# changelog

author: Dave Anderson <anderson@redhat.com> - 6.1.0-4.el6
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1006622
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1017930
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1019483


author: Dave Anderson <anderson@redhat.com> - 7.1.0-2.el6
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1195596


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6
changelog:
  - Fortify the error handling of task gathering from the pid_hash[]
    chains during session initialization to prevent an endless loop if
    data structures have been corrupted.
    Resolves: rhbz#1208557


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6_7
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1284762


author: Dave Anderson <anderson@redhat.com> - 7.1.0-4.el6
changelog:
  - Fixes for the handling of truncated/incomplete flat-format vmcores, which
    may cause the session to hang during initialization.
    Resolves: rhbz#1231976
  - Fix for the "timer" command, which may fail with the error message
    "timer: cannot allocate any more memory!" when run on a kernel with
    an extremely large number of cpus.
    Resolves: rhbz#1238403


author: Dave Anderson <anderson@redhat.com> - 7.1.0-5.el6
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1283000


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Dave Anderson <anderson@redhat.com> - 1.0-1.2
changelog:
  - fix Makefile to account for s390 build
  - change exclusive arch entry from i386 to i386 i486 i586 i686 pentium3 pentium4 athlon geode
  - Resolves: rbhz#545564


author: Dave Anderson <anderson@redhat.com> - 1.0-2
changelog:
  - Fix for segmentation violation with "trace show -c cpu" command,
    and add "trace dump -t" command.
    Resolves: rbhz#592887


author: Dave Anderson <anderson@redhat.com> - 1.0-3
changelog:
  - Remove trace_dump.patch, which requires a kernel later than
    the RHEL6 base of 2.6.32.
    Resolves: rbhz#601536


author: John W. Linville <linville@redhat.com> 1.1.0_2009.11.25-3
changelog:
  - Add man page for setregdomain (from Andrew Hecox <ahecox@redhat.com>)
  - Change $RPM_BUILD_ROOT to buildroot


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-2
changelog:
  - Change RPM_OPT_FLAGS to optflags
  - Leave man page compression to rpmbuild
  - Correct date in previous changelog entry


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-3
changelog:
  - Correct license tag from BSD to ISC
  - Comment purpose of regulatory-rules-setregdomain.patch
  - Add copyright and license statement to setregdomain
  - Add comment for why /lib is hardcoded in files section
  - Reformat Dec 21 2009 changelog entry so rpmlint stops complaining


author: John W. Linville <linville@redhat.com> 1.1.3_2013.11.27-1
changelog:
  - Update for crda version 1.1.3
  - Update wireless-regdb to version 2013.11.27 
  - Correct version in previous changelog entry


author: James Antill <james.antill@redhat.com> - 0.9.9-17
changelog:
  - Use .gz as the default compression for modifyrepo.
  - Document --compress-type in createrepo man page.
  - Resolves: rhbz#874682


author: James Antill <james.antill@redhat.com> - 0.9.9-18
changelog:
  - Option -C does nothing on empty repo.
  - Resolves: rhbz#877301
  - Fix the options documentation.
  - Resolves: rhbz#892657


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-19
changelog:
  - Options --checksum, --unique-md-filenames, --simple-md-filenames for modifyrepo.
  - Resolves: rhbz#952602


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-20
changelog:
  - Catch IOErrors when loading pkglist.
  - Resolves: rhbz#1083185
  - Fix OSError when running createrepo on CIFS shares.
  - Resolves: rhbz#1035588


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - Make sure filename doesn't already contain a checksum.
  - Resolves: bug#1104840
  - Remove nonexistent --no-compress option from the manpage.
  - Resolves: bug#1106454


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-3
changelog:
  - 624043 selinux issue done by leaking file decriptor
  - crontab has wrong permission 676081 & fix in files section 6755->4755
  - 615107 echos twice OK in init script
  - 677364 common criteria - freeing, cleaning code
  - 676040 add relro and PIE into compiler flags
  - Resolves: rhbz#624043, rhbz#676081, rhbz#615107, rhbz#677364, rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-4
changelog:
  - 675077 anacron runs hourly instead of daily=>wrong option in bash script
  - fix common criteria patch 677364
  - Resolves: rhbz#675077


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-6
changelog:
  - apply relro (CFLAGS&DFLAGS) in specfile, because in configure we
   need to call autoreconf.
  - Resolve: rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-7
changelog:
  - switch off --enable-pie, because it's overloaded with flags in spec
  - added RPM_OPT_FLAGS into CFLAGS
  - Related: rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-9
changelog:
  - during spring DST change are jobs executed 61 times if they are set
    for 2:00 or 3:00 am.
  - 995089 - incorrectly running jobs when time difference is negative
  - cronie doesn't drop privileges before popen
  - adoptions at the crontab orphanage needed
  - config file permissions are world readable
  - 733697 - Service restart needlessly reports failure
  - 743473 - Confusing comments in /etc/cron.hourly/0anacron
  - 887859 - Incorrect example in anacrontab manpage
  - 990710 - cron disallows setting PATH via PAM
  - 985893 - do not use putenv
  - 985888 - cronie drops $LANG and never passes it on to jobs run
  - 829910 - random prefix in crontables for running jobs
  - 922829 - crond generating invalid emails 
  - 919440 - prevent new crond process when already running 
  - Resolves: rhbz#821046, rhbz#697485, rhbz#738232, rhbz#706979, rhbz#733697
  - Resolves: rhbz#743473, rhbz#887859, rhbz#990710, rhbz#985893, rhbz#985888
  - Resolves: rhbz#829910, rhbz#922829, rhbz#995089, rhbz#919440


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.4-14
changelog:
  - fix segfault on null dereference in anacron (#1031383)
  - do not remove daemon pid file in the child process
  - add log message about crond shutdown (#1108384)
  - add log message when getpwnam fails


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-26
changelog:
  - change /etc/crontab. All anacron jobs in cron.daily,weekly,...
   are check by anacron every hour. Anacron run them if they didn't
   run today.


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-30
changelog:
  - 491793 thanks Andrew Hecox for patch which allows set allow/deny jobs
  - comment change "empty crontab"


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-33
changelog:
  - add into example in crontab user-name
  - change name of crontab to crontab1 to be able add patch into cvs
  - Resolves: rhbz#609544


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-9
changelog:
  - certwatch: Fixed cert expiry time calculations (#473860)
  - keyutil: Fixed segfault on certificate generation (#479886)
  - genkey: Fixed key file name extension


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-14
changelog:
  - keyutil: Fixed bug where key pem file was not written (#473860)
  - keyutil: Fixed reverse logic that prevented output of the pem encoded key


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-18
changelog:
  - certwatch: Fixed cert expiry time calculations (#473860)
  - keyutil: Fixed segfault on certificate generation and missing of key/cert pem files (#479886)


author: Joe Orton <jorton@redhat.com> - 2.4.1-24.3
changelog:
  - fix segfaults in keyutil (#870182)
  - keyutil: use SHA256 by default, SHA384 or 512 for larger keys (#1146247)
  - genkey: update SHA choice, default key sizes (#1146247)
  - genkey: only fail in --nss mode if mod_nss is missing. (#845940)
  - update reqs/BRs for new-enough nss-util (#1146247)
  - certwatch: fix failure for certfiles containing private keys (#893308)


author: Milan Broz <mbroz@redhat.com> - 1.2.0-1
changelog:
  - Update to cryptsetup 1.2.0
  - Use generic crypto backend interface.
  - Add fipscheck compile option.
  - Use gcrypt RNG in FIPS mode for key generation.
  - Add FAQ to documentation.
    Resolves: #658817 #663870 #663869


author: Milan Broz <mbroz@redhat.com> - 1.2.0-2
changelog:
  - Require libgcrypt and device-mapper versions supporting FIPS extensions.
  - Request buffer wipe for dm-ioctl when sending key data.
    Resolves: #674825


author: Milan Broz <mbroz@redhat.com> - 1.2.0-3
changelog:
  - Require updated device mapper library (secure flag).
  - Use FIPS RNG for keyslot salt in FIPS mode.
    Resolves: #692512 #693371


author: Milan Broz <mbroz@redhat.com> - 1.2.0-7
changelog:
  - Fix device lookup function.
  - Fix duplicate directories displayed in status output.
    Resolves: #755478 #746648


author: Milan Broz <mbroz@redhat.com> - 1.1.1-0.2
changelog:
  - Update to cryptsetup 1.1.1-rc2.
  - Align device using topology info if available.
    Resolves: #569949


author: Milan Broz <mbroz@redhat.com> - 1.1.2-1
changelog:
  - Fix handling of newline with keyfile on standard input.
  - Fix alignment ioctl use.
  - Fix API activation calls to handle NULL device name.
    Resolves: #598523 #569949 #599617


author: Ondrej Kozina <okozina@redhat.com> - 1.6.4-2
changelog:
  - patch: use fsync instead of O_DIRECT mode while writting reencryption log.
  - patch: remove warning phrase while invoking cryptsetup-reencrypt tool.
  - Resolves: #1130141 #1140201


author: Sarantis Paskalis <paskalis@di.uoa.gr> - 0.5-11
changelog:
  - Restructure spec file according to
    https://fedoraproject.org/wiki/Fonts_SIG_Fedora_11_packaging_changes
    (bug #477461)
  - Split package to cm-lgc-fonts (.pfb and .afm) and tetex-font-cm-lgc 
    (TeX stuff)
  - Include .afm files (forgotten in the previous versions)


author: Sarantis Paskalis <paskalis@di.uoa.gr> - 0.5-14
changelog:
  - Rename the package to ctan-cm-lgc-fonts
  - Name the subpackages according to 
    http://fedoraproject.org/wiki/PackagingDrafts/Font_package_naming_(2009-01-13)
  - Update to fontpackages-* >= 1.15


author: Sarantis Paskalis <paskalis@di.uoa.gr> - 0.5-15
changelog:
  - Address comments in https://bugzilla.redhat.com/show_bug.cgi?id=480589#c2
    (thanks Nicolas Mailhot)
      - Add a buildrequires for texlive-texmf
      - Remove Requires: fontpackages-filesystem from main and add to common
        subpackage.


author: Sarantis Paskalis <paskalis@di.uoa.gr> - 2.0-16
changelog:
  - Restructure spec file according to
    https://fedoraproject.org/wiki/Fonts_SIG_Fedora_11_packaging_changes
    (bug #477462)
  - Split package to cm-lgc-fonts (.pfb and .afm) and tetex-font-cm-lgc
    (TeX stuff)
  - Include .afm files (forgotten in the previous versions)


author: Sarantis Paskalis <paskalis@di.uoa.gr> - 2.0-17
changelog:
  - Rename the package to ctan-kerkis-fonts
  - Name the subpackages according to
    http://fedoraproject.org/wiki/PackagingDrafts/Font_package_naming_(2009-01-13)
  - Update to fontpackages-* >= 1.15


author: Sarantis Paskalis <paskalis@di.uoa.gr> - 2.0-18
changelog:
  - Address comments in https://bugzilla.redhat.com/show_bug.cgi?id=480591#c2
    (thanks Nicolas Mailhot)
      - Add a buildrequires for texlive-texmf
      - Remove Requires: fontpackages-filesystem from main and add to common
        subpackage.
      - Fix Obsoletes to cover latest update for F-10
      - Add -calligraphic-fonts subpackage
      - Add substitution rules for fonts from which Kerkis and KerkisSans
        derived
      - Remove tabs to silence rpmlint


author: Sarantis Paskalis <paskalis@di.uoa.gr> - 2.0-23
changelog:
  - Update source (tiny patch in kerkis.sty) (bug #561794). Thanks Jens Petersen
  - Minor housecleaning


author: Ville Skyttä <ville.skytta at iki.fi> - 1.0-2
changelog:
  - Encourage dir based dependency on %{_libdir}/ctapi in packages (#190911).
  - Split contents of README into a separate file.
  - Change license to MIT, include license text.
  - Add URL.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.1-2
changelog:
  - Change group to ctapiusers.
  - Don't hardcode a static gid.
  - Don't remove the group at all.
  - Require shadow-utils for group creation.


author: Sumit Bose <sbose@redhat.com> - 1.0.108-1
changelog:
  - Update to ctdb version 1.0.108
   - added fix for bz537223
   - added tdb-tools to Requires, fixes bz526479


author: Sumit Bose <sbose@redhat.com> - 1.0.108-2
changelog:
  - substituted $RPM_BUILD_ROOT by %{buildroot}
   - fix permissions on event scripts
   - Updated to ctdb version 1.0.108 maintenance release 3,
     git commit f24338e68c462e5cdee3194bb8f3ba18c3ca4672


author: Sumit Bose <sbose@redhat.com> - 1.0.112-1
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 14,
     git commit f5ac659e4df9ba6ee4652aeb9b4f5a01b532fd99
   - resolves: #583771


author: Sumit Bose <sbose@redhat.com> - 1.0.112-2
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 17,
     git commit c07cd2cb042d62ee4adcfa1b75dd423424ca681b


author: Sumit Bose <sbose@redhat.com> - 1.0.112-3
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 18,
     git commit de49edcc0dfea7c4396cdbd9e4897358b5474100


author: Sumit Bose <sbose@redhat.com> - 1.0.114.3-2
changelog:
  - Resolves: rhbz#728545 - ctdbd leaks a file descriptor
   - Resolves: rhbz#727913 - Coverity scan revealed defects


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-1
changelog:
  - Updated to ctdb version 1.0.114.5
   - Resolves: rhbz#821715 - ctdbd on a node crashes when another node in the
     cluster is brought down
   - Resolves: rhbz#758367 - ctdb w/ GFS2: A stable node gets banned
   - Resolves: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-2
changelog:
  - Increased release number to be able to update RHS version of ctdb
   - Related: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-3
changelog:
  - Improve output of ctdb status by adding the number of deleted nodes
   - Fix a memory and an unchecked return value found by coverity
   - Resolves: rhbz#866670 - ctdb status reports more nodes then available
   - Resolves: rhbz#874058 - One resource leak && unchecked return value


author: Sumit Bose <sbose@redhat.com> - 2.5.1-1
changelog:
  - Update to ctdb version 2.5.1
   - Resolves: rhbz#1061630
   - Resolves: rhbz#1085447
   - Resolves: rhbz#987099
   - Resolves: rhbz#1085413


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-69
changelog:
  - Document ErrorPolicy in cupsd.conf manpage (bug #1120587, STR #4457).
  - Prevent cups-polld busy loop when access is restricted (bug #1164854).
  - Apply upstream patch to prevent crash in cupsdContinueJob() (bug #1187840).
  - Added failover backend to support priority-based failover (bug #1115219).
  - Apply patch to fix sanitize_title documentation (bug #988062, STR #4569).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-70
changelog:
  - Fixed SetEnv patch (bug #1198394).
  - Validate ErrorPolicy directory when reading configuration (bug #1196217,
    STR #4591).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-73
changelog:
  - Fix failover backend options parsing (bug #1231322).
  - The socket backend could go into an infinite loop with certain printers
    (bug #1276772, STR #3622)
  - dnssd backend: don't crash if avahi gives a callback with no TXT record
    (bug #1269305)
  - Don't unload jobs that couldn't be saved (bug #1283003, STR #4742).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-76
changelog:
  - 1344782 - Banner pages do not show time-at-creation or time-at-processing
  - 1219571 - Invalid memory accesses lead to crash when configured class has implicit class as first member


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-77
changelog:
  - 1099617 - Using "lp -o orientation-requested=6" with a PDF file has no effect.
  - 1268131 - Printing PDF with fit-to-page doesn't take printer HW margins into account


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-8
changelog:
  - Fix adding of printers without specification of device-uri.
  - Patch by Tim Waugh.
  - Resolves: #526442


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-10
changelog:
  - Fix adding of printers without specification of ppd-name (#545452)
  - Patch by Tim Waugh.
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-12
changelog:
  - Avoid timeout on job-related methods for invalid jobs
  - Make sure to return an error via dbus in case of failure
  - Resolves: #567986


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26
changelog:
  - force NSS to ask for a new client certificate when connecting second time
    to the same host (#694294)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26.el6_2.3
changelog:
  - initialize NSS with no database if the selected database is broken (#800903)
  - use NSS_InitContext() to avoid a collision with OpenLDAP (#800904)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-46
changelog:
  - require credentials to match for NTLM re-use (CVE-2015-3143)
  - close Negotiate connections when done (CVE-2015-3148)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-49
changelog:
  - prevent NSS from incorrectly re-using a session (#1269660)
  - prevent test46 from failing due to expired cookie (#1277551)


author: Ian Zagorskikh <izagorskikh@cloudlinux.com> 7.19.7-56
changelog:
  - back-port urlapi from v7.75.0 (used by CVE-2021-22876)
  - strip credentials from the auto-referer header (CVE-2021-22876)


author: Nikita Ivanov <nivanov@cloudlinux.com> 7.19.7-59.tuxcare.els6
changelog:
  - CVE-2022-27782: add missing checks of ssl and ssh options during matching
    a connection for reuse


author: Pavel Mayorov <pmayorov@cloudlinux.com> 7.19.7-59.tuxcare.els8
changelog:
  - CVE-2023-27533: prevent TELNET option from IAC injection
  - CVE-2023-27535: fix behavior when FTP too eager connection reuse
  - CVE-2023-27536: do not reuse connections with different GSS delegations


author: Jiri Moskovcak <jmoskovc@redhat.com> - 1.11.23.5
changelog:
  - added support for passing arguments thru stdin (patch from arozansk@redhat.com)
  - Resolves: #501942


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-16
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name
    (Resolves: #671460)
  - Set PAM_TTY and PAM_RHOST on PAM authentication (Resolves: #684789)


author: Ville Skyttä <ville.skytta at iki.fi> - 2.2-0.4.b1
changelog:
  - Apply David D. Kilzer's dynamic log buffer allocation patch (#516083,
    Andreas Schwab).
  - Use %global instead of %define.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.2-0.5.b1
changelog:
  - Build with -DLINUX to fix --cvs-direct on 64-bit platforms (#539765).
  - Use patch instead of sed for man page fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-5
changelog:
  - spec cleanup
  - simplified packaging (merge -perl in -utils)
  - remove obsoleted and/or unmaintained additional sources/patches
  - remove long time not used files from the cvs/srpm
  - update additional sources/patches from their upstream


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-9
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 2.3.16-15.tuxcare.els1
changelog:
  - CVE-2021-33582: Fix a bad string hashing algorithm which could lead to
    collisions and cause a CPU denial of service


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-14
changelog:
  - release the GSSAPI server credential handle immediately after the
    GSSAPI security context is established (#825863)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-15
changelog:
  - don't use " for saslauth user's description (#1081445)
  - backport the ad_compat option (#994242)
  - fixed a memory leak in the client side DIGEST-MD5 code (#838628)


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 2.1.23-15.2.tuxcare.els1
changelog:
  - CVE-2022-24407: Fix failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands


author: Doug Ledford <dledford@redhat.com> - 2.0.19-1
changelog:
  - Recompile against non-XRC libibverbs
  - Update to OFED 1.4.1 final bits
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 2.0.25-3.el6
changelog:
  - Update config directory for rhel6 (from /etc/ofed to /etc/rdma)
  - Remove compat-dapl and split it off to its own rpm
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 2.0.25-4.el6
changelog:
  - Clean up rpmlint warnings about unversioned obsoletes
  - Make setup quite
  - Include COPYING file in docs
  - Fix naked macro in changelog
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.1.el6
changelog:
  - dapl-2.0.25-signal-handler.patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel
  - dapl-2.0.25-new-providers.patch
    Resolves: bz636596
  - dapl-2.0.25-dat_ia_open_hang.patch
    Resolves: bz649360
  - dapl-2.0.25-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz626541
  - dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz637980


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.2.el6
changelog:
  - Actually install the signal-handler patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-12
changelog:
  - fix for Java API __repmgr_send crash where eid=SELF_EID,
    don't update master_id so soon after election (upstream bz#16299)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  Resolves: #547808
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Colin Walters <walters@verbum.org> - 0.84-2
changelog:
  - Add patch to avoid assertions when setting a GError that
    includes a '-' in the enumeration value.  Should fix #528897


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.55-1
changelog:
  - ipcalc: detect invalid mask
  - ifup-aliases: send gratuitous ARPs when adding addresses
  - network: treat other tunnel interfaces (fixes ifdown stage)
  - kexec-disable.conf: release kexec memory properly
  - network-functions: do not send hostname via dhclient everytime
  - sysconfig/network: NO_DHCP_HOSTNAME option introduced
  - ipv6_add_addr_on_device: replace the existing address on NIC


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.59-1
changelog:
  - init.d/network: start vpninterfaces
  - ARPUPDATE option introduced
  - init.d/functions: sourcing for ksh fixed


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 9.03.61-3.cloudlinux.3
changelog:
  - CLKRN-796: added needed dependency for scriptlets
  - CLKRN-785: improved parsing vmcore-dmesg.txt by cloudlinux-collect-panic-info script
  - CLKRN-786: deleted all debug output to prevent crontab email notifications


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 9.03.61-3.cloudlinux.5
changelog:
  - CLKRN-901: added client_id & system_id to the sent info on our KPR by rtulchii
  - CLKRN-914: redirect error output to /dev/null by rtulchii
  - CLKRN-880: organized return codes by rtulchii


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.54-1
changelog:
  - specfile: require newer lvm
  - ifdown-eth: add timeout for when flushing global scope
  - functions: support boolean values in is_true() & is_false()
  - ifup-aliases: do not return with error when arping fails
  - netconsole: resolve domain name via 'getent' instead of 'hosts'


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 2.28-2
  — Update URL
  — update for new naming guidelines
  – warning: provides for the old names will be dropped before F11 beta


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 2.28-5
  — prepare for F11 mass rebuild, new rpm and new fontpackages
  — drop compatibility provides as announced at F11 alpha time


author: - jim_ramsay@dell.com
changelog:
  - Adjust INSTALL_MOD_DIR since Redhat requires that the module will be placed
    in extra/{name} for weak-modules to work.


author: Jonathan Dieter <jdieter@gmail.com> - 3.5-0.git.20090729.1
changelog:
  - Explain where we get the source from
  - Split *deltaiso commands into deltaiso subpackage (#501953)


author: Bill Nottingham <notting@redhat.com> - 3.5-0.git.20090831.1.3
changelog:
  - fix python bindings to:
    - call _exit(), not exit()
    - properly pythonize errors
    - not leak file descriptors


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5-0.2.20090913git
changelog:
  - Correct prerelease rlease numbering.
  - Build against the system zlib, not the bundled library.  This remedies the
    fact that the included zlib is affected by CAN-2005-1849.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5-0.3.20090913git
changelog:
  - Make building with system zlib selectable at build time.
  - Fix cfile_detect_rsync() to detect rsync even if we don't have a zlib capable
    of making rsync-friendly compressed files.


author: Owen Taylor <otaylor@redhat.com> - 0.8.0-2
changelog:
  - Add dist to release
  - BuildRequire intltool and desktop-file-utils
  - Point Source: at https://fedorahosted.org/released


author: Owen Taylor <otaylor@redhat.com> - 0.8.4-5
changelog:
  - Add translation updates for fr,ko,it
    Resolves: bug 589189
  - Add patch fixing problems initializing wobbly-windows state
    Resolves: bug 591541
  - Add patches fixing crashes in OpenGL detection
    Resolves: bug 607280


author: Richard Hughes <rhughes@redhat.com> - 0.15-3
changelog:
  - Add desktop-mime-type.prov so that we can automatically
    generate mimetype provides for packages at build time.
    This lets us do some cool things with PackageKit in the future.


author: Richard Hughes <rhughes@redhat.com> - 0.15-4
changelog:
  - Rename desktop-mime-type.prov to desktop_mime_type.prov and add the tiny
    macros.desktop_mime_type file so that we can trivially patch rpm to enable
    this new functionality.


author: Richard Hughes <rhughes@redhat.com> - 0.15-5
changelog:
  - Panu merged the rpm bits for this feature, but we've got a new provides
    filename. Respin this package with the new name.


author: Richard Hughes <rhughes@redhat.com> - 0.15-6
changelog:
  - Panu seems to be shipping the prov file in rpmbuild. Remove it here until we
    work out where it belongs.


author: Jindrich Novy <jnovy@redhat.com> 0.16.17-13
changelog:
  - fix buffer overflow caused by realpath() call
  - attempt to fix type width size for 64bit arches
  - merge review fixes (#225683):
    - remove BR: gawk
    - add licenses to documentation
    - use RPM_OPT_FLAGS to compile arch dependent binaries


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-6
changelog:
  - Enable deprecated GLib/GTK+ symbols since Devhelp uses some of them
    since the GLib rebase. Apps should not be shipping with these build
    flags anyway.
  - Resolves: rhbz#1136304


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.92
changelog:
  - Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * fix PAD and PRINT macros
  - Resolves: bz #1145442


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.93
changelog:
  - Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
    * make multipathd use uint64_t for tracking the interactive command
      fingerprint.
  - Resolves: bz #1316165


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.94
changelog:
  - Add 0251-RHBZ-1349376-fix-makefile.patch
    * make multipath use correct version of libdevmapper
  - Add 0252-RHBZ-1333334-huawei-config.patch
  - Add 0253-RHBZ-1305589-check-multipathd.patch
    * warn if multipath devices exist and mutipathd is not running
  - Add 0254-RHBZ-1310320-no-kpartx.patch
    * add skip_kpartx option to skip kpartx device creation
  - Add 0255-UPBZ-1322532-disable-reinstate.patch
    * do not reinstate unusable Implicit ALUA ghost paths
  - Add 0256-RHBZ-1324764-man-page-typo.patch
  - Add 0257-UPBZ-1328077-resize-map.patch
    * reset size if resizer operation fails
  - Add 0259-UPBZ-1343747-dont-fail-discovery.patch
    * keep multipath from failing if it fails to get information on any device
  - Add 0260-RHBZ-1364879-check-mpath-prefix.patch
    * ignore all devices that don't have a uuid starting with "mpath-"
  - Add 0261-RHBZ-1377532-disable-changed-paths.patch
    * do not use path devices that change their wwid
  - Resolves: bz #1299644, #1305589, #1310320, #1322532, #1324764, #1328077
  - Resovles: bz #1333334, #1343747, #1349376, #1364879, #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.95
changelog:
  - Modify 0254-RHBZ-1310320-no-kpartx.patch
    * fix small bug with unitialized data
  - Refresh 0261-RHBZ-1377532-disable-changed-paths.patch
  - Add 0262-RH-free-vector.patch
    * Fix coverity discovered bug in error path
  - Resolves: bz #1310320


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.96
changelog:
  - Add 0258-UPBZ-1300414-PURE_config.patch
  - Add 0264-RHBZ-1365710-no-use-after-free.patch
    * Fix two segfaults, and NULL out some structures after free
  - Add 0265-RHBZ-1390472-dont-exit.patch
    * don't exit if multipath hits recoverable errors during startup
  - Resolves: bz #1300414, #1365710, #1390472


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.97
changelog:
  - Add 0265-RHBZ-1355669-max-sectors-kb.patch
    * add "max_sectors_kb" config option to set this value on all paths
  - Change devicemapper Requires to >= 1.02.117-9.el6 (bz #1344381)
    * forces multipath to use latest version of blk-availability
  - Resolves: bz #1344381, #1355669


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.98
changelog:
  - Add 0266-RHBZ-1401391-fix-prio-put.patch
    * don't try to drop a nonexistant prio handler
  - Add 0267-RHBZ-1401769-orphan-status.patch
    * don't print out checker and device status for orphan paths
  - Resolves: bz #1401391, #1401769


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100
changelog:
  - Modify 0261-RHBZ-1377532-disable-changed-paths.patch
    * add man page information
  - Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
  - Related: #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100.1
changelog:
  - Add 0268-RHBZ-1497059-fix-reserve.patch
    * stop waiting for threads that weren't successfully created
  - Resolves: bz #1497059


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.101
changelog:
  - Add 0268-RHBZ-1447328-fix-reserve.patch
    * stop waiting for threads that weren't successfully created
  - Resolves: #1447328


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.102
changelog:
  - Add 0269-RHBZ-1442369-fix-check-partitions.patch
    * fix crash when partition minor starts with all the digits of the
      multipath device number
  - Add 0270-RHBZ-1408287-remove-long-def-timeout.patch
    * make all timeouts use checker_timeout if set and default to 60 sec.
  - Add 0271-RHBZ-1444193-fix-hang-on-resume.patch
    * resume again if an invalid table left the device suspended
  - Add 0272-RHBZ-1525217-3PAR-config.patch
  - Resolves: #1408287, #1442369, #1444193, #1525217


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.104
changelog:
  - Add 0273-RHBZ-1550069-fix-messages.patch
    * change error messages to warning messages, if adding or updating a
      multipath device fails because the device is missing from sysfs
  - Resolves: #1550069


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.105
changelog:
  - Add 0274-RHBZ-1573463-uevent-socket.patch
    * retry binding socket and close it immediately when cancelled.
  - Resolves: #1573463


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.106
changelog:
  - Modify 0272-RHBZ-1525217-3PAR-config.patch
    * revert path selector to round-robin
  - Resolves: #1578515


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.106.1
changelog:
  - Add 0275-RHBZ-1589741-fix-crash.patch
    * revert crashing code from 0274-RHBZ-1573463-uevent-socket.patch
  - Resolves: #1589741


author: Milan Broz <mbroz@redhat.com> - 0.1.4-1
changelog:
  - Fix thin_check man page (add -q option).
  - Install utilities in /usr/sbin.
    Resolves: #803204 #803144


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.6-1
changelog:
  - New upstream version 0.2.6; working around build system providing
    old boost-devel-1.41.0-17.el6_4 with constraints
    Resolves: #814790


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-2
changelog:
  - New upstream version 0.2.8 introducing cache_{check,dump,repair,restore}; missing patch
    Resolves: #1019217


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.6-1
changelog:
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.
  - Update man pages to make it clearer that most tools shouldn't
    be run on live metadata.
  - Fixed bugs in the metadata reference counting for thin_check.
  - New thin_delta and thin_trim commands.
  - New --clear-needs-check option for cache_check.
  - Space map checking for thin check.
  - All tools switch to using libaio. This gives a large performance
    boost, especially to the write focused tools like thin_restore.
  - Added progress monitor to thin_restore, cache_restore and era_restore.
  - Added --quiet/-q option to *_restore to turn off the progress bar.
  - Removed variable hint size support from cache tools.
  - Tools are now rolled into a single executable to save space.
  - Fixed bugs when walking bitsets (possibly effecting cache_dump
    and cache_check).


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.1-1
changelog:
  - Install pdata_tools and all its symlinks for various tools to
    /sbin and also provide symlinks for all tools in /usr/sbin
    for backward compatibility.
  - Link with libstdc++ statically.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-0.1.rc7
changelog:
  - Fixes for thin_repair.
  - Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-50.P1
changelog:
  - Lease table overflow crash. (#1133917)
  - Add ignore-client-uids option. (#1196768)
  - dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
  - VLAN ID is only bottom 12-bits of TCI. (#1259552)
  - dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
  - dhclient-script: make_resolv_conf(): Keep old nameservers
    if server sends domain-name/search, but no nameservers. (#1269595)


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-55.P1
changelog:
  - Resolves: #1527995 - allow static route with a 0.0.0.0 next-hop address
  - Related: #1527995 -  install link-local static routes with correct scope


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1-3.20071028
changelog:
  - update to 1.1-20071028
  - fix multilib conflicts (#341001)
  - use shared library, drop static
  - merge review fixes (#225693)


author: Tim Waugh <twaugh@redhat.com> 2.8.1-20
changelog:
  - Converted spec file to UTF-8 (bug #225696).
  - Fixed summary (bug #225696).
  - Fixed PreReq (bug #225696).
  - Removed Prefix (bug #225696).
  - Fixed build root (bug #225696).
  - Avoid %makeinstall (bug #225696).
  - Fixed license tag (bug #225696).


author: Tim Waugh <twaugh@redhat.com> 2.8.1-25
changelog:
  - Only try to install the info file if it exists so that package
    installation does not fail with --excludedocs (bug #515919).


author: Rex Dieter <rdieter[AT]fedoraproject.org> 1.0.0-6
changelog:
  - /var/log/dirmngr.log -> /var/log/dirmngr/dirmngr.log
  - remove use of %ghost (e.g. dirmngr.log shouldn't be owned)
  - BR: gettext


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Simone Caronni <negativo17@gmail.com> - 2.2.0.3-6
changelog:
  - Rework spec file completely; remove cruft.
  - Trim changelog.
  - Rework install parameters, use correct macros.
  - Rework file list.
  - Add proper SysV and systemd requirements.
  - Add correct SysV init script and systemd service file.
  - Enable systemd on Fedora 20+ and add it to systemd preset as per
    https://fedorahosted.org/fesco/ticket/1123


author: Simone Caronni <negativo17@gmail.com> - 2.2.0.3-14
changelog:
  - Remove systemd / SysV conversion as per new packaging guidelines.
  - Add patch for #986887 to force tarball creation.


author: Simone Caronni <negativo17@gmail.com> - 2.2.0.3-18
changelog:
  - Add ZFS On Linux patches for additional functionality/bugfixes (#1023598).
    Thanks to Darik Horn and Brian Behlendorf.


author: Simone Caronni <negativo17@gmail.com> - 2.2.0.3-19
changelog:
  - Add macros to the top of the man page to fix displaying on el5/el6 (#986660).
    Thanks to Darik Horn for the fix.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-17
changelog:
  - cman init: allow startup options to fenced
    (cman_init_allow_startup_options_to_fenced.patch)
    Resolves: rhbz#617566


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-18
changelog:
  - Fix several issues related to cluster config reload operation
    including checks that would allow the config to be downgraded
    and extra spurious config reload notifications.
    (cman_config_reload_fix_part1.patch)
    (cman_config_reload_fix_part2.patch)
    (cman_config_reload_fix_part3.patch)
    (cman_config_reload_fix_part4.patch)
    (cman_config_reload_fix_part5.patch)
    (cman_config_reload_fix_part6.patch)
    Resolves: rhbz#617161, rhbz#617163
  - Fix logging configuration reload operations
    (cman_preconfig_handle_logging_reload_operation_part1.patch)
    (cman_preconfig_handle_logging_reload_operation_part2.patch)
    Resolves: rhbz#615202


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-19
changelog:
  - dlm_controld/gfs_controld: make default plock_ownership 0
    Use the simpler, safer, and more reliable option as default.
    (controld_make_default_plock_ownership_0.patch)
    Resolves: rhbz#618303
  - dlm_controld: fix plock checkpoint signatures
    (dlm_controld_fix_plock_checkpoint_signatures.patch)
    Resolves: rhbz#618806
  - dlm_controld: fix plock owner in checkpoints
    (dlm_controld_fix_plock_owner_in_checkpoints.patch)
    Resolves: rhbz#618814
  - cman: fix consensus calculation
    Bump Requires: corosync to 1.2.3-17 to guarantee that corosync
    is at the minimal version for this fix to work.
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#618534


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - Fix regression in "Fix fsck.gfs2 unaligned access on ia64" that
    affects all 32bit systems.
    Rename fsck_gfs2_unaligned_access_on_ia64.patch to
    fsck_gfs2_unaligned_access_on_ia64_part1.patch
    (fsck_gfs2_unaligned_access_on_ia64_part2.patch)
    Resolves: rhbz#608154


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - cman: do not propagate old configurations around
    (cman_do_not_propagate_old_configurations_around.patch)
    cman: Clarify man page on config distribution
    (cman_clarify_man_page_on_config_distribution.patch)
    Resolves: rhbz#619680


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-22
changelog:
  - gfs2-utils: mkfs can't fsync device with 32MB RGs
    (gfs2_utils_mkfs_can_t_fsync_device_with_32mb_rgs.patch)
    Resolves: rhbz#622844


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23
changelog:
  - gfs2-utils: fsck.gfs2 deletes directories if they get too big
    (gfs2_fsck_do_not_delete_directories_if_they_get_too_big.patch)
    Resolves: rhbz#624691


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-23.el6_0.1
changelog:
  - Updating /proc/mounts and /etc/mtab with mount args for GFS2 fs
    (updating_proc_mounts_and_etc_mtab_with_mount_args_for_gfs2_fs.patch)
    Resolves: rhbz#634201


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-23.el6_0.2
changelog:
  - fsck.gfs2 segfaults if journals are missing
    (fsck_gfs2_segfaults_if_journals_are_missing.patch)
    Resolves: rhbz#637699


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23.el6_0.3
changelog:
  - cman init: fix "stop remove" operation
    (cman_init_fix_stop_remove_ops.patch)
  - cman: Calculate expected_votes correctly after leave remove
    (cman_fix_calculate_expected_vote_after_leave_remove.patch)
    Resolves: rhbz#638954


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23.el6_0.4
changelog:
  - cman: fix startup race condition when configs are different across nodes
    (cman_fix_startup_race_condition_with_different_config_versions.patch)
    Resolves: rhbz#639958


author: Anton Arapov <anton@redhat.com> - 1:2.11-7
changelog:
  - Add "PXE" to HP OEM Type 209 record output
  - Properly print the hexadecimal value of invalid string characters


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc15-7
changelog:
  - Fix activation of isw raid sets when the disks have serialnumber longer
    then 16 characters (#490121)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc16-3
changelog:
  - Add Obsoletes for dmraid-libs packages (merged into the main pkg, #524261)
  - Make -devel Require the main package now the dmraid-libs package is gone


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-4
changelog:
  - bz526157: fix manual pages for dmraid.static and dm_dso_reg_tool
  - bz505562: ddf1 metadata format handler LSI persistent name fix
  - bz524168: fix pdc metadata format handler to report the correct number
    of devices in a RAID10 subset
  - bz528097: move libraries to /lib* in order to avoid catch22
    with unmountable /usr


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-5
changelog:
  - Resolves: rhbz#554698
    SGPIO spare led is still in rebuilding state fix
  - Resolves rhbz#554700
    switch to using /var/cache/logwatch/dmeventd/syslogpattern.txt;
    explicitly claim logwatch files in dmraid-events-logwatch
  - Resolves rhbz#554708
    gets size of Silicon Image JBOD set wrong fix
  - Resolves rhbz#554710
    try to register non-existent dmeventd DSO fix


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-7
changelog:
  - Create symlink from full versioned libdmraid dso files
    to libdmraid.so.1 and libdmraid-events-isw.so.1
    (ie. soname we use for linking)
  - Resolves: rhbz#557514


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-11
changelog:
  - Resolves: rhbz#701501
  - Resolves: rhbz#729971
  - Resolves: rhbz#729032
    (not reproducable any more {zkabelac])


author: Jiri Denemark <jdenemar@redhat.com> - 2.48-7
changelog:
  - Fix lease-change script (rhbz#815819)
  - Check tftp-root exists and is accessible at startup (rhbz#824214)


author: Tomas Hozza <thozza@redhat.com> - 2.48-10
changelog:
  - Fixed dnsmasq-2.48-add-bind-dynamic-option.patch
   - the option --bind-dynamic was not set correctly when used


author: Tomas Hozza <thozza@redhat.com> - 2.48-11
changelog:
  - Revert previous changes because of many problems with --bind-dynamic option backport.
  - Dropping dnsmasq-2.48-add-bind-dynamic-option.patch
  - Set SO_BINDTODEVICE socket option when using --bind-interfaces (rhbz#884957)


author: Ondrej Vasik <ovasik@redhat.com> - 1.0.44
changelog:
  - fix ISO entities for 4.5 SGML, use XML at the end of
    public identificators of XML 4.1.2 ISO entities


author: Ondrej Vasik <ovasik@redhat.com> - 1.1-2
changelog:
  - rpmlint check
  - /etc/ files marked as config, fixed bad requirements
  - cosmetic cleanup of spec file


author: Ondrej Vasik <ovasik@redhat.com> - 1.1-4
changelog:
  - fix loop in post catalog registration(incomplete sed
    coverage) #455680
  - fix broken catalogs for package updates
  - fix removal of files during updates


author: Ondrej Vasik <ovasik@redhat.com> 1.74.2-2
changelog:
  - updated Makefile: do ship .svg images(#486849), xsl
    stylesheets for website, xhtml-1_1, docbook -> epub
    convertor


author: Ondrej Vasik <ovasik@redhat.com> 0.6-14-14
changelog:
  - ship new version of docbook2man-spec.pl to avoid issues
    with the old one
  - dropped funcsynopsis patch - docbook2man-spec.pl from
    tarball used no longer


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-15
changelog:
  - require grep,gawk, fix jw script to find SGML_BASE_DIR even
    with grep with colors(#473278), finish funcsynopsis patch
    drop


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-18
changelog:
  - another quoted variable fixes for spaces in filenames
  - use SGML_INCLUDE in man backend(upstream)
  - change upstream URL to something useful
  - escape dots and single quotes in column 1 in docbook2man-spec.pl


author: Tim Waugh <twaugh@redhat.com> 3.1-28
changelog:
  - Fixed build root (bug #225706).
  - Build with SMP flags (bug #225706).
  - Use dist in release tag (bug #225706).
  - Fixed macros in changelog (bug #225706).
  - Preserve timestamps when using install (bug #225706).


author: Tim Waugh <twaugh@redhat.com> 3.1-32
changelog:
  - Adjust license tag (bug #225706).
  - Fix missing prototype (bug #225706).
  - Install copy as symbolic links (bug #225706).


author: Tim Waugh <twaugh@redhat.com> 3.1-34
changelog:
  - Moved 'make clean' to prep section and added comment about there
    being no upstream (bug #225706).


