# changelog

author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-14
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  -- patch 0015 fixes a small memleak in previous patch


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-16
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  - Resolves: Bug 830256 - Audit log - clear text password in user changes


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-17
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0019 fixes deref issue.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-18
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0020 disallows users' direct modify on unhashed#user#password


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-19
changelog:
  - Resolves: Bug 834096 - slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-10
changelog:
  - Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-12
changelog:
  - Resolves: Bug 910994 - PamConfig schema not updated during upgrade
  - Resolves: Bug 910995 - Valgrind reports memleak in modify_update_last_modified_attr
  - Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
  - Resolves: Bug 911467 - DNA: use event queue for config update only at the start up
  - Resolves: Bug 911468 - Error messages encountered when using POSIX winsync
  - Resolves: Bug 911469 - dse.ldif is 0 length after server kill or machine kill
  - Resolves: Bug 911474 - Invalid chaining config triggers a disk full error and shutdown
  - Resolves: Bug 914305 - ns-slapd segfaults while trying to delete a tombstone entry
  - Resolves: Bug 913228 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-13
changelog:
  - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)
  - Resolves: Bug 929111 - Coverity issue 13091
  - Resolves: Bug 929196 - Deadlock in DNA plug-in (ticket 634)
  - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 929115 - crash in aci evaluation (ticket 628)
  - Resolves: Bug 923240 - unintended information exposure when anonymous access is set to rootdse (ticket 47308)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-14
changelog:
  - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.19
changelog:
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 4). (ticket 47427)
  - Patch was not added


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15.20
changelog:
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 5 limits not displayed correctly). (ticket 47427)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-27
changelog:
  - Bump version to 1.2.11.15-27
  - Resolves: Bug 1013735 - CLEANALLRUV doesnt run across all replicas (ticket 47509)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-28
changelog:
  - Bump version to 1.2.11.15-28
  - Resolves: Bug 1016038 - Users from AD sub OU does not sync to IPA (ticket 47488)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-30
changelog:
  - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-32
changelog:
  - Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.5.z] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-33
changelog:
  - Release 1.2.11.15-33
  - Resolves: Bug 1094412 - fix memleak introduced by "Simple paged results should support async search (957864)" (DS 47623)
  - Resolves: Bug 1094413 - rhds91 389-ds-base-1.2.11.15-31.el6_5 crash on paged searches followed by simple srch (DS 47707)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-34
changelog:
  - Release 1.2.11.15-34
  - Resolves: #1123861
    EMBARGOED CVE-2014-3562 unauthenticated information disclosure [rhel-6.5.z] (DS 616, BZ 1123477)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-43
changelog:
  - Release 1.2.11.15-43
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-44
changelog:
  - Release 1.2.11.15-44
  - Resolves: #1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Simple bind hangs after enabling password policy


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-45
changelog:
  - Release 1.2.11.15-45
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-47
changelog:
  - Release 1.2.11.15-47
  - Resolves: #1147479 - Memory leak during Reliab15 execution (6.6.z - #47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-49
changelog:
  - Release 1.2.11.15-49
  - Resolves: #1180629 - CVE-2014-8105: information disclosure through 'cn=changelog' subtree
  - Resolves: #1179099 - Problem with single value attribute MMR replication (DS 47915)
  - Resolves: #1179595 - default nsslapd-sasl-max-buffer-size should be 2MB (DS 47457)
  - Resolves: #1179100 - ACI's are replaced by "ACI_ALL" after editing goup of ACI's including invalid one (DS 47953)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-50
changelog:
  - Release 1.2.11.15-50
  - Resolves: #1179099 - Problem with single value attribute MMR replication (DS 47915, DS 569)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-58
changelog:
  - Release 1.2.11.15-58
  - Resolves: #1223068 - Regression introduced by the simple paged results fixes. (DS 48146)
  - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-59
changelog:
  - Release 1.2.11.15-59
  - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148)
  - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149)
  - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-60
changelog:
  - Release 1.2.11.15-60
  - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-62
changelog:
  - Release 1.2.11.15-62
  - Resolves: #1260004 - regression - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-63
changelog:
  - Release 1.2.11.15-63
  - Resolves: #1268204 - ns-slapd crashing frequently cause is unknown (DS 48192)
  - Resolves: #1265972 - Fractional replication evaluates several times the same CSN (DS 48266 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-64
changelog:
  -Release 1.2.11.15-64
  - Resolves: #1268204 - ns-slapd crashing frequently cause is unknown (DS 48192)
  - Resolves: #1268772 - pagedresults - when timed out, search results could have been already freed. (DS 48299)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-65
changelog:
  -Release 1.2.11.15-65
  - Resolves: #1265972 - Fractional replication evaluates several times the same CSN (DS 48266)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-66
changelog:
  -Release 1.2.11.15-66
  - Resolves: #1272327 - CleanAllRUV should completely clean changelog (DS 48208)
  - Resolves: #1273132 - many attrlist_replace errors in connection with cleanallruv (DS 48283)
  - Resolves: #1278696 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-68
changelog:
  -Release 1.2.11.15-68
  - Resolves: #1278696 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.2.11.15-68 (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-69
changelog:
  -Release 1.2.11.15-69
  - Resolves: #1289844 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation (DS 48370)
  - Resolves: #1290722 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-70
changelog:
  -Release 1.2.11.15-70
  - Resolves: #1298095 - 1.2.11.15-68.el6_7 ns-slapd crash in ipa context - c_mutex lock memory corruption and self locks (DS 48406, revert DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-71
changelog:
  -Release 1.2.11.15-71
  - Resolves: #1306572 - slapd process crashes on entry modification (DS 47964)
  - Resolves: #1309962 - keep alive entries can break replication (DS 48445)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-72
changelog:
  -Release 1.2.11.15-72
  - Resolves: #1314241 - Double free while adding entries (DS 48287)
  - Resolves: #1314729 - change severity of some messages related to "keep alive" entries (DS 48420)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-65
changelog:
  - Release 1.2.11.15-65
  - Resolves: #1259383 - Fractional replication evaluates several times the same CSN (DS 48266)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-66
changelog:
  - Release 1.2.11.15-66
  - Resolves: #1270002 - cleanallruv should completely clean changelog (DS 48208)
  - Resolves: #1267405 - many attrlist_replace errors in connection with cleanallruv (DS 48283)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-67
changelog:
  - Release 1.2.11.15-67
  - Resolves: #1234431 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245)
  - Resolves: #1236148 - Slow replication when deleting large  quantities of multi-valued attributes (DS 48195)
  - Resolves: #1236156 - Avoid using regex in ACL if possible (DS 48175)
  - Resolves: #1236656 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well. (DS 48212)
  - Resolves: #1240451 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)
  - Resolves: #1244970 - Crash during retro changelog trimming (DS 48206)
  - Resolves: #1245237 - winsync lastlogon attribute not syncing between DS and AD. (DS 48232)
  - Resolves: #1246165 - verify_db.pl doesn't verify DB specified by -a option (DS 48215)
  - Resolves: #1247812 - logconv autobind handling regression caused by 47446 (DS 48231)
  - Resolves: #1253406 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: #1255290 - db2index creates index entry from deleted records (DS 48252)
  - Resolves: #1259959 - perl module conditional test is not conditional when checking SELinux policies (DS 48305)
  - Resolves: #1260622 - ns-slapd - LOGINFO:Unable to remove file (DS 48304)
  - Resolves: #1265851 - Double free while adding entries (1.2.11 only) (DS 48287)
  - Resolves: #1273552 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-68
changelog:
  - Release 1.2.11.15-68
  - Resolves: #1278585 - deadlock in mep delete post op (DS 47976) 
  - Resolves: #1247792 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-69
changelog:
  - Release 1.2.11.15-69
  - Resolves: #1247792 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.2.11.15-68 (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-70
changelog:
  - Release 1.2.11.15-70
  - Resolves: #1259959 - perl module conditional test is not conditional when checking SELinux policies - fixing a regression (DS 48305)
  - Resolves: #1282457 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-71
changelog:
  - Release 1.2.11.15-71
  - Resolves: #1284791 - 389-ds-base: ldclt -e randomauthid Segmentation fault. (DS 48289)
  - Resolves: #1290243 - SimplePagedResults -- in the search error case, simple paged results slot was not released (DS 48375)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-72
changelog:
  - Release 1.2.11.15-72
  - Resolves: #1292649 - allow users to specify to relax the FQDN constraint (DS 48332)
  - Resolves: #1294770 - Supplier can skip a failing update, although it should retry (DS 47788)
  - Resolves: #1296694 - ns-slapd crash in ipa context - c_mutex lock memory corruption and self locks (DS 48406, DS 48338 reverted)
  - Resolves: #1297385 - Interpret IPV6 addresses for ACIs, replication, and chaining (DS 196)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-73
changelog:
  - Release 1.2.11.15-73
  - Resolves: #1294770 - Supplier can skip a failing update, although it should retry (DS 47788)
  - Resolves: #1298496 - slapd process crashes on entry modification (DS 47964)
  - Resolves: #1307152 - keep alive entries can break replication (DS 48445)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-74
changelog:
  - Release 1.2.11.15-74
  - Resolves: #1313258 - change severity of some messages related to "keep alive" entries (DS 48420)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-75
changelog:
  - Release 1.2.11.15-75
  - Resolves: #1335108 - Paged results search returns the blank list of entries (DS 48808)
  - Resolves: #1342614 - password history is not updated when an admin resets the password (DS 48813)
  - Resolves: #1342382 - Running db2index with no options breaks replication (DS 48854)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-85
changelog:
  - Release 1.2.11.15-85
  - Resolves: #1393007 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-87
changelog:
  - Release 1.2.11.15-87
  - Resolves: #1391701 - do not treat missing csn as fatal (DS 49020)
  - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-88
changelog:
  - Release 1.2.11.15-88
  - Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973)
  - Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-89
changelog:
  - Release 1.2.11.15-89
  - Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-90
changelog:
  - Release 1.2.11.15-90
  - Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.1.11.15-91
changelog:
  - Release 1.2.11.15-91
  - Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-2
changelog:
  - added srcver because the version from the source is now
  - different than the source in the package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1.1
changelog:
  - note: following the z-stream N-V-R convention - this is a z-stream
  - package for rhel-6.1.z - the .1 at the end means this is the first
  - z-stream release for the 389-ds-base-1.2.8.2 package in RHEL 6.1
  - this package is really 389-ds-base-1.2.8.3
  - Resolves: Bug 701560 - memory leak: entryusn value is leaked when an entry is deleted
  - Resolves: Bug 701556 - windows sync can lose old multi-valued attribute values when a new value is added
  - Resolves: Bug 701558 - ldclt core dumps
  - Resolves: Bug 701559 - Linked attributes callbacks access free'd pointers after close
  - Resolves: Bug 701554 - userpasswd not replicating


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1.3
changelog:
  - Resolves: Bug 705837 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory
  - Add ExclusiveArch for x86 and x86_64 only


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.13-1
changelog:
  - Bug 742381 - part3 - MOD operations with chained delete/add get
  -  back error 53 on backend config


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.14-1.1
changelog:
  - git branch RHEL-6_2-Z tag 389-ds-base-1.2.9.14-1.1
  - Bug 758682 - crash when simple paged fails to send entry to client
  - Bug 758683 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 758688 - Fix Coverity (11104) Resource leak: ids_sasl_user_to_entry (slapd/saslbind.c)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.14-1.2
changelog:
  - Bug 771632 - Incorrect entryUSN index under high load in replicated environment
  - Bug 771631 - Add slapi_rwlock API and use POSIX rwlocks
  - WARNING - patches 0030 and 0031 remove and add back the file configure
  - this is necessary because the merge commit to "rebase" RHEL-6 to 1.2.9.6
  - seriously messed up configure - so in order to add the patch for 743979
  - which also touched configure, the file had to be removed and added back
  - also note that the commit for the RHEL-6 branch to remove configure does
  - not work - the way patch works, it has to match every line exactly in
  - order to remove the file, and because the merge commit messed things
  - up, it doesn't work
  - So, DO NOT TOUCH 0030-remove-configure-to-get-rid-of-merge-conflict.patch
  - BECAUSE IT IS HAND CRAFTED and not generated by git format-patch
  - if you must regenerate this file,
  - git format-patch ...args... to generate a file in patch format
  - remove all of the patch matches (all the lines beginning with -)
  - get the 1.2.9.6 version of configure from the source tarball
  - wc -l configure to get the number of lines in the file
  - sed 's/^/-/' configure >> thefile.patch
  - edit thefile.patch to have the right number of lines and have the
  - patch commands in the correct place
  - PROFIT!!!


author: Michal Sekletar <msekleta@redhat.com> - 0.4.1-4
changelog:
  - identify X session launched on currently used VT as active (#1058647)
  - upstart-0.6.0 and higher doesn't use /etc/event.d anymore, move ck-log-system-restart and friends to /etc/init (#681696)
  - fix CVE-2010-4664 (#585952)
  - added logrotate config file (#634935)
  - bump maximum device name length. Fix issue with certain devices where device name is longer than 16 characters (#1070249)


author: Richard Hughes <rhughes@redhat.com> - 013-0.1.20091118git
changelog:
  - Update to a git snapshot
  - Don't crash the daemon if the battery is broken. Fixes #533654
  - Avoid going from discharging to pending-discharge when the battery is very low
  - Fix the toshiba battery recall notices


author: Richard Hughes <richard@hughsie.com> - 013-1
changelog:
  - Update to 013
  - Detect more supported UPS devices.
  - Fix the Toshiba battery recall data.
  - Fix a crash when the battery NVRAM is invalid.
  - Add a couple of fixes for very new battery support.


author: Richard Hughes <rhughes@redhat.com> - 014-1
changelog:
  - Check if swap exists before determining how much is free
  - Prevent segfault if connection to system dbus fails
  - Fix segfault in the history code.
  - Resolves: #553589


author: Richard Hughes <rhughes@redhat.com> - 014-3
changelog:
  - Fix the multilib file conflict when installing DeviceKit-power-devel
    by splitting out a noarch DeviceKit-power-devel-docs subpackage.
  - The reason this is required is that gtk-doc generates random link
    targets in the autogenerated documentation which upsets rpm as the
    files no longer have the same checksum.
  - Resolves: #727544


author: Olivier Fourdan <ofourdan@redhat.com> - 6.5.4.7-6
changelog:
  - Add fix for CVE-2010-4167
  - Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
  - Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798


author: Dan Williams <dcbw@redhat.com> - 0.4-1.git20100622
changelog:
  - core: fix occasional crash when device is unplugged (rh #591728)
  - core: ensure errors are correctly returned when device is unplugged
  - core: ensure claimed ports don't fall back to Generic (rh #597296)
  - gsm: better compatibility with various phones
  - mbm: better detection of connection errors
  - simtech: add plugin for Simtech devices (like Airlink 3GU)
  - sierra: fix CDMA roaming detection


author: Dan Williams <dcbw@redhat.com> - 0.4-2.git20100628
changelog:
  - core: fix crash during probing when a plugin doesn't support all ports (rh #603294)
  - gsm: better registration state checking when devices don't support AT+CREG (Blackberries)
  - gsm: add support for getting remaining unlock retry counts


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-101
changelog:
  - wifi: support locking connections to a band (5GHz or 2GHz) (rh #1254070)
  - editor: allow VLAN id <0-4095> (rh #1258218)
  - wifi: disable Ad-Hoc WPA connections (rh #787733)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-103
changelog:
  - libnm-util/editor: recognize PKCS#8 private keys and check passwords (rh #1212553)
  - wifi: show certificate files with the *.key extension (rh #1212553)


author: Thomas Haller <thaller@redhat.com> - 1:0.8.1-104
changelog:
  - core: ignore slave devices when deciding global state (rh #951399)
  - dns: don't override DHCP-supplied search order with domain (rh #1202539)
  - build: fix building source package on recent Fedora (rh #1286742)
  - ibft: add settings plugin (rh #1198325)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:0.8.1-105
changelog:
  - ifcfg-rh: delay handling of deletion events (rh #1272617)
  - ifcfg-rh: load connections during GetIfcfgDetails avoiding ifup race (rh #1292753)
  - ifcfg-rh: leave bridge/bond/vlan to initscripts when support disabled (rh #1292753)
  - bond: avoid assuming connections on bond masters that are not up (rh #1292502)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-15
changelog:
  - wifi: calculate quality correctly with nl80211/mac80211 drivers (rh #748075)
  - wifi: fix Ad-Hoc associations when using nl80211/mac80211 drivers (rh #747066)
  - vpn: fix D-Bus interface properties export (rh #659685)


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-31
changelog:
  - core: fix carrier handling on devices that don't support carrier detection
  - core: fix handling of bond/VLAN enable config option (rh #804797)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-34
changelog:
  - core: always use Opportunistic Key Caching with WPA-Enterprise (rh #834444)
  - ifcfg-rh: fix handling of EAP-LEAP connections (rh #833199)
  - applet: preserve WPA protocol and ciphers when editing connections (rh #834349)
  - applet: show WPA protocol widget when GConf key is set (rh #813573)


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-41
changelog:
  - core: additional fixes for bridging and bonding operation (rh #558983)
  - applet: add support for Bridge, Bond, and VLAN devices


author: Dan Williams <dcbw@redhat.com> - 0.8.1-3
changelog:
  - core: fix access to NMAccessPoint objects HwAddress property (rh #606147)
  - core: more cleanly handle s390-specific options
  - core: better behavior when missing firmware appears (rh #609587)
  - core: map hostname to current IP address (rh #613821)
  - ifcfg-rh: match initscripts behavior for persistent hostnames (rh #613841)
  - editor: fix crash checking permissions during editor window close (rh #603566) (rh #614057)
  - editor: fix listing of connections on ppc64 (rh #608663)
  - applet: fix remembering "Don't warn me again" for missing CA certs (rh #610084)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-4
changelog:
  - core: enable DHCPv6-only configurations (rh #612445)
  - core: don't fail connection immediately if DHCP lease expires (rh #616084) (rh #590874)
  - core: read deprecated nm-system-settings.conf first (rh #606160)
  - core: fix editing of PPPoE system connections
  - core: work around twitchy frequency reporting of various wifi drivers
  - core: don't tear down user connections on console changes (rh #614556)
  - editor: fix crash when canceling editing in IP address pages (rh #610891)
  - editor: fix handling of s390-specific options


author: Dan Williams <dcbw@redhat.com> - 0.8.1-5
changelog:
  - core: quiet annoying warnings (rh #612991)
  - core: fix retrieval of various IP options in libnm-glib (rh #611141)
  - core: ship NetworkManager.conf instead of deprecated nm-system-settings.conf (rh #606160)
  - core: add short hostname to /etc/hosts too (rh #621910)
  - core: recheck autoactivation when new system connections appear
  - cli: wait a bit for NM's permissions check to complete (rh #614866)
  - ifcfg-rh: ignore BRIDGE and VLAN configs and treat as unmanaged (rh #619863)
  - man: add manpage for nm-online
  - applet: fix crash saving ignore-missing-CA-cert preference (rh #619775)
  - applet: hide PIN/PUK by default in the mobile PIN/PUK dialog (rh #615085)
  - applet: ensure Enter closes the PIN/PUK dialog (rh #611831)
  - applet: fix another crash in ignore-CA-certificate handling (rh #557495)
  - editor: fix handling of Wired/s390 connections (rh #618620)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-5.el6_0.1
changelog:
  - core: enable proactive key caching when using PEAP-GTC (rh #636877)
  - applet: fix inital sensitivity of context menu checkboxes (rh #633501)
  - applet: fix Punjabi translations (rh #589230)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-7
changelog:
  - core: add DHCP lease-change events to the dispatcher (rh #662730)
  - core: validate Enable/Disable WiFi and WWAN requests (rh #626337)
  - core: don't update /etc/hosts with current hostname (rh #668830)
  - wifi: ensure Enabled state is preserved regardless of rfkill (rh #584271)
  - ifcfg-rh: respect GATEWAYDEV for ibft/iSCSI configs (rh #665027)
  - ifcfg-rh: handle IPv6 gateway correctly for static addressing configs (rh #666078)


author: Jiří Klimeš <jklimes@redhat.com> - 0.8.1-8
changelog:
  - applet: display IPv6 info under applet's 'Connection Information' (rh #634152)
  - applet,nm: fix translations (rh #589230)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-97
changelog:
  - vpn: let plugins forbid VPN connections from getting the default route (rh #1069313)
  - core: don't duplicate addresses (and other) info in IP configs (rh #1207599)
  - editor: check gateway to be in the network specified by addr/prefix (rh #1167491)
  - cli: fix 'nmcli con' hang if both NetworkManager and nm-applet are stopped (rh #1213327)


author: Paul Wouters <pwouters@redhat.com> - 0.8.0-9
changelog:
  Resolves: #1267394
  - Add libreswan softlinks for nm helper to support libreswan dropin
  - Support for libreswan env vars PLUTO_PEER_DNS_INFO, PLUTO_PEER_DOMAIN_INFO and libreswan_reason


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-2.20100411git
changelog:
  Resolves: #609595
  - Fix to read connection configuration from stdin, so no conf file is stored now
  - Fix to read Xauth user password from stdin
  - Fix to delete the secret file as soon as read by Openswan
  - Fixed the issue of world readable conf and secret files
  - Modifed GUI to remove unused configuration boxes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-3.20100411git
changelog:
  Resolves: #609595
  - Due to changes in NMVpnPluginUiInterface struct in NM, import and export
    fields had to be changed to import_from_file and export_to_file, respectively
  - Rebuilding as build was failing due to the above changes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-5.20100411git
changelog:
  Resolves: #617016
  - Support for reading phase1 and phase2 algorithms through GUI
  - Fixed chanelog to reference correct bz 617016, and bumped release number.


author: Rex Dieter <rdieter@fedoraproject.org> 1.6.1-8
changelog:
  - CVE-2009-1720 OpenEXR: Multiple integer overflows (#513995)
  - CVE-2009-1721 OpenEXR: Invalid pointer free by image decompression (#514003)


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-10
changelog:
  - removed OpenIPMI-gui subpackage, because TCL is compile without
    multithreading support and the gui relies on it (#588332)


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-17
changelog:
  - Do not exit the cron job with an error code if PackageKit is just
    disabled in sysconfig.
  - Resolves: #626867


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-18
changelog:
  - Wrap _getEVR in a try,catch block to deal with invalid version
    numbers in update changelogs.
  - Resolves: #634560


author: Nils Philippsen <nils@redhat.com> - 0.5.8-20
changelog:
  - yum: require pygobject2 (#684861)
  - yum-plugin: require dbus-python (#700448)
  - yum: fix untrusted password entry (#744359)
  - pkcon: fix --noninteractive (#783537)
  - fix building with newer xulrunner
  - add/fix BR: xulrunner-devel >= 8.0, nspr-devel >= 4.8


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-22
changelog:
  - Handle unbuffered input in a better way to fix the simulate declined failure
    when using pkcon.
  - Resolves: #811097


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-26
changelog:
  - Fix a python traceback when the comps groups cannot be loaded
  - Do not substitute '%' in error messages as this is misleading
  - Do not ever run the transaction plugins even for modified configs
  - Resolves: #1268932, #984836, #1204932


author: Tom Lane <tgl@redhat.com> 3.8.1-1
changelog:
  - Created package by stripping down postgresql specfile and adjusting
    to meet current packaging guidelines for python modules.


author: Tom Lane <tgl@redhat.com> 3.8.1-2
changelog:
  - Fix License tag and permissions on example scripts under tutorial/,
    per discussion in package review request.
  Related: #452321


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#757411, add missing qnetwork-deleteResource
  - Resolves: bz#821061, add missing qmenubar-cornerWidget


author: Roman Rakus <rrakus@redhat.com> - 0.8.4-19
changelog:
  - better to use symlink to python's pyexpat library
    Resolves: #614911
  - Fixes acording to merge review (#226350)
  - Added check routine


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-13
changelog:
  - added repackage.sh script to remove joyos2,h and symbian.zip (really)
  - added comment about riva_mmio.h license


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - rebase to 1.2.14
  - fixed build for libtool 2.2.6 and newer
  - fix from Josh Boyer <jwboyer@gmail.com>:
    - disable ps3 video support that was added in 2.14.  It fails to
      build on ppc/ppc64


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-3
changelog:
  - Fix left button press event in windowed mode (sdl894, Resolves: #640682)
  - Remove invalid configure arguments (Resolves: #640687)
  - Kernel joystick structure has grown in unknown 2.6 Linux version (sdl900,
    Resolves: #640694)
  - Do not call memcpy() on overlapping areas (sdl1090, Resolves: #678569)
  - Don't block SDL_WM_GrabInput() if window is not viewable (sdl1155,
    Resolves: #733605)


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.13-2
changelog:
  - increased timeout in gui to prevent timeouts when uploading large files
  - added update messages during upload
  - Resolves: #625012


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.16-1
changelog:
  - added list of attachments to comment rhbz#668875
  - stop consuming non-standard header rhbz#670492
  - Resolves: #670492, #668875


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.16-3
changelog:
  - improved support for GSS customer portal
    - fixed the hash generating: use component name instead of package NVR
    - added a user-agent header to rhtsupport requests for easier hash algorithm
      matching
  - Resolves: #694410


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.4-13
changelog:
  - fixed typo in ccpp_event.conf rhbz#744784
  - fixed return codes in abrt-cli rhbz#742474
  - Resolves: #744784, #742474


author: Denys Vlasenko <dvlasenk@redhat.com> 2.0.8-13
changelog:
  - Prevent daemon from being stuck (unresponsive to socket connects)
    while post-create even runs
  - Prevent infinite loop of crashes
  - Resolves: #826924


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-19
changelog:
  - fixed problem with wrong kernel oops duplicates - rhbz#953813
  - updated translation rhbz#993564
  - Resolves: #953813


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-21
changelog:
  - updated translation (ko, po) #952773
  - added support for MCE errors rhbz#812537
  - Resolves: #812537, #952773


