977861)


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Jiri Vanek <jvanek@redhat.com> 1.3.2-0
changelog:
  - Updated to icedtea-web 1.3.2 - see RHBZ 916161 for details
  - this update contains security fixes:
    - CVE-2013-1927, RH884705: fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
  -Common
    - Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized.
  - NetX
    - PR580: http://www.horaoficial.cl/ loads improperly
  - Plugin
     PR1260: IcedTea-Web should not rely on GTK
     PR1157: Applets can hang browser after fatal exceptio
  - and much more since 1.3, over 1.3.1
  - Resolves: rhbz#949095


author: Jiri Vanek <jvanek@redhat.com> 1.4-0
changelog:
  - Updated to 1.4
  - See announcement for detail
   - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-May/023195.html
  - Resolves: rhbz#916161


author: Jiri Vanek <jvanek@redhat.com> 1.4.1-0
changelog:
  - updated to 1.4.1
  - add icedtea-web man page
  - removed upstreamed  patch1 b25-appContextFix.patch
  - Resolves: rhbz#916161


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.39-1
changelog:
  - remount /proc to set attributes from fstab #984003
  - print something when arping is detecting colliding ip addresses
  - try dhcpv6 after v4 failed
  - Allow dhclient configuration files for DHCPv6 as well. (#815676)
  - ifdown: don't call nmcli on interface that is alread down
  - call flush addresses with scope global
  - init: inform users about .override files in .conf files
  - netfs: do not force NFS exports to be mounted before _netdev mounts
  - set net.ipv6.conf..autoconf in ifup-ipv6
  - mention rule6 files
  - securetty: check if the device is in the file before attempting to write to it
  - Process rule6-* for sit devices (#840009)
  - Killproc -d should parse same values as sleep
  - Make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - bonding: set master up before slaves
  - Fix greps to correctly handle comments and quotation (#915659)


author: Lukas Nykryn <lnykryn@redhat.com> - 9.03.40-1
changelog:
  - sync disks before halt (#1006294)
  - provide KVM guest count and limit info message (#1014731)
  - add ability to disable LVM activation on boot (#1015065)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-28.el6
changelog:
  - ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
    correctly and crash (#916209)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-29.el6
changelog:
  - ipa-client-install fails to autodiscover on LDAP servers with disabled
    anonymous access (#922843)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-30.el6
changelog:
  - LDAP upload CA cert sometimes double-encodes the value (#948928)
  - wrong trust argument assigned to renewed certs in ipa cert automatic
    renew (#952241)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-31.el6
changelog:
  - Require 389-ds-base >= 1.2.11.15-14 to pick up fix for CVE-2013-1897
    (#928162)
  - Password policy lockout plugin does not work as expected (#907881
  - Remove deprecated support of the HBAC source host (#924542)
  - ipa-client-install may not obtain CA certificate (#924004)
  - Allow client to re-enroll without first unenrolling (#924009)
  - Enrolling a host into may take two attempts (#950014)
  - Add userClass attribute for host objects (#955698)
  - Inconsistent replies from FreeIPA to Netlogon ping queries (#967870)
  - Performance improvement for IPA CLI and UI user and group related
    plugins (#970541)
  - Do not create /var/lib/ipa/pki-ca/publish, retain reference as
    ghost (#975431)
  - Add support for AD 2012 trusted domains (#980409)
  - XML-RPC server may return a wrong Content-Type (#976716)
  - Add missing openssh-clients Requires to ipa-server package (#983463)
  - Add an option to edit "Gecos" field from Web UI (#986211)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-37.el6
changelog:
  - group-add-member command reported wrong error on duplicates (#970541)
  - ipa-client installation succeeding in ipa server instance (#1011044)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-24
changelog:
  - Don't hang on rtnl_send() in a confined domain (#985526)
  - Run lnstat indefinitely if -c was not specified (#977845)
  - lnstat manpage SEE ALSO path fixes (#974694)
  - Document tc's force and batch options (#950122)
  - Fix include/linux/if_link.h to get in line with upstream again (#903228)
  - Add support for the IPv6 tokenized interface (#950400)
  - Handle ip-route rto_min parameters correctly (#859145)
  - Add VXLAN support (#929313, #908155)
  - Add mdb subcommand to bridge (#885977)
  - tc now supports the -OK option (#851371)


author: Petr Pisar <ppisar@redhat.com> - 2.6.32-29
changelog:
  - Document tc -OK option (#851371)
  - Document "bridge mdb" and "bridge monitor mdb" (#885977)
  - Document bridge unsupported features (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-31
changelog:
  - Removed the unsporrted features from the bridge(8) manpage and
    document bridge fdb replace (#929313)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-10
changelog:
  - New reload action for ip*tables services (rhbz#928812)
    It tries to reload the firewall rules from /etc/sysconfig/ip*tables. If this
    failes, it does not load the fallbacks and the old firewall rules are still
    there.
  - Use /lib*/xtables without version and not linked by alternatives again for 
    compatibility to older versions (rhbz#924362)
    The symlink for /lib*/xtables with the previous version will be cleaned up
    in a pre script.
  - Backport of --queue-bypass (rhbz#845435)
    Thanks to Florian Westphal and kay
  - Make ip*tables-save consistent to man page (rhbz#983198)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-11
changelog:
  - fixed shutdown hang if root filesystem is network based (rhbz#1007632)
    Thanks to Rodrigo A B Freire for the patch


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-3
changelog:
  - 831003 boot over VLAN support patches
  - 916007 replace iscsiuio with code merged upstream 0.7.8.1b
  - 884427 fix for db errors when vdsm creates static entries for
           target portals already setup through discovery
  - 983553 run target refresh in parallel so unreachable doesn't block others


author: Andy Grover <agrover@redhat.com> - 6.2.0.873-6
changelog:
  - Update bnx2i-vlan-boot-support.patch to check session != NULL
    before calling iscsi_sysfs_read_iface


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.58.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.60.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.62.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973130


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.11.90
changelog:
  - added patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.12
  - Resolves: rhbz#976897
  - Resolves: rhbz#983411


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.13
changelog:
  - removed upstreamed  patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.13
  - Resolves: rhbz#983411


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - removed useless runtests parts
  - included also java.security.old files
  - Resolves: rhbz#1017621


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.1.4.el6
changelog:
  - updated to icedtea 2.4.1
  - fsg.sh  moved form sources to repository
  - all (where applicable) usages of patch command replaced by patch macro
  - removed upstreamed  patch 401 657854-openjdk7.patch (see RH947731)
  - adapted patch 402 gstackbounds.patch - see (RH902004)
  - Resolves: rhbz#978423


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.60-2.4.2.0.el6
changelog:
  - updated to icedtea7-forest 2.4.2 + aprtial sync with fedoras
  - removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
  - renamed patch103 java-1.7.0-openjdk-arm-fixes.patch to 
  patch120: java-1.7.0-openjdk-freetype-check-fix.patch
  - adapted patch104 java-1.7.0-openjdk-ppc-zero-jdk.patch
  - adapted patch105 java-1.7.0-openjdk-ppc-zero-hotspot.patch
  - added patch404 RH661505-toBeReverted.patch, to be *reverted* during prep
  - added source12, TestCryptoLevel.java to ensure used crypto
  - ppc64 repalced by macro
  - buildver bumbed to 60
  - Resolves: rhbz#978423


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.2.1.el6
changelog:
  - buildver replaced by updatever
  - buildver reset to 60
  - updatever set to 40
  - added   JDK_BUILD_NUMBER=b`printf "%02d" buildver to make parameters
  - buildversion included in id
  - desktop icons extracted to text files
  - Resolves: rhbz#978423


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.0.el6
changelog:
  - security update to icedtea 2.4.3  (u45, b15)
  - removed unnecessary revert patch404: RH661505-toBeReverted.patch
  - get rid of unaplied patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - Resolves:rhbz#1017627