author: Stepan Kasal <skasal@redhat.com> - 3.0.1-3
changelog:
  - fix the previous commit
  - omit the most obsolete documents
  - after writing the label, exit with exit code 0 (#468050)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-1
changelog:
  - Bump to newer release
  - Removed mkdosfs-ygg from Obsoletes/Provides tag as it looks really deprecated
  - Drop bounds patch - fixed upstream


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-4
changelog:
  - Fixed dosfsck and dosfslabel on s390x (s390x-unalign patch)
    Resolves: rhbz#624596
  - Fixed buffer overflow in alloc_rootdir_entry (fix-alloc-rootdir-entry patch)
    Resolves: rhbz#677789
  - Fixed dosfslabel on FAT32 (dosfslabel-fat32 patch)
    Resolves: rhbz#688128
  - Fixed device partitions detection (dev-detect-fix patch)
    Resolves: rhbz#709266


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-11
changelog:
  - mention it in config file, that we disabled SSLv2 and SSLv3
    by default (#1153041)
  - add ssl_protocols configuation option and disable SSLv2 and SSLv3
    by default (#1153041)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-17
changelog:
  - fix race condition when creating INBOX (#1184865)
  - close stderr if it's not used for logging (#730746)
  - login proxy should not fail connection if CRL isn't found for some certificate (#813957)
  - fix crash in list-status (#961466)
  - installation of dovecot hangs if there is no /dev/urandom (#1026790)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-22
changelog:
  - allow larger DH parameters length(#1230258)
  - don't check client PID in non-login auth sockets (#1281670)
  - messages containing a CP932 character were not shown in a search result (#1275233)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-22.1
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1752708)


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 1:2.0.9-23.cloudlinux.els
changelog:
  - CVE-2020-12100: Resource exhaustion via deeply nested MIME parts
  - CVE-2020-25275: Denial of service via mail MIME parsing


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta6.20100515
changelog:
  - use reserved uid and gid for dovecot user and group
  - create /var/run/dovecot/empty in advance in rpm


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta6.20100630
changelog:
  - dovecot and pigeonhole updated
  - moved disable_plaintext_auth to 10-auth.conf
  - moved ACL and quota settings to a separate .conf files


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8 (fixes #654226), pigeonhole updated to 0.2.2
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.
  - mdbox: Fixed potential assert-crash when saving multiple messages
    in one transaction
  - dsync: a lot of fixes
  - fixed lda + sieve crash


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-5
changelog:
  - script-login did not drop privileges correctly (#709095)
  - fix directory traversal due to not obeying chroot directive (#709097)
  - check proxy destination host against SSL certificate name (#754980)


author: Than Ngo <than@redhat.com> - 1.6.0-2
changelog:
  - fix #516339, allow to enable/disable timstamp to avoid the multilib issue
    HTMP_TIMESTAMP is disable by default


author: Harald Hoyer <harald@redhat.com> 004-356
changelog:
  - fixed support for multiple fcoe devices
  Resolves: rhbz#1022766
  - fixed iscsiroot with iscsi_firmware boot
  Resolves: rhbz#1126346


author: Harald Hoyer <harald@redhat.com> 004-371
changelog:
  - start iscistart in the background
  Resolves: rhbz#1191721 rhbz#1176671
  - require nss-softokn-freebl >= 3.14.3-22.el6_6
    and remove libfreebl3* inclusion as nss-softokn-freebl
    has its own dracut module
  Resolves: rhbz#1184142
  - logrotate: remove yearly keyword
  Resolves: rhbz#1005886
  - let ip=ibft boot without ifname=...
  Resolves: rhbz#1069275
  - save vlan info in ifcfg files
  Resolves: rhbz#1111358
  - include /etc/lvm/lvm_hostname.conf if present
  Resolves: rhbz#1130565
  - handle /etc/crypttab without newline at the end of the last line
  Resolves: rhbz#1085562
  - copy over dhcp lease files of all interfaces and write
    correct ifcfg file
  Resolves: rhbz#1198117


author: Harald Hoyer <harald@redhat.com> 004-380
changelog:
  - load iSCSI modules after udevd is started for firmware
    loading
  Resolves: rhbz#1213077
  - add the hyperv-keyboard kernel module for Hyper-V Gen2 VM
  Resolves: rhbz#1205095
  - starting iscsistart in parallel has problems, if on the same
    network interface
  Resolves: rhbz#1209406


author: Harald Hoyer <harald@redhat.com> 004-399
changelog:
  - add hyper kernel modules
  Resolves: rhbz#1298445 rhbz#1223315
  - fix ifcfg generation
  Resolves: rhbz#1261893
  - support multiple vlan definitions
  Resolves: rhbz#1111358
  - support setting of MTU via ip=..:ibft:<mtu>
  Resolves: rhbz#1076465
  - use cpio -R root:root rather than cpio -R 0:0
  Resolves: rhbz#1049763
  - fail hard if final image could not be written
  Resolves: rhbz#1252449
  - create correct bonding interface
  Resolves: rhbz#1263013


author: Harald Hoyer <harald@redhat.com> - 004-403
changelog:
  - network/ifup: use the correct interface name for the vlan parent
  - iscsiroot: for iscsi_firmware retry, if iscsistart -N fails
  Resolves: rhbz#1111358


author: Harald Hoyer <harald@redhat.com> - 004-408
changelog:
  - add more kernel modules for crypt
  Resolves: rhbz#1322893
  - trigger acpi subsystem before running plymouth
  Resolves: rhbz#1218130


author: Harald Hoyer <harald@redhat.com> - 004-409
changelog:
  - don't handle "iscsistart -N" exit value
    start iscsistart -b more reliably in the background
  Resolves: rhbz#1324340


author: Lars Kellogg-Stedman <lars@redhat.com> 0.23-4
changelog:
  - strip 'p' from rootdisk

    Check if we need to strip a trailing 'p' from the rootdisk name (for
    device names like /dev/mmcblk0p)


author: Philip J Perry <phil@elrepo.org> - 8.4.4-2
changelog:
  - Add symlinks for drbd files moved from /sbin to /usr/sbin
    [http://elrepo.org/bugs/view.php?id=418]


author: Philip J Perry <phil@elrepo.org> - 8.3.15-1
changelog:
  - Updated to release 8.3.15.
    [http://elrepo.org/bugs/view.php?id=334]
  - Fix requires for kernel.
    [http://elrepo.org/bugs/view.php?id=324]


author: Radek Brich <rbrich@redhat.com> - 0.6.7-2
changelog:
  - fixes for interrupt stats:
    * traceback when called with unknown name of interrupt (bz#439143)
    * allow '-I total' option (bz#439146)


author: Jiri Popelka <jpopelka@redhat.com> - 0.7.0-2
changelog:
  - enable to specify disks with path to device file or
    with symbolic link to the device file (#766443)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.7.0-3
changelog:
  - fix the error message for '--gpfs-ops --gpfs' options (#989779)
  - fix the invalid syntax when '--mysql5-conn' is used (#766806)


author: Adam Tkac <atkac redhat com> 0.4b41-13
changelog:
  - display dump level correctly in all cases (#493635)
  - -A option is not valid when -P is specified, correct manual page (#490627)
  - fix typos in manual pages (#489853)


author: Adam Tkac <atkac redhat com> 0.4-0.1.b42
changelog:
  - update to 0.4b42
  - patches merged
    - dump-selinux.patch
    - dump-dmfix.patch
    - dump-immutable.patch
    - dump-0.4b41-libtinfo.patch
    - dump-rh356121.patch
    - dump-rh493635.patch
    - dump-rh490627.patch
    - dump-rh489853.patch
  - fix NVR to conform to Fedora policies


author: Adam Tkac <atkac redhat com> 0.4-0.5.b42
changelog:
  - dump: write EA metadata to tape correctly (#599680)
  - restore: add a workaround to read incorrectly written EA metadata (#599680)


author: Adam Tkac <atkac redhat com> 0.4-0.6.b42
changelog:
  - call clone(2) syscall with correct args on s390
  - `dump -w` didn't recognize ext4 filesystems as supported (#658890)
  - fix incorrect hole handling (#691434)


author: Matthias Saou <http://freshrpms.net/> 7.0-7
changelog:
  - Minor spec file cleanups (tabs vs. spaces, etc.).
  - Use install instead of cp for the html file to avoid umask differences.


author: Honza Horak <hhorak@redhat.com> - 7.1-6
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16,
    even in case of DAO writing
    Resolves: #807474


author: Jarod Wilson <jwilson@redhat.com> - 3.1-1
changelog:
  - New upstream release
  - Drop libpng, libogg and libvorbis BRs, since dvgrab has
    long since dropped support for them (circa v2.1)


author: Jarod Wilson <jarod@redhat.com> - 3.4-2
changelog:
  - Set retval to 1 if we get an error, to make life easier for folks
    who wrap dvgrab to tell if something went wrong (#486061).


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 0.13.2d-36
changelog:
  - Fix URL
  - Cherry pick changes made by TeXLive 2007
  - Build dvi and pdf docs
  - Add Requires for tex(tex)
  - Add security fix patches for temp file creation


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 0.13.2d-37
changelog:
  - Fix comment about texlive-texmf [tex(tex)] BuildRequires
  - Rename config file tp dvipdfm-config in SRPM
  - Add INSTALL='install -p' to makeinstall
  - Run mktexlsr on install


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 0.13.2d-38
changelog:
  - Untabify spec file
  - Ensure dvipdft is not executeable in SRPM
  - Ensure man pages are UTF-8
  - Fix comment about tex(tex)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 0-0.21.20080520cvs
changelog:
  - Update to snapshot 20080520
  - Move config to dvipdfmx directory (rather than dvipdfm) as required by this snapshot


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 0-0.23.20080520cvs
changelog:
  - Added dvipdfmx-20080520-ebb-to-ebbx.patch to rename ebb to ebbx to stop
    conflict with dvipdfm package (BZ #448347)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 0-0.30.20090708cvs
changelog:
  - Add dvipdfmx-20090708-ebb-to-ebbx.patch to rename ebb to ebbx to avoid file
    conflict with ebb package


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1.9-50
changelog:
  - Remove kpathsea Requires
  - Add OFSFDL license tag
  - Make INSTALL use install -p
  - Preserve time stamp of ChangeLog and ChangeLog.0 files
  - Use globbing in filelist
  - Remove .gz from the end of filenames in install-info commands
  - Bump release to 50 to fix up upgrade path from current dvipng package from texlive


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-12
changelog:
  - Fix spurious e2fsck checksum errors when -b option is used (#786021)
  - Fix bugs related to e2fsck -E discard (#795846)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-15
changelog:
  - Enhance e2fsck detection of invalid extent trees (#922847)
  - Several filefrag fixes (#927541)
  - Clear errors stored in superblock by newer kernels (#895679)
  - Fix journal superblock error handling (#885083)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-18
changelog:
  - Fix e2fsck false positive when blocks exist past EOF (#994615)
  - Fix resize2fs shrink corruption when moving files with many extents (#873201)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-19
changelog:
  - Fix for some resize2fs corruptions (#1036122)
  - Allow tune2fs to remove a dirty journal with -ff (#1040122)
  - Add enable_periodic_fsck to mke2fs.conf (#1052409)
  - Disallow too-high revision during mke2fs (#1093446)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-22
changelog:
  - e2fsck: fix last mount time and last write time in preen mode (#1218262)
  - e2fsck: don't prompt for time fixes with accept_time_fudge (#1218262)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-23
changelog:
  - e2image: check return value from check_if_mounted() (#1139936)
  - e2fsck: do not process impossibly large dir blocks (#1297694)
  - resize2fs: fix off-line resize of file systems (#1285227)


author: Lukas Czerner <lczerner@redhat.com> 1.41.12-24
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1474179)
  - resize2fs: create optimized flex_bg block groups (#1474179)


author: Eric Sandeen <sandeen@@redhat.com> 1.42-3
changelog:
  - Add broken system clock config to e2fsck.conf to let boot
    continue even if system clock very wrong.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0.8-4
changelog:
  - bump to 2.0.8-2 from upstream
  - keep _libdir/ebtables, even though upstream just moved away from it.


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-3
changelog:
  - fixed init script to be lsb conform
    Resolves: rhbz#536828
  - fixed download link according to package review
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-5
changelog:
  - added -fno-strict-aliasing to the compiler flags (rhbz#596158)
  - cleaned up description (rhbz#596158)
  - fixed install of /etc/ethertypes in running system (rhbz#596778)


author: Andrew Overholt <overholt@redhat.com> 1:3.4.1-1
changelog:
  - 3.4.1
  - Don't conditionalize building of gcj AOT bits (we're only building
    this for gcj and IcedTea bootstrapping).


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-1
changelog:
  - Update to upstream 4.5.2 release.
  - Add eclipse-gcj-compat-4.2.1.patch and eclipse-gcj-nodummysymbol.patch
    from rhel-7.3 branch.
  - Add ecj-convertto1.5.patch.
  - Remove ClasspathJsr199.java for 1.5 compatibility.
  - Add man page.
  - Resolves: rhbz#1336481


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-3
changelog:
  - Update to a newer GCCMain.
  - Add a timestamp qualifier to ecj-gcj.tar.bz2.
  - Remove eclipse-gcj-compat-4.2.1.patch, no longer necessary. 
  - Restore versioned jar.
  - Resolves: rhbz#1336481


author: Andrew Overholt <overholt@redhat.com> 2.6.0-1
changelog:
  - Update to 2.6.0.
  - Build rhino plugin as part of BIRT chart feature.
  - Remove unnecessary dependencies.


author: Jeff Johnston <jjohnstn@redhat.com> 1:6.0.1-7
changelog:
  - Resolves: #546784
  - Rebase Autotools to Linux tools 0.4.0 release plus patches.
  - Rebase Libhover to Linux tools 0.4.0 release.
  - Remove Libhover patch which is already part of rebase.


author: Jeff Johnston <jjohnstn@redhat.com> 1:6.0.1-9
changelog:
  - Resolves: #546784
  - Fix URLs for Autotools and Libhover which are fetched here.
  - Make fetch scripts sources.


author: Jeff Johnston <jjohnstn@redhat.com> 1:6.0.2-1
changelog:
  - Resolves: #566761
  - Rebase CDT to Galileo SR2 (6.0.2).
  - Rebase Autotools to Linux tools R0.5.
  - Rebase Libhover to Linux tools R0.5.
  - Move Autotools macros to org.eclipse.linuxtools.cdt.autotools.core.


author: Jeff Johnston <jjohnstn@redhat.com> 1:6.0.2-3
changelog:
  - Resolves: #592386
  - Rebase Autotools/Libhover to Linux tools R0.5.1.
  - Remove addbuilder patch which is already part of R0_5_1.
  - Remove libhover template patch which is alread part of R0_5_1.


author: Jeff Johnston <jjohnstn@redhat.com> 1:7.0.1-1
changelog:
  - Resolves: #656333
  - Rebase to 7.0.1 (Helios SR1) including gdb hardware support fix
  - Rebase to Autotools/Libhover 0.7
  - Fix Eclipse bug 286162


author: Jeff Johnston <jjohnstn@redhat.com> 1:7.0.1-2
changelog:
  - Resolves: #622713
  - Resolves: #668890
  - Fix problems with applying autotools and libhover local patches


author: Jeff Johnston <jjohnstn@redhat.com> 1:7.0.1-3
changelog:
  - Resolves: #679543, #678364
  - Fix libhover local patch to change location specifiers in glibc and
    libstdc++ plug-ins.
  - Fix build so that it still works if eclipse-cdt-parsers is currently
    installed.


author: Jeff Johnston <jjohnstn@redhat.com> 1:7.0.1-4
changelog:
  - Resolves: #678364
  - Modify a version of copy-platform so it does not add wild-cards
    when looking in the dropins folder.


author: Jeff Johnston <jjohnstn@redhat.com> 2.6.3-2
changelog:
  - Disable building of eclipse-changelog-debuginfo since gcj AOT bits are
    no longer built for this package.


author: Jeff Johnston <jjohnstn@redhat.com> 1:2.6.7-5
changelog:
  - Resolves: #596910
  - Change tarball name to include actual R0_5_0 tag used to fetch 0.5 release.
  - Fix Obsoletes statements to have hard-wired release numbers.


author: Mat Booth <fedora@matbooth.co.uk> 1.7.0-3
changelog:
  - Disable jar repacking because of a bug in redhat-rpm-config, see #461854.
  - Update dependency on wsdl4j.


author: Mat Booth <fedora@matbooth.co.uk> 2.5.0-1
changelog:
  - Update to 2.5.0 final release (Galileo).
  - Build the features seperately to allow for a saner %files section.


author: Jeff Johnston <jjohnstn@redhat.com> 1:3.6.1-5
changelog:
  - Remove work around for openjdk bug#647737 as openjdk has
    posted its own work around and will shortly be fixing problem 
    correctly.


author: Andrew Overholt <overholt@redhat.com> 1:3.6.1-6.11
changelog:
  - Bring in line with Fedora.
  - Remove some stuff that is now done in eclipse-build.
  - Fix sources URL.
  - Add PDE dependency on zip for pdebuild script.
  - Use new eclipse-build targets.
  - Increase minimum required memory in eclipse.ini.


author: Sean Flanigan <sflaniga@redhat.com> - 0.2.0-0.3.20080807snap
changelog:
  - Added eclipse_version macro
  - Changed the Obsoletes version to be slightly higher than the last release of 
    eclipse-sdk-nls


author: Sean Flanigan <sflaniga@redhat.com> - 0.2.0-0.4.20080807snap
changelog:
  - Applied Jens Petersen's suggested patch to remove eclipse_version macro and 
    unnecessary buildroot checks


author: Sean Flanigan <sflaniga@redhat.com> - 3.5.0.v20090417091040-1
changelog:
  - Updated to use Babel's zipped langpacks instead of fetch-babel.sh
  - Changed versioning scheme to match changes in upstream versioning
  - Updated to latest upstream langpacks for Eclipse 3.5 / Galileo


author: Sean Flanigan <sflaniga@redhat.com> - 3.5.0.v20090423085802-1
changelog:
  - Updated from upstream; added Estonian.
  - Fixed names/descriptions for languages with two word names such as "Portuguese (Brazilian)".
  - Added Babel metadata files (artifact.jar and content.jar) to make P2 happier (presently disabled)
  - Made the base package owner of dropins/babel and subdirectories


author: Jeff Johnston <jjohnstn@redhat.com> 3.1.2-1
changelog:
  - Resolves: #566766
  - Rebase to 3.1.2 (Galileo SR2 version)
  - Remove oro requirement as it is not needed.


author: Daniel Novotny <dnovotny@redhat.com> 1.3.0-2
changelog:
  - fixed rpmlint error (file permissions)
  - made architecture-specific, because eclipse-pde is not
    available on other architectures than ix86 and x86_64 in RHEL now:
    this fixes build problems


author: Michal Hlavinka <mhlavink@redhat.com> - 82-6.1
changelog:
  - security fixes:
  - privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
  - race condition when checking source during mount (CVE-2011-1833)
  - mtab corruption via improper handling (CVE-2011-1834)
  - key poisoning via insecure temp directory handling (CVE-2011-1835)
  - arbitrary file overwrite via lock counter race (CVE-2011-1837)


author: Mauro Carvalho Chehab <mchehab@redhat.com> - 0.9-12
changelog:
  - Add improvements from upstream version 0.16, in order to support newer
    edac drivers. Also, sync edac labels with RHEL5 package


author: Stefan Mortensen <stefan.mortensen@atomia.com>, Mikhail Zhbankov <mzhbankov@cloudlinux.com> 1.0-26
changelog:
  - Fixed issue where cfg->path_regex was never being set when setting a custom path with LVEPathRegexp causing the default to always be used
  - AAP-57: mod_hostinglimits not increases EP in cgi mode (but process is in LVE)


author: Peter Robinson <pbrobinson@gmail.com> - 3.2.1-1
changelog:
  - Ekiga 3.2.1 stable - Changelog
    http://mail.gnome.org/archives/ekiga-devel-list/2009-May/msg00054.html


author: Peter Robinson <pbrobinson@gmail.com> - 3.2.4-1
changelog:
  - Ekiga 3.2.4 stable - Changelog
    http://mail.gnome.org/archives/ekiga-devel-list/2009-May/msg00062.html
    http://mail.gnome.org/archives/ekiga-devel-list/2009-May/msg00064.html


author: Milan Crha <mcrha@redhat.com> - 3.2.6-4
changelog:
  - Rebuild against newer evolution-data-server.
  - Add patch to build break (include <bits/wordsize.h> where needed)
  Resolves: #973281


author: Roland McGrath <roland@redhat.com> - 0.148-1
changelog:
  - Update to 0.148
    - libdw: Accept DWARF 4 format: new functions dwarf_next_unit,
             dwarf_offdie_types.
             New functions dwarf_lineisa, dwarf_linediscriminator,
             dwarf_lineop_index.
    - libdwfl: Fixes in core-file handling, support cores from PIEs. (#588818)
               When working from build IDs, don't open a named file
               that mismatches.
    - readelf: Handle DWARF 4 formats.


author: Roland McGrath <roland@redhat.com> - 0.149-1
changelog:
  - Update to 0.149
    - libdw: Decode new DW_OP_GNU_implicit_pointer operation;
             new function dwarf_getlocation_implicit_pointer.
    - libdwfl: New function dwfl_dwarf_line.
    - eu-addr2line: New flag -F/--flags to print more DWARF line info details.
    - eu-readelf: better .debug_loc processing (#627729)
    - eu-strings: Fix non-mmap file reading. (#609468)
    - eu-strip: -g recognizes .gdb_index as a debugging section. (#631997)


author: Roland McGrath <roland@redhat.com> - 0.150-1
changelog:
  - Update to 0.150
    - libdw: Fix for handling huge .debug_aranges section. (#638432)
    - libdwfl: Fix for handling prelinked DSO with separate debug file. (#652857)
    - findtextrel: Fix diagnostics to work with usual section ordering.


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Mark Wielaard <mjw@redhat.com> - 0.158-3.2
changelog:
  - Add elfutils-0.158-unstrip.patch (#806474)
  - Add elfutils-0.158-readelf-nostrings.patch (#1101440)


author: Mark Wielaard <mjw@redhat.com> - 0.161-3
changelog:
  - Update to 0.161. (#1167724)
  - Add elfutils-0.161-ar-long-name.patch (#1181525 CVE-2014-9447)
  - Add elfutils-0.161-formref-type.patch


author: Mark Wielaard <mjw@redhat.com> - 0.164-1
changelog:
  - Update to elfutils-0.164 (#1254647)
  - Drop old compat stuff
  - Drop upstreamed patches
    - elfutils-0.161-ar-long-name.patch
    - elfutils-0.161-formref-type.patch
  - Include elfutils/known-dwarf.h


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.13.pre3
changelog:
  - use appropriate BuildRequires for nss_compat_ossl (#495532)
  - support for trusted CA certificates loading from file in PEM format


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.15.pre3
changelog:
  - try to load default NSS root certificates if the configuration option
    connection.ssl.trusted_ca_file is set to an empty string (#497788)


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.20.pre5
changelog:
  - remove patch for configure script to find OpenSSL (we use NSS instead)
  - rediffed all patches with non-zero offset
  - add buildrequires for zlib-devel


author: Karel Klic <kklic@redhat.com> 1:23.1-16
changelog:
  - Removed PreReq from spec file
  - Fixed rhbz#517272 - emacs-23.1 update shows fonts in double the normal size


author: Karel Klic <kklic@redhat.com> 1:23.1-17
changelog:
  - Removed invalid URL for rpm-spec-mode.el. This mode in
    this version is no longer found on the Internet


author: Karel Klic <kklic@redhat.com> 1:23.1-21
changelog:
  - Added jis2004 patch to prefer non-JIS X 0213:2004 compliant fonts
    for Japanese texts (IPA fonts are counted as JIS X 0213:2004
    compliant)
    Resolves: #612385
  - Removed dependency on aspell and hunspell
    Resolves: #613759


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.85-4
changelog:
  - Remove BuildRequires for pkgconfig - not needed
  - Clean out uneeded creation of site start directory
  - Remove /usr/share/doc/auctex directory from buildroot


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - R14B-01.4
changelog:
  - Adapt %files: Add wxSystemSettings.3 man page
  - Adapt %files for change from run_test to ct_run
  - Remove rpaths from lib/ssl-*/bin/esock_ssl
  - Update erlang.spec and otp-00*.patch without numbers
  - otp-get-patches.sh: Remove patch numbering


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - R14B-01.5
changelog:
  - erlang-doc does not really require erlang base package (#629723)
  - Add %{?_isa} for all explicit "Requires:"


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - R14B-02.1
changelog:
  - snmp-4.19 (R14B02) ships lib/snmp/bin/snmpc
  - inets-5.5.2 puts *.hrl in include/
  - install/symlink *.jar into %{_javadir} (#679031)
  - Update to upstream maintenance release R14B02


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-7
changelog:
  - fixes memory corruption on git shortlog
  - add -f option for "git submodule add" to add files even when
    these are included in .gitignore
  - improve performance of extremly slow http(s)
  - fix cloning using http(s) protocol when redirection is requested
    Resolves: #874659 #1207253 #1237395 #1289984


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-8
changelog:
  - fixes previous patch which add -f option for "git submodule add"
    which incorectly used unsupported option --ignore-missing for
    "git add --dry-run"
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1207253 #1368384


author: Dmitry Antipov <dantipov@cloudlinux.com> - 1.7.1-10.tuxcare.els1
changelog:
  - CVE-2022-41903: fix out-of-bounds write caused by integer overflow
  - CVE-2021-40330: forbid newlines in host and path
  - CVE-2022-39260: reject too long command line strings
  - CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 1.7.1-10.tuxcare.els2
changelog:
  - CVE-2023-25652: removing a link instead of writing into
  - CVE-2023-29007: restrict the config file line length to parse it whole
  - tests were activated
  - a buffer overflow during reading of configuration's enormous value has been fixed


author: Nikita Maliutin <nmaliutin@cloudlinux.com> - 1.7.1-10.tuxcare.els3
changelog:
  - CVE-2024-32004: integrating ownership checking to detect dubious local
    repositories during cloning


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Ivana Varekova <varekova@redhat.com> - 4.2.4-5
changelog:
  - fix #489069 (update of the package from nonsplit version
    causes the absence of gnuplot binary -
    fixed using posttrans instead of post)


author: Jan Zeleny <jzeleny@redhat.com> - 1.4-2
changelog:
  - cleanup of spec file (mixed tabs-and-spaces, specific version
    for explicit obsoletes, file attributes)


author: Petr Stodulka <pstodulk@redhat.com> - 1.4-4
changelog:
  - Fixed troubles with SSl connection
  - Fixed adding of broken symlink when 'copy -A'
  - Fixed permissions for */hgk - Thanks to Dave Johanse <davejohansen@gmail.com>
    Resolves: #784079 #928301 #1006457


author: Marc Maurer <uwog@abisource.com> 1:1.4.2-1
changelog:
  - New upstream release
  - Add voikko support in an enchant-voikko package
  - Bump glib-devel BR to 2.6.0


author: Adam Tkac <atkac redhat com> 1.6.4-10
changelog:
  - updated patches due rpm 4.6
  - enscript -w is handled well (#457719)
  - mkafmmap -V is handled well (#457720)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-1
changelog:
  - Rebase to 3.2.9c (bug #765630, #818177)
    + Fix 'module clear'
  - Fix memory problems with 'modules switch' (bug #818177)
  - Fix "module use" path in default modules file (bug #848865)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-3
changelog:
  - Add -fno-strict-aliasing to silence gcc warnings
  - Fix timestamps to silence multilib test
  - Related: #848865


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-4
changelog:
  - Revert timestamps fix attempt
  - Prevent rpm from bytecompiling the internal python file
  - Related: #848865


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-5
changelog:
  - Make .modulespath a config file (bug #918540)
  - Do not replace modified profile.d scripts (bug #953198)
  - Remove use of test command in csh alias (bug #929007)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-6
changelog:
  - Call test command in csh alias by its full path (bug #929007)
  - Correctly preserve the target file that the config symlink points to
    (this change makes the previous fix for bug #953198 whole)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.10-2
changelog:
  - fix: SourceVers wrongly sets version in nested directory (#979789)
  - fix: unload from loaded modulefile broken (#1117307)


author: Matthias Saou <http://freshrpms.net/> 2.1-7
changelog:
  - Rebuild against python 2.5.
  - Remove no longer needed explicit python-abi requirement.
  - Change python build requirement to python-devel, as it's needed now.


author: Matthias Saou <http://freshrpms.net/> 2.1-8
changelog:
  - Remove desktop file prefix and X-Fedora category.
  - Include patch to remove #! python from files only meant to be included.


author: Matthias Saou <http://freshrpms.net/> 3.0.1-1
changelog:
  - Update to 3.0.1.
  - Update nohashbang patch.
  - Include new apirst2html script, but remove .py extension to avoid .pyc/pyo.
  - Include egg-info file.


author: Jack Magne <jmagne@redhat.com>= 1.1.0-17
changelog:
  - Resolves: 556657 Enroll button active for an enrolled CAC card.
  - Resolves: 469867 Cannont use arrow keys to move between cards.


author: Jack Magne <jmagne@redhat.com>= 1.1.0-22
changelog:
  - Resolves: 729027 - Debuginfo package issues in esc
  - Resolves: 253077 - ESC windows should keep the same size if the user resized them
  - Resolves: 682216 - [abrt] esc-1.1.1.0-21.el6 __strcmp_ssse3: Process /usr/lib/esc-1.1.1.0/escd 
  -    was killed by singnal 11 (SIGSEGV)
  - Resolves: 702683 - esc-prefs.js file has a typo


author: Jack Magne <jmagne@redhat.com>= 1.1.0-26
changelog:
  - Resolve bugs #981156 and #961582. One minor permissions issue, the other fix to malformed desktop file.


author: - Bastien Nocera <bnocera@redhat.com> - 1:0.2.38-6
changelog:
  - Kill the main esound package, so people don't try to use it instead of
    pulseaudio itself (#353051)


author: Matthias Clasen <mclasen@redhat.com> - 1:0.2.39-1
changelog:
  - Update to 0.2.39
  - Drop upstreamed patches
  - Temporarily disable doc build due to xml catalog issues


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.31-1
changelog:
  - Update to version 1.31
  - Compile phoneme tables and voice dictionaries from source instead of
    packaging pre-compiled binary data
  - Added espeakedit as Source1
  - Added BuildRequires: wxGTK-devel for espeakedit
  - Added "makefile_rpmoptflags_wxversion" espeakedit patch to enable
    RPM_OPT_FLAGS and set the correct wxWidgets version
  - Added "espeak_data_path" espeakedit patch to be able to set control the
    source directory that espeakedit's compiler uses


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.31-2
changelog:
  - Removed espeakedit (and associated patches and BuildRequires) from package
    until all phoneme table compilation functions can be moved into espeak (or a
    separate commandline app without wxGTK dependencies)
  - Voices are still compiled from source, but using pre-compiled phoneme table
    from upstream until the above issue is resolved


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.31-3
changelog:
  - Added "makefile_libjack" patch to link to libjack
  - Added BuildRequires: jack-audio-connection-kit-devel


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.40.02-1
changelog:
  - Update to version 1.40.02
  - Added patch to compile with GCC and not to link to libstdc++ (not needed)
  - Added manpage (thanks goes to Luke Yelavich from Ubuntu for writing it)


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.1
changelog:
  - Pull in 2.6.33pre1 from rawhide
    Resolves: bz#520481 - [Emulex 6.0 feat] be2net request_firmware() support in
    Ethtool-cmd-with-flash-for-RH6


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.3
changelog:
  - Fix source0 line to match the actual download filename.
  - Get rid of the no-longer-needed predash macro.
    Related: bz#555835


author: Jay Fenlason <fenlason@redhat.com> 3.5-1.2
changelog:
  - Backport two patches to improve register dumps on ixgbe devices
    Resolves: bz#1038956
  - Backport two patches to fix lro support
    Resolves: bz#1038955


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - Include a pair of small patches from upstream to improve
    handling of lro options
    Resolves: bz#1010843
  - Include a pair of small patches to improve dumping of
    registers on ixgbe devices
    Resolves: bz#1018367


author: Jay Fenlason <fenlason@redhat.com> 3.5-4
changelog:
  - Include the backported -kr patch from upstream to close
    Resolves: bz#1003891
    the rest of the way.


author: Garrett Holmstrom <gholms@fedoraproject.org> - 3.3.0-1
changelog:
  - Upstream update (3.3.0)
  - Fixed broken #!s
  - Fixed PutMetricData's syntax for dimensions [TOOLS-597]


author: Garrett Holmstrom <gholms@fedoraproject.org> - 3.3.0-3
changelog:
  - Added missing tag:KEY filter to euca-describe-group [TOOLS-578]
  - Backported tag creation to eulb-create-lb [TOOLS-592]
  - Backported route.instance-id filter to euca-describe-route-tables [TOOLS-616]
  - Fixed display of NIC attachment IDs [TOOLS-610]
  - Fix a couple edge cases in tag key/value parsing
  - Made euca-fingerprint-key handle openssl errors [TOOLS-608]
  - Made euform-create-stack not send DisableRollback=false by default
  - Show tags when outputting ENIs [TOOLS-621]
  - Added euform-update-stack --capabilities [TOOLS-613]
  - Backported euform-update-stack --tag


author: Garrett Holmstrom <gholms@fedoraproject.org> - 3.4.0-1
changelog:
  - Upstream update (3.4.0)
  - Updated for current python packaging standards
  - Fixed auth failure when uploading bundles using upload policies [TOOLS-674]
  - Added eu-west-2 AWS region [TOOLS-673]


author: Milan Crha <mcrha@redhat.com> - 2.32.3-28.el6
changelog:
  - Add patch for RH bug #1012399 (Fails to display task mail attachment)
  - Bump evolution-data-server version requirement (for RH bug #1009426)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-30.el6
changelog:
  - Update patch for RH bug #975409 (Custom message in alarm notification)
  - Add patch for RH bug #1014743 (Use system timezone has no effect)
  - Add patch for RH bug #1014677 (Search filter persists when changing folders)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-32.el6
changelog:
  - Add patch for RH bug #1054865 (Incorrect unref under e_attachment_load_finish())
  - Add patch for RH bug #1054772 (Local addressbooks created without relative_uri set)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-33.el6
changelog:
  - Add patch for RH bug #1080467 (mark-all-read plugin can cause UI freeze)
  - Add patch for RH bug #1052955 (Time format in combo controls is always 24 hrs)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-37.el6
changelog:
  - Add patch for RH bug #1066063 (Use-after-free on a reminder snooze)
  - Add patch for RH bug #1133507 (Calendar event times not drawn with correct font)


author: Milan Crha <mcrha@redhat.com> - 2.28.3-20.el6
changelog:
  - Add versioned evolution-conduits to evolution-devel Requires
  - Add nss/nspr libraries to LDAP_LIBS, because latest openldap requires it


author: Milan Crha <mcrha@redhat.com> - 2.32.3-14.el6
changelog:
  - Add patch for RH bug #1009470 (evolution-ews crash when GAL not marked for offline sync)
  - Add patch for RH bug #1005888 (evolution-ews add 'no-alarm-after-start' calendar capability)


author: Milan Crha <mcrha@redhat.com> - 0.28.3-5
changelog:
  - Bump openchange requirement to 0.9-7
  - Add patches for RH bug #605369, namely:
    - Exchange 2010 support (tags and encrypted connection)
    - Less debug output on console
    - GNOME bug #569631 (Hangs during the initial fetch of calendar items)
    - GNOME bug #581434 (Double free or corruption in calendar)
    - GNOME bug #593176 (winmail.dat sent in outgoing plaintext mail)
    - GNOME bug #595914 (Doesn't display the Cyrrilic symbols in folder names)
    - GNOME bug #598564 (Has problems encoding mails containing html)
    - GNOME bug #600386 (Do not use charset on messages with UNICODE body fetched)
    - GNOME bug #600389 (UTF8 characters not shown properly)
    - GNOME bug #602896 (CC field is shown twice in message)
    - GNOME bug #607384 (Replying causes the message to appear as garbage)
    - GNOME bug #607422 (Crash while importing a message without From header)
    - GNOME bug #610224 (Crash on a meeting forward notification mail)


author: Milan Crha <mcrha@redhat.com> - 0.28.0-1
changelog:
  - Update to 0.28.0
  - Add patch for Gnome bug #588453 (slow retrieval of message IDs).
  - Add patch for Gnome bug #595260 (crash in mapi_sync_deleted).
  - Add patch for Gnome bug #595355 (crash and incorrect header parsing).
  - Add patch for Gnome bug #595480 (crash on fetching GAL).


author: Milan Crha <mcrha@redhat.com> - 0.28.1-1
changelog:
  - Update to 0.28.1
  - Remove patch for Gnome bug #588453 (fixed upstream).
  - Remove patch for Gnome bug #595260 (fixed upstream).
  - Remove patch for Gnome bug #595355 (fixed upstream).
  - Remove patch for Gnome bug #595480 (fixed upstream).


author: Milan Crha <mcrha@redhat.com> - 0.32.2-2
changelog:
  - Add patch for RH bug #694134 (Contacts book not searchable)
  - Add patch for RH bug #625059 (Allow slash in folder names)
  - Add patch for RH bug #905591 (Refresh folder can fail with Exchange 2010 server)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-10
changelog:
  - Add patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #906341 (Cannot create book/calendar)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-11
changelog:
  - Update patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #1017108 (Shorten delay of calendar open)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-13
changelog:
  - Add patch for RH bug #1026797 (Coverity scan issue - uninitialized variable)
  - Add patch for RH bug #1141662 (Crash when receiving message without body)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.90.1-1
changelog:
  - New version
    Resolves: rhbz#1527710
  - Fixed buffer overflow in utility function
    Resolves: CVE-2018-6789
  - Updated and defuzzified patches
  - Dropped mariadb-macro-fix patch (not needed)
  - Dropped CVE-2017-1000369, calloutsize, CVE-2017-16943,
    CVE-2017-16944 patches (all upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.91-1
changelog:
  - New version
    Resolves: rhbz#1615158
  - Dropped dynlookup-config patch (merged into config patch)
  - Dropped dec64table-read-fix patch (already upstream)
  - Dropped unused patches
  - De-fuzzified patches


author: Deyneko Aleksey <adeyneko@cloudlinux.com> - 4.92.3-3.cloudlinux.els
changelog:
  - New version from commit b2070b15251231e4841499e8c599676308ce394a
  - Fixed CVE-2020-28007: Link attack in Exim's log directory
  - Fixed CVE-2020-28008: Assorted attacks in Exim's spool directory
  - Fixed CVE-2020-28014: Arbitrary PID file creation
  - Fixed CVE-2020-28011: Heap buffer overflow in queue_run()
  - Fixed CVE-2020-28010: Heap out-of-bounds write in main()
  - Fixed CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  - Fixed CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  - Fixed CVE-2020-28015: New-line injection into spool header file (local)
  - Fixed CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  - Fixed CVE-2020-28009: Integer overflow in get_stdinput()
  - Fixed CVE-2020-28017: Integer overflow in receive_add_recipient()
  - Fixed CVE-2020-28020: Integer overflow in receive_msg()
  - Fixed CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  - Fixed CVE-2020-28021: New-line injection into spool header file (remote)
  - Fixed CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  - Fixed CVE-2020-28026: Line truncation and injection in spool_read_header()
  - Fixed CVE-2020-28019: Failure to reset function pointer after BDAT error
  - Fixed CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  - Fixed CVE-2020-28018: Use-after-free in tls-openssl.c
  - Fixed CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 4.92.3-3.tuxcare.els2
changelog:
  - CVE-2022-37452: fix heap-based buffer overflow for the alias list in
    host_name_lookup()
  - CVE-2022-37451: fix invalid free in pam_converse()


author: Dmitriy Popov <dpopov@cloudlinux.com> - 4.92.3-3.tuxcare.els4
changelog:
  - CVE-2023-42114: fix possible OOB read in SPA authenticator
  - CVE-2023-42116: fix possible OOB write in SPA authenticator


author: Joe Orton <jorton@redhat.com> - 2.0.1-8
changelog:
  - add security fix for CVE-2009-3560 (#533174)
  - add security fix for CVE-2009-3720 (#531697)
  - run the test suite


author: Nikita Ivanov <nivanov@cloudlinux.com> - 2.0.1-13.tuxcare.els1
changelog:
  - CVE-2022-25236: Fix insertion of namespace-separator characters into
    namespace URIs
  - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to
    arbitrary code execution
  - CVE-2022-25315: Fix integer overflow in storeRawNames()
  - CVE-2022-22822: Fix integer overflow in addBinding()
  - CVE-2022-22823: Fix integer overflow in build_model()
  - CVE-2022-22824: Fix integer overflow in defineAttribute()
  - CVE-2022-22825: Fix integer overflow in lookup()
  - CVE-2022-22826: Fix integer overflow in nextScaffoldPart()
  - CVE-2022-22827: Fix integer overflow in storeAtts()
  - CVE-2022-23852: Fix integer overflow in XML_GetBuffer()
  - CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog()
  - CVE-2021-45960: Fix troublesome left shifts in storeAtts()
  - CVE-2022-23990: Fix integer overflow in doProlog()


author: Pavel Kopylov<pkopylov@cloudlinux.com> - 2.0.1-13.tuxcare.els2
changelog:
  - CVE-2022-40674: Ensure raw tagnames are safe exiting
    internalEntityParser
  - fix tests leak
  - fix xmlparse leak