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-26.sl6.1
changelog:
  - remove old dump directories in upgrade
  - remove outdated rmp scriptlets
  - daemon: allow only root to submit CCpp, Koops, VMCore and Xorg problems
  - abrt-action-install-debuginfo-to-abrt-cache: sanitize arguments and umask
  - make the problem directories owned by abrt and the group root
  - validate uploaded problem directories in abrt-handle-upload
  - don't override nor remove files with user core dump files
  - fix symbolic link and race condition flaws
  - Resolves: #1211966


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: abrt.ini
  -->  Config file for automated patch script
  - Added Patch: abrt-add-sl-gpg-keys.patch
  -->  Add the Scientific Linux keys to the recognized list
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-33
changelog:
  - ccpp: never remove user core files
  - suid debug info wrapper: do not open build_ids as root
  - abrtd: process only dump directories owned by root
  - Related: #1211967


author: Jakub Filak <jfilak@redhat.com> - 2.0.8-32
changelog:
  - add usermode and pam used by abrt-(cli|gui) to Requires
  - correct the description of PrivateReports in abrt.conf
  - Related: #1211967


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.8-37
changelog:
  - Add AllowedUsers and AllowedGroups feature
  - Add IgnoredPath option
  - Resolves: #1256705, #1208713


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-5
changelog:
  - removed the "report problem with ABRT btn" rhbz#809587
  - fixed double free
  - fixed ccpp-install man page
  - Resolves: #809587, #796216, #799027


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-3
changelog:
  - prevent setfacl --restore from SIGSEGV on malformed restore file (#576512)
  - run the test-suite if possible


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-5
changelog:
  - clarify that removing a non-existent acl entry is not an error (#674883)
  - update project URL in package specification (#702638)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-6
changelog:
  - add function acl_extended_file_nofollow() (#720318)
  - build with partial RELRO support as a security enhancement (#723998)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-7
changelog:
  - fix SIGSEGV of getfacl -e on overly long group name (#1025246)
  - fix test-suite failure on a repeated run (#743847)


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Tomas Sykora <tosykora@redhat.com> - 0.14-9
changelog:
  - RHEL-6.9 erratum
     - Fix aide logs with remote rsyslog causing unexpected results
     Resolves: rhbz#1305046


author: Steve Grubb <sgrubb@redhat.com> - 0.14-2
changelog:
  resolves: #585919 - aide: Libgcrypt warning: missing initialization
  resolves: #587086 - [abrt] crash in aide-0.14-1


author: Steve Grubb <sgrubb@redhat.com> - 0.14-3
changelog:
  resolves: #590561 aide does not detect the change of SElinux context
  resolves: #590566 aide reports a changed file when it has not been changed


author: Daniel Vrátil <dvratil@redhat.com> 1.2.1-3
changelog:
  - Backport couple upstream patches to support running Akonadi when $HOME is on AFS (resolves #1073939)


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-4
changelog:
  - Remove ucm and topology files from the /usr/share/alsa tree
  - Coverity fixes
  - Resolves: rhbz#838948


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.22-2
changelog:
  - updated to 1.0.22 final
  - added alsaloop utility and alsa-delay script
  - updated the alsa-info.sh script
  - Resolves: rhbz#650113


author: Jaroslav Kysela <jkysela@redhat.com> 1.1.0-8
changelog:
  - A small fix for alsa-delay script
  - Fix for ca0106 alsactl init
  - Resolves: rhbz#894032
  - Resolves: rhbz#1320099


author: Jaroslav Kysela <jkysela@redhat.com> 1.1.0-3
changelog:
  - updated to 1.1.0 final
  - alsa-info.sh is part of alsa-utils package now
  - Resolves: rhbz#1245602
  - Resolves: rhbz#1248512
  - Resolves: rhbz#1006466
  - Resolves: rhbz#881734
  - Resolves: rhbz#894032


author: David Cantrell <dcantrell@redhat.com> - 13.21.147-1
changelog:
  - Make sure to clean up temp vg paths after lvm edit. (dlehman)
    Resolves: rhbz#747606
  - Add xenfs module to initrd.img (dcantrell).
    Resolves: rhbz#747388


author: Chris Lumens <clumens@redhat.com> - 13.21.148-1
changelog:
  - Support prefix length in ipv6= cmdline option (rvykydal)
    Resolves: rhbz#679108
    Related: rhbz#679108


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV> 13.21.149-1.sl6
changelog:
  These are changes we make to anaconda for the SL installation process
  - Added patch anaconda-no-addons-recognize-sl.patch
    Disables the check for the TUV addons during a DVD install
  - Added patch anaconda-scientific-linux-installclasses.patch
    Add the Scientific Linux install classes


author: David Cantrell <dcantrell@redhat.com> - 13.21.175-1
changelog:
  - Adapt to fipvlan naming change (rvykydal)
    Resolves: rhbz#823086
  - Handle offload qla4xxx iscsi devices properly (rvykydal)
    Resolves: rhbz#823810


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV> 13.21.176-1.sl6
changelog:
  These are changes we make to anaconda for the SL installation process
  - Added patch anaconda-scientific-linux-installclasses.patch
    Add the Scientific Linux install classes
  - Added patch anaconda-no-addons-recognize-sl.patch
    Disables the check for the TUV addons during a DVD install


author: Brian C. Lane <bcl@redhat.com> - 13.21.195-1
changelog:
  - Disconnect active slaves before activating bond (rvykydal)
    Related: rhbz#662007
    Resolves: rhbz#662007
  - Some modules for Microsoft PV have different names (vpodzime)
    Related: rhbz#834689


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-no-addons-recognize-sl.patch
  -->  Disables the check for the TUV addons during a DVD install
  - Added Patch: anaconda-scientific-linux-installclasses.patch
  -->  Add the Scientific Linux install classes
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes
  - Added Source: anaconda.ini
  -->  Config file for automated patch script


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.229-1
changelog:
  - Revert "Use edd fcoe boot option instead of enumerating all ifaces"
    (rvykydal)
    Resolves: rhbz#1103920


author: Brian C. Lane <bcl@redhat.com> - 13.21.239-1
changelog:
  - Align end sector in the appropriate direction for resize. (bcl)
    Resolves: rhbz#1236506
  - Filter out free regions too small for alignment of partitions (bcl)
    Resolves: rhbz#1236506


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.247-1
changelog:
  - Make sure devices configured by NM from iBFT have correct ifcfg (rvykydal)
    Resolves: rhbz#831002
    Related: rhbz#831002


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.248-1
changelog:
  - Wait for all udev events to finish (jstodola)
    Resolves: rhbz#1309348
  - Run restorecon on /etc/localtime to reset SElinux context. (sbueno+anaconda)
    Resolves: rhbz#1302290


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.249-1
changelog:
  - Bios RAID traceback on Filter GUI (rmarshall)
    Resolves: rhbz#1309069
  - Don't ignore FW RAID containers if everything should be used (vpodzime)
    Related: rhbz#1120640
  - Fix pki cert path in initrd (bcl)
    Resolves: rhbz#1259880


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.251-1
changelog:
  - Adjust commit 74014d71 after recent reverts. (dlehman)
    Related: rhbz#1269872
  - Revert "Refactor variable name (sbueno+anaconda)"
    Resolves: rhbz#1319697
  - Revert "Fix multipath UI representation (sbueno+anaconda)"
    Resolves: rhbz#1319697
  - Revert "Bios RAID traceback on Filter GUI (sbueno+anaconda)"
    Resolves: rhbz#1319697
  - Add the /EFI directory to the boot.iso (bcl)
    Resolves: rhbz#1188876
  - Clean up devicetree filtering of md containers. (dlehman)
    Related: rhbz#1120640
    Related: rhbz#1269872
  - Remove pyblock/dmraid remnants from md container handling. (dlehman)
    Related: rhbz#1269872
  - Don't use pyblock/dmraid to get sizes of imsm/isw arrays. (dlehman)
    Resolves: rhbz#1269872
  - Move mdadm.conf entry creation to a function. (dlehman)
    Related: rhbz#1269872
  - network: disable NM for parent device of vlan configured in ibft (rvykydal)
    Resolves: rhbz#831002
  - network: set ifname= for parent of vlan defined in ibft (rvykydal)
    Resolves: rhbz#831002


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.252-1
changelog:
  - Add mesa-libEGL to upd-instroot. (sbueno+anaconda)
    Resolves: rhbz#1316646
  - Catch KeyError when checking for MD UUID in filter gui. (dlehman)
    Related: rhbz#1269872
    Resolves: rhbz#1320545
  - Activate also non-ibft devices requested by boot options (ksdevice)
    (rvykydal)
    Resolves: rhbz#1314806


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 13.21.254-1
changelog:
  - Revert "Always write splashimage to grub.cfg on UEFI (bcl)"
    Related: rhbz#1325971
    Resolves: rhbz#1325971


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-no-addons-recognize-sl.patch
  -->  Disables the check for the TUV addons during a DVD install
  - Added Patch: anaconda-scientific-linux-installclasses.patch
  -->  Add the Scientific Linux install classes
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: anaconda-add-gdisk.patch
  -->  Make sure gdisk is on install media


author: Radek Vykydal <rvykydal@redhat.com> - 13.21.263-1
changelog:
  - network: don't reactivate devices from linuxrc.s390 in loader only for IPv6
    (rvykydal)
    Resolves: rhbz#1421039


author: David Cantrell <dcantrell@redhat.com> - 13.21.80-1
changelog:
  - mpath: filter member partitions wiser in lvm. (akozumpl)
    Related: rhbz#624175
  - mpath: do not deactivate mpath partitions in teardown(). (akozumpl)
    Related: rhbz#624175


author: David Cantrell <dcantrell@redhat.com> - 13.21.81-1
changelog:
  - mpath: put quotes around the wwids, they can have spaces. (akozumpl)
    Related: rhbz#626842
  - filtering UI: don't be picky about udev wwid length. (akozumpl)
    Related: rhbz#626842
  - Use ID_SERIAL_RAW for multipath, if available (clumens).
    Resolves: rhbz#626842


author: Joe Orton <jorton@redhat.com> - 1.3.9-4
changelog:
  - add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
  - add fix for CVE-2011-0419 (#703520)


author: Miroslav Lichvar <mlichvar@redhat.com> 14:2.1a15-14
changelog:
  - update ethercodes.dat
  - mark ethercodes.dat as noreplace
  - include Debian arp2ethers and massagevendor man pages (#578201)
  - don't include massagevendor-old script anymore


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.10-43
changelog:
  - 630019 set correct (f)pie build flags
  - 615104 fix double echo in initscript
  - 589099 Wrong file permissions for atd configuration
  - Resolves: rhbz#630019, rhbz#615104, rhbz#589099


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-47
changelog:
  - do not use perr() in running atd (#994201)
  - correct Requires/BuildRequires (#712079)
  - mention all options in the usage() (#784814)
  - do not leave zero-byte sized files when filesystem is full (#1166882)


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-49
changelog:
  - correct the DST correction when using UTC time specification (#1320322)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages (#1226958)


author: Matthew Barnes <mbarnes@redhat.com> - 1.30.0-1
changelog:
  - Rebase to 1.30.0 based on the Fedora 13 package.
  - Build with introspection disabled since glib-introspection is not
    avalable in rhel6.
  Resolves: #883027


author: Kamil Dudka <kdudka@redhat.com> 2.4.44-5
changelog:
  - encode NULs properly with getfattr --encoding=text (#651119)
  - return non-zero exit code on failure of getfattr (#665050)
  - document supported encodings of values (#674870)
  - update project URL in package specification (#702639)


author: Steve Grubb <sgrubb@redhat.com> 2.1-4
changelog:
  resolves: #584981 - Improvements needed for Common Criteria
  resolves: #697463 - Broken autrace -r on s390x


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-1
changelog:
  resolves: #709345 auditctl -l returns 0 even if it fails on dropped capabilities
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #715315 remote client gets disk_error event instead of disk_full
  resolves: #728475 remove krb5 related options from audisp-remote.conf


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-2
changelog:
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #748124 Auditctl doesn't recognize accept4 syscall


author: Steve Grubb <sgrubb@redhat.com> 2.2-1
changelog:
  resolves: #658630 include "check but load" option for audit
  resolves: #766920 audit filtering on file accesses not owned by user
  resolves: #797848 audit.rules contains a typo error


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-4
changelog:
  resolves: #1049916 - Handle i386 session ID's better
  resolves: #1120286 - ausearch -i does not display commas between categories


author: Steve Grubb <sgrubb@redhat.com> 2.2-4
changelog:
  - Revised patch based on upstream commit 895
  resolves: #1028635 audisp-remote reconnect problems after transient network err


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1065067 - Audit package rebase
  resolves: #810749 - audit allows tcp_max_per_addr + 1 connections
  resolves: #869555 - ausearch -i does not interpret execve arguments always
  resolves: #888348 - auditd won't start when some actions send mail
  resolves: #922508 - confusing aulast records for bad logins
  resolves: #950158 - man page unclear wrt num_logs affecting keep_logs setting
  resolves: #967238 - Audit rules are built from a directory of rule files
  resolves: #967240 - ausearch to checkpoint so only reports new events
  resolves: #970675 - auparse is truncating path context after first category
  resolves: #1011052 - Missing text in auditd.conf man page
  resolves: #1022035 - Case values for actions unclear in auditd.conf man page
  resolves: #1029981 - ausearch help typo for "-x" option
  resolves: #1049916 - ausearch issues found by ausearch-test
  resolves: #1053424 - Error in auparse-defs.h
  resolves: #1071580 - audispd config file parser fails on long input
  resolves: #1089713 - limit of 30 for system call in audit.rules


author: Steve Grubb <sgrubb@redhat.com> 2.4.5-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1129076 - auvirt --help shows an incorrect option "--show--uuid"
  resolves: #1138674 - auditd may fail to start if configured to send mail
  resolves: #1144252 - Auditctl should not send warnings to console during boot
  resolves: #1197235 - ausearch can't parse time in non-US locale/UTF-8 encoding
  resolves: #1235457 - Line buffer is too short for plugin config files
  resolves: #1257650 - Rebase audit package


author: Miloslav Trmač <mitr@redhat.com> - 0.5.1-2
changelog:
  - Fix crash when exporting list view
    Resolves: #555797
  - Fix invisible (too small) charts
    Related: #555798


author: Miloslav Trmač <mitr@redhat.com> - 0.5.1-3
changelog:
  - Fix chart display if any of the labels contain '/'
  - Include 'date' among field names for making reports
    Resolves: #578547


author: David Lutterkort <lutter@redhat.com> - 0.9.0-2
changelog:
  - Fix BZ 781690 "Grub password --encrypted argument not parsed correctly"
  - Fix BZ 628507 "It's better to support fadot --help or fadot -h"
  - Fix BZ 759311 "augtool --autosave does not save changes"


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-8
changelog:
  - Cgconfig: parse other valid controllers (RHBZ#1112388)
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144652)
  - Services: permit colons in service name (RHBZ#1121263)
  - Shadow: add lens (RHBZ#1160261)
  - Syslog: parse TCP loghosts (RHBZ#1129508)


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-10
changelog:
  - Escape paths returned from aug_match (RHBZ#1186318)
  - Krb5: parse braces in values (RHBZ#1203597)
  - Properties: handle empty line in multi-line value (RHBZ#1209885)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-4
changelog:
  - Rebase to Augeas 1.0.0
    resolves: rhbz#817753
  - Add dependency on libxml2-devel.
  - Remove all patches (all upstream and included in 1.0.0).
  - Print tests/test-suite.log when the tests fail.
  - Add fix for regression added in 1.0.0 (RHBZ#920609).
  - Fix tests/test-run.


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-6
changelog:
  - Fix CVE-2013-6412, incorrect permissions under strict umask (RHBZ#1036080)
  - Grub: support 'setkey' and 'lock' directives (RHBZ#1001635)
  - ActiveMQ: add ActiveMQ lens (RHBZ#1016899)
  - Splunk: add Splunk lens (RHBZ#1016900)
  - Sudoers: user aliases fail to parse (RHBZ#1016904)
  - Tests: testPermsError during compilation (RHBZ#1024275)
  - Shellvars: multi-variable export lines (RHBZ#1033795)
  - Shellvars: case statements with same-line ;; tokens (RHBZ#1033799)
  - Sysconfig: permit empty comments (RHBZ#1043636)
  - Grub: support 'foreground' directive (RHBZ#1059383)
  - Yum: permit space after equals sign (RHBZ#1062091)
  - IniFile: add generic INI lenses (RHBZ#1073072)
  - Automounter: permit hostnames with hyphens (RHBZ#1075112)
  - Rsyslog: parse property filters and templates (RHBZ#1083016)
  - Ldso: parse hwcap lines (RHBZ#1083021)
  - Sudoers: permit underscores in group names (RHBZ#1093711)
  - augtool: remove dump-xml filename arg (RHBZ#1100182)
  - augtool: add commands to autocomplete (RHBZ#1100184)
  - docs: update command and arg lists (RHBZ#1100186)
  - Nrpe: parse unknown config options (RHBZ#1100237)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-6
changelog:
  - add support for joining IPAv2 domains
  - fix exception handling (#689717)
  - drop obsolete configuration files from manual page
  - use krb5_server instead of obsolete krb5_kdcip (#749700)
  - do not signal error on saving backups for missing config files (#755975)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-7
changelog:
  - detect error exit value from ipa-client-install
  - use --noac option with ipa-client-install
  - add sss to the services entry in nsswitch.conf (#804615)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-5
changelog:
  - prevent the traceback also when std file descriptors are not
    tty, print out an error message instead of executing authconfig


author: Tomas Mraz <tmraz@redhat.com> - 6.1.4-4
changelog:
  - remove superfluous space in nsswitch.conf (#595265)
  - always write to 'default' domain in sssd.conf only (#598558)


author: Ian Kent <ikent@redhat.com> - 5.0.5-107
changelog:
  - bz994217 - RFE: RHEL6: Add am-utls RPM or equivalent am-utils functionality
    to other packages
    - force disable browse mode for amd format maps.
    - fix hosts map options check in lookup_amd_instance().
  - Related: rhbz#994217


author: Ian Kent <ikent@redhat.com> - 5.0.5-108
changelog:
  - bz1130833 - Memory leak in get_exports
    - fix memory leak in create_client().
    - fix memory leak in get_exports().
  - Resolves: rhbz#1130833


author: Ian Kent <ikent@redhat.com> - 5.0.5-109
changelog:
  - bz994217 - RFE: RHEL6: Add am-utls RPM or equivalent am-utils functionality
    to other packages
    - fix memory leak in get_defaults_entry().
    - fix out of order clearing of options buffer.
    - fix reset amd lexer scan buffer.
    - ignore multiple commas in options strings.
  - Related: rhnz#994217


author: Ian Kent <ikent@redhat.com> - 5.0.5-109.el6_6.1
changelog:
  - bz1170887 - Autofs unable to mount indirect after attempt to mount wildcard
    - make negative cache update consistent for all lookup modules.
    - ensure negative cache isn't updated on remount.
    - dont add wildcard to negative cache.
  - Resolves: rhbz#1170887


author: Ian Kent <ikent@redhat.com> - 5.0.5-111
changelog:
  - bz1153130 - autofs-5.0.5-109 with upgrade to RHEL 6.6 no longer recognizes
    +yp: in auto.master
    - fix fix master map type check.
  - bz1156387 - autofs /net maps do not refresh list of shares exported on the
    NFS server
    - fix typo in update_hosts_mounts().
    - fix hosts map update on reload.
  - bz1160446 - priv escalation via interpreter load path for program based
    automount maps
    - add a prefix to program map stdvars.
    - add config option to force use of program map stdvars.
  - bz1175671 - automount segment fault in parse_sun.so for negative parser tests
    - fix incorrect check in parse_mount().
  - bz1124083 - Autofs stopped mounting /net/hostname/mounts after seeing duplicate
    exports in the NFS server
    - fix fix map entry duplicate offset detection (dependednt patch).
    - handle duplicates in multi mounts.
  - Resolves: rhbz#1153130 rhbz#1156387 rhbz#1160446 rhbz#1175671 rhbz#1124083


author: Ian Kent <ikent@redhat.com> - 5.0.5-112
changelog:
  - bz1124083 - Autofs stopped mounting /net/hostname/mounts after seeing duplicate
    exports in the NFS server
    - fix use after free in patch to handle duplicate in multi mounts.
    - change log messages to try and make them more sensible.
  - fix log entry for rev 5.0.5-111 below.
  - Related: rhbz#1124083


author: Ian Kent <ikent@redhat.com> - 5.0.5-113
changelog:
  - bz1201195 - autofs: MAPFMT_DEFAULT is not macro in lookup_program.c
    - fix macro usage in lookup_program.c.
  - Resolves: rhbz#1201195


author: Ian Kent <ikent@redhat.com> - 5.0.5-115
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - add dependent patch series.
    - add aditional bug fix patches, including updated error handling on ldap bind fail.
    - add reinit method and change lookup to use reinit instead of reopen for its shared
      libraries.
  - Resolves: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-116
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix mistake in the updated error handling on ldap bind fail patch.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-117
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix error handling on ldap bind fail patch again.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-118
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix unbind external mech.
    - fix sasl connection concurrancy problem.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-119
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - rework sasl connection concurrancy problem patch.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-120
changelog:
  - bz1161031 - RFE: autofs MAP_HASH_TABLE_SIZE description
    - update map_hash_table_size description.
  - bz1248798 - Request to add a configuration option to force use of the map entry
    hostname for mounts
    - add configuration option to use fqdn in mounts.
  - also update changelog with patches include from other bugs in rev 115 to support
    changes for bug 1243525.
    - fix left mount count return from umount_multi_triggers() (1227496).
    - fix return handling in sss lookup module (1227496).
    - move query dn calculation from do_bind() to do_connect() (1227496).
    - make do_connect() return a status (1227496).
    - make connect_to_server() return a status (1227496).
    - make find_dc_server() return a status (1227496).
    - make find_server() return a status (1227496).
    - fix return handling of do_reconnect() in ldap module (1227496).
    - fix race accessing qdn in get_query_dn() (1084254).
    - init qdn before use in get_query_dn() (1084254).
    - fix direct mount stale instance flag reset (1232074).
  - bz1263505 - Heavy program map usage can lead to a hang
    - fix out of order call in program map lookup.
  - bz1238605 - On every system boot automount needs a restart to access NIS map
    - fix lsb service name in init script.
  - bz1097864 - Duplicate mounts created or leftovers in mtab
    - revert special case cifs escapes.
  - bz1203139 - Similar but unrelated NFS exports block proper mounting of
    "parent" mount point
    - remove unused offset handling code.
    - fix mount as you go offset selection.
  - bz1222522 - Parent directory in nested mount gets unmounted while the child
    remains mounted
    - guard against incorrect umount return.
  - bz1233057 - Direct map does not expire if map is initially empty
    - fix direct map expire not set for initail empty map.
  - Resolves: rhbz#1161031 rhbz#1248798 rhbz#1227496 rhbz#1084254 rhbz#1232074
  - Resolves: rhbz#1263505 rhbz#1238605 rhbz#1097864 rhbz#1203139 rhbz#1222522
  - Resolves: rhbz#1233057


author: Ian Kent <ikent@redhat.com> - 5.0.5-121
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - Some Coverity identified fixes for recent changes for this bug.
    - fix memory leak in nisplus lookup_reinit().
    - fix memory leak in ldap do_init().
    - fix use after free in sun parser parse_init().
    - fix use after free in open_lookup().
    - fix typo in autofs_sasl_bind().
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-122
changelog:
  - bz1233057 - Direct map does not expire if map is initially empty
    - don't schedule new alarms after readmap.
  - Related: rhbz#1233057


author: Ian Kent <ikent@redhat.com> - 5.0.5-123
changelog:
  - bz1333777 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - always set direct mounts catatonic at exit.
    - fix error handing in do_mount_indirect().
    - check negative cache much earlier.
    - log pipe read errors.
    - fix handle_mounts() termination condition check.
  - Resolves: rhbz#1333777


author: Ian Kent <ikent@redhat.com> - 5.0.5-130
changelog:
  - bz703846 - Incorrect autofs.schema
    - fix autofs.schema.new not copied to package.
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-131
changelog:
  - bz1396403 - Trying to access a non-existent directory using automount
                results in 4 minute hang with nfs-utils-1.2.3-73.el6
    - fix inconsistent signed usage for __rpc_ping().
    - check NFS server availability on local mount fallback
  - Resolves: rhbz#1396403


author: Ian Kent <ikent@redhat.com> - 5.0.5-132
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - make set_direct_mount_catatonic() more general.
    - set autofs mounts catatonic at exit
  - Related: rhbz#1277033


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-21
changelog:
  -bz578677 - random server selection is not random if any host is on a different network
   - fix random selection for host on different network
  - Resolves: rhbz#578677