author: Rafael Aquini <aquini@redhat.com> [2.6.32-422.el6]
changelog:
  - [fs] fuse: drop dentry on failed revalidate (Brian Foster) [924014]
  - [fs] fuse: clean up return in fuse_dentry_revalidate() (Brian Foster) [924014]
  - [fs] fuse: use d_materialise_unique() (Brian Foster) [924014]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [876275]
  - [hid] pantherlord: heap overflow flaw (Radomir Vrbovsky) [1000435] {CVE-2013-2892}
  - [virt] hv: Correctly support ws2008R2 and earlier (Jason Wang) [1007341]
  - [powerpc] iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table() (Steve Best) [1012666]
  - [powerpc] Add isync to copy_and_flush (Steve Best) [1014475]
  - [block] rsxx: Kernel Panic caused by mapping Discards (Steve Best) [1013728]
  - [kernel] audit: avoid soft lockup due to audit_log_start() incorrect loop termination (Richard Guy Briggs) [990806]
  - [fs] nfsv4: Remove the BUG_ON() from nfs4_get_lease_time_prepare() (Steve Dickson) [1012688]
  - [netdrv] bnx2x: fix loss of VLAN priority information in received TPA-aggregated packets (Michal Schmidt) [1014694]
  - [fs] gfs2: garbage quota usage reported due to uninitialized inode during creation (Abhijith Das) [1008947]
  - [fs] nfs: fix filelayout_commit_call_ops (Scott Mayhew) [1012479]
  - [netdrv] igb: fix driver reload with VF assigned to guest (Stefan Assmann) [985733]
  - [md] Fix bio flags for md raid5 (Jes Sorensen) [837097]
  - [md] Fix bio flags for md raid10 (Jes Sorensen) [837097]
  - [scsi] qla4xxx: 5.03.00.00.06.05-k3 (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Support setting of local CHAP index for flash target entry (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Correct the check for local CHAP entry type (Chad Dupuis) [1011476]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.3p driver release (Rob Evers) [1012961]
  - [scsi] lpfc: Fixed function mode field defined too small for not recognizing dual-chute mode (Rob Evers) [1012961]
  - [net] Revert "net: more accurate skb truesize" (Francesco Fusco) [889181]
  - [net] fix multiqueue selection (Michal Schmidt) [1011939]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-423.el6]
changelog:
  - [kvm] pmu: add proper support for fixed counter 2 (Gleb Natapov) [1000956]
  - [kvm] vmx: do not check bit 12 of EPT violation exit qualification when undefined (Gleb Natapov) [1006139]
  - [kvm] vmx: set "blocked by NMI" flag if EPT violation happens during IRET from NMI (Gleb Natapov) [1006139]
  - [edac] Fix workqueue-related crashes (Aristeu Rozanski) [831127]
  - [edac] amd64_edac: Fix driver module removal (Aristeu Rozanski) [831127]
  - [md] raid5: BIO flags adjust (Jes Sorensen) [837097]
  - [md] Fix skipping recovery for read-only arrays (Jes Sorensen) [1014102]
  - [kernel] audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record (Richard Guy Briggs) [1009386]
  - [kernel] audit: log the audit_names record type (Richard Guy Briggs) [1009386]
  - [kernel] audit: add child record before the create to handle case where create fails (Richard Guy Briggs) [1009386]
  - [kernel] audit: format user messages to size of MAX_AUDIT_MESSAGE_LENGTH (Richard Guy Briggs) [1007069]
  - [netdrv] tg3: Expand led off fix to include 5720 (Ivan Vecera) [991498]
  - [netdrv] tg3: Don't turn off led on 5719 serdes port 0 (Ivan Vecera) [991498]
  - [netdrv] tg3: Fix UDP fragments treated as RMCP (Ivan Vecera) [991498]
  - [netdrv] tg3: Remove incorrect switch to aux power (Ivan Vecera) [991498]
  - [i2c] ismt: initialize DMA buffer (Neil Horman) [1014753]
  - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Neil Horman) [1014864]
  - [fs] gfs2: Fix race in iteration of glocks for unfreeze/umount (Abhijith Das) [999909]
  - [fs] gfs2: dirty inode correctly in gfs2_write_end (Benjamin Marzinski) [991596]
  - [x86] Mark Intel Atom Avoton processor as supported (Prarit Bhargava) [914842]
  - [mm] vmscan: fix zone shrinking exit when scan work is done (David Gibson) [985155]
  - [block] free bios when failing blk_execute_rq_nowait calls (Jeff Moyer) [1009312]
  - [netdrv] be2net: fix disabling TX in be_close() (Ivan Vecera) [951271]
  - [crypto] Fix race condition in larval lookup (Herbert Xu) [916361]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-424.el6]
changelog:
  - [block] loop: fix crash when using unassigned loop device (Mike Snitzer) [989795]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1014867]
  - [x86] microcode: Fix patch level reporting for AMD family 15h (Prarit Bhargava) [1014401]
  - [hda] alsa: enable switcheroo code in the snd-hda-intel driver (Jaroslav Kysela) [1013993]
  - [x86] reboot: Fix a warning message triggered by stop_other_cpus() (Jerome Marchand) [840710]
  - [kernel] async: Bump up the MAX_THREADS count for the async subsystem (Neil Horman) [1010666]
  - [pci] Calculate right add_size (Myron Stowe) [997672]
  - [netdrv] iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: pcie: add new SKUs for 7000 & 3160 NIC series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: enable shadow registers for 7000 (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: add new 7260 and 3160 series device IDs (Stanislaw Gruszka) [1013951]
  - [netdrv] be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd (Ivan Vecera) [1014360]
  - [netdrv] be2net: call ENABLE_VF cmd for Skyhawk-R too (Ivan Vecera) [1014360]
  - [netdrv] be2net: Fix to prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1014360]
  - [scsi] pm8001: Queue rotation logic for inbound and outbound queues (Rich Bono) [1013771]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.4p driver release (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock hang (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock inversion problem (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed inconsistent spin lock useage (Rob Evers) [1004841]
  - [scsi] qla2xxx: Update version number to 8.05.00.03.06.5-k2 (Chad Dupuis) [912652]
  - [scsi] qla2xxx: Fix request queue null dereference (Chad Dupuis) [912652]
  - [net] tcp: TSQ can use a dynamic limit (Jiri Pirko) [996802]
  - [net] tcp: TSO packets automatic sizing (Jiri Pirko) [996802]
  - [net] tcp: Apply device TSO segment limit earlier (Jiri Pirko) [996802]
  - [net] Allow driver to limit number of GSO segments per skb (Jiri Pirko) [996802]
  - [net] cleanups in RX queue allocation (Ivan Vecera) [1012388]
  - [net] Update kernel-doc for netif_set_real_num_rx_queues() (Ivan Vecera) [1012388]
  - [net] netif_set_real_num_rx_queues may cap num_rx_queues at init time (Ivan Vecera) [1012388]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-425.el6]
changelog:
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [974481] {CVE-2013-4299}
  - [watchdog] iTCO_wdt: add platform driver module alias (Neil Horman) [1019497]
  - [hda] alsa: disable 44.1kHz rate for Haswell HDMI/DP audio (Jaroslav Kysela) [831970]
  - [x86] Update UV3 hub revision ID (George Beshers) [1018962]
  - [fs] xfs: Don't reference the EFI after it is freed (Eric Sandeen) [1018469]
  - [security] keys: Fix a race between negating a key and reading the error set (Dave Wysochanski) [890231]
  - [fs] nfsv4: Ensure memory ordering between nfs4_ds_connect and nfs4_fl_prepare_ds (Jeff Layton) [1012439]
  - [fs] nfsv4: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails (Jeff Layton) [1012439]
  - [md] Disable TRIM on RAID5 for RHEL 6.5 (Jes Sorensen) [837097]
  - [md] raid5: BIO_RW_SYNCIO is a bit number, not a bitmask (Jes Sorensen) [837097]
  - [virt] hyperv: framebuffer pci stub (Gerd Hoffmann) [1013335]
  - [netdrv] bnx2x: add missing enum channel_tlvs definitions (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: KR2 disablement fix (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Specific Active-DAC is not detected on 57810 (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Generalize KR work-around (Michal Schmidt) [1015137]
  - [usb] usbnet: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [usb] cdc_ether: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [mm] Revert "Find_early_table_space based on ranges that are actually being mapped" (Rafael Aquini)
  - [mm] Revert "Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping" (Rafael Aquini)
  - [mm] Revert "Group e820 entries together and add map_individual_e820 boot option" (Rafael Aquini)
  - [net] bridge: update mdb expiration timer upon reports (Vlad Yasevich) [1013816]
  - [net] veth: Remove NETIF_F_HW_VLAN_RX capability (Thomas Graf) [1018158]
  - [net] gre/vxlan: handle 802.1Q inner header properly (Thomas Graf) [997632]
  - [net] disable the new NAPI weight error message for RHEL 6.5 (Michal Schmidt) [1012090]
  - [scsi] sd: Fix parsing of 'temporary ' cache mode prefix (Ewan Milne) [955441]
  - [scsi] sd: fix array cache flushing bug causing performance problems (Ewan Milne) [955441]
  - [scsi] bfa: firmware update to 3.2.1.1 (Rob Evers) [1002770]
  - [netdrv] bna: firmware update to 3.2.1.1 (Ivan Vecera) [1002771]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-426.el6]
changelog:
  - [block] loop: unplug_fn only when backing file is attached (Lukas Czerner) [1022997]
  - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1011876]
  - [kernel] async: Revert MAX_THREADS to 256 (Neil Horman) [1021705]
  - [net] ipv6: restrict neighbor entry creation to output flow (Jiri Pirko) [997103]
  - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1011930] {CVE-2013-4387}
  - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1010347]
  - [net] unix: revert/fix race in stream sockets with SOCK_PASS* flags (Daniel Borkmann) [1019343]
  - [net] Loosen constraints for recalculating checksum in skb_segment() (Vlad Yasevich) [1020298]
  - [drm] nouveau: fix vblank deadlock (Rob Clark) [1013388]
  - [usb] xhci: refactor EHCI/xHCI port switching (Don Zickus) [970715]
  - [fs] compat_ioctl: VIDEO_SET_SPU_PALETTE missing error check (Phillip Lougher) [949573] {CVE-2013-1928}
  - [fs] vfs: fix d_mountpoint() (Ian Kent) [1011337]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [999708]
  - [fs] nfs: Remove the 'FIFO' behaviour for nfs41_setup_sequence (Steve Dickson) [1022257]
  - [fs] nfs: Record the OPEN create mode used in the nfs4_opendata structure (Steve Dickson) [1019439]
  - [fs] nfs: Simulate the change attribute (Steve Dickson) [1018653]
  - [scsi] megaraid_sas: Fix synchronization problem between sysPD IO path and AEN path (Tomas Henzl) [1019811]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-427.el6]
changelog:
  - [tools] perf: Add ref-cycles into array of tested events (Jiri Olsa) [968806]
  - [pci] Revert "make SRIOV resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "ability to relocate assigned pci-resources" (Myron Stowe) [1022270]
  - [pci] Revert "honor child buses add_size in hot plug configuration" (Myron Stowe) [1022270]
  - [pci] Revert "make cardbus-bridge resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "code and comments cleanup" (Myron Stowe) [1022270]
  - [pci] Revert "make re-allocation try harder by reassigning ranges higher in the heirarchy" (Myron Stowe) [1022270]
  - [pci] Revert "Calculate right add_size" (Myron Stowe) [1022270]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-428.el6]
changelog:
  - [fs] Revert "vfs: allow umount to handle mountpoints without revalidating them" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: massage umount_lookup_last() a bit to reduce nesting" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: rename user_path_umountat() to user_path_mountpoint_at()" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: introduce kern_path_mountpoint()" (Rafael Aquini) [1024607]
  - [fs] Revert "autofs4: fix device ioctl mount lookup" (Rafael Aquini) [1024607]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-430.el6]
changelog:
  - [x86] Revert "efi: be more paranoid about available space when creating variables" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efivars: firmware bug workarounds should be in platform code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Export efi_query_variable_store() for efivars.ko" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Check max_size only if it is non-zero" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Distinguish between "remaining space" and actually used space" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Implement efi_no_storage_paranoia parameter" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "Modify UEFI anti-bricking code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Fix dummy variable buffer allocation" (Rafael Aquini) [1012370 1023173]


author: Baoquan He <bhe@redhat.com> - 2.0.0-264
changelog:
  - kexec-tools.spec: turn on the dynamic and lzo build for makedumpfile, resolve bug 825476
  - kexec-tools.spec: Validate patches related to makedumpfile, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-265
changelog:
  - add selinux relabel when service startup, resolve bug 797231
  - add bzip2-devel and lzo-devel to BuildRequires, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-266
changelog:
  - kdump.conf.5: Modify 2 spelling errors
  - kexec-tools: Only remap network once when cluster configured
  - tools: Clean up /etc/iface_map after remapping the devices
  - kernel cmdline: Remove hugepage allocations
  - mkdumprd: change default disk_timeout to 180 seconds
  - kdump.conf: Tell user to specify module without ".ko" suffix
  - kdump.conf: add some missing supported configurations from kdump.conf.5
  - kdump.conf: change line columns to 80
  - Raw dump: use /sbin/blockdev to flush out block device buffers
  - Update translation file for firstboot
  - Update translation file for firstboot


author: Baoquan He <bhe@redhat.com> - 2.0.0-267
changelog:
  - mkdumprd: improve error message when e2fsprogs is missing, resolves bug 975642
  - mkdumprd: improve error message when btrfs-progs is missing, resolves bug 810494
  - Document mkdumprd option --allow-missing, resolves bug 951035


author: Baoquan He <bhe@redhat.com> - 2.0.0-269
changelog:
  - add snappy build, resolves bug 902147
  - This patch fixes the parsing of inline comments in config file, resolves bug 967427


author: Baoquan He <bhe@redhat.com> - 2.0.0-271
changelog:
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption, resolves bug 1009207


author: Baoquan He <bhe@redhat.com> - 2.0.0-272
changelog:
  - Allow multipathd to configure multipath map before adding partition devmappings, resolves bug 906601
  - mkdumprd: use timeout_count as a global variable, resolves bug 906601
  - mkdumprd: add support for SCM devices available for Linux on System z, resolves bug 903529
  - kdump.init: Run multiple kdump init instances one by one in serial order, resolves bug 963948


author: Baoquan He <bhe@redhat.com> - 2.0.0-273
changelog:
  - Fix max_mapnr issue on system has over 44-bit addressing, resolves bug 1008543
  - makedumpfile: fails phys_base calculation on sadump format, resolves bug 1010103


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-2
changelog:
  - fix overflow in subshell loop (#858263)
  - set default editing mode to emacs (#761551)
  - ksh -m did not turn monitor mode on (#960034)
  - prevent fork bomb trigered by SIGSTP (#922851)


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: Petr Šabata <contyk@redhat.com> - 1.0.16-1
changelog:
  - 1.0.16 bump, documentation and autotools scripts updates (#829810)
  - Fix an old bogus date in the changelog


author: Doug Ledford <dledford@redhat.com> - 1.1.7-1
changelog:
  - Update to latest upstream release
  - Remove patches that are now part of upstream
  - Fix ibv_srq_pingpong with negative value to -s option
  - Resolves: bz879191


author: Doug Ledford <dledford@redhat.com> - 1.1.4-3
changelog:
  - Bump version to something later than base libibverbs package
  - Enable valgrind support on most arches
  - Use versioned provides for our pseudo provides of libibverbs base
    packages
  - Related: bz603804


author: Doug Ledford <dledford@redhat.com> - 1.1.5-1
changelog:
  - Update to latest upstream version (1.1.4 to 1.1.5)
  - Drop libibverbs cow.patch as it is in 1.1.5 already
  - Drop ifnarch ia64 from valgrind usage as we don't build on ia64 any more
  - Make sure RPATH entries are removed from programs
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.1.6-1
changelog:
  - Update to latest upstream version (now includes native rocee support
    and FDR support)
  - Related: bz758498, bz750609