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 2.0.1-13.tuxcare.els5
changelog:
  - CVE-2024-45491: Detect integer overflow in dtdCopy on 32-bit platforms
  - CVE-2024-45492: Detect integer overflow in nextScaffoldPart on 32-bit platforms


author: Joe Orton <jorton@redhat.com> 1.95.8-10
changelog:
  - remove trailing dot in Summary (#225742)
  - use preferred BuildRoot per packaging guidelines (#225742)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-1
changelog:
  - Update to 5.44.1.15 from upstream CVS
  - Remove config.sub (no longer needed), remove unused patches (few are
    upstream now, few are pointless with new version), comment patches
  - Fix unbuffer to return exit code of ubuffered program
  - Fix Tk initialization


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-3
changelog:
  - Use full path to su in passmass
    Resolves: #735962
  - Fix segfault in characters matching
    Resolves: #742911
  - Fix minor man page formatting issue
    Resolves: #674866


author: Dominik Mierzejewski <dominik [AT] greysector [DOT] net> 1:2.6.1-5
changelog:
  - add Obsoletes: for xmms-aac to ensure smooth upgrade from Freshrpms
  - add some additional docs for xmms-faad2


author: Dominik Mierzejewski <dominik [AT] greysector [DOT] net> 1:2.7-1
changelog:
  - update to 2.7
  - don't install internal libmp4ff
  - include manpage
  - fix build on x86_64 (non-PIC objects in libmp4ff.a)
  - fix rpaths
  - make xmms plugin depend on -libs, not the frontend
  - preserve docs timestamps


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 2.9-19
changelog:
  - Update to 2.9.
  - Removed fakechroot-2.8-initsocketlen.patch (upstream now).
  - Removed int->ssize_t readlink type change (upstream testing for type
    now).
  - Removed permission fix for scripts/ldd.fake scripts/restoremode.sh
    scripts/savemode.sh (fixed upstream).


author: Richard W.M. Jones <rjones@redhat.com> - 2.9-24.5.el6.1
changelog:
  - Properly fix multilib issue in shell script /usr/bin/fakechroot
    and remove ExclusiveArch.
    resolves: rhbz#730647


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 1.12.2-21
changelog:
  - Update to 1.12.2.
  - Create a fakeroot-libs subpackage so that the package is multilib
    aware (by Richard W.M. Jones <rjones@redhat.com>, see RH bug


author: Andy Grover <agrover@redhat.com> - 1.99.1.git37f175c-5
changelog:
  - Fix saveconfig by creating /etc/target/backup
  - Add targetadmin manpage
  - Add patches
   * 0008-fix-spec_root-path.patch
   * 0009-add-docs.patch


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb8-1
changelog:
  - Update to latest upstream release
  - Remove all patches
  - Executable renamed targetadmin->targetcli to match upstream


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb10-4
changelog:
  - Add patches:
   * fcoe-target-utils-handle-no-acl-auth.patch
   * fcoe-target-utils-no-rdmcp.patch
   * fcoe-target-utils-message-deprecated.patch


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb10-5
changelog:
  - Update fcoe-target.init to handle start and shutdown properly
  - Add patch fcoe-target-utils-no-msg-if-no-config.patch


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb16-1
changelog:
  - Update to latest upstream version
  - Remove patches:
   * fcoe-target-utils-handle-no-acl-auth.patch
   * fcoe-target-utils-message-deprecated.patch


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb16-6
changelog:
  - Add patches:
      0006-Add-tag-support.patch
      0007-Simplify-tag.patch
      0008-Fix-UINodeACL-creation.patch
      0009-Add-error-checking-for-tag.patch
      0010-Update-tag-doctext.patch
      0011-Fix-re-tagging.patch
      0012-Fix-missed-spot-in-tags-conversion.patch
      0013-fix-missing-import.patch
      0014-Remove-execute_command-in-UIRTSLibNode.patch
      0015-Make-info-command-return-dump-information.patch
  - Rename existing patches to match new patch names


author: Petr Šabata <contyk@redhat.com> - 1.0.22-1
changelog:
  - Update to 1.0.22 with 7d3c9d1, "Add date and ps output to fcoedump.sh"
  - Require libhbalinux-1.0.13 or newer


author: Petr Šabata <contyk@redhat.com> - 1.0.22-2
changelog:
  - Reverting a part of d789267 upstream patch.  Initscript shouldn't return code 2 on
    status query when the daemon is running. (#804936)


author: Petr Šabata <contyk@redhat.com> - 1.0.28-1
changelog:
  - Update to 1.0.28 (#829793)
  - Include a fix for #903099, destroying vports first to avoid a hang
  - Fix an old bogus date in the changelog


author: Petr Šabata <contyk@redhat.com> - 1.0.28-2
changelog:
  - Don't build on s390x (#693443)
  - Add a note to README about EL6 service already implementing the
    suggested function (#981062)
  - Use rtgenmsg when requesting RTM_GETLINK (#882139)


author: Richard Jones <rjones@redhat.com> - 2.7-1
changelog:
  - Backport version 2.7 from Rawhide (fixes RHBZ#592051).
  - febootstrap-supermin-helper shell script rewritten in C for speed.
  - This package contains C code so it is no longer 'noarch'.
  - MAKEDEV isn't required.


author: Richard W.M. Jones <rjones@redhat.com> - 2.10-2
changelog:
  - Rebase to version 2.10 (RHBZ#628849).
  - Include fixes for building on ppc and ppc64 ...
  - ... but set ExclusiveArch x86_64.


author: Richard W.M. Jones <rjones@redhat.com> - 2.11-3
changelog:
  - Backport patch to improve the stability of the checksum and reduce
    the need to rebuild the appliance.
  - Add BR + Requires on insmod.static.


author: Richard Jones <rjones@redhat.com> - 2.11-6
changelog:
  - Split package into febootstrap (for building) and febootstrap-supermin-helper
    (for running).  Note that febootstrap depends on febootstrap-supermin-helper,
    but you can install febootstrap-supermin-helper on its own (RHBZ#669839).


author: Richard Jones <rjones@redhat.com> - 2.11-7
changelog:
  - Splitting the package broke RHEL 6.0 -> 6.1 upgrades.  Add an Obsoletes
    header to fix this.
    resolves: RHBZ#669839


author: Richard Jones <rjones@redhat.com> - 3.9-1
changelog:
  - Rebase to febootstrap 3.9.
    resolves: RHBZ#719877
  - This package contains febootstrap (version 2.11) and febootstrap3.


author: Richard Jones <rjones@redhat.com> - 3.21-4
changelog:
  - Fix directory permissions to include setgid and sticky bits.
  - Ignore ghost non-regular files.
  - Fix segfault when -u/-g options missing argument.
    related: rhbz#958184


author: Marek Grac <mgrac@redhat.com> - 4.0.15-4
changelog:
  - fence_ilo_moonshot: New fence agent for HP Moonshot
    Resolves: rhbz#1099551
  - fence_mpath: New fence agent for multipath devices
    Resolves: rhbz#1118008


author: Marek Grac <mgrac@redhat.com> - 4.0.15-5
changelog:
  - fence_ilo_ssh: New fence agent
    Resolves: rhbz#1111482
  - fence_kdump: Update metadata for 'monitor'
    Resolves: rhbz#1094515


author: Marek Grac <mgrac@redhat.com> - 4.0.15-7
changelog:
  - fence_scsi: remove new pythonic version
  - fence_ipmilan: unset default cipher
  - fence_ilo2: add options --tls1.0
  - fence_bladecenter: fix login process
    Resolves: rhbz#1049805


author: Marek Grac <mgrac@redhat.com> - 4.0.15-9
changelog:
  - fence_ipmilan no longer understands -i
    Resolves: rhbz#1254046
  - fence_ipmilan no longer understands 'timeout'
    Resolves: rhbz#1254700
  - fence_ilo: Improve negotiation of TLS protocol
    Resolves: rhbz#1256902
  - fence_rsa: Login process over telnet is not working
    Resolves: rhbz#1247062
  - fence_mpath: lose scsi keys after restart
    Resolves: rhbz#1254183


author: Marek Grac <mgrac@redhat.com> - 4.0.15-11
changelog:
  - fence_ipmilan: Revert power_wait values
    Resolves: rhbz#1273632
  - fence_apc: Support for firmware 6.x
    Resolves: rhbz#1259254
  - fence_ipmilan: Add 'diag' action
    Resolves: rhbz#1266600
  - fencing: Add '-list-status' action
    Resolves: rhbz#1183829


author: Marek Grac <mgrac@redhat.com> - 4.0.15-13
changelog:
  - fence_ipmilan: Do not print password to debug output
    Resolves: rhbz#1358064
  - fencing: Handle None as status properly
    Resolves: rhbz#1361623


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.15-13.2
changelog:
  - fence_rhevm: add "--api-path" and "--disable-http-filter" to be
    able to explicitly use oVirt API version 3
    Resolves: rhbz#1506694


author: David Teigland <teigland@redhat.com> - 2.5-1
changelog:
  - Resolves: rhbz#826022 rhbz#830736 rhbz#830848 rhbz#831906 rhbz#832935 rhbz#840063 rhbz#841305 rhbz#843073


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-9
changelog:
  - Update the man page and configuration generator to reflect the actual
    behavior of the default value for the "interface" option.
    Resolves: rhbz#809101


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-10
changelog:
  - Drop the fence-virtd-libvirt-qpid subpackage.
    Resolves: rhbz#859235
  - Add a delay option to fence_virt/fence_xvm
    Resolves: rhbz#823542
  - Return failure from fence_virtd when attempting to fence a nonexistent VM
    Resolves: rhbz#853927
  - Improve the documentation of the 'hash' parameter in fence_virt.conf
    Resolves: rhbz#843104


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-19
changelog:
  - fence_virt/fence_xvm: Print status when invoked with -o
    Resolves: rhbz#1020992
  - fence-virt: Fix broken restrictions on the port ranges
    Resolves: rhbz#1078197
  - Fix static analysis errors
    Resolves: rhbz#1125290


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-24
changelog:
  - fence-virt: Add list-status command to man page and metadata
    Resolves: rhbz#908455
  - Remove delay from the status, monitor and list
    Resolves: rhbz#1204873


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.1-6
changelog:
  - Fix man page references: fence_virtd.conf -> fence_virt.conf
    (fix_man_page_references_fence_virtd_conf_fence_virt_conf.patch)
    Resolves: rhbz#667170


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.3-1
changelog:
  - Zap patch queue
  - Add post call to fence-virt to integrate with cluster 3.1.4
  - Rebase to latest upstream
  - Provide 'domain' in metadata output for compatibility
  - Fix input parsing to allow domain again
    Resolves: rhbz#719645


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.3-3
changelog:
  - Fix error getting status from libvirt-qpid plugin
    Convert libvirt-qpid plugin to QMFv2
    Add libvirt-qmf support to the libvirt-qpid plugin
    Resolves: rhbz#691200


author: Lon Hohberger <lhh@redhat.com> 0.2.1-3
changelog:
  - Fix spec file due to qpid package renaming and architecture changes
  - Don't build on s390 and s390x
  - Resolves: rhbz#568003 rhbz#567744


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.3-6
changelog:
  - Catch exceptions for libvirt-qmf detection failures
    Resolves: rhbz#753974
  - Fix crash when we fail to read key file.
    Resolves: rhbz#758392
  - Fix erroneous man page XML
    Resolves: rhbz#761215


author: Jesse Keating <jkeating@redhat.com> - 1.96-11
changelog:
  - Drop the explicit dep on festival-voice, as it is redundant and
    causes problems with multiple providers


author: Matthias Clasen <mclasen@redhat.com> - 1.96-12
changelog:
  - Add Spanish voices from the guadalinex project, in the
    hispavoces-pal-diphone and hispavoces-sfl-diphone subpackages
    (#496011)


author: Monty <cmontgom@redhat.com> - 0.4.9-0.5.20080908
changelog:
  - Move to a stripped-down form of 0.4.9 maintained locally
  - Remove more mpeg-related code
  - Move libav->libqav namespace change from specfile to to source build system


author: Monty <cmontgom@redhat.com> - 0.4.9-0.11-20080908
changelog:
  - Update to a new git snapshot: 7ae0395709bda753ff1fb8cecdc2fc77232cab56
  - Revert SVN date-- this is not the date of the local repo, it is the date
    of the matching upstream ABI.  Do not change it.


author: Monty <cmontgom@redhat.com> - 0.4.9-0.13.20080908
changelog:
  - Correct versioning typo in spec
  - Remove unused codecs from build (allowing a stright configure to succeed)


author: Uri Lublin <uril@redhat.com> - 0.4.9-0.15.5spice.20080908
changelog:
  - Rename package and files from qffmpeg to ffmpeg-spice
  - Removed all 'q' prefix from directories/files/libraries.


author: Jan Kaluza <jkaluza@redhat.com> 5.04-6
changelog:
  - fix #637782 - identify the zip64 format correctly
  - fix #643046 - recognize volume_key escrow packets
  - fix #594083 - improve Python recognition
  - fix #608686 - mention return code in manpage
  - fix #610795 - recognize webm content
  - fix #670125 - don't identify GFS2 filesystems as GFS1 filesystems


author: Jan Kaluza <jkaluza@redhat.com> 5.04-8
changelog:
  - fix #676045 - detect all RPM architectures
  - fix #712992 - detect noarch RPM packages
  - fix #688700 - detect s390 kernel
  - fix #692098 - do not try to get coredump informations from normal binary
  - fix #712988 - do not handle Python scripts as binary files
  - fix #690801 - fixed grammar mistakes in man page
  - fix #675691 - improve TeX recognition


author: Jan Kaluza <jkaluza@redhat.com> 5.04-12
changelog:
  - fix #758109 - detect ia64 swap
  - fix #760083 - print RPM packages names
  - fix #709846 - detect BIOS headers
  - fix #688136 - remove weak msdos patterns
  - fix #747999 - improve lzma detection
  - fix #733229 - magic pattern for python function detection


author: Jan Kaluza <jkaluza@redhat.com> 5.04-13
changelog:
  - fix #688136 - fixed the patch from previous commit
  - fix #719583 - support for local magic file in /etc/magic


author: Jan Kaluza <jkaluza@redhat.com> 5.04-14
changelog:
  - fix #795425 - detect vdi images
  - fix #795761 - detect qed images
  - fix #801711 - uncompress bzip2 archives using -z parameter
  - fix #797784 - read patterns from ~/.magic.mgc


author: Jan Kaluza <jkaluza@redhat.com> 5.04-16
changelog:
  - fix #873997 - improve Minix detection pattern to fix false positives
  - fix #884396 - improve PBM pattern to fix misdetection with x86 boot sector
  - fix #980941 - improve Bio-Rad pattern to fix false positives
  - fix #849621 - tweak strength of XML, Latex and Python patterns to execute
    them in the proper order
  - fix #1067771 - detect qcow version 3 images
  - fix #1064463 - treat RRDTool files as binary files


author: Jan Kaluza <jkaluza@redhat.com> 5.04-17
changelog:
  - fix CVE-2014-3479 (cdf_check_stream_offset boundary check)
  - fix CVE-2014-3480 (cdf_count_chain insufficient boundary check)
  - fix CVE-2014-0237 (cdf_unpack_summary_info() excessive looping DoS)
  - fix CVE-2014-0238 (CDF property info parsing nelements infinite loop)
  - fix CVE-2014-2270 (out-of-bounds access in search rules with offsets)
  - fix CVE-2014-1943 (unrestricted recursion in handling of indirect type rules)
  - fix CVE-2012-1571 (out of bounds read in CDF parser)


author: Jan Kaluza <jkaluza@redhat.com> 5.04-22
changelog:
  - fix #1169509 - add support for Java 1.7 and 1.8
  - fix #1243650 - comment out too-sensitive Pascal magic
  - fix #1080453 - remove .orig files from magic directory
  - fix #1161058 - add support for EPUB
  - fix #1162149 - remove parts of patches patching .orig files
  - fix #1154802 - fix detection of zip files containing file named "mime"
  - fix #1246073 - fix detection UTF8 and UTF16 encoded XML files
  - fix #1263987 - add new "execfn" to coredump output to show the real name of
    executable which generated the coredump
  - fix #809898 - add support for detection of Python 3.2-3.5 byte-compiled files
  - fix #966953 - backport support for MSOOXML


author: Jan Kaluza <jkaluza@redhat.com> 5.04-27
changelog:
  - fix CVE-2014-3587 (incomplete fix for CVE-2012-1571)
  - fix CVE-2014-3710 (out-of-bounds read in elf note headers)
  - fix CVE-2014-8116 (multiple DoS issues (resource consumption))
  - fix CVE-2014-8117 (denial of service issue (resource consumption))
  - fix CVE-2014-9620 (limit the number of ELF notes processed)
  - fix CVE-2014-9653 (malformed elf file causes access to uninitialized memory)


author: Ondrej Vasik <ovasik@redhat.com> 2.4.28-1
changelog:
  - Provide/obsolete pm-utils-filesystem, own dirs for pm-utils
    hooks(#515362)
  - Do own man sections for /usr/share/man/<locale> dirs (#220265)
  - Do own /usr/share/sounds (#515485)


author: Ondrej Vasik <ovasik@redhat.com> 2.4.29-1
changelog:
  - iso_codes package no longer provides tab files, do generate
    them on fly with sed (thanks D. Tardon)


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.9-1.el6
changelog:
  - Update to 2.7.9 (RH bug #616917).
  - Remove patches now included upstream:
      pidgin-2.6.6-clientLogin-proxy-fix.patch
      pidgin-2.6.6-clientLogin-use-https.patch
      pidgin-2.6.6-CVE-2010-1624.patch
      pidgin-2.6.6-CVE-2010-3711.patch
  - Disable the translation updates patch.  It doesn't apply anymore and
    will have to be redone.  Saving the patch for now in case some parts
    are still useful to translators.


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.9-6.el6
changelog:
  - Add patch for CVE-2012-1178 (RH bug #837560).
  - Add patch for CVE-2012-2318 (RH bug #837560).
  - Add patch for CVE-2012-3374 (RH bug #837560).


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-4
changelog:
  - make it possible to recognize an autofs filesystem by find
  - add a new find's option -xautofs to not descend directories on autofs
    filesystems


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-8
changelog:
  - fix quotation punctuation in find(1) man page (#659730)
  - fix file descriptor leak with --execdir option (#1223557)


author: Tomas Mraz - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-5
changelog:
  - move library to /lib so the binaries needed when /usr might
    not be mounted can link to it (#669077)


author: Martin Sivak <msivak@redhat.com> - 0.2.9-1
changelog:
  - Make most of the subpackages arch independent as they
    contain only python code
    Related: rhbz#557202


author: Martin Sivak <msivak@redhat.com> - 0.3.1-1
changelog:
  - OpenSCAP plugin adapted to the updated OpenSCAP API
  - Big improvements to remote mode GUI usability


author: Martin Gracik <mgracik@redhat.com> 1.110.5-1
changelog:
  - Set the LANG variable if running our own X frontend (#599296)
  - Allow more control when creating new user (#602030)


author: Martin Gracik <mgracik@redhat.com> 1.110.9-1
changelog:
  - Fix firstboot for s390 architecture (#463564)
  - Change how we check for user account (#659451)
  - Add a module for setting up root password (#658869)
  - Translation updates


author: Martin Kolman <mkolman@redhat.com> 1.110.15-2
changelog:
  - Check if firstboot is disabled even if firstboot is run directly (#1024176)
    Resolves: rhbz#1024176


author: - Bastien Nocera <bnocera@redhat.com> - 1.2.0-3
changelog:
  - Make a few functions hidden, to try and avoid textrels
  - Disable optimisations on x86 for the same reason
    (#285961)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-2
changelog:
  - fix building with gcc-4.3 
  - reenable some assembly optimizations
  - hide private libFLAC symbols (#285961)
  - update license tag
  - add %check
  - remove -maltivec from CFLAGS


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-7
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: Akemi Yagi <toracat@elrepo.org> - 0.0-2
changelog:
  - Packaging style now conforms to the ELRepo standard. [Alan Bartlett]
  - Built against kernel 2.6.32-220.el6.


author: Akemi Yagi <toracat@elrepo.org> - 0.0-4
changelog:
  - Updated to flashcache-stable_v2.
  - Provides: /sbin/flashcache_create flashcache_destroy flashcache_load flashcache_scan 
    flashcache_setioctl flashstat get_agsize and /usr/lib/ocf/resource.d/flashcache


author: Petr Machata <pmachata@redhat.com> - 2.5.33-16
changelog:
  - Fix comparison between signed and unsigned in generated scanner.
    Patch by Roland McGrath.
  - Resolves: #431151


author: Petr Machata <pmachata@redhat.com> - 2.5.35-4
changelog:
  - Get rid of warning caused by ignoring return value of fwrite() in
    ECHO macro.  Debian patch.
  - Resolves: #484961


author: Ville Skyttä <ville.skytta at iki.fi> 1.3-1jpp
changelog:
  - Update to 1.3.
  - Use sed instead of bash 2 extension when symlinking jars during build.
  - Add Distribution tag, fix URL, tweak Summary and description.


author: Kevin Fenzi <kevin@tummy.com> - 20090224-2
changelog:
  - Apply patch for python modules loading (fixes #489109)
  - use install -p to fix multiarch issue (fixes #480685)


author: Nicolas Mailhot <nim at fedoraproject dot org>
changelog:
  - 1.31-2
  — add yum-utils to deps
  - 1.31-1
  — Rework repo-font-audit messages based on packager feedback


author: Nicolas Mailhot <nim at fedoraproject dot org>
changelog:
  - 1.33-1
  — repo-font-audit: add ancilliary script to compare the results of two
    different runs
  - 1.32-1
  — repo-font-audit: add test for core fonts direct use
  — repo-font-audit: replace font naming tests by a more comprehensive one
    (in a separate utility)
  — repo-font-audit: add fedora packager detection
  — repo-font-audit: parallelize (at the cost of more filesystem space use)
  — repo-font-audit: misc output and reliability fixes


author: Tim Waugh <twaugh@redhat.com> - 4.0.3-10
changelog:
  - Removed old explicit provides for perl(Foomatic::GrovePath).
  - Fixed macro in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING files.
  - Added comments for sources.
  - Use Requires not PreReq (bug #225768).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-1
changelog:
  - Updated to 4.0.4 (bug #570234).  No longer buildrequires
    ghostscript-devel (but requires ghostscript) or
    foomatic-filters-int-options patch.


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-1:.1
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2697, bug #721001).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-2
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2964, bug #727016).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-3
changelog:
  - Too few arguments for format in a debugging string (bug #726385).
  - Fixed perl installation locations for build (bug #661770).


author: Jiri Popelka <jpopelka@redhat.com> - 4.0.4-5
changelog:
  - Also consider back tick and semicolon as illegal shell escape characters.
  - CVE-2015-8327, CVE-2015-8560


author: Tim Waugh <twaugh@redhat.com> 4.0-2.20090702
changelog:
  - Move foomatic-db-ppds symlink to ppds sub-package.
  - Use sed instead of perl in raster PPDs (bug #512739).
  - Removed code to convert old-style printer IDs (there are none).
  - Ship README file.


author: Tim Waugh <twaugh@redhat.com> 4.0-3.20090702
changelog:
  - License for ppds sub-package should include GPLv2+.
  - Ship COPYING file in main package.
  - Added filesystem sub-package for directory ownership.


author: Tim Waugh <twaugh@redhat.com> 4.0-5.20090819
changelog:
  - Updated to foomatic-db-4.0-20090819.
  - Removed deprecated foomatic-db-hpijs tarball.
  - Use buildroot macro throughout.


author: Jan Safranek <jsafrane@redhat.com> - 0.7.16-2
changelog:
  - Fix the ipmievd initscript to actually start the service and better
    LSB compatibility (#578172). As consequence, the init scripts were
    renamed to ipmidetectd and bmc-watchdog (was: freeipmi-ipmidetectd
    and freeipmi-bmc-watchdog).


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-1
changelog:
  - Rebase to upstream except changes in /etc/freeipmi/ config dir.
    preserving original locations.
  - 1.2.1:
  - Add ipmiseld daemon and subpackage.
  - Update paths for libfreeipmi changes.
  - Remove bmc-watchdog logrotate file.
  - 1.1.1:
  - Add contrib and ipmi-pet files.
  - Make main package own logdir.
  - 1.0.4:
  - Add pkgconfig files.
  - 0.9.0:
  - Add interpret sub-library.
  - Support new config files.
  - Support new ipmi_monitoring*.h files.
  - Support new manpages.
  - Support new compatability symlinks/manpages.
  - 0.8.0:
  - Update for dcmi.
  - Update for renaming of pef-config.
  - Update for new .h files.
  - Add new ipmimonitoring config manpages.


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-6
changelog:
  - Kernel module aliases configuration for kmod. (#1020650)
  - Big-Endian authentication fix. (#1022178)
  - Revert short options removal to preserve 0.7.16 command line parameters.


author: Boris Ranto <branto@redhat.com> - 0:1.2.1-8
changelog:
  - New release (0:1.2.1-8)
  - Check record counts against array length
  - Increase max record ids in sensor tools to 4096


author: Jan Safranek <jsafrane@redhat.com> - 0.7.12-3
changelog:
  - Fix init scripts to be LSB compliant and return correct exit codes
    and provide mandatory actions (#523169, #523177)


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-6
changelog:
  - Kernel module aliases configuration for kmod. (#1032965)
  - Big-Endian authentication fix. (#1032963)
  - Revert short options removal to preserve 0.7.16 command line parameters.


author: John Dennis <jdennis@redhat.com> - 2.1.10-5
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
    resolves: bug#736878 Rebase to latest upstream
    resolves: bug#705723 logrotate script does not reload running daemon
    resolves: bug#787116 radtest PPPhint option not parsed correctly
    resolves: bug#700870 freeradius not compiled with --with-udpfromto
    resolves: bug#753764 shadow password expiration does not work
    resolves: bug#712803 radtest script is not working with eap-md5 option
    resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855317
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-5
changelog:
  - Add support for microsecond precision of home server's response_window
    option, client's response_window option with the same precision and home
    server's response_timeouts option, backported from v3.0.x.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-6
changelog:
  - Fix missing braces around a condition branch in client response_window
    patch.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-1
changelog:
  - Upgrade to the latest upstream release v2.2.6
    Resolves: Bug#921563  raddebug not working correctly
    Resolves: Bug#921567  raddebug -t 0 exists immediately
    Resolves: Bug#1060319 MSCHAP Authentication is not working using automatic
                          windows user credentials
    Resolves: Bug#1078736 Rebase FreeRADIUS to 2.2.4
    Resolves: Bug#1135439 Default message digest defaults to sha1
    Resolves: Bug#1142669 EAP-TLS and OCSP validation causing segmentation
                          fault
    Resolves: Bug#1173388 dictionary.mikrotik missing Attributes
  - Remove radutmp rotation
    Resolves: Bug#904578  radutmp should not rotate
  - Check for start_servers not exceeding max_servers
    Resolves: Bug#1146828 radiusd silently fails when start_servers is higher
                          than max_servers


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-4
changelog:
  - Move OpenSSL init out of version check
    Resolves: Bug#1189394 radiusd segfaults after update
  - Comment-out ippool-dhcp.conf inclusion
    Resolves: Bug#1189386 radiusd fails to start after 'clean' installation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-5
changelog:
  - Fix EAP client authentication with TLS 1.2
    Resolves: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-6
changelog:
  - Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
    Related: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-5
changelog:
  - Fix EAP client authentication with TLS 1.2
    Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-6
changelog:
  - Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
    Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-7
changelog:
  - Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                          rad_coalesce()
  - Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                          due to improper output buffer size check in make_secret()
  - Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
  - Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                          fr_dhcp_decode()
  - Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                          fr_dhcp_decode_options()
  - Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63


author: Soren Sandmann <ssp@redhat.com>
changelog:
  - Add two patches for the man page:
    - 0001-xfreerdp.1.xml-Don-t-claim-to-support-multiple-conne.patch
      Don't claim to support multiple connections, #988272
    - 0002-Replace-itemizedlist-s-with-variablelist-s.patch
      Work around a bug in RHEL 6 docbook, that causes <itemizedlist>
      to be mangled. This patch replaces them with <variablelist>s.


author: Soren Sandmann <ssp@redhat.com> - 1.0.2-2
changelog:
  - Add patch listing the plugins available in RHEL 6
    - 0003-List-plugins-available-in-RHEL-6.patch
    Related: #988272


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638839


author: Marek Kasik <mkasik@redhat.com> 2.3.11-7
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651762


author: Marek Kasik <mkasik@redhat.com> 2.3.11-8
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723468


author: Marek Kasik <mkasik@redhat.com> 2.3.11-13
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806269


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-15.el6_6.1
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197737


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-16
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197738


author: Jan Synáček <jsynacek@redhat.com> - 0.17-52
changelog:
  - Add listening timeout to avoid hanging up when ftp is executed in active mode
    and ftp-data port is blocked (#852636)
  - Plug memleaks in append, put and send commands (#786004)


author: Sergey Fokin <sfokin@cloudlinux.com> - 0.9.2-1
changelog:
  - update to 0.9.2
  - add alt-libcurlssl-devel instead of curl-devel to BuildRequires
  - add fix-build-with-alt-libcurlssl.patch


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.7-7
changelog:
  - Fix double free in free_wstr (#648906)
  - Prevent overflows by increasing YYMAXDEPTH and YYSTACKSIZE
    byacc/bison parameters (#743343)
  - Preserve argv by copying the strings (#740673)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 3.1.7-10.el6_7.2
changelog:
  - Man & info pages fixed to describe the '--posix' usage correctly,
    as discussed in #1271443 (comments #1 and #2)


author: Stepan Kasal <skasal@redhat.com> - 3.1.6-4
changelog:
  - remove the versioned binaries even if the version is modified by the
    snapshot patch, modify the file list to check this (#476166)
  - update the snapshot patch, dropping the upstreamed
    gawk-3.1.5-test-lc_num1.patch


author: Dmitry Antipov <dantipov@cloudlinux.com> - 2.0.35-12.cloudlinux.els
changelog:
  - CVE-2021-40145: check for memory allocation errors processing GD2 images
  - CVE-2017-6363: make sure transparent index is within bounds of the palette


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-74.el6
changelog:
  - Improve fix for 'gdb crashes while thread apply all bt is run on the core
    file' (RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-75.el6
changelog:
  - Additional fixes needed by 'gdb crashes while thread apply all bt is
    run on the core file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov,
    RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-78.el6
changelog:
  - Fix '`catch syscall' doesn't work for parent after `fork' is called'
    (Philippe Waroquiers, RH BZ 1149205).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-79.el6
changelog:
  - Fix 'gdb has a bug that prevents it from breaking in anonymous
    namespace functions.' (Keith Seitz, RH BZ 1139405).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-81.el6
changelog:
  - Fix 'backport GDB 7.4 fix to RHEL 6.6 GDB' [Original Sourceware bug
    description: 'C++ (and objc): Internal error on unqualified name
    re-set', PR 11657] (RH BZ 1186476).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-82.el6
changelog:
  - Fix 'gdb/linux-nat.c:1411: internal-error:
   linux_nat_post_attach_wait: Assertion `pid == new_pid' failed.'
   (Pedro Alves, RH BZ 1162264).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-83.el6
changelog:
  - Fix 'gdb internal error' [Threaded program calls clone, which
    crashes GDB] (Pedro Alves, RH BZ 1099929).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-88.el6
changelog:
  - Add --with buildisa, remove %{?_isa} from BuildRequires by default:
    https://github.com/msimacek/koschei/issues/54 (Jan Kratochvil, RH BZ 1287044)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-91.el6
changelog:
  - Load strictly build-id-checked core files only if no executable is specified
    (Jan Kratochvil, RH BZ 1339862).


author: Stepan Kasal <skasal@redhat.com> - 1.8.0-31
changelog:
  - drop *-cflags.patch, move all makefile fixes to *-fhs.patch
  - propagate libdir to Makefile; no need to set it on cmdline


author: Karel Klic <kklic@redhat.com> - 1.8.0-34
changelog:
  - -jbj patch replaced with -zeroheaders, which extends the header zeroing
    and also zeroes the buckets (#572601)
  - Fixed a memory leak in gdbm_reorganize(gdb) (rhbz#572598)
  - Handle read() returning less data than it was asked for (rhbz#572900)
  - Remove static builds from the devel package (#556050)
  - Moved autotools reinitialization from %build to %prep section


author: Marek Skalicky <mskalick@redhat.com> - 1.8.0-39
changelog:
  - dbm_* calls should call the underlying gdbm_* calls using then
    GDBM_NOLOCK flag
    Resolves: #668702


author: Marek Kasik <mkasik@redhat.com> - 2.24.1-2
changelog:
  - Import gdk-pixbuf2 package from F16
  - Disable introspection
  - Add update-gdk-pixbuf-loaders
  - Resolves: #1103734


author: Ray Strode <rstrode@redhat.com> 2.30.4-58
changelog:
  - Fix this log spew:
        Buggy client sent a _NET_ACTIVE_WINDOW message with a timestamp of 0 for 0x260002b (Login Wind)
    Resolves: #1073546


author: Ray Strode <rstrode@redhat.com> - 2.30.4-69
changelog:
  - require ReadDmrcFromHomeDir=true in [daemon] before
    reading ~/.dmrc
    Resolves: #1417219
    Related: 795920


author: Adam Jackson <ajax@redhat.com> 1.1.12-10
changelog:
  - Re-add Fedora conditional dropped in 1.1.12-1, which had the (probably)
    unintended side-effect of reverting Fedora to sysvinit from systemd.


author: Dodji Seketeli <dodji@redhat.org> - 2.26.0-1
changelog:
  - Update to upstream release (2.26.1)
  - Add plugin files from %{_datadir}
  - Don't check for vte anymore, the package checks it pkg-config
  - Add 'bookmarks' to the plugin set


author: Dodji Seketeli <dodji@redhat.org> - 2.26.1-1
changelog:
  - Update to upstream release 2..26.1
  - Fixes GNOME bugzilla bug #576766 - Crash when Configuring "Draw Spaces"
  - Make sure to remove all *.la files
  - Remove BuildRequire libgnomeui-devel as needless now


author: Deji Akingunola <dakingun@gmail.com> - 0.1.0-3
changelog:
  - Rebuild for babl-0.1.2
  - Backport upstream patch that removed babl processing time instrumentation


author: Nils Philippsen <nils@redhat.com> - 0.1.2-1
changelog:
  - version 0.1.2
  - remove obsolete cflags, babl-instrumentation, autoreconf patches
  - backported: don't leak each node set on a GeglProcessor


author: Nils Philippsen <nils@redhat.com>
changelog:
  - avoid buffer overflow in gegl_buffer_header_init()
  - correct gegl library version, use macro for it


author: Nils Philippsen <nils@redhat.com> - 0.1.2-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because gegl is likely to deal with data coming from untrusted
    sources


author: Ding-Yi Chen <dchen at redhat dot com> - 0.17-6
changelog:
  - Fixed Bug 456666 msghack doesn't check for mandatory cmd line params 
    by adding checking statements and display usage (msghack.py modified)
  - rpath patch for binary-or-shlib-defines-rpath in x86_64.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.17-7
changelog:
  - Remove the gettext-libs docs, as they are talking about autoconf, libtool, 
    which are not directly related to the gettext-libs.
  - Remove unused definition and trailing space.
  - Fix the build failure with mock .


author: Jens Petersen <petersen@redhat.com> - 0.17-9
changelog:
  - add buildjava switch to allow turning off the java bits completely
  - add buildcheck to allow turning off make check
  - drop cvs requires for autopoint (Karl Lattimer, #469555)
  - add upstream gettext-xgettext-python-unicode-surrogate-473946.patch by
    Bruno Haible to fix xgettext handling of utf16 surrogates in python (#473946)


author: Jens Petersen <petersen@redhat.com> - 0.17-15
changelog:
  - bring back autopoint requires cvs (#517361)
  - requires info rather than /sbin/install-info
  - drop install_info and remove_install_info macros


author: Jens Petersen <petersen@redhat.com> - 0.17-16
changelog:
  - fix FTBFS by removing openmp.m4 which conflicts with recent autoconf (#539211)
  - cleanup gettext-0.17-rpathFix.patch
    - separate gl_AC_TYPE_LONG_LONG replacement to another patch
    - use trailing ':' for tests LD_LIBRARY_PATH
  - run autogen.sh with --quick and --skip-gnulib


author: Daiki Ueno <dueno@redhat.com> - 0.17-18
changelog:
  - drop BR: java-1.6.0-openjdk-devel, because:
    - it was only needed for javadoc, but the regeneration of javadoc
      files is not necessary
    - the s390/s390x buildroots are lacking the package for el6


author: Rex Dieter <rdieter[AT]fedoraproject.org> 0.0.14-4
changelog:
  - --disable-ggzwrap (for now, until multilib, licensing is sorted out)
  - move ggz-config to main pkg (runtime management of ggz modules)
  - clarify GPL vs. LGPL bits
  - drop BR: automake libtool


author: Rex Dieter <rdieter@fedoraproject.org> 0.99.5-3
changelog:
  - conflict with ggz-client-libs, include epoch in Obsoletes/Provides: 
    libggz ggz-client-libs (#491638)


author: Tim Waugh <twaugh@redhat.com> - 8.70-13
changelog:
  - Applied patch to prevent null pointer dereference (CVE-2010-4054,
    bug #646086).
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).
  - Applied patch to avoid reading initialization and library files from
    CWD (CVE-2010-2055, bug #599564; CVE-2010-4820, bug #771853).


author: Tim Waugh <twaugh@redhat.com> - 8.70-14
changelog:
  - Fixed character spacing problems using backported patch (bug #695766).
  - Apply some fixes from upstream to avoid gdevcups segfaults (bug #643105).


author: Tim Waugh <twaugh@redhat.com> - 8.70-20
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105520).
  - Improved support for PDF/A from upstream (bug #1060026).
  - Back-ported patch to process embedded files as a portable collection
    only if there is a /Collection attribute (bug #1027534).
  - Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 8.70-22
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: Martin Osvald <mosvald@redhat.com> - 8.70-24.el6_10.2
changelog:
  - It was found that the fix for CVE-2018-16509 was not complete, the missing
    pieces added into ghostscript-CVE-2018-16509.patch


author: Tim Waugh <twaugh@redhat.com> 5.50-15
changelog:
  - Fixed URL (bug #225794).
  - Fixed build root tag (bug #225794).
  - This package does not require ghostscript (bug #225794).


author: Tim Waugh <twaugh@redhat.com> 5.50-16
changelog:
  - Fixed URL again (bug #225794).
  - Fixed requires tags (bug #225794).
  - Preserve timestamps on installed files (bug #225794).
  - Added empty %build section (bug #225794).
  - Use FHS macros for file manifest (bug #225794).
  - Fixed summary (bug #225794).
  - Fixed description (bug #225794).
  - Fixed license (bug #225794).


author: Tim Waugh <twaugh@redhat.com> 5.50-21
changelog:
  - Changes from package review (bug #225794):
    - Requires xorg-x11-font-utils, not mkfontscale/mkfontdir.
    - Use macro for /etc.
    - Don't own catalogue directory.


author: Tim Waugh <twaugh@redhat.com> 5.50-22
changelog:
  - Further changes from package review (bug #225794):
    - Don't use umask in scriptlet.
    - Don't use 'which' in scriptlet.