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-22
changelog:
  - bz578128 - Service autofs initscript not LSB compliant
  - bz577097 - automount aborts when it authenticates by DIGEST-MD5
  - Resolves: rhbz#578128 rhbz#577097


author: Ian Kent <ikent@redhat.com> - 5.0.5-23
changelog:
  - bz597944 - autofs5: segfault in close_mount()
    - add mutex to serialize access to mount module handle in parse module.
    - dont check null cache on expire.
    - fix null cache race.
    - fix cache_init() on source re-read.
    - fold autofs-5.0.5-fix-memory-leak-on-reload.patch into
      fix cache_init() on source re-read patch where it belongs.
  - bz594565 - If maps include both file and nis maps, included nis maps which
      worked on RHEL 5.3 no longer work on RHEL 5.4
    - fix negative cache included map lookup
  - Resolves: rhhz#597944 rhbz#594565


author: Ian Kent <ikent@redhat.com> - 5.0.5-23.el6_0.1
changelog:
  - bz689754 - automount hangs on startup when started with an already
    mounted cifs share
    - fix remount locking
  - Resolves: rhbz#689754


author: Ian Kent <ikent@redhat.com> - 5.0.5-29
changelog:
  - bz579963 - autmount maps stored in LDAP can not be read using simple
    authenticated binds
    - deal with Kerberos library dependency.
  - Related: rhbz#579963


author: Ian Kent <ikent@redhat.com> - 5.0.5-30
changelog:
  - bz579963 - autmount maps stored in LDAP can not be read using simple
    authenticated binds
    - remove ERR_remove_state() openssl call. 
  - bz520844 - [RFE] autofs should honor admin supplied server weights in maps
    - update patch, also override proximity.
  - Related: rhbz#579963 rhbz#520844


author: Ian Kent <ikent@redhat.com> - 5.0.5-31
changelog:
  - bz700691 - autofs sometimes stops expiring mounts
    - fix next task list update race.
    - fix stale map read.
  - bz700697 - autofs with null maps specified in auto.master segfaults on reload
    - fix null cache clean.
  - Resolves: rhbz#700691 rhbz#700697


author: Ian Kent <ikent@redhat.com> - 5.0.5-37
changelog:
  - bz704416 - RFE: automounter to dump maps
    - fix dumpmaps not reading maps.
  - Related: rhbz#704416


author: Ian Kent <ikent@redhat.com> - 5.0.5-38
changelog:
  - bz700136 - autofs/automount 5.0.5 error in mounting expanded entry
    - improve mount location error reporting 
  - Resolves: rhbz#700136


author: Ian Kent <ikent@redhat.com> - 5.0.5-39
changelog:
  - bz732667 - Defects added by downstream patches
    - code analysis defect fixes, installment 1.
  - Resolves: rhbz#732667


author: Ian Kent <ikent@redhat.com> - 5.0.5-39.el6_2.1
changelog:
  - bz787122 - autofs-5.0.5-39.el6.x86_64 fails to load some LDAP maps
    - fix improve mount location error reporting.
  - Resolves: rhbz#787122


author: Ian Kent <ikent@redhat.com> - 5.0.5-52
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - also add BuildRequires for libsss_autofs.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-53
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - fix libsss_autofs not available at build.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-54
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - revert fix libsss_autofs not available at build.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-55.el6_3
changelog:
  - bz870929 - automount segfaults during the boot-up sequence
    - fix mountd vers retry.
    - fix initialization in rpc create_client().
    - fix libtirpc name clash.
    - fix get_nfs_info() can incorrectly fail.
  - Resolves: rhbz#870929


author: Ian Kent <ikent@redhat.com> - 5.0.5-71
changelog:
  - bz836422 - autofs /net maps do not refresh list of shares exported on
    the NFS server
    - fix submount offset delete.
  - Related: rhbz#836422


author: Ian Kent <ikent@redhat.com> - 5.0.5-72
changelog:
  - bz889055 - RHEL6.4 autofs initscript not LSB compliant
    - fix init script status return.
  - Resolves: rhbz#889055


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts at
    the same time
    - use numeric protocol ids instead of protoent structs.
  - Resolves: rhbz#921147


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts
    at the same time
    - correct patch name in spec file.
  - Related: rhbz#921147


author: Ian Kent <ikent@redhat.cem> - 5.0.5-75.el6_4
changelog:
  - bz1006163 - Race condition or other deadlocking issue on expire code path
    - expire thread use pending mutex.
  - Resolves: rhbz#1006163


author: Ian Kent <ikent@redhat.cem> - 5.0.5-86
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - add missing ">" to man page.
    - handle path name when when given instead of only map name.
  - Related: rhbz#852327


author: Ian Kent <ikent@redhat.cem> - 5.0.5-87
changelog:
  - bz1004129 - automounter load balancing with replicated servers broken
    by whitespace patch
    - fix get_nfs_info() probe.
  - Resolves: rhbz#1004129


author: Ian Kent <ikent@redhat.cem> - 5.0.5-88
changelog:
  - bz996749 - segmentation fault in ber_memalloc_x function when running automount
    - fix crash due to thread unsafe use of libldap.
  - Resolves: rhbz#996749


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89
changelog:
  - bz1067774 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - fix options compare.
  - Resolves: rhbz#1067774


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89.el6_5.1
changelog:
  - bz1067774 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - fix fix options compare.
  - Related: rhbz#1067774


author: Ian Kent <ikent@redhat.cem> - 5.0.5-89.el6_5.2
changelog:
  - bz1089889 - autofs can ghost non-existent map entries given the right timing
    - fix use cache entry after free in lookup_prune_one_cache().
    - check for non existent negative entries in lookup_ghost().
  - Resolves: rhbz#1089889


author: Michal Sekletar <msekleta@redhat.com> - 0.6.25-17
changelog:
  - produce better error message when client reaches maximum number of dbus objects (#1292862)
  - don't print backtrace if avahi-discover can't connect to avahi-daemon (#1110349)
  - introduce new subpackage with python bindings (#753905)
  - avahi-daemon initscript improvements (#584766)
  - avahi-dnsconfd initscript improvements (#584761)


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.25-7
changelog:
  - Fix for CVE-2010-2244
  - Resolves: #607296
  - Resolves: #594405
  - Related 587761
  - Related 584761
  - Related 584766
  - Related 596151
  - Related 599435


author: Nils Philippsen <nils@redhat.com> - 0.1.2-2
changelog:
  - split off devel-docs subpackage to make package multi-lib compliant (#477807)
  - let devel package require correct arch of base package


author: Lukáš Nykrýn <lnykryn@redhat.com> - 5.0.0-10
changelog:
  - put correct port in my.cnf (#756803)
  - shows correct job and file retention periods (#802158)
  - build with $RPM_OPT_FLAGS, show compiler commands in build log (#729008)
  - include /var/log/bacula.log and /var/log/bacula/ in logwatch (#728693)
  - ensure that /var/spool/bacula/log has correct selinux context (#728697)


author: Jan Görig <jgorig@redhat.com> 5.0.0-6
changelog:
  - initscripts improvements
  - fixed consolehelper settings and menu entries
  - Resolves: rhbz#587254 rhbz#587924


author: Jan Görig <jgorig@redhat.com> 5.0.0-7
changelog:
  - fixed multilib issue (#594115)
  - removed hostnames from bconsole.config (#603052)
  - fixed desktop files (#603061)
  - unconfigured service now returns correct return code


author: Jan Görig <jgorig@redhat.com> 5.0.0-8
changelog:
  - added applybaculadate (#651776)
  - fixed umask in make_catalog_backup.pl (#651780)
  - added support for changing bacula user and group in syconfig files
    and changed privilegies of bacula-dir.conf (#651786)
  - fixed bscan alternatives links (#651787)
  - fixed tray monitor default config (#657297)
  - fixed showing wrong size of incremental backup (#689400)


author: Jan Görig <jgorig@redhat.com> 5.0.0-9
changelog:
  - upgrade scriptlet for (#651787)
  - added chkconfig dependency (#712804)
  - added shadow-utils dependency (#712794)


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-12
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - Enable system-wide bash_logout
    Resolves: #677439
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #982610


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964687


author: Roman Rakus rrakus@redhat.com 4.1.2-1
changelog:
  - rebase to 4.1
  - Patch level 2
    Resolves #542692
  - Include COPYING in bash base rpm
    Resolves #553250


author: Ondrej Vasik <ovasik@redhat.com> 1.06-95-1
changelog:
  - update to upstream alpha 1.06.95 (in use in Gentoo, Slackware
    for quite a long time, marked stable there)
  - removed already applied patches, fix small memory leak
    (gentoo patch)
  - add missing BR for bison and texinfo


author: Andrew Overholt <overholt@redhat.com> 1.2.0-0.5.rc1.2
changelog:
  - Fix gcj_support macro usage
  - Add ASL 1.1 to License as XmlReader is 1.1 and included in final JAR


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P1
changelog:
  - fix occassional crash on keytable.c:286 (#554316)
  - active query might be destroyed in resume_dslookup() which triggered REQUIRE
    failure (#507429)


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3 (CVE-2011-0414)
  - patches merged
    - bind97-gsstsig.patch
    - bind97-rh664401.patch
    - bind97-rh623638.patch


author: Adam Tkac <atkac redhat com> 32:9.7.3-6.P3
changelog:
  - load/unload dyndb plugins on appropriate places to avoid crashes (#725577)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)
  - nsupdate returned zero when target zone didn't exist (#700097)
  - readd configtest target to initscript
  - print "the working directory is not writable" as debug message
  - fix some Coverity warnings


author: Adam Tkac <atkac redhat com> 32:9.7.3-8.P3.1
changelog:
  - fix race condition in resolver.c:validated()
  - improve error handling in zone.c:zone_refreshkeys() to avoid
    hang during shutdown


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.9.rc1
changelog:
  - fix race condition in the resolver module
  - nslookup: return non-zero exit code when fail to get answer (#816164)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.28.rc1
changelog:
  - Add support for TLSA resource records (#956685)
  - Increase defaults for lwresd workers and make workers and client objects number configurable (#1092035)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.30.rc1.3
changelog:
  - DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1220366)


author: Pavel Šimerda <psimerda@redhat.com> - 32:9.8.2-0.37.rc1
changelog:
  - Resolves: 1215687 - DNS resolution failure in high load environment with
    SERVFAIL and "out of memory/success" in the log


author: Tomas Hozza <thozza@redhat.com> - 32:9.8.2-0.43.rc1
changelog:
  - Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1227189)
  - Added the fixed tarball with configuration to Sources (Related: #1223359)


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.47.rc1.4
changelog:
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)


author: Petr Spacek <pspacek redhat com> - 2.3-4
changelog:
  - update-policy with match type 'zonesub' lead to crash (#921167)
  - zones without idnsUpdatePolicy attribute produced error messages (#908780)


author: Petr Spacek <pspacek@redhat.com> - 2.3-7
changelog:
  - fix crash caused by race condition during resolver cache flushing (#1126841)
  - fix ticket expiration check (#1142176)
  - fix idnsAllowTransfer and idnsAllowQuery attributes documentation (#1183805)


author: Jeff Law <law@redhat.com> - 2.20.51.0.2-5.38
changelog:
  - Use thread-safe PLT stubs for Power. (#906079)
  - Avoid segfault when arch member uses long names, but no longname
    table exists.  (#909056)
  - Correct patch for 773526. (#922393)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.2-1
changelog:
  - version 0.6.2
  Resolves: rhbz#1003465,rhbz#1084225,rhbz#1133523,rhbz#1158564,rhbz#1207557,rhbz#1212449


author: Eric Sandeen <sandeen@redhat.com> - 1.0.1-2
changelog:
  - Upstream respun the release tarball to re-include top-level dir
  - drop exclude of bno_plot.py[co], not getting built now?


author: Edward Shishkin <edward@redhat.com> - 1.0.1-4
changelog:
  - blktrace doesn't run when device name is duplicated (#583615)
  - blktrace prints incorrect usage when running w/o parameters (#619201)
  - btreplay cannot work for /dev/cciss/c0d0 device (#650229)
  - option -k doesn't kill running trace (#583624)
  - blkiomon prints nothing when blktrace works with logical volume (#650243)
  - blkparese exit with non-zero status when tracefile doesn't exist (#583695)
  - run time went but blktrace is still running (#595356)
  - inconsistencies in btrecord man page (#595413)
  - undocumented options in blkiomon (#595419)
  - undocumented options in blkparce (#595615)
  - undocumented options in blktrace (#595620)
  - undocumented options in btreplay (#595623)
  - undocumented options in btt (#595628)


author: Jiri Skala <jskala@redhat.com> 1.0.9-12
changelog:
  - Resolves: #593599 - corrected man page
  - Resolves: #590683 - replaced symlink devkit-disks by udisks binary
  - Resolvse: #595811 - bltk_plot fails in initialization


author: Jiri Skala <jskala@redhat.com> 1.0.9-13
changelog:
  - Resolves: #598538 - bltk_report_compress fails in initialization
  - extended modification due to unsupported workloads


author: Bastien Nocera <bnocera@redhat.com> 4.66-1
changelog:
  - Update to 4.66
  - Update cable pairing patch
  - Remove out-dated patches, including wacom pairing
  - Move hidd, pand and dund man pages to the -compat
    sub-package
  Resolves: rhbz#565586


author: Petr Machata <pmachata@redhat.com> - 1.41.0-9
changelog:
  - Use a .gz archive instead of bz2, because that's what's hosted now.
    Fill in the full URL.
  - Resolves: #571607


author: Petr Machata <pmachata@redhat.com> - 1.41.0-10
changelog:
  - Turn on OpenMPI support on non-s390 arches.  It was accidentally
    turned off everywhere.
  - Move cmake files to libdir to avoid multilib conflicts.
  - Also install Boost.cmake, which is included by BoostConfig.cmake
  - Change soname selection to work on RHELs.
  - Resolves: #586204
  - Resolves: #592516
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11
changelog:
  - ... and revert the soname change, because that's not the smartest
    thing to do mid-release.
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11.1
changelog:
  - Add an upstream patch that fixes computation of CRC in zlib streams.
  - Turn off mpich2 support on platforms where it's not shipped.
  - Resolves: #723503


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11.2
changelog:
  - Build with -fno-strict-aliasing due to the sheer amount of warnings
    that we get.
  - Related: #723503


author: Petr Machata <pmachata@redhat.com> - 1.41.0-16
changelog:
  - Fix a GCC warning for looser throw specifier in
    boost::exception_ptr::~exception_ptr.
    (boost-1.41.0-exception_ptr.patch)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-23
changelog:
  - Fix conformance problems in Boost.Interprocess, Boost.Intrusive and
    Boost.Graph
    (boost-1.41.0-graph-conformance.patch,
    boost-1.41.0-interprocess-conformance.patch,
    boost-1.41.0-interprocess-conformance-maxval.patch,
    boost-1.41.0-intrusive-conformance.patch)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-24
changelog:
  - Fix conformance problems in Boost.Numeric (uBLAS) and
    Boost.CircularBuffer (boost-1.41.0-numeric-conformance.patch,
    boost-1.41.0-circular_buffer-adl.patch)


author: Michal Schmidt <mschmidt@redhat.com> - 1.41.0-25
changelog:
  - mpich obsoleted mpich2. Build against mpich and rename subpackages
    accordingly. Obsolete mpich2 subpackages.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-26
changelog:
  - Change Requires: and other package references to use %{?_isa}, so
    that dependencies are arch-aware.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-27
changelog:
  - Fix the way MPI_VERSION is compared with (>=2 rather than ==2) so
    that an arg-less boost::mpi::environment ctor is exposed for MPI
    libraries with MPI_VERSION of 3.
    (boost-1.41.0-mpi-NOARG_INIT.patch)
  - Fix boost::interprocess::move (boost-1.41.0-interprocess-move.patch)
  - Fix copy construction of boost::weak_ptr
    (boost-1.41.0-weak_ptr-copy.patch)
  - Undo the change of non-Requires: package references to not use
    %{?_isa} again.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-21
changelog:
  - Fix building of Python module for Boost-MPI and ship it
    (boost-1.41.0-mpi-python.patch, __init__.py)


author: Jonathan Wakely <jwakely@redhat.com> - 1.41.0-22
changelog:
  - Fix shared_ptr to work with recent GCC and C++11.
    (boost-1.41.0-shared_ptr-deleted-copy.patch)
  - Resolves: #1108268


author: Thomas Woerner <twoerner@redhat.com> - 1.2-10
changelog:
  - Added support for brctl show <bridge> (rhbz#690529)
  - Added multicast option documentation to man page (rhbz#676355)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.1-7
changelog:
  - Fixed build in case ocaml is preinstalled in build root
    Resolves: rhbz#684526
  - Fixed /usr/lib/libbrlapi.so symbolic link
    Resolves: rhbz#809326


author: Martin Milata <mmilata@redhat.com> - 0.17-2
changelog:
  - Backport commit ec1bf395 that fixes several memory leaks
  - Backport abf036d5 that fixes a NULL dereference
  - Backport 6e0f49a3 that adds version to the manual page
  - Resolves: #803774, #903140, #905854


author: Zach Brown <zab@redhat.com> 0.20-0.2.git91d9eec
changelog:
  - bring btrfs-progs uptodate with current upstream git
  - updated patch to allow fs labels with slashes
  - btrfs-find-root, btrfs-restore, and btrfs-zero-log are now available
  - build with -fno-strict-aliasing


author: Jan Zeleny <jzeleny@redhat.com> - 2.1.1-2
changelog:
  - added -fno-strict-aliasing to build flags (strict aliasing seemed broken,
    but the code suggests it is intentionally this way)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-3
changelog:
  - Fall back to AF_INET when ares_gethostbyname() is called with AF_UNSPEC
  - Only set search domains from /etc/resolv.conf if there isn't a value
    already present in the channel (David Drisdale)
  - Related: rhbz#1077544 - Rebase c-ares to version 1.10


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.0-6
changelog:
  - Only fall back to AF_INET searches when looking for AF_UNSPEC
    addresses (#730695)
  - Do not leak memory in ares_parse_a_reply when parsing an invalid
    record (#730693)
  - Add a missing break (#713133) - reported and patched by Michal Luscon
  - Fix a SIGBUS when resolving SRV queries on architectures that do
    not support unaligned memory access (#695426)
  - Amend the ares_gethostbyname manpage so that it lists ARES_ENODATA as
    an allowed return code (#640944)


author: David Howells <dhowells@redhat.com>
changelog:
  - The SELinux policies for cachefilesd now live in the selinux-policy RPM, so
    the cachefilesd-selinux RPM is now redundant.
  - Move the default cache dir to /var/cache/fscache.
  - Make the initscript do a restorecon when starting the cache to make sure the
    labels are correct.
  - Fix a wildchar that should be a literal dot in the SELinux policy.


author: David Howells <dhowells@redhat.com>
changelog:
  - Fix the initscript to contain an LSB parseable description.
  - Fix the initscript to return the correct error codes [RH BZ 605631].


author: David Howells <dhowells@redhat.com> 0.9-1
changelog:
  - The cachefiles module no longer accepts directory fds on cull and inuse
    commands, but rather uses current working directory.


author: David Howells <dhowells@redhat.com>
changelog:
  - Must include sys/stat.h to use stat() and co. [RH BZ 565135].
  - Remove tail comments from functions.


author: David Howells <dhowells@redhat.com> 0.10.2-2
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Suspend culling when cache space is short and cache objects are pinned (#1109640).
  - Set the security label on the device file only after loading the module (#1066139).


author: David Howells <dhowells@redhat.com> 0.10.2-3
changelog:
  - postuninstall: Only restorecon /var/cache/fscache if it exists (#1316776)
  - Fix bogus dates in changelog


author: Roman Rakus rrakus@redhat.com 1.2.3-3
changelog:
  - no need option --with-mp3-support. it needs libmad(don't ship)
  - change license to GPLv2+
  - Some missing includes cause failure build
    Resolves Merge review


author: Monty <cmontgom@redhat.com> 0.5.1.2-0
changelog:
  - Rebase from upstream to pull in versioning changes and .pc.in fix
  - Bring inline with REVH package
  - Resolves: bz#488571  -  Add celt051 package


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-2
changelog:
  - don't create the daemon pidfile until after we've connected to the D-Bus
    (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - more gracefully handle manual daemon startups and cleaning up of unexpected
    crashes (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-4
changelog:
  - init script: ensure that the subsys lock is created whenever we're called to
    "start" when we're already running (even more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.40-1
changelog:
  - update to 0.40
    - fix validation check on EKU OIDs in getcert (#691351)
    - get session bus mode sorted
    - add a list of recognized EKU values to the getcert-request man page


author: Nalin Dahyabhai <nalin@redhat.com> 0.41-1
changelog:
  - read information about the keys we've just generated before proceeding
    to generating a CSR (part of #694184, part of #695675)
  - when processing a "resubmit" request from getcert, go back to key
    generation if we don't have keys yet, else go back to CSR generation as
    before (#694184, #695675)
  - configure with --with-tmpdir=/var/run/certmonger and own /var/run/certmonger
    (#687899), and add a systemd tmpfiles.d control file for creating
    /var/run/certmonger on Fedora 15 and later
  - let session instances exit when they get disconnected from the bus
  - use a lock file to make sure there's only one session instance messing
    around with the user's files at a time
  - fix errors saving certificates to NSS databases when there's already a
    certificate there with the same nickname (#695672)
  - make key and certificate location output from 'getcert list' more properly
    translatable (#7)


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1
changelog:
  - getcert: fix a buffer overrun preparing a request for the daemon when
    there are more parameters to encode than space in the array (#696185)
  - updated translations: de, es, id, pl, ru, uk


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1.1
changelog:
  - backport support for enabling delegation of GSSAPI credentials when we
    use Negotiate authentication for XML-RPC (#729804), and backport the
    option for making the ipa-submit helper use the current ccache, which
    makes it easier to test


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-1
changelog:
  - really fix these this time:
   - getcert: error out when "list -c" finds no matching CA (#743488)
   - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-2
changelog:
  - incorporate patch from Rob Crittenden to start supplying Referer:
    headers when we submit XML-RPC requests (#750617)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-3
changelog:
  - tweak the patch for #750617 to handle the case where xmlrpc-c doesn't
    offer dont_advertise as an option (Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> 0.55-1
changelog:
  - allow root to use our implementation of org.freedesktop.DBus.Properties
  - take more care to not emit useless PropertiesChanged signals


author: Nalin Dahyabhai <nalin@redhat.com> 0.56-1
changelog:
  - when a caller sets the is-default flag on a CA, and another CA is no longer
    the default, emit the PropertiesChanged signal on the CA which is not the
    default, instead on the new default a second time
  - drop some dead code from the D-Bus message handlers (static analysis,
    - cache public keys when we read private keys
  - go back to printing an error indicating that we're missing a required
    argument when we're missing a required argument, not that the option is
    invalid (broken since 0.51, #796542)


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-1
changelog:
  - fix a regression in reading old request tracking files where the
    request was in state NEED_TO_NOTIFY or NOTIFYING


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-3
changelog:
  - backport changes from 0.63/0.64/0.65 to broaden the scope of locks which
    certmonger uses internally to keep it from doing to much with the outside
    world (#893611)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.11-1
changelog:
  - when getcert is passed a -a flag, to indicate that CA root certificates
    should be stored in the specified database, don't ignore locations which
    don't include a storage scheme (#1129537)
  - when called to 'start-tracking' with the -a or -F flags, if we have
    applicable certificates on-hand for a CA that we're either told to use
    or which we decide is the correct one, save the certificates (#1129696)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.3-1
changelog:
  - fix a data loss bug when saving renewed certificates to NSS databases - the
    private key could be removed in error since 0.77
  - fixes for bugs found by static analysis
  - fix self-tests when built with OpenSSL 1.0.2


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.4-1
changelog:
  - don't display PINs in "getcert list" output (ticket #42, #1222595)
  - clean up launching of a private instance in "getcert"
  - expand on the don't-delete-private-key fix from 0.77.3 by letting NSS's
    own safety checks have an effect
  - backport record-keeping of key generation dates and counts of how many
    times we've gotten certificates using a given key pair


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.5-1
changelog:
  - pass $CERTMONGER_REQ_IP_ADDRESS to enrollment helpers if the signing request
    includes IP address subjectAltName values
  - correctly verify signatures on SCEP server replies when the signer is neither
    the top-level CA nor the RA (feedback in #1161768)
  - correctly verify signatures on SCEP server replies when there is more than
    one certificate in the chain between the RA and the top-level CA (feedback in


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.5-1
changelog:
  - avoid premature exit on CA data analysis failures (should fix an issue
    reported by Natxo Asenjo)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.7-1
changelog:
  - correctly read CA not-valid-after dates on 32-bit machines (also reported by
    Natxo Asenjo), so that we don't spin on polling them (#1163023)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.8-1
changelog:
  - dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155, patch by Jan Cholasta)
  - getcert: print help output when 'status' isn't given any args (#1163541)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.1-1
changelog:
  - update to 0.77
    - add initial, still rough, SCEP support (#1140241,#1161768)
      - add an scep-submit helper to handle part of it
    - getcert: add add-ca/add-scep-ca/modify-ca/remove-ca commands
    - getcert: add -l, -L flags to request/resubmit/start-tracking commands
      to provide a way to set a ChallengePassword in signing requests
    - lay some groundwork for rekeying support
    - bundled dogtag enrollment helpers now output debugging info to stderr (#)
    - ipa-getcert: fix a crash when using DNS discovery to locate servers (#39)
    - getcert: fix displaying of pre-request pre-/post-save commands (#1178190,
        - use Zanata for translations
    - getcert list: list the certificate's profile name, if it contains one


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.2-1
changelog:
  - expose the certificate's not-valid-before and not-valid-after dates as a
    property over D-Bus (ticket #41)
  - give the local signer its own configuration option to set the lifetime
    of its signing certificate, falling back to the lifetime configured for
    the self-signer as a default to match the previous behavior
  - fix a potential read segfault parsing the output of an enrollment helper,
    introduced in 0.77 (thanks to Steve Neuharth)
  - read the ns-certtype extension value in certificates
  - request an enrollment certtype extension to CSRs if we have a profile name
    that we want to use (ticket #17, possibly part of IPA ticket #57)


author: Jan Cholasta <jcholast@redhat.com> 0.77.5-2
changelog:
  - Accept cases where NSS insists on 2048-bit DSA
  - Drop workarounds for DSA keygen with NSS
  - Get vague about what we expect from certutil
  - Accept 1016 instead of 1024 bit for DSA keygen
  - Add an alternate accepted result for DSA keygen
  - Fix a possible uninitialized memory read


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Latest update from NSA
  	* Add support for building Xen policies from Paul Nuzzi.
  	* Add long options to checkpolicy and checkmodule by Guido
  	  Trentalancia <guido@trentalancia.com>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Latest update from NSA
  	* Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
  - Allow policy version to be one number
  Resolves: #588260


author: Bill Nottingham <notting@redhat.com> 1.3.45-1
changelog:
  - add support for Should-Start, Should-Stop (#98470, <iarnell@gmail.com>)
  - ntsysv: don't drop initscripts with '.' in the name (#556751)
  - translation updates: el, id


author: Bill Nottingham <notting@redhat.com> 1.3.49.1-1
changelog:
  - backport LSB fixes from head
  - fixes: #693202/#771455, #649227/#771452, #750446/#771454, #701573/#771741, #696305 (<jbastian@redhat.com>)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.49.4-1
changelog:
  - chkconfig: don't create symlinks if they already exist
  - chkconfig: resetpriorities should work on all runlevels
  - leveldb: fix segfault when selinux policy is not present
  - alternatives: always recreate symlinks when the alternative is updated


author: Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775
changelog:
  - update to 20100428git73d775
  - replace initstepslew directive with makestep in default config
  - add NetworkManager dispatcher script
  - add dhclient script
  - retry server/peer name resolution at least once to workaround
    NetworkManager race condition on boot
  - don't verify chrony.keys


author: Miroslav Lichvar <mlichvar@redhat.com> 1.25-1
changelog:
  - update to 1.25
  - link with -Wl,-z,relro,-z,now options
  - use iburst, four pool servers, rtcsync, stratumweight in default config
  - suppress install-info errors


author: Miroslav Lichvar <mlichvar@redhat.com> 1.25-3
changelog:
  - fix buffer overflow when processing crafted command packets (CVE-2012-4502)
  - don't send uninitialized data in command replies (CVE-2012-4503)


author: Jeff Layton <jlayton@redhat.com> 4.4-5.el6.0.1
changelog:
  - cifs.upcall: set GSSAPI checksum in SPNEGO blobs (bz 668366)
  - cifs.upcall: fix '-l' option (bz 668366)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-16
changelog:
  - fix even more issues in cifs.idmap (bz 843617)
  - fix even more issues in getcifsacl/setcifsacl (bz 843612)
  - fixes for problems in setcifsacl found by coverity (bz 873683)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-3
changelog:
  - mount.cifs: reacquire CAP_DAC_READ_SEARCH before calling mount (bz 676439)
  - manpage: document missing mount.cifs options (bz 719363)


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-11
changelog:
  - Delete /var/lib/clamav/mirrors.dat, it will be recreated on first run.
  - clamav-milter config cleanups.