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file
  - Related: bz950915


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Update to latest upstream version
  - Drop 6 patches rolled into latest upstream version
  - Drop ifnarch ia64 around valgrind usage as we don't build for ia64
  - Fix broken libmlx4-modprobe.conf file
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.0.2-5
changelog:
  - Fix modprobe file so it can't render a machine unbootable if run against
    an older kernel.
  - Resolves: bz805129


author: Doug Ledford <dledford@redhat.com> - 1.0.17-1
changelog:
  - Official 1.0.17 release
  - The fix to bug 866221 got kicked back as incomplete last time, fix
    it for real this time.
  - Intel adapters that use the qib driver don't like using inline data,
    so use a memory region that is registered instead
  - Resolves: bz866221, bz828071


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-3
changelog:
  - Resolves: rhbz#833512 provide a /usr/bin/openoffice.org-1.9 for backwards compat
  - Resolves: rhbz#902694 inaccessibile CJK/Indic shortcuts


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-16
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports LibMissingRELRO rhbz#812283
  - libreport attached sosreport into bugzilla with bad mimetype rhbz#885509
  - reporter-rhtsupport on RHEL6.4 unable to open cases in RHT customer center rhbz#896090
  - Change default set of reporters shown by CLI/GUI rhbz#948286
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - Resolves: #885509, #812283, #961231, #961231, #961231, #948286, #759443, #896090, #875260


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-17
changelog:
  - updated translation rhbz#993626
  - fixed bugs doscovered by coverity rhbz#905051
  - Resolves: #993626, #905051


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-19
changelog:
  - updated transaltion (ko) rhbz#993626
  - fixed bugzilla reporter to work with the new xmlrpc api rhbz#991088
  - Resolves: #991088, #993626


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Resolves: rhbz#975489 - Additional flags might have no effect
                            on 32bit architectures


author: John Ferlan <jferlan@redhat.com> - 0.6.1-5
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#908083)


author: Michal Privoznik <mprivozn@redhat.com> - 0.6.1-7.el6
changelog:
  - libvirt-cim-get_dominfo-Use-VIR_DOMAIN_XML_SECURE-more-wisely.patch (rhbz#826179)
  - Don't install open-pegasus' specific providers (rhbz#859122)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1000937)
  - Update spec file to more closely match upstream
  - Fixed dates in changelog


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-20
changelog:
  - qemu: Don't force port=0 for SPICE (rhbz#975751)
  - qemu: Refactor graphics code to not hardcode a single display (rhbz#975751)
  - qemu: Graphics support for simultaneous one of each sdl, vnc, spice (rhbz#975751)
  - qemu: Don't miss errors when changing graphics passwords (rhbz#975751)
  - qemu: Allow seamless migration for domains with multiple graphics (rhbz#975751)
  - qemu_migration: Move waiting for SPICE migration (rhbz#920205)
  - util: Refactor iptables command construction into multiple steps (rhbz#851455)
  - net: Support set public ip range for forward mode nat (rhbz#851455)
  - net: Add support for specifying port range for forward mode nat (rhbz#851455)
  - qemu_migrate: Dispose listen address if set from config (rhbz#971485)
  - qemu: Remove maximum cpu limit when setting processor count using the API (rhbz#855296)
  - qemu_agent: Introduce helpers for agent based CPU hot(un)plug (rhbz#924400)
  - virsh-domain: Refactor cmdVcpucount and fix output on inactive domains (rhbz#924400)
  - API: Introduce VIR_DOMAIN_VCPU_AGENT, for agent based CPU hot(un)plug (rhbz#924400)
  - qemu: Implement request of vCPU state using the guest agent (rhbz#924400)
  - qemu: Implement support for VIR_DOMAIN_VCPU_AGENT in qemuDomainSetVcpusFlags (rhbz#924400)
  - qemuDomainGetVcpusFlags: Initialize ncpuinfo (rhbz#924400)
  - Fix commit 29c1e913e459058c12d02b3f4b767b3dd428a498 (rhbz#924400)
  - qemu: Make qemuMigrationIsAllowed more reusable (rhbz#972675)
  - qemu: Cancel migration if guest encoutners I/O error while migrating (rhbz#972675)
  - qemu: Forbid migration of machines with I/O errors (rhbz#972675)
  - migration: Make erroring out on I/O error controllable by flag (rhbz#972675)
  - migration: Don't propagate VIR_MIGRATE_ABORT_ON_ERROR (rhbz#972675)
  - Paused domain should remain paused after migration (rhbz#972675)
  - qemu: New vnc display sharing policy caps flag (rhbz#803602)
  - conf: Add 'sharePolicy' attribute to graphics element for vnc (rhbz#803602)
  - qemu: Add ', share=<policy>' to qemu commandline (rhbz#803602)
  - virsh: Distinguish errors between missing argument and wrong option (rhbz#924596)
  - virsh: Fix incorrect argument errors for long options (rhbz#924596)
  - virsh: Resolve Coverity 'MISSING_BREAK' (rhbz#924596)
  - virnetdev: Need to initialize 'pciConfigAddr' (rhbz#980339)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961)
  - sec_manager: Refuse to start domain with unsupported seclabel (rhbz#947387)
  - usb: Don't spoil decimal addresses (rhbz#981503)
  - storage: Return -1 when fs pool can't be mounted (rhbz#983539)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-21
changelog:
  - conf: Avoid NULL deref for pmsuspended domain state (rhbz#822306)
  - libvirt: Define domain crash event types (rhbz#822306)
  - qemu: Refactor processWatchdogEvent (rhbz#822306)
  - qemu: Expose qemuProcessShutdownOrReboot() (rhbz#822306)
  - qemu: Implement 'oncrash' events when guest panicked (rhbz#822306)
  - qemu: Implement 'oncrash' coredump events when guest panicked (rhbz#822306)
  - conf: Fix a memory leak when parsing nat port XML nodes (rhbz#851455)
  - security_manager: Fix comparison (rhbz#984793)
  - qemu: Prevent crash of libvirtd without guest agent configuration (rhbz#984821)
  - qemu: Fix double free of returned JSON array in qemuAgentGetVCPUs() (rhbz#984821)
  - qemu_agent: Add support for appending arrays to commands (rhbz#924400)
  - Add support for locking domain's memory pages (rhbz#947118)
  - qemu: Implement support for locking domain's memory pages (rhbz#947118)
  - qemu: Check for -realtime mlock=on|off support (rhbz#947118)
  - qemu: Move memory limit computation to a reusable function (rhbz#947118)
  - util: New virCommandSetMax(MemLock|Processes|Files) (rhbz#947118)
  - qemu: Set RLIMIT_MEMLOCK when memoryBacking/locked is used (rhbz#947118)
  - Add Gluster protocol as supported network disk backend (rhbz#849796)
  - qemu: Add support for gluster protocol based network storage backend. (rhbz#849796)
  - tests: Add tests for gluster protocol based network disks support (rhbz#849796)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-22
changelog:
  - virsh: Fix change-media bug on disk block type (rhbz#923053)
  - Fix patches for multiple graphics and spice migration (rhbz#975751)
  - Revert "qemu: Remove maximum cpu limit when setting processor count using the API" (rhbz#855296)
  - Remove VIR_DOMAIN_SHUTDOWN_CRASHED from public API (rhbz#822306)
  - Rename VIR_DOMAIN_PAUSED_GUEST_PANICKED to VIR_DOMAIN_PAUSED_CRASHED (rhbz#822306)
  - Improve LXC startup error reporting (rhbz#903092)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#928661)
  - util: Improve user lookup helper (rhbz#964359)
  - util: Add virGetGroupList (rhbz#964359)
  - util: Make virSetUIDGID async-signal-safe (rhbz#964359)
  - Fix potential deadlock across fork() in QEMU driver (rhbz#964359)
  - security: Framework for driver PreFork handler (rhbz#964359)
  - security_dac: Compute supplemental groups before fork (rhbz#964359)
  - security: Fix deadlock with prefork (rhbz#964359)
  - Split TLS test into two separate tests (rhbz#975201)
  - Avoid re-generating certs every time (rhbz#975201)
  - Change data passed into TLS test cases (rhbz#975201)
  - Fix validation of CA certificate chains (rhbz#975201)
  - Fix parallel runs of TLS test suites (rhbz#975201)
  - tests: Fix parallel runs of TLS test suites (rhbz#975201)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-23
changelog:
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#975201)
  - Fix qemuProcessReadLog with non-zero offset (rhbz#991334)
  - virSecurityManagerGenLabel: Skip seclabels without model (rhbz#997818)
  - bitmap: Add virBitmapCountBits (rhbz#997367)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997367)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997367)
  - network: Allow <vlan> in type='hostdev' networks (rhbz#999107)
  - python: Fix bindings that don't raise an exception (rhbz#912170)
  - storage: Update pool metadata after adding/removing/resizing volume (rhbz#965442)
  - storage: Fix coverity warning (rhbz#965442)
  - storage: Fix the use-after-free memory bug (rhbz#965442)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#928638)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-24
changelog:
  - security: Provide supplemental groups even when parsing label (rhbz#964359)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1000973)
  - virsh: Correct DESCRIPTION for virsh help blockcopy (rhbz#1002790)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004365)
  - build: More workarounds for if_bridge.h (rhbz#1002735)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-25
changelog:
  - migration: Do not restore labels on failed migration (rhbz#895826)
  - qemu: Use default machine type if missing it in qemu command line (rhbz#995312)
  - qemu: Don't leak vm on failure (rhbz#995312)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006710)
  - tests: Files named '.*-invalid.xml' should fail validation (rhbz#1006710)
  - tests: Use portable shell code (rhbz#1006710)
  - Add test for the nodemask double free crash (rhbz#1006710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-26
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - Introduce APIs for splitting/joining strings (rhbz#1006266)
  - Rename virKillProcess to virProcessKill (rhbz#1006266)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006266)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006266)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006266)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006266)
  - Include process start time when doing polkit checks (rhbz#1006266)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-28
changelog:
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1011981)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1013758)
  - docs: Discourage users to set hard_limit (rhbz#1013758)
  - docs: Clean 09adfdc62de2b up (rhbz#1013758)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1013758)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1013758)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014198)
  - qemu: Generate correct name for hostdev network devices (rhbz#1001881)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2-1.20130625gitfa41be
changelog:
  - update to 20130625gitfa41be
    (#916787, #977258, #910966, #910974, #924041, #966787)
  - improve initial frequency estimation


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2-2.20130719git48f4dc
changelog:
  - update to 20130719git48f4dc (#916787, #985531)
  - add man page link for ptp4l.conf
  - update kernel-headers build requirement
  - change default phc2sys options to use -s


author: Daniel Borkmann - 1.0.10-6
changelog:
  - Move spec system to apply patches via git-am(1), which makes it more
    convienient for future backports
  - Backport SCTP_GET_ASSOC_STATS support (#908390) and import its dependencies
  - Fix bugs (#855379), (#953383), (#912557) and import its dependencies


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-38
changelog:
  - luci: Make pop-up messages act like static status messages
    Resolves: rhbz#773491
  - luci: Fix uncaught exception
    luci: Fix for tracebacks when no nodes can be contacted
    Resolves: rhbz#878149
  - luci: Don't let anonymous users access the preferences page
    Resolves: rhbz#878960
  - luci: Fix garbled error messages
    Resolves: rhbz#880363
  - luci: Add support for fence device attributes
    Resolves: rhbz#883008
    Resolves: rhbz#917743


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-39
changelog:
  - luci: Make pop-up messages act like static status
    Resolves: rhbz#773491
  - luci: Add support for fence_scsi 'delay' attribute
    Resolves: rhbz#883008
  - Enable the ricci and modclusterd services when creating a
    Resolves: rhbz#886517
  - luci: Remove useless "remove this instance" button
    Resolves: rhbz#886576
  - luci: Add support for missing fence devices
    Resolves: rhbz#917747
  - luci: Ask for confirmation when removing a cluster
    Resolves: rhbz#917814
  - luci: Update Oracle agent configuration
    Resolves: rhbz#983693


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-41
changelog:
  - Default syslog facility is "local4" (not "daemon")
    Resolves: rhbz#896244
  - Fix cluster_version mismatch upon adding 2+ nodes
    Resolves: rhbz#978479
  - Fix luci not running after /etc/init.d/luci reports that it has started
    Resolves: rhbz#877999