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.9-1
changelog:
  - version 2.6.9

    Overview of Changes from GIMP 2.6.8 to GIMP 2.6.9
    =================================================

    * Bugs fixed:

     612618 - Font selection remains visible
     622234 - gimp.desktop: image/x-psd in MimeTypes twice
     622196 - Unportable test(1) construct in configure script
     620604 - Description of "histogram" procedure is slightly inaccurate
     541586 - Tool options not saved/loaded correctly?
     614153 - Importing PDF files with long titles
     600112 - blur-gauss-selective.exe crashes
     599233 - Dialog of "Save as BMP" ignores changes which are not made
              with a mous
     565001 - Text-Tool crashes when edit a 2.4.2 version xcf
     610478 - Layer preview suddenly stops getting updated
     609026 - leaks shared memory
     609056 - Exporting to Alias PIX format fails
     608188 - a few strings in Save as... > Raw image data dialog are always
              in English
     604820 - GEGL Operation "path" crashes GIMP
     603711 - Crashes when using path tool
     607242 - GIMP 2.7.0 fails to build against libpng 1.4.0
     606372 - Saving to .ppm fails on indexed colorspace
     605237 - the "Antialiasing..." message in the progress bar does not show
              translated
     604508 - gimp-layer-new-from-visible should work from updated projection

    * Updated and new translations:

     Asturian (ast)
     Basque (eu)
     Burmese (my)
     Catalan (ca)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)
     German (de)
     Italian (it)
     Latvian (lv)
     Low German (nds)
     Romanian (ro)
     Simplified Chinese (zh_CN)
     Slovenian (sl)
     Ukrainian (uk)
     Valencian (ca@valencia)

  - remove obsolete gtk219, never-stack-trace-desktop, indexed-pnm patches
  - don't manually provide "gimp-libs%{?_isa}" in gimp-libs
  - don't package %{_datadir}/gtk-doc/html, but dirs beneath


author: Josef Ridky <jridky@redhat.com> - 2:2.6.9-9
changelog:
  - fix bug with num_threads error message on gimp startup (#1150021)
  - fix bug with showing GLib warning message on startup from terminal (#1157037)
  - fix bug with incorrect thumb image text offset (#1158426)


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.2-0.1
changelog:
  - version 2.0.2
  - use RPM macros where appropriate
  - use "make DESTDIR=... install"
  - merge review (#225797)
    - add dist tag
    - change license tag to GPLv2+
    - sanitize buildroot
    - set default mode 0755 for directories
    - add documentation files
    - separate BuildRequires, add epoch to BR: gimp-devel ...
    - sanitize summary
    - recode SPEC file to UTF-8
    - clean buildroot at beginning of %install


author: Nils Philippsen <nils@redhat.com> - 2.0.2-0.2
changelog:
  - don't require gimptool file, but gimp-devel-tools package for building
  - merge review (#225797)
    - don't require /usr/share/gimp/2.0 directory, but specific minimum gimp
      version
    - work around problematic gimpdatadir macro definition if gimptool is not
      available


author: Nils Philippsen <nils@redhat.com> - 2.4.2-2
changelog:
  - Merge Review (#225798):
    - ship AUTHORS, ChangeLog, COPYING, NEWS, README, TERMINOLOGY
    - don't own directories included in the gimp package
    - use %defattr(-, root, root, -)


author: Rakesh Pandit <rakesh@fedoraproject.org> - 3.5.6-1
changelog:
  - Version bump to 3.5.6.
    * Handles new GdkPixbuf properties. (GNOME Bugzilla #567454)
    * Translation updates: es, nb and pt_BR.
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.5/glade3-3.5.6.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.5/glade3-3.5.6.changes
  - Fixed unowned directories in libgladeui-devel. (Red Hat Bugzilla #483311)


author: Matthias Clasen <mclasen@redhat.com> - 3.5.7-1
changelog:
  - Version bump to 3.5.7.
    * Allow Anjuta to handle clicks on widgets in the designer. (GNOME Bugzilla
        * Allow custom signal editors. (GNOME Bugzilla #540691)
    * Support running from gtk2-2.14 targetting gtk2-2.16.
    * Translation updates: de, es, fi, he, ko and pt_BR.
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.5/glade3-3.5.7.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.5/glade3-3.5.7.changes


author: Debarshi Ray <rishi@fedoraproject.org> - 3.6.0-1
changelog:
  - Version bump to 3.6.0.
    * Support for both GtkBuilder and Libglade, and conversion from one format
      to the other.
    * Support for GtkAction.
    * New interface to allow plugins to define editor layouts on a class level
      basis, and new customized editors for GtkButton, GtkImage and GtkEntry.
    * New Python plugin for instrospecting and loading Python class properties
      and signals, and adding them to the palette automatically.
    * Support for filtering and searching the project using the inspector.
    * Support for inline editing of widgets in a dialog.
    * Cut and pasted widgets should retain original names. (GNOME Bugzilla
        * The "after" property for a signal handler should be saved to the project
      file. (GNOME Bugzilla #573453)
    * Fixed crash when choosing not to save a project with errors. (GNOME
      Bugzilla #574706)
    * Translation updates: el, fr, da, ml, gl, te, lt, pt, or, cs, it, th, en_GB,
      sv, ru, fi, de, tr, lv, ko, es, sv, hu, eu, vi and pt_BR.
  - Updated License to reflect recent licensing changes according to Fedora
    licensing guidelines.
  - Stripped redundant translations from .mo files. (GNOME Bugzilla #474987)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.6.1-1
changelog:
  - Version bump to 3.6.1.
    * Fixed crash during internal widget selection.
    * Fixed Libglade regression. Libglade needs specific ordering of properties,
      ATK props, signals and accelerators.
    * Disable loading and displaying of 'data' property on GtkTreeStore. Only
      GtkListStore understands the 'data' construct.
    * Properly initialize a GValue on the stack. (GNOME Bugzilla #577822)
    * Translation updates: ar and cs.
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.1.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.1.changes
  - Added 'Requires: devhelp' to glade3-libgladeui.
  - Removed 'Requires: gtk2-devel >= 2.14.0 libxml2-devel pkgconfig' from
    glade3-libgladeui-devel. Let rpm-4.6 autogenerate them.


author: Debarshi Ray <rishi@fedoraproject.org> - 3.6.2-1
changelog:
  - Version bump to 3.6.2.
    * Fixed missing properties/attributes when serializing a GtkWindow. (GNOME
      Bugzilla #578211)
    * Fixed loading state of GtkCellRenderer attributes (whether to use
      attribute or property directly). (GNOME Bugzilla #566928)
    * Translation updates: es, sr and sr@latin.
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.2.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.2.changes
  - Fixed gladeui-1.0.pc.in by trimming 'Requires' list.


author: Matthias Clasen <mclasen@redhat.com> - 3.6.5-1
changelog:
  - Version bump to 3.6.5.
    * GtkButton only accepts real stock items and GtkImage but not icons.
    * Removed buggy query dialog from GtkNotebook creation. (GNOME Bugzilla
        * Removed hard coded size request to palette. (GNOME Bugzilla #579624)
    * Atk proxy objects should always have unique names. (GNOME Bugzilla
        * Fixed output format for GtkLabel attributes. (GNOME Bugzilla #579793)
    * Widget names should be unique withing the project. (GNOME Bugzilla
        * Dialogs should not disappear on pressing ESC. (GNOME Bugzilla #582559)
    * Properly load sizes of fixed/layout children. (GNOME Bugzilla #584334)
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.5.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.4.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.3.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.5.changes
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.4.changes
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.3.changes


author: Matthias Clasen <mclasen@redhat.com> - 3.6.7-1
changelog:
  - Version bump to 3.6.7.
    * Fixed crashes when handling GtkTextView in GtkBuilder format.
    * Fixed loading and saving of GtkIconSources.
    * GNOME Goal: removed deprecated Gtk+ symbols. (GNOME Bugzilla #572756)
    * Fixed obscure crash when loading a project. (GNOME Bugzilla #585860)
    * Introspect lowest GTK+ project dependancy when loading files with missing 
      versioning information. (GNOME Bugzilla #586046)
    * Detect correct modifiers and buttons to spawn a context menu in a platform
      independant way. (GNOME Bugzilla #587128)
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.7.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.6.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.7.changes
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.6.changes
  - Drop the menu patch, since glade-3 is the version we install
    by default now, and it didn't work right anyway


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.5.0-1
changelog:
  - New upstream version, now SGI licensed stuff free out of the box!
  - Unfortunately some of the included docs are under a non free license,
    therefor this package is based on a modified tarbal with these files removed


author: Dan Winship <danw@redhat.com> - 2.28.6.1-2.1
changelog:
  - Disable GNOME proxy support since RHEL6 doesn't have gsettings-desktop-schemas
  - Allow building with libproxy 0.3.0


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1035941


author: Colin Walters <walters@redhat.com> - 2.26.1-8
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1036097


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.8-3
changelog:
  - Revert deprecations picked up through rebases to avoid further bugs
    like rhbz#1136304 (devhelp).


author: Colin Walters <walters@redhat.com> - 2.28.8-6
changelog:
  - Backport patch to avoid integer overflow on reuse of GMainContext
    source ids, which qemu hits.
    Resolves: #1212722


author: Colin Walters <walters@verbum.org> - 2.28.8-8
changelog:
  - Revert use of FAM on NFS - introduces perf regressions for deployments
    which are not using NFS for home directories; this is better handled
    in RHEL7.
    Resolves: #1399726
    Reverts: #725178


author: Daniil Leonov <dleonov@cloudlinux.com> - 2.28.8-11.cloudlinux.els
changelog:
  - Fixed CVE-2021-27219: integer overflow in g_bytes_new function on
    64-bit platforms due to an implicit cast from 64 bits to 32 bits


author: Daniil Leonov <dleonov@cloudlinux.com> - 2.28.8-12.cloudlinux.els
changelog:
  - Fixed CVE-2021-28153: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION
    creates empty target for dangling symlink


author: Colin Walters <walters@redhat.com> - 2.26.1-3
changelog:
  - Explicitly disable systemtap for this rebase; I am not aware
    of a significant number of current users in upstream, and it
    has not to my knowledge been tested in RHEL6.
    Resolves: #1000287


author: Patsy Franklin <pfrankli@redhat.com> - 2.12-1.212
changelog:
  - CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
  - CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)


author: Daniil Leonov <dleonov@cloudlinux.com> - 2.12-1.212.5.cloudlinux.els
changelog:
  - resolv: More precise checks in res_hnok, res_dnok [BZ #22409] [BZ #22412]
  - res_hnok rejected some host names used on the Internet, such as
  - www-.example.com.  res_hnok and res_dnok failed to perform basic syntax
  - checking on DNS domain names.
  - Also fix res_mailok, res_ownok.


author: Aleksey Deyneko <adeyneko@cloudlinux.com> - 2.12-2.212.5.cloudlinux.els
changelog:
  - Up release to 2, because previous release have broken version: glibc-2.12-1.2126_10.4.cloudlinux.els.x86_64
  - and because we backport glibc-rh1039304.patch from el7


author: Nikita Popov <npopov@cloudlinux.com> - 2.12-2.213.cloudlinux.els
changelog:
  - Adopt pthread_attr_copy functionality, test case is included
  - CVE-2021-33574: avoid use-after-free vulnerability
  - CVE-2021-35942: avoid out-of-bounds read via
    signed integer overflow in array index
  - CVE-2021-38604: considered. No NULL pointer dereference is possible


author: Nikita Popov <npopov@cloudlinux.com> - 2.12-2.215.cloudlinux.els
changelog:
  - CVE-2021-3326: avoid denial of service due to a failed assertion
  - CVE-2021-43396: check actual stored character in state reset code


author: Dmitry Antipov <dantipov@cloudlinux.com> - 2.12-2.215.tuxcare.els6
changelog:
  - CVE-2022-23218: fix possible buffer overflow in svcunix_create
  - CVE-2022-23219: fix possible buffer overflow in clnt_create


author: Linar Nadeev <lnadeev@cloudlinux.com> - 2.12-2.215.tuxcare.els8
changelog:
  - CVE-2018-11236: fix stack buffer overflow when realpath() input length is close
    to SSIZE_MAX.
  - CVE-2024-2961: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences


author: Milind Changire <mchangir@redhat.com> - 3.12.2-8
changelog:
  - fixes bugs bz#1466129 bz#1475779 bz#1523216 bz#1535281 bz#1546941 
    bz#1550315 bz#1550991 bz#1553677 bz#1554291 bz#1559452 bz#1560955 bz#1562744 
    bz#1563692 bz#1565962 bz#1567110 bz#1569457


author: Milind Changire <mchangir@redhat.com> - 3.12.2-9
changelog:
  - fixes bugs bz#1546717 bz#1557551 bz#1558948 bz#1561999 bz#1563804 
    bz#1565015 bz#1565119 bz#1565399 bz#1565577 bz#1567100 bz#1567899 bz#1568374 
    bz#1568969 bz#1569490 bz#1570514 bz#1570541 bz#1570582 bz#1571645 bz#1572087 
    bz#1572585 bz#1575895


author: Milind Changire <mchangir@redhat.com> - 3.12.2-10
changelog:
  - fixes bugs bz#1488120 bz#1565577 bz#1568297 bz#1570586 bz#1572043 
    bz#1572075 bz#1575840 bz#1575877


author: Milind Changire <mchangir@redhat.com> - 3.12.2-13
changelog:
  - fixes bugs bz#1493085 bz#1518710 bz#1554255 bz#1558948 bz#1558989 
    bz#1559452 bz#1567001 bz#1569312 bz#1569951 bz#1575539 bz#1575557 bz#1577051 
    bz#1580120 bz#1581184 bz#1581553 bz#1581647 bz#1582119 bz#1582129 bz#1582417 
    bz#1583047 bz#1588408 bz#1592666 bz#1594658


author: Milind Changire <mchangir@redhat.com> - 3.12.2-14
changelog:
  - fixes bugs bz#1547903 bz#1566336 bz#1568896 bz#1578716 bz#1581047 
    bz#1581231 bz#1582066 bz#1593865 bz#1597506 bz#1597511 bz#1597654 bz#1597768 
    bz#1598105 bz#1598356 bz#1599037 bz#1599823 bz#1600057 bz#1601314


author: Milind Changire <mchangir@redhat.com> - 3.12.2-16
changelog:
  - fixes bugs bz#1569657 bz#1608352 bz#1609163 bz#1609724 bz#1610825 
    bz#1611151 bz#1612098 bz#1615338 bz#1615440


author: Bala.FA <barumuga@redhat.com> - v3.6.0.45-1
changelog:
  - fixes bugs bz#1104459 bz#1139104 bz#1172332 bz#1179563 bz#1180560 
    bz#1181044 bz#1182554 bz#BUG:


author: Milind Changire <mchangir@redhat.com> - 3.7.9-2
changelog:
  - fixes bugs bz#1321509 bz#1322765 bz#1314724 bz#1242358 bz#1317790 
    bz#1314391 bz#1318428 bz#1298724 bz#1318170 bz#1283957 bz#1302355 bz#1318427 
    bz#1325750 bz#1309437 bz#1317940 bz#1302688 bz#1320412 bz#1289439 bz#1294062 
    bz#1300875 bz#1305456 bz#1115367 bz#1118770 bz#1314373 bz#1314421 bz#1294790 
    bz#1317908 bz#1323119 bz#1248998 bz#1231150 bz#1311686 bz#1321544 bz#1298955 
    bz#1292034 bz#1319406 bz#1303591 bz#1279628


author: Milind Changire <mchangir@redhat.com> - 3.7.9-3
changelog:
  - fixes bugs bz#1325975 bz#1311839 bz#1321556 bz#1286911 bz#1323042 
    bz#1298724 bz#1327165 bz#1101702 bz#1326498 bz#1326663 bz#1328397 bz#1330881 
    bz#1331376 bz#1330901 bz#1326248 bz#1324338 bz#1115367 bz#1308837 bz#1322695 
    bz#1322247 bz#1329895 bz#1327552 bz#1118770


author: Milind Changire <mchangir@redhat.com> - 3.7.9-4
changelog:
  - fixes bugs bz#1097555 bz#1322306 bz#1327195 bz#1324820 bz#1306194 
    bz#1298724 bz#1299737 bz#1330385 bz#1258875 bz#1283957 bz#1311362 bz#1321550 
    bz#1332199 bz#1329514 bz#1224180 bz#1313370 bz#1328194 bz#1323424 bz#1332957 
    bz#1294755 bz#1328411 bz#1327751 bz#1332077 bz#1328721 bz#1330365


author: Milind Changire <mchangir@redhat.com> - 3.7.9-5
changelog:
  - fixes bugs bz#1261838 bz#1324820 bz#1325760 bz#1328194 bz#1331260 
    bz#1332949 bz#1333668 bz#1334234 bz#1334668 bz#1334985 bz#1335082 bz#1335114 
    bz#1335364 bz#1335437 bz#1335505 bz#1335826


author: Milind Changire <mchangir@redhat.com> - 3.7.9-7
changelog:
  - fixes bugs bz#1286582 bz#1330997 bz#1334092 bz#1337384 bz#1337649 
    bz#1339090 bz#1339163 bz#1339208 bz#1340085 bz#1340383


author: Adam Jackson <ajax@redhat.com> 10.1.1-0.1
changelog:
  - Rebase to Mesa 10.1.1
  - Initial rebuild against llvm 3.4
  - Add llvm_rebase macro for future convenience


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.3.1-10
changelog:
  - Backported assembler routines from recent gmp-6:
    gmp-s390x-optimization.patch, gmp-s390-31bit-optimization.patch
  - Resolves: #1149237


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.1-11
changelog:
  - Explicitly added '-g' option into CFLAGS to correctly build .debug_info for i386
    Resolves: #729039


author: Bastien Nocera <bnocera@redhat.com> 2.28.6-7
changelog:
  - Add killswitch clean up patches
  - Fix status of the applet icon when bringing back from hard
    killswitch
  Resolves: #609291


author: Bastien Nocera <bnocera@redhat.com> 2.28.6-8
changelog:
  - Add more killswitch patches, handle the case where the
    only killswitch disappears with the adapter
  Resolves: #609291


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.12.0-4
changelog:
  - Add a patch from gnome-common cvs to address bug #218717 (gnome-common
    does not work with automake-1.10).


author: Ray Strode <rstrode@redhat.com> 2.28.2-7
changelog:
  - Hide randr events from "Detect Displays" button from g-s-d's
    autoconfiguration logic
    Resolves: #582564


author: David Zeuthen <davidz@redhat.com> - 2.29.90-1.el6
changelog:
  - Update to new release for LVM2/Multipath support
  - Don't include support for connecting to remote udisks instances
  - Related: rhbz#548874
  - Related: rhbz#548870


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - When we ask to logout, actually logout, rather than shutdown
  - Don't hide the restart status icon just because the daemon exited
  - Don't check for updates every day when the user had specified 'Never'
  - Allow the user to select the GPG key information to be able to verify it
  - Fix the error when the user clicks the about menu item
  - Fix a crash where the desktop file that was installed has no root directory
  - Fix a crash when the process-working icon has zero height
  - Resolves: #585086


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-2
changelog:
  - Backport a patch from upstream that adds support for support media repos
    such as those found on additional CDs or DVDs.
  - This patch just calls GetUpdates after a detected media repo is inserted,
    which is enough for PackageKit to add the repo to the default set, and for
    the repo to be used in all the GNOME and KDE tools.
  - This patch will not add explicit support for media repos in client programs,
    so the media is not requested if it is not inserted when the package tools
    are open. This functionality can be backported at a later time if required.
  - Resolves: #591534


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Don't allow shutting down when a transaction is active and cannot
    be cancelled.
  - Resolves: #669798


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-6
changelog:
  - Fix the progress update of the update viewer when multiarch packages
    are installed.
  - Resolves: #744906


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Do not attempt to refresh the updates list when a transaction is in
    progress. This prevents the update UI from going blank.
  - Resolves: #744980


author: Ray Strode <rstrode@redhat.com> 2.30.2-7
changelog:
  - Drop panel names from default config so they don't override
    translated fallback names
    Resolves: #633853


author: Ray Strode <rstrode@redhat.com> 2.30.2-10
changelog:
  - Fix monitor naming problem noticed by QE when testing fix
    that went in 2.30.2-8
    Related: #585312


author: Ray Strode <rstrode@redhat.com> 2.30.2-11
changelog:
  - Fix size negotiation problem noticed by QE and GSS when
    testing fix that went in 2.30.2-9
    Resolves: #671088
    Related: #607665


author: Ray Strode <rstrode@redhat.com> 2.30.2-12
changelog:
  - Fix positioning negotiation problem noticed by QE when
    testing fix that went in 2.30.2-11
    Resolves: #671088
  - Improve monitor labeling heuristics
    Related: #585312


author: Ray Strode <rstrode@redhat.com> - 2.30.2-16
changelog:
  - Add patch from Noriki Mizumoto <noriko@redhat.com> to
    increase translation coverage
    Resolves: #819798


author: Matthias Clasen <mclasen@redhat.com> - 2.0.17-6
changelog:
  - Don't show gnome-pilot in the menus. It is already available
    from evolution, and this menuitem about 'PalmOS devices' is just
    confusing in the age of the Palm Pre.


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - Fix the double suspend on lid close issue when not using KMS hardware.
  - Resolves: #543948


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Do not ask the user to look at the help file on suspend failure,
    it is already out of date.
  - Resolves: #640296


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-5
changelog:
  - Reinstate the "Do nothing" option on the lid close combo because
    per-screen DPMS does not work in RHEL6.
  - Resolves: #623674


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Don't dim the screen by default on battery power -- it was never a
    good default, and we're doing this a different way in GNOME 3.
  - Resolves: #912270


author: Ray Strode <rstrode@redhat.com> 2.28.3-16
changelog:
  - More monitor dock fixes
    Resolves: #719023 746237
  - Potential workaround for libxklavier brokeness
    Related: #677580


author: Ray Strode <rstrode@redhat.com> 2.28.3-18
changelog:
  - Revert libxklavier workarounds introduced in -16 and -17
    They're causing additional problems.
    Resolves: #677580


author: Ray Strode <rstrode@redhat.com> 2.28.3-22
changelog:
  - Don't show unlock dialog immediately after user locks
    screen in some multimonitor scanarios
    Resolves: #744763


author: Ray Strode <rstrode@redhat.com> 2.28.3-24.1
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #994868


author: Ray Strode <rstrode@redhat.com> 2.28.3-25
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #905935


author: Ray Strode <rstrode@redhat.com> 2.28.3-26
changelog:
  - Fix up fix-fade-on-nvidia patch from -19 to properly
    handle X servers that don't support setting gamma ramp.
    Resolves: #947671


author: Ray Strode <rstrode@redhat.com> 2.28.0-21
changelog:
  - Add a close button in the session selector save dialog, to
    provide a way to close the dialog without saving.
    Resolves: #786573


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.2-29
changelog:
  - wacom: Update input transformation matrix on monitor changes (#861890)
    wacom: Re-fix LED as per latest discussions on linuxwacom-devel (#805064)
    Resolves: #805064 #861890


author: Ray Strode <rstrode@redhat.com> - 2.28.2-35.2
changelog:
  - Another smartcard update to support drivers that don't
    announce already inserted smartcards at startup
    Related: #1299992


author: Matthias Clasen <mclasen@redhat.com> 2.28.0-8
changelog:
  - Add explicit requires to avoid interoperability problems
    between combinations of old and new subpackages
  - Remove a space-saving hack that causes multilib conflicts
  Resolves: #596165


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-10
changelog:
  - Add a patch from upstream to ignore non CPU data from /proc/cpuinfo,
    which would lead to a spurious processor displayed in the application,
    under certain architectures
  Resolves: #682011


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-11
changelog:
  - Add a patch from upstream that looks for the "clock" line in the
    /proc/cpuinfo output. This fixes missing CPU speed for architectures
    that put such information in the "clock" line, such as Power6
  Resolves: #692956


author: Ray Strode <rstrode@redhat.com> - 2.28.1-7
changelog:
  - Add patch from Noriki Mizumoto <noriko@redhat.com> to
    increase translation coverage
    Resolves: #673749


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.5.0-1
changelog:
  - Adds the ability to import Tomboy notes on first run 
  - http://mail.gnome.org/archives/gnote-list/2009-June/msg00000.html


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.5.1-1
changelog:
  - Fixes a regression and some bugs
  - http://mail.gnome.org/archives/gnote-list/2009-June/msg00002.html


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.6.1-1
changelog:
  - D-Bus support enabled, many new features and bug fixes
  - http://mail.gnome.org/archives/gnote-list/2009-July/msg00016.html
  - 0.6.0 skipped due to applet breakage fixed in this release
  - http://mail.gnome.org/archives/gnote-list/2009-July/msg00020.html


author: Chris Lumens <clumens@redhat.com> 3.0g-1
changelog:
  - Update to gnu-efi-3.0g, which gets rid of the need for the no-relocations
    patch.
    Related: rhbz#555835


author: Chris Ricker <kaboom@oobleck.net> 5.07-6
changelog:
  - Update for Fedora Extras
  - Copyright -> License
  - Don't strip binaries
  - Preserve time stamps
  - Update BuildRoot
  - Drop unapplied patch


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.14-8
changelog:
  - fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
  - add missing initialization of libgcrypt in gpgv
  - properly encode s2k iteration count in gpg-agent (#638635)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 2.12.23-21
changelog:
  - Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
    (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
  - Modified gnutls-serv to accept --sni-hostname (#1333521)
  - Modified gnutls-serv to always reply with an alert message (#1327656)
  - Removed support for DSA2 as it causes interoperability issues (#1321112)
  - Allow sending and receiving certificates which were not in the
    signature algorithms extension (#1328205)
  - Removed support for EXPORT ciphersuites (#1337460)
  - Raised the minimum acceptable DH size to 1024 (#1335924)
  - Restricted the number of alert that can be received during handshake (#1388730)
  - Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
  - The exposed (but internal) crypto back-end registration API is deprecated and no
    longer functional. The ABI is kept compatible (#1415682)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-9
changelog:
  - documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
    and gnutls-cli-debug(1) manual pages (#648297, #807746)
  - add fallback to import the private keys as PKCS#8 (#745242)
  - silence the strict aliasing warnings


author: Nikolay Petukhov <npetukhov@cloudlinux.com>, Aleksey Petryankin <apetryankin@cloudlinux.com> 1.2-89
changelog:
  - MYSQLG-900: Fixes in systemd dropin-files on cl7 and ubuntu platforms
  - MYSQLG-820: Error reports have become more consistent in governor_package_limitting.py
  - MYSQLG-919: Fix checking plesk reseller existence in governor_package_limitting.py


author: Nikolay Petukhov <npetukhov@cloudlinux.com>, Aleksey Petryankin <apetryankin@cloudlinux.com> 1.2-90
changelog:
  - MYSQLG-929: Fixed systemd warning 'The unit file changed on disk'
  - MYSQLG-935: Added _nowraps function to exclude forced unload from lve
  - MYSQLG-863: Fix error with existing /etc/my.cnf.d.govprev


author:
  Aleksey Petryankin <apetryankin@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-92

changelog:
  - MYSQLG-961: Loading mysql functions from libmariadb added
  - MYSQLG-941: Fix libmysqlclient.so.18 and libmariadb.so.3 Provides tags in mariadb102..106
  - MYSQLG-965: da_admin mysql account added into default ignore list


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 1.2-96
changelog:
  - CLOS-2058: Fixed performance issue related to governor package limits synchronization
  - CLOS-2077: Fixed KeyError exception for dbgovernor set_path_environ function


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-99
changelog:
  - CLOS-2049: Governor dropin removed
  - CLOS-2170: Add additional safeguards for detecting MySQL AUTO version with DirectAdmin
  - CLOS-2173: Added mysqlclient21 installation for clMariaDB
  - CLOS-2117: mysql-version-list option added
  - MariaDB 10.11 support temporarily removed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-102
changelog:
  - CLOS-2215: bad_users_list ownership fixed
  - CLOS-1759: dbgovernor_map mysql charset changed to utf8mb
  - CLOS-1730: Timeouts added to avoid repetive log messages


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-105
changelog:
  - CLOS-2322: Fixed DB limits not applying to users after a MySQL Governor service restart
  - CLOS-2418: MySQL 8.0 community edition repo url changed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-106
changelog:
  - CLOS-2373: Backup confirmation added to governor script

  - CLOS-2322: Fixed DB limits not applying to users after a MySQL Governor service restart
  - CLOS-2418: MySQL 8.0 community edition repo url changed


author: Dmitry Shibut <dshibut@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-107
changelog:
  - CLOS-2319: EOLed cl-MariaDB 10.3 removal result to server down
  - CLOS-2471: Fixed wizzard installation


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-109
changelog:
  - CLOS-2572: LVE busy in MySQL processes issue fixed
  - CLOS-2506: Fixed MySQL community downloads URL


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-110
changelog:
  - CLOS-2322: Fixed issue with not applying limits after Governor service restart
  - CLOS-2535: Governor threads logging added


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-111

changelog:
  - CLOS-2645: Corrected MariaDB version detection logic for DA config
  - CLOS-2593, CLOS-2613: Added extended logging
  - CLOS-2385: Added watchdog monitoring utility to governor package
  - CLOS-2386: Implemented external Sentry logging mechanism


author:
  Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> Timur Averianov <taverianov@cloudlinux.com> 1.2-111

changelog:
  - CLOS-2645: Corrected MariaDB version detection logic for DA config
  - CLOS-2593, CLOS-2613: Added extended logging
  - CLOS-2385: Added watchdog monitoring utility to governor package
  - CLOS-2386: Implemented external Sentry logging mechanism
  - CLOS-2594, CLOS-2641: Implemented logging from MySQL and uniform logging


author: Sergey Kozhekin <skozhekin@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> 1.2-61
changelog:
  - MYSQLG-552: deletion procedure for cPanel enhanced
  - MYSQLG-552: MD5 checksum for cl8 added to the "repo_md5" dictionary


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-66
changelog:
  - MYSQLG-568: Bad users list moved to private dir
  - MYSQLG-576: Prohibit clients upgrade MySQL 8 to MariaDB


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-68
changelog:
  - MYSQLG-595: systemd mount added for governor private bad users list
  - MYSQLG-588: IO limit calculation fixed


author: Alexandr Demeshko <ademeshko@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> 1.2-69
changelog:
  - MYSQLG-601: marked "all" mode as deprecated
  - MYSQLG-600: mariadb105 install is allowed on cPanel staring from v.98


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-71
changelog:
  - MYSQLG-617: autoremediation for broken cPanel DB mapping during `--dbupdate` command
  - MYSQLG-623: MariaDB 10.4+ mysql.users changed


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-72
changelog:
  - MYSQLG-664: install MariaDB105 during deletion procedure of cl-MariaDB104 on cPanel
  - MYSQLG-665: mysqlclient18-compat installation avoided for MariaDB 10.4+
  - MYSQLG-655: Wrong governor warnings removed from the log


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-73
changelog:
  - MYSQLG-674: Legacy alter user statement avoided for MariaDB 10.4+
  - MYSQLG-675: Check for cagefs-skeleton initialization added


author: Alexandr Demeshko <ademeshko@cloudlinux.com>, Hasan Aliev <haliev@cloudlinux.com> 1.2-76
changelog:
  - MYSQLG-726: MariaDB 10.6 support added
  - MYSQLG-723: Optimized package downloading in --delete command


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com>, Hasan Aliev <haliev@cloudlinux.com> Nikolay Petukhov <npetukhov@cloudlinux.com> 1.2-77

changelog:
  - MYSQLG-734: Restrict logging enabled
  - MYSQLG-756: Governor package limits utility added
  - MYSQLG-757: Custom configuration files restored before starting mariadb service
  - MYSQLG-725: Added governor script processing of real location of mysql socket and data dir
  - MYSQLG-755: mysqlclient18 dependency added for cl-MariaDB106
  - MYSQLG-733: cPanel case for MariaDB 10.7, 10.8, or 10.9 added


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com>, Hasan Aliev <haliev@cloudlinux.com> Nikolay Petukhov <npetukhov@cloudlinux.com> 1.2-78

changelog:
  - MYSQLG-781: Kept original casting in slow query log
  - MYSQLG-800: Removed mariadb107 from supported mysql types
  - MYSQLG-788, MYSQLG-791, MYSQLG-796, MYSQLG-804, MYSQLG-806: Governor package limits enhancements


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com>, Hasan Aliev <haliev@cloudlinux.com>, Nikolay Petukhov <npetukhov@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>  1.2-78

changelog:
  - MYSQLG-781: Kept original casting in slow query log
  - MYSQLG-800: Removed mariadb107 from supported mysql types
  - MYSQLG-788, MYSQLG-791, MYSQLG-796, MYSQLG-804, MYSQLG-806: Governor package limits enhancements
  - MYSQLG-765: Fix for config file sections absence
  - MYSQLG-816: Fix governor limits on reseller packages
  - MYSQLG-778: CL9 related enhancements
  - MYSQLG-818: Governor script always consider --yes command line argument


author:
  Sergey Kozhekin <skozhekin@cloudlinux.com>, Aleksey Petryankin <apetryankin@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-80

changelog:
  - LU-3586: implement dbctl wrapper
  - MYSQLG-832: Implementation of individual limits logics in Governor Package limits


author:
  Nikolay Petukhov <npetukhov@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-81

changelog:
  - MYSQLG-843: Improper CL comercial license changed to GPL-2
  - MYSQLG-840: Adding and updating unit tests for Governor Package Limiting
  - MYSQLG-812: Implemented advanced resource consumption calculation technique


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-83.1
changelog:
  - MYSQLG-849: Avoided killing slow queries in removing tmp table state
  - MYSQLG-842: moved mysqld restart to %post scriptlet


author: Nikolay Petukhov <npetukhov@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-85
changelog:
  - MYSQLG-854: Fixed error that caused to restart db_governor
  - MYSQLG-854 Added locking for configuration file
  - Fixed install of MariaDB10.4 on CL9


author: Sergey Kozhekin <skozhekin@cloudlinux.com> 1.2-87
changelog:
  - MYSQLG-817: Implement ability to sync one user or one package in /usr/share/lve/dbgovernor/governor_package_limitting.py script
  - MYSQLG-873: Fix governor mysql password issue on plesk
  - MYSQLG-869: Added governor-mysql service status check when adding individual limit vectors after the first install.
  - MYSQLG-882: try/except block has been added for all operations with json in governor-package-limits


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-99
changelog:
  - CLOS-2170: Add additional safeguards for detecting MySQL AUTO version on DA
  - CLOS-2170: Governor install modules partial formatting pass
  - CLOS-2173: Added mysqlclient21 installation for clMariaDB
  - CLOS-2117: mysql-version-list option added
  - MariaDB 10.11 support temporary removed


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.7-3
changelog:
  - track shlib sonames closer, to highlight future abi/soname changes
  - _with_gpg macro, to potentially conditionalize gnupg vs gnupg2 defaults
    for various os/releases (ie, fedora vs rhel)


author: Zdenek Prikryl <zprikryl@redhat.com> 1.20.6-6
changelog:
  - Don't complain if installing with --excludedocs (#515927)
  - Drop unnecessary capabilities in gpm (#517659)


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.20.6-11
changelog:
  - add manpages
  - add Requires: gpm-libs = 1.20.6-11.el6
  - Resolves: #605053 - RPMdiff run failed for package gpm-1.20.6-10.el6
  [snip from email]
   npajkovs@redhat.com: I'd like to ask you what kind of license did you use for inputattach?
   steve@sk2.org: I didn't mention it in debian/copyright, but
   all the packaging (including the manpages) are licensed under the same
   terms as the packaged source, ie. GPL-2 or later.


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.20.6-11
changelog:
  - add manpages
  - add Requires: gpm-libs = 1.20.6-12.el6
  - Resolves: #605053 - RPMdiff run failed for package gpm-1.20.6-10.el6
  [snip from email]
   npajkovs@redhat.com: I'd like to ask you what kind of license did you use for inputattach?
   steve@sk2.org: I didn't mention it in debian/copyright, but
   all the packaging (including the manpages) are licensed under the same
   terms as the packaged source, ie. GPL-2 or later.


author: Luiz Capitulino <lcapitulino@redhat.com> - gpxe-0.9.7-6.4.el6
changelog:
  - gpxe-virtio-avoid-padding-for-len-64.patch [bz#672529]
  - Resolves: bz#672529
    (VMs with virtIO NIC can't access the PXE server)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.5.el6
changelog:
  - gpxe-Support-underlying-UNDI-devices-that-don-t-support-i.patch [bz#661840 bz#668005]
  - Resolves: bz#661840
    (undi polling fix for Emulex NICs)
  - Resolves: bz#668005
    ([RFE] gpxe should support polling NICs)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.6.el6
changelog:
  - gpxe-Revert-Support-underlying-UNDI-devices-that-don-t-su.patch [bz#661840]
    (patch is broken)
  - Related: bz#661840
    (undi polling fix for Emulex NICs)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.7.el6
changelog:
  - gpxe-Add-SUPPORTED_-constants-to-pxe_api.h.patch [bz#661840]
  - gpxe-Support-underlying-UNDI-devices-that-don-t-support-i-reapply.patch [bz#661840]
  - Resolves: bz#661840
    (undi polling fix for Emulex NICs)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.8.el6
changelog:
  - gpxe-Replace-virtio-net-with-native-gPXE-driver.patch [bz#743893]
  - gpxe-Fix-DEBUG-builds-for-filenames-with-hyphens.patch [bz#743893]
  - Resolves: bz#743893
    (Failed to PXE boot when using Virtio)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.10.el6
changelog:
  - gpxe-Provide-fetch_setting_origin.patch [bz#972671]
  - gpxe-Use-next-server-from-filename-s-settings-block.patch [bz#972671]
  - Resolves: bz#972671
    (pxe boot fails if next-server details come from a different dhcp server)


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.11.el6
changelog:
  - gpxe-Avoid-setting-PSH-flag-when-SYN-flag-is-set.patch [bz#1105189]
  - gpxe-Set-PSH-flag-only-on-packets-containing-data.patch [bz#1105189]
  - Resolves: bz#1105189
    (HTTP request generated by gPXE has wrong TCP flag (SYN & PSH) in first packet in session)


author: Jeff E. Nelson <jenelson@redhat.com> - gpxe-0.9.7-6.12.el6
changelog:
  - gpxe-Add-init_pci_busdevfn.patch [bz#1057249]
  - gpxe-Enable-infrastructure-to-specify-an-autoboot-device-lo.patch [bz#1057249]
  - gpxe-Allow-prefix-to-specify-a-PCI-autoboot-device-location.patch [bz#1057249]
  - gpxe-Store-boot-bus-dev.fn-address-as-autoboot-device-locat.patch [bz#1057249]
  - gpxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00.0.patch [bz#1057249]
  - Resolves: bz#1057249
    (NIC boot order use device PCI address order instead of device boot order)


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.13.el6
changelog:
  - gpxe-Add-support-for-local-configuration-files.patch [bz#968474]
  - gpxe-Extract-timing-parameters-out-to-config-dhcp.h.patch [bz#968474]
  - gpxe-Use-spec-compliant-timeouts.patch [bz#968474]
  - Resolves: bz#968474
    ([RFE] option to increase gpxe retry timeout)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.9.7-6.14.el6
changelog:
  - gpxe-Fix-timeouts.patch [bz#1206042]
  - Resolves: bz#1206042
    (Connection time out when install vm through network)


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.15.el6
changelog:
  - gpxe-Include-port-in-HTTP-Host-header-as-needed.patch [bz#1231931]
  - Resolves: bz#1231931
    (gPXE 'Host' header being transferred without port)


author: Yash Mankad <ymankad@redhat.com> - 0.9.7-6.15.el6_8.1
changelog:
  - gpxe-netdevice-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1408391]
  - gpxe-Fix-fragment-reassembly.patch [bz#1408390]
  - Resolves: bz#1408390
    (gPXE gets stuck if it receives fragmented IP multicast packets [rhel-6.8.z])
  - Resolves: bz#1408391
    (Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)


author: Yash Mankad <ymankad@redhat.com> - 0.9.7-6.16.el6
changelog:
  - gpxe-netdevice-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1354521]
  - gpxe-Fix-fragment-reassembly.patch [bz#1380215]
  - Resolves: bz#1354521
    (Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)
  - Resolves: bz#1380215
    (gPXE gets stuck if it receives fragmented IP multicast packets)


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.26.0-1
changelog:
  - Updated to latest release
  - Removed patches that have been applied upstream
  - Fixed man page paths (mann -> man3)
  - Disabled mono and ocaml for ARM (Jitesh Shah, BZ#532047)
  - Disabled regression tests on sparc64 as well as ppc/ppc64 (Dennis Gilmore)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-5
changelog:
  - Fixed broken links in index.html (doc-index-fix patch)
    Resolves: rhbz#624658
  - Enabled and fixed testsuite (testsuite-sigsegv-fix, rtest-errout-fix patches)
    Resolves: rhbz#624690
  - Fixed rpmlint warnings on spec file
  - Rebuilt with updated swig
    Resolves: rhbz#679715
  - Fixed gtk plugin program-name (gtk-progname patch)
    Resolves: rhbz#640247
  - Added urw-fonts to BuildRequires
  - Compiled with -fno-strict-aliasing


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-8
changelog:
  - All docs are now installed into /usr/share/doc/graphviz-%{version}
  - Demos packaged as docs not to automatically bring in unnecessary deps
    Resolves: rhbz#821920
  - Removed -ffast-math, added -ffloat-store (on i386) to fix arithmetic on i386
    Resolves: rhbz#772637
  - Fixed build failure due to change in php_zend_api macro type


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.20.3-3
changelog:
  - this spec makes baby animals cry... massively clean it up
  - hack in java includes to build against openjdk
  - add ruby as a BuildRequires (configure checks for /usr/bin/ruby)


author: Remi Collet <Fedora@FamilleCollet.com> 2.20.3-4
changelog:
  - rebuild for new PHP 5.3.0 ABI (20090626)
  - add PHP ABI check
  - use php_extdir (and don't own it)
  - add php configuration file (/etc/php.d/graphviz.ini)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-2
changelog:
  - Added dfa-optimize-period patch (speedup for . patterns in UTF-8)
  - Added glibc-matcher-fallback patch (speedup for [a-z] patterns in UTF-8)
  - Added mmap-option-fix patch
  - Added dfa-convert-to-wide-char patch (speedup for -m and remove quadratic
    complexity when going to glibc)
  - Added dfa-speedup-digit-xdigit patch (speedup for [[:digit:]] [:xdigit:]])


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-1
changelog:
  - New version
    Resolves: rhbz#1064668
    Resolves: rhbz#982215
    Resolves: rhbz#1126757
    Resolves: rhbz#1167766
    Resolves: rhbz#1171806
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#799863
  - Documented --fixed-regexp option
    Resolves: rhbz#1103270


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1193030
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed bogus date in the changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1367309


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1256756


author: Stepan Kasal <skasal@redhat.com> - 1.18.1.14-15
changelog:
  - Replace groff-1.18-nohtml.patch by a code in spec file
  - fix groff-1.18-gzip.patch to apply cleanly
  - simplify the code for symlinking in %install


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-84
changelog:
  - Proper graphics initialization
    Resolves: rhbz#1048681
    Resolves: rhbz#1074914
    Resolves: rhbz#1094978


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-86
changelog:
  - grub-install: add regex for partition and multipath when
    use_friendly_names is off
    Resolves: rhbz#1121321
  - Disable previous patch as it doesn't work properly


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-91
changelog:
  - Suppress failure message on EFI systems when loading splashscreen
    Resolves: rhbz#1129436
  - Return proper disk operation status
    Resolves: rhbz#1130209
  - Stick with default GOP mode unless resolution is absurdly small
    Resolves: rhbz#1130313


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-94
changelog:
  - Properly expand IPv6 address
    Resolves: bz#1177321
  - Support various types of DHCP IPv6 packet for MAC address extraction
    Resolves: bz#1206542