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-12
changelog:
  - Move deletion of /var/lib/clamav/mirrors.dat to db package.
  - Don't enable NotifyClamd in freshclam config and cronjob, as not
    everybody is running clamd. Running clamd's will anyway notice
    when db is updated.


author: Nick Bebout <nb@fedoraproject.org> - 0.97.5-1
changelog:
  - Upgrade to 0.97.5
  - Fix CVE-2012-1419 clamav: specially-crafted POSIX tar files evade detection
  - Fix CVE-2012-1457 clamav: overly long length field in tar files evade detection
  - Fix CVE-2012-1443 clamav: specially-crafted RAR files evade detection
  - Fix CVE-2012-1458 clamav: specially-crafted CHM files evade detection
  - Fix CVE-2012-1459 clamav: specially-crafted length field in tar files evade detection
  - Ship local copy of virus database; it was removed by accident from 0.97.5 tarball


author: Paul Wouters <pwouters@redhat.com> - 0.98.3-1
changelog:
  - Upgrade to 0.98.3
  - Fix --with-libcurl parameter to avoid automatic path detection breakage
  - openssl-devel is now required for hashing code.
  - Added clamsubmit to main package
  - Re-enabled --with-llvm as this speeds up deployment a lot.
  - Fixed older changelog dates


author: Robert Scheck <robert@fedoraproject.org> - 0.98.4-1
changelog:
  - Upgrade to 0.98.4 and updated daily.cvd (#1111811)
  - Add build requirement to libxml2 for DMG, OpenIOC and XAR


author: Dodji Seketeli <dodji@redhat.com> - 0.15.7-1
changelog:
  - Update to new upstream version (0.15.7)
  - Do not build from git snapshot anymore. Rather, got the tarball from
    ftp://gcc.gnu.org/pub/gcc/infrastructure/cloog-ppl-0.15.7.tar.gz
  - The upstream tarball is named cloog-ppl, not cloog. Adjusted thusly.
  - Use system libtool to disable standard rpath
  - Do not try to touch the info file if it's not present. Closes #515929.


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.55.0-3
changelog:
  - auto-generate SEE ALSO sections for the man pages
  - utilize test suite in the check phase of the build process
  - bump upstream package (intentional jump on upstream front),
    see https://github.com/jnpkrn/clufter/releases/tag/v0.55.0


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.56.0-1
changelog:
  - general spec file refresh (pagure.io as a default project base, etc.)
  - bump upstream package, see
    https://github.com/jnpkrn/clufter/releases/tag/v0.56.0


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.56.2-1
changelog:
  - move entry_points.txt to clufter-cli sub-package
  - bump upstream package, see
    https://github.com/jnpkrn/clufter/releases/tag/v0.56.2


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.59.6-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
    (v0.56.3, v0.57.0, v0.58.0, v0.59.0 ... v0.59.6)
  - make Python interpreter execution sane


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - cman: do not propagate old configurations around
    (cman_do_not_propagate_old_configurations_around.patch)
    cman: Clarify man page on config distribution
    (cman_clarify_man_page_on_config_distribution.patch)
    Resolves: rhbz#619680


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-22
changelog:
  - gfs2-utils: mkfs can't fsync device with 32MB RGs
    (gfs2_utils_mkfs_can_t_fsync_device_with_32mb_rgs.patch)
    Resolves: rhbz#622844


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23
changelog:
  - gfs2-utils: fsck.gfs2 deletes directories if they get too big
    (gfs2_fsck_do_not_delete_directories_if_they_get_too_big.patch)
    Resolves: rhbz#624691


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-23.el6_0.2
changelog:
  - fsck.gfs2 segfaults if journals are missing
    (fsck_gfs2_segfaults_if_journals_are_missing.patch)
    Resolves: rhbz#637699


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23.el6_0.3
changelog:
  - cman init: fix "stop remove" operation
    (cman_init_fix_stop_remove_ops.patch)
  - cman: Calculate expected_votes correctly after leave remove
    (cman_fix_calculate_expected_vote_after_leave_remove.patch)
    Resolves: rhbz#638954


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23.el6_0.4
changelog:
  - cman: fix startup race condition when configs are different across nodes
    (cman_fix_startup_race_condition_with_different_config_versions.patch)
    Resolves: rhbz#639958


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-23.el6_0.6
changelog:
  - gfs2_convert: corrupts file system when directory has di_height 3
    (gfs2_convert_corrupts_file_system_when_directory_has_di_height_3.patch)
    Resolves: rhbz#643279


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-39
changelog:
  - config: Add DRBD 0.8.3 metadata back to schema
    (add_drbd_0_8_3_metadata_back_to_schema.patch)
    Resolves: rhbz#680172


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-40
changelog:
  - gfs2_convert: exits with success without doing anything
    (gfs2_convert_exists_with_success_without_doing_anything.patch)
    Resolves: rhbz#688734


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-41
changelog:
  - gfs2_convert: exits with success without doing anything
    (gfs2_convert_exists_with_success_without_doing_anything_part2.patch)
    Resolves: rhbz#688734


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-30
changelog:
  - config: update relax ng schema to include totem miss_count_const
    Resolves: rhbz#804938
  - cman init: fix start sequence error handling
    Resolves: rhbz#806002


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-32
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - cman notifyd: deliver cluster status on startup
    Resolves: rhbz#819787


author: Bob Peterson <rpeterso@redhat.com> - 3.0.12.1-48
changelog:
  - After converting a GFS1 file system with gfs2_convert errors were detected with fsck.gfs2
    Resolves: rhbz#888053


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-49.2
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts
  - libgfs2: check return code of rename
  - libgfs2: Correct error message in mtab update code
  - libgfs2: Set umask before calling mkstemp
  - gfs2_grow: report bad return codes on error
    Resolves: rhbz#1001504


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-57
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts (3 patches)
    Resolves: rhbz#996233


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-59.1
changelog:
  - config: Add missing @ to logging path so logging changes are read correctly
    Resolves: rhbz#1037510


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-59.2
changelog:
  - fenced: keep manual ACk fifo open for longer and also make fenced_external()
    write to it.
    Resolves: rhbz#1079991


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-67
changelog:
  - dlm_controld: Adjust fence time comparison
    Resolves: #rhbz843160
  - man: update fence_node options
    Resolves: #rhbz886016
  - fenced: Wait for ringid
    gfs_controld: Fix first recovery case
    Resolves: #rhbz982305


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-68.1
changelog:
  - gfs_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1234442
  - dlm_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1233534


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-72
changelog:
  - xml: ccs_update_schema: be verbose about extraction fail
    Resolves rhbz#1087286
  - qdiskd: warn if no heuristics defied for >2 node clusters
    Resolves: rhbz#1095418
  - *_controld: better logging if receive_start fails
    Resolves: rhbz#1095657
  - qdiskd: Enable master_wins if votes=1
    Resolves: rbhz#1099223
  - cman: fix cman.5 man page to indicate only 1 altname is allowed
    Resolves: rhbz#1111500
  - cman: Slight fix to message issued for invalid two_node clusters
    Resolves: rhbz#1142947


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-73.1
changelog:
  - gfs_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1234443
  - dlm_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1233535


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-74
changelog:
  - fsck.gfs2: replace recent i_goal fixes with simple logic
    Resolves: rhbz#1238754
  - fsck.gfs2: Change duptree structure to have generic flags
  - fsck.gfs2: Detect, fix and clone duplicate block refs within a dinode
    Resolves: rhbz#1206149


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-75
changelog:
  - fenced: Delay killing a node if there's a stateful merge after a short outage
    Resolves: rhbz#1077890
  - cman_tool: Don't segfault if /dev/zero doesn't exist
    Resolves: rhbz#1171241
  - cman: Improve node-name matching algorithm
    Resolves: rhbz#1193169
  - cman: Delete temp file if ccs_validation fails
    Resolves: rhbz#1206188
  - dlm_controld: reconnect uevent socket on error
    Resolves: rhbz#1221815
  - gfs_controld: reconnect uevent socket on error
    Resolves: rhbz#1225583
  - groupd: Show more than 128 mount groups or lockspaces
    Resolves: rhbz#1243944
  - qdiskd: fix memory leak in unaligned write path
    Resolves: rhbz#1245232
  - qdiskd: fix memory copy in unaligned write path
    Resolves: rhbz#1245232
  - qdiskd: Watch for other nodes leaving during a master re-election
    Resolves: rhbz#1257732


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-75
changelog:
  - libfence: Remove fencedevice params from fence_node -S so that asking for
    status does not shut down a node if action= is set
    Resolves: rhbz#1252991
  - schema: add RRP attributes for <token> section
    Resolves: rhbz#1221728


author: Andrew Beekhof <andrew@beekhof.net> 1.0.5-1
changelog:
  - Do not build on ppc and ppc64.
    Resolves: rhbz#590981
  - Rebase on new upstream version: 1448deafdf79
    Resolves: rhbz#590662
    + High: LRM: lrmd: don't add the cancel option in flush to the running operations (bnc#578644)
    + High: LRM: lrmd: don't flush operations which don't belong to the requesting client (lf#2161)
    + High: LRM: lrmd: on shutdown exit once all operations finished (lf#2340)


author: Andrew Beekhof <andrew@beekhof.net> 1.0.5-2
changelog:
  - Fix provides/requires for sub packages to avoid version issues
  - Add missing man page
    Resolves: rhbz#594116


author: David Vossel <dvossel@redhat.com> 1.0.5-4
changelog:
  - Fixes issue with cancelled reoccurring operations never being removed from lrmd.
    Resolves: rhbz#786746


author: Lon Hohberger <lhh@redhat.com> - 0.16.2-7
changelog:
  - Add missing SNMP notifications to MIB and clean MIB up
  - Fix initscript return code when an invalid operation was
    specified
  - Resolves: rhbz#553382 rhbz#561413


author: Ryan McCabe <rmccabe@redhat.com> - 0.16.2-14
changelog:
  - Fix bz733798 (modclusterd service start doesn't obey failover domain ordering)
  - Fix bz736818 (fix potential deadlocks when calling the execute() function)


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-28
changelog:
  - Fix cluster-snmp module causes net-snmp to SEGV when told to reload
    Resolves: rhbz#888543
  - Fix modclusterd crashes with segfault in IPv4 only environment
    Resolves: rhbz#951470


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-31
changelog:
  - modcluster: overload stop_service so that it can fulfill its nominal promise
    Resolves: rhbz#1114622


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-31
changelog:
  - modcluster: Overload stop_service so that it can fulfill its nominal promise
    Resolves: rhbz#1114622


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-35
changelog:
  - modcluster: Manage cmirrord along with other services. Original patch
                provided by Curtis Taylor of IBM, heavily reworked later.
  - Resolves: rhbz#1219617


author: Owen Taylor <otaylor@redhat.com> - 1.0.6-2
changelog:
  - Remove gir-repository/gobject-introspection requirements, and disable
    introspection support
    Related: rhbz 553806


author: Jay Fenlason <fenlason@redhat.com> 1:1.2.15-1.el5
changelog:
  - Change sysconfig file to /etc/rdma/compat-dapl to match the change in dapl
  - Split out into separate source rpm from the dapl-2.0.25-2.el5.src.rpm
    Resolves: rhbz#557170 split compat-dapl into a separate srpm


author: Doug Ledford <dledford@redhat.com> - 1:1.2.15-2.el6
changelog:
  - Fix various rpmlint wanrings in spec file
  - Version all of the obsoletes
  - Now that this is no longer part of the dapl rpm, it needs its own
    doc macro so that the license and whatnot are on the system when the
    package is installed
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> - 1:1.2.15-2.1.el6
changelog:
  - Include pipe-leak patch to close
    Resolves: rhbz619439 - OFED1.5.1: uDAPL - cma: memory leak of FD's (DB2 pureScale)
    This required some whitspace editing--apparently the patch was garbled
    somewhere in transit.
  - Include the cma-memleak-verbs-CQ-compl-chans-fix patch to close
    Resolves: rhbz619443 - OFED1.5.1: uDAPL handles close on forked child exit (DB2 pureScale)


author: Doug Ledford <dledford@redhat.com> - 1:1.2.19-1
changelog:
  - Update to latest upstream release (1.2.15 -> 1.2.19)
  - Remove 3 patches rolled into upstream
  - Update exclusive arch to accommodate i686 arch
  - Related: bz725016, bz724896


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-68
changelog:
  - strip -march=z9-109 and -mtune=z10 from OPT_FLAGS on s390, s390x
    (#523209)
  - make sure to use system libgcc_s.so.1 instead of gcc32 one during
    testing


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-2
changelog:
  * Also include 1.5.3 libraries so users of RHEL-6.5+ can run
    programs compiled on RHEL-6.2-
    Resolves: rhbz876315


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-1.2
changelog:
  - Don't bother passing in options that the 1.4.3 configure doesn't
    understand.
  - set XFLAGS on all archs, not just x86_64.
  - Copy requires/provides filtering from openmpi so this will stop
    providing libotf.so.0
    Resolves: rhbz1097290


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-2
changelog:
  - Split into subpackages per OpenMPI version (compat-openmpi14,
    compat-openmpi15)
  - Add compat-openmpi18.
  - Resolves: rhbz1158864, rhbz1142157


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-5
changelog:
  - Rename compat-openmpiXY to openmpi-X.Y. Package names, directories,
    modulefiles.
  - Ship multiple openmpi versions:
    - openmpi-1.4   (compat with RHEL 6.0, 6.1)
    - openmpi-1.5.3 (compat with RHEL 6.2)
    - openmpi-1.5.4 (compat with RHEL 6.3, 6.4, 6.5)
    - openmpi-1.8   (compat with RHEL 6.6, 6.7)
  - Avoid breakage in transition from the compat-openmpi package from RHEL 6.7
    (was versioned as 1.4.3, but was in fact a chimera of 1.4.3 and 1.5.3,
     where really only 1.5.3 had any chance of working) by keeping the
    "compat-openmpi", "compat-openmpi-$arch" directory and module names
    for openmpi-1.5.3.
  - openmpi-1.8 keeps the module and directory unversioned names "openmpi",
    "openmpi-$arch" it had in RHEL 6.7.
  - Related: rhbz1158864


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Ran Regex: (Release:\s+.*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes
  - Added Source: compat-openmpi.ini
  -->  Config file for automated patch script
  - Added Source: openmpi-1.8.1-nfstest.patch
  -->  This patch updates the opal_path_nfs test to the 1.10 version. see BZ#1340549
  - Added Source: compat-openmpi.patch
  -->  Make sure our nfstest patch is applied at right point in spec file.


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Owen Taylor <otaylor@redhat.com> - 0.8.2-22
changelog:
  - Cleanups: fix URL to sources, remove commented out references to a
      patch not in CVS
    Related: rhbz 543948


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.5-2.5
changelog:
  - Forward-porting fixes from RHEL6.
  - Enlarge buffer used for formatting date in a string format.
  - Resolves: rhbz#891938.
  - Allow configuration of the maximum number of open files.
  - Resolves: rhbz#738967.


author: Ondrej Vasik <ovasik@redhat.com> - 0.2.7-3
changelog:
  - change project URL to current one (#1022502)
  - ensure num_threads <= IPMICONSOLE_THREAD_COUNT_MAX (#1022496)


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-37
changelog:
  - wacom: Make the calibrator window stay above other windows and
    cancel calibration if/when the calibrator loses input focus.
    Resolves: #818692


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-38
changelog:
  - wacom: Re-sync sources from gnome-settings-daemon-2.28.2-26 with
    LED support (#805069)
    Resolves: #805069


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-33
changelog:
  - wacom: add support for NV-CONTROL extension (#805038)
  - wacom: fix button mapping (#805045)
  - wacom: add LED support from upstream (#805069)
    Resolves: #805038 #805045 #805069


author: Carlos Garnacho <cgarnach@redhat.com> 2.28.1-41
changelog:
  - Check ~/.config/gnome-settings-daemon/no-per-machine-config for wacom settings
    Resolves: #966658


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-20
changelog:
  - Fix Spice issue where we disconnected if we couldn't find the applet
    rather then treating the applet as empty. 
  - Fix memory leak in machdep error path


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-36
changelog:
  - Recognize up to 10 certs and keys on PIV and CAC cards.
  - Allow cards to have no cert in slot '0'.
  - Allow cards to have ECC and RSA certs and keys


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-38
changelog:
  - rename the cache changes done in -36 so that they have issues with old
    cache values
  - fix cac 1 alt tokens that store certs beyond the top three slots
  - fix hand when using hp keyboard


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-11
changelog:
  - adjust the wording in the octal value byte representation
    documentation to match with upstream(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-12
changelog:
  - document that dd's iflag=fulblock prevents dd's oflag=direct
   automatic turn off when reading via pipe(#614605)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-14
changelog:
  - tweak documentation of tail --sleep-interval (#725618)
  - prevent build failure on system with mock>=1.1.9 (#691292)
  - su: fix shell suspend in tcsh (#703712)
  - ls: use acl_extended_file_nofollow() to prevent unnecessary
    autofs mounts(#720325)
  - fix cp -Z functionality if the destination exists(#715557)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-17
changelog:
  - fix memory leak in ls -l (#751974)
  - document difference between ls -lZ and ls -Zl (#771843)
  - fix various i18n patch related issues in pr (#772172)
  - df should display target device information when
    a symbolic link is specified as a parameter(#766461)
  - su no longer hangs when a program set itself to ignore
    SIG_CHLD signal, and fork a child to exec su(#754029)
  - stat recognizes few new filesystems, tail -f recognizes
    FhGFS and GPFS as remote (disables inotify) (#769874)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.1
changelog:
  - revert to polling for unknown filesystems, update
    known fs for tail and stat based on coreutils-8.21 (#924711)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.2
changelog:
  - fix parsing of field regression in sort command
    (introduced between RHEL5 and RHEL6 upstream) (#963327)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-29
changelog:
  - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various
    segmentation faults in sort, uniq and join(#1015019)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-33
changelog:
  - su: don't terminate parent process upon SIGTERM(#1063887)
  - tail: do not show "reverting to polling" warning when not
    necessary (#1046818)
  - chcon: document default behaviour for symlink (#1064621)
  - fix dd sparse test failure on XFS (#1075679)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-34
changelog:
  - tail: disable inotify in --follow for vxfs (#1104244)
  - df: dereference symlinks to disk device nodes (#812449)
  - dd: add support for count_bytes iflag (#1098078)


author: Ondrej Oprala <ooprala@redhat.com> - 8.4-39
changelog:
  - du: improve du error message of coreutils commands in a chrooted environment
    (patch by Boris Ranto) (#1086916)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-40
changelog:
  - ls: improve efficiency on filesystems without support for ACLs,
    xattrs or SELinux (#1248141)
  - su: suppress PAM info messages for -c or non-login sessions (#1267588)
  - tail, stat: recognize several new filesystems - up2date by Jan 1st 2016 (#1280333)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-41
changelog:
  - colorls.sh,colorls.csh - call utilities with complete path (#1222140)
  - mkdir, mkfifo, mknod - respect default umask/acls when 
    COREUTILS_CHILD_DEFAULT_ACLS envvar is set (to match rhel 7 behaviour,


author: Kamil Dudka <kdudka@redhat.com> - 8.4-44
changelog:
  - fix the functionality of 'sort -h -k ...' in multi-byte locales (#1357979)
  - use correct path to grep(1) in colorls.sh (#1376892)
  - make colorls.sh compatible with ksh (#1321643)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-7
changelog:
  - doublequote LS_COLORS in colorls.*sh scripts to speedup
    shell start(#586949)
  - update /etc/DIR_COLORS* files
  - move readlink from /usr/bin to bin, keep symlink in
    /usr/bin(#586948)


author: Steven Dake <sdake@redhat.com> 1.2.3-19
changelog:
  - Resolves: rhbz#623790
  - Add upstream revision 3023 - Properly detect server failure instead of falsely
    detecting during a configuration change.


author: Steven Dake <sdake@edhat.com> 1.2.3-21.1
changelog:
  - Resolves: rhbz#638592
  - merge upstream commit bab4945b57c150301c034085f3ce7b4187b6c864
  -  Works around problem where some switch hardware delays multicast
  -  packets compared to the unicast token.  This would result in messages
  -  being retransmitted when no retransmission was necessary.


author: Jan Friesse <jfriesse@edhat.com> 1.2.3-21.2
changelog:
  - Resolves: rhbz#696735
  - Resolves: rhbz#696734
  - Resolves: rhbz#681258
  - Resolves: rhbz#696733
  - Resolves: rhbz#696732

  - Remove shared memory leak in clients if corosync faults (rhbz#665165)
  - merge upstream commit b57573b037aa2737aed2ba706bf55a4599884641 (rhbz#665165)
  - Avoid abort if existing ring id file does not contain
    atleast 8 bytes.  (rhbz#696734)
  - merge upstream commit bb35b86fef4f256a21993f73b71fd512d4763e2f (rhbz#696734)
  - Fix problem where objdb handle destroy is not called in
    clear_object.  (rhbz#681258)
  - merge upstream commit ea18c71936edf8cdc647245374f3a7932ac7e686 (rhbz#681258)
  - Fix problem where all items are not iterated in
    object_reload_notification.  (rhbz#681258)
  - merge upstream commit 7f2e1da84d5883176f0f95936b8a4bf21de12a0a (rhbz#681258)
  - Only restore old ring id information once before operational
    state.  (rhbz#696733)
  - merge upstream commit 0eabeee63eca7a4cc1d907607057ac668fafbcae (rhbz#696733)
  - Free recovery messages during operational enter rather then
    via message_free() call.  (rhbz#696733)
  - merge upstream commit 0fcf760977a73ef78bacff47e61c30ba21929faa (rhbz#696733)
  - Fix problem that leads to abort when token lost in
    recovery sate. (rhbz#696733)
  - merge upstream commit 6aa47fde953bf2179f5bd2dd07815fc7d80f47bb (rhbz#696733)
  - Remove recv_flush operations from totemsrp to remove recursion
    error.  (rhbz#696732)
  - backport of upstream commit 336741ee96caf3ae435b609ee8a76788902c9edf (rhbz#696732)
  - Remove assertion during corosync shutdown.  (rhbz#696732)
  - merge upstream commit 92a3a1aa9d07e769eb6bc59467454e0316549cf6 (rhbz#696732)


author: Steven Dak <sdake@redhat.com> 1.2.3-34
changelog:
  - Resolves: rhbz#629380
  - merge non-committed patch which fixes stack protector failure.  (rhbz#629380)


author: Steven Dake <sdake@redhat.com> 1.2.3-35
changelog:
  - Reverts: rhbz#599327
  - revert upstream commit 061b770b83a9533dad527eda5f7d41e763cb40da (rhbz#599327)
  - revert upstream commit 2f1b7a962911670493d0db3695fc9fb91ceb0c82 (rhbz#599327)
  - Display warning and add object database feature to indicate when system
    firewall is enabled. (rhbz#599327)


author: Steven Dake <sdake@redhat.com> 1.2.3-36
changelog:
  - Resolves: rhbz#629380
  - merge upstream commit fd78f27715be326c6fe5439fa7e8d8077642db64 (rhbz#629380)
  - Place statistics changes outside of IPC mutexes to avoid deadlocks (rhbz#629380)


author: Jan Friesse <jfriesse@edhat.com> 1.2.3-36.1
changelog:
  - Resolves: rhbz#726608
  - Resolves: rhbz#727962

  - Fix problem where corosync will segfault if there are gaps in recovery queue (rhbz#727962)
  - merge upstream commit b8a061ae28e7c874b66fa1d35ab01f53d1d36b42 (rhbz#727962)
  - Revert "totemsrp: Remove recv_flush code" (rhbz#726608)
  - merge upstream commit ee0a0dd75e248d5ad777f0beb77e98baddf0a23f (rhbz#726608)
  - main: let poll really stop before totempg_finalize (rhbz#726608)
  - merge upstream commit b620cd7d562643ec794113f948d6904c29791e21 (rhbz#726608)


author: Jan Friesse <jfriesse@redhat.com> 1.2.3-36.2
changelog:
  - Resolves: rhbz#734997
  - Ignore memb_join messages during flush operations (rhbz#734997)
  - merge upstream commit be608c050247e5f9c8266b8a0f9803cc0a3dc881 (rhbz#734997)


author: Jan Friesse <jfriesse@redhat.com> 1.2.3-36.3
changelog:
  - Resolves: rhbz#727962