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-42
changelog:
  - module_name parameter for fence_drac5 is optional, not required
    Resolves: rhbz#1001835
  - fence_ilo denoted as HP iLO / iLO2, but the latter has a separate entry
    Resolves: rhbz#1001836


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-43
changelog:
  - Fix short exposure of authentication details while generating configuration file
    Resolves: rhbz#1005385 (part 1)
  - Fix hidden untrusted path and "command" (callable association) injection
    Resolves: rhbz#1005385 (part 2)


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-46
changelog:
  - Do not propagate "unfencing" verbatim to configuration
    Resolves: rhbz#883008
  - Add a guard to enforce code validity during compilation phase
    Related: rhbz#883008


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-48
changelog:
  - Postpone fix for luci not running after reportedly started due to missed corner-case
    Related: rhbz#877999


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-1
changelog:
  -  o Features/Extensions/Additions:
  - Add DM_ABORT_ON_INTERNAL_ERRORS env var support to abort on internal errors.
  - Verify clvmd message validity before processing and log error if incorrect.
  - Add initial support thin pool lvconvert --repair.
  - Add support for poolmetadataspare LV, that will be used for pool recovery.
  - Improve activation order when creating thin pools in non-clustered VG.
  - Add lvm2-activation-net systemd unit to activate LVs on net-attached storage.
  - Automatically flag thin snapshots to be skipped during activation.
  - Add support for persistent flagging of LVs to be skipped during activation.
  - Make selected thinp settings customizable by a profile.
  - Support storing profile name in metadata for both VGs and LVs.
  - Add support for configuration profiles.
  - Add support for thin volumes in vgsplit.
  - Require 1.9 thin pool target version for online thin pool metadata resize.
  - Add lvresize support for online thin pool metadata volume resize.
  - Add detection for thin pool metadata resize kernel support.
  - Add vg->vg_ondisk / lv_ondisk() holding committed metadata.
  - Add detection of mounted fs also for vgchange deactivation.
  - Avoid a global lock in pvs when lvmetad is in use.
  - Detect maximum usable size for snapshot for lvresize.
  - Improve RAID kernel status retrieval to include sync_action/mismatch_cnt.
  - Add external origin support for lvcreate.
  - Support automatic config validation.
  - Add PV header extension: extension version, flags and bootloader areas.
  - Initial support for lvconvert of thin external origin.
  - Improve activation code for better support of stacked devices.
  - vgimport '--force' now allows import of VGs with missing PVs.
  - Allow removal or replacement of RAID LV components that are error segments.
  - Make 'vgreduce --removemissing' able to handle RAID LVs with missing PVs.
  - Add lvconvert support to swap thin pool metadata volume.
  - Allow vgcfgrestore of lvm2 metadata with thin volumes if --force is used.
  - Give precedence to EMC power2 devices with duplicate PVIDs.
  - Recognise Storage Class Memory (IBM S/390) devices in filter.
  - Recognise STEC skd devices in filter.
  - Recognise Violin Memory vtms devices in filter.
  - Support discards for non-power-of-2 thin pool chunks.
  - Automatically restore MISSING PVs with no MDAs.
  - Support allocation of pool metadata with lvconvert command.
  - Detect mounted fs also via reading /proc/self/mountinfo.
  -  o Command Interface/Options:
  - Support ARG_GROUPABLE with merge_synonym (for --raidwritemostly).
  - Add --ignoreactivationskip to lvcreate/vgchange/lvchange to ignore skip flag.
  - Add --setactivationskip to lvcreate/lvchange to set activation skip flag.
  - Add --type profilable to lvm dumpconfig to show profilable config settings.
  - Add --mergedconfig to lvm dumpconfig for merged --config/--profile/lvm.conf.
  - Support changing VG/LV profiles: vgchange/lvchange --profile/--detachprofile.
  - Add new --profile command line arg to select a configuration profile for use.
  - For creation of snapshot require size for at least 3 chunks.
  - Do not accept size parameters bigger then 16EiB.
  - Accept --yes in all commands so test scripts can be simpler.
  - Add lvcreate/lvchange --[raid]{min|max}recoveryrate for raid LVs.
  - Add lvchange --[raid]writemostly/writebehind support for RAID1
  - Add lvchange --[raid]syncaction for scrubbing of RAID LVs.
  - Add --validate option to lvm dumpconfig to validate current config on demand.
  - Add --ignoreadvanced and --ignoreunsupported switch to lvm dumpconfig.
  - Add --withcomments and --withversions switch to lvm dumpconfig.
  - Add --type {current|default|missing|new} and --atversion to lvm dumpconfig.
  - Add --bootloaderareasize to pvcreate and vgconvert to create bootloader area.
  - Do not take a free lv name argument for lvconvert --thinpool option.
  - Allow lvconvert --stripes/stripesize only with --mirrors/--repair/--thinpool.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Support use of option --yes for lvchange --persistent.
  - Fix clvmd support for option -d and properly use its argument.
  -  o Reporting:
  - Issue an error msg if lvconvert --type used incorrectly with other options.
  - Use LOG_DEBUG/ERR msg severity instead default for lvm2-activation-generator.
  - Add LV report fields: raid_mismatch_count/raid_sync_action/raid_write_behind.
  - Add LV reporting fields raid_min_recovery_rate, raid_max_recovery_rate.
  - Add sync_percent as alias for copy_percent LV reporting field.
  - Add lv_ prefix to modules reporting field.
  - Use units B or b (never E) with no decimal places when displaying sizes < 1k.
  - List thin-pool and thin modules for thin volumes.
  - Add 's(k)ip activation' bit to lvs -o lv_attr to indicate skip flag attached.
  - Improve error loging when user tries to interrupt commands.
  - Add vgs/lvs -o vg_profile/lv_profile to report profiles attached to VG/LV.
  - Report lvs volume type 'e' with higher priority.
  - Report lvs volume type 'o' also for external origin volumes.
  - Report lvs target type 't' only for thin pools and thin volumes.
  - Add "active" LV reporting field to show activation state.
  - Add "monitor" segment reporting field to show dmevent monitoring status.
  - Add explicit message about unsupported pvmove for thin/thinpool volumes.
  - Add pvs -o pv_ba_start,pv_ba_size to report bootloader area start and size.
  - Fix pvs -o pv_free reporting for PVs with zero PE count.
  - Report blank origin_size field if the LV doesn't have an origin instead of 0.
  - Report partial and in-sync RAID attribute based on kernel status
  - Log output also to syslog when abort_on_internal_error is set.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Report error for nonexisting devices in dmeventd communication.
  - Reduce some log_error messages to log_warn where we don't fail.
  -  o Configuration:
  - Add lvm.conf thin_repair/dump_executable and thin_repair_options.
  - Add activation/auto_set_activation_skip to control activation skip flagging.
  - Add default.profile configuration profile and install it on make install.
  - Add config/profile_dir to set working directory to load profiles from.
  - Use mirror_segtype_default if type not specified for linear->mirror upconvert.
  - Refine lvm.conf and man page documentation for autoactivation feature.
  - Override system's global_filter settings for vgimportclone.
  - Find newest timestamp of merged config files.
  - Add 'config' section to lvm.conf to set the way the LVM configuration is handled.
  - Add global/raid10_segtype_default to lvm.conf.
  - Accept activation/raid_region_size in preference to mirror_region_size config.
  - Add log/debug_classes to lvm.conf to control debug log messages.
  - Allow empty activation/{auto_activation|read_only|}_volume_list config option.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvm.conf thin pool allocation settings thin_pool_{chunk_size|discards|zero}.
  - Relax ignore_suspended_devices to read from mirrors that don't have a device marked failed.
  -  o Documentation:
  - Add man page entries for profile configuration and related options.
  - Document lvextend --use-policies option in man.
  - Improve lvcreate, lvconvert and lvm man pages.
  -  o API/interfaces:
  - liblvm/python API: Additions: PV create/removal/resize/listing
  - liblvm/python API: Additions: LV attr/origin/Thin pool/Thin LV creation
  - Fix exported symbols regex for non-GNU busybox sed.
  - Add LV snapshot support to liblvm and python-lvm.
  - Fix lvm2app to return all property sizes in bytes (not sectors).
  - Fix lvm2app and return lvseg discards property as string.
  - Remove python liblvm object. systemdir can only be changed using env var now.
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Add dm_get_status_snapshot() for parsing snapshot status.
  - Append discards and read-only fields to exported struct dm_status_thin_pool.
  - Validate passed params to dm_get_status_raid/thin/thin_pool().
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add dm_mountinfo_read() for parsing /proc/self/mountinfo.
  - Add dm_config_write_{node_out/one_node_out} for enhanced config output.
  - Add dm_config_value_is_bool to check for boolean value in supported formats.
  - Add DM_ARRAY_SIZE public macro.
  - Add DM_TO_STRING public macro.
  - Implement ref-counting for parents in python lib.
  -  o Fixes (general):
  - Create dmeventd timeout threads as "detached" so exit status is freed.
  - Fix inability to remove a VG's cluster flag if it contains a mirror.
  - Suppress arg: prefix in log_sys_error macro when arg is empty string.
  - Fix bug making lvchange unable to change recovery rate for RAID.
  - Prohibit conversion of thin pool to external origin.
  - When creating PV on existing LV don't forbid reserved LV names on LVs below.
  - When converting mirrors, default segtype should be the same unless specified.
  - Add pipe_open/close() to use instead of less efficient/secure popen().
  - Ignore previous LV seg with alloc contiguous & cling when num stripes varies.
  - Do not zero init 4KB of thin snapshot for non-zeroing thin pool (2.02.94).
  - Correct thin creation error paths.
  - Add whole log_lv and metadata_lv sub volumes when creating partial tree.
  - Properly use snapshot layer for origin which is also thin volume.
  - Avoid generating metadata backup when calling update_pool_lv().
  - Send thin messages also for active thin pool and inactive thin volume.
  - Avoid creation of multiple archives for one command.
  - Avoid flushing thin pool when just requesting transaction_id.
  - Fix use of too big chunks of memory when communication with lvmetad.
  - Also filter partitions on mpath components if multipath_component_detection=1.
  - Do not use persistent filter with lvmetad.
  - Move syslog code out of signal handle in dmeventd.
  - Fix lvresize --use-policies of VALID but 100% full snapshot.
  - Skip monitoring of snapshots that are already bigger then origin.
  - Refuse to init a snapshot merge in lvconvert if there's no kernel support.
  - Fix alignment of PV data area if detected alignment less than 1 MB (2.02.74).
  - Fix premature DM version checking which caused useless mapper/control access.
  - Fix creation and removal of clustered snapshot.
  - Fix clvmd caching of metadata when suspending inactive volumes.
  - Fix lvmetad error path in lvmetad_vg_lookup() for null vgname.
  - Fix clvmd _cluster_request() return code in memory fail path.
  - Fix vgextend to not allow a PV with 0 MDAs to be used while already in a VG.
  - Fix PV alignment to incorporate alignment offset if the PV has zero MDAs.
  - Fix missing cleanup of flags when the LV is detached from pool.
  - Fix check for some forbidden discards conversion of thin pools.
  - Fix blkdeactivate to handle nested mountpoints and mangled mount paths.
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Unlock vg mutex in error path when lvmetad tries to lock_vg.
  - Detect key string duplication failure in config_make_nodes_v in libdaemon.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - When no --stripes argument is given when creating a RAID10 volume, default to 2 stripes.
  - Do not allow lvconvert --splitmirrors on RAID10 logical volumes.
  - Skip mlocking [vectors] on arm architecture.
  - Repair a mirrored log before the mirror itself when both fail.
  - Don't use lvmetad in lvm2-monitor.service ExecStop to avoid a systemd issue.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid trying to read a mirror that has a failed device in its mirrored log.
  - Fix 'dmsetup splitname -o' to not fail if used without '-c' switch (1.02.68).
  - Fix segfault for truncated string token in config file after the first '"'.
  - Fix config node lookup inside empty sections to not return the section itself.
  - Fix parsing of 64bit snapshot status in dmeventd snapshot plugin.
  - Always return success on dmeventd -V command call.
  -  o Fixes (segfaults/crashes/deadlocks/races):
  - Fix metadata area offset/size overflow if it's >= 4g and while using lvmetad.
  - Fix segfault if devices/global_filter is not specified correctly.
  - Fix segfault when reporting raid_syncaction for older kernels.
  - Fix vgcfgrestore crash when specified incorrect vg name.
  - Avoid crash-inducing race in lvmetad when VG disappears during rename.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.
  - Check for memory failure of dm_config_write_node() in lvmetad.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Prevent double free error after dmeventd call of _fill_device_data().
  -  o Fixes (resource leaks/memleaks):
  - Fix clogd descriptor leak when daemonizing.
  - Fix clvmd descriptor leak on restart.
  - Release memory allocated with _cached_info().
  - Release memory and unblock signals in lock_vol error path.
  - Fix memory resource leak in memlocking error path.
  - Fix memleak in dmeventd thin plugin in device list obtaining err path.
  - Fix socket leak on error path in lvmetad's handle_connect.
  - Fix memleak on error path for lvmetad's pv_found.
  - Fix memleak in device_is_usable mirror testing function.
  - Fix memory leak on error path for pvcreate with invalid uuid.
  - Fix resource leak in error path of dmeventd's umount of thin volume.
  - Close open dmeventd FIFO file descriptors on exec (FD_CLOEXEC).
  -  o Testing:
  - Fix test for active snapshot in cluster before resizing it.
  - Add python-lvm unit test case
  -  o Other:
  - Require confirmation for vgchange -c when no VGs listed explicitly.
  - Also skip /var and /var/log by default in blkdeactivate when unmounting.
  - Add support for bind mounts in blkdeactivate.
  - Add blkdeactivate -v/--verbose for debug output from external tools used.
  - Add blkdeactivate -e/--errors for error messages from external tools used.
  - Suppress messages from external tools called in blkdeactivate by default.
  - Workaround gcc v4.8 -O2 bug causing failures if config/checks=1 (32bit arch).
  - Add --with-thin-repair and --with-thin-dump configure options.
  - Use local activation for clearing snapshot COW device.
  - Add configure --with-default-profile-subdir to select dir to keep profiles in.
  - Creation of snapshot takes at most 100% origin coverage.
  - Use LC_ALL to set locale in daemons and fsadm instead of lower priority LANG.
  - Remove dependency on fedora-storage-init.service in lvm2 systemd units.
  - Depend on lvm2-lvmetad.socket in lvm2-monitor.service systemd unit.
  - Optimize out setting the same value of read_ahead.
  - Automatically deactivate failed preloaded dm tree node.
  - Process thin messages once to active thin pool target for dm_tree.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  -  o Packaging:
  - Do not include /lib/udev and /lib/udev/rules.d in device-mapper package.
  - Change Source0 link to ftp://sources.redhat.com/pub/lvm2/releases/LVM2.<version>.tgz
  - Fix some incorrect changelog dates.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-2
changelog:
  - Refresh existing VG before autoactivating (event retrigger/device reappeared).
  - Move mpath device filter before partitioned filter (which opens devices).
  - Fix vgck to notice on-disk corruption even if lvmetad is used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-3
changelog:
  - Do not allow passing empty new name for dmsetup rename.
  - Check for exactly one lv segment in validation of thin pools and volumes.
  - Fix dmeventd unmonitoring of thin pools.
  - Fix lvresize for stacked thin pool volumes (i.e. mirrors).
  - Support most of lvchange operations on stacked thin pool meta/data LVs.
  - Disable pvmove of merging or converting logical volumes.
  - Enable pvmove of snapshots and snapshot origins.
  - Fix inability to specify LV name when pvmove'ing a RAID, mirror, or thin-LV.
  - Add ability to pvmove RAID, mirror, and thin volumes.
  - Avoid unlimited recursion when creating dtree containing inactive pvmove LV.
  - Add man page entries for lvmdump's -u and -l options.
  - Remove "mpath major is not dm major" msg for mpath component scan (2.02.94).
  - Don't assume stdin file descriptor is readable.
  - Write Completed debug message before reinstating log defaults after command.
  - Use pvscan -b in udev rules to avoid a deadlock on udev process count limit.
  - Add pvscan -b/--background for the command to be processed in the background.
  - Direct udev to use 3min timeout for LVM devices. Recent udev has default 30s.
  - Do not scan multipath or RAID components and avoid incorrect autoactivation.
  - Fix MD/loop udev handling to fire autoactivation after setup or coldplug only.
  - Fix ignored lvmetad update on loop device configuration (2.02.99)
  - Fix lvm2app segfault while using lvm_list_pvs_free fn if there are no PVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-4
changelog:
  - Fix RAID calculation for sufficient allocatable space.
  - Conversion from linear to mirror or RAID1 now honors mirror_segtype_default.
  - Fix contiguous & cling allocation policies for parity RAID. (2.02.100)
  - lvconvert no longer converts LVs of "mirror" segment type to thinpool.
  - lvconvert no longer converts thinpool sub-LVs to "mirror" segment type.
  - Make RAID capable of single-machine exclusive operations in a cluster.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-5
changelog:
  - Fix failing metadata repair when lvmetad is used.
  - Fix incorrect memory handling when reading messages from lvmetad.
  - Fix locking in lvmetad when handling the PV which is gone.
  - Fix lvconvert when converting to a thin pool and thin LV at once.
  - Recognize new flag to skip udev scanning in udev rules and act appropriately.
  - Add support for flagging an LV to skip udev scanning during activation.
  - Improve message when unable to change discards setting on active thin pool.
  - Add --ignoreskippedcluster for exit status success when clustered VGs skipped.
  - Define symbolic names for subsystem udev flags in libdevmapper for easier use.
  - Make subsystem udev rules responsible for importing DM_SUBSYSTEM_UDEV_FLAG*.
  - Remove extra GOTO jump in lvmetad udev rules causing incorrect lvmetad update.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-6
changelog:
  - Fix lvconvert swap of poolmetadata volume for active thin pool
  - Check for open count with a timeout before removal/deactivation of an LV.
  - Add workaround for deactivation problem of opened virtual snapshot.
  - Report RAID images split with tracking as out-of-sync ("I").
  - Recognise NVM Express devices in filter.
  - Fix possible race while creating/destroying memory pools.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-7
changelog:
  - Add ignore_lvm_mirrors to config file to read/ignore labels on mirrors.
  - Revert to using devices/obtain_device_list_from_udev=0 by default.
  - Add internal flag for temporary LVs to properly direct udev to not interfere.
  - Fix endless loop in blkdeactivate <device>... if unable to umount/deactivate.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-6
changelog:
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Resolves bz903212