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-94.el6_7.1
changelog:
  - Fix the ineffectiveness when loading fragmented initramfs from Ext4 filesystem
    Resolves: #1311474


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-95
changelog:
  - Fix the ineffectiveness when loading fragmented initramfs from Ext4 filesystem
    Resolves: #1006373


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-97
changelog:
  - Patch from previous commit c445aac0ee30f has been removed, because it did not
    fix the issues with some SGI hardware. Bumping up the release number, so the
    building of grub package is not affected in the future. For more info see:

    Related: #1325860 (https://bugzilla.redhat.com/show_bug.cgi?id=1325860)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.97-98
changelog:
  - Workaround for SGI UV100/1000 hardware (TFTP transfers in UEFI mode) added
    Resolves: #1124862
  - Allow more than 1 letter in device name when using the grub-install script
    Resolves: #1349389


author: Peter Jones <pjones@redhat.com> - 7.0.13-1
changelog:
  - Strip boot partition prefix from initrd path if present during --update.
  - add host only support for local kernel compiles (airlied)


author: Peter Jones <pjones@redhat.com> - 7.0.15-3
changelog:
  - Ensure that all stanzas are fixed with --update-kernel=ALL (patch from bcl)
    Resolves: rhbz#696960


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-1
changelog:
  - Update to snapshot
  - Fix text subtitles causing hangs on startup
  - Fix missing plugins installation requiring a restart
  - Queue2 element moved to gstreamer core


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-2
changelog:
  - Fix theoradec bug with timestamps for Empathy video calls (#537170)
  - Fix text subtitle display regression (#537559)


author: Bastien Nocera <bnocera@redhat.com> 0.10.17-2
changelog:
  - Update Farsight plugins to 0.10.17
  - Disable LADSPA plugins, they should be in -bad (#540198)
  - Add support for authenticating RTSP sources
  Related: rhbz#543948


author: Wim Taymans <wtaymans@redhat.com> 0.10.23-2
changelog:
  - add patch to post provide-clock message to fix a major regression
    in 0.10.23
  - bump version to rebuild for fastrack
  Resolves: rhbz#622776


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.3.0-1
changelog:
  - Version bump to 1.3.0.
    * New feature: ability to use Google Test assertions in other testing
      frameworks.
    * New feature: ability to run disabled test via
      --gtest_also_run_disabled_tests.
    * New feature: the --help flag for printing the usage.
    * New feature: access to Google Test flag values in user code.
    * New feature: a script that packs Google Test into one .h and one .cc file
      for easy deployment.
    * New feature: support for distributing test functions to multiple machines
      (requires support from the test runner).
    * Bug fixes and implementation clean-ups.


author: Debarshi Ray <rishi@fedoraproject.org> - 1.4.0-1
changelog:
  - Version bump to 1.4.0.
    * New feature: the event listener API.
    * New feature: test shuffling.
    * New feature: the XML report format is closer to junitreport and can
      be parsed by Hudson now.
    * New feature: elapsed time for the tests is printed by default.
    * New feature: comes with a TR1 tuple implementation such that Boost
      is no longer needed for Combine().
    * New feature: EXPECT_DEATH_IF_SUPPORTED macro and friends.
    * New feature: the Xcode project can now produce static gtest libraries in
      addition to a framework.
    * Compatibility fixes for gcc and minGW.
    * Bug fixes and implementation clean-ups.


author: Paul Howarth <paul@city-fan.org> 1:1.2.10-68
changelog:
  - remove unused shared library dependencies
  - use install -p to maintain timestamps where reasonable
  - recode docs as UTF-8
  - cosmetic spec changes


author: Paul Howarth <paul@city-fan.org> 1:1.2.10-70
changelog:
  - don't own dir %{_datadir}/themes/ (owned by filesystem since F-8, #534097)
  - make %files lists more specific


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.10-2
changelog:
  - Drop VNC connection if the server sends a update spaning outside bounds of desktop (rhbz #590068)
  - Fix gcrypt threading initialization (rhbz #591827)


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-12
changelog:
  - Additional filechooser patch to make sure the size column is shown
    when switching from Recent Files to Search
  Resolves: #889172


author: Matthew Barnes <mbarnes@redhat.com> - 2.20.1-2
changelog:
  - Rebase to 2.20.0 based on the Fedora 13 package.
  - Removed patches (merged into 2.20.0 tarball):
    0001-Avoid-spurious-notifications-from-GtkEntry.patch
    0001-Prevent-the-destruction-of-the-menu-label-on-page-re.patch
    0002-Yet-another-fix-for-shape-handling.patch
    allow-set-hint.patch
    filesystemref.patch
    gtk2-preview.patch
    gtk2-rotate-layout.patch
    o-minus.patch
    strftime-format.patch
  - Removed translation patches that no longer apply:
    gtk2-translations.patch
    gtk2-translations-gu.patch
  - Fixed conflicts in patches:
    gtk2-filechooser-empty-location.patch
    gtk2-filechooser-size-column-hiding-additional.patch
    gtk2-landscape-pdf-print.patch
    icon-padding.patch
    tooltip-positioning.patch
  Resolves: #883022


author: Milan Crha <mcrha@redhat.com> - 2.20.1-3
changelog:
  - Add patch for RH bug #970594 (a11y combo names not shown without string column in model)
  Resolves: #970594


author: Milan Crha <mcrha@redhat.com> - 2.20.1-4
changelog:
  - Add patch for RH bug #979049 (GtkTreeView: make tree expanding/collapsing more robust)
  Resolves: #979049


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-1
changelog:
  - Rebase to 2.24.23
  - Make immodule cache handling the same as in gtk3. The cache
    file is now in $libdir, no longer in /etc
  - Disable tracker explicitly
  - Initialize variable "key" in gtk_print_backend_cups_set_password()
  - Modify fresh-tooltips.patch so the "new-tooltip-style" property
    is still accepted
  - Revert deprecations added between 2.20 and 2.24 so that building
    of dependent packages don't fail
  - Update relevant patches so that they apply correctly
  - Resolves: #1100886


author: Ray Strode <rstrode@redhat.com> - 2.24.23-5
changelog:
  - Don't crash if enumeration finishes just as it gets cancelled
    in file selector. Fixes crash in libreoffice when saving to
    SFTP mounts.
    Resolves: #1129605


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-6
changelog:
  - Set "entry-text-column" property in constructor of GtkComboBoxText.
  - Fixes crash in evolution when creating new appointment.
  - Resolves: #1126916


author: Milan Crha <mcrha@redhat.com> - 3.32.2-1.el6
changelog:
  - Rebase to 3.32.2
  - Remove patch for RH bug #588457 (part of rebase)
  - Remove patch for RH bug #590877 (part of rebase)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-2.el6
changelog:
  - Add patch for some issues found by Coverity scan
  - Add patch for RH bug #577797 (Cursor misplaced after paste)
  - Add patch for RH bug #615969 (Whitespaces drop on paste)
  - Add patch for RH bug #627199 (Underline/strikeout misplaced in printout)
  - Add patch for RH bug #626690 (Paragraph style not drawn after font style change)


author: Matthias Clasen <mclasen@redhat.com> - 1:1.8.5-2
changelog:
  - Add an epoch and downgrade to 1.8.5; gtksourceview 2.x 
    will live in the gtksourceview2 package2


author: Matthew Barnes <mbarnes@redhat.com> - 2.0.13-1.fc9
changelog:
  - Update to 2.0.13
  - Add BuildRequires: intltool
  - Remove "libs" patch (fixed upstream).
  - Remove patch for RH bug #216412 (fixed upstream).
  - Remove patch for RH bug #245888 (fixed upstream).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-4
changelog:
  - Backport patches up to upstream 1.8.0 _except_ for:
     * changes which require febootstrap 3.x
     * changes which were only relevant for other distros


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-8
changelog:
  - Backport patches up to upstream 1.8.1. (RHBZ#613593)
  - Fixes:
     * guestfish: fails to tilde expand '~' when $HOME unset (RHBZ#617440)
     * libguestfs: unknown filesystem /dev/fd0 (RHBZ#666577)
     * libguestfs: unknown filesystem label SWAP-sda2 (RHBZ#666578)
     * libguestfs: unknown filesystem /dev/hd{x} (cdrom) (RHBZ#666579)
     * virt-filesystems fails on guest with corrupt filesystem label (RHBZ#668115)
     * emphasize "libguestfs-winsupport" in error output (RHBZ#627468)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-10
changelog:
  - Remove external hexedit script and make guestfish users set $HEXEDITOR.
    This is because requiring emacs pulls in all of X (RHBZ#641494).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-12
changelog:
  - Fix typo in virt-make-fs manual page.
    resolves: rhbz#673721
  - Add a grep-friendly string to LIBGUESTFS_TRACE output.
    resolves: rhbz#673477


author: Miroslav Lichvar <mlichvar@redhat.com> - 5:1.8.5-1
changelog:
  - update to 1.8.5
  - fix continuations on ia64
  - remove umask setting from scriptlet, rpm sets it now


author: Tim Waugh <twaugh@redhat.com> 5.2.4-10
changelog:
  - Better defattr use in file manifests.
  - Fixed mixed spaces and tabs.
  - Fixed main package summary.
  - Added comments for all sources and patches.
  - The cups sub-package requires the exactly-matching main gutenprint
    package.


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.2.5-3
changelog:
  - gutenprint: libgutenprintui2 defines "yyin" symbol (bug #882197)
  - gutenprint base package must also include a copy of license text (bug #613706)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-13
changelog:
  - Fix interaction with LUKS volumes with fstab records (#599055)
  - Fix defects revealed by Coverity scan (#722465)
  - Correct return values on error for programs (#682799)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-15
changelog:
  - Fix several memory leaks (#809708)
  - Fix formatted BD-RE media detection (#669526)
  - Fix gvfs-open exit code on error (#746978)
  - Fix gvfs-info exit code on error (#746977)
  - Fix gvfs-cat exit code on error (#749369)
  - Fix gvfs-ls exit code on error (#749371)
  - Fix gvfs-mount exit code on error (#749372)


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-17
changelog:
  - Check GConf2 key before use to avoid error dialog (#1049232)
  - Fix renaming files on webdav (#1011835)
  - Fix libarchive dependency


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-18
changelog:
  - Fix GConf module building with updated GLib2 (#1118704)
  - Fix SFTP mounting with updated OpenSSH (#1118325)


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing 
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output 
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added /usr/bin/gzip and /usr/bin/gunzip symlinks as some programs are too
    brain dead to figure out they should be at least trying to use $PATH
  - added BuildRoot


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - adopt patch from Paul Eggert to fix detection of the improper tables in
    inflate.c(huft_build)
  - the latest released version 1.2.4a, which provides documentation updates
    only. But it lets us use small revision numbers again
  - add an dirinfo entry for gzip.info so we can get rid of the ugly --entry
    args to install-info


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Build system handles stripping
  - Don't do thing the system does, like creating directories
  - use --bindir /bin
  - Added URL
  - skip unnecesarry sed step
  - Include THANKS, AUTHORS, ChangeLog, TODO


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add HAVE_LSTAT define, to avoid it doing weird things to symlinks
    instead of ignoring them as the docs say it should (#22045)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed buzilla bug #26680. Wrong skip value after mktemp patch and forced
    overwrite for output file during decompression.


author: Trond Eivind Glomsrød <teg@redhat.com> 1.3.0-16
changelog:
  - replace tempfile patches with improved ones solar@openwall.com
  - Add less to the dependency chain - zless needs it


author: Jeff Johnson <jbj@redhat.com> 1.3.3-9
changelog:
  - enlarge window buffer to avoid accessing beyond end-of-buffer (#78413,#83095).
  - re-enable rsync ready patch.


author: Tomas Mraz <tmraz@redhat.com> 1.3.5-2
changelog:
  - upstream 1.3.5
  - dropped long ago obsolete dirinfo patch
  - escape file names in zgrep (#123012)
  - make stack in match.S nonexecutable


author: Tomas Mraz <tmraz@redhat.com> 1.3.5-3
changelog:
  - don't use the asm code again as it's slower than the gcc compiled one
  - convert the .spec to UTF-8


author: Ivana Varekova <varekova@redhat.com> 1.3.5-8
changelog:
  - fix bug 204676 (patches by Tavis Ormandy)
    - cve-2006-4334 - null dereference problem
    - cve-2006-4335 - buffer overflow problem
    - cve-2006-4336 - buffer underflow problem
    - cve-2006-4338 - infinite loop problem
    - cve-2006-4337 - buffer overflow problem


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-4
changelog:
  - Create a haldaemon group in the spec file as shadow-utils has been updated
    and no longer automatically creates a private group for UIDs < 200.
  - Resolves: #594305


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-9
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters.
  - Resolves: #576048


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-10
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters. This fixes the patch from -9.
  - Resolves: #576048


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-13
changelog:
  - Initialize DBus errors correctly to resolve crashes when the probers are run
    directly.
  - Resolves: #755209


author: - Bastien Nocera <bnocera@redhat.com> - 20090202-3
changelog:
  - Remove the Dell native killswitches, replaced by the kernel killswitches
    in dell_laptop (#488177)


author: Richard Hughes <rhughes@redhat.com> - 20090330-2
changelog:
  - A key labelled "Music" on a Dell USB keyboard shows up in X as "XF86Tools"
    which is wrong. Reassigns the key to be "Media".


author: Richard Hughes <rhughes@redhat.com> - 20090716-1
changelog:
  - New upstream release to fix some more music players, resume problems and
    keymaps. See http://lists.freedesktop.org/archives/hal/2009-July/013481.html
    for full list.


author: David Walluck <dwalluck@redhat.com> 0:1.1-7.1
changelog:
  - Fedora-specific: enable GCJ support
  - Fedora-specific: build with java 1.6.0
  - Fedora-specific: disable integration and tests


author: Ryan O'Hara <rohara@redhat.com> - 1.4.24-1
changelog:
  - Rebase to upstream version 1.4.24.
    Resolves: rhbz#947987
  - Rewrite rules flaw can lead to arbitrary code execution (CVE-2013-1912).
    Resolves: rhbz#947701
  - Fix possible crash when using negative header occurrences (CVE-2013-2175).
    Resolves: rhbz#974263
  - Enable TPROXY support.
    Resolves: rhbz#921064


author: Nalin Dahyabhai <nalin@redhat.com> 3.1.0-7
changelog:
  - drop unnecessary %post/%postun
  - tweak default payload file attributes (guidelines)
  - tweak summary (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-12
changelog:
  - call aclocal directly, because autoreconf didn't see the magic comment in
    the distributed version of aclocal.m4 which made it look like it was safe
    to generate a new one (#449550)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Ray Strode <rstrode@redhat.com> 0.9-2
changelog:
  - Remove Prereq on gtk.  Prereq's complicate things,
    and the gtk-update-icon-cache is already protected by
    [ -x  ... ]


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.1-1
changelog:
  - Backport hivex package from Fedora Rawhide.
  - Exclude s390, s390x because of lack of OCaml packages.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Rebase to upstream version 1.2.4 (RHBZ#642631).
    * Python bindings (python-hivex subpackage).
    * Adds hivex_set_value API call (Conrad Meyer).
    * Miscellaneous small bug fixes.
  - Fix Source0.
  - Fix builds with recent perl (Dan Horák).


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-3
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4
changelog:
  - Rebase to upstream version 1.3.3
    resolves: rhbz#734208
  - Add upstream patch: hivexml: Remove unused variable.
  - Add upstream patch: hivex: Added gnulib includes from builddir [...]


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4.2
changelog:
  - Remove loaded text from description
    resolves: rhbz#822741
  - Add patch to fix parsing of hives that contain large ri-records
    resolves: rhbz#841924


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4.3
changelog:
  - Add missing checks for small/truncated files
    resolves: rhbz#1158993
  - Fix typo in man page Win::Hivex.3.pm
    resolves: rhbz#1164693


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-1
changelog:
  - fix 'make check' by using binaries built with a different path for their
    own check files
  - add a non-fips compile-time option, which we don't use


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.9-1
changelog:
  - look for prelink at compile-time, and if we find it try to invoke it
    using a full pathname before trying with $PATH (#512275)
  - buildrequires: prelink so that it will be found at compile-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.10-1
changelog:
  - refuse to truncate output below half the size of the hash length, or 80
    bits, whichever is higher, in case we get used in a situation where
    not doing so would make us vulnerable to CVE-2009-0217, in which an
    attacker manages to convince a party doing verification to truncate
    both the just-computed value and the value to be checked before
    comparing them, as comparing just 1 bit would make detecting forgeries
    close to impossible


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.11-1
changelog:
  - error out when we previously skipped a check entry because the value to be
    checked is the wrong size
  - fix estimation of the expected length for truncated values


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-1
changelog:
  - fix regression of #512275 -- we looked for prelink, but didn't record
    its location properly (#548438)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-2
changelog:
  - backport fix to treat unexpected command-line arguments as an error to
    avoid setting incorrect expectations, and warn when a check file doesn't
    appear to contain anything for us to check (#1016706)


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-1
changelog:
  - Re-based to 3.10.9 with fixes from Fedora (bug #652255).
  - Change shebang /usr/bin/env python -> /usr/bin/python (bug #608003).
  - Added COPYING to common sub-package (bug #613707).
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #616569).
  - Fixed "CUPS Web Interface" button (bug #633899).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-4
changelog:
  - The hpijs sub-package no longer requires cupsddk-drivers (which no
    longer exists as a real package), but cups >= 1.4 (bug #829453).


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-1
changelog:
  - Re-based to 3.12.4 with fixes from Fedora (bug #731900).  No longer
    need no-system-tray, openPPD, addgroup, emit-SIGNAL, fab-root-crash,
    newline, hpaio-segfault, dbus-threads, or cups-web patches.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4
changelog:
  - Applied patch to fix CVE-2013-0200, temporary file vulnerability
    (bug #902163).
  - Fixed hpijs-marker-supply patch.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-5
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Tim Waugh <twugh@redhat.com> 3.14.6-3
changelog:
  - Fixes from Fedora:
    - Fixed incorrect name in function call in makeURI when a parallel
      port device is used (bug #1159161).
    - Fixed uses of strncpy throughout.


author: Dan Kenigsberg <danken@cs.technion.ac.il> 1.0-7
changelog:
  - Move the hunspell-he dictionaries into hspell package (Bug #240696).
    Mostly applying Caolan McNamara's patch #155078.


author: Igor Foox <ifoox@redhat.com> 2.0-3
changelog:
  - Remove comment to reference license and include a copy as another source file.
  - Add Requires for Python.
  - Add dist tag.


author: Adam Tkac <atkac redhat com> 4:3.2.0-0.1.b6
changelog:
  - report proper error message when external parser fails (#435741)
  - ignore numbers when using allow_numbers: true and soundex (#435743)
  - correct N-V-R


author: Petr Pisar <ppisar@redhat.com> - 1.0-0.4.b5
changelog:
  - Fix spelling
  - Default attributes for xhtml2ps %files
  - Backport SSI traversal fix from 1.0b6 upstream version (#586356)
  - Replace libpaper dependency with paperconf binary to make rpmlint happy


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 0.9-3
changelog:
  - include patch by Petr Holasek (pholasek@redhat.com) that adds
    libpagemap support and introduces new -p cmd option and USS,
    PSS, SWAP columns


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 1.0-1
changelog:
  - Update to 1.0
  - Build with --enable-openvz --enable-vserver --enable-taskstats
    --enable-unicode --enable-native-affinity --enable-cgroup
  - Drop htop-0.9-system-plpa.patch (no PLPA needed anymore)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-56
changelog:
  - Resolves: #1310582 - when ProxyErrorOverride is On, modcluster return
    503 status code on subsequent requests


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-58
changelog:
  - Resolves: #1349546 - comments no longer allowed at the end of Allow
    from statements and maybe other statements from mod_authz*


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-60.5
changelog:
  - Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
    authentication bypass
  - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
  - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
  - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
    in mod_auth_digest


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-68
changelog:
  - Resolves: #1450298 - when ProxyErrorOverride is On, modcluster
    return 503 status code on subsequent requests (2)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-69
changelog:
  - Resolves: #1471383 - httpd.worker abort()s with misc/apr_reslist.c:159:
    reslist_cleanup: Assertion `rl->ntotal == 0' failed


author: Nikita Ivanov <nivanov@cloudlinux.com> - 2.2.15-72.tuxcare.cl.els4
changelog:
  - CVE-2022-22720: simpler connection close logic if discarding the request body fails
  - CVE-2022-22721: make sure and check that LimitXMLRequestBody fits in system memory


author: Dmitry Antipov <dantipov@cloudlinux.com> - 2.2.15-72.tuxcare.els5
changelog:
  - CVE-2022-26377: mod_proxy_ajp: fix HTTP request smuggling
  - CVE-2022-28615: fix possible out-of-bounds read in ap_strcmp_match()
  - CVE-2022-31813: mod_proxy: preserve original request headers so an upstream knows what
    the original request hostname was, and so send X-Forwarded-* headers correctly


author: Jan Kaluza <jkaluza@redhat.com> - 1.1-7
changelog:
  - Obsolete all versions of httpd24-apr and httpd24-apr-util on RHEL7 (#1218271)
  - Do not mention RHSCL version in README and man page (#1219112)
  - Fix bad man page syntax (#1219511)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
changelog:
  - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
  - apxs: mention -p option in manpage


author: Joe Orton <jorton@redhat.com> - 1.4.2-3
changelog:
  - work around alising issue in ring macros (upstream PR 50190)
  - fix buildconf with newer libtool (#670621)


author: Jan Kaluza <jkaluza@redhat.com> - 1.4.6-2
changelog:
  - initial spec rewrite for scl build
  - fix strict-aliasing gcc warning
  - remove unused SHA384 and SHA512 code
  - update license


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Joe Orton <jorton@redhat.com> - 2.4.25-5
changelog:
  - mod_proxy_fcgi: revert to pre-2.4.23 SCRIPT_FILENAME mangling (#1414037)
  - mod_proxy: fix regression in per-dir ProxyPass (#1417482)


author: Joe Orton <jorton@redhat.com> - 2.4.25-9
changelog:
  - link only httpd, not support/* against -lselinux -lsystemd (#1433474)
  - don't enable SO_REUSEPORT in default configuration (#1432249)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-7
changelog:
  - Related: #1487164 - apache user is not created during httpd
    installation when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-5
changelog:
  - Resolves: #1640722 - mod_md is missing in httpd24-httpd
  - Resolves: #1635838 - CVE-2018-11763 httpd24-httpd: httpd:
    DoS for HTTP/2 connections by continuous SETTINGS


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-7
changelog:
  - Resolves: #1646937 - Unable to start httpd
  - Resolves: #1638711 - comments should be allowed at the end of Allow from
    statements


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-7.1
changelog:
  - Resolves: #1695428 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts


author: Paul Howarth <paul@city-fan.org> 2.3.6-5
changelog:
  - Fix regression in 2.3.6 that broke process controls when using vhost-specific
    configuration (upstream issue 49902, #783742, CVE-2012-1181)


author: Paul Howarth <paul@city-fan.org> 2.3.6-6
changelog:
  - Fix compatibility with httpd 2.4 in F-18/RHEL-7 onwards
  - Use /run rather than /var/run from F-15/RHEL-7 onwards


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
  - Update to 2.3.9
    - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
    - Add experimental cmake-based build system for Windows
    - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
      Authenticator/Authorizor/Access directives' command line argument, as
      currently documented (PR#51194)
    - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
      assignments) (PR#51657)
    - Conform script response parsing with mod_cgid and ensure no response body
      is sent when ap_meets_conditions() determines that request conditions are
      met
    - Improve logging in access control hook functions
    - Avoid making internal sub-requests and processing Location headers when in
      FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
      headers returned by scripts as an error since redirections are not
      meaningful in this mode
    - Revert fix for PR#53693, added in 2.3.8 but undocumented
    - Fix issues with a minor optimization added in 2.3.8


author: Eugen Vodilov <evodilov@cloudlinux.com> - 1.0-30
changelog:
  - AAP-142: avoid lve_leave using filters
  - AAP-151: add EP limit hiting when EP is reached max value


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.0-37
changelog:
  - AAP-273: expand the range of LVEErrorCodes
  - AAP-253: spec and cmake redesigned for new httpd24 build
  - AAP-241: Update Copyright for mod_hostinglimits project
  - AAP-244: Fix cmakefiles for httpd24-mod_hostinglimits


author: Aleksandr Demeshko <ademeshko@cloudlinux.com> Nikolay Petukhov <npetukhvov@cloulinux.com> - 1.0-40
changelog:
  - AAP-510: log level changed to WARN for limited requests
  - AAP-493: Improved log output
  - AAP-508: Allowed AllowedHandlers and DenyHandlers directives inside Directory, Location and Files contexts


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Sergey Kokhan <skokhan@cloudlinux.com> 1.1-40
changelog:
  - MODLS-661: Make possibility criu work on CL7h
  - MODLS-638: During graceful restart lsphp process are killed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Rostyslav Tulchii <rtulchii@cloudlinux.com> 1.1-42
changelog:
  - MODLS-679: fixed race condition is dump req info
  - MODLS-674: liblsapi receive response header interface redesigned
  - MODLS-670: ElasticAPM support redesigned
  - MODLS-665: added sulsphp_log logfile location directive
  - MODLS-656: unifying form of errors for sentry


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Sergey Kozhekin <skozhekin@cloudlinux.com> 1.1-44
changelog:
  - MODLS-691: Elastic APM dump request info fixed
  - MODLS-689: Support for lsapi_backend_pgrp_max_reqs and lsapi_backend_pgrp_max_crashes added
  - MODLS-530: benchmark script added
  - MODLS-684: Fix Plesk tests (issue with handlers on both platforms)


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Daria Kavchuk <dkavchuk@cloudlinux.com> 1.1-45
changelog:
  - MODLS-692: connection pool mode updated
  - MODLS-702: Apache restart added to mod_lsapi update
  - MODLS-703: rpm -q from mod_lsapi_stat removed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-46
changelog:
  - MODLS-723: proper request body length for 2G+ files
  - MODLS-722: clean shutdown support for LSAPI 7.6 added
  - MODLS-708: da_mod_lsapi installation added into da_cb_install script


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Sergey Kokhan <skokhan@cloudlinux.com> 1.1-47
changelog:
  - MODLS-727: Removed /var/cpanel/conf/apache/main usage as it was removed in cPanel
  - alt-php74 support added


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-50
changelog:
  - MODLS-745: 1 second Apache restart condition detection added to starter
  - MODLS-746: Fix yum command string for CL8 stable in da_cb_install
  - MODLS-735: lsphp patch updated to to delete criu imgs when lsapi_backend_pgrp_max_crashes triggered
  - MODLS-737: DA hook script modified for CL8 and py3


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-51
changelog:
  - MODLS-789: rpm file integrity check added into da_cb_install
  - MODLS-760: Plesk removing hook fixed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-52
changelog:
  - MODLS-794: added no strict mode for configparser in stat utils
  - MODLS-800: Log level for backend PHP Notices changed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-53
changelog:
  - mod_lsapi changed for Litespeed SAPI 7.7
  - MODLS-811: Apache version detection fixed on update mod_lsapi


author:
  Sergey Kozhekin <skozhekin@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> Sergey Kokhan <skokhan@cloudlinux.com> 1.1-56

changelog:
  - MODLS-806: Dynamic lsapi_set_env added
  - MODLS-859: Added CRIU support to httpd24-mod_lsapi
  - MODLS-851: CL license updated


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-57
changelog:
  - MODLS-878: Custom control panel integration improved for src.rpm
  - MODLS-877: Added support of alt-php81


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Hasan Aliev <haliev@cloudlinux.com> 1.1-60
changelog:
  - MODLS-905: Add possibility to work with switch_mod_lsapi to control panel integration
  - MODLS-916: Trigger scriptlet creates /usr/local/bin/lsphp as symlink


author: Nikolay Petukhov <npetukhov@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-62
changelog:
  - MODLS-935: Fixed malformed http response caused by wrong http header
  - MODLS-940: Added oom score adjustment for lsphp processes


author: Nikolay Petukhov <npetukhov@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-63
changelog:
  - MODLS-952: Fixed the bug added when solving MODLS-935
  - CRIU support disabled on CL9 due to MODLS-955


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-64
changelog:
  - MODLS-946: lsapi_backend_use_own_log option context fixed
  - MODLS-956: liblsapi dependency made strict for mod_lsapi packages
  - MODLS-959: HTTP output filter error processing changed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-65
changelog:
  - MODLS-963: ea-php82 handler added
  - MODLS-962: DA installation script modified to be called without parameters


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-73
changelog:
  - CLOS-2334: Minor mod_lsapi scripts corrections
  - CLOS-2348: Execute condition changed in switch_mod_lsapi script


author: Leonid Kanter <lkanter@cloudlinux.com> - 0.7.2-1
changelog:
  - update to with-setid-mode="owner"
  - handle update of packages built with --with-setid-mode="owner" (dkasyanov@)


author: Caolan McNamara <caolanm@redhat.com> - 0.20090216-3
changelog:
  - Change two suspicious words with two initial capitals in en_GB
    from ADte TEirtza to ADTe Teirtza


author: Parag Nemade <pnemade AT redhat.com> - 0.2.1-2
changelog:
  - Resolves: rh#567895: Fix license tag in spec file with new upstream release
  - Removed CREDITS file as upstream provides now README and LICENSE files.


author: Parag <pnemade@redhat.com> - 0.20050929-3
changelog:
  - Use aspell source instead to pull source as BR:aspell-te
  - Resolves:rh#511262 buildrequires aspell-te


author: Michal Minar <miminar@redhat.com> 0.233-7.9
changelog:
  - updated pci.ids, usb.ids, oui.txt
  - Resolves: #739816, #739819, #739821, #739824
  - Resolves: #739825, #760031, #830253, #839221, #841423


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
   - added dependency on libibverbs-devel pciutils-devel
   - cannot provide support for cuda (cuda_runtime_api.h). 
   - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Jay Fenlason <fenlason@redhat.com> - 1.5-2
changelog:
  - Build the 1.1 version as well, so we have the old library for backward
    compatability.
    Resolves: rhbz1070347


author: Michal Schmidt <mschmidt@redhat.com> - 1.5-3
changelog:
  - Make libhwloc.so point to the current library version, not the compat one.
    Resolves: rhbz1135040


author: Tomas Hozza <thozza@redhat.com> - 0-0.8
changelog:
  - Bumping release to 0.8 to avoid update path from RHEL5
  - changing the way how Netlink source address is validated (#872593)
  - fix for long names from readdir (#872566)
  - applied reasonable Debian/Ubuntu patches (#872584)


author: Tomas Hozza <thozza@redhat.com> - 0-0.9
changelog:
  - Fix a typo in hv_set_ifconfig.sh script
  - Fix creation process of ifcfg-* files when doing IP injection
  - Use CLOEXEC when opening pool files to prevent FD leaking
  - Changes in SPEC file:
   - remove/create %{_sharedstatedir}/hyperv if removing/installing package
   - install scripts without ".sh" extension


author: Tomas Hozza <thozza@redhat.com> - 0-0.10
changelog:
  - Fix segfault when cgred is running (#920032)
  - Fix errors found by static analysis of code (#965944)
  - Start hypervkvpd only if Hyper-V drivers are loaded (#962565)


author: Tomas Hozza <thozza@redhat.com> - 0-0.11
changelog:
  - Fix initscript test if Hyper-V drivers are loaded (#978300)
  - Build the daemon with full RELRO and PIE (#977861)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.0.0-3
changelog:
  - Change /dev/i2c-# creation from /lib/udev/devices to /etc/udev/makedev.d
    usage
  - Add an /etc/modprobe.d/i2c-dev file to work around bug 380971


author: Till Maas <opensource till name> - 20061109-2
changelog:
  - Make description line less than 80 instead of less that 81 characters long
  - Permissions of manpage are 0644 instead of 0755 now


author: Doug Ledford <dledford@redhat.com> - 1.0.5-2
changelog:
  - Don't install the address file or config file, the config file isn't
    strictly needed and defaults will be used if it isn't installed, but
    with the address file we specifically need to build one based upon
    the machine where the program is installed, a default file is not only
    not helpful, but it messes up the daemon.
  - Related: bz700285


author: Doug Ledford <dledford@redhat.com> - 1.0.5-3
changelog:
  - Until the next upstream release, the pid file is in a wonky location.
    Make the init script know about that location so we can stop properly.
  - Resolves: bz808599


author: Doug Ledford <dledford@redhat.com> - 0.4-3
changelog:
  - Rebuild against updated libibmad and libibumad libraries
  - Only need to build require libibmad, it pulls in libibumad
  - Resolves: bz451466


author: Doug Ledford <dledford@redhat.com> - 0.5-4.el6
changelog:
  - Rebuild against latest opensm, which was required for latest ibutils,
    which was required to resolve licensing issues during pkgwrangler review
  - Related: bz555835


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-2
changelog:
  - Revert the version not to be rebased.
  - Fix bug 608988 - Cannot de-select Hanja lock in applet menu
    Resolves: #608988


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-4
changelog:
  - Resolves: #651915 Wrong window position with ibus-x11
    Added ibus-651915-x11-position.patch
  - Resolves: #633330 Fixed kn.po
  - Resolves: #635541 Fixed gu.po
    Added ibus-1.3.4-po-2010-11-17.tar.bz2


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-6
changelog:
  - Fixed Bug 667031 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-10
changelog:
  - Resolves: Bug 1403077 - Support second monitor in ZaphodHeads
    Added ibus-1403077-zaphodheads-x11.patch to get x11 screen number
    Added ibus-1403077-zaphodheads.patch


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.0.20090907-1
changelog:
  - Update to 1.2.0.20090907
  - Fix bug 510978 - "Typing Method" configuration doesn't work
  - Fix bug 518373 - ibus setup tools need to set gettext textdomain dir.


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.0.20091127-1
changelog:
  - Update to 1.2.0.20091127
  - Fix bug 520989 - ibus-anthy icon enhancement
  - Fix bug 531696 - ibus-anthy KeyError is still reported by abrt
  - Fix bug 536716 - ibus-anthy: Symbol type change support in ibus-anthy


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.1-3
changelog:
  - Fixed Bug 661597 - the latest page_size for ibus.LookupTable.
  - Added -fno-strict-aliasing option in CFLAGS for rpmdiff


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100216-1
changelog:
  - Fixed when typing English immediately after incomplete Chinese character.
  - Add zh_TW summary.
  - Revised description and write its zh_TW translation.


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100317-1
changelog:
  - Fix google 796: English input for dvorak
  - Fix google 797: Zhuyin input for dvorak
  - Fix google 807: ibus-chewing shows the over-the-spot panel
    even when not necessary


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100605-1
changelog:
  - Fix Issue 942: Fix unsunk references in ibus-chewing
    Applied the patch provided by zork@chromium.org.
  - Rename CVS_DIST_TAGS to FEDORA_DIST_TAGS, and move its
    definition to cmake_modules/
  - Gob2 generated file is now removed, because
    Bug 519108 is fixed from Fedora 11.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100608-1
changelog:
  - ibus-chewing can now use mouse to click on mouse. Thus
    Fix Issue 951: Chewing does not support selection of candidates via mouseclick
    Thanks zork@chromium.org for the patch.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.5.20100706-1
changelog:
  - Fixed google issue 965:
    Candidate missing if both "Plain Zhuyin" and "Space As selection" are enabled.
  - Revised Basic.macro
  - Resolved: #608991


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20090330-1
changelog:
  - Update version to 1.1.0.20090330.
  - Fix bug 486056 - missing options for 2bul, 3bul and other Korean layouts
  - Fix bug 487269 - missing Hanja Conversion


author: Warren Togami <wtogami@redhat.com> - 1.1.0.20090330-2
changelog:
  - Bug 493706: ibus-hangul Hanja arrow keys are wrong
  - Bug 493509: ibus-hangul missing right Ctrl for Hanja button
    These fixes are not ideal, but they make it usable for Fedora 11.
    These must become configurable in a future version.


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20091031-1
changelog:
  - Update version to 1.2.0.20091031.
  - Drop ibus-hangul-1.1.0.20090328-right-ctrl-hanja.patch and
    ibus-hangul-1.1.0.20090328-hanja-arrow-keys.patch temporarily, because
    patches conflict with 1.2.0.20091031, and the key configure will available
    in next release.


author: Daiki Ueno <dueno@redhat.com> - 1.3.0.20100329-5
changelog:
  - Add workaround for the race of XIM client and IBUS_ENGINE_PREEDIT_COMMIT
  - Fix bug 965554 - ibus-hangul may not handle key event after focus change


author: Peng Huang <shawn.p.huang@gmail.com> - 1.3.0-1
changelog:
  - Update to 1.3.0.
  - Update iok patch.
  - Fix bug 577148 - IOK screen appears with all keyboard layouts on ibus language panel


author: Daiki Ueno <dueno@redhat.com> - 1.3.0-2
changelog:
  - Add ibus-m17n-641243-indic-ranks.patch.
  - Fix bug 641243 - Ibus does not load all the keymaps for a language
    that is used for logging in
  - Add ibus-m17n-652201-altgr.patch.
  - Fix bug 652201 - [Indic] Rupee Symbol (U+20B9) Need to include in
    Indic Keyboard


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20100111-3
changelog:
  - Resolves: rhbz#559799.
  - Split devel file into devel package.
  - Fix non-executable-script of tabcreatedb.py.


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20100119-8
changelog:
  - Resolves: rhbz#559807
  - Change BuildRequires from ibus-table to ibus-table-devel, as .pc is moved.


author: Caius 'kaio' Chance <k at kaio.me> - 1.1.0.20090717-2.fc12
changelog:
  - Removed unneccessary BuildRequires.
  - Removed unneccessary owned directories.
  - Changed autogen.sh into configure.


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20090901-5.el6
changelog:
  - Resolves: rhbz#567749
  - Fixes build error with BuildRequires from ibus-table to ibus-table-devel.
  - Removes ibus from Requires as ibus-table should have request that.


author: Caius 'kaio' Chance <k at kaio.me> - 1.1.0.20090316-8.fc12
changelog:
  - Corrected by change into installed table directory for index creation.
  - Further specify package dependencies.
  - Added owned directories that supposed to belong to this package.
  - Move hard coded commands to macros.


author: Caius 'kaio' Chance - 1.2.0.20090715-4.el6
changelog:
  - Resolves: rhbz#554946
  - Add translations for supported non-English languages to summary and descriptions.


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20090715-8.el6
changelog:
  - Resolves: rhbz#567750
  - Fixes build error with BuildRequires from ibus-table to ibus-table-devel.
  - Removes ibus from Requires as ibus-table should have request that.