  - Deliver all messages from my_high_seq_recieved to the last gap (rhbz#727962)
  - merge upstream commit e530376a60dc862f135bd0d4c52aebb43d948423 (rhbz#727962)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-13
changelog:
  - Resolves: rhbz#830799
  - Resolves: rhbz#863940
  - Resolves: rhbz#869609

  - cpg: Never choose downlist with localnode (rhbz#830799)
  - merge upstream commit 559d4083ed8355fe83f275e53b9c8f52a91694b2 (rhbz#830799)
  - cpg: Process join list after downlists (rhbz#830799)
  - merge upstream commit 02c5dffa5bb8579c223006fa1587de9ba7409a3d (rhbz#830799)
  - cpg: Enhance downlist selection algorithm (rhbz#830799)
  - merge upstream commit 64d0e5ace025cc929e42896c5d6beb3ef75b8244 (rhbz#830799)
  - Don't call sync_* funcs for unloaded services (rhbz#863940)
  - merge upstream commit 6ed260b0bfc5e5230a4e765b9c63caf985708c41 (rhbz#863940)
  - Handle sync and service unload correctly (rhbz#863940)
  - merge upstream commit e7536bdaf82044671d2d18ee799eeacd8603af08 (rhbz#863940)
  - Make service_build contain correct number of msgs (rhbz#863940)
  - merge upstream commit 1cea171c4d8f9dd19b4995f96842111e41f23d6c (rhbz#863940)
  - Ignore sync barrier msgs if sync doesn't started (rhbz#869609)
  - merge upstream commit ee292e7968f749f7ebc4daddeb09f39cfbb037b4 (rhbz#869609)
  - Fix problem with sync operations under very rare circumstances (rhbz#830799)
  - merge upstream commit 6fae42ba72006941c1fde99616ea30f4f10ebb38 (rhbz#830799)
  - Handle segfault in backlog_get (rhbz#830799)
  - merge upstream commit a559ccf7247bc448ba30b6ebc02a91fa986f146f (rhbz#830799)
  - Add waiting_trans_ack also to fragmentation layer (rhbz#830799)
  - merge upstream commit 7de25c3b64b2066de19b3f9075c075fb08816de6 (rhbz#830799)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-14
changelog:
  - Resolves: rhbz#865039

  - coroipc: Don't spin when waiting on semaphore (rhbz#865039)
  - merge upstream commit 7ce8718a71b7afe341d9f9ac21c6724d6f18dfc4 (rhbz#865039)
  - On places with POLLERR check also POLLNVAL (rhbz#865039)
  - merge upstream commit 105305a486ae9f171def221ad971d607604a4770 (rhbz#865039)
  - Check socket_recv error code in ipc_dispatch_get (rhbz#865039)
  - merge upstream commit 694a9c2cf0804428671bf815b974a080c7fd1c6c (rhbz#865039)
  - coroipc: Handle pfd.revents as bit-field (rhbz#865039)
  - merge upstream commit b6aabed698d34e4e79e03a3354e59a2d0121e692 (rhbz#865039)
  - ipcc: Return dup of socket fd to user application (rhbz#865039)
  - merge upstream commit 28c5907f59afd52a67be3bddff22df57e1fb36ba (rhbz#865039)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15
changelog:
  - Resolves: rhbz#902397

  - totemip: Properly detect ipv6 address (rhbz#902397)
  - merge upstream commit d76759ec26ecaeb9cc01f49e9eb0749b61454d27 (rhbz#902397)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15.1
changelog:
  - Resolves: rhbz#929101

  - Put handle to hdb in dispatch on unknown message (rhbz#929101)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#929101)
  - Properly check result of coroipcc_dispatch_put (rhbz#929101)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#929101)
  - coroipcs: Ensure rb data are not overwritten (rhbz#929101)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#929101)
  - Properly lock pending_semops (rhbz#929101)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#929101)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-16
changelog:
  - Resolves: rhbz#854216
  - Resolves: rhbz#877349
  - Resolves: rhbz#880598
  - Resolves: rhbz#881729
  - Resolves: rhbz#906432
  - Resolves: rhbz#907894
  - Resolves: rhbz#915490
  - Resolves: rhbz#915769
  - Resolves: rhbz#916227
  - Resolves: rhbz#922671
  - Resolves: rhbz#924261
  - Resolves: rhbz#947936
  - Resolves: rhbz#949491
  - Resolves: rhbz#959184
  - Resolves: rhbz#959189

  - If failed_to_recv is set, consensus can be empty (rhbz#854216)
  - merge upstream commit 81ff0e8c94589bb7139d89e573a75473cfc5d173 (rhbz#854216)
  - objdb: Don't read uninitialized memory in inc/dec (rhbz#880598)
  - merge upstream commit 0a11d261a361726703084897471608d9914e0548 (rhbz#880598)
  - log: Handle race in printf_to_logs and format_set (rhbz#881729)
  - merge upstream commit a282eeecb4899ec415f76442217836338edfbeec (rhbz#881729)
  - log: Avoid deadlock caused by previous commit (rhbz#881729)
  - merge upstream commit e69f322d52a967e19ac6cf4eba60c54fc64b1688 (rhbz#881729)
  - Handle colon in configuration file (rhbz#906432)
  - merge upstream commit c04af91ada3c4ca29643cad599ed5605f6bb10bd (rhbz#906432)
  - Handle unexpected closing brace in config file (rhbz#906432)
  - merge upstream commit 60a9f809c17d6cfe73c34263233dbf8e4677d6b5 (rhbz#906432)
  - Put handle to hdb in dispatch on unknown message (rhbz#922671)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#922671)
  - Properly check result of coroipcc_dispatch_put (rhbz#922671)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#922671)
  - Handle config file with service without name (rhbz#915769)
  - merge upstream commit 6b719961b36b3b780f2c9ff148aa2273872f8788 (rhbz#915769)
  - Move corosync exit semaphore initialization (rhbz#916227)
  - merge upstream commit b6aaa6e2af625467316e54e67a39c6327cf73cbc (rhbz#916227)
  - coroipcs: Ensure rb data are not overwritten (rhbz#922671)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#922671)
  - Properly lock pending_semops (rhbz#922671)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#922671)
  - cfg: When send_shutdown fails, clear shutdown_con (rhbz#924261)
  - merge upstream commit fd967b6db504b1fe6667da8ce8a141924e3914a9 (rhbz#924261)
  - cfgtool: Retry shutdown on CS_ERR_TRY_AGAIN (rhbz#924261)
  - merge upstream commit 3324d31819d359fae75d6f91a942fc84e3b9be23 (rhbz#924261)
  - totempg: Make iov_delv local variable (rhbz#907894)
  - merge upstream commit 3e3231375c29d562af050a48f18b301bf1cdca82 (rhbz#907894)
  - Fix race for sending_allowed (rhbz#907894)
  - merge upstream commit 94331b5e0226f985364ef0632fdf4d5f0d91d625 (rhbz#907894)
  - schedwrk: Set values before create callback (rhbz#907894)
  - merge upstream commit 7f00dcb548584911191f1e70483d4523c3ba1319 (rhbz#907894)
  - Remove exit thread and replace it by exit pipe (rhbz#907894)
  - merge upstream commit 9f8279a3f1853139e9bd472c23f905baf9298c32 (rhbz#907894)
  - totempg: Store and restore global variables (rhbz#907894)
  - merge upstream commit 5e6e1a000db8b066aff08b0649886e4ce07b843c (rhbz#907894)
  - Logsys: Ensure logging PID is really corosync (rhbz#915490)
  - merge upstream commit 830df013a853ffa7e9b49efb030ccc7920d2f683 (rhbz#915490)
  - fplay: Check minimum record size (rhbz#915490)
  - merge upstream commit ef63aae13945bd790e54181593561468426baca4 (rhbz#915490)
  - corosync-fplay: Check incorrect idx and cycle (rhbz#915490)
  - merge upstream commit d8761bae84c12285ef40426c0ad7f09f569c3d87 (rhbz#915490)
  - Improve handling of getpwnam_r() and getgrnam_r() (rhbz#947936)
  - merge upstream commit c3422128a45a2833103c8351e0adc84ba6c341be (rhbz#947936)
  - Detect big scheduling pauses (rhbz#949491)
  - merge upstream commit 7475db7102bf387cfcd16a65b0b0ace3e194bd4b (rhbz#949491)
  - Improve corosync-notifyd example (rhbz#877349)
  - merge upstream commit 614d897209c8d9d8b38bc583d0ce056a5d3445b6 (rhbz#877349)
  - Install sysconfig/corosync-notifyd in specfile (rhbz#877349)
  - merge upstream commit bc130cb10c4ec014829286ba61c0de544f82656d (rhbz#877349)
  - Free confdb message holder list on confdb exit (rhbz#959189)
  - merge upstream commit 013b4ba8ebdc089da76313d43b1454fe324d597b (rhbz#959189)
  - Handle SIGPIPE in req_setup_send (rhbz#959184)
  - merge upstream commit a9c4bbd9f10d9453730f71d8bd9a02ee8bcf2eed (rhbz#959184)
  - confdb: Make objdb_notify_dispatch preemptable (rhbz#959189)
  - merge upstream commit 0194e6455983947c9c496658b5d593c769e58bfe (rhbz#959189)
  - Lock sync_in_process variable (rhbz#907894)
  - merge upstream commit 460a495243b1ebb225e15c1757554ff625aca99e (rhbz#907894)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-17
changelog:
  - Resolves: rhbz#956739

  - Add timestamps to the Corosync black-box output (rhbz#956739)
  - merge upstream commit 3ede0352ea4a7ea71ebe16db59c0c7ad0a01f733 (rhbz#956739)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-17.1
changelog:
  - Resolves: rhbz#1080103

  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1080103)
  - merge upstream commit e9d9c4be7293c04ca97bfd84f95b76a22690a92a (rhbz#1080103)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1080103)
  - merge upstream commit 0b825f22f2b95beca1aeb614d22a7e74a84c66b5 (rhbz#1080103)
  - cpg: Make sure left nodes are really removed (rhbz#1080103)
  - merge upstream commit b55f32fe2e1538db33a1ec584b67744c724328c6 (rhbz#1080103)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-2
changelog:
  - Resolves: rhbz#722469
  - Resolves: rhbz#732698
  - rrp: Handle endless loop if all ifaces are faulty (rhbz#722469)
  - merge upstream commit dc862e15cc084926eccc5e1ff3241611c0cb54f0 (rhbz#722469)
  - rrp: Higher threshold in passive mode for mcast (rhbz#722469)
  - merge upstream commit 4e32c3112a2f13a302709d72b0ae989287a48563 (rhbz#722469)
  - Ignore memb_join messages during flush operations (rhbz#732698)
  - merge upstream commit be608c050247e5f9c8266b8a0f9803cc0a3dc881 (rhbz#732698)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-3
changelog:
  - Resolves: rhbz#722469
  - totemconfig: change minimum RRP threshold
  - merge upstream commit b1aba94732edc2ff084b7dd559a08b687f464ed0 (rhbz#722469)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4
changelog:
  - Resolves: rhbz#722522

  - Deliver all messages from my_high_seq_recieved to the last gap (rhbz#722522)
  - merge upstream commit e530376a60dc862f135bd0d4c52aebb43d948423 (rhbz#722522)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4.1
changelog:
  - Resolves: rhbz#791236

  - A rare condition can lead to fail to recv (rhbz#791236)
  - merge upstream commit c68fb0caa2e337c6fdebfe564402c6d06b7fb018 (rhbz#791236)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4.2
changelog:
  - Resolves: rhbz#810917

  - Unlink shm buffers if init fails (rhbz#810917)
  - merge upstream commit ab83b695b578e0fa68a238bf26dd3a1e338c7ec6 (rhbz#810917)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-4.3
changelog:
  - Resolves: rhbz#828432

  - objctl: add missing calls to dispatch notifications and fix memory corruption (rhbz#828432)
  - merge upstream commit dc9b04a7196b316a596036296ac1a78b21717e97 (rhbz#828432)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-5
changelog:
  - Resolves: rhbz#743810
  - Resolves: rhbz#743812
  - Resolves: rhbz#743813
  - Resolves: rhbz#743815
  - Resolves: rhbz#752159
  - Resolves: rhbz#752951
  - Resolves: rhbz#758209
  - Resolves: rhbz#747628

  - coroipcc: use malloc for path in service_connect (rhbz#743810)
  - merge upstream commit 3cfb0792155448d592b043d0d05586c1b76c9499 (rhbz#743810)
  - cpg: Handle errors from totem_mcast (rhbz#743812)
  - merge upstream commit eef5827dbb01433583da7ad5382789c2f83b9696 (rhbz#743812)
  - cfg: Handle errors from totem_mcast (rhbz#743812)
  - merge upstream commit af1b122e68dfeb8a42cf9c682de061859d8077ec (rhbz#743812)
  - A CPG client can sometimes lockup if the local node is in the downlist (rhbz#743813)
  - merge upstream commit ac1d79ea7c14997353427e962865781d0836d9fa (rhbz#743813)
  - Resolve a deadlock between the timer and serialize locks. (rhbz#743815)
  - merge upstream commit 23112099e1c2b620e6976ca099d2b9afc80721aa (rhbz#743815)
  - Add calls to missing object_find_destroy() to fix mem leaks (rhbz#752159)
  - merge upstream commit 9ddb845f412531b6a2761f42823b6be43216a9c8 (rhbz#752159)
  - A rare condition can lead to fail to recv (rhbz#758209)
  - merge upstream commit c68fb0caa2e337c6fdebfe564402c6d06b7fb018 (rhbz#758209)
  - Free mem allocated by getaddrinfo (rhbz#752951)
  - merge upstream commit a973b7cfb0688cd667d32df714014bbf4cf0bc77 (rhbz#752951)
  - corosync and cman conflict on /var/log/cluster permissions (rhbz#747628)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-6
changelog:
  - Resolves: rhbz#741455
  - Resolves: rhbz#797192

  - Store error str if can't open logfile (rhbz#741455)
  - merge upstream commit f954852ef12544de84a9c557316c2612123b5fec (rhbz#741455)
  - Unlink shm buffers if init fails (rhbz#797192)
  - merge upstream commit ab83b695b578e0fa68a238bf26dd3a1e338c7ec6 (rhbz#797192)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-7
changelog:
  - Resolves: rhbz#773720

  - objctl: add missing calls to dispatch notifications and fix memory corruption (rhbz#773720)
  - merge upstream commit dc9b04a7196b316a596036296ac1a78b21717e97 (rhbz#773720)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-7.1
changelog:
  - Resolves: rhbz#849554

  - Fix dbus part of corosync-notifyd (rhbz#849554)
  - merge upstream commit 4ac9cd59e7873914fe5845e69fd79b7a2877c290 (rhbz#849554)
  - flatiron: Free outq items list on conn exit (rhbz#849554)
  - merge upstream commit 4cdaf8ef1e7676b179eaeb5bde18d4b63d17ce52 (rhbz#849554)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-18
changelog:
  - Resolves: rhbz#1001210
  - Resolves: rhbz#1011307
  - Resolves: rhbz#1018232
  - Resolves: rhbz#1025321
  - Resolves: rhbz#1067043

  - totemiba: Properly allocate RDMA buffers (rhbz#1001210)
  - merge upstream commit 795b04780ff6cd94b2e10aa1826a289f36119ce7 (rhbz#1001210)
  - totemiba: Del channel fd from poll before destroy (rhbz#1001210)
  - merge upstream commit 86fd9a14f6e74b711eb7e89cec72096bdcd1441b (rhbz#1001210)
  - totemiba: Fix parameters position for poll_add (rhbz#1001210)
  - merge upstream commit cba0f90af4af55702c1daa7afa03c8be10eaa5f3 (rhbz#1001210)
  - corosync to start in infiniband + redundant ring active/passive mode (rhbz#1001210)
  - merge upstream commit d0ca2ceb980242dd8c28b57f449eeeac1eb54176 (rhbz#1001210)
  - totemiba: Check if configured MTU is allowed by HW (rhbz#1001210)
  - merge upstream commit 3403fe06e8a915632679c48ccccb2662521746f2 (rhbz#1001210)
  - logsys: Handle full /dev/shm correctly (rhbz#1011307)
  - merge upstream commit 095a114ab84074e16d384f3ccaadfecff80b54a2 (rhbz#1011307)
  - ipcs: Backport socket creds handling from libqb (rhbz#1018232)
  - merge upstream commit 7897e4ae3e1c1ff20a2f375a0a5dc102ab0e98e8 (rhbz#1018232)
  - ipcs: Set SO_PASSCRED also on listening socket (rhbz#1018232)
  - merge upstream commit f11e5bf61941fd6aca018bb2f15f2371c668974f (rhbz#1018232)
  - cpg: Avoid list corruption (rhbz#1025321)
  - merge upstream commit 3c11ea7b84c109e6f8451229437351c5a14c7168 (rhbz#1025321)
  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1067043)
  - merge upstream commit e9d9c4be7293c04ca97bfd84f95b76a22690a92a (rhbz#1067043)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1067043)
  - merge upstream commit 0b825f22f2b95beca1aeb614d22a7e74a84c66b5 (rhbz#1067043)
  - cpg: Make sure left nodes are really removed (rhbz#1067043)
  - merge upstream commit b55f32fe2e1538db33a1ec584b67744c724328c6 (rhbz#1067043)
  - totemiba: Add multicast recovery (rhbz#1001210)
  - merge upstream commit 0ea20a3d545c4bf1a02306dd2152eb497a03b7d0 (rhbz#1001210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-19
changelog:
  - Related: rhbz#1001210

  - totemiba: Fix incorrect failed log message (rhbz#1001210)
  - merge upstream commit 4130d7448dcea024820d20e3c474c54e14ec9cb5 (rhbz#1001210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-2
changelog:
  - Resolves: rhbz#1136431
  - Resolves: rhbz#1141367
  - Resolves: rhbz#1163846
  - Resolves: rhbz#742999

  - Adjust MTU for IPv6 correctly (rhbz#1136431)
  - merge upstream commit 6fc58377d9f3201a74afedbb53311ff95fde700b (rhbz#1136431)
  - config: Make sure user doesn't mix IPv6 and IPv4 (rhbz#742999)
  - merge upstream commit df4d4da6e204a9f151a764c868bf7c99c97186f5 (rhbz#742999)
  - config: Process broadcast option consistently (rhbz#742999)
  - merge upstream commit 90d458532b59a15ae8e936f43e8bf1f8f3a32ac7 (rhbz#742999)
  - config: Ensure mcast address/port differs for rrp (rhbz#742999)
  - merge upstream commit 6f74374d3ff23735cf5e1d5e01e56d6cd866085c (rhbz#742999)
  - totem: Inform RRP about membership changes (rhbz#1163846)
  - merge upstream commit f35ffb168f8ee3eac4660309088372df4cb215f2 (rhbz#1163846)
  - totemnet: Add totemnet_member_set_active (rhbz#1163846)
  - merge upstream commit 3dafc4c508e4928d459719958918052ce49fd223 (rhbz#1163846)
  - totemrrp: Implement *_membership_changed (rhbz#1163846)
  - merge upstream commit 3dcdfeaddbe054fad63d3a3cb046dd018e118e69 (rhbz#1163846)
  - totemudpu: Implement member_set_active (rhbz#1163846)
  - merge upstream commit bd02ac319af40e4c484c6e4cdb8e049db8813541 (rhbz#1163846)
  - totemudpu: Send msgs to all members occasionally (rhbz#1163846)
  - merge upstream commit 0bd29025419204672e4d7857434019045bf7b456 (rhbz#1163846)
  - ipcc: Fix ERR_LIBRARY error if finalise called inside dispatch (rhbz#1141367)
  - merge upstream commit 83bf77e6f42c2a8b01b1d079e8dc792d9cc7d35d (rhbz#1141367)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-3
changelog:
  - Resolves: rhbz#1200387
  - Resolves: rhbz#1278473
  - Resolves: rhbz#1278478
  - Resolves: rhbz#1278490

  - config: Fix 'then' for 'than' typos in messages and some comments. (rhbz#1278478)
  - merge upstream commit 1be4f7b899f91a8dc23ade10c539177f2b39d88e (rhbz#1278478)
  - totemconfig: Make sure join timeout is less than consensus (rhbz#1278478)
  - merge upstream commit 17e90526aaa702cc3079fe5089253590267418d4 (rhbz#1278478)
  - Reset timer_problem_decrementer on fault (rhbz#1278473)
  - merge upstream commit c5a5bedf6e086acb9f3bda374ac495670a5fcf25 (rhbz#1278473)
  - totem: Ignore duplicated commit tokens in recovery (rhbz#1278473)
  - merge upstream commit 49236f3a16a0980cdb605040f027722b116a8250 (rhbz#1278473)
  - objdb: Fix incorrect using lock (rhbz#1278473)
  - merge upstream commit 42c09a78d9ed2dc393e76308f4fce000535674e6 (rhbz#1278473)
  - totemip: Be more selective when matching bindnetaddr to IP addresses (rhbz#1278490)
  - merge upstream commit 8e90c68fc0a7d5bce035fe7939eb03fa5cf333a2 (rhbz#1278490)
  - totem: Log a message if JOIN or LEAVE message is ignored (rhbz#1200387)
  - merge upstream commit d3c51cd6e4c293a7222172ccec4b80d70b79f5d4 (rhbz#1200387)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-4
changelog:
  - Resolves: rhbz#1286759

  - Revert "ipcc: Fix ERR_LIBRARY error if finalise called inside dispatch" (rhbz#1286759)
  - merge upstream commit 67242e15c298abff4f93a7bfcd72372f7ba60270 (rhbz#1286759)
  - ipcc: Fix ERR_LIBRARY on finalize call in dispatch (rhbz#1286759)
  - merge upstream commit 514dd9784559feb237af498020bf74cb16091a9e (rhbz#1286759)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-5
changelog:
  - Resolves: rhbz#1305119