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-1
changelog:
  - Update mdadm to upstream release v3.2.6
    This includes all current patches, except for
    mdadm-3.2.5-imsm-Forbid-spanning-between-multiple-controllers.patch and
    mdadm-3.2.5-Create.c-check-if-freesize-is-equal-0.patch
  - Fix problem with arrays marked <ignored> in mdadm.conf still being
    auto-assembled
  - Fix problem with it not being possible to use <ignore> more than
    once in mdadm.conf
  - Resolves bz922971
  - Resolves bz902142
  - Resolves bz902137


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-2
changelog:
  - Enhance raid-check to allow the admin to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz819943


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Fix problem where first stop command doesn't stop container during
    IMSM volume's reshape
  - Fix annoying build noise caused by latest rpmbuild
  - Resolves bz956016


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-4
changelog:
  - Fix problem with RAID10 resync failing to restart if it has been
    stopped after 50% completion.
  - Resolves bz995105


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015514


author: Adam Jackson <ajax@redhat.com> 3.1-13
changelog:
  - Forked spec for RHEL7 Mesa's private use
    - no ocaml support
    - no doxygen build
    - no clang support
    - no static archives
    - no libraries, binaries, or manpages not needed by Mesa


author: Adam Jackson <ajax@redhat.com> 3.3-0.1.rc1
changelog:
  - Update to 3.3 rc1
  - Move library to %{_libdir} to avoid rpath headaches
  - Link with -Bsymbolic and --default-symver
  - --disable-libffi
  - Misc spec cleanup


author: Jay Fenlason <fenlason@redhat.com> 3.2-7
changelog:
  - include BuildRequires: hwloc-devel from RHEL-7.0
  - Add win_free patch to close
    Resolves: rhbz734023


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to newer tarball that resolves licensing issues with the last
    tarball
  - Related: bz818183


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953085


author: Honza Horak <hhorak@redhat.com> 5.1.70-1
changelog:
  - Update to MySQL 5.1.70, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
    Resolves: #990796, #842052
  - Fix mysqldump failure against MySQL 5.0.x server due missing tables
    Resolves: #877557
  - Add logrotate script
    Resolves: #904061
  - Fix init script to not show failed on start even when server started
    Resolves: #884651


author: Honza Horak <hhorak@redhat.com> 5.1.71-1
changelog:
  - Update to MySQL 5.1.71, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-71.html
    Resolves: #990796


author: Laine Stump <laine@redhat.com> - 0.1.9-4
changelog:
  - resolves rhbz#844578
    - check IFF_RUNNING before considering and interface "active"
    - resolves rhbz#848722
    - fix ipcalc_netmask


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-45
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#893119)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#907571)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919239)
  - fixed kernel threads in hrSWRunTable (#919952)
  - fixed various error codes in Python module (#955771)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)
  - allow 'includeFile' and 'includeDir' options in configuration files
    (#917816)
  - fixed netlink message size (#927474)
  - fixed IF-MIB::ifSpeedHi on systems with non-standard interface speeds
    (#947973)
  - fixed BRIDGE-MIB::dot1dBasePortTable not to include the bridge itself
    as a port (#960568)
  - fixed snmpd segfault when 'agentaddress' configuration options is used
    and too many SIGHUP signals are received (#968898)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks
    if 'includeAllDisks' is specified in snmpd.conf (#922691)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-46
changelog:
  - fixed parsing of bulk responses (#983116)
  - added support of vzfs filesystem in hrStorageTable (#989498)
  - fixed endless loop when parsing sendmail configuration file with
    queue groups (#991213)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49
changelog:
  - fixed snmp daemons and utilities crashing in FIPS mode (#1001830)
  - added support of btrfs filesystem in hrStorageTable (#1006706)


author: Thomas Haller <thaller@redhat.com> - 1:0.8.1-58
changelog:
  - man: add manual pages for nm-applet (rh #564465)
  - man: add manual pages for nm-connection-editor (rh #564467)
  - core: don't fight with the kernel over the default IPv6 route (rh #991341)


author: Thomas Haller <thaller@redhat.com> - 1:0.8.1-59
changelog:
  - applet: remove nag dialog for missing CA certificate (rh #758076)
  - connection-editor: fixup preserve EAP passwords between options (rh #713975)


author: Steve Dickson <steved@redhat.com> 1.2.3-38
changelog:
  - Fixed typo in nfsstat's output (bz 890146)
  - Fixed retrans defaults in nfs(5) man page (bz 952560)
  - Clean rpc.idmapd messages when nfsd starts (bz 892235)
  - Fixed sm-notify to work with localhost (bz 950324)
  - Fixed pNFS stats (bz 962602)
  - Remove no_acl from exports(5) man page (bz 991302)
  - Improve nfsmount.conf configuration parsing (bz 889272)
  - Fixed sm-notify -v (bz 995484)


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-6
changelog:
  - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Kai Engert <kaie@redhat.com> - 3.15.1-7
changelog:
  - Additional syntax fixes in nss-versus-softoken-test.patch
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado - 3.12.9-12
changelog:
  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#919172 - rebase nss-softokn to 3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Enable ECC support for suite b and add upstream fixes for aec gcm
  - Use the unstripped upstream sources with ecc support
  - Limit the ECC support to suite b
  - Apply several upstream aes gcm fixes
  - Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Resolves: rhbz#960208 - Enable ECC in nss-softoken
  - Related: rhbz#919172


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
  - Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
  - When appling the patches use a backup file suffix that better describes the patch purpose