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-9
changelog:
  - We built a new opensm against a new libibumad and libibmad
    to resolve a bug.  So we need to rebuild this to be against
    the new libs.  Updated to latest upstream since we had to
    rebuild anyway and it's often needed to make it compatible
    with the minor changes in libibumad and libibmad and
    opensm-libs
  - Related: bz1082730


author: Doug Ledford <dledford@redhat.com> - 1.5.4-1.el6
changelog:
  - Update to latest upstream version, which cleans up some licensing issues
    found in the previous versions during review
  - Related: bz555835


author: Jiri Vanek <jvanek@redhat.com> 1.3.2-0
changelog:
  - Updated to icedtea-web 1.3.2 - see RHBZ 916161 for details
  - this update contains security fixes:
    - CVE-2013-1927, RH884705: fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
  -Common
    - Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized.
  - NetX
    - PR580: http://www.horaoficial.cl/ loads improperly
  - Plugin
     PR1260: IcedTea-Web should not rely on GTK
     PR1157: Applets can hang browser after fatal exceptio
  - and much more since 1.3, over 1.3.1
  - Resolves: rhbz#949095


author: Jiri Vanek <jvanek@redhat.com> 1.4-0
changelog:
  - Updated to 1.4
  - See announcement for detail
   - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-May/023195.html
  - Resolves: rhbz#916161


author: Jiri Vanek <jvanek@redhat.com> 1.4.1-0
changelog:
  - updated to 1.4.1
  - add icedtea-web man page
  - removed upstreamed  patch1 b25-appContextFix.patch
  - Resolves: rhbz#916161


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - Resolves: rhbz#1275523


author: - Jiri Vanek <jvanek@redhat.com> -1.7.1-5
changelog:
  - added 1473-1480.patch
  - added support for javafx-desc and so allwong run of pure-javafx only applications
  - --nosecurity enhanced for possibility to skip invalid signatures
  - enhanced to allow resources to be read also from j2se/java element (OmegaT)
  - Resolves: rhbz#1475412


author: - Jiri Vanek <jvanek@redhat.com> -1.7.1-7
changelog:
  - added an applied patch3, headlessCheckSoftening_rhbz1581598.patch to make healdess detection to not misinterpret on rhel 6.10
  - Resolves: rhbz#1475412


author: Deepak Bhole <dbhole@redhat.com> 1.1.1-1
changelog:
  - Bump to 1.1.1
  - Removed icedtea-web-shared-classloader.patch (now upstream)
  - Updated alternative removal commands to reflect the situation in RHEL6
  - Resolves: rhbz#713514


author: Deepak Bhole <dbhole@redhat.com> 1.1.2-1
changelog:
  - Updated to 1.1.2
  - Resolves: rhbz#683479
  - Resolves: rhbz#725794
  - Resolves: rhbz#718181 
  - Resolves: rhbz#731358
  - Resolves: rhbz#725718
  - Use the new --with-jre-home switch (#731358)


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-0
changelog:
  - Updated to latest ustream release of 1.2 branch - 1.2.3
   - Security Updates
    - CVE-2013-1927, RH884705 - fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
   - Plugin
    - PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch 0- icedtea-web-PR1161.patch
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-1
changelog:
  - fixed postun - removal of alternatives for plugin restricted to 
    (correct) removal process only
  - fixed date in changelog previous entry
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-2
changelog:
  - Added (temporally!) posttrans forcing creation of symlinks
    - should be removed next release
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-3
changelog:
  - added patch1 b25-appContextFix.patch to make it run with future openjdk
  - rmeoved posttrans
  - Resolves: rhbz#975426


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-4
changelog:
  - improved patch1 b25-appContextFix.patch to make it run with future openjdk better
  - Resolves: rhbz#975426


author: Caolan McNamara <caolanm@redhat.com> - 4.2.1-9
changelog:
  - Resolves: rhbz#596171 drop icu.icu6284.strictalias.patch and use
    -fno-strict-aliasig as upstream has added a pile more and doesn't look
    interested in proposed patchs


author: Peng Wu <pwu@redhat.com> - 4.2.1-15
changelog:
  - Apply icu.13634.integer.overflow.patch
  - Apply icu.20958.segv.mapper.patch
  - Resolves: rhbz#1809876


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.8.3-19
changelog:
  - Fix building of id3lib and programs using it with gcc34
  - Drop prebuild doxygen docs, now that doxygen is fixed to not cause multilib
    conflicts
  - Convert some docs to UTF-8


author: Adrian Reber <adrian@lisas.de> - 3.8.3-24
changelog:
  - Fix "Stack smashing with vbr mp3 files" (bz #533706)
    also see https://bugs.launchpad.net/ubuntu/+source/id3lib3.8.3/+bug/444466


author: Rex Dieter <rdieter[AT]fedoraproject.org> 1.0.0-2
changelog:
  - update %summary
  - -devel: +Requires: libGL-devel libGLU-devel
  - make install ... INSTALL="install -p" to preserve timestamps


author: Jens Petersen <petersen@redhat.com> - 1.2.7-2
changelog:
  - add new gnome-icon-theme style icons by Lapo Calamandrei and Jakub Steiner
    (mizmo, #587712)
  - add scriptlets for icon cache


author: Akira TAGOH <tagoh@redhat.com> - 1.3.1-1
changelog:
  - New upstream release.
    - Fallback to the themed icon if no icons are installed
      on the specified path. (#604482)


author: Adam Jackson <ajax@redhat.com> 1.0.2-8
changelog:
  - imake-1.0.2-find-pedantry.patch: Silence useless pedantry warning from
    find(1) when running cleanlinks. (#483126)


author: Akira TAGOH <tagoh@redhat.com> - 0.108.0-2
changelog:
  - Fix issue the invocation of IM always fails in the internal status. (#582448)
  - Add imsettings-lxde subpackage.


author: Jens Petersen <petersen@redhat.com> - 0.108.0-3.5
changelog:
  - only enable XIM for X locale compose for necessary locales (#616061)
    (for pt_BR, fi_FI, am_ET, el_GR, and ru_RU):
  - drop imsettings-none.conf-gtk-xim-default.patch
  - add imsettings-xinput-xcompose.patch


author: Petr Machata <pmachata@redhat.com> - 2.2.9-17
changelog:
  - Tidy up the specfile per rpmlint comments
  - Use utf-8 and fix national characters in contributor's names


author: Doug Ledford <dledford@redhat.com> - 1.5.3-1.el5
changelog:
  - Update to latest upstream version
  - Don't include the newly added devel stuff as it's likely only needed
    internally (and certainly not needed by anything we've supported before
    since we've never shipped it)
  - Related: bz518218


author: Jay Fenlason <fenlason@redhat.com> 1.5.3-3.el6
changelog:
  - Correct the perldir macro for rhel-6's perl.
  - Remove the unrecognized --with-node-name-map configure option.
  - reorganize the files section to use fewer globs, so that it's less likely
    to pick up files inappropriately.


author: Doug Ledford <dledford@redhat.com> - 1.5.5-1.el6
changelog:
  - Update and rebuild against latest opensm (which was needed for latest
    ibutils, which was needed for licensing issues resolved in new upstream
    tarball, which was needed for pkgwrangler review)
  - Related: bz555835


author: Doug Ledford <dledford@redhat.com> - 1.5.8-1.el6
changelog:
  - Update to latest upstream version
  - Make build work on i686 arch
  - Modify perfquery to be able to loop through all HCAs in a single host
  - Resolves: bz593767
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.5.12-1
changelog:
  - Update to latest upstream release
  - Initial Fedora import
  - Add devel and devel static packages (review item)
  - Make etc file config(noreplace) (review item)
  - Remove no longer support scripts (review item)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 1.5.12-3
changelog:
  - Reorganize this spec file to include /usr/sbin/ibswportwatch.pl
    and remove man pages for programs that aren't included.
    Resolves: bz814518


author: Doug Ledford <dledford@redhat.com> - 1.5.12-4
changelog:
  - Update the all_hcas patch to resolve several problems
  - Give a simple help message to the ibnodes script
  - Resolves: bz818606, bz847129


author: Doug Ledford <dledford@redhat.com> - 1.6.4-1
changelog:
  - Update to latest upstream release
  - Simplify and reduce spec file
  - Ship the various scripts we used to remove, they can be useful
  - Pick up changes from rhel7 and bring them to rhel6
  - Related: bz1082730


author: Jay Fenlason <fenlason@redhat.com> - 1.13-2
changelog:
  - Use macros for lib and include directories, and include dist tag in
    release field.
  - Corrected License field.
  - Corrected Requires lines for libuuid.
  - Add Exclusive-arch x86_64
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include the -execstack patch to get libinfinipath.so correctly
    labeled as not executing the stack.
    Resolves: rhbz612936


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Put the udev rules file in the right place
    Resolves: rhbz866732
  - include a patch from upstream to fix undefined references
    Resolves: rhbz887730


author: Michal Schmidt <mschmidt@redhat.com> - 3.3-1.7.git05f6f14_open
changelog:
  - Update to latest upstream tarball
  - Replace no-exec-stack patch with one cherry-picked from upstream.
  - Resolves: bz1247994


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.16.pre3.20090925svn
changelog:
  - Move to a later snapshot
  - Drop debugging compiler flags, enable optimizations again
  - Make it build on everything since EL5 again


author: Stepan Kasal <skasal@redhat.com> - 0.47-5
changelog:
  - require perl(:MODULE_COMPAT_5.10.x) because the package requires libperl.so
  - the same for inkscape-view


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-1
changelog:
  - Resolves:rh#752667 - iok looks for ~/.m17n not ~/.m17n.d
  - Resolves:rh#752668 - input fail on touch-screen with finger, while mouse click is working for iok
  - Resolves:rh#736992 - iok crashed and segfaults occurred while selecting xkb-Hindi Wx keyboard
  - Update to 1.3.13 release


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-2
changelog:
  - Resolves:rh#798592 - iok crashed while selecting 'xkb-Malayalam (enhanced Inscript with Rupee Sign)'


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-3
changelog:
  - Resolves:rh#814548: Save File option should suggests a predefined file name format
  - Resolves:rh#814521: iok does not fetch any .mim file name which does not contain "inscript2" word.
  - Resolves:rh#814541: Predefined naming convention followed when save File name, but no clue of that to user 
  - Resolves:rh#819795: Translation tracker for iok


author: Michal Hlavinka <mhlavink@redhat.com> - 0.3.2-6
changelog:
  - PRIO field was not shown correctly on powerpc platforms (#826875)
  - iotop failed when locale was incorrect (#849559)
  - move iotop to sbin (#908149)


author: Michal Hlavinka <mhlavink@redhat.com> - 0.3.2-9
changelog:
  - allow printing of unicode characters in batch mode (#906149)
  - fix crash when using pipe (#1330965)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-42.el6
changelog:
  - Require 389-ds-base >= 1.2.11.15-38 to fix roken dereference control with
    the FreeIPA 4.0 ACIs (#1112698)


author: Petr Vobornik <pvoborni@redhat.com> - 3.0.0-43.el6
changelog:
  - Release 3.0.0-43
  - Resolves: #1191040 - ipa-client-automount: failing with error LDAP server
                         returned UNWILLING_TO_PERFORM. This likely means that
                         minssf is enabled.
  - Resolves: #1185207 - ipa-client dont end new line character in
                         /etc/nsswitch.conf
  - Resolves: #1166241 - CVE-2010-5312 CVE-2012-6662 ipa: various flaws
  - Resolves: #1161722 - IDM client registration failure in a high load
                         environment
  - Resolves: #1154687 - POODLE: force using safe ciphers (non-SSLv3) in IPA
                         client and server
  - Resolves: #1146870 - ipa-client-install fails with "KerbTransport instance
                         has no attribute '__conn'" traceback
  - Resolves: #1132261 - ipa-client-install failing produces a traceback
                         instead of useful error message
  - Resolves: #1131571 - Do not allow IdM server/replica/client installation
                         in a FIPS-140 mode
  - Resolves: #1198160 - /usr/sbin/ipa-server-install --uninstall does not
                         clean /var/lib/ipa/pki-ca
  - Resolves: #1198339 - ipa-client-install adds extra sss to sudoers in
                         nsswitch.conf
  - Require: 389-ds-base >= 1.2.11.15-51
  - Require: mod_nss >= 1.0.10
  - Require: pki-ca >= 9.0.3-40
  - Require: python-nss >= 0.16


author: Petr Vobornik <pvoborni@redhat.com> - 3.0.0-46.el6
changelog:
  - Use tls version range in NSSHTTPS initialization
  - Resolves: #1154687 - POODLE: force using safe ciphers (non-SSLv3) in IPA
                         client and server
  - Resolves: #1012224 - host certificate not issued to client during
                         ipa-client-install


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-48.el6
changelog:
  - Resolves: #1263703 ipa-server-install with externally signed CA fails with
    NSS error (SEC_ERROR_BUSY)
    - Free NSS objects in --external-ca scenario
  - Resolves: #1263262 Unable to resolve group memberships for AD users when
    using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
    ipa-server-3.0.0-42.el6.x86_64 with AD Trust
    - Do not lookup up the domain too early if only the SID is known
    - Do not store SID string in a local buffer
    - Allow ID-to-SID mappings in the extdom plugin


author: Martin Basti <mbasti@redhat.com> - 3.0.0-49.el6
changelog:
  - Resolves: #1127211 ipa-server-install --uninstall produces avc
    - sysrestore: copy files instead of moving them to avoind SELinux issues
    - Use 'mv -Z' in specfile to restore SELinux context
  - Resolves: #1222999 ipa aci plugin is not parsing aci's correctly.
    - ACI plugin: correctly parse bind rules enclosed in parentheses
  - Resolves: #1225868 display browser config options that apply to the browser -
    Chrome
    - webui: add Kerberos configuration instructions for Chrome
    - Remove ico files from Makefile
    - WebUI: fix ipa_error.css
  - Resolves: #1232468 The Domain option is not correctly set in idmapd.conf when
    ipa-client-automount is executed.
    - Simplify adding options in ipachangeconf
    - ipachangeconf: Add ability to preserve section case
    - ipa-client-automount: Leverage IPAChangeConf to configure the domain for
      idmapd
  - Resolves: #1232899 ipa-client-install does not respect --realm option
    - Allow user to force Kerberos realm during installation.
  - Resolves: #1276358 Remove /usr/share/ipa/updates/50-lockout-policy.update
    file from IPA 3.0 releases
    - Remove 50-lockout-policy.update file


author: Jan Cholasta <mbasti@redhat.com> - 3.0.0-50.el6
changelog:
  - Resolves: #1225868 display browser config options that apply to the browser -
    Chrome
    - Remove ico files from Makefile
  - Resolves: #1232843 ipa-client-install errors out if client and server time
    are not in sync or unreachable
    - Skip time sync during client install when using --no-ntp
  - Resolves: #1288495 Add userCertificate index used in Smart Card
    authentication
    - add DS index for userCertificate attribute
  - Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot
    read property 'mozilla' of undefined
    - webui: fix browser detection in browserconfig.html and ssbrowser.html
  - Resolves: #1296124 Adjust Firefox configuration to new extension signing
    policy
    - webui: use manual Firefox configuration for Firefox >= 40
  - Remove binary patching from patch 0140


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.2
changelog:
  - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
    certificate revocation
    - cert-revoke: fix permission check bypass (CVE-2016-5404)


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.3
changelog:
  - Resolves: #1369470 IPA Replica-Install from RHEL6 to RHEL7 Fails
    - Modififed NSSConnection not to shutdown existing database.
    - Do not erroneously reinit NSS in Dogtag interface
    - Make sure replication works after DM password is changed


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.3
changelog:
  - Resolves: #1322059 IPA Replica-Install from RHEL6 to RHEL7 Fails
    - Modififed NSSConnection not to shutdown existing database.
    - Do not erroneously reinit NSS in Dogtag interface
    - Make sure replication works after DM password is changed


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-51.el6
changelog:
  - Resolves: #1321138 Missing dependency package "python-sss-murmur" in
    ipa-server-3.0.0-50.el6.x86_64
    - SPEC: Require python2 version of sssd bindings
  - Resolves: #1367026 Document and test procedure for running IdM Server in TLS
    1.2+ environment
    - Require 389-ds-base with TLS 1.0 disable switch


author: Akira TAGOH <tagoh@redhat.com> - 003.02-4.1
changelog:
  - Backport from Fedora.
  - Improve the fontconfig config file further more to match ja as well. (#586837)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #668836 - Review Request: ipa-pki-theme
  -   Modified overview to pertain more to these packages
  -   Removed "Obsoletes:" lines (only pertinent to internal deployments)
  -   Modified installation section to preserve timestamps
  -   Removed sectional comments


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Made 'ipa-pki-common-theme' a runtime dependency of 'ipa-pki-ca-theme'
  - https://pkgdb.lab.eng.bos.redhat.com/pkg/packages/srpm/5936/
  -   Package Wrangler:  applied GPLv2 license header to 'xml.vm'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - 'ipa-pki-common-theme'
  -     Bugzilla Bug #671058 - ipa2 - ipa-server-install fails on pkisilent -
        xml parsing string -- ?


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - Augmented overview description.
  - 'ipa-pki-ca-theme'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - Resolves 643543
  - Resolves #683172 - pkisilent needs to provide option to set
    nsDS5ReplicaTransportInfo to TLS in replication agreements
    when creating a clone, r1886


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-13
changelog:
  - added new options to configure retransmissions on lan/lanplus interfaces
    (#748073)
  - updated dellem command (#739358)
  - fixed exit code of ipmitool -o list (#715615)
  - improved checking of command line arguments (#725993)


author: Ales Ledvinka <aledvink@redhat.com> - 1.8.11-23
changelog:
  - (#1194420) Fix DDR4 SDR crash.
  - (#1170266) Wrong version reported.
  - (#1162175) Extra dependency.
  - (#1126333) Very slow response from SDR owner type SW ID
  - (#903019)  SDR lists x4600m2 fan units as unspecified


author: Phil Sutter - 2.6.32-46
changelog:
  - Resolves: #974693 - lnstat manpage insufficient
  - Resolves: #1042799 - Inconsistent detailed link information between "ip link" and "ip monitor link"
  - Resolves: #684691 - can't change the remote/local address of tunnel interface to "any" in ipip mode
  - Resolves: #1094676 - iproute2 route table querying broken for table numbers >= 2147483648
  - Resolves: #1261115 - tc does not allow to attach pfifo_fast qdisc
  - Resolves: #1229355 - ss -an shows only tcp sockets
  - Resolves: #1199867 - iproute could not show correct hoplimit info with value -1


author: Phil Sutter - 2.6.32-47
changelog:
  - Resolves: #1277102 - ip neighbour segfaults if bad mac address is used
  - Resolves: #1243413 - ip rule help output contains action reject, but this action does not work
  - Resolves: #1268058 - backport additional tcp_info dump support in ss tool
  - Resolves: #1045032 - iproute2: "ip -o link" doesn't show devices entries in a single line when reporting SR-IOV devs.
  - Resolves: #1093726 - manpage for tc needs info on filters
  - Resolves: #1265240 - ss returns zero (ok) when invalid option is added


author: Phil Sutter - 2.6.32-48
changelog:
  - Resolves: #1269814 - [6wind 6.8 Feat]: implement support for basic bridge IFA_INFO_DATA
  - Resolves: #1276591 - iproute: 'ip addr flush' failed to send flush request: Cannot assign requested address


author: Phil Sutter - 2.6.32-54
changelog:
  - Resolves: #1086512 - "ip link show" commands display Message Truncated
  - Resolves: #1301148 - [RFE] Monitoring per connection TCP retransmission


author: Thomas Woerner <twoerner@redhat.com> - 6.11-1
changelog:
  - new version 6.11 with so library version 2, includes
  - cleaned up spec file for 6.11, dropped patch, no kernel will be built
  - adapted for RHEL-6: added clean tag, BuildRoot


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-4
changelog:
  - added IPv6 transparent proxy support (rhbz#590186)
  - added auditing support (rhbz#642393)
    Thanks to Thomas Graf for the patch
  - init: restore context for save and use /etc/sysconfig for temps (rhbz#644273)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-5
changelog:
  - fixed option parser problem (mark matches with mark options) (rhbz#725879)
    based on upstream commits:
      600f38db82548a683775fd89b6e136673e924097
      59e8114c6792242e80785f4461d5e663fb9a3d64
      d3b2e391e3b944581e20e216af76339cc87d0590
      2d68ae7ce6e40e3977ee11a57296cf76801ae320
      1dc27393b7ba401e6228a5ee2472a6eb72836c43
      1e128bd804b676ee91beca48312de9b251845d09
      fa503ad59f73d20d85f4cdf53324a01d2ad8591e


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-6
changelog:
  - reverted upstream patches, because they are breaking the ABI
  - created new patch based on upstream but without ABI break (rhbz#725879)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-7
changelog:
  - Use alternatives to support other iptables versions for MRG kernels
    (rhbz#747068)
  - Restore sysctl values on service restart (rhbz#800208)
  - Added fallback support in case of error in service start (rhbz#808272)
  - Added AUDIT targets to to man pages (rhbz#809108)
  - Fixed maximum chain name length (rhbz#821441)
  - Added missing dependency for poliycoreutils package (rhbz#836286)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-9
changelog:
  - make alternatives names arch dependant for multilib (rhbz#860148)
  - added virtual provides for base libraries to be able to resolve library file requires


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-10
changelog:
  - New reload action for ip*tables services (rhbz#928812)
    It tries to reload the firewall rules from /etc/sysconfig/ip*tables. If this
    failes, it does not load the fallbacks and the old firewall rules are still
    there.
  - Use /lib*/xtables without version and not linked by alternatives again for 
    compatibility to older versions (rhbz#924362)
    The symlink for /lib*/xtables with the previous version will be cleaned up
    in a pre script.
  - Backport of --queue-bypass (rhbz#845435)
    Thanks to Florian Westphal and kay
  - Make ip*tables-save consistent to man page (rhbz#983198)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-11
changelog:
  - fixed shutdown hang if root filesystem is network based (rhbz#1007632)
    Thanks to Rodrigo A B Freire for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-12
changelog:
  - added ip6t_set (rhbz#1033270)
  - do not block uninstall on a failing alternatives --remove call in preun
    (rhbz#1059214) (rhbz#1070123)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-15
changelog:
  - Add message for init script error returns (rhbz#1081191)
  - Fix rule deletion of ipset matches (rhbz#1081422)
  - Add space after dccp types (rhbz#1084974)
  - Add -C option to check for existing rules (rhbz#1088361)
  - Copy custom plugins for updates from iptables < 1.4.7-10 (rhbz#1088400)
  - Enable the IPv6 set target (rhbz#1161330)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-16
changelog:
  - Fixed ressource leak in libiptc found by coverity (rhbz#1088361)
  - Copy custom plugins also for releases up to 14 (rhbz#1088400)


author: Phil Sutter <psutter@redhat.com> - 1.4.7-17
changelog:
  - Include /etc/sysctl.d when searching for settings to apply (rhbz#1459673)
  - Ignore security table when setting chain policies (rhbz#1210563)


author: Zdenek Prikryl <zprikryl@redhat.com> - 3.0.1-5
changelog:
  - Added support for ipv6 (#200503)
  - Fixed vlan support (#219772)
  - Added support for bond interfaces


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.0.1-12
changelog:
  - add patch 0001-fix-strcpy-overlap-memory.patch
  - Resolves: 595454  - Doesn't detect any ethernet interface


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.0.1-13
changelog:
  - add patch iptraf-3.0.1-strict-aliasing.patch
  - Resolves: #596173 - RPMdiff run failed for package iptraf-3.0.1-11.el6


author: Thomas Woerner <twoerner@redhat.com> 2.2.1-3
changelog:
  - fixed compile problem because of strerror undefined in scope
    Fixes (rhbz#434482)
  - fixed description (rhbz#140516)


author: Jan Synáček <jsynacek@redhat.com> - 20071127-20
changelog:
  - Resolves: #1149574 - Ping produces "WARNING: kernel is not very fresh, upgrade is recommended."
  - Resolves: #829998 - The arping command may have return value of 0.
  - Resolves: #1099426 - Count of "back" is not correct in tracepath
  - Resolves: #1113082 - ping returns odd results with options inet6 in resolv.conf


author: Jan Synáček <jsynacek@redhat.com> - 20071127-22
changelog:
  - Resolves: #1351720 - documentation inconsistency on arping
  - Resolves: #1334775 - backport upstream ping change unmasking signals
  - Resolves: #1298344 - Ping assumes EACCESS errors are due to broadcast addresses


author: Matthias Saou <http://freshrpms.net/> 1.25-1
changelog:
  - Prepare update to 1.25 for when devel will update to kernel 2.6.28.
  - Build require libnl-devel and popt-devel (+ patch to fix popt detection).


author: Matthias Saou <http://freshrpms.net> 1.3-2
changelog:
  - Convert spec file to UTF-8.
  - Remove all symlinks to keep only /lib/firmware like in ipw2200-firmware.


author: Matthias Saou <http://freshrpms.net> 1.3-3
changelog:
  - Move the LICENSE as LICENSE.ipw2100 in the firmware directory to fully
    comply to the Intel redistribution terms and conditions.


author: Matthias Saou <http://freshrpms.net> 1.3-5
changelog:
  - Don't mark the LICENSE in /lib/firmware as %doc since it could be excluded
    when using --excludedocs, symlink a file in %doc to it instead.


author: Matthias Saou <http://freshrpms.net> 3.0-5
changelog:
  - Don't mark the LICENSE in /lib/firmware as %doc since it could be excluded
    when using --excludedocs, symlink a file in %doc to it instead.
  - Remove 2.2 and 2.3 firmwares since only 2.4 and 3.0 are required for FC5+.


author: Matthias Saou <http://freshrpms.net> 3.0-10
changelog:
  - Remove LICENSE file from %doc (was +x), mark the other as %doc (#440553).
  - Remove the included older 2.4 firmware, since 3.0 has been required by all
    kernels for a long while now.


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.4-10
changelog:
  - Minor source hardening (bz 878001)
  - Migrating algorithm fix (bz 1031230)
  - Introducing deepestcache option (bz 1052166)
  - Debug option behavior fix (bz 1096392)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - Unused variable removed (bz 1119404)
  - Warning when started as non-root (bz 749651)
  - More robust signal handling (bz 1158932)
  - Fixed manpage hostname (bz 1162247)
  - Fixed memleak (bz 1178247)
  - Fixed help message typo (bz 1178903)


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - Sync with upstream 2.0.873
  - 854776 Bring up network interface for iSCSI boot with bnx2i
  - 811428 make version string reported by iscsiadm match RPM version
  - fix iscsid segfault during qla4xxx login


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-3
changelog:
  - 831003 boot over VLAN support patches
  - 916007 replace iscsiuio with code merged upstream 0.7.8.1b
  - 884427 fix for db errors when vdsm creates static entries for
           target portals already setup through discovery
  - 983553 run target refresh in parallel so unreachable doesn't block others


author: Andy Grover <agrover@redhat.com> - 6.2.0.873-6
changelog:
  - Update bnx2i-vlan-boot-support.patch to check session != NULL
    before calling iscsi_sysfs_read_iface


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - 1054587 iscsiuio update
  - 1053374 upstream backports to support new driver features
  - 1052361 IPC sockaddr compat to communicate with older iscsid on upgrade
  - 1076344 fix handling of multiple oustanding async events


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.36
changelog:
  - 740054 sync iscsiuio to 0.7.2.1
  - 790609 Add ping and host chap support to iscsiadm
  - 636013 scalability testing.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.37
changelog:
  - 805467 Have iscsistart/iscsiadm bring up offload net interface.
  - 796574 Fix port handling when hostnames are used for portals.
  - 739843 Fix default iface setup handling.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.40
changelog:
  - 738192 Fix regression added when handling 738192 where unknown params
    messages got logged by mistake.


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-15
changelog:
  - 1125984 iscsistart vlan support
  - 906242 fix segfault from unexpected netlink event during driver load
  - 1181463 iscsiuio update


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1294965 iscsiuio match based on driver to support new hardware without
    adding PCI IDs (still need IDs added to kernel)
  - bnx2i pass through ping support


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-27
changelog:
  - 1170750 apply "Set non negotiated params early" from upstream
    to fix SendTargets discovery over iSER with some targets


author: Jeremy Katz <katzj@redhat.com> - 1:1.0.4-1
changelog:
  - Add man pages from Ryan Finnie (ryan AT finnie DOT org)
  - Use popt in checkisomd5 (Ryan Finnie)
  - Fix verbose/gauge interactions (Ryan Finnie)
  - A few other little janitorial things (Ryan Finnie)


author: Radek Vykydal <rvykydal@redhat.com> - 1:1.0.6-1
changelog:
  - Add abort check feature (dpierce, rvykydal)
    Resolves: rhbz#555107
  - Remove output to stderr from library (bcl)
    Resolves: rhbz#586339
  - Use separate return value for image not found (bcl)
    Resolves: rhbz#586351


author: John W. Linville <linville@tuxdriver.com> - 39.31.5.1-1
changelog:
  - Update for upstream version 39.31.5.1
  - Add logic to preserve version 128.50.3.1 for use by older kernels
  - Add Epoch tag to account for Intel's bizarre release numbering


author: Matthias Saou <http://freshrpms.net> 2.14.4-1
changelog:
  - Rename package from iwlwifi-firmware to iwlwifi-3945-firmware.
  - Add provides and obsoletes.
  - Fix description to reference the right LICENSE file name.
  - Change from using dos2unix to chmod/sed/touch, preserve timestamps on docs.


author: Matthias Saou <http://freshrpms.net> 15.28.2.8-1
changelog:
  - Update to 15.28.2.8.
  - Keep both 2.14.4 (iwlwifi-3945.ucode) and 2.14.1.5 (iwlwifi-3945-1.ucode) as
    the new 15.28.2.8 is now iwlwifi-3945-2.ucode.


author: John W. Linville <linville@tuxdriver.com> - 41.28.5.1-2
changelog:
  - need to keep old firmware version available for kernels that need it
  - use available macros for standard packaging-related commands


author: Andy Shevchenko <andy@smile.org.ua> 0.109.2-2
changelog:
  - apply patch to be work on ppc64 (#451531)
  - update README.Fedora to describe integration jack with pulseaudio (#455193)


author: Andy Shevchenko <andy@smile.org.ua> 0.109.2-3
changelog:
  - add a new requirement to be ensure we have /etc/security for postinstall
    script (#359291, #456830)
  - provide a pulseaudio start script from README.Fedora
  - append values for pulse-rt group to the limits.conf
  - update README.Fedora regarding to the recent changes


author: Andy Shevchenko <andy@smile.org.ua> - 0.116.1-5
changelog:
  - create file under /etc/security/limits.d instead of limits.conf hack (#506583)
  - rename jack-audio-connection-kit.pa to jack.pa in the documentation part


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.116.2-8
changelog:
  - update to 0.116.2
  - make sure we cleanup threads that we open, fixes segfaults (thanks to Ray Strode)


author: Andy Shevchenko <andy@smile.org.ua> - 0.118.0-1
changelog:
  - update to 0.118.0 (should fix #533419)
  - remove upstreamed patch
  - append new binaries to -example-clients subpackage


author: Ondrej Vasik <ovasik@redhat.com> 3.13-1
changelog:
  - update to latest upstream version( 3.13)
  - removed jadetex-3.12-theta.patch(included in 3.13)
  - added small typo fix from upstream


author: Ondrej Vasik <ovasik@redhat.com> 3.13-2
changelog:
  - removed TeXdir macro, replaced by /usr(in fact by other
    rpm macros)
  - used texcongig-sys rehash instead of texhash
  - added documentation html file
  - dist tag, license fix


author: David Walluck <dwalluck@redhat.com> 0:1.7.0-8.jpp5
changelog:
  - fix duplicate files
  - correctly unpack sources
  - remove spurious gnu-crypto requirement
  - remove spurious javadoc package requirements
  - fix javadoc directory
  - fix build-classpath call
  - use macros


author: Devrim GUNDUZ <devrim@commandprompt.com> - 0:3.2.1-1
changelog:
  - Updated to 3.2.1
  - Updated patch #1 and #4
  - Own %dir /usr/lib64/gcj/jakarta-commons-collections, per #473612.


author: Deepak Bhole <dbhole@redhat.com> - 1:1.0.1-6jpp.1
changelog:
  - Added missing requirements
  - Fixed bug that cause post/postun to not run when built with --with native


author: James Ralston <ralston at pobox.com> - 1:1.0.1-6jpp.3
changelog:
  - update License tag to reflect new acceptable licenses
  - update main Group tag (old value "System/Boot" is invalid)
  - update jsvc Group tag as well
  - update javadoc Group tag as well
  - building jsvc is no longer mutually exclusive with building javadoc
  - jsvc is built by default (use "--without native" to disable)
  - build jsvc man page from DocBook source via xmlto; install
  - move jsvc from sbindir to bindir (man page is section 1)


author: Matt Wringe <mwringe@redhat.com> 0:1.2.1-10jpp.1
changelog:
  - Merger with newest jpp version
  - Fix rpmlint issues
  - Disable testThreaded for now as it will sometimes fail


author: Vivek Lakshmanan <vivekl at redhat.com> - 0:1.7-5jpp.3
changelog:
  - Update component-info.xml to add scm and tag attribute instead of a comment
  - Remove the export of a versioned jar


author: Matt Wringe <mwringe at redhat.com> - 1:0:3-4jpp.1
changelog:
  - Merge with upstream version
   - Add missing javadoc post and postun
   - Add missing javadoc requires


author: Fernando Nasser <fnasser@redhat.com> - 1:0.4-2jpp
changelog:
  - Remove distribution and vendor tags
  - Fix empty post postun messages
  - Use spaces and no tabs all over


author: Fernando Nasser <fnasser@redhat.com> - 0:1.0-18.1
changelog:
  - Merge with upstream for:
    Add pom and depmap fragment
    Removal of ghost symlink
    Some spec file cleanups
  - Build without AOT compilation


author: Jason Corley <jason.corley@gmail.com> 1:1.3-8jpp
changelog:
  - update copyright to contain current year
  - rebuild on RHEL4 to avoid broken jar repack script in FC6


author: Matt Wringe <mwringe@redhat.com> 0:1.3-9jpp.1
changelog:
  - Merge with updated jpp version
  - Updated commons-build, no longer need patchs to get around local
    building.


author: Fernando Nasser <fnasser.redhat.com> 2.0.8-3jpp
changelog:
  - Add AOT bits
  - Fix javadoc unversioned link handling
  - Add requires for post/postun javadoc sections added above


author: Michal Srb <msrb@redhat.com> - 0:1.1.1-11.6
changelog:
  - Prevent XXE and RCE in JSTL XML tags
  - Apply correction for previous CVE-2015-0254 patch (prevent XXE in <x:transform>)
  - Resolves: CVE-2015-0254


author: Rex Dieter <rdieter@fedoraproject.org> - 1.900.1-13
changelog:
  - CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
  - CVE-2008-3522 jasper: possible buffer overflow in 
    jas_stream_printf() (#461478)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.1
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171208)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.2
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173566)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173566)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.3
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183671)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183679)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-17
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171209)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-18
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173567)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173567)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-19
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-20
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with newer tarball, including 6763122 fix for TCK regression.
  - Use release + 1 to avoid having a lower version than the 6.7 version.
  - Resolves: rhbz#1271928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.5
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.0
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Add RHEL version of b40 tarball.
  - Require mailcap at build time as well, so configure finds /etc/mime.types (PR2800)
  - Remove unneeded dependency on jakarta-commons-logging, as VisualVM is no longer included.
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.2
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: CloudLinux Packaging Team <packager@cloudlinux.com> 0:1.6.0.39-1.cloudlinux
changelog:
  - 1.6.0.39
  - demo and sample files now released separately upstream and not included in this package


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.16.0
changelog:
  - Bump to 2.6.16 and u201b00.
  - Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.17pre01.0
changelog:
  - Bump to 2.6.17pre01.
  - Add support for icedtea_snapshot so we can build pre-releases.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.0
changelog:
  - Bump to 2.6.17.
  - Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
  - Resolves: rhbz#1661577


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.7.0.211-2.6.17.1
changelog:
  - Produce debug symbols for libpulse-java.so
  - Set IT_CFLAGS=-g so that debug symbols for the pulse audio
  - native library are being produced. This is needed to fix
  - rpmdiff errors of missing .debug_info in pulse-java.so.debug.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.231-2.6.19.0
changelog:
  - Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
  - Fix fsg.sh to fail if patching fails.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.0
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Drop JDK-8226318/RH1738637 which is now included upstream.
  - Resolves: rhbz#1753423


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.7.0.351-2.6.28.0.tuxcare.els1
changelog:
  - Bump to 2.6.28 and OpenJDK 7u351-b01.
  - Security fixes in 7u351:
   - CVE-2022-21540: Improve class compilation (JDK-8281859)
   - CVE-2022-21541: Enhance MethodHandle invocations (JDK-8281866)
   - CVE-2022-34169: Improve Xalan supports (JDK-8285407)
  - Security fixes in 7u341:
   - CVE-2022-21426: Better XPath expression handling (JDK-8270504)
   - CVE-2022-21434: Better invocation handler handling (JDK-8277672)
   - CVE-2022-21443: Improved Object Identification (JDK-8275151)
   - CVE-2022-21476: Improve Santuario processing (JDK-8278008)
   - CVE-2022-21496: Improve URL supports (JDK-8278972)
  - Security fixes in 7u331:
   - CVE-2022-21248: Enhance cross VM serialization (JDK-8264934)
   - CVE-2022-21282: Better resolution of URIs (JDK-8270492)
   - CVE-2022-21283: Better String matching (JDK-8268813)
   - CVE-2022-21293: Improve String constructions (JDK-8270392)
   - CVE-2022-21294: Enhance construction of Identity maps (JDK-8270416)
   - CVE-2022-21296: Improve SAX Parser configuration management (JDK-8270498)
   - CVE-2022-21299: Improved scanning of XML entities (JDK-8270646)
   - CVE-2022-21305: Better array indexing (JDK-8272014)
   - CVE-2022-21340: Verify Jar Verification (JDK-8272026)
   - CVE-2022-21341: Improve serial forms for transport (JDK-8272236)
   - CVE-2022-21349: Improve Solaris font rendering (JDK-8273748)
   - CVE-2022-21360: Enhance BMP image support (JDK-8273756)
   - CVE-2022-21365: Enhanced BMP processing (JDK-8273838)
  - Security fixes in 7u321:
   - CVE-2021-35550: Update the default enabled cipher suites preference
     (JDK-8163326)
   - CVE-2021-35556: Richer Text Editors (JDK-8265167)
   - CVE-2021-35559: Enhanced style for RTF kit (JDK-8265580)
   - CVE-2021-35561: Better hashing support (JDK-8266097)
   - CVE-2021-35564: Improve Keystore integrity (JDK-8266137)
   - CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close
     (JDK-8254967)
   - CVE-2021-35586: Better BMP support (JDK-8267735)
   - CVE-2021-35588: InnerClasses: VM permits wrong Throw ClassFormatError if
     InnerClasses attribute's inner_class_info_index is 0 (JDK-8130183)
   - CVE-2021-35603: Better session identification (JDK-8269618)
  - Security fixes in 7u311:
   - CVE-2021-2341: Improve file transfers (JDK-8258432)
   - CVE-2021-2369: Better jar file validation (JDK-8260967)
   - CVE-2021-2432: Provide better LDAP provider support (JDK-8267412)
  - Security fixes in 7u301:
   - CVE-2021-2161: Less ambiguous processing (JDK-8250568)
   - CVE-2021-2163: Enhance opening JARs (JDK-8249906)
  - Security fixes in 7u281:
   - CVE-2020-14779: Enhance support of Proxy class (JDK-8236862)
   - CVE-2020-14781: Enhanced LDAP contexts (JDK-8237990)
   - CVE-2020-14782: Enhance certificate processing (JDK-8237995)
   - CVE-2020-14792: Better range handling (JDK-8241114)
   - CVE-2020-14796: Improved URI Support (JDK-8242680)
   - CVE-2020-14797: Better Path Validation (JDK-8242685)
   - CVE-2020-14798: Enhanced buffer support (JDK-8242695)
   - CVE-2020-14803: Improved Buffer supports (JDK-8244136)
  - Security fixes in 7u271:
   - CVE-2020-14577: Enhance certificate verification (JDK-8237592)
   - CVE-2020-14578: NegativeArraySizeException in
     sun.security.util.DerInputStream.getUnalignedBitString() (JDK-8028591)
   - CVE-2020-14579: NullPointerException in DerValue.equals(DerValue)
     (JDK-8028431)
   - CVE-2020-14581: Better matrix operations (JDK-8238002)
   - CVE-2020-14583: Better Buffer support (JDK-8238920)
   - CVE-2020-14593: Less Affine Transformations (JDK-8240119)
   - CVE-2020-14621: Better XML namespace handling (JDK-8242136)
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Update NEWS from IcedTea
  - Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after
    bump OpenJDK version


author: Paul Howarth <paul@city-fan.org> - 1:1.7.0.2-1.0.cf
changelog:
  - update to 1.7.0.2
    - new JVM (Java HotSpot Virtual Machine, version 22) that improves
      reliability and performance
    - support for Firefox 5 and later
    - JavaFX is included with Java SE
  - update tzupdater to 1_3_45-2011n
  - demo and sample files now released separately upstream and not included in
    this package


author: Paul Howarth <paul@city-fan.org> - 1:1.7.0.4-1.0.cf
changelog:
  - update to 1.7.0.4
    - new JVM (Java HotSpot Virtual Machine, version 23)
    - new supported garbage collector: Garbage First (G1)
    - JavaFX 2.1 Runtime co-installs with JRE 7 during auto-update
    - JAXP upgraded to 1.4.6
    - Java DB upgraded to 10.8.2.2
    - new flag to unlock commercial features


author: Paul Howarth <paul@city-fan.org> - 1:1.7.0.6-1.0.cf
changelog:
  - update to 1.7.0.6
    - JavaFX SDK and JavaFX Runtime included
    - Java Access Bridge included
    - alternative hash function (disabled by default)
    - changes to Security Warning dialog box for trusted signed and self signed
      applications
  - update tzupdater to 1_3_48-2012d


author: Paul Howarth <paul@city-fan.org> - 1:1.7.0.6-1.1.cf
changelog:
  - filter ffmpeg dependencies added by JavaFX runtime; the runtime can use
    either libavcodec.so.52 or libavcodec.so.53 (same for libavformat), but this
    cannot easily be captured as RPM dependencies - if you need the JavaFX
    runtime, install the appropriate ffmpeg package for your OS


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Require tzdata 2020a so system tzdata matches resource updates in b07
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b09.
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u265-b01.
  - Update release notes for 8u265 release.
  - Resolves: rhbz#1860462


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b09 (EA).
  - Switch to EA mode.
  - Add debugging output for build.
  - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default.
  - Update tarball generation script to use PR3795, following inclusion of JDK-8177334
  - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Resolves: rhbz#1895064


author: Nikita Ivanov <nivanov@cloudlinux.com> - 1:1.8.0.332.b09-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u332-b09. That fixes following CVEs:
  - CVE-2022-21476: Defective secure validation in Apache Santuario
  - CVE-2022-21496: URI parsing inconsistencies
  - CVE-2022-21434: Improper object-to-string conversion in AnnotationInvocationHandler
  - CVE-2022-21426: Unbounded memory allocation when compiling crafted XPath expressions
  - CVE-2022-21443: Missing check for negative ObjectIdentifier
  - Remove patch files from previous change due to their presence in newer versions


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.342.b07-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u342-b07. That fixes following CVEs:
  - CVE-2022-34169: Integer truncation issue in Xalan-J
  - CVE-2022-21540: Class compilation issue
  - CVE-2022-21541: Improper restriction of MethodHandle.invokeBasic()
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Remove patch for MakeBase.gmk cause issue was fixed in sources
  - Correct parameters passing to CheckVendor test


author: Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 1:1.8.0.362.b09-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u362-b09. That fixes following CVEs:
  - CVE-2023-21830: Improper restrictions in CORBA deserialization (Serialization, 8285021)
  - CVE-2023-21843: Soundbank URL remote loading (Sound, 8293742)
  - Update tzdata requirement to 2022g to match JDK-8297804
  - Remove patches which are in upstream now
  - Remove the obsolete rh1163501 patch