  - totempg: Fix memory leak (rhbz#1305119)
  - merge upstream commit 349613b2dce8219a5d08dad816cb4da9c12faf83 (rhbz#1305119)


author: Ondrej Vasik <ovasik@redhat.com> 2.10-7
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#571843)
  - comment patches


author: Jirka Hladky <jhladky@redhat.com> - 20160814-1
changelog:
  - Update to new upstream version 20160814
  - It includes new tool cpuinfo2cpuid which enables to process /proc/cpuinfo
  - Rebuilt for RHEL6 (rhbz#1316998)


author: Neil Horman <nhorman@redhat.com> 1.1-2
changelog:
  - Removed set -m option from cpupower (bz 914623)
  - Added man pages for turbostat & perf policy (bz 886225)
  - Improved perf_poilcy usage (bz 886228)
  - Added check for root on energy_perf_poilcy (bz 886227)
  - Fixed crash when running cpufreq-bench as non-root (bz 886226)


author: Neil Horman <nhorman@redhat.com> 1.2-1.1
changelog:
  - Fixed wildcatpass error message (bz 1056310)
  - Fixed rapl register reads (bz 1080631
  - Enalbed haswell power states (bz 1008033)


author: Jarod Wilson <jarod@redhat.com> 1.5-13
changelog:
  - Move startup prio so we start after syslog, so any notices during
    system startup actually get logged


author: Petr Sabata <psabata@redhat.com> - 1:1.5-14
changelog:
  - Init script: added the reload function
  - Init script: the service now stops when using p4-clockmod driver
  - Resolves: rhbz#607223


author: Marcela Mašláňová <mmaslano@redhat.com> 1:1.5-16
changelog:
  - Whenever PCC driver is loaded, it loads the “userspace” governor, instead 
    of the “ondemand” governor.
  - Resolves: rhbz#642838


author: Marcela Mašláňová <mmaslano@redhat.com> 1:1.5-17
changelog:
  - Cpuspeed init script still tries to adjust cpufreq sysfiles on a per core 
    basis 738463
  - IGNORE_NICE parameter does opposite of what it says (thanks to Minto Joseph)
    797055
  - Cpuspeed does not reset MIN/MAX values when config file is emptied 616976
  - Resolves: rhbz#738463, rhbz#797055, rhbz#616976


author: Dave Anderson <anderson@redhat.com> - 5.0.0-21.el6
changelog:
  - Implement support for x86 and x86_64 RHEL6 xen/pvops kernels, both live
    and xendumps.
    Resolves: rhbz#608779


author: Dave Anderson <anderson@redhat.com> - 5.0.0-23.el6
changelog:
  - Additional support for QEMU/savevm ram device version 4 to only use
    "pc.ram" segments and to handle the 512MB I/O hole at e0000000.
    Resolves: rhbz#619758


author: Dave Anderson <anderson@redhat.com> - 5.1.1-1.el6
changelog:
  - Add support for s390x ELF dumpfile format.  
    Resolves: rhbz#633449
  - Add support for s390x compressed/filtered dumpfiles generated by 
    makedumpfile.
    Resolves: rhbz#637197
  - Fix for the "bt" command with 2.6.27 and later x86_64 kernels to
    prevent the possible display of a an invalid "vgettimeofday" frame
    above the topmost "system_call_fastpath" frame, followed by two
    read errors indicating "bt: read error: kernel virtual address:
    ffffffffff600000  type: gdb_readmem_callback".
    Resolves: rhbz#637735
  - Save the per-cpu register contents stored in the "cpu" devices of 
    x86_64 KVM dumpfiles, and use their contents for x86_64 backtrace RSP
    and RIP hooks in the case of KVM "live dumps" where the guest system 
    was not in a crashed state when the "virsh dump" operation was done
    on the KVM host.  If an active task was running in user space when 
    a live dump was taken, that will be indicated by the "bt" output, 
    along with the user-space register contents.  The x86_64 register set 
    saved for each cpu may be displayed with the "help -[D|n]" command.
  - Fix for the x86_64 "bt" command to more correctly find the starting
    backtrace RIP and RSP hooks in KVM dumpfiles.  Without the patch,
    backtraces that should start in the interrupt or exception stacks
    were not being detected correctly.
    Resolves: rhbz#649050
  - Fix to utilize the correct "cpu" device format in x86 KVM dumpfiles
    Without the patch, the x86 registers were read in a 32-bit format, 
    which is only true if the host machine was running a 32-bit kernel.
    With the patch, the format defaults to the 64-bit format, and is
    switched to the 32-bit format if it can be determined that the host
    machine was running a 32-bit kernel.
  - Save the per-cpu register contents stored in the "cpu" devices of
    x86 KVM dumpfiles, and use their contents for x86 backtrace ESP and
    EIP hooks in the case of KVM "live dumps", i.e., where the guest
    system was not in a crashed state when the "virsh dump" operation
    was done on the KVM host.  If an active task was running in user
    space when a live dump was taken, that will be indicated by the
    "bt" output, along with the user-space register contents.  The saved
    x86 register set for each cpu may also be displayed with the
    "help -[D|n]" command.
  - Fix for the x86 "bt" command to correctly find the starting backtrace
    EIP and ESP hooks for the active tasks in KVM dumpfiles where the
    kernel had crashed.
    Resolves: rhbz#649051
  - Fix for the cpu count determination in crashed x86 KVM dumpfiles, 
    where the non-crashing cpus are marked offline in the kernel's
    cpu_online_mask by smp_stop_cpu().  Depending upon the cpu number
    of the crashing task, the cpu count may be set to a value that is
    less than the number of present cpus.
  - Change to the manner in which the cpu count is determined for x86_64
    kernels.  SLES11 2.6.32 kernels delay the call to crash_kexec() until
    after smp_send_stop() is called by panic(), and so the cpu_online_map
    cannot be used for determining the cpu count.  With the patch, the
    cpu_present_map is used.
    Resolves: rhbz#649053
  - Rebase to upstream version 5.1.1.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.1-2.el6
changelog:
  - Fix for x86 "bt" command to account for movement of ia32_sysenter_target()
    assembly function to a separate text section, and for the failure to
    resolve the backtrace of a non-active swapper task.
    Resolves: rhbz#682129
  - Upstream equivalency with 5.1.3 patch.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.7-1.el6
changelog:
  - Fix for "kmem -[sS]" if NUMA node 0 has no memory associated with it.
    Resolves: rhbz#716931
  - Fix for the x86_64 "bt" command stack transition error when a non-crashing
    CPU receives a NMI immediately after receiving an interrupt from another 
    source. 
    Resolves: rhbz#712214
  - Fix for the handling of x86_64 compressed kdump dumpfiles where
    the crashing system contains more than 454 cpus.
    Resolves: rhbz#705142
  - Added a new "--osrelease <dumpfile>" command line option that
    displays the OSRELEASE vmcoreinfo string from a kdump dumpfile.
    Resolves: rhbz#703467
  - Update to the crash(8) man page and the associated "crash -h" output.
    Resolves: rhbz#695413
  - Rebase to upstream version 5.1.7.
    Resolves: rhbz#710193


author: Dave Anderson <anderson@redhat.com> - 6.0.3-1.el6
changelog:
  - Support sadump dumpfile formats for Fujitsu Stand Alone Dump facility.
    Resolves: rhbz#736884
  - Support s390x ELF-kdump and s390x compressed-kdump dumpfiles.
    Resolves: rhbz#738865 
  - Display an early warning message if any part of the kernel has been 
    erased/filtered by the makedumpfile facility.
    Resolves: rhbz#739096
  - Fix for the "runq" command for kernels that are configured with
    CONFIG_FAIR_GROUP_SCHED.
    Resolves: rhbz#754291
  - Fix for the x86_64 "bt" command to handle a recursive entry into
    the NMI exception stack.
    Resolves: rhbz#768189
  - Fix for an x86_64 "bt" command segmentation violation if the number
    of ELF_PRSTATUS notes in a compressed-kdump do not match the number
    of cpus running when the system crashed.
    Resolves: rhbz#782837 
  - Rebase to upstream version 6.0.3.
    Resolves: rhbz#767257


author: Dave Anderson <anderson@redhat.com> - 6.0.4-2.el6
changelog:
  - Fix s390x "vm -p" to properly handle swapped-out and unmapped
    user pages.
  - Fix s390x "bt -[tT]" on a live system.
    Resolves: rhbz#817247
    Resolves: rhbz#817248


author: Dave Anderson <anderson@redhat.com> - 6.0.9-1.el6
changelog:
  - Fix for "crash: cannot resolve: xtime" session invocation failure.
    Resolves: rhbz#843093
  - Enhance "struct" command to accept -o option with an address argument.
    Resolves: rhbz#834260
  - Rebase to upstream version 6.0.9.
  - Support for compressed/filtered ppc64 firmware-assisted dump (fadump).
    Resolves: rhbz#840051


author: Dave Anderson <anderson@redhat.com> - 6.1.0-4.el6
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1006622
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1017930
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1019483


author: Dave Anderson <anderson@redhat.com> - 6.1.0-6.el6
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1209241


author: Dave Anderson <anderson@redhat.com> - 7.1.0-2.el6
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1195596


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6
changelog:
  - Fortify the error handling of task gathering from the pid_hash[]
    chains during session initialization to prevent an endless loop if
    data structures have been corrupted.
    Resolves: rhbz#1208557


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6_7
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1284762


author: Dave Anderson <anderson@redhat.com> - 7.1.0-4.el6
changelog:
  - Fixes for the handling of truncated/incomplete flat-format vmcores, which
    may cause the session to hang during initialization.
    Resolves: rhbz#1231976
  - Fix for the "timer" command, which may fail with the error message
    "timer: cannot allocate any more memory!" when run on a kernel with
    an extremely large number of cpus.
    Resolves: rhbz#1238403


author: Dave Anderson <anderson@redhat.com> - 7.1.0-5.el6
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1283000


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Dave Anderson <anderson@redhat.com> - 1.0-1.2
changelog:
  - fix Makefile to account for s390 build
  - change exclusive arch entry from i386 to i386 i486 i586 i686 pentium3 pentium4 athlon geode
  - Resolves: rbhz#545564


author: Dave Anderson <anderson@redhat.com> - 1.0-2
changelog:
  - Fix for segmentation violation with "trace show -c cpu" command,
    and add "trace dump -t" command.
    Resolves: rbhz#592887


author: Dave Anderson <anderson@redhat.com> - 1.0-3
changelog:
  - Remove trace_dump.patch, which requires a kernel later than
    the RHEL6 base of 2.6.32.
    Resolves: rbhz#601536


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-2
changelog:
  - Change RPM_OPT_FLAGS to optflags
  - Leave man page compression to rpmbuild
  - Correct date in previous changelog entry


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-3
changelog:
  - Correct license tag from BSD to ISC
  - Comment purpose of regulatory-rules-setregdomain.patch
  - Add copyright and license statement to setregdomain
  - Add comment for why /lib is hardcoded in files section
  - Reformat Dec 21 2009 changelog entry so rpmlint stops complaining


author: John W. Linville <linville@redhat.com> 1.1.3_2013.11.27-1
changelog:
  - Update for crda version 1.1.3
  - Update wireless-regdb to version 2013.11.27 
  - Correct version in previous changelog entry


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.4-14
changelog:
  - fix segfault on null dereference in anacron (#1031383)
  - do not remove daemon pid file in the child process
  - add log message about crond shutdown (#1108384)
  - add log message when getpwnam fails


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.3-5
changelog:
  - add ISC license
  - apply small fixes: anacrontab man page is more readable and
    values from /etc/security/pam_env.conf are used.
  - Related: rhzb#543948


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-2
changelog:
  - remove patches because they were included in new release.
  - 584006 lsb compliance
  - upload correct source
  - Resolves: bz#584006


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-6
changelog:
  - apply relro (CFLAGS&DFLAGS) in specfile, because in configure we
   need to call autoreconf.
  - Resolve: rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-7
changelog:
  - switch off --enable-pie, because it's overloaded with flags in spec
  - added RPM_OPT_FLAGS into CFLAGS
  - Related: rhbz#676040


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-14
changelog:
  - keyutil: Fixed bug where key pem file was not written (#473860)
  - keyutil: Fixed reverse logic that prevented output of the pem encoded key


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-18
changelog:
  - certwatch: Fixed cert expiry time calculations (#473860)
  - keyutil: Fixed segfault on certificate generation and missing of key/cert pem files (#479886)


author: Joe Orton <jorton@redhat.com> - 2.4.1-24.3
changelog:
  - fix segfaults in keyutil (#870182)
  - keyutil: use SHA256 by default, SHA384 or 512 for larger keys (#1146247)
  - genkey: update SHA choice, default key sizes (#1146247)
  - genkey: only fail in --nss mode if mod_nss is missing. (#845940)
  - update reqs/BRs for new-enough nss-util (#1146247)
  - certwatch: fix failure for certfiles containing private keys (#893308)


author: Milan Broz <mbroz@redhat.com> - 1.1.2-1
changelog:
  - Fix handling of newline with keyfile on standard input.
  - Fix alignment ioctl use.
  - Fix API activation calls to handle NULL device name.
    Resolves: #598523 #569949 #599617


author: Milan Broz <mbroz@redhat.com> - 1.2.0-1
changelog:
  - Update to cryptsetup 1.2.0
  - Use generic crypto backend interface.
  - Add fipscheck compile option.
  - Use gcrypt RNG in FIPS mode for key generation.
  - Add FAQ to documentation.
    Resolves: #658817 #663870 #663869


author: Milan Broz <mbroz@redhat.com> - 1.2.0-2
changelog:
  - Require libgcrypt and device-mapper versions supporting FIPS extensions.
  - Request buffer wipe for dm-ioctl when sending key data.
    Resolves: #674825


author: Milan Broz <mbroz@redhat.com> - 1.2.0-3
changelog:
  - Require updated device mapper library (secure flag).
  - Use FIPS RNG for keyslot salt in FIPS mode.
    Resolves: #692512 #693371


author: Milan Broz <mbroz@redhat.com> - 1.2.0-7
changelog:
  - Fix device lookup function.
  - Fix duplicate directories displayed in status output.
    Resolves: #755478 #746648


author: Ondrej Kozina <okozina@redhat.com> - 1.6.4-2
changelog:
  - patch: use fsync instead of O_DIRECT mode while writting reencryption log.
  - patch: remove warning phrase while invoking cryptsetup-reencrypt tool.
  - Resolves: #1130141 #1140201


author: Sumit Bose <sbose@redhat.com> - 1.0.112-1
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 14,
     git commit f5ac659e4df9ba6ee4652aeb9b4f5a01b532fd99
   - resolves: #583771


author: Sumit Bose <sbose@redhat.com> - 1.0.112-2
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 17,
     git commit c07cd2cb042d62ee4adcfa1b75dd423424ca681b


author: Sumit Bose <sbose@redhat.com> - 1.0.112-3
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 18,
     git commit de49edcc0dfea7c4396cdbd9e4897358b5474100


author: Sumit Bose <sbose@redhat.com> - 1.0.114.3-2
changelog:
  - Resolves: rhbz#728545 - ctdbd leaks a file descriptor
   - Resolves: rhbz#727913 - Coverity scan revealed defects


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-1
changelog:
  - Updated to ctdb version 1.0.114.5
   - Resolves: rhbz#821715 - ctdbd on a node crashes when another node in the
     cluster is brought down
   - Resolves: rhbz#758367 - ctdb w/ GFS2: A stable node gets banned
   - Resolves: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-2
changelog:
  - Increased release number to be able to update RHS version of ctdb
   - Related: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-3
changelog:
  - Improve output of ctdb status by adding the number of deleted nodes
   - Fix a memory and an unchecked return value found by coverity
   - Resolves: rhbz#866670 - ctdb status reports more nodes then available
   - Resolves: rhbz#874058 - One resource leak && unchecked return value


author: Sumit Bose <sbose@redhat.com> - 2.5.1-1
changelog:
  - Update to ctdb version 2.5.1
   - Resolves: rhbz#1061630
   - Resolves: rhbz#1085447
   - Resolves: rhbz#987099
   - Resolves: rhbz#1085413


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-35:.1
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-37
changelog:
  - Fixed cupsSNMPQuirks parsing code in cups-snmp-quirks.patch (bug #580604).
  - lpstat -p reported current job as job id zero (STR #3627, bug #614908).
  - Set the default RIPCache to 128m (STR #3535, bug #616864).
  - Scheduler tracks whether we are shutting down and doesn't start
    new jobs if so (STR #3679, bug #624441).
  - Added 'restartlog' action to initscript usage output (bug #632180).
  - Fixed following rpmlint errors and warnings (bug #634931):
    - Fix character encoding in CREDITS.txt.
    - Mark D-Bus configuration file as config file.
    - Don't mark MIME types and convs files as config files.  Overrides
      can be placed as new *.types/*.convs files in /etc/cups.
    - Don't mark banners as config files.  Better is to provide new banners.
    - Don't mark initscript as config file.
    - Don't mark templates and www files as config files.  A better way to
      provide local overrides is to use a different ServerRoot setting.
      Note that a recent security fix required changed to template files.
    - Provide versioned LPRng symbol for rpmlint.
    - Use mode 0755 for binaries and libraries where appropriate.
    - Move /etc/cups/pstoraster.convs to /usr/share/cups/mime/.
    - Move cups-config man page to the devel sub-package.
  - Revert STR #2537 so non-UTF-8 clients continue to be accepted (bug #642448).
  - The php sub-package now explicitly requires the libs package with
    the same version and release (bug #646814).
  - Added tolerance for DNS failures (bug #654667).
  - Fixed initscript to stop service on reboot/halt (bug #659692).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-39.1
changelog:
  - The scheduler might leave old job data files in the spool directory
    (STR #3795, STR #3880, bug #736304).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-43
changelog:
  - The scheduler might leave old job data files in the spool directory
    (STR #3795, STR #3880, bug #735505).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-44.1
changelog:
  - Don't create zero-length request files (STR #4015, bug #803419).
  - The lp and lpr commands did not cancel jobs queued from stdin on an error
    (STR #4015, bug #803419).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-51
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-66
changelog:
  - More STR #4461 fixes from upstream: make rss feeds world-readable,
    but cachedir private.
  - Fix icon display in web interface during server restart (STR #4475).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-70
changelog:
  - Fixed SetEnv patch (bug #1198394).
  - Validate ErrorPolicy directory when reading configuration (bug #1196217,
    STR #4591).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-68
changelog:
  - Apply upstream patch to fix PageLogFormat reference in documentation
    (bug #951553, STR #3969).
  - Only enable multi-part support for selected user agents
    (bug #1178370, STR #3455).
  - Fix for segfault in send_document (bug #1170002).
  - New SSLOptions directive to enable SSL3 and/or RC4, now disabled by
    default (bug #1161171).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-69
changelog:
  - Document ErrorPolicy in cupsd.conf manpage (bug #1120587, STR #4457).
  - Prevent cups-polld busy loop when access is restricted (bug #1164854).
  - Apply upstream patch to prevent crash in cupsdContinueJob() (bug #1187840).
  - Added failover backend to support priority-based failover (bug #1115219).
  - Apply patch to fix sanitize_title documentation (bug #988062, STR #4569).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-73
changelog:
  - Fix failover backend options parsing (bug #1231322).
  - The socket backend could go into an infinite loop with certain printers
    (bug #1276772, STR #3622)
  - dnssd backend: don't crash if avahi gives a callback with no TXT record
    (bug #1269305)
  - Don't unload jobs that couldn't be saved (bug #1283003, STR #4742).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-76
changelog:
  - 1344782 - Banner pages do not show time-at-creation or time-at-processing
  - 1219571 - Invalid memory accesses lead to crash when configured class has implicit class as first member


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-77
changelog:
  - 1099617 - Using "lp -o orientation-requested=6" with a PDF file has no effect.
  - 1268131 - Printing PDF with fit-to-page doesn't take printer HW margins into account


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-10
changelog:
  - Fix adding of printers without specification of ppd-name (#545452)
  - Patch by Tim Waugh.
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-12
changelog:
  - Avoid timeout on job-related methods for invalid jobs
  - Make sure to return an error via dbus in case of failure
  - Resolves: #567986


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26
changelog:
  - force NSS to ask for a new client certificate when connecting second time
    to the same host (#694294)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-26.el6_2.3
changelog:
  - initialize NSS with no database if the selected database is broken (#800903)
  - use NSS_InitContext() to avoid a collision with OpenLDAP (#800904)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-33
changelog:
  - SCP: send large files properly with new enough libssh2 (#879592)
  - fix handling of errors returned from libssh2 when sending data (#873789)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.1
changelog:
  - refresh expired cookie in test172 from upstream test-suite (#1092486)
  - fix a memory leak caused by write after close (#1092479)
  - nss: implement non-blocking SSL handshake (#1092480)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.3
changelog:
  - fix re-use of wrong HTTP NTLM connection (CVE-2014-0015)
  - fix connection re-use when using different log-in credentials (CVE-2014-0138)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-44
changelog:
  - use only full matches for hosts used as IP address in cookies (CVE-2014-3613)
  - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-46
changelog:
  - require credentials to match for NTLM re-use (CVE-2015-3143)
  - close Negotiate connections when done (CVE-2015-3148)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-43
changelog:
  - fix manpage typos found using aspell (#1011101)
  - fix comments about loading CA certs with NSS in man pages (#1011083)
  - fix handling of DNS cache timeout while a transfer is in progress (#835898)
  - eliminate unnecessary inotify events on upload via file protocol (#883002)
  - use correct socket type in the examples (#997185)
  - do not crash if MD5 fingerprint is not provided by libssh2 (#1008178)
  - fix SIGSEGV of curl --retry when network is down (#1009455)
  - allow to use TLS 1.1 and TLS 1.2 (#1012136)
  - docs: update the links to cipher-suites supported by NSS (#1104160)
  - allow to use ECC ciphers if NSS implements them (#1058767)
  - make curl --trace-time print correct time (#1120196)
  - let tool call PR_Cleanup() on exit if NSPR is used (#1146528)
  - ignore CURLOPT_FORBID_REUSE during NTLM HTTP auth (#1154747)
  - allow to enable/disable new AES cipher-suites (#1156422)
  - include response headers added by proxy in CURLINFO_HEADER_SIZE (#1161163)
  - disable libcurl-level downgrade to SSLv3 (#1154059)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-49
changelog:
  - prevent NSS from incorrectly re-using a session (#1269660)
  - prevent test46 from failing due to expired cookie (#1277551)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-16
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name
    (Resolves: #671460)
  - Set PAM_TTY and PAM_RHOST on PAM authentication (Resolves: #684789)


author: Ville Skyttä <ville.skytta@iki.fi> - 2.2-0.5.b1
changelog:
  - Build with -DLINUX to fix --cvs-direct on 64-bit platforms (#539765).
  - Use patch instead of sed for man page fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-5
changelog:
  - spec cleanup
  - simplified packaging (merge -perl in -utils)
  - remove obsoleted and/or unmaintained additional sources/patches
  - remove long time not used files from the cvs/srpm
  - update additional sources/patches from their upstream


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-6.4
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Petr Lautrbach <plautrba@redhat.com> - 2.1.23-13.el6_3.1
changelog:
  - release the GSSAPI server credential handle immediately after the
    GSSAPI security context is established (#825863)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-15
changelog:
  - don't use " for saslauth user's description (#1081445)
  - backport the ad_compat option (#994242)
  - fixed a memory leak in the client side DIGEST-MD5 code (#838628)


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.1.el6
changelog:
  - dapl-2.0.25-signal-handler.patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel
  - dapl-2.0.25-new-providers.patch
    Resolves: bz636596
  - dapl-2.0.25-dat_ia_open_hang.patch
    Resolves: bz649360
  - dapl-2.0.25-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz626541
  - dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz637980


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.2.el6
changelog:
  - Actually install the signal-handler patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel


author: Doug Ledford <dledford@redhat.com> - 2.0.25-3.el6
changelog:
  - Update config directory for rhel6 (from /etc/ofed to /etc/rdma)
  - Remove compat-dapl and split it off to its own rpm
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 2.0.25-4.el6
changelog:
  - Clean up rpmlint warnings about unversioned obsoletes
  - Make setup quite
  - Include COPYING file in docs
  - Fix naked macro in changelog
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> - 2.0.25-5.el6.0.1
changelog:
  - Backport the dapl-2.0.25-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz673989
  - Backport the dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz673993


author: Jay Fenlason <fenlason@redhat.com> - 2.0.25-5.el6_0.2
changelog:
  - Backport dapl-2.0.25-dat_ia_open_hang.patch
    Resolves: bz675205
  - Backport dapl-2.0.25-new-providers.patch
    Resolves: bz675202
  - Backport dapl-2.0.25-signal-handler.patch
    Resolves: bz675198


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Colin Walters <walters@verbum.org> - 1:1.2.24-5
changelog:
  - Merge changes from RHEL-6 branch:
    * Drop default patch fuzz
    * Merge CVE-2010-4352.patch from RHEL-6_0-Z
  - Apply patches for CVE-2011-2200
  - Resolves: #725313


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5-0.3.20090913git
changelog:
  - Make building with system zlib selectable at build time.
  - Fix cfile_detect_rsync() to detect rsync even if we don't have a zlib capable
    of making rsync-friendly compressed files.


author: Owen Taylor <otaylor@redhat.com> - 0.8.4-5
changelog:
  - Add translation updates for fr,ko,it
    Resolves: bug 589189
  - Add patch fixing problems initializing wobbly-windows state
    Resolves: bug 591541
  - Add patches fixing crashes in OpenGL detection
    Resolves: bug 607280


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-6
changelog:
  - Enable deprecated GLib/GTK+ symbols since Devhelp uses some of them
    since the GLib rebase. Apps should not be shipping with these build
    flags anyway.
  - Resolves: rhbz#1136304


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.98
changelog:
  - Add 0266-RHBZ-1401391-fix-prio-put.patch
    * don't try to drop a nonexistant prio handler
  - Add 0267-RHBZ-1401769-orphan-status.patch
    * don't print out checker and device status for orphan paths
  - Resolves: bz #1401391, #1401769


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100
changelog:
  - Modify 0261-RHBZ-1377532-disable-changed-paths.patch
    * add man page information
  - Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
  - Related: #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.29
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * Change link priority from 5 to 10
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.30
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * move link_priority line up in the udev rules. Hopefully this is the
        actual fix.
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.31
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * make link_priority only work on multipath devices and partitions.
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.31.el6_0.1
changelog:
  - Add 0065-RHBZ-635088-update-priority.patch
      * refresh all priorities when a new path comes online
  - Resolves: bz #658937


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.2
changelog:
  - Add 0066-RHBZ-672151-fix-sysfs-caching.patch
      * Remove attribute value caching, and free cached parent devices on remove
  - Resolves: bz #672151


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.3
changelog:
  - Add 0067-RHBZ-684684-sysfs-device-cleanup.patch
     * Make sure to remove the sysfs device from cache when the path is
       removed. Also, only search the sysfs device cache under the vecs lock
  - Resolves: bz #684684


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.39
changelog:
  - Add 0086-RHBZ-681144-sysfs-device-cleanup.patch
     * Make sure to remove the sysfs device from cache when the path is
       removed. Also, only search the sysfs device cache under the vecs lock
  - Resolves: bz #681144


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.40
changelog:
  - Add 0087-RHBZ-680480-skip-if-no-sysdev.patch
     * Don't check the path if it has no sysdev, since it is about to
       be removed.
  - Resoves: bz# 680480


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.41
changelog:
  - Add 0088-RHBZ-693524-fix-prio-segfault.patch
     * Don't reuse the the path argument as a variable in the vector
       loop.
  - Resolves: bz# 696157


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.41.el6_1.1
changelog:
  - Add 0089-RHBZ-732384-check-return-value.patch
     * Don't try to update path groups on a path priority change if the
       multipath device has disappeared.
  - Resolves: bz# 732384


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.44
changelog:
  - Add 0116-RH-manpage-update.patch
    * update the manpages with new features
  - Add 0117-RHBZ-697386-logger-shutdown-crash.patch
    * The main multipathd thread was racing with the logger, now it
      waits for the logger thread to shutdown first.
  - Resolves: bz #697386


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.45
changelog:
  - Add 0118-RHBZ-738298-revert-631009.patch
    * reverts most of 0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
      but still allows the -u option, for compatibility
  - Resolves: bz #738298


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.46
changelog:
  - Remove 0107-RHBZ-725541-01-async-tur-checker.patch
    * This patch caused a regression where, multpathd could corrupt is memory
      when a path was deleted (bz747604)
  - Refresh 0110-RHBZ-725541-04-serialize-startup.patch
  -Resolves: bz #747604


author: Benjmain Marzinski <bmarzins@redhat.com> -0.4.9.46.el6_2.1
changelog:
  - Add 0119-RHBZ-802433-tighten_vendor_product_regex.patch
    * Some of the vendor and product regexes were matching incorrect devices
      because they were too broad.
  Resolves: bz #802433


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.54
changelog:
  - Modify 0132-RHBZ-744756-regex-hw-match.patch (bz #802630)
    * Added documentation to the multipath.conf man page
  - Modify 0138-RH-fix-strings.patch (bz #810208)
  - Resolves: bz #802630, #810208


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.55
changelog:
  - Modify 0131-RHBZ-662433-override-queue-no-daemon.patch
    * enforce queueing on condrestart as well
  - Add 0142-RHBZ-769527-fix-features-build.patch
    * remove "queue_if_no_path" feature when flushing due to
      "flush_on_last_del"
  - Add 0143-RHBZ-467709-followover-chkr-state.patch
    * Only failback if the path checker's reported state has changed
  - Resolves: bz #467709, #769527
  - Related: bz #662433