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-6
changelog:
  - create -fips packages 
  - patch submitted by Bob Relyea <rrelyea@redhat.com>
  - fix the script that splits softoken off from nss
  - patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Fix the PR_Access stub to actually access the correct permissions
  - Resolves: rhbz#1008513 - Unable to login in fips mode
  - Run the lowhash tests
  - Require nspr-4.0.0 and nss-util-3.15.1


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable new packaging but don't apply nss-fips-post.patch
  - Related: rhbz#1008513 - Unable to login in fips mode


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-2
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-1
changelog:
  - update to 4.2.6p5 (#654004, #641800, #714079, #714084, #716968, #819781,
    - bind broadcast client to new interfaces (#973807)
  - allow selection of cipher for private key files (#749530)
  - retry few times in ntpdate init script before giving up (#673198)
  - print synchronization distance instead of dispersion in ntpstat (#830821)
  - ignore duplicate servers from dhclient (#862983)
  - add fourth server to default ntp.conf and use iburst (#667524, #623616)
  - drop comment enabling local driver in default config (#816645)


author: Anton Arapov <anton@redhat.com> - 2.0.7-7
changelog:
  - numastat.c: fix bug preventing correct static huge page quantities
  - numastat.c: update version number
  - numastat.8: remove redundant "interleave hit" description
  - numastat.8: remove extraneous leading spaces and blank lines
  - numastat.8: enhance explanation of correct placement for "-s" option
  - Resolves: rhbz#987507


author: Dan Horák <dhorak@redhat.com> - 2.14.1-4
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#891626),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #891626


author: Dan Horák <dhorak@redhat.com> - 2.14.1-5
changelog:
  - add mssing sensor RDRs for the fan resource (#924852)
  - fix openhpi connection failures with redundant OAs (#948386)
  - fix segfaults when retrieving thermal info (#953515)
  - add missing thermal sensors (#953525)
  - Resolves: #924852, #948386, #953515, #953525


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-2
changelog:
  - Fix the build process by getting rid of the -build patch
    and autogen to fix
    Resolves: rhbz749115


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-85
changelog:
  - fix chroot logging issue (#872169)
  - change the bad key permissions error message (#880575)
  - fix a race condition in ssh-agent (#896561)
  - backport support for PKCS11 from openssh-5.4p1 (#908038)
  - add a KexAlgorithms knob to the client and server configuration (#951704)
  - fix parsing logic of ldap.conf file (#954094)
  - Add HMAC-SHA2 algorithm support (#969565)
  - store krb5 credentials after a pam session is created (#974096)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-86
changelog:
  - Add support for certificate key types for users and hosts (#906872)
  - Apply RFC3454 stringprep to banners when possible (#955792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-87
changelog:
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A (#993577)
  - fixed an issue with broken 'ssh -I pkcs11' (#908038)
  - abort non-subsystem sessions to forced internal sftp-server (#993509)
  - reverted 'store krb5 credentials after a pam session is created (#974096)'


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-90
changelog:
  - change default value of MaxStartups - CVE-2010-5107 - #908707
  - add -fips subpackages that contains the FIPS module files (#1001565)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21
changelog:
  - Resolves: rhbz#975550 ikev2 md5 hash results in incorrect policy
  - Resolves: rhbz#985596 openswan does not allow SHA2 auth algorithms under FIPS mode 
  - Resolves: rhbz#881914 openswan doesn't support SHA2 certificates
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#960235 CVE-2013-2053: remote buffer overflow in atodn()
  - Resolves: rhbz#963833 Abort pluto on crypto failure to prevent plaintext / nonce leak
  - Resolves: rhbz#771612 ipsec barf should not grep sparse file
  - Resolves: rhbz#841325 leftmodecfgclient=no causes rekey failure [Avesh]
  - Resolves: rhbz#848132 dpdaction=restart can cause full phase1 timeout after DPD [Avesh]
  - Resolves: rhbz#880004 Backported libreswan IKE fragmentation support 
  - Resolves: rhbz#908476 Backported libreswan INITIAL-CONTACT Notify support
  - Resolves: rhbz#796683 Backported libreswan USERCOMPILE with -fno-strict-aliasing
  - Resolves: rhbz#959568 Backported libreswan nat_keepalive=yes|no (default yes) option
  - Resolves: rhbz#916743 Backported libreswan control transmission delay timing
  - Resolves: rhbz#959566 Backported libreswan ikeping compile warnings
  - Resolves: rhbz#957400 Openswan did not load aesni_intel kernel module
  - Resolves: rhbz#960171 Initial loading of CRL always fails on pluto startup [Matt Rogers]
  - Resolves: rhbz#958969 Crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: rhbz#868986 Fix for RDN values containing a comma [Matt Rogers]
  - Resolves: rhbz#747966 Missing else keyword


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-23
changelog:
  - Resolves: rhbz#998587 underspecific build requires (of nss)
  - Resolves: rhbz#1002312 IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  - Resolves: rhbz#1002633 openswan needs -fips subpackage that would provide the FIPS hmac files


author: Stef Walter <stefw@redhat.com> - 0.18.0-1
changelog:
  - Update to new upstream stable release
  - Various logging tweaks (#928914, #928750)
  - Make the 'p11-kit extract-trust' explicitly reject
    additional arguments


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-5
changelog:
  + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-7
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996850
    + Fix: crm_report: Collect corosync quorum data
      Resolves: rhbz#989292


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-8
changelog:
  + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
      Resolves: rhbz#997346


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-9
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  - Remove unsupported resource agent
      Resolves: rhbz#1005678
  - Provide a meaningful error if --master is used for primitives and groups


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: cman: Do not start pacemaker if cman startup fails
    + Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996850


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-12
changelog:
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
      Resolves: rhbz#1011618
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
      Resolves: rhbz#902407
  - Fix: crm_resource: Observe --master modifier for --move
      Resolves: rhbz#902407


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-14
changelog:
  - Log: crmd: Supply arguments in the correct order
      Resolves: rhbz#996850
  - Fix: Invalid formatting of log message causes crash
      Resolves: rhbz#996850


author: William Cohen <wcohen@redhat.com> - 5.1.1-1
changelog:
  - Rebase to 5.1.1 for:
    - rhbz726798: Support for Sandy Bridge in PAPI
    - rhbz785258: FP event on Sandy Bridge when HT enabled
    - rhbz743648: Support for access to various energy and perf registers via papi 
    - rhbz831751: Ivy Bridge: support PAPI 
    - rhbz740909: Allow parallel builds
    - rhbz785975: Correct use of apostrophes in PAPI documentation


author: Brian C. Lane <bcl@redhat.com> 2.1-21
changelog:
  - Raise size limit on loop devices
    Resolves: #869743
  - Remove dm device when last partition is removed
    Resolves: #851705


author: Doug Ledford <dledford@redhat.com> - 2.0-1
changelog:
  - Update to latest upstream release
  - We had to drop ib_clock_test program as no equivalent exists
    in the latest release
  - Resolves: bz806183, bz806185, bz830099


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Fix rpmdiff detected error.  Upstream overrode our cflags so stack
    protector got turned off.
  - Related: bz806183


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915693 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915693 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915693 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-132
changelog:
  - Resolves: #767608 - Fix memory leak when accessing non-matched named
    capturing groups
  - Resolves: #839788 - Do not crash if declared DESTROY method has not been
    defined


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-133
changelog:
  - Resolves: #698552 - Correct taintedness tests
  - Resolves: #825713 - Fix find2perl to translate ? glob properly
  - Resolves: #810469 - Upgrade IO-Compress, Compress-Raw-Bzip2, and
    Compress-Raw-Zlib to 2.021
  - Resolves: #819042 - Set default output for Pod::Man and Pod::Text
    parse_file() methods
  - Resolves: #905482 - Require glibc-devel, gdbm-devel, db4-devel by perl-devel


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-134
changelog:
  - Resolves: #973022 - Make non-option handler for Getopt::Long::GetOptions()
    compatible with XML::Simple


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Ade Lee <alee@redhat.com> 9.0.3-31
changelog:
  - Resolves #887305 - /var/run/pki/ca has wrong selinux context
  - Resolves #895702 - pki-cad restart avc denial


author: Ade Lee <alee@redhat.com> 9.0.3-32
changelog:
  - Resolves #999055 - AVC denials during ipa server and replica installs
  - Resolves #998715 - Package Sanity Test Failures


author: Matthew Barnes <mbarnes@redhat.com> - 0.14.4-10
changelog:
  - Resolves: rhbz#973289 rebuild against newer evolution-data-server
  - Also add planner-0.14.4-edsapi.patch from Fedora 14 package.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.31
changelog:
  - Make setsebool less verbose on errors
  Resolves:#984484
  - Make <<none>> spec working for semanage fcontext
  - Make audit2allow witn o option to append output instead of write


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.33
changelog:
  - Fix semanage
  Resolves:#860506
  - Make semanage man page and help consistent
  - Fix setsebool to give better error message on bad boolean names
  - Add support for exclude dirs in fixfiles
  - Fix semanage boolean to require a value


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.37
changelog:
  - Add workaround to make allow_polyinstantiation=1 directive working for xguest with semanage-booleans
  Resolves:#1008790


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-3
changelog:
  - New version of unlimit-fds patch
  - Fixed error message if FDs limit is reached (by fd-limit-err patch)
    Related: rhbz#998021


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-42
changelog:
  - Add an explicit RPATH to _elementtree.so pointing at the directory
  containing system expat
  Resolves: rhbz#962779


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.6-4
changelog:
  - make get_active_devices() return IPv6-only devices, too
  Resolves: rhbz#855920
  - make pifconfig output all IPv4 addresses for all devices
  Resolves: rhbz#876211


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-0.12.1.2-2.406.el6
changelog:
  - Reverted spurious fix for BZ 981623 [bz#1010930]
  - Resolves: bz#1010930
    (Qemu-kvm-rhev build verifytest failed (rpm -V))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.407.el6
changelog:
  - kvm-usb-host-remove-message.patch [bz#1003771]
  - Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-qemu-kvm-fix-reset-value-of-MSR_PAT.patch [bz#976706]
  - Resolves: bz#1003771
    (warning msg not correct after hotplug invalid usb-host to guest)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)
  - Resolves: bz#976706
    ([HP BCS 6.5 Bug]Guest OS cannot boot after first reboot when enabling SR-IOV feature)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.408.el6
changelog:
  - Fix Qemu guest agent - move logfiles to new directory for easier SELinux tagging [bz#1009431]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007224]
  - Resolves: bz#1007224
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009431
    (move qga logfiles to new /var/log/qemu-ga/ directory)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.409.el6
changelog:
  - kvm-exec-Simplify-allocation-of-guest-RAM.patch [bz#867921]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#867921]
  - kvm-block-better-error-message-for-read-only-format-name.patch [bz#999788]
  - kvm-vmdk-Add-migration-blocker.patch [bz#999358]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1013478]
  - kvm-Add-support-for-JSON-pretty-printing.patch [bz#1010610]
  - kvm-qemu-img-add-dirty-flag-status.patch [bz#1010610]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e2.patch [bz#1010610]
  - kvm-qapi-Add-SnapshotInfo-and-ImageInfo.patch [bz#1010610]
  - kvm-qemu-img-Add-json-output-option-to-the-info-command.patch [bz#1010610]
  - kvm-qemu-img-Add-backing-chain-option-to-info-command.patch [bz#1010610]
  - kvm-block-get_block_status-set-pnum-0-on-error.patch [bz#1010610]
  - kvm-block-get_block_status-avoid-segfault-if-there-is-no.patch [bz#1010610]
  - Resolves: bz#1010610
    (Backport  option "--output=json|human" to qemu-img info command)
  - Resolves: bz#1013478
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#867921
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#999358
    (do live migration with used VMDK format disk should fail with a friendly message prompt)
  - Resolves: bz#999788
    (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.410.el6
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#995341]
  - Resolves: bz#995341
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.411.el6
changelog:
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1009370]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1009370]
  - Resolves: bz#1009370
    (qemu-img refuses to open the vmdk format image its created)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.412.el6
changelog:
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#985205]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#985205]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#985205]
  - kvm-os-posix-block-SIGUSR2-in-os_setup_early_signal_hand.patch [bz#996814]
  - Resolves: bz#985205
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#996814
    (boot image with gluster native mode cant work with attach another device from local file system)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.413.el6
changelog:
  - kvm-scsi-Allocate-SCSITargetReq-r-buf-dynamically-CVE-20.patch [bz#1007330]
  - kvm-scsi-Fix-data-length-SCSI_SENSE_BUF_SIZE.patch [bz#956929]
  - Resolves: bz#1007330
    (CVE-2013-4344 qemu: buffer overflow in scsi_target_emulate_report_luns)
  - Resolves: bz#956929
    (/usr/libexec/qemu-kvm was killed by signal 6 (SIGABRT) when SCSI inquiry is sent to unsupported page inside the KVM guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.12.1.2-2.414.el6
changelog:
  - kvm-vmstate-Add-max_version_id-field-to-VMStateDescripti.patch [bz#1016736]
  - kvm-savevm-Introduce-max_version_id-field-to-SaveStateEn.patch [bz#1016736]
  - kvm-i386-Set-cpu-section-version_id-to-11.patch [bz#1016736]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1015633]
  - Resolves: bz#1015633
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#1016736
    (CPU migration data has version_id 12 but version 11 format)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.415.el6
changelog:
  - kvm-target-i386-don-t-migrate-steal-time-MSR-on-older-ma.patch [bz#1022821]
  - Resolves: bz#1022821
    (live-migration from RHEL6.5 to RHEL6.4.z fails with "error while loading state for instance 0x0 of device 'cpu'")