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.372.b07-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u372-b07. That fixes following CVEs:
  - CVE-2023-21930: Improper connection handling during TLS handshake (8294474)
  - CVE-2023-21937: Missing string checks for NULL characters (8296622)
  - CVE-2023-21938: Incorrect handling of NULL characters in ProcessBuilder (8295304)
  - CVE-2023-21939: Swing HTML parsing issue (8296832)
  - CVE-2023-21954: Incorrect enqueue of references in garbage collector (8298191)
  - CVE-2023-21967: Certificate validation issue in TLS session negotiation (8298310)
  - CVE-2023-21968: Missing check for slash characters in URI-to-path conversion (8298667)
  - Update tzdata requirement to 2023c to match JDK-8305113
  - Include JDK-8271199 fix from the upcoming jdk8u382 in advance
  - Remove patches which are not used


author: Dmitriy Popov <dpopov@cloudlinux.com> - 1:1.8.0.382.b05-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u382-b05. That fixes following CVEs:
  - CVE-2023-22045: Array indexing integer overflow issue. (8304468)
  - CVE-2023-22049: Improper handling of slash characters in URI-to-path conversion (8305312)
  - Remove patch for pkcs11 cause issue was fixed in sources


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u402-b06. That fixes following CVEs:
  - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler
  - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution
  - CVE-2024-20921: Range check loop optimization issue
  - CVE-2024-20926: Arbitrary Java code execution in Nashorn
  - CVE-2024-20945: Logging of digital signature private keys
  - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS
  - CVE-2023-22067: IOR deserialization issue in CORBA (fixed in jdk8u392)
  - CVE-2023-22081: Certificate path validation issue during client authentication (fixed in jdk8u392)
  - Adapt pr2462 patch to the new sources


author: Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1
changelog:
  - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs:
  - CVE-2024-21131: UTF8 size overflow
  - CVE-2024-21138: Infinite loop vunlerability in SymbolTable
  - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE)
  - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time
  - CVE-2024-21145: Out-of-bounds access in MaskFill
  - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)


author: Matthew Wringe <mwringe at redhat.com> - 0:4.0-3jpp_1fc
changelog:
  - Merged with upstream version
  - Changed directory locations to rpm macros
  - Added conditional native compiling


author: Jerry James <loganjerry@gmail.com> - 0:4.1-0.1
changelog:
  - Update to 4.1
  - Also ship the jjrun script
  - Own the appropriate gcj directory
  - Minor spec file changes to comply with latest Fedora guidelines
  - Include the top-level index.html file in the manual


author: Matt Wringe <mwringe@redhat.com> - 0:4.1-0.2
changelog:
  - Update to remove packaged jars in source tar
  - Build with bootstrap jar so that required java source 
    files get generated


author: Andrew Overholt <overholt@redhat.com> 3.9.0-6
changelog:
  - Add ability to build with ant and not maven
  - Remove maven2-plugin-release BR (part of maven2 now)


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Andrew Overholt <overholt@redhat.com> 0:2.9-1.2
changelog:
  - Fix mixed tabs and spaces
  - Remove spurious post/postun Requires
  - Add cleaning of buildroot to beginning of %install and remove from
    beginning of %prep
  - Fix Group tags
  - Install unversioned javadoc (Alex Kurtakov)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.0-1
changelog:
  - New upstream release
  - Updated no_pprof patch to match new release
  - Updated s390 patch to match new relase
  - Added make check
  - Added new script jemalloc.sh
  - Added a patch for atomic operations on epel5/ppc


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.5.1-1
changelog:
  - New upstream release
  - Updated nopprof patch to match new release
  - Fixed a few bogus changelog entries


author: Matt Wringe <mwringe@redhat.com> - 0:1.3.5-2jpp.1
changelog:
  - Remove javadoc post and postun sections due to new jpp standard 
  - Update makefile patch to compress jar
  - Fix rpmlint issues


author: Matt Wringe <mwringe@redhat.com> - 0:1.3.5-2jpp.2
changelog:
  - Add patches jflex-CharSet_java.patch and jflex-StateSet_java.patch
    to allow building with the new gcj


author: Andrew Overholt <overholt@redhat.com> 0:1.2.6-9.5
changelog:
  - Fix Group tags
  - Remove ghost symlinking in %post{,un}
  - Add cleaning of buildroot in %install
  - Remove dot in javadoc Summary
  - Fix URL for Source0
  - Fix mixed tabs and spaces


author: Orion Poplawski <orion@cora.nwra.com> - 0:1.7.5-3.8
changelog:
  - Add Requires: coreutils because we provide scripts that are being executed
    in rpm %post scriptlets that require it.


author: Matthias Saou <http://freshrpms.net/> 1.70-1
changelog:
  - Update to 1.7.0, as 1.70 to avoid introducing an epoch for now...
  - Remove no longer provided perlconnect parts.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.70-8
changelog:
  - Reformat spec with tabs.
  - By report of Thomas Sondergaard (BZ#511162) Add -DXP_UNIX=1 -DJS_THREADSAFE=1 flags and nspr requires into libjs.pc


author: Tomas Heinrich <theinric@redhat.com> - 0.11-9
changelog:
  - initial import
    - disable building of a debuginfo package - works around rhbz 903009
    - add a workaround for disabling rpath
    - disable paralel build
    - disable 'check' section for now
    resolves: #966964


author: Sébastien Willmann <sebastien.willmann@gmail.com> - 0.6.0-0.11.rc2
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=998149 : applied Michael Schwendt's
    patch to fix duplicated documentation


author: Christina Fu <cfu@redhat.com> - 4.2.6-11
changelog:
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 661142 - <cfu@redhat.com>
    Verification should fail when a revoked certificate is added


author: Jack Magne <jmagne@redhat.com> - 4.2.6-16
changelog:
  - bug 694661 - TKS instance crash during token enrollment.
    Back out of previous patch for #676083.


author: Christina Fu <cfu@redhat.com> - 4.2.6-17
changelog:
  - Bug 670980 - Cannot create system certs when using LunaSA HSM in FIPS Mode
    and ECC algorithms (support tokens that don't do ECDH)


author: Christina Fu <cfu@redhat.com> - 4.2.6-21
changelog:
  - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - support for PKCS5v2; support for secure PKCS12
  - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
    in-place upgrade( CS 8.0->8.1)


author: Christina Fu <cfu@redhat.com> - 4.2.6-23
changelog:
  - Bugzilla Bug #804838 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #797352 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #797353 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1190302 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1190303 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #1167470 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 3.8.2-3jpp.1
changelog:
  - Committed on behalf of Tania Bento <tbento@redhat.com>
  - Update per Fedora review process
  - Resolves rhbz#225954


author: Ralph Apel <r.apel@r-apel.de> - 0:4.3.1-3jpp
changelog:
  - build and upload noarch packages
  - Add pom and depmap frag
  - BR java-devel = 1.5.0
  - Restore Vendor, Distribution from macros


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-10
changelog:
  - Close config file descriptor when finished reading the config file
  - Add support for ENUM domains into jwhois.conf
    Resolves: #465182


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-12
changelog:
  - Large jwhois.conf update
    Resolves: #48677{3,4,5,6,8}, #48678{0,2-9}, #48679{0-9}
    Resolves: #48680{0-3}, #48682{2,3,7}, #48683{0,2-5,7-9}
    Resolves: #48684{0,2,3,5,7,8}, #48685{0,3,7}, #486862


author: Robert Scheck <robert@fedoraproject.org> - 4.0-17
changelog:
  - Update jwhois.conf for .edu.ar, .bs, .by, .dk, .name, .ng, .ps,
    .sg, .sl, .sv, .co.zw domains and handles from .name and .aero


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-19
changelog:
  - Fix IDN encoding failed with error code 5
    Resolves: #682832
  - Update jwhois.conf for dotEmarat extension
    Resolves: #664449


author: Rex Dieter <rdieter@fedoraproject.org> - 0:1.0.5-5
changelog:
  - resurrect -devel (!=f9), grow -libs (f10+, #341651)
  - avoid auto*foo
  - fix build on rawhide (libdvdread header changes)
  - conditionalize i18n bits


author: Radek Novacek <rnovacek@redhat.com> 1:1.0.5-12
changelog:
  - Added "-fno-strict-aliasing" flag
  - Added missing % to the summary of k3b-common
  - Resolves: #596179


author: Akira TAGOH <tagoh@redhat.com> - 2.3-4
changelog:
  - Remove .desktop file since it's accessible from scim-panel and it's not
    necessarily used for every users, particularly on Live. (#439173)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15-4
changelog:
  - Merge review (drop Provides/Obsoletes, change Prereq to Requires,
    add URL, convert ChangeLog to utf-8, replace locale destination
    with macro, add COPYING and add dvorak documentation)
    Resolves: #225958


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-2
changelog:
  - Resolves: #605063 - RPMdiff run failed for package kcoloredit-4.3.3-1.el6
    (create a noarch doc subpackage to fix multilib issues)


author: Than Ngo <than@redhat.com> - 4.3-15.2
changelog:
  - drop KPackageKit for RHEL
  - use default ksplash, default.jpg as wallpaper and oxygen-air as kdm theme


author: Than Ngo <than@redhat.com> - 4.3.4-5
changelog:
  - Resolves: bz#692737, hidde Network Settings in Control Center
  - Resolves: bz#587904, add missing hicolor icons


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.3-3
changelog:
  - allow 'Open Folder in Tabs' in Konsole to support SSH bookmarks (kde#177637)
    (upstream patch backported from 4.4)


author: Than Ngo <than@redhat.com> - 6:4.3.4-5
changelog:
  - Resolves: bz#631481, Undecodable sequence message starting konsole
  - Resolves: bz#609039, Password & User account becomes non responding


author: Than Ngo <than@redhat.com> - 6:4.3.4-6
changelog:
  - Resolves: bz#608007, "Show menu bar" is always checked
  - Resolves: bz#729307, not possible to set default konsole size


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-7
changelog:
  - Resolves: bz#895364 - konsole's zmodem file transfer is not working
  - Resolves: bz#988464 - KDE konsole minimised on taskbar hangs upon close


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-8
changelog:
  - Resolves: bz#1069065 - konsole cuts off descenders of characters
  - Resolves: bz#1230656 - konsole can SEGV when resized


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-9
changelog:
  - Resolves: bz#1279151 - System wide plasma-desktop-appletsrc settings not reflected in user profile


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3:4-7
changelog:
  - Resolves: bz#1305833 - System wide plasma-desktop-appletsrc settings not reflected in user profile


author: Than Ngo <than@redhat.com> - 4.3.4-6
changelog:
  - backport patch from stable branch
    fix kde#210463, Don't watch subdirs for changes unless they've been listed.


author: Than Ngo <than@redhat.com> - 4.3.4-9
changelog:
  - Resolves: bz#607100, Requires: hal-storage-addon 
  - Resolves: bz#597271, drop WebKit support in Qt


author: Than Ngo <than@redhat.com> - 4.3.4-22
changelog:
  - Resolves: bz#666295, Missing help page(s) for Plasma workspace
  - Resolves: bz#587917, gnome/kde system monitor tool use same icon


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-30
changelog:
  - Make sure all windows are properly closed and removed from the task manager applet
    Resolves: bz#1027703


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-37
changelog:
  - Add explicit dependency for KDM subpackage to require -libs subpackage
    at the same version
    Resolves: bz#1304735


author: Than Ngo <than@redhat.com> - 6:4.3.4-15
changelog:
  - Resolves: bz#587016, print dialogue does not remember previous settings
  - Resolves: bz#682611, Konqueror splash page in zh_TW is wrong
  - Resolves: bz#734734, plasma eating up cpu-time when systemtray some icon
  - Resolves: bz#826114, konqueror crash when trying to add "Terminal Emulator" to main menu bar


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1206180 - Opening a terminal in Konqueror / Dolphin does not 
    inherit environment variables


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1088925 - Opening a terminal in Konqueror / Dolphin does not 
    inherit environment variables


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1088925 - Opening a terminal in Konqueror / Dolphin does not
    inherit environment variables


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-24
changelog:
  - Resolves: rhbz#1241170 - KDE wallpaper change requiring reboot to take affect
  - Resolves: rhbz#1123512 - Clicking 3x in empty kwrite window causes segfault


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-25
changelog:
  - Resolves: rhbz#1105072 - kbuildsycoca4 goes into infinite recursion while scanning for .desktop file


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-26
changelog:
  - Resolves: rhbz:623642 - do not crash konqueror on specific HTML content
  - Resolves: rhbz:1104205 - meinproc4 does not replace entities after libxml2 fixes
  - Resolves: rhbz:1279627 - do not crash kdirwatch on re-entrancy from slots


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 3.5.10-13
changelog:
  - fix CVE-2009-2537 - select length DoS
  - fix CVE-2009-1725 - crash, possible ACE in numeric character references
  - fix CVE-2009-1690 - crash, possible ACE in KHTML (<head> use-after-free)
  - fix CVE-2009-1687 - possible ACE in KJS (FIXME: still crashes?)
  - fix CVE-2009-1698 - crash, possible ACE in CSS style attribute handling


author: Than Ngo <than@redhat.com> - 3.5.10-21
changelog:
  - fix security issues in libltdl bundle within kdelibs CVE-2009-3736
  - backport upstream patches
  - patch autoconfigury to build with autoconf >= 2.64 (Stepan Kasal)


author: Than Ngo <than@redhat.com> - 3.5.10-25
changelog:
  - Resolves: bz#681901, drops old Obsoletes/Provides
  - Resolves; bz#734447, use ca-certificates' ca-bundle.crt


author: Jaroslav Reznik <jreznik@redhat.com> - 7:4.3.4-8
changelog:
  - Resolves: #591967,
      CVE-2010-1000, CVE-2010-1511: improper sanitization of metalink 
      attribute


author: Than Ngo <than@redhat.com> 6:4.3.4-6
changelog:
  - Resolves: bz#587895, ark does not seem to have icon on menu
  - Resolves: bz#595784, disable JS / Java / plugins in khtml file preview


author: Ryan O'Hara <rohara@redhat.com> - 1.2.13-1
changelog:
  - Rebase to upstream version 1.2.13
    Resolves: rhbz#1052380, rhbz#1077201, rhbz#1007575, rhbz#967641


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.9.1.el6]
changelog:
  - [md] raid1, raid10: avoid deadlock during resync/recovery. (Dave Wysochanski) [845464 835613]
  - [fs] dlm: fix deadlock between dlm_send and dlm_controld (David Teigland) [849051 824964]
  - [ata] libata: Add space to fix 2GB ATA Flash Disk/ADMA428M blacklist (Prarit Bhargava) [851445 843849]
  - [fs] nfs: nfs_attr_use_mounted_on_file() missing return value (Frantisek Hrbata) [847945 842312]
  - [fs] gfs2: Make gfs2_write_end not dirty the inode with every write (Robert S Peterson) [849551 844814]
  - [net] sched/act_mirred: do not drop packets when fails to mirror it (Jason Wang) [851444 846585]
  - [net] sched: fix race in mirred device removal (Jason Wang) [851444 846585]
  - [net] sched: printk message severity (Jason Wang) [851444 846585]
  - [net] sched: act_mirred cleanup (Jason Wang) [851444 846585]
  - [kernel] sched: Fix signed unsigned comparison in check_preempt_tick() (Frederic Weisbecker) [843102 835797]
  - [netdrv] be2net: reduce gso_max_size setting to account for ethernet header (Ivan Vecera) [842757 834185]
  - [powerpc] Fix wrong divisor in usecs_to_cputime backport (Steve Best) [847727 821374]
  - [fs] procfs: do not confuse jiffies with cputime64_t (Frantisek Hrbata) [847727 821374]
  - [kernel] time: Add nsecs_to_cputime64 interface for asm-generic (Steve Best) [847727 821374]
  - [powerpc] Fix wrong divisor in usecs_to_cputime (Steve Best) [847727 821374]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.10.1.el6]
changelog:
  - [mm] hugetlbfs: close race during teardown of hugetlbfs shared page tables (Rafael Aquini) [857334 856325]
  - [mm] hugetlbfs: Correctly detect if page tables have just been shared (Rafael Aquini) [857334 856325]
  - [kernel] sched: fix divide by zero at {thread_group,task}_times (Stanislaw Gruszka) [856703 843771]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.11.1.el6]
changelog:
  - [net] core: Fix napi_gro_frags vs netpoll path (Amerigo Wang) [857854 845347]
  - [netdrv] benet: disable BH in callers of be_process_mcc() (Amerigo Wang) [857854 845347]
  - [net] bonding: remove IFF_IN_NETPOLL flag (Amerigo Wang) [857854 845347]
  - [mm] fix contig_page_data kABI breakage and related memory corruption (Satoru Moriya) [857012 853007]
  - [net] sctp: backport sctp cache ipv6 source after route lookup (Michele Baldessari) [858284 855759]
  - [net] sctp: backport support of sctp multi-homing ipv6 source address selection (Michele Baldessari) [858284 855759]
  - [net] ipv6: backport RTA_PREFSRC ipv6 source route selection support (Michele Baldessari) [858285 851118]
  - [netdrv] sfc: Fix maximum number of TSO segments and minimum TX queue size (Nikolay Aleksandrov) [845556 845557] {CVE-2012-3412}
  - [s390] zfcp: No automatic port_rescan on events (Hendrik Brueckner) [856316 855131]
  - [fs] xfs: push the AIL from memory reclaim and periodic sync (Dave Chinner) [856686 855139]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.12.1.el6]
changelog:
  - [netdrv] mlx4: check promisc on proper port (Doug Ledford) [858955 854052]
  - [netdrv] mlx4: attach multicast with correct flag (Doug Ledford) [858956 854376]
  - [netdrv] mlx4: remove redundant adding of steering type to gid (Doug Ledford) [859436 854053]
  - [netdrv] Revert: Fix a merge issue (Doug Ledford) [859436 854053]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.13.1.el6]
changelog:
  - [net] sctp: Implement quick failover draft from tsvwg (Neil Horman) [861953 830716]
  - [net] sctp: be more restrictive in transport selection on bundled sacks (Neil Horman) [861953 830716]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.14.1.el6]
changelog:
  - [usb] usbhid: Fix use-after-free in USBHID (James Paradis) [864827 857518]
  - [usb] Add kernel parameter to force io_watchdog for Intel EHCI HCD (James Paradis) [865713 846024]
  - [block] Fix hanging kernel threads in blk_execute_rq() (James Paradis) [865308 855984]
  - [mm] hugetlb: do not use vma_hugecache_offset() for vma_prio_tree_foreach (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugepages: fix use after free bug in "quota" handling (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix pgoff computation when unmapping page from vma (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix ENOSPC returned by handle_mm_fault() (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [fs] gfs2: Write out dirty inode metadata in delayed deletes (Frantisek Hrbata) [859326 748827]
  - [usb] core: Fix device removal race condition (James Paradis) [864821 849188]
  - [mm] x86_32: fix SHLIB_BASE address typo (Aristeu S. Rozanski F) [804955 804956] {CVE-2012-1568}
  - [hid] hidraw: fix window in hidraw_release (Don Zickus) [841824 839973]
  - [hid] hidraw: protect hidraw_disconnect() better (Don Zickus) [841824 839973]
  - [hid] hidraw: remove excessive _EMERG messages from hidraw (Don Zickus) [841824 839973]
  - [hid] hidraw: fix hidraw_disconnect() (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_write (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_ioctl (Don Zickus) [841824 839973]
  - [hid] remove BKL from hidraw (Don Zickus) [841824 839973]
  - [mm] x86_32: randomize SHLIB_BASE (Aristeu Rozanski) [804955 804956] {CVE-2012-1568}
  - [block] fix up use after free in __blkdev_get (Jeff Moyer) [853943 847838]
  - [scsi] remove no longer valid BUG_ON in scsi_lld_busy (Jeff Garzik) [860640 842881]
  - [scsi] fix NULL request_queue in scsi_requeue_run_queue() (Jeff Garzik) [860640 842881]
  - [net] svcrpc: fix BUG() in svc_tcp_clear_pages (J. Bruce Fields) [856106 769045]
  - [scsi] lpfc: Fixed SCSI device reset escalation (Rob Evers) [861390 827566]
  - [scsi] lpfc: Fix abort status (Rob Evers) [861390 827566]
  - [kernel] cgroup: add cgroup_root_mutex (Frederic Weisbecker) [858954 844531]
  - [mm] Hold a file reference in madvise_remove (Jerome Marchand) [849738 849739] {CVE-2012-3511}
  - [base] driver-core: fix device_register race (Rob Evers) [860784 833098]
  - [netdrv] e1000e: drop check of RXCW.CW to eliminate link going up and down (Dean Nelson) [857055 847310]
  - [scsi] be2iscsi: Format the MAC_ADDR with sysfs (Rob Evers) [863147 827594]
  - [usb] usbdevfs: Add a USBDEVFS_GET_CAPABILITIES ioctl (Don Zickus) [841667 828271]
  - [fs] udf: fix retun value on error path in udf_load_logicalvol (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Avoid run away loop when partition table length is corrupted (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Use 'ret' instead of abusing 'i' in udf_load_logicalvol() (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [netdrv] bnx2x: Add remote-fault link detection (Michal Schmidt) [852450 814877]
  - [net] sunrpc: svc_xprt sends on closed socket should stop immediately (J. Bruce Fields) [853257 849702]
  - [mm] Never OOM kill tasks outside of memory cgroup when memory.limit_in_bytes is exceeded by a Transparent Huge Page (Larry Woodman) [860942 811255]
  - [powerpc] pseries: Support lower minimum entitlement for virtual processors (Steve Best) [860165 822651]
  - [usbhid] hiddev: Consolidate device existence checks in hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: Fix race between disconnect and hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: protect against disconnect/NULL-dereference race (Don Zickus) [841824 839973]
  - [crypto] algapi: Move larval completion into algboss (Herbert Xu) [854476 832135]
  - [fs] xfs: disable xfsaild idle mode (Brian Foster) [860787 813137]
  - [fs] xfs: fix the logspace waiting algorithm (Brian Foster) [860787 813137]
  - [fs] xfs: add AIL pushing tracepoints (Brian Foster) [860787 813137]
  - [fs] xfs: force the log if we encounter pinned buffers in .iop_pushbuf (Brian Foster) [860787 813137]
  - [fs] xfs: do not update xa_last_pushed_lsn for locked items (Brian Foster) [860787 813137]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.17.1.el6]
changelog:
  - [mm] Prevent kernel panic in NUMA related system calls after memory hot-add (Larry Woodman) [875382 870350] {CVE-2012-5517}
  - [md] Don't truncate size at 4TB for RAID0 and Linear (Jes Sorensen) [866470 865637]
  - [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [fs] ext4: fix undefined behavior in ext4_fill_flex_info() (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [kernel] sched_rt: Ignore RT queue throttling if idle task has RT policy (Igor Mammedov) [853950 843541]
  - [kernel] sched: Create special class for stop/migrate work (Igor Mammedov) [853950 843541]
  - [net] ipv6: fix overlap check for fragments (Amerigo Wang) [874550 819952] {CVE-2012-4444}
  - [net] ipv6: discard overlapping fragment (Jiri Pirko) [874550 819952] {CVE-2012-4444}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.18.1.el6]
changelog:
  - [scsi] sd: fix crash when UA received on DIF enabled device (Ewan Milne) [876487 865682]
  - [mm] hugetlb: fix non-atomic enqueue of huge page (Rafael Aquini) [876101 869750]
  - [x86] amd_iommu: attach device fails on the last pci device (Don Dutile) [876493 861164]
  - [net] nfs: Fix buffer overflow checking in __nfs4_get_acl_uncached (Frantisek Hrbata) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix the acl cache size calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix range checking in __nfs4_get_acl_uncached and __nfs4_proc_set_acl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: nfs_getaclargs.acl_len is a size_t (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Don't use private xdr_stream fields in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix pointer arithmetic in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Simplify the GETATTR attribute length calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Add the helper xdr_stream_pos (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Don't decode beyond the end of the RPC reply message (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Clean up xdr_set_iov() (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: xdr_read_pages needs to clear xdr->page_ptr (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid beyond bounds copy while caching ACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid reading past buffer when calling GETACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [scsi] ibmvfc: Fix double completion on abort timeout (Steve Best) [876088 865115]
  - [net] core: allocate skbs on local node (Andy Gospodarek) [876491 843163]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.19.1.el6]
changelog:
  - [drm] i915: don't clobber the pipe param in sanitize_modesetting (Frantisek Hrbata) [876549 857792]
  - [drm] i915: Sanitize BIOS debugging bits from PIPECONF (Frantisek Hrbata) [876549 857792]
  - [net] fix divide by zero in tcp algorithm illinois (Flavio Leitner) [871920 866514] {CVE-2012-4565}
  - [fs] xfs: fix reading of wrapped log data (Dave Chinner) [876499 874322]
  - [x86] mm: fix signedness issue in mmap_rnd() (Petr Matousek) [876496 875036]
  - [net] WARN if struct ip_options was allocated directly by kmalloc (Jiri Pirko) [877950 872799]
  - [fs] block_dev: Fix crash when block device is read and block size is changed at the same time (Frantisek Hrbata) [864826 855906]
  - [mm] tracing: Move include of trace/events/kmem.h out of header into slab.c (Jeff Moyer) [864826 855906]
  - [mm] slab: Move kmalloc tracepoint out of inline code (Jeff Moyer) [864826 855906]
  - [netdrv] bnx2x: organize BDs calculation for stop/resume (Frantisek Hrbata) [874022 819842]
  - [netdrv] bnx2x: fix panic when TX ring is full (Michal Schmidt) [874022 819842]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.20.1.el6]
changelog:
  - [scsi] hpsa: Use LUN reset instead of target reset (Tomas Henzl) [884422 875091]
  - [char] tty: Fix possible race in n_tty_read() (Stanislaw Gruszka) [891580 765665]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.21.1.el6]
changelog:
  - [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [888818 829149]
  - [net] bonding: Bonding driver does not consider the gso_max_size setting of slave devices (Ivan Vecera) [886618 883643]
  - [netdrv] tg3: Do not set TSS for 5719 and 5720 (John Feeney) [888215 823371]
  - [kernel] kmod: make __request_module() killable (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] kmod: introduce call_modprobe() helper (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] usermodehelper: implement UMH_KILLABLE (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] usermodehelper: introduce umh_complete(sub_info) (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] call_usermodehelper: simplify/fix UMH_NO_WAIT case (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] wait_for_helper: SIGCHLD from user-space can lead to use-after-free (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [net] sunrpc: Ensure that rpc_release_resources_task() can be called twice (Jeff Layton) [880928 878204]
  - [scsi] qla2xxx: Don't toggle RISC interrupt bits after IRQ lines are attached. (Chad Dupuis) [886760 826565]
  - [kernel] rcu: Remove function versions of __kfree_rcu and offset (Doug Ledford) [880085 873949]
  - [kernel] rcu: define __rcu address space modifier for sparse (Doug Ledford) [880085 873949]
  - [kernel] rcu: Add rcu_access_pointer and rcu_dereference_protected (Doug Ledford) [880085 873949]
  - [kernel] rcu: Add lockdep checking to rhel (Doug Ledford) [880085 873949]
  - [kernel] rcu: Make __kfree_rcu() less dependent on compiler choices (Doug Ledford) [880085 873949]
  - [kernel] rcu: introduce kfree_rcu() (Doug Ledford) [880085 873949]
  - [net] rcu: add __rcu API for later sparse checking (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix AB-BA deadlock when deleting neighbours (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix memory leak in the neigh table deletion flow (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix RCU pointer dereference of wrong object (Doug Ledford) [880085 873949]
  - [misc] Make rcu_dereference_bh work (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Use a private hash table for path lookup in xmit path (Doug Ledford) [880085 873949]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.22.1.el6]
changelog:
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862903 862904] {CVE-2012-4461}
  - [fs] fuse: optimize __fuse_direct_io() (Brian Foster) [865305 858850]
  - [fs] fuse: optimize fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] fuse: use get_user_pages_fast() (Brian Foster) [865305 858850]
  - [fs] fuse: pass iov[] to fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] mm: minor cleanup of iov_iter_single_seg_count() (Brian Foster) [865305 858850]
  - [fs] fuse: use req->page_descs[] for argpages cases (Brian Foster) [865305 858850]
  - [fs] fuse: add per-page descriptor <offset, length> to fuse_req (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_do_ioctl() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_perform_write() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_readpages() (Brian Foster) [865305 858850]
  - [fs] fuse: categorize fuse_get_req() (Brian Foster) [865305 858850]
  - [fs] fuse: general infrastructure for pages[] of variable size (Brian Foster) [865305 858850]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [scsi] have scsi_internal_device_unblock take new state (Frantisek Hrbata) [878774 854140]
  - [scsi] add new SDEV_TRANSPORT_OFFLINE state (Chris Leech) [878774 854140]
  - [kernel] cpu: fix cpu_chain section mismatch (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: Don't modify cpusets during suspend/resume (Frederic Weisbecker) [876090 852148]
  - [kernel] sched, cpuset: Drop __cpuexit from cpu hotplug callbacks (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: adjust when cpu_active and cpuset configurations are updated during cpu on/offlining (Frantisek Hrbata) [876090 852148]
  - [kernel] cpu: return better errno on cpu hotplug failure (Frederic Weisbecker) [876090 852148]
  - [kernel] cpu: introduce cpu_notify(), __cpu_notify(), cpu_notify_nofail() (Frederic Weisbecker) [876090 852148]
  - [fs] nfs: Properly handle the case where the delegation is revoked (Steve Dickson) [846840 842435]
  - [fs] nfs: Move cl_delegations to the nfs_server struct (Steve Dickson) [846840 842435]
  - [fs] nfs: Introduce nfs_detach_delegations() (Steve Dickson) [846840 842435]
  - [fs] nfs: Fix a number of RCU issues in the NFSv4 delegation code (Steve Dickson) [846840 842435]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.8.1.el6]
changelog:
  - [fs] raw: don't call set_blocksize when not changing the blocksize (Jeff Moyer) [951406 909482]
  - [x86] Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [952570 876275]
  - [netdrv] ixgbe: Only set gso_type to SKB_GSO_TCPV4 as RSC does not support IPv6 (Michael S. Tsirkin) [927292 908196]
  - [netdrv] bnx2x: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] qlcnic: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] ixgbe: fix gso type (Michael S. Tsirkin) [927292 908196]
  - [fs] gfs2: Allocate reservation structure before rename and link (Robert S Peterson) [924847 922999]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.9.1.el6]
changelog:
  - [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
  - [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
  - [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
  - [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
  - [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
  - [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
  - [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
  - [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
  - [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
  - [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
  - [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
  - [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
  - [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
  - [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
  - [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
  - [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
  - [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
  - [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
  - [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
  - [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
  - [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
  - [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
  - [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
  - [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
  - [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
  - [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
  - [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.10.1.el6]
changelog:
  - [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
  - [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
  - [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
  - [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
  - [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
  - [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
  - [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
  - [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
  - [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
  - [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
  - [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
  - [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
  - [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
  - [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
  - [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
  - [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
  - [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
  - [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
  - [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
  - [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.11.1.el6]
changelog:
  - [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.12.1.el6]
changelog:
  - [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
  - [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
  - [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
  - [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
  - [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
  - [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
  - [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.13.1.el6]
changelog:
  - [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
  - [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
  - [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
  - [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
  - [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
  - [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [963564 886420]
  - [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [963564 886420]
  - [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [963564 886420]
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
  - [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
  - [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
  - [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
  - [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
  - [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
  - [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
  - [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
  - [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
  - [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
  - [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
  - [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
  - [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
  - [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.15.1.el6]
changelog:
  - [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
  - [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
  - [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
  - [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
  - [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
  - [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
  - [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.16.1.el6]
changelog:
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559]
  - [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
  - [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
  - [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.17.1.el6]
changelog:
  - [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
  - [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
  - [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.18.1.el6]
changelog:
  - [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
  - [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
  - [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
  - [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
  - [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
  - [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
  - [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
  - [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
  - [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
  - [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
  - [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
  - [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
  - [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
  - [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
  - [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
  - [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
  - [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
  - [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
  - [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.19.1.el6]
changelog:
  - [fs] gfs2: Reserve journal space for quota change in do_grow (Robert S Peterson) [988384 976823]
  - [netdrv] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [995458 988460]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [996014 987426]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.20.1.el6]
changelog:
  - [fs] nfs: Add functionality to allow waiting on all outstanding reads to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Ensure that NFS file unlock waits for readahead to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Convert nfs_get_lock_context to return an ERR_PTR on failure (Dave Wysochanski) [996424 976915]
  - [x86] thermal: Disable power limit notification interrupt (Shyam Iyer) [999328 908990]
  - [x86] thermal: Delete power-limit-notification console messages (Shyam Iyer) [999328 908990]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.21.1.el6]
changelog:
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1000314 947275]
  - [net] sctp: Fix list corruption resulting from freeing an association on a list (Jiri Pirko) [1002184 887868]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.22.1.el6]
changelog:
  - [x86] Round the calculated scale factor in set_cyc2ns_scale() (Prarit Bhargava) [1001954 975507]
  - [x86] sched: Fix overflow in cyc2ns_offset (Prarit Bhargava) [1001954 975507]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.23.1.el6]
changelog:
  - [md] raid1, raid10: use freeze_array in place of raise_barrier in various places (Jes Sorensen) [1003765 997845]
  - [scsi] megaraid_sas: megaraid_sas driver init fails in kdump kernel (Nikola Pajkovsky) [1001963 833299]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (Nikola Pajkovsky) [988228 876778]
  - [net] bridge: Add multicast_querier toggle and disable queries by default (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Fix fatal typo in setup of multicast_querier_expired (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Restart queries when last querier expires (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Add br_multicast_start_querier (Flavio Leitner) [995334 905561]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1006932 1002765]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [1006956 998752]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [993547 867689]
  - [net] bridge: do not call setup_timer() multiple times (Amerigo Wang) [997746 994430]
  - [fs] lockd: protect nlm_blocked list (David Jeffery) [993544 967095]
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Jiri Benc) [987649 987651] {CVE-2013-4162}
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988708 981741]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988708 981741]
  - [fs] cifs: fix issue mounting of DFS ROOT when redirecting from one domain controller to the next (Sachin Prabhu) [994866 976535]
  - [fs] nfs: Make nfs_readdir revalidate less often (Scott Mayhew) [994867 976879]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Scott Mayhew) [994867 976879]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Scott Mayhew) [994867 976879]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Scott Mayhew) [987262 983288]
  - [fs] nfs: fix a leak at nfs_lookup_revalidate() (Dave Wysochanski) [987261 975211]
  - [acpi] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [993547 867689]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [993547 867689]
  - [acpi] Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [993547 867689]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [997745 952012]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [997745 952012]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [997745 952012]
  - [net] bridge: Replace mp->mglist hlist with a bool (Amerigo Wang) [997745 952012]
  - [mm] fadvise: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages (Larry Woodman) [994140 957821]
  - [net] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1003931 955712]
  - [virt] xen-netfront: reduce gso_max_size to account for max TCP header (Andrew Jones) [1004657 957231]
  - [pps] Fix a use-after free bug when unregistering a source (Jiri Benc) [997916 920155]
  - [scsi] fnic: Fix SGEs limit (Chris Leech) [991346 829506]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-355.el6]
changelog:
  - [netdrv] qlge: remove NETIF_F_TSO6 flag (Amerigo Wang) [891839]
  - [fs] ext3: Remove BKL from ext3_put_super() and ext3_remount() (Carlos Maiolino) [885945]
  - [lib] switch the protection of percpu_counter list to spinlock (Carlos Maiolino) [885945]
  - [virt] hv: Add Hyper-V balloon driver (Jason Wang) [885572]
  - [mm] export a function to get vm committed memory (Jason Wang) [885572]
  - [drm] nouveau: extend prevent display switching issues by disabling pageflip (Ben Skeggs) [853226]
  - [netdrv] mlx4: Fix advertisement of wrong PF context behaviour (Alex Williamson) [894060]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-356.el6]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Prarit Bhargava) [890160]
  - [char] ipmi: handle run_to_completion properly in deliver_recv_msg() (Prarit Bhargava) [890160]
  - [usb] xhci: Reset reserved command ring TRBs on cleanup (Don Zickus) [843520]
  - [usb] xhci: handle command after aborting the command ring (Don Zickus) [874541]
  - [usb] xhci: cancel command after command timeout (Don Zickus) [874541]
  - [usb] xhci: add aborting command ring function (Don Zickus) [874541]
  - [usb] xhci: add cmd_ring_state (Don Zickus) [874541]
  - [usb] xhci: Fix Null pointer dereferencing with non-DMI systems (Don Zickus) [874542]
  - [usb] xhci: Intel Panther Point BEI quirk (Don Zickus) [874542]
  - [usb] xhci: Increase XHCI suspend timeout to 16ms (Don Zickus) [874542]
  - [powerpc] Revert: pseries/iommu: remove default window before attempting DDW manipulation (Steve Best) [890454]
  - [serial] 8250_pnp: add Intermec CV60 touchscreen device (Mauro Carvalho Chehab) [894445]
  - [char] ipmi: apply missing hunk from upstream commit 2407d77a (Tony Camuso) [882787]
  - [acpi] Fix broken kernel build if CONFIG_ACPI_DEBUG is enabled (Lenny Szubowicz) [891948]
  - [scsi] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically (Chad Dupuis) [854736]
  - [mm] vmalloc: remove guard page from between vmap blocks (Johannes Weiner) [873737]
  - [mm] vmalloc: vmap area cache (Johannes Weiner) [873737]
  - [fs] vfs: prefer EEXIST to EROFS when creating on an RO filesystem (Eric Sandeen) [878091]
  - [scsi] qla2xxx: change queue depth ramp print to debug print (Rob Evers) [893113]
  - [fs] nfs: Fix umount when filelayout DS is also the MDS (Steve Dickson) [895194]
  - [fs] nfs/pnfs: add set-clear layoutdriver interface (Steve Dickson) [895194]
  - [fs] nfs: Don't call nfs4_deviceid_purge_client() unless we're NFSv4.1 (Steve Dickson) [895194]
  - [fs] nfs: Wait for session recovery to finish before returning (Steve Dickson) [895176]
  - [mm] compaction: validate pfn range passed to isolate_freepages_block (Johannes Weiner) [889456 890498]
  - [drm] nouveau: ensure legacy vga is re-enabled during POST (Ben Skeggs) [625441]
  - [netdrv] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [894344]
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862904] {CVE-2012-4461}