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.56
changelog:
  - Modify 0137-RHBZ-799842-change-netapp-config.patch
    * Add pg_init_retries to netapp config
  - Add 0144-RHBZ-812832-shutdown-crash.patch
    * kill waiter threads with pthread_cancel() instead of SIGUSR1
  - Resolves: bz #799842, #812832


author: Benjmain Marzinski <bmarzins@redhat.com> -0.4.9.56.el6_3.1
changelog:
  - Add 0145-RHBZ-831045-realloc-vector.patch
    * fix deleting items from vector, and handle error cases
  - Resolves: bz #837594


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.62
changelog:
  - Add 0165-RHBZ-869253-disable-libdm-failback.patch
    * multipathd and kpartx now set a flag to request device-mapper
      not create devices itself.
  - Resolves: bz #869253


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.63
changelog:
  - Add 0166-RHBZ-880487-make-path-fd-readonly.patch
    * revert change from 0152-RHBZ-735459-mpath_persist.patch, so that
      path fds are again opened O_RDONLY
  - Resolves: bz #880487


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64
changelog:
  - Add 0167-RHBZ-735459-fix-mpathpersist-fns.patch
    * make reservation_key display correctly in "multipathd show config"
  - Resolves: bz #735459


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.1
changelog:
  - Add 0168-RHBZ-988704-fix_cli_resize.patch
    * deal with resize happening while path device is being removed.
  - Resolves: bz #988704


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64.el6_4.2
changelog:
  - Add 0169-RHBZ-993545-rw-change.patch
    * reload a readonly multipath device if a path device has become
      read/write
  - Resolves: bz #993545


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.70
changelog:
  - Modify 0185-RH-signal-waiter.patch
    * making the waiter threads exit correctly caused a race at shutdown.
  - Resolves: bz #996921


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.71
changelog:
  - Add 0192-RHBZ-916667-print-major-minor.patch
    * Make multipathd print major:minor on path and and remove events
  - Resolves: bz #916667


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72
changelog:
  - Add 0193-UPBZ-1011341-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.
  - Resolves: bz #1011341


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.1
changelog:
  - Add 0194-RHBZ-997570-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync
      version
  - Resolves: bz #1069435


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.2
changelog:
  - Add 0195-UPBZ-1024103-alua-prio-timeout.patch
    * Change alua prioritizer timeout from 5 minutes to one minute
  - Resolves: bz #1078491


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.3
changelog:
  - Add 0196-RHBZ-1099530-orphan-paths-on-reload.patch
    * make multipath orphan paths that are no longer included in the device
      when the table is reread.
  - Resolves: bz #1099530


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72.el6_5.4
changelog:
  - Add 0197-UPBZ-1137017-fast-io-fail-iscsi.patch
    * add iscsi support for fast_io_fail_tmo
  - Resolves: bz #1137017


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.78
changelog:
  - Modify 0196-RHBZ-1012672-fix-sysdev.patch
    * remove unused function, and fix NULL ptr dereference
  - Modify 0211-UPBZ-1088013-reorder-paths-for-round-robin.patch
    * Fix some pointer errors
  - Modify 0213-RHBZ-1069641-config-error-checking.patch
    * Stop allocating extra memory in config parser.
  - Related: bz #1049637, #1069641, #1088013


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.79
changelog:
  - Modify 0198-RHBZ-1080052-orphan-paths-on-reload.patch
    * Fix case where pathlist wasn't getting updated properly
  - Related: bz #1080052


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80
changelog:
  - Add 0218-RHBZ-1117714-configure-missing-devs.patch
    * handle externally removed devices during configuration.
  - Resolves: bz #1117714


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80.1
changelog:
  - Add 0219-RHBZ-1136966-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Resolves: bz #1162265


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80.2
changelog:
  - Add 0220-RHBZ-1179728-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Add 0221-RHBZ-1179728-cmdline-wwid.patch
    * make multipathd read wwids specified by the kernel commandline mpath.wwid
      option on startup.
  - Resolves: bz #1179728


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80.3
changelog:
  - Add 0222-RHBZ-1187217-thread-safe.patch
    * only multipathd will keep a global cache of sysfs information
      for paths.
  - Resolves: bz #1187217


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.85
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * Fix checker name printing issue
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.86
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * Change show config output
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.87
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * print "no" instead of "off"
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.84
changelog:
  - Add 0228-RHBZ-1072081-delayed-reintegration.patch
    * Add "delay_watch_checks" and "delay_wait_checks" options to delay
      reintegration of flakey paths.
  - Add 0229-UPBZ-1168987-queue_if_no_path_issue.patch
    * Make sure no_path_retry is properly set even if there are no active paths.
  - Add 0230-RHBZ-880121-fix-double-free.patch
    * multipath was freeing the multipath alias twice if it failed to create the
      multipath device.
  - Add 0231-RHBZ-978947-dell-36xxi.patch
    * new builtin configurations.
  - Add 0232-RHBZ-997028-autodetect-clariion-alua.patch
    * configure multipath to automatically detect alua settings on clariion
      devices.
  - Resolves: bz #880121, #978947, #997028, #1072081, #1168987


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.88
changelog:
  - Add 0233-RHBZ-1215903-remove-pg-timeout.patch
  - Add 0234-RHBZ-818404-update-doc.patch
  - Add 0235-RHBZ-1033789-rdac-update.patch
    * Don't use trasntioning controllers
  - Add 0236-RH-per-path-prio.patch
    * Paths now store their own prio structure, instead of pointing
      to a global one
  - Add 0237-RHBZ-1081395-save-alua-info.patch
    * Save alua information in prioritizer to speed access
  - Add 0238-RHBZ-1153704-async-timeout.patch
    * Make directio use the checker_timeout in async mode
  - Add 0239-RHBZ-1201444-update-eternus-config.patch
  - Add 0241-RHBZ-1214127-fix-help.patch
  - Add 0242-RHBZ-1238507-kpartx-fix.patch
    * Don't overwrite already in use partitions
  - Add 0243-RHBZ-1248177-reset-alias.patch
    * Use existing alias on failed rename
  - Add 0244-RHBZ-1254692-kpartx-sync.patch
    * kpartx runs in sync mode by default
  - Add 0245-RHBZ-1273829-autodetect-readonly-devs.patch
    * auto-reload devices as RO when a path turns RO
  - Add 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * and raw output and more wildcards
  - Modify device-mapper Requires
    * Require version with deferred remove support
  - Resolves: bz #818404, #1033789, #1081395, #1145442, #1153704, #1187278
  - Resolves: bz #1201444, #1208521, #1214127, #1215903, #1238507, #1248177
  - Resolves: bz #1254692, #1273829


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.89
changelog:
  - Add 0247-RHBZ-1283181-fix-remove-crash.patch
    * Check is sysdev is NULL before dereferencing
  - Resolves: bz #1283181


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.90
changelog:
  - Add 0248-RHBZ-1289353-alua-pref-arg.patch
    * add exclusive_pref_bit argument to the alua prioritizer
  - Resolves: bz #1289353


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.92
changelog:
  - Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * fix PAD and PRINT macros
  - Resolves: bz #1145442


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.93
changelog:
  - Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
    * make multipathd use uint64_t for tracking the interactive command
      fingerprint.
  - Resolves: bz #1316165


author: Milan Broz <mbroz@redhat.com> - 0.1.4-1
changelog:
  - Fix thin_check man page (add -q option).
  - Install utilities in /usr/sbin.
    Resolves: #803204 #803144


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-2
changelog:
  - New upstream version 0.2.8 introducing cache_{check,dump,repair,restore}; missing patch
    Resolves: #1019217


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-3
changelog:
  - Add critical needs_check flag support
  - No support for the cache target in RHEL-6.5, thus avoid packaging cache tools and man pages
    Resolves: #1086824


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.6-1
changelog:
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.
  - Update man pages to make it clearer that most tools shouldn't
    be run on live metadata.
  - Fixed bugs in the metadata reference counting for thin_check.
  - New thin_delta and thin_trim commands.
  - New --clear-needs-check option for cache_check.
  - Space map checking for thin check.
  - All tools switch to using libaio. This gives a large performance
    boost, especially to the write focused tools like thin_restore.
  - Added progress monitor to thin_restore, cache_restore and era_restore.
  - Added --quiet/-q option to *_restore to turn off the progress bar.
  - Removed variable hint size support from cache tools.
  - Tools are now rolled into a single executable to save space.
  - Fixed bugs when walking bitsets (possibly effecting cache_dump
    and cache_check).


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.1-1
changelog:
  - Install pdata_tools and all its symlinks for various tools to
    /sbin and also provide symlinks for all tools in /usr/sbin
    for backward compatibility.
  - Link with libstdc++ statically.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-0.1.rc7
changelog:
  - Fixes for thin_repair.
  - Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-10
changelog:
  - Add domain-search to the list of default requested DHCP options (#588352)
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#591140).
  - Compile with -fno-strict-aliasing (#594151).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-19.P1.1
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729883)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - Build libraries with -fpic/-fPIC, not with -fPIE (#736999)
  - Add dhcp-common subpackage (#736194)
  - Do not run dhcpd as root (#693381)
    - Use '--enable-paranoia' configure flag
    - Create dhcpd user in %pre
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'
    - Move changing of the effective user/group ID after writing new PID file.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1
changelog:
  - don't flush old addresses in PREINIT (#815355)
  - remove inherit-leases.patch - it's not needed anymore (#815355)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1.1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843120)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843120)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-32.P1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843122)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843122)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-33.P1
changelog:
  - Use getifaddrs() for interface discovery code on Linux (#803540)
  - dhclient-script: do not backup&restore /etc/resolv.conf (#824622)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-34.P1
changelog:
  - Reducing the expiration time for an IPv6 lease may cause the server to crash
    (CVE-2012-3955, #858130)


author: Jaromír Končický <jkoncick@redhat.com> - 12:4.1.1-41.P1
changelog:
  - Fix dhcpd.leases reverting to root:root on every dhcpd start (#1067142)
    New patch "paranoia" merged with older "paranoia-pid" patch
  - Add init script for dhcrelay IPv6 version (#1053155)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-43.P1.1
changelog:
  - dhcpd generates spurious responses when seeing requests
    from vlans on plain interface (#1184333)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-44.P1
changelog:
  - option 97 - pxe-client-id (#1058674)
  - dhclient-script: PREINIT6: make sure link-local address is available (#1130804)
  - dhcpd generates spurious responses when seeing requests
    from vlans on plain interface (#1150587)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-50.P1
changelog:
  - Lease table overflow crash. (#1133917)
  - Add ignore-client-uids option. (#1196768)
  - dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
  - VLAN ID is only bottom 12-bits of TCI. (#1259552)
  - dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
  - dhclient-script: make_resolv_conf(): Keep old nameservers
    if server sends domain-name/search, but no nameservers. (#1269595)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-6
changelog:
  - Resolves: rhbz#668586 - ding-libs subpackages should have explicit version
  -                         requirements


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-7
changelog:
  - Resolves: rhbz#736074 - dhash can corrupt memory if initial table size is
                            large


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-8
changelog:
  - Fix bad patch
  - Related:  rhbz#736074 - dhash can corrupt memory if initial table size is
                            large


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.0-11
changelog:
  - Do not package built objects in dhash-devel
  - Fix NVR in the previous changelog entry
  - Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-11
changelog:
  - Resolves: rhbz#701501
  - Resolves: rhbz#729971
  - Resolves: rhbz#729032
    (not reproducable any more {zkabelac])


author: Tomas Hozza <thozza@redhat.com> - 2.48-11
changelog:
  - Revert previous changes because of many problems with --bind-dynamic option backport.
  - Dropping dnsmasq-2.48-add-bind-dynamic-option.patch
  - Set SO_BINDTODEVICE socket option when using --bind-interfaces (rhbz#884957)


author: Tomas Hozza <thozza@redhat.com> - 2.48-10
changelog:
  - Fixed dnsmasq-2.48-add-bind-dynamic-option.patch
   - the option --bind-dynamic was not set correctly when used


author: Daniel Veillard <veillard@redhat.com> - 2.48-5
changelog:
  - suppress the no address DHCP warning from logs (rhbz#704073)
  - fixes various small problems in the initscript (rhbz#584009)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-4
changelog:
  - Fixed dosfsck and dosfslabel on s390x (s390x-unalign patch)
    Resolves: rhbz#624596
  - Fixed buffer overflow in alloc_rootdir_entry (fix-alloc-rootdir-entry patch)
    Resolves: rhbz#677789
  - Fixed dosfslabel on FAT32 (dosfslabel-fat32 patch)
    Resolves: rhbz#688128
  - Fixed device partitions detection (dev-detect-fix patch)
    Resolves: rhbz#709266


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta6.20100630
changelog:
  - dovecot and pigeonhole updated
  - moved disable_plaintext_auth to 10-auth.conf
  - moved ACL and quota settings to a separate .conf files


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-17
changelog:
  - fix race condition when creating INBOX (#1184865)
  - close stderr if it's not used for logging (#730746)
  - login proxy should not fail connection if CRL isn't found for some certificate (#813957)
  - fix crash in list-status (#961466)
  - installation of dovecot hangs if there is no /dev/urandom (#1026790)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8 (fixes #654226), pigeonhole updated to 0.2.2
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.
  - mdbox: Fixed potential assert-crash when saving multiple messages
    in one transaction
  - dsync: a lot of fixes
  - fixed lda + sieve crash


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-22
changelog:
  - allow larger DH parameters length(#1230258)
  - don't check client PID in non-login auth sockets (#1281670)
  - messages containing a CP932 character were not shown in a search result (#1275233)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-5
changelog:
  - script-login did not drop privileges correctly (#709095)
  - fix directory traversal due to not obeying chroot directive (#709097)
  - check proxy destination host against SSL certificate name (#754980)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-8.3
changelog:
  - mention it in config file, that we disabled SSLv2 and SSLv3
    by default (#1174158)
  - add ssl_protocols configuation option and disable SSLv2 and SSLv3
    by default (#1174158)


author: Dag Wieers <dag@elrepo.org> - 8.3.8-2
changelog:
  - Create block devices in %post.
  - Unload module after stop to warn user that it may be used.
  - Better heartbeat integration (using group haclient).


author: Adam Tkac <atkac redhat com> 0.4-0.5.b42
changelog:
  - dump: write EA metadata to tape correctly (#599680)
  - restore: add a workaround to read incorrectly written EA metadata (#599680)


author: Adam Tkac <atkac redhat com> 0.4-0.6.b42
changelog:
  - call clone(2) syscall with correct args on s390
  - `dump -w` didn't recognize ext4 filesystems as supported (#658890)
  - fix incorrect hole handling (#691434)


author: Honza Horak <hhorak@redhat.com> - 7.1-6
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16,
    even in case of DAO writing
    Resolves: #807474


author: Jarod Wilson <jarod@redhat.com> - 3.4-2
changelog:
  - Set retval to 1 if we get an error, to make life easier for folks
    who wrap dvgrab to tell if something went wrong (#486061).


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 0-0.30.20090708cvs
changelog:
  - Add dvipdfmx-20090708-ebb-to-ebbx.patch to rename ebb to ebbx to avoid file
    conflict with ebb package


author: Lukas Czerner <lczerner@redhat.com> 1.41.12-9
changelog:
  - e2image: Add support for exporting image in qcow2 format (#713468)
  - mke2fs: Skip inode table initialization on some discardable devices (#713475)
  - mke2fs: Add -E discard/nodiscard options (#713475)
  - mke2fs: Allow to specify discard option in mke2fs.conf (#713475)
  - e2fsck: Allow to discard free data and inode blocks in e2fsck (#713475)
  - mke2fs: Show discard progress (#713475)
  - Don't attempt to discard flash device if -n option is given (#713475)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-12
changelog:
  - Fix spurious e2fsck checksum errors when -b option is used (#786021)
  - Fix bugs related to e2fsck -E discard (#795846)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-15
changelog:
  - Enhance e2fsck detection of invalid extent trees (#922847)
  - Several filefrag fixes (#927541)
  - Clear errors stored in superblock by newer kernels (#895679)
  - Fix journal superblock error handling (#885083)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-18
changelog:
  - Fix e2fsck false positive when blocks exist past EOF (#994615)
  - Fix resize2fs shrink corruption when moving files with many extents (#873201)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-19
changelog:
  - Fix for some resize2fs corruptions (#1036122)
  - Allow tune2fs to remove a dirty journal with -ff (#1040122)
  - Add enable_periodic_fsck to mke2fs.conf (#1052409)
  - Disallow too-high revision during mke2fs (#1093446)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-22
changelog:
  - e2fsck: fix last mount time and last write time in preen mode (#1218262)
  - e2fsck: don't prompt for time fixes with accept_time_fudge (#1218262)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-23
changelog:
  - e2image: check return value from check_if_mounted() (#1139936)
  - e2fsck: do not process impossibly large dir blocks (#1297694)
  - resize2fs: fix off-line resize of file systems (#1285227)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-3
changelog:
  - fixed init script to be lsb conform
    Resolves: rhbz#536828
  - fixed download link according to package review
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-5
changelog:
  - added -fno-strict-aliasing to the compiler flags (rhbz#596158)
  - cleaned up description (rhbz#596158)
  - fixed install of /etc/ethertypes in running system (rhbz#596778)


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-1
changelog:
  - Update to upstream 4.5.2 release.
  - Add eclipse-gcj-compat-4.2.1.patch and eclipse-gcj-nodummysymbol.patch
    from rhel-7.3 branch.
  - Add ecj-convertto1.5.patch.
  - Remove ClasspathJsr199.java for 1.5 compatibility.
  - Add man page.
  - Resolves: rhbz#1336481


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-3
changelog:
  - Update to a newer GCCMain.
  - Add a timestamp qualifier to ecj-gcj.tar.bz2.
  - Remove eclipse-gcj-compat-4.2.1.patch, no longer necessary. 
  - Restore versioned jar.
  - Resolves: rhbz#1336481


author: Andrew Overholt <overholt@redhat.com> 1:3.6.1-6.11
changelog:
  - Bring in line with Fedora.
  - Remove some stuff that is now done in eclipse-build.
  - Fix sources URL.
  - Add PDE dependency on zip for pdebuild script.
  - Use new eclipse-build targets.
  - Increase minimum required memory in eclipse.ini.


author: Michal Hlavinka <mhlavink@redhat.com> - 82-6.1
changelog:
  - security fixes:
  - privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
  - race condition when checking source during mount (CVE-2011-1833)
  - mtab corruption via improper handling (CVE-2011-1834)
  - key poisoning via insecure temp directory handling (CVE-2011-1835)
  - arbitrary file overwrite via lock counter race (CVE-2011-1837)


author: Mauro Carvalho Chehab <mchehab@redhat.com> - 0.9-12
changelog:
  - Add improvements from upstream version 0.16, in order to support newer
    edac drivers. Also, sync edac labels with RHEL5 package


author: Milan Crha <mcrha@redhat.com> - 3.2.6-4
changelog:
  - Rebuild against newer evolution-data-server.
  - Add patch to build break (include <bits/wordsize.h> where needed)
  Resolves: #973281


author: Roland McGrath <roland@redhat.com> - 0.146-1
changelog:
  - Update to 0.146
    - libdwfl: New function dwfl_core_file_report.
    - libelf: Fix handling of phdrs in truncated file. (#577310)
    - libdwfl: Fix infinite loop handling clobbered link_map. (#576379)
  - Package translations.


author: Roland McGrath <roland@redhat.com> - 0.148-1
changelog:
  - Update to 0.148
    - libdw: Accept DWARF 4 format: new functions dwarf_next_unit,
             dwarf_offdie_types.
             New functions dwarf_lineisa, dwarf_linediscriminator,
             dwarf_lineop_index.
    - libdwfl: Fixes in core-file handling, support cores from PIEs. (#588818)
               When working from build IDs, don't open a named file
               that mismatches.
    - readelf: Handle DWARF 4 formats.


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Mark Wielaard <mjw@redhat.com> - 0.158-3.2
changelog:
  - Add elfutils-0.158-unstrip.patch (#806474)
  - Add elfutils-0.158-readelf-nostrings.patch (#1101440)


author: Mark Wielaard <mjw@redhat.com> - 0.161-3
changelog:
  - Update to 0.161. (#1167724)
  - Add elfutils-0.161-ar-long-name.patch (#1181525 CVE-2014-9447)
  - Add elfutils-0.161-formref-type.patch


author: Mark Wielaard <mjw@redhat.com> - 0.164-1
changelog:
  - Update to elfutils-0.164 (#1254647)
  - Drop old compat stuff
  - Drop upstreamed patches
    - elfutils-0.161-ar-long-name.patch
    - elfutils-0.161-formref-type.patch
  - Include elfutils/known-dwarf.h


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.20.pre5
changelog:
  - remove patch for configure script to find OpenSSL (we use NSS instead)
  - rediffed all patches with non-zero offset
  - add buildrequires for zlib-devel


author: Karel Klic <kklic@redhat.com> 1:23.1-21
changelog:
  - Added jis2004 patch to prefer non-JIS X 0213:2004 compliant fonts
    for Japanese texts (IPA fonts are counted as JIS X 0213:2004
    compliant)
    Resolves: #612385
  - Removed dependency on aspell and hunspell
    Resolves: #613759


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-5
changelog:
  - Make .modulespath a config file (bug #918540)
  - Do not replace modified profile.d scripts (bug #953198)
  - Remove use of test command in csh alias (bug #929007)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-6
changelog:
  - Call test command in csh alias by its full path (bug #929007)
  - Correctly preserve the target file that the config symlink points to
    (this change makes the previous fix for bug #953198 whole)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.10-2
changelog:
  - fix: SourceVers wrongly sets version in nested directory (#979789)
  - fix: unload from loaded modulefile broken (#1117307)


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-3
changelog:
  - Add -fno-strict-aliasing to silence gcc warnings
  - Fix timestamps to silence multilib test
  - Related: #848865


author: Jan Synáček <jsynacek@redhat.com> - 3.2.9c-4
changelog:
  - Revert timestamps fix attempt
  - Prevent rpm from bytecompiling the internal python file
  - Related: #848865


author: Jack Magne <jmagne@redhat.com>= 1.1.0-20
changelog:
  - Resolves: #582283 - ESC Enrollment of formatted card fails when more than one card present in usb.


author: Jack Magne <jmagne@redhat.com>= 1.1.0-22
changelog:
  - Resolves: #729027 - Debuginfo package issues in esc
  - Resolves: #253077 - ESC windows should keep the same size if the user resized them
  - Resolves: #682216 - [abrt] esc-1.1.1.0-21.el6 __strcmp_ssse3: Process /usr/lib/esc-1.1.1.0/escd 
  -    was killed by singnal 11 (SIGSEGV)
  - Resolves: #702683 - esc-prefs.js file has a typo


author: Jack Magne <jmagne@redhat.com>= 1.1.0-26
changelog:
  - Resolve bugs #981156 and #961582. One minor permissions issue, the other fix to malformed desktop file.