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-19
changelog:
  - Report quotacheck failures by return code (bug #717948)
  - Improve quotacheck error message (bug #717948)
  - Do not fiddle with quota files on XFS and GFS (bug #846120)
  - Allow to set limits using multiplicative units (bug #890051)


author: Soren Sandmann <ssp@redhat.com> 1.7.1-1
changelog:
  - Rebase to 1.7.1 (#852890, #902912, #914279)
  - Add patches from 
      http://sourceforge.net/p/rdesktop/patches/214/
    to rework redirect PDU handling (#701246)


author: David Vossel <dvossel@redhat.com> - 3.9.2-31
changelog:
  - Fixes lvm agent unncessarily removing PVs/LVs when some
    PVs in VG fail.

    Resolves: rhbz#884326


author: David Vossel <dvossel@redhat.com> - 3.9.2-35
changelog:
  - Fixes invalid return statement in LVM retry clvmd activation
  - Adds ability to disable findmnt to avoid autofs complications
    for fs-util based rgmanager agents.

    Resolves: rhbz#974941
    Resolves: rhbz#989284


author: David Vossel <dvossel@redhat.com> - 3.9.2-37
changelog:
  - Fixes lvm metadata corruption caused when activating by lv
    using tags.

    Resolves: rhbz#1009772


author: David Vossel <dvossel@redhat.com> - 3.9.2-38
changelog:
  - Removes usage of fuser -kvm from fs-lib.sh based agents.
    This resolves issue with fuser blocking netfs mounts.
  - tomcat-6.sh, Do not fail on stop if config validation fails.
  - tomcat-6.sh, Set tomcat usr correctly.

    Resolves: rhbz#981717 
    Resolves: rhbz#983273
    Resolves: rhbz#1014298


author: David Vossel <dvossel@redhat.com> - 3.9.2-39
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.

    Resolves: rhbz#989284


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-18
changelog:
  - rgmanager: Fix potential unlocked memory access
    rgmanager: Fix for double pthread_mutex_unlock() calls
    rgmanager: Don't destroy locked mutexes
    rgmanager: Fix unlikely NULL ptr deref
    Resolves: rhbz#983296


author: Chris Feist <cfeist@redhat.com> - 0.16.2-64
changelog:
  - Automatically add unfencing section when adding scsi fence agents
  - Prevent ccs_sync from segfaulting when multiple hostnames were provided
  - ccs --lsmisc now shows fence_daemon options
  - ccs --lsresourceopts has been added as an alias to --lsserviceopts
  - Resolves: rhbz#853890 rhbz#877863 rhbz#893574 rhbz#918555


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-33
changelog:
  - Fix build-time double-free on file capability processing (#904818)
  - Fix include-directive getting processed on false branch (#920190)


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-56.rc4
changelog:
  - Fix libwbclient.so.0 symlink.
  - resolves: #882338
  - Fix correct linking of libreplace with cmdline-credentials.
  - resolves: #911264


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-57.rc4
changelog:
  - resolves: #984809 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-155
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #951175


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-156
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #980382


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-158
changelog:
  - resolves: #984808 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-159
changelog:
  - resolves: #995109 - net ads join - segmentation fault if no realm has been
                        specified.
  - List all vfs, auth and charset modules in the spec file.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-160
changelog:
  - resolves: #948071 - Group membership is not correct on logins with new
                        AD groups.
  - resolves: #953985 - User and group info not return from a Trusted Domain.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-161
changelog:
  - resolves: #997338 - Fix smbstatus as non root user.
  - resolves: #1003689 - Fix Windows 8 printer driver support.


author: - Andreas Schneider <asn@redhat.com> - 3.6.9-164
changelog:
  - resolves: #1008574 - Fix offline logon cache not updating for cross child
                         domain group membership.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-2
changelog:
  - Fix mounted filesystem is shown as disabled when fstab entry uses link, UUID or LABEL
    Resolves: #921482


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-5
changelog:
  - Allow overriding values in macro scl_package (#957185)
  - Delete redundant argument from check_asprintf (#957183)
  - Enable all collections given as arguments, not just the first one (#949995)
  - Prevent collections to be enabled multiple times (#955669)


author: Andy Grover <agrover@redhat.com> - 1.0.24-4
changelog:
  - Add patches
    * 0001-iser-Fix-bidirectional-chap.patch
    * 0002-bs_aio-use-64bit-to-read-eventfd-counter.patch
    * 0003-iser-added-huge-pages-support.patch
    * 0004-iser-added-parameter-for-pool-size.patch
    * 0005-iser-limit-number-of-CQ-entries-requested.patch
    * 0006-iser-add-CQ-vector-param.patch
    * 0007-Rework-param_set_val-and-friends.patch
    * 0008-return-Reject-in-iscsi-login-text-failure.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-9
changelog:
  - Redo patches to use 'git format-patch' naming
  - Add more backported patches:
    * 0014-iser-Don-t-wait-until-iser_ib_init-to-init-list_head.patch
    * 0015-iser-cleaning-iser-ib-objects-on-lld-exit.patch
    * 0016-iser-Don-t-release-IB-resources-if-were-not-allocate.patch
    * 0017-Fix-possible-segfault-on-logicalunit-update.patch


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-4
changelog:
  - backport fix for request argument memory leaks in NIS server (#967468)
  - backport fix for dispatching for multiple connected clients in the NIS
    plugin (#923336)


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-3
changelog:
  - Add versioned Requires for glib2/gtk2 as spice-gtk is using symbols
    which were added in these versions
    Resolves: rhbz#980400
  - If software smartcard support is already initialized when creating a
    smartcard channel, don't consider this as a fatal error
    Resolves: rhbz#815639
  - Convert text line-endings if necessary
    Resolves: rhbz#752350


author: Christophe Fergeau <cfergeau@redhat.com> 0.20-4
changelog:
  - Adjust BuildRequires to make sure new enough glib/gtk+ are used
    at build time as glib 2.26 is needed for proxy support
    Resolves: rhbz#948618


author: Alon Levy <alevy@redhat.com> 0.20-11
changelog:
  - Fix failed RELRO test on spice-client-glib.
    Resolves: rhbz#998529 (previous version failed RELRO rpmdiff test)


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-5
changelog:
  - Allow having a sparse monitor config (ie monitor 1 and 3 active)
    Resolves: rhbz#894036
  - Fix session spice-vdagent crash on system spice-vdagentd restart
    Resolves: rhbz#894365
  - Don't log a warning when there are less qxl devices then monitors
    Resolves: rhbz#895004
  - Restore old monitor config when failing to set a new monitor config
    Resolves: rhbz#881020


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - Rebase to spice-vdagent-0.14.0 release
  - Drop all patches (all upstream)
    Resolves: rhbz#951596
  - Advertise Unix line-endings for clipboard data
    Resolves: rhbz#799482
  - Add support for setups with multiple Screens
    Resolves: rhbz#904082
  - Make console-kit integration runtime configurable
    Resolves: rhbz#904084


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-2
changelog:
  - Silence session agent error logging when not running in a vm
    Resolves: rhbz#999804
  - Release guest clipboard ownership on client disconnect
    Resolves: rhbz#1003977


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-120
changelog:
  - Resolves: #983028 - passwd returns "Authentication token manipulation
                        error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-121
changelog:
  - Print password complexity hint when password change fails with
    constraint violation
  - Related: #983028 - passwd returns "Authentication token manipulation
                       error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-122
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-123
changelog:
  - Silence restorecon on clean install
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-124
changelog:
  - Resolves: #1002161 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-125
changelog:
  - Resolves: #997406 - sssd_nss core dumps under load
  - Resolves: #984814 - sssd_nss terminated with segmentation fault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-126
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - A better version of already committed patch
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-128
changelog:
  - More upstream fixes to prevent memcache crashes
  - Related: #997406 - sssd_nss core dumps under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129
changelog:
  - Do not crash when LDAP disconnects while a search is still in progress
  - Resolves: #1019979 - sssd_be segfault when authenticating against active
                         directory


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-8
changelog:
  - updated man-page
  - fixed handling of RLIMIT_NPROC resource limit
  - fixed alias cycle detection code
  - added debug messages for tracing of netgroup matching
  - fixed aborting on realloc when displaying allowed commands
  - show the SUDO_USER in logs, if running commands as root
  - sssd: filter netgroups in the sudoUser attribute
    Resolves: rhbz#856901
    Resolves: rhbz#947276
    Resolves: rhbz#886648
    Resolves: rhbz#994563
    Resolves: rhbz#848111
    Resolves: rhbz#994626
    Resolves: rhbz#973228
    Resolves: rhbz#880150


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-9
changelog:
  - sssd: match against ipa_hostname from sssd.conf too when
    checking sudoHost
    Resolves: rhbz#853542


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-21
changelog:
  - resolves: #838914
    keep log files for 28 days instead of 7
  - resolves: #916396
    fixed buffer overflow in iostat program when inspecting encrypted disks
  - resolves: #826399, #826403, #804534
    added support for persistent device names
  - resolves: #888823
    increased NR_CPUS and NR_IRQS constants
  - resolves: #820992
    made init script LSB
  - resolves: #850810
    added iostat option to report interval statistics in first report


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-22
changelog:
  - resolves: #996134
    fixed umask command in sa1 script
  - resolves: #967386
    documented and partialy fixed regression caused by sysstat-9.0.4-diskstats.patch


author: Lukas Berk <lberk@redhat.com> - 2.3-2
changelog:
  - rhbz998595: rpm -V systemtap-server complains
  - rhbz996091: systemtap.syscall/syscall.exp regressed on i686 and x86_64
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996097: systemtap.base/execve.exp fails on i686 and ppc64
  - rhbz996079: systemtap.base/warn_overflow.exp regressed on i686 and ppc64
  - rhbz915180: utrace_syscall_args.exp on s390x: "FAIL: 32_BIT_UTRACE_SYSCALL_ARGS shutdown (eof)"
  - rhbz996065: systemtap.base/bz10078.exp regressed
  - rhbz996072: systemtap.base/kmodule.exp regressed on s390x and ppc64
  - rhbz996080: systemtap.context/fib.exp regressed on s390x
  - rhbz996103: systemtap.base/bad-code.exp regressed on s390x
  - rhbz1008567: broken tapsets on s390x - print_ubacktrace() and print_ubacktrace_brief()
  - rhbz996087: systemtap.server/server_locale.exp regressed on all arches


author: Lukas Berk <lberk@redhat.com> - 2.3-3
changelog:
  - rhbz996084: systemtap.exelib/exelib.exp regressed on s390x and x86_64
  - rhbz996077: systemtap.base/utrace_p5.exp got unstable on i686 and x86_64
  - rhbz874205: [FJ6.2 Bug] systemtap crashes


author: Harald Hoyer <harald@redhat.com> 147-2.47
changelog:
  - add OPTIONS="log_priority=<loglevel>" for debugging purposes
  Resolves: rhbz#947067
  - limit default udevd maximum childs
  Resolves: rhbz#833172 rhbz#885978
  - add scm path_id support
  Resolves: rhbz#888647
  - header fix for C++
  Resolves: rhbz#909792
  - scsi_id: retry on EBUSY
  Resolves: rhbz#920961


author: Karel Zak <kzak@redhat.com> 2.17.2-12.13
changelog:
  - fix #816342 - agetty: improve CLOCAL flag management
  - fix #846790 - missing information about threads in kill(2) man page
  - fix #864585 - "mount -av" displays "nothing was mounted" when a /sbin/mount.<fs> successed
  - fix #868850 - sfdisk man pages should refer block devices as "block devices" rather than disks.
  - fix #870128 - improve blkid documentation
  - fix #870854 - Cannot use user@domain format for console logins
  - fix #872291 - "man hwclock" says to run non-existent "adjtimex" utility
  - fix #958313 - Add /bin/logger symlink
  - fix #885313 - hexdump segfault
  - fix #915844 - mount man page incorrectly describes behaviour of "relatime" mount option
  - fix #947062 - blkdiscard command support
  - fix #966735 - CPU add/delete util-linux-ng patch
  - fix #859523 - fallocate: add punch hole support