author: Jarod Wilson <jarod@redhat.com> [2.6.32-357.el6]
changelog:
  - [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
  - [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
  - [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
  - [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.1.1.el6]
changelog:
  - [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
  - [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
  - [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
  - [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
  - [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
  - [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
  - [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
  - [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
  - [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
  - [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
  - [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
  - [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
  - [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
  - [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
  - [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
  - [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
  - [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
  - [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
  - [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
  - [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
  - [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
  - [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
  - [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
  - [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.2.1.el6]
changelog:
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.4.1.el6]
changelog:
  - [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [921150 913704]
  - [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921961 896224]
  - [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921961 896224]
  - [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920268 916324]
  - [powerpc] pseries: Fix partition migration hang in stop_topology_update (Steve Best) [921963 910597]
  - [infiniband] qib: correction for faulty sparse warning correction (Jay Fenlason) [922154 901701]
  - [usb] io_ti: Fix NULL dereference in chase_port() (Nikola Pajkovsky) [916198 916200] {CVE-2013-1774}
  - [net] bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Nikola Pajkovsky) [914690 914691] {CVE-2013-0349}
  - [char] tty: set_termios/set_termiox should not return -EINTR (Oleg Nesterov) [921145 904907]
  - [netdrv] ehea: fix VLAN support (Steve Best) [921535 911359]
  - [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919388 919389] {CVE-2013-1826}
  - [net] dccp: check ccid before NULL poiter dereference (Weiping Pan) [919187 919188] {CVE-2013-1827}
  - [mm] tmpfs: fix use-after-free of mempolicy object (Nikola Pajkovsky) [915714 915715] {CVE-2013-1767}
  - [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916957 915135]
  - [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915583 876600]
  - [fs] cifs: after upcalling for krb5 creds, invalidate key rather than revoking it (Niels de Vos) [912452 885899]
  - [fs] cifs: tmp_key_invalidate() should not set key->expiry to 0 (Niels de Vos) [912452 885899]
  - [block] disable discard request merge temporarily (Mike Snitzer) [911475 907844]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.5.1.el6]
changelog:
  - [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [921958 883905]
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_auth() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [fs] nls: improve UTF8 -> UTF16 string conversion routine (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [fs] fat: Fix stat->f_namelen (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [netdrv] tun: fix ioctl() based info leaks (Thomas Graf) [922350 922351] {CVE-2012-6547}
  - [virt] x86: Add a check to catch Xen emulation of Hyper-V (Andrew Jones) [923204 918239]
  - [fs] cifs: fix expand_dfs_referral (Sachin Prabhu) [923098 902492]
  - [fs] cifs: factor smb_vol allocation out of cifs_setup_volume_info (Sachin Prabhu) [923098 902492]
  - [fs] cifs: have cifs_cleanup_volume_info not take a double pointer (Sachin Prabhu) [923098 902492]
  - [fs] nfs: Dont allow NFS silly-renamed files to be deleted, no signal (Dave Wysochanski) [920266 905095]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.6.1.el6]
changelog:
  - [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
  - [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
  - [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
  - [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
  - [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
  - [net] sunrpc: Get rid of the redundant xprt->shutdown bit field (J. Bruce Fields) [915579 893584]
  - [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
  - [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
  - [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
  - [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
  - [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-421.el6]
changelog:
  - [scsi] bnx2fc: Bump version from 1.0.14 to 2.4.1 (Tomas Henzl) [1008733]
  - [scsi] bnx2fc: hung task timeout warning observed when rmmod bnx2x with active FCoE targets (Tomas Henzl) [1008733]
  - [scsi] bnx2fc: Fixed a SCSI CMD cmpl race condition between ABTS and CLEANUP (Tomas Henzl) [1008733]
  - [scsi] cnic: Fix crash in, cnic_bnx2x_service_kcq() (Tomas Henzl) [1004554]
  - [hid] zeroplus: validate output report details (Frantisek Hrbata) [999906] {CVE-2013-2889}
  - [hid] provide a helper for validating hid reports (Frantisek Hrbata) [999906] {CVE-2013-2889}
  - [netdrv] sfc: Add SIOCEFX:EFX_MCDI_REQUEST ioctl to workaround MTD limits (Nikolay Aleksandrov) [1008705]
  - [netdrv] sfc: deny changing of unsupported flags (Nikolay Aleksandrov) [1010840]
  - [kernel] __ptrace_may_access() should not deny sub-threads (Oleg Nesterov) [927360]
  - [tools] perf: Make kmem work for non numa machines (Jiri Olsa) [984788]
  - [powerpc] Bring all threads online prior to migration/hibernation (Steve Best) [1010528]
  - [kvm] introduce guest count uevent (Paolo Bonzini) [1004802]
  - [scsi] iscsi_tcp: consider session state in iscsi_sw_sk_state_check (Chris Leech) [840638]
  - [crypto] ansi_cprng: Fix off by one error in non-block size request (Neil Horman) [1007694] {CVE-2013-4345}
  - [infiniband] cache: don't fill the cache with junk (Doug Ledford) [920306]
  - [usb] core: don't try to reset_device() a port that got just disconnected (Don Zickus) [1000944]
  - [usb] Fix connected device switch to Inactive state (Don Zickus) [1000944]
  - [usb] Don't use EHCI port sempahore for USB 3.0 hubs (Don Zickus) [1000944]
  - [netdrv] macvtap: Ignore tap features when VNET_HDR is off (Vlad Yasevich) [987201]
  - [netdrv] macvtap: Correctly set tap features when IFF_VNET_HDR is disabled (Vlad Yasevich) [987201]
  - [netdrv] macvtap: simplify usage of tap_features (Vlad Yasevich) [987201]
  - [infiniband] mlx4: Use default pkey when creating tunnel QPs (Doug Ledford) [993587]
  - [infiniband] core: Create QP1 using the pkey index which contains the default pkey (Doug Ledford) [993587]
  - [infiniband] ipoib: Make sure child devices use valid/proper pkeys (Doug Ledford) [993587]
  - [infiniband] ipoib: Fix pkey change flow for virtualization environments (Doug Ledford) [993587]
  - [netdrv] igb: don't deprecate the max_vfs parameter (Stefan Assmann) [1005877]
  - [netdrv] igb: Read flow control for i350 from correct EEPROM section (Stefan Assmann) [1005877]
  - [netdrv] igb: Add additional get_phy_id call for i354 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Update version number (Stefan Assmann) [1005877]
  - [netdrv] igb: Implementation to report advertised/supported link on i354 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Get speed and duplex for 1G non_copper devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Support to get 2_5G link status for appropriate media type (Stefan Assmann) [1005877]
  - [netdrv] igb: No PHPM support in i354 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: M88E1543 PHY downshift implementation (Stefan Assmann) [1005877]
  - [netdrv] igb: New PHY_ID for i354 device (Stefan Assmann) [1005877]
  - [netdrv] igb: Implementation of 1-sec delay for i210 devices (Stefan Assmann) [1005877]
  - [netdrv] igb: Don't look for a PBA in the iNVM when flashless (Stefan Assmann) [1005877]
  - [netdrv] igb: Expose RSS indirection table for ethtool (Stefan Assmann) [1005877]
  - [netdrv] igb: Add macro for size of RETA indirection table (Stefan Assmann) [1005877]
  - [netdrv] igb: Fix get_fw_version function for all parts (Stefan Assmann) [1005877]
  - [netdrv] igb: Add device support for flashless SKU of i210 device (Stefan Assmann) [1005877]
  - [netdrv] igb: Refactor NVM read functions to accommodate devices with no flash (Stefan Assmann) [1005877]
  - [netdrv] igb: Refactor of init_nvm_params (Stefan Assmann) [1005877]
  - [netdrv] igb: Update MTU so that it is always at least a standard frame size (Stefan Assmann) [1005877]
  - [netdrv] igb: don't allow SR-IOV without MSI-X (Stefan Assmann) [1005877]
  - [netdrv] igb: Added rcu_lock to avoid race (Stefan Assmann) [1005877]
  - [netdrv] igb: Read register for latch_on without return value (Stefan Assmann) [1005877]
  - [netdrv] igb: Reset the link when EEE setting changed (Stefan Assmann) [1005877]
  - [netdrv] treewide: relase -> release (Stefan Assmann) [1005877]
  - [scsi] iterate over devices individually for /proc/scsi/scsi (David Milburn) [966170]
  - [scsi] zfcp: fix lock imbalance by reworking request queue locking (Mikulas Patocka) [803592]
  - [kernel] pidns: fix two invalid task_active_pid_ns() usages (Aristeu Rozanski) [984597]
  - [netdrv] be2net: implement ethtool set/get_channel hooks (Ivan Vecera) [975885]
  - [netdrv] be2net: refactor be_setup() to consolidate queue creation routines (Ivan Vecera) [975885]
  - [netdrv] be2net: Fix be_cmd_if_create() to use MBOX if MCCQ is not created (Ivan Vecera) [975885]
  - [netdrv] be2net: refactor be_get_resources() code (Ivan Vecera) [975885]
  - [netdrv] be2net: don't limit max MAC and VLAN counts (Ivan Vecera) [975885]
  - [netdrv] be2net: Fixup profile management routines (Ivan Vecera) [975885]
  - [netdrv] be2net: use EQ_CREATEv2 for SH-R (Ivan Vecera) [975885]
  - [netdrv] be2net: delete primary MAC address while unloading (Ivan Vecera) [874733]
  - [netdrv] be2net: use SET/GET_MAC_LIST for SH-R (Ivan Vecera) [874733]
  - [netdrv] be2net: refactor MAC-addr setup code (Ivan Vecera) [874733]
  - [netdrv] be2net: fix pmac_id for BE3 VFs (Ivan Vecera) [874733]
  - [netdrv] be2net: allow VFs to program MAC and VLAN filters (Ivan Vecera) [874733]
  - [netdrv] be2net: fix MAC address modification for VF (Ivan Vecera) [874733]
  - [netdrv] be2net: don't use dev_err when AER enabling fails (Ivan Vecera) [986513]
  - [netdrv] be2net: Clear any capability flags that driver is not interested in (Ivan Vecera) [998856]
  - [net] ethtool: fix RHEL backport of ETHTOOL_RESET (Jiri Benc) [1008678]
  - [net] gact: Fix potential panic in tcf_gact() (Jiri Benc) [1003781]
  - [net] tcp: fix FIONREAD/SIOCINQ (Francesco Fusco) [1001479]
  - [net] vxlan: Avoid creating fdb entry with NULL destination (Amerigo Wang) [923915]
  - [net] bridge: sync the definition of struct br_mdb_entry with upstream (Amerigo Wang) [1010251]
  - [fs] proc/ns: Fix ABI of proc_inode (Thomas Graf) [1005224]
  - [fs] nfs: Fix writeback performance issue on cache invalidation (Scott Mayhew) [1010038]
  - [fs] xfs: switch stacks for bmap btree modifications (Dave Chinner) [918359]
  - [fs] GFS2: Dont flag consistency error if first mounter is a spectator (Robert S Peterson) [997929]
  - [x86] Mark Intel Haswell-EP as supported (Prarit Bhargava) [948339]
  - [s390] tx: allow program interruption filtering in user space (Hendrik Brueckner) [1006523]
  - [tty] hvc_iucv: Disconnect IUCV connection when lowering DTR (Hendrik Brueckner) [1007570]
  - [tty] hvc_console: Add DTR/RTS callback to handle HUPCL control (Hendrik Brueckner) [1007570]
  - [netdrv] bonding: fix bond_arp_rcv setting and arp validate desync state (Nikolay Aleksandrov) [1003697]
  - [netdrv] bonding: fix store_arp_validate race with mode change (Nikolay Aleksandrov) [1003697]
  - [netdrv] bonding: fix set mode race conditions (Nikolay Aleksandrov) [1003697]
  - [bluetooth] rfcomm: Fix info leak in RFCOMMGETDEVLIST ioctl() (Radomir Vrbovsky) [922409] {CVE-2012-6545}
  - [bluetooth] rfcomm: Fix info leak via getsockname() (Radomir Vrbovsky) [922409] {CVE-2012-6545}
  - [mm] mlock: operate on any regions with protection != PROT_NONE (Larry Woodman) [982460]
  - [mm] mlock: avoid dirtying pages and triggering writeback (Larry Woodman) [982460]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-422.el6]
changelog:
  - [fs] fuse: drop dentry on failed revalidate (Brian Foster) [924014]
  - [fs] fuse: clean up return in fuse_dentry_revalidate() (Brian Foster) [924014]
  - [fs] fuse: use d_materialise_unique() (Brian Foster) [924014]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [876275]
  - [hid] pantherlord: heap overflow flaw (Radomir Vrbovsky) [1000435] {CVE-2013-2892}
  - [virt] hv: Correctly support ws2008R2 and earlier (Jason Wang) [1007341]
  - [powerpc] iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table() (Steve Best) [1012666]
  - [powerpc] Add isync to copy_and_flush (Steve Best) [1014475]
  - [block] rsxx: Kernel Panic caused by mapping Discards (Steve Best) [1013728]
  - [kernel] audit: avoid soft lockup due to audit_log_start() incorrect loop termination (Richard Guy Briggs) [990806]
  - [fs] nfsv4: Remove the BUG_ON() from nfs4_get_lease_time_prepare() (Steve Dickson) [1012688]
  - [netdrv] bnx2x: fix loss of VLAN priority information in received TPA-aggregated packets (Michal Schmidt) [1014694]
  - [fs] gfs2: garbage quota usage reported due to uninitialized inode during creation (Abhijith Das) [1008947]
  - [fs] nfs: fix filelayout_commit_call_ops (Scott Mayhew) [1012479]
  - [netdrv] igb: fix driver reload with VF assigned to guest (Stefan Assmann) [985733]
  - [md] Fix bio flags for md raid5 (Jes Sorensen) [837097]
  - [md] Fix bio flags for md raid10 (Jes Sorensen) [837097]
  - [scsi] qla4xxx: 5.03.00.00.06.05-k3 (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Support setting of local CHAP index for flash target entry (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Correct the check for local CHAP entry type (Chad Dupuis) [1011476]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.3p driver release (Rob Evers) [1012961]
  - [scsi] lpfc: Fixed function mode field defined too small for not recognizing dual-chute mode (Rob Evers) [1012961]
  - [net] Revert "net: more accurate skb truesize" (Francesco Fusco) [889181]
  - [net] fix multiqueue selection (Michal Schmidt) [1011939]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-423.el6]
changelog:
  - [kvm] pmu: add proper support for fixed counter 2 (Gleb Natapov) [1000956]
  - [kvm] vmx: do not check bit 12 of EPT violation exit qualification when undefined (Gleb Natapov) [1006139]
  - [kvm] vmx: set "blocked by NMI" flag if EPT violation happens during IRET from NMI (Gleb Natapov) [1006139]
  - [edac] Fix workqueue-related crashes (Aristeu Rozanski) [831127]
  - [edac] amd64_edac: Fix driver module removal (Aristeu Rozanski) [831127]
  - [md] raid5: BIO flags adjust (Jes Sorensen) [837097]
  - [md] Fix skipping recovery for read-only arrays (Jes Sorensen) [1014102]
  - [kernel] audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record (Richard Guy Briggs) [1009386]
  - [kernel] audit: log the audit_names record type (Richard Guy Briggs) [1009386]
  - [kernel] audit: add child record before the create to handle case where create fails (Richard Guy Briggs) [1009386]
  - [kernel] audit: format user messages to size of MAX_AUDIT_MESSAGE_LENGTH (Richard Guy Briggs) [1007069]
  - [netdrv] tg3: Expand led off fix to include 5720 (Ivan Vecera) [991498]
  - [netdrv] tg3: Don't turn off led on 5719 serdes port 0 (Ivan Vecera) [991498]
  - [netdrv] tg3: Fix UDP fragments treated as RMCP (Ivan Vecera) [991498]
  - [netdrv] tg3: Remove incorrect switch to aux power (Ivan Vecera) [991498]
  - [i2c] ismt: initialize DMA buffer (Neil Horman) [1014753]
  - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Neil Horman) [1014864]
  - [fs] gfs2: Fix race in iteration of glocks for unfreeze/umount (Abhijith Das) [999909]
  - [fs] gfs2: dirty inode correctly in gfs2_write_end (Benjamin Marzinski) [991596]
  - [x86] Mark Intel Atom Avoton processor as supported (Prarit Bhargava) [914842]
  - [mm] vmscan: fix zone shrinking exit when scan work is done (David Gibson) [985155]
  - [block] free bios when failing blk_execute_rq_nowait calls (Jeff Moyer) [1009312]
  - [netdrv] be2net: fix disabling TX in be_close() (Ivan Vecera) [951271]
  - [crypto] Fix race condition in larval lookup (Herbert Xu) [916361]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-424.el6]
changelog:
  - [block] loop: fix crash when using unassigned loop device (Mike Snitzer) [989795]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1014867]
  - [x86] microcode: Fix patch level reporting for AMD family 15h (Prarit Bhargava) [1014401]
  - [hda] alsa: enable switcheroo code in the snd-hda-intel driver (Jaroslav Kysela) [1013993]
  - [x86] reboot: Fix a warning message triggered by stop_other_cpus() (Jerome Marchand) [840710]
  - [kernel] async: Bump up the MAX_THREADS count for the async subsystem (Neil Horman) [1010666]
  - [pci] Calculate right add_size (Myron Stowe) [997672]
  - [netdrv] iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: pcie: add new SKUs for 7000 & 3160 NIC series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: enable shadow registers for 7000 (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: add new 7260 and 3160 series device IDs (Stanislaw Gruszka) [1013951]
  - [netdrv] be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd (Ivan Vecera) [1014360]
  - [netdrv] be2net: call ENABLE_VF cmd for Skyhawk-R too (Ivan Vecera) [1014360]
  - [netdrv] be2net: Fix to prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1014360]
  - [scsi] pm8001: Queue rotation logic for inbound and outbound queues (Rich Bono) [1013771]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.4p driver release (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock hang (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock inversion problem (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed inconsistent spin lock useage (Rob Evers) [1004841]
  - [scsi] qla2xxx: Update version number to 8.05.00.03.06.5-k2 (Chad Dupuis) [912652]
  - [scsi] qla2xxx: Fix request queue null dereference (Chad Dupuis) [912652]
  - [net] tcp: TSQ can use a dynamic limit (Jiri Pirko) [996802]
  - [net] tcp: TSO packets automatic sizing (Jiri Pirko) [996802]
  - [net] tcp: Apply device TSO segment limit earlier (Jiri Pirko) [996802]
  - [net] Allow driver to limit number of GSO segments per skb (Jiri Pirko) [996802]
  - [net] cleanups in RX queue allocation (Ivan Vecera) [1012388]
  - [net] Update kernel-doc for netif_set_real_num_rx_queues() (Ivan Vecera) [1012388]
  - [net] netif_set_real_num_rx_queues may cap num_rx_queues at init time (Ivan Vecera) [1012388]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-425.el6]
changelog:
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [974481] {CVE-2013-4299}
  - [watchdog] iTCO_wdt: add platform driver module alias (Neil Horman) [1019497]
  - [hda] alsa: disable 44.1kHz rate for Haswell HDMI/DP audio (Jaroslav Kysela) [831970]
  - [x86] Update UV3 hub revision ID (George Beshers) [1018962]
  - [fs] xfs: Don't reference the EFI after it is freed (Eric Sandeen) [1018469]
  - [security] keys: Fix a race between negating a key and reading the error set (Dave Wysochanski) [890231]
  - [fs] nfsv4: Ensure memory ordering between nfs4_ds_connect and nfs4_fl_prepare_ds (Jeff Layton) [1012439]
  - [fs] nfsv4: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails (Jeff Layton) [1012439]
  - [md] Disable TRIM on RAID5 for RHEL 6.5 (Jes Sorensen) [837097]
  - [md] raid5: BIO_RW_SYNCIO is a bit number, not a bitmask (Jes Sorensen) [837097]
  - [virt] hyperv: framebuffer pci stub (Gerd Hoffmann) [1013335]
  - [netdrv] bnx2x: add missing enum channel_tlvs definitions (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: KR2 disablement fix (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Specific Active-DAC is not detected on 57810 (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Generalize KR work-around (Michal Schmidt) [1015137]
  - [usb] usbnet: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [usb] cdc_ether: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [mm] Revert "Find_early_table_space based on ranges that are actually being mapped" (Rafael Aquini)
  - [mm] Revert "Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping" (Rafael Aquini)
  - [mm] Revert "Group e820 entries together and add map_individual_e820 boot option" (Rafael Aquini)
  - [net] bridge: update mdb expiration timer upon reports (Vlad Yasevich) [1013816]
  - [net] veth: Remove NETIF_F_HW_VLAN_RX capability (Thomas Graf) [1018158]
  - [net] gre/vxlan: handle 802.1Q inner header properly (Thomas Graf) [997632]
  - [net] disable the new NAPI weight error message for RHEL 6.5 (Michal Schmidt) [1012090]
  - [scsi] sd: Fix parsing of 'temporary ' cache mode prefix (Ewan Milne) [955441]
  - [scsi] sd: fix array cache flushing bug causing performance problems (Ewan Milne) [955441]
  - [scsi] bfa: firmware update to 3.2.1.1 (Rob Evers) [1002770]
  - [netdrv] bna: firmware update to 3.2.1.1 (Ivan Vecera) [1002771]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-426.el6]
changelog:
  - [block] loop: unplug_fn only when backing file is attached (Lukas Czerner) [1022997]
  - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1011876]
  - [kernel] async: Revert MAX_THREADS to 256 (Neil Horman) [1021705]
  - [net] ipv6: restrict neighbor entry creation to output flow (Jiri Pirko) [997103]
  - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1011930] {CVE-2013-4387}
  - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1010347]
  - [net] unix: revert/fix race in stream sockets with SOCK_PASS* flags (Daniel Borkmann) [1019343]
  - [net] Loosen constraints for recalculating checksum in skb_segment() (Vlad Yasevich) [1020298]
  - [drm] nouveau: fix vblank deadlock (Rob Clark) [1013388]
  - [usb] xhci: refactor EHCI/xHCI port switching (Don Zickus) [970715]
  - [fs] compat_ioctl: VIDEO_SET_SPU_PALETTE missing error check (Phillip Lougher) [949573] {CVE-2013-1928}
  - [fs] vfs: fix d_mountpoint() (Ian Kent) [1011337]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [999708]
  - [fs] nfs: Remove the 'FIFO' behaviour for nfs41_setup_sequence (Steve Dickson) [1022257]
  - [fs] nfs: Record the OPEN create mode used in the nfs4_opendata structure (Steve Dickson) [1019439]
  - [fs] nfs: Simulate the change attribute (Steve Dickson) [1018653]
  - [scsi] megaraid_sas: Fix synchronization problem between sysPD IO path and AEN path (Tomas Henzl) [1019811]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-427.el6]
changelog:
  - [tools] perf: Add ref-cycles into array of tested events (Jiri Olsa) [968806]
  - [pci] Revert "make SRIOV resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "ability to relocate assigned pci-resources" (Myron Stowe) [1022270]
  - [pci] Revert "honor child buses add_size in hot plug configuration" (Myron Stowe) [1022270]
  - [pci] Revert "make cardbus-bridge resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "code and comments cleanup" (Myron Stowe) [1022270]
  - [pci] Revert "make re-allocation try harder by reassigning ranges higher in the heirarchy" (Myron Stowe) [1022270]
  - [pci] Revert "Calculate right add_size" (Myron Stowe) [1022270]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-428.el6]
changelog:
  - [fs] Revert "vfs: allow umount to handle mountpoints without revalidating them" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: massage umount_lookup_last() a bit to reduce nesting" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: rename user_path_umountat() to user_path_mountpoint_at()" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: introduce kern_path_mountpoint()" (Rafael Aquini) [1024607]
  - [fs] Revert "autofs4: fix device ioctl mount lookup" (Rafael Aquini) [1024607]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-430.el6]
changelog:
  - [x86] Revert "efi: be more paranoid about available space when creating variables" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efivars: firmware bug workarounds should be in platform code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Export efi_query_variable_store() for efivars.ko" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Check max_size only if it is non-zero" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Distinguish between "remaining space" and actually used space" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Implement efi_no_storage_paranoia parameter" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "Modify UEFI anti-bricking code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Fix dummy variable buffer allocation" (Rafael Aquini) [1012370 1023173]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.2.1.el6]
changelog:
  - [netdrv] bonding: Remove redundant VLAN tag insertion logic (Nikolay Aleksandrov) [1039562 1025224]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.3.1.el6]
changelog:
  - [net] don't drop TSO features for NO_CSUM devices (Ivan Vecera) [1037812 1030631]
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.4.1.el6]
changelog:
  - [powerpc] signals: Improved mark VSX not saved with small contexts fix (Seth Jennings) [1044566 1044117]
  - [powerpc] signals: Mark VSX not saved with small contexts (Seth Jennings) [1044566 1044117]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.5.1.el6]
changelog:
  - [net] sctp: fix checksum marking for outgoing packets (Daniel Borkmann) [1046041 1040385]
  - [kernel] ptrace: Cleanup useless header (Aaron Tomlin) [1046043 1036312]
  - [kernel] ptrace: kill BKL in ptrace syscall (Aaron Tomlin) [1046043 1036312]
  - [fs] nfs: Prevent a 3-way deadlock between layoutreturn, open and state recovery (Steve Dickson) [1045094 1034487]
  - [fs] nfs: Ensure that rmdir() waits for sillyrenames to complete (Steve Dickson) [1051395 1034348]
  - [fs] nfs: wait on recovery for async session errors (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Re-use exit code in nfs4_async_handle_error() (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Update list of irrecoverable errors on DELEGRETURN (Steve Dickson) [1051393 1030049]
  - [exec] ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039486 1039487] {CVE-2013-2929}
  - [net] ipv6: router reachability probing (Jiri Benc) [1043779 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1043779 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1043779 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1043779 1029585]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Jiri Benc) [1040826 1030094]
  - [net] ndisc: Update neigh->updated with write lock (Jiri Benc) [1040826 1030094]
  - [net] ipv6: prevent fib6_run_gc() contention (Jiri Benc) [1040826 1030094]
  - [net] netfilter: push reasm skb through instead of original frag skbs (Jiri Pirko) [1049590 1011214]
  - [net] ip6_output: fragment outgoing reassembled skb properly (Jiri Pirko) [1049590 1011214]
  - [net] netfilter: nf_conntrack_ipv6: improve fragmentation handling (Jiri Pirko) [1049590 1011214]
  - [net] ipv4: fix path MTU discovery with connection tracking (Jiri Pirko) [1049590 1011214]
  - [net] ipv6: Make IP6CB(skb)->nhoff 16-bit (Jiri Pirko) [1049590 1011214]
  - [edac] Add error decoding support for AMD Fam16h processors (Prarit Bhargava) [1051394 1020290]
  - [netdrv] bnx2x: correct VF-PF channel locking scheme (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: handle known but unsupported VF messages (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: Lock DMAE when used by statistic flow (Michal Schmidt) [1040497 1029200]
  - [net] ipv6: fix leaking uninitialized port number of offender sockaddr (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: fix addr_len/msg->msg_namelen assignment in recv_error functions (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: prevent leakage of uninitialized memory to user in recv syscalls (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] ipvs: Add boundary check on ioctl arguments (Denys Vlasenko) [1030817 1030818] {CVE-2013-4588}
  - [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) [1038935 1034266]
  - [md] fix calculation of stacking limits on level change (Jes Sorensen) [1035347 1026864]
  - [ata] ahci: fix turning on LEDs in ahci_start_port() (David Milburn) [1035339 1017105]
  - [ata] libata: implement cross-port EH exclusion (David Milburn) [1035339 1017105]
  - [ata] libata add ap to ata_wait_register and intro ata_msleep (David Milburn) [1035339 1017105]
  - [netdrv] igb: Update link modes display in ethtool (Stefan Assmann) [1032389 1019578]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.6.1.el6]
changelog:
  - [mm] memcg: fix oom schedule_timeout() (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: change memcg_oom_mutex to spinlock (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: fix hierarchical oom locking (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: make oom_lock 0 and 1 based rather than counter (Ulrich Obergfell) [1054072 1034237]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.7.1.el6]
changelog:
  - [char] n_tty: Fix unsafe update of available buffer space (Jiri Benc) [1060491 980188]
  - [char] n_tty: Fix stuck throttled driver (Jiri Benc) [1060491 980188]
  - [char] tty: Add safe tty throttle/unthrottle functions (Jiri Benc) [1060491 980188]
  - [char] tty: note race we need to fix (Jiri Benc) [1060491 980188]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.10.1.el6]
changelog:
  - [fs] xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (Brian Foster) [1067775 1059334]
  - [x86] apic: Map the local apic when parsing the MP table (Prarit Bhargava) [1063507 1061873]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.1.el6]
changelog:
  - [net] netpoll: take rcu_read_lock_bh() in netpoll_send_skb_on_dev() (Florian Westphal) [1063271 1049052]
  - [fs] cifs: sanity check length of data to send before sending (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [fs] cifs: ensure that uncached writes handle unmapped areas correctly (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [infiniband] ipoib: Report operstate consistently when brought up without a link (Michal Schmidt) [1064464 995300]
  - [security] selinux: fix broken peer recv check (Paul Moore) [1059991 1043051]
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064913 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064913 1024024]
  - [fs] nfs: always make sure page is up-to-date before extending a write to cover the entire page (Scott Mayhew) [1066942 1054493]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058418 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062113 1043353]
  - [security] selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: look for IPsec labels on both inbound and outbound packets (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() (Paul Moore) [1055364 1024631]
  - [edac] e752x_edac: Fix pci_dev usage count (Aristeu Rozanski) [1058420 1029530]
  - [s390] mm: handle asce-type exceptions as normal page fault (Hendrik Brueckner) [1057164 1034268]
  - [s390] mm: correct tlb flush on page table upgrade (Hendrik Brueckner) [1057165 1034269]
  - [net] fix memory information leaks in recv protocol handlers (Florian Westphal) [1039868 1039869]
  - [usb] cdc-wdm: fix buffer overflow (Alexander Gordeev) [922000 922001] {CVE-2013-1860}
  - [usb] cdc-wdm: Fix race between autosuspend and reading from the device (Alexander Gordeev) [922000 922001] {CVE-2013-1860}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.2.el6]
changelog:
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.12.1.el6]
changelog:
  - [mm] vmscan: re-introduce the ZONE_RECLAIM_NOSCAN bailout for zone_reclaim() (Rafael Aquini) [1073562 1039534]
  - [mm] vmscan: compaction works against zones, not lruvecs (Johannes Weiner) [1073564 982770]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-431.13.1.el6]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (J. Bruce Fields) [1063201 1042731]
  - [net] sctp: fix sctp_connectx abi for ia32 emulation/compat mode (Daniel Borkmann) [1076242 1053547]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.14.1.el6]
changelog:
  - [net] ip_tunnel: (revert old)/fix ecn decapsulation behaviour (Jiri Pirko) [1078011 1059402]
  - [net] ipv6: del unreachable route when an addr is deleted on lo (Vivek Dasgupta) [1078798 1028372]
  - [net] ipv6: add ip6_route_lookup (Vivek Dasgupta) [1078798 1028372]
  - [net] packet: improve socket create/bind latency in some cases (Daniel Borkmann) [1079870 1045150]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.15.1.el6]
changelog:
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1083350 844450]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.17.1.el6]
changelog:
  - [scsi] qla2xxx: Fixup looking for a space in the outstanding_cmds array in qla2x00_alloc_iocbs() (Chad Dupuis) [1085660 1070856]
  - [scsi] isci: fix reset timeout handling (David Milburn) [1080600 1040393]
  - [scsi] isci: correct erroneous for_each_isci_host macro (David Milburn) [1074855 1059325]
  - [kernel] sched: Fix small race where child->se.parent, cfs_rq might point to invalid ones (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: suppress RCU lockdep splat in task_fork_fair (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: add local variable to store task_group() to avoid kernel stall (Naoya Horiguchi) [1081908 1043733]
  - [fs] cifs: mask off top byte in get_rfc1002_length() (Sachin Prabhu) [1085358 1069737]
  - [kernel] Prevent deadlock when post_schedule_rt() results in calling wakeup_kswapd() on multiple CPUs (Larry Woodman) [1086095 1009626]
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033533 1033534] {CVE-2013-6383}
  - [md] dm-thin: fix rcu_read_lock being held in code that can sleep (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: irqsave must always be used with the pool->lock spinlock (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: sort the per thin deferred bios using an rb_tree (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use per thin device deferred bio lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: simplify pool_is_congested (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: take care to copy the space map root before locking the superblock (Mike Snitzer) [1086007 1060381]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix refcount decrement below 0 which caused corruption (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix Documentation for held metadata root feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix noflush suspend IO queueing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix deadlock in __requeue_bio_list (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix out of data space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: ensure user takes action to validate data and metadata consistency (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: synchronize the pool mode during suspend (Mike Snitzer) [1086007 1060381]
  - [md] fix Kconfig indentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow metadata space larger than supported to go unused (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix the error path for the thin device constructor (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: avoid metadata commit if a pool's thin devices haven't changed (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix bug in resizing of thin metadata (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix pool feature parsing (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix extending the space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-common: make sure new space is used during extend (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix set_pool_mode exposed pool operation races (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: eliminate the no_free_space flag (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add error_if_no_space feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: requeue bios to DM core if no_free_space and in read-only mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: cleanup and improve no space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: log info when growing the data or metadata device (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: handle metadata failures more consistently (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: factor out check_low_water_mark and use bools (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add mappings to end of prepared_* lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: return error from alloc_data_block if pool is not in write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use bool rather than unsigned for flags in structures (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: cleanup dm-thin specific references in text (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: limit errors in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix discard support to a previously shared block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: initialize dm_thin_new_mapping returned by get_next_mapping (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: disallow decrementing a reference count below zero (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow pool in read-only mode to transition to read-write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: re-establish read-only state when switching to fail mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always fallback the pool mode if commit fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read-only mode if metadata space is exhausted (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read only mode if a mapping insert fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: return on failure in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-disk: optimise sm_disk_dec_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-table: print error on preresume failure (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: do not expose non-zero discard limits if discards disabled (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always return -ENOSPC if no_free_space is set (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: set pool read-only if breaking_sharing fails block allocation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: prefix pool error messages with pool device name (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: optimise sm_ll_dec and sm_ll_inc (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: prefetch child nodes when walking tree for a dm_btree_del (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: use pop_frame in dm_btree_del to cleanup code (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix stacking of geometry limits (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add data block size limits to Documentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix metadata dev resize detection (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: generate event when metadata threshold passed (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-metadata: add space map threshold callback (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: add threshold callback to space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: detect metadata device resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: support space map resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: refactor data dev resize (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: initialize read-only module parameters (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: submit writes outside lock (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: add recursive IO request BUG_ON (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: prefetch (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: fix slow IO latency issue specific to RHEL6 (Mike Snitzer) [1086490 1058528]
  - [netdrv] mlx4_en: Fixed crash when port type is changed (Amir Vadai) [1085658 1059586]
  - [netdrv] vmxnet3: fix netpoll race condition (Neil Horman) [1083175 1073218]
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1077345 1077346] {CVE-2014-2523}
  - [scsi] megaraid_sas: fix a small problem when reading state value from hw (Tomas Henzl) [1078641 1065187]
  - [fs] gfs2: Increase the max number of ACLs (Robert S Peterson) [1078874 1075713]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Daniel Borkmann) [1079872 960275]
  - [net] introduce SO_BPF_EXTENSIONS (Daniel Borkmann) [1079872 960275]
  - [scsi] scsi_dh: cosmetic change to sizeof() (Ewan Milne) [1075554 1062494]
  - [acpi] thermal: Check for thermal zone requirement (Nigel Croxon) [1075651 1021044]
  - [acpi] thermal: Don't invalidate thermal zone if critical trip point is bad (Nigel Croxon) [1075651 1021044]
  - [mm] flush pages from pagevec of offlined CPU (Naoya Horiguchi) [1078007 1037467]
  - [fs] xfs: deprecate nodelaylog option (Eric Sandeen) [1076056 1055644]
  - [fs] Fix mountpoint reference leakage in linkat (Jeff Layton) [1069848 1059943]
  - [net] sock: Fix release_cb kABI brekage (Thomas Graf) [1066535 1039723]
  - [vhost] fix total length when packets are too short (Michael S. Tsirkin) [1064442 1064444] {CVE-2014-0077}
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.19.1.el6]
changelog:
  - [kernel] sched: fix cpu_power initialization (Radim Krcmar) [1091826 1065304]
  - [fs] gfs2: Fix uninitialized VFS inode in gfs2_create_inode (Abhijith Das) [1092002 1059808]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.1.el6]
changelog:
  - [net] rtnetlink: Only supply IFLA_VF_PORTS information when RTEXT_FILTER_VF is set (Jiri Pirko) [1092870 1081282]
  - [net] rtnetlink: Warn when interface's information won't fit in our packet (Jiri Pirko) [1092870 1081282]
  - [net] bridge: Correctly receive hw-accelerated vlan traffic (Vlad Yasevich) [1096214 1067722]
  - [net] vlan: Allow accelerated packets to flow through the bridge (Vlad Yasevich) [1096214 1067722]
  - [infiniband] qib: Add missing serdes init sequence (Doug Ledford) [1080104 1005491]
  - [infiniband] qib: Fix txselect regression (Doug Ledford) [1080104 1005491]
  - [netdrv] ixgbevf: fix vlan acceleration (Nikolay Aleksandrov) [1094287 1069028]
  - [security] selinux: Fix kernel BUG on empty security contexts (Paul Moore) [1062502 1064545] {CVE-2014-1874}
  - [netdrv] libertas: potential oops in debugfs (Denys Vlasenko) [1034176 1034177] {CVE-2013-6378}
  - [kernel] cgroup: move put_css_set() after setting CGRP_RELEASABLE bit to fix notify_on_release (Naoya Horiguchi) [1081909 1037465]
  - [kernel] sched: Use exit hook to avoid use-after-free crash (Naoya Horiguchi) [1081914 1032347]
  - [kernel] cgroup: replace list_del() with list_del_init() to avoid panic (Naoya Horiguchi) [1081915 1032343]
  - [x86] turbostat: display C8, C9, C10 residency (Neil Horman) [1096711 1080637]
  - [scsi] lpfc 8.3.44: Fix kernel panics from corrupted ndlp list (Rob Evers) [1086839 1063699]
  - [s390] fix kernel crash due to linkage stack instructions (Hendrik Brueckner) [1067678 1067679] {CVE-2014-2039}
  - [x86] kvm: rate-limit global clock updates (Andrew Jones) [1090750 1072373]
  - [kernel] hrtimers: Move SMP function call to thread context (Mateusz Guzik) [1079869 1073129]
  - [kernel] hrtimers: Support resuming with two or more CPUs online (Mateusz Guzik) [1079869 1073129]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - [fs] ext4: fix WARN_ON from ext4_releasepage() (Carlos Maiolino) [1063508 1036814]
  - [fs] vfs: fix getname() && do_getname() interaction (Oleg Nesterov) [1075653 1024689]
  - [x86] apic: Make disabled_cpu_apicid static read_mostly, fix typos (Nigel Croxon) [1082622 980621]
  - [x86] kexec: Add disable_cpu_apicid kernel parameter (Nigel Croxon) [1082622 980621]
  - [kvm] x86: use kvm_read/write_guest_virt_system in task switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: small cleanups to kvm_task_switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: propagate error from kvm_load_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: improve save_guest_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: introduce kvm_write_guest_virt_system (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: Fix task switch privilege checks (Paolo Bonzini) [1070296 1018581]
  - [powerpc] Make function that parses RTAS error logs global (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Add RTAS event log v6 definition (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Parse and handle EPOW interrupts (Steve Best) [1091424 1028682]
  - [fs] nfsd: don't try to reuse an expired DRC entry off the list (Jeff Layton) [1088779 1036972]
  - [fs] nfsd: when reusing an existing repcache entry, unhash it first (Jeff Layton) [1088779 1036972]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.21.1.el6]
changelog:
  - [kvm] mmu: fix incorrect check of guest cr4 bits (Bandan Das) [1103821 1007164]
  - [drm] nouveau: fix nasty bug which can clobber SOR0's clock setup (Ben Skeggs) [1100574 1095796]
  - [net] tcp: tsq: restore minimal amount of queueing (Jiri Pirko) [1103825 1044053]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.22.1.el6]
changelog:
  - [fs] cifs: Check if prefixpath starts with '\' in cifs_parse_mount_options (Sachin Prabhu) [1107503 1104268]
  - [virt] kvm: enable PCI multiple-segments for pass-through device (Michael S. Tsirkin) [1103972 1103471]
  - [fs] GFS2: Lock i_mutex and use a local gfs2_holder for fallocate (Robert S Peterson) [1102313 1061910]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.23.1.el6]
changelog:
  - [net] ip_tunnel: fix ip_tunnel_find to return NULL in case the tunnel is not there (Jiri Pirko) [1107931 1104503]
  - [netdrv] bnx2x: Fix kernel crash and data miscompare after EEH recovery (Michal Schmidt) [1109269 1029600]
  - [netdrv] bnx2x: Adapter not recovery from EEH error injection (Michal Schmidt) [1109269 1029600]
  - [scsi] qla2xxx: Don't check for firmware hung during the reset context for ISP82XX (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Clear loop_id for ports that are marked lost during fabric scanning (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Issue abort command for outstanding commands during cleanup when only firmware is alive (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Reduce the time we wait for a command to complete during SCSI error handling (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Avoid escalating the SCSI error handler if the command is not found in firmware (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Set host can_queue value based on available resources (Chad Dupuis) [1110658 1054299]
  - [net] filter: prevent nla extensions to peek beyond the end of the message (Jiri Benc) [1096778 1096779] {CVE-2014-3144 CVE-2014-3145}
  - [net] bridge: add empty br_mdb_init() and br_mdb_uninit() definitions (Vlad Yasevich) [1106472 1097915]
  - [net] bridge: Correctly unregister MDB rtnetlink handlers (Vlad Yasevich) [1106472 1097915]
  - [net] rds: prevent dereference of a NULL device in rds_iw_laddr_check (Radomir Vrbovsky) [1083276 1083277] {CVE-2014-2678}
  - [s390] crypto: fix aes, des ctr mode concurrency finding (Hendrik Brueckner) [1110168 1096328]
  - [s390] crypto: fix des and des3_ede ctr concurrency issue (Hendrik Brueckner) [1109885 1065404]
  - [s390] crypto: fix des and des3_ede cbc concurrency issue (Hendrik Brueckner) [1109883 1065398]
  - [kernel] futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi() (Mateusz Guzik) [1097759 1097760] {CVE-2012-6647}
  - [libata] ahci: accommodate tag ordered controller (David Milburn) [1099725 1083748]
  - [net] mac80211: crash dues to AP powersave TX vs. wakeup race (Jacob Tanenbaum) [1083531 1083532] {CVE-2014-2706}
  - [netdrv] ath9k: tid->sched race in ath_tx_aggr_sleep() (Jacob Tanenbaum) [1083249 1083250] {CVE-2014-2672}
  - [kernel] hrtimer: Prevent all reprogramming if hang detected (Prarit Bhargava) [1096059 1075805]
  - [net] ipv4: current group_info should be put after using (Jiri Benc) [1087412 1087414] {CVE-2014-2851}
  - [kernel] tracing: Reset ring buffer when changing trace_clocks (Marcelo Tosatti) [1093984 1018138]
  - [net] rds: dereference of a NULL device (Jacob Tanenbaum) [1079218 1079219] {CVE-2013-7339}
  - [s390] crypto: fix concurrency issue in aes-ctr mode (Hendrik Brueckner) [1110169 1063478]
  - [net] ipv4: processing ancillary IP_TOS or IP_TTL (Francesco Fusco) [1094403 990694]
  - [net] ipv4: IP_TOS and IP_TTL can be specified as ancillary data (Francesco Fusco) [1094403 990694]
  - [s390] crypto: Fix aes-xts parameter corruption (Hendrik Brueckner) [1110170 1043540]
  - [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [1103068 1007459]
  - [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [1103068 1007459]
  - [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [1103068 1007459]
  - [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [1103068 1007459]
  - [fs] ext4: replace cut'n'pasted llseek code with generic_file_llseek_size (Eric Sandeen) [1103068 1007459]
  - [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [1103068 1007459]
  - [net] bridge: disable snooping if there is no querier (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: only expire the mdb entry when query is received" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: fix some kernel warning in multicast timer" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: do not call setup_timer() multiple times" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: update mdb expiration timer upon reports" (Vlad Yasevich) [1090749 1090670]
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - Revert: [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [fs] vfs: fix autofs/afs/etc magic mountpoint breakage (Frantisek Hrbata) [1094370 1079347] {CVE-2014-0203}