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-0.9.gite9db007b
changelog:
  - Add a timestamp to the metrics.
  - Fix a typo in MemoryAllocatedToVirtualServers metric
    (https://bugzilla.redhat.com/show_bug.cgi?id=532070#c7)
  - /etc/sysconfig/vhostmd: Use libvirt default URI
    (https://bugzilla.redhat.com/show_bug.cgi?id=537828)
  - /etc/init.d/vhostmd: If using libvirt's default URI, then pass
    the root URI to vhostmd (the default URI changes in some circumstances
    when vhostmd switches to the non-root user).


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-2
changelog:
  - Fix the PagedOutMemory and PagedInMemory stats to report MB instead
    of pages (fixes supplied by Joachim Schneider).


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-2.6
changelog:
  - Security: Set supplemental groups correctly when dropping privileges
    resolves: rhbz#741289
  - Remove pagerate.pl Perl script (749875).
  - Delete PID file in stop action
    resolves: rhbz#766674


author: Martin Kletzander <mkletzan@redhat.com> - 0.9.0-19
changelog:
  - Fix changing cirrus->QXL for active VM (rhbz#985184)
  - Top level windows shouldn't be visible by default (rhbz#990507)
  - The bus, device values of USB device is decimal rather than hex (rhbz#820303)
  - Don't fail on selecting network without IP (rhbz#869474)
  - Differentiate duplicate usb devices by bus/addr (rhbz#820303)
  - Remove address when changing watchdog models (rhbz#869206)
  - Add 'pre-startup' signal and do nodedevs checking (rhbz#820303)
  - Create: s/Gb/GB/ for storage units (rhbz#873142)
  - Add support for security relabeling (rhbz#907399)
  - Always show toolbar in customize dialog (rhbz#981628)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.6-1.el6_5
changelog:
  - Rebase to v0.5.6. Resolves: #961455
  - Two monitors are in fullscreen at only one screen (rhbz#809546)
  - Can't Change Resolution in Full Screen (rhbz#846127)
  - Connection dialog should handle connection errors (rhbz#864026)
  - Allow changing guest resolution when started in fullscreen (rhbz#864929)
  - "Unable to connect to the graphic server" error on guest shutdown (rhbz#875697)
  - Cannot change resolution when automatically resize is off (rhbz#908057)
  - full-screen=auto-conf -- setting resolution in a loop (rhbz#908408)
  - Send keys menu offset in fullscreen (rhbz#913601)
  - Support connection file / MIME reigstration (rhbz#908805)
  - Reuse existing 'displays' submenu (rhbz#856682)
  - Window too small after switching off full-screen (rhbz#805146)
  - Move display on client monitors with --full-screen (rhbz#876444)
  - Make window titles configurable (rhbz#904091)
  - Make hotkeys configurable from the cmdline (rhbz#904094)
  - Guest will keep typing '~' after press F9 and F10 in same time (rhbz#820829)
  - Fail to resume guest after do S3 (rhbz#870710)
  - man: document auto-conf fullscreen option (rhbz#875559)
  - Title bar of second form becomes invisible (rhbz#876445)
  - man: document running remote-viewer without URI (rhbz#882133)
  - Fix recent connections (rhbz#882134)
  - Multi-monitors fixes (rhbz#888629)
  - Add a "Do not ask me again" checkbox when closing app (rhbz#905684)
  - Fix menu keyboard interaction (rhbz#924577)
  - man: add -- to seperate program arguments (rhbz#843103)
  - Press Enter to connect in dialog (rhbz#885106)
  - Change of resolution switches previously disabled display back on (rhbz#958966)
  - All "windows" have the same resolution in fullscreen (rhbz#886570)
  - Removed plugin


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.6-2
changelog:
  - Use -H instead of -h for the short --hotkeys (rhbz#980846)
  - remote-viewer.desktop: Fix missing trailing ;


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-6
changelog:
  - Unregister events and callbacks on dispose, silence a libvirtd error when
    virt-viewer shuts down (rhbz#890297)


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-7
changelog:
  - Always ask for confirmation when quitting remote-viewer, even when in
    fullscreen (rhbz#905684)
  - Show an error message when trying to use a wrong SPICE password
    (rhbz#990883)
  - Make sure resolution higher than native can be set in fullscreen
    (rhbz#864929)


author: Christophe Fergeau <cfergeau@redhat.com> 0.5.6-8
changelog:
  - Re-add patch to propagate 'send-ctrlaltdel' setting from the controller
    to spice-gtk, this was dropped by mistake during the 6.5 rebase
    Resolves: rhbz#1007205


author: Peter Hatina <phatina@redhat.com> 1.8.8-6
changelog:
  - security patches
  - Resolves: CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-3557


author: Peter Hatina <phatina@redhat.com> 1.8.10-1
changelog:
  - upgrade to 1.8.10
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.8.10.html
  - Related: #711024


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-11
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#961501)
  - xfs_io: Update  man page to include chproj, lsproj (#962394)
  - xfs_io: Remove broken setfl command (#962394)
  - xfs_logprint: Handle multiply-logged fields (#962397)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#964216)
  - xfs_repair: avoid segfault with ag_stride (#93904)


author: Adam Jackson <ajax@redhat.com> 1.6.1-10
changelog:
  - mga-1.6.1-char-cell-modes.patch: Filter out modes whose horizontal timings
    aren't character-cell aligned on G200SE and friends (#894959)


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-2.20130401git81aadb8
changelog:
  - Silence rpmlint warning about ldconfig
  - Only install libglamor.so in devel package.
  - Adding COPYING and README as doc


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-3.20130401git81aadb8
changelog:
  - Remove comment rather than investigating Xorg mess as running ldconfig can't be harmfull.
  - Fix devel package dependency.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-19
changelog:
  - Fix bad mouse offset when crossing Xephyr screens (#991077)
  - Fix doubling of mouse coords in multi-screen setups (#1004241)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-20
changelog:
  - Fix broken Xorg -configure (#1016854)
  - CVE-2013-1940: Fix xf86FlushInput() to drain evdev events too (#950438)
  - CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)


author: James Antill <james.antill@redhat.com> - 4.3.10-7
changelog:
  - Change {NAME:OFFSET:LENGTH} substitution feature to ignore KSH_ARRAYS option.
  - Fixup tests.
  - Resolves: rhbz#820530


author: Richard Jones <rjones@redhat.com> - 3.21-4
changelog:
  - Fix directory permissions to include setgid and sticky bits.
  - Ignore ghost non-regular files.
  - Fix segfault when -u/-g options missing argument.
    related: rhbz#958184


author: Amar Tumballi <atumball@redhat.com> - 3.4.0.31rhs-1
changelog:
  - fixes to geo-replication upgrade script to handle symlink (bz#1001089)
  - fixes to glusterd to handle op-version properly to allow 'volume set' to
    happen even in older clients connected case (bz#1002871)
  - fixes in geo-replication to handle hardlink migration properly (bz#1001498)


author: Amar Tumballi <atumball@redhat.com> - 3.4.0.32rhs-1
changelog:
  - fixes to hardened build to pass execstack check in rpmdiff
  - fix the compatibility issue with older servers (bz#999944)


author: Amar Tumballi <atumball@redhat.com> - 3.4.0.34rhs-1
changelog:
  - bug fixes for 852140 950314 980778 998832 998914 998943 1000922
    1000996 1001893 1001895 1002022 1002613 1003580 1005460 1005478
    1005553 1006172 1007866 1008173 1009851 1011694 1011905


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.35rhs-1
changelog:
  - bug fixes for 969461 1000948 1000936 1011694 1013556 1016971 979641
    950314 852140 980778 1006172 1005553 1005478 1007866 998914 981035


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.36rhs-1
changelog:
  - bug fixes for 1002885 1021808 1007536 1017014 1012216 998786 977544
    1016385 858434 1001895 1012900 980910 1001556


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Put the udev rules file in the right place
    Resolves: rhbz866732
  - include a patch from upstream to fix undefined references
    Resolves: rhbz887730


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-1
changelog:
  - Rebase to libguestfs 1.20.11.
    resolves: rhbz#958183
  - Remove buildnet: builds now detect network automatically.
  - The rhel-6.x branches containing the patches used in RHEL are
    now stored on a public git repository
    (https://github.com/libguestfs/libguestfs/branches).
  - Compare spec file to Fedora 18 and fix where necessary.
  - Backport new APIs part-get-gpt-type and part-set-gpt-type
    resolves: rhbz#965495
  - Fix DoS (abort) due to a double free flaw when inspecting certain guest
    files / images (CVE-2013-2124)
    resolves: rhbz#968337
  - libguestfs-devel should depend on an explicit version of
    libguestfs-tools-c, in order that the latest package is pulled in.
  - Rebuild against Augeas >= 1.0.0-5
    resolves: rhbz#971207
  - Backport Windows inspection changes
    resolves: rhbz#971090
  - Add back state test commands to guestfish
    resolves: rhbz#971664
  - Work around problem with ntfsresize command in RHEL 6
    resolves: rhbz#971326
  - Fix txz-out API
    resolves: rhbz#972413
  - Move virt-sysprep to the libguestfs-tools-c package since it's no longer
    a shell script
    resolves: rhbz#975572
  - Fix hostname inspection because of faulty Augeas path expression
    resolves: rhbz#975377
  - Calculate appliance root correctly when iface drives are added
    resolves: rhbz#975760
  - Add notes about resizing Windows disk images to virt-resize documentation
    resolves: rhbz#975753
  - Remove dependency on lsscsi, not available in 6Client
    resolves: rhbz#973425
  - Fix yum cache copy so it works if there are multiple repos
    resolves: rhbz#980502
  - Fix hivex-commit API to fail with relative paths
    resolves: rhbz#980372
  - Better documentation for filesystem-available API
    resolves: rhbz#980358
  - Fix double free when kernel link fails during launch
    resolves: rhbz#983690
  - Fix virt-sysprep --firstboot option
    resolves: rhbz#988863
  - Fix cap-get-file so it returns empty string instead of error on no cap
    resolves: rhbz#989352
  - Better documentation for acl-set-file
    resolves: rhbz#985269
  - Fix bogus waitpid error when using guestfish --remote
    resolves: rhbz#996825
  - Disable 9p support
    resolves: rhbz#997884
  - Document that guestfish --remote doesn't work with certain other arguments
    resolves: rhbz#996039
  - Enable kvmclock in the appliance to reduce clock instability
    resolves: rhbz#998108
  - Fix 'sh' command before mount causes daemon to segfault
    resolves: rhbz#1000122
  - Various fixes to tar-out 'excludes' (RHBZ#1001875)
  - Document use of glob + rsync-out (RHBZ#1001876)
  - Document mke2fs blockscount (RHBZ#1002032)