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.1
changelog:
  - Pull in 2.6.33pre1 from rawhide
    Resolves: bz#520481 - [Emulex 6.0 feat] be2net request_firmware() support in
    Ethtool-cmd-with-flash-for-RH6


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.3
changelog:
  - Fix source0 line to match the actual download filename.
  - Get rid of the no-longer-needed predash macro.
    Related: bz#555835


author: Jay Fenlason <fenlason@redhat.com> 3.5-1.2
changelog:
  - Backport two patches to improve register dumps on ixgbe devices
    Resolves: bz#1038956
  - Backport two patches to fix lro support
    Resolves: bz#1038955


author: Jay Fenlason <fenlason@redhat.com> 3.5-4
changelog:
  - Include the backported -kr patch from upstream to close
    Resolves: bz#1003891
    the rest of the way.


author: Milan Crha <mcrha@redhat.com> - 2.28.3-13.el6
changelog:
  - Add patch for RH bug #634949 (crash with google address book)
  - Add patch for RH bug #660356 (crash with calendar views and webcal)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-28.el6
changelog:
  - Add patch for RH bug #1012399 (Fails to display task mail attachment)
  - Bump evolution-data-server version requirement (for RH bug #1009426)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-30.el6
changelog:
  - Update patch for RH bug #975409 (Custom message in alarm notification)
  - Add patch for RH bug #1014743 (Use system timezone has no effect)
  - Add patch for RH bug #1014677 (Search filter persists when changing folders)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-32.el6
changelog:
  - Add patch for RH bug #1054865 (Incorrect unref under e_attachment_load_finish())
  - Add patch for RH bug #1054772 (Local addressbooks created without relative_uri set)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-33.el6
changelog:
  - Add patch for RH bug #1080467 (mark-all-read plugin can cause UI freeze)
  - Add patch for RH bug #1052955 (Time format in combo controls is always 24 hrs)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-37.el6
changelog:
  - Add patch for RH bug #1066063 (Use-after-free on a reminder snooze)
  - Add patch for RH bug #1133507 (Calendar event times not drawn with correct font)


author: Milan Crha <mcrha@redhat.com> - 2.32.3-14.el6
changelog:
  - Add patch for RH bug #1009470 (evolution-ews crash when GAL not marked for offline sync)
  - Add patch for RH bug #1005888 (evolution-ews add 'no-alarm-after-start' calendar capability)


author: Milan Crha <mcrha@redhat.com> - 0.28.3-5
changelog:
  - Bump openchange requirement to 0.9-7
  - Add patches for RH bug #605369, namely:
    - Exchange 2010 support (tags and encrypted connection)
    - Less debug output on console
    - GNOME bug #569631 (Hangs during the initial fetch of calendar items)
    - GNOME bug #581434 (Double free or corruption in calendar)
    - GNOME bug #593176 (winmail.dat sent in outgoing plaintext mail)
    - GNOME bug #595914 (Doesn't display the Cyrrilic symbols in folder names)
    - GNOME bug #598564 (Has problems encoding mails containing html)
    - GNOME bug #600386 (Do not use charset on messages with UNICODE body fetched)
    - GNOME bug #600389 (UTF8 characters not shown properly)
    - GNOME bug #602896 (CC field is shown twice in message)
    - GNOME bug #607384 (Replying causes the message to appear as garbage)
    - GNOME bug #607422 (Crash while importing a message without From header)
    - GNOME bug #610224 (Crash on a meeting forward notification mail)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-10
changelog:
  - Add patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #906341 (Cannot create book/calendar)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-11
changelog:
  - Update patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #1017108 (Shorten delay of calendar open)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-13
changelog:
  - Add patch for RH bug #1026797 (Coverity scan issue - uninitialized variable)
  - Add patch for RH bug #1141662 (Crash when receiving message without body)


author: Joe Orton <jorton@redhat.com> - 2.0.1-8
changelog:
  - add security fix for CVE-2009-3560 (#533174)
  - add security fix for CVE-2009-3720 (#531697)
  - run the test suite


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-1
changelog:
  - Update to 5.44.1.15 from upstream CVS
  - Remove config.sub (no longer needed), remove unused patches (few are
    upstream now, few are pointless with new version), comment patches
  - Fix unbuffer to return exit code of ubuffered program
  - Fix Tk initialization


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-3
changelog:
  - Use full path to su in passmass
    Resolves: #735962
  - Fix segfault in characters matching
    Resolves: #742911
  - Fix minor man page formatting issue
    Resolves: #674866


author: Richard W.M. Jones <rjones@redhat.com> - 2.9-24.5.el6.1
changelog:
  - Properly fix multilib issue in shell script /usr/bin/fakechroot
    and remove ExclusiveArch.
    resolves: rhbz#730647


author: Petr Šabata <contyk@redhat.com> - 1.0.22-1
changelog:
  - Update to 1.0.22 with 7d3c9d1, "Add date and ps output to fcoedump.sh"
  - Require libhbalinux-1.0.13 or newer


author: Petr Šabata <contyk@redhat.com> - 1.0.22-2
changelog:
  - Reverting a part of d789267 upstream patch.  Initscript shouldn't return code 2 on
    status query when the daemon is running. (#804936)


author: Petr Šabata <contyk@redhat.com> - 1.0.28-1
changelog:
  - Update to 1.0.28 (#829793)
  - Include a fix for #903099, destroying vports first to avoid a hang
  - Fix an old bogus date in the changelog


author: Petr Šabata <contyk@redhat.com> - 1.0.28-2
changelog:
  - Don't build on s390x (#693443)
  - Add a note to README about EL6 service already implementing the
    suggested function (#981062)
  - Use rtgenmsg when requesting RTM_GETLINK (#882139)


author: Richard Jones <rjones@redhat.com> - 2.11-6
changelog:
  - Split package into febootstrap (for building) and febootstrap-supermin-helper
    (for running).  Note that febootstrap depends on febootstrap-supermin-helper,
    but you can install febootstrap-supermin-helper on its own (RHBZ#669839).


author: Richard Jones <rjones@redhat.com> - 2.11-7
changelog:
  - Splitting the package broke RHEL 6.0 -> 6.1 upgrades.  Add an Obsoletes
    header to fix this.
    resolves: RHBZ#669839


author: Richard Jones <rjones@redhat.com> - 2.7-1
changelog:
  - Backport version 2.7 from Rawhide (fixes RHBZ#592051).
  - febootstrap-supermin-helper shell script rewritten in C for speed.
  - This package contains C code so it is no longer 'noarch'.
  - MAKEDEV isn't required.


author: Richard Jones <rjones@redhat.com> - 3.9-1
changelog:
  - Rebase to febootstrap 3.9.
    resolves: RHBZ#719877
  - This package contains febootstrap (version 2.11) and febootstrap3.


author: Richard Jones <rjones@redhat.com> - 3.21-4
changelog:
  - Fix directory permissions to include setgid and sticky bits.
  - Ignore ghost non-regular files.
  - Fix segfault when -u/-g options missing argument.
    related: rhbz#958184


author: Marek Grac <mgrac@redhat.com> - 3.0.12-21
changelog:
  - fence_rhevm: Update URL for RHEV-M REST API
    (fence_rhevm-Update-URL-to-RHEV-M-REST-API.patch)
    Resolves: rhbz#681674


author: Marek Grac <mgrac@redhat.com> - 3.0.12-22
changelog:
  - fence_cisco_ucs: Add support for sub-organizations
    (fence_cisco_ucs-Support-for-sub-organization.patch)
    (fence_cisco_ucs-Fix-for-support-for-sub-organization.patch)
    Resolves: rhbz#678904


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-23
changelog:
  - fence_ipmilan: Correct return code for diag operation
    (fence_ipmilan_correct_return_code_for_diag_operation.patch)
    Resolves: rhbz#655764


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Don't truncate fence_scsi log files
    (fence_scsi_do_not_truncate_log_file.patch)
    Resolves: rhbz#608887


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-7
changelog:
  - fence_rsb: Raise exceptions not strings with python 2.6
    (fence_rsb_raise_exceptions.patch)
    Resolves: rhbz#612941
  - fence_ilo: will throw exception if user does not have power priviledges
    (fence_ilo_will_throw_exception_if_user_has_no_power_privs.patch)
    Resolves: rhbz#615255
  - fence agents support clean up:
    drop support for baytech, brocade, mcdata, rackswitch and bullpap
    deprecate rsa and sanbox2
    rename ibmblade to bladecenter_snmp and add compatibility symlink
    (fence_rename_ibmblade_to_bladecenter_snmp_part1.patch)
    (fence_rename_ibmblade_to_bladecenter_snmp_part2.patch)
    Resolves: rhbz#616559
  - spec file changelog cleanup for older releases
  - rename Patch0 to be consistent with the others


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-8
changelog:
  - Fix syntax error in code that opens logfile.
    (fix_syntax_error_in_code_that_opens_logfile.patch)
    Resolves: rhbz#608887


author: Marek Grac <mgrac@redhat.com> - 3.0.12-8.el6_0.1
changelog:
  - Provide fence-rhev agent that uses the RHEV REST API
    (fence_rhevm.patch)
    Resolves: rhbz#642695


author: Marek Grac <mgrac@redhat.com> - 3.0.12-8.el6_0.2
changelog:
  - Support for ilo3 devices using fence_ipmilan
    (fence-agents-Add-power_wait-to-fence_ipmilan.patch)
    Resolves: rhbz#643340


author: Marek Grac <mgrac@redhat.com> - 3.1.5-9
changelog:
  - fence_ipmilan exposes user password on verbose mod
    Resolves: rhbz#732372
  - fence_ipmilan should honor ipmilan's -L option (privileges)
    Resolves: rhbz#726571


author: Marek Grac <mgrac@redhat.com> - 3.1.5-10
changelog:
  - fence_kdump: Newly detected Coverity defect (null dereference)
    Resolves: rhbz#734429
  - fence_scsi: fix scsi unfencing to allow simultaneous unfences
    Resolves: rhbz#738384


author: Marek Grac <mgrac@redhat.com> - 3.1.5-10.1
changelog:
  - fence_rhevm: Incorrect power status detected when VM status is not up/down
    Resolves: rhbz#785816


author: Marek Grac <mgrac@redhat.com> - 3.1.5-10.2
changelog:
  - fence_vmware_soap: o list doesn't expose proper virtual machine path for fencing
    Resolves: rhbz#811873


author: Marek Grac <mgrac@redhat.com> - 3.1.5-16
changelog:
  - fence agents: attribute unique in XML metadata should be set 0
    Resolves: rhbz#806883
  - fence_ipmilan: Typo
    Resolves: rhbz#806912
  - fence_ipmilan: Return code can be invalid with -M cycle
    Resolves: rhbz#806897


author: Marek Grac <mgrac@redhat.com> - 3.2.5-17.1
changelog:
  - fence_vmware_soap: Improve speed of fencing and do not fail on 
  	machines without UUID
  - Resolves: rhbz#872620


author: Marek Grac <mgrac@redhat.com> - 3.0.15-25.2
changelog:
  - fence_drac5: fix regression due to invalid EOL
    Resolves: rhbz#908401
  - fence_vmware_soap: traceback when hostname cannot be resolved
    Resolves: rhbz#908409


author: Marek Grac <mgrac@redhat.com> - 3.0.15-33
changelog:
  - fence_scsi: Fix error in XML metadata
    Resolves: rhbz#994186
  - fence_scsi: Add documention of "delay" into manual pages
    Resolves: rhbz#912773
  - fencing: Improve detection of EOL during login
    Resolves: rhbz#886614


author: Marek Grac <mgrac@redhat.com> - 3.0.15-34
changelog:
  - fence_cisco_ucs: Respect login timeout
    Resolves: rhbz#978325
  - fence_bladecenter: Telnet login failure
    Resolves: rhbz#997416


author: Marek Grac <mgrac@redhat.com> - 3.0.15-35
changelog:
  - fence_vmware_soap: Fix symlink vulnerability caused by python-suds temp directory
    Resolves: rhbz#1014000


author: Marek Grac <mgrac@redhat.com> - 3.0.15-44
changelog:
  - fence_brocade: fix default action
    Resolves: rhbz#1114559
  - fence_brocade: add support for list to allow monitor
    Resolves: rhbz#1114528


author: Marek Grac <mgrac@redhat.com> - 4.0.15-4
changelog:
  - fence_ilo_moonshot: New fence agent for HP Moonshot
    Resolves: rhbz#1099551
  - fence_mpath: New fence agent for multipath devices
    Resolves: rhbz#1118008


author: Marek Grac <mgrac@redhat.com> - 4.0.15-5
changelog:
  - fence_ilo_ssh: New fence agent
    Resolves: rhbz#1111482
  - fence_kdump: Update metadata for 'monitor'
    Resolves: rhbz#1094515


author: Marek Grac <mgrac@redhat.com> - 4.0.15-7
changelog:
  - fence_scsi: remove new pythonic version
  - fence_ipmilan: unset default cipher
  - fence_ilo2: add options --tls1.0
  - fence_bladecenter: fix login process
    Resolves: rhbz#1049805


author: Marek Grac <mgrac@redhat.com> - 4.0.15-9
changelog:
  - fence_ipmilan no longer understands -i
    Resolves: rhbz#1254046
  - fence_ipmilan no longer understands 'timeout'
    Resolves: rhbz#1254700
  - fence_ilo: Improve negotiation of TLS protocol
    Resolves: rhbz#1256902
  - fence_rsa: Login process over telnet is not working
    Resolves: rhbz#1247062
  - fence_mpath: lose scsi keys after restart
    Resolves: rhbz#1254183


author: Marek Grac <mgrac@redhat.com> - 4.0.15-11
changelog:
  - fence_ipmilan: Revert power_wait values
    Resolves: rhbz#1273632
  - fence_apc: Support for firmware 6.x
    Resolves: rhbz#1259254
  - fence_ipmilan: Add 'diag' action
    Resolves: rhbz#1266600
  - fencing: Add '-list-status' action
    Resolves: rhbz#1183829


author: Marek Grac <mgrac@redhat.com> - 4.0.15-13
changelog:
  - fence_ipmilan: Do not print password to debug output
    Resolves: rhbz#1358064
  - fencing: Handle None as status properly
    Resolves: rhbz#1361623


author: Lon Hohberger <lhh@redhat.com> 0.2.1-3
changelog:
  - Fix spec file due to qpid package renaming and architecture changes
  - Don't build on s390 and s390x
  - Resolves: rhbz#568003 rhbz#567744


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.1-6
changelog:
  - Fix man page references: fence_virtd.conf -> fence_virt.conf
    (fix_man_page_references_fence_virtd_conf_fence_virt_conf.patch)
    Resolves: rhbz#667170


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-19
changelog:
  - fence_virt/fence_xvm: Print status when invoked with -o
    Resolves: rhbz#1020992
  - fence-virt: Fix broken restrictions on the port ranges
    Resolves: rhbz#1078197
  - Fix static analysis errors
    Resolves: rhbz#1125290


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-24
changelog:
  - fence-virt: Add list-status command to man page and metadata
    Resolves: rhbz#908455
  - Remove delay from the status, monitor and list
    Resolves: rhbz#1204873


author: Lon Hohberger <lon@users.sourceforge.net> - 0.2.3-3
changelog:
  - Fix error getting status from libvirt-qpid plugin
    Convert libvirt-qpid plugin to QMFv2
    Add libvirt-qmf support to the libvirt-qpid plugin
    Resolves: rhbz#691200


author: Ryan McCabe <rmccabe@redhat.com> - 0.2.3-9
changelog:
  - Update the man page and configuration generator to reflect the actual
    behavior of the default value for the "interface" option.
    Resolves: rhbz#809101


author: Uri Lublin <uril@redhat.com> - 0.4.9-0.15.5spice.20080908
changelog:
  - Rename package and files from qffmpeg to ffmpeg-spice
  - Removed all 'q' prefix from directories/files/libraries.


author: Jan Kaluza <jkaluza@redhat.com> 5.04-12
changelog:
  - fix #758109 - detect ia64 swap
  - fix #760083 - print RPM packages names
  - fix #709846 - detect BIOS headers
  - fix #688136 - remove weak msdos patterns
  - fix #747999 - improve lzma detection
  - fix #733229 - magic pattern for python function detection


author: Jan Kaluza <jkaluza@redhat.com> 5.04-13
changelog:
  - fix #688136 - fixed the patch from previous commit
  - fix #719583 - support for local magic file in /etc/magic


author: Jan Kaluza <jkaluza@redhat.com> 5.04-14
changelog:
  - fix #795425 - detect vdi images
  - fix #795761 - detect qed images
  - fix #801711 - uncompress bzip2 archives using -z parameter
  - fix #797784 - read patterns from ~/.magic.mgc


author: Jan Kaluza <jkaluza@redhat.com> 5.04-6
changelog:
  - fix #637782 - identify the zip64 format correctly
  - fix #643046 - recognize volume_key escrow packets
  - fix #594083 - improve Python recognition
  - fix #608686 - mention return code in manpage
  - fix #610795 - recognize webm content
  - fix #670125 - don't identify GFS2 filesystems as GFS1 filesystems


author: Jan Kaluza <jkaluza@redhat.com> 5.04-8
changelog:
  - fix #676045 - detect all RPM architectures
  - fix #712992 - detect noarch RPM packages
  - fix #688700 - detect s390 kernel
  - fix #692098 - do not try to get coredump informations from normal binary
  - fix #712988 - do not handle Python scripts as binary files
  - fix #690801 - fixed grammar mistakes in man page
  - fix #675691 - improve TeX recognition


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-4
changelog:
  - make it possible to recognize an autofs filesystem by find
  - add a new find's option -xautofs to not descend directories on autofs
    filesystems


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-8
changelog:
  - fix quotation punctuation in find(1) man page (#659730)
  - fix file descriptor leak with --execdir option (#1223557)


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-5
changelog:
  - move library to /lib so the binaries needed when /usr might
    not be mounted can link to it (#669077)


author: Martin Stransky <stransky@redhat.com> - 10.0.8-2
changelog:
  - Fixed rhbz#865284 - add the storage.nfs_filesystem
    config key to property list
  - disable OOP for wrapped plugins (nspluginwrapper)


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Martin Stransky <stransky@redhat.com> - 17.0.8-3
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Jan Horak <jhorak@redhat.com> - 31.3.0-6
changelog:
  - Fixed rhbz#1164855 - firefox.desktop is missing
    x-scheme-handler MimeType entries
  - Fixed problems with dictionaries (mozbz#1097550)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-7
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: Tim Waugh <twaugh@redhat.com> - 4.0.3-10
changelog:
  - Removed old explicit provides for perl(Foomatic::GrovePath).
  - Fixed macro in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING files.
  - Added comments for sources.
  - Use Requires not PreReq (bug #225768).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-1
changelog:
  - Updated to 4.0.4 (bug #570234).  No longer buildrequires
    ghostscript-devel (but requires ghostscript) or
    foomatic-filters-int-options patch.


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-1:.1
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2697, bug #721001).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-2
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2964, bug #727016).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-3
changelog:
  - Too few arguments for format in a debugging string (bug #726385).
  - Fixed perl installation locations for build (bug #661770).


author: Jiri Popelka <jpopelka@redhat.com> - 4.0.4-5
changelog:
  - Also consider back tick and semicolon as illegal shell escape characters.
  - CVE-2015-8327, CVE-2015-8560


author: Jan Safranek <jsafrane@redhat.com> - 0.7.16-2
changelog:
  - Fix the ipmievd initscript to actually start the service and better
    LSB compatibility (#578172). As consequence, the init scripts were
    renamed to ipmidetectd and bmc-watchdog (was: freeipmi-ipmidetectd
    and freeipmi-bmc-watchdog).


author: Boris Ranto <branto@redhat.com> - 0:1.2.1-8
changelog:
  - New release (0:1.2.1-8)
  - Check record counts against array length
  - Increase max record ids in sensor tools to 4096


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-1
changelog:
  - Rebase to upstream except changes in /etc/freeipmi/ config dir.
    preserving original locations.
  - 1.2.1:
  - Add ipmiseld daemon and subpackage.
  - Update paths for libfreeipmi changes.
  - Remove bmc-watchdog logrotate file.
  - 1.1.1:
  - Add contrib and ipmi-pet files.
  - Make main package own logdir.
  - 1.0.4:
  - Add pkgconfig files.
  - 0.9.0:
  - Add interpret sub-library.
  - Support new config files.
  - Support new ipmi_monitoring*.h files.
  - Support new manpages.
  - Support new compatability symlinks/manpages.
  - 0.8.0:
  - Update for dcmi.
  - Update for renaming of pef-config.
  - Update for new .h files.
  - Add new ipmimonitoring config manpages.


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-6
changelog:
  - Kernel module aliases configuration for kmod. (#1032965)
  - Big-Endian authentication fix. (#1032963)
  - Revert short options removal to preserve 0.7.16 command line parameters.


author: Ales Ledvinka <aledvink@redhat.com. - 1.2.1-6
changelog:
  - Kernel module aliases configuration for kmod. (#1020650)
  - Big-Endian authentication fix. (#1022178)
  - Revert short options removal to preserve 0.7.16 command line parameters.


author: John Dennis <jdennis@redhat.com> - 2.1.10-3
changelog:
  - Resolves: #644100, Rebase to current release
  - Fix 666589 - removing freeradius from system does not delete the user "radiusd"
    fix scriptlet argument testing, simplify always exiting with zero


author: John Dennis <jdennis@redhat.com> - 2.1.10-5
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
    resolves: bug#736878 Rebase to latest upstream
    resolves: bug#705723 logrotate script does not reload running daemon
    resolves: bug#787116 radtest PPPhint option not parsed correctly
    resolves: bug#700870 freeradius not compiled with --with-udpfromto
    resolves: bug#753764 shadow password expiration does not work
    resolves: bug#712803 radtest script is not working with eap-md5 option
    resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855316
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855317
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-5
changelog:
  - Add support for microsecond precision of home server's response_window
    option, client's response_window option with the same precision and home
    server's response_timeouts option, backported from v3.0.x.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-6
changelog:
  - Fix missing braces around a condition branch in client response_window
    patch.
  - Resolves: bug#1107843


author: John Dennis <jdennis@redhat.com> - 2.1.9-1
changelog:
  - update to latest upstream, mainly bug fix release
  - Resolves: bug #584101
    Feature improvements
    * Add radmin command "stats detail <file>" to see what
      is going on inside of a detail file reader.
    * Added documentation for CoA.  See raddb/sites-available/coa
    * Add sub-option support for Option 82.  See dictionary.dhcp
    * Add "server" field to default SQL NAS table, and documented it.

    Bug fixes
    * Reset "received ping" counter for Status-Server checks.  In some
      corner cases it was not getting reset.
    * Handle large VMPS attributes.
    * Count accounting responses from a home server in SNMP / statistics
      code.
    * Set EAP-Session-Resumed = Yes, not "No" when session is resumed.
    * radmin packet counter statistics are now unsigned, for numbers
      2^31..2^32.  After that they roll over to zero.
    * Be more careful about expanding data in PAP and MS-CHAP modules.
      This prevents login failures when passwords contain '{'.
    * Clean up zombie children if there were many "exec" modules being
      run for one packet, all with "wait = no".
    * re-open log file after HUP.  Closes bug #63.
    * Fix "no response to proxied packet" complaint for Coa / Disconnect
      packets.  It shouldn't ignore replies to packets it sent.
    * Calculate IPv6 netmasks correctly.  Closes bug #69.
    * Fix SQL module to re-open sockets if they unexpectedly close.
    * Track scope for IPv6 addresses.  This lets us use link-local
      addresses properly.  Closes bug #70.
    * Updated Makefiles to no longer use the shell for recursing into
      subdirs.  "make -j 2" should now work.
    * Updated raddb/sql/mysql/ippool.conf to use "= NULL".  Closes
      bug #75.
    * Updated Makefiles so that "make reconfig" no longer uses the shell
      for recursing into subdirs, and re-builds all "configure" files.
    * Used above method to regenerate all configure scripts.
      Closes bug #34.
    * Updated SQL module to allow "server" field of "nas" table
      to be blank: "".  This means the same as it being NULL.
    * Fixed regex realm example.  Create Realm attribute with value
      of realm from User-Name, not from regex.  Closes bug #40.
    * If processing a DHCP Discover returns "fail / reject", ignore
      the packet rather than sending a NAK.
    * Allow '%' to be escaped in sqlcounter module.
    * Fix typo internal hash table.
    * For PEAP and TTLS, the tunneled reply is added to the reply,
      rather than integrated via the operators.  This allows multiple
      VSAs to be added, where they would previously be discarded.
    * Make request number unsigned.  This changes nothing other than
      the debug output when the server receives more than 2^31 packets.
    * Don't block when reading child output in 'exec wait'.  This means
      that blocked children get killed, instead of blocking the server.
    * Enabled building without any proxy functionality
    * radclient now prefers IPv4, to match the default server config.
    * Print useful error when a realm regex is invalid
    * relaxed rules for preprocess module "with_cisco_vsa_hack".  The
      attributes can now be integer, ipaddr, etc.  (i.e. non-string)
    * Allow rlm_ldap to build if ldap_set_rebind_proc() has only
      2 arguments.
    * Update configure script for rlm_python to avoid dynamic linking
      problems on some platforms.
    * Work-around for bug #35
    * Do suid to "user" when running in debug mode as root
    * Make "allow_core_dumps" work in more situations.
    * In detail file reader, treat bad records as EOF.
      This allows it to continue working when the disk is full.
    * Fix Oracle default accounting queries to work when there are no
      gigawords attributes.  Other databases already had the fix.
    * Fix rlm_sql to show when it opens and closes sockets.  It already
      says when it cannot connect, so it should say when it can connect.
    * "chmod -x" for a few C source files.
    * Pull update spec files, etc. from RedHat into the redhat/ directory.
    * Allow spaces when parsing integer values.  This helps people who
      put "too much" into an SQL value field.


author: Nalin Dahyabhai <nalin@redhat.com> - 2.1.9-3
changelog:
  - Resolves: bug #629951
    override LINK_MODE at compile-time to add -pie to linker flags, so that
    radiusd will be built as a PIE


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-4
changelog:
  - Move OpenSSL init out of version check
    Resolves: Bug#1189394 radiusd segfaults after update
  - Comment-out ippool-dhcp.conf inclusion
    Resolves: Bug#1189386 radiusd fails to start after 'clean' installation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-5
changelog:
  - Fix EAP client authentication with TLS 1.2
    Resolves: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-6
changelog:
  - Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
    Related: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Soren Sandmann <ssp@redhat.com>
changelog:
  - Add two patches for the man page:
    - 0001-xfreerdp.1.xml-Don-t-claim-to-support-multiple-conne.patch
      Don't claim to support multiple connections, #988272
    - 0002-Replace-itemizedlist-s-with-variablelist-s.patch
      Work around a bug in RHEL 6 docbook, that causes <itemizedlist>
      to be mangled. This patch replaces them with <variablelist>s.


author: Soren Sandmann <ssp@redhat.com> - 1.0.2-2
changelog:
  - Add patch listing the plugins available in RHEL 6
    - 0003-List-plugins-available-in-RHEL-6.patch
    Related: #988272


author: Marek Kasik <mkasik@redhat.com> 2.3.11-13
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806269


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-15.el6_6.1
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197737


author: Marek Kasik <mkasik@redhat.com> 2.3.11-8
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723468


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-16
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197738


author: Marek Kasik <mkasik@redhat.com> 2.3.11-4
changelog:
  - Add freetype-2.3.11-CVE-2010-2498.patch
      (Assure that `end_point' is not larger than `glyph->num_points')
  - Add freetype-2.3.11-CVE-2010-2499.patch
      (Check the buffer size during gathering PFB fragments)
  - Add freetype-2.3.11-CVE-2010-2500.patch
      (Use smaller threshold values for `width' and `height')
  - Add freetype-2.3.11-CVE-2010-2519.patch
      (Check `rlen' the length of fragment declared in the POST fragment header)
  - Add freetype-2.3.11-CVE-2010-2520.patch
      (Fix bounds check)
  - Add freetype-2.3.11-CVE-2010-2527.patch
      (Use precision for `%s' where appropriate to avoid buffer overflows)
  - Add freetype-2.3.11-axis-name-overflow.patch
      (Avoid overflow when dealing with names of axes)
  - Resolves: #613298


author: Marek Kasik <mkasik@redhat.com> 2.3.11-5
changelog:
  - Add freetype-2.3.11-CVE-2010-1797.patch
      (Check stack after execution of operations too.
       Skip the evaluations of the values in decoder, if
       cff_decoder_parse_charstrings() returns any error.)
  - Resolves: #621624


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_0.1
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638838


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_2.9
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806268


author: Jan Synáček <jsynacek@redhat.com> - 0.17-52
changelog:
  - Increase ftp client command line limit (#871060)
  - Plug memleaks in append, put and send commands (#871072)
  - Fix buffer overflow when processing macro (update linelen patch) (#871547)
  - Correctly set the release number


author: Jan Synáček <jsynacek@redhat.com> - 0.17-52
changelog:
  - Add listening timeout to avoid hanging up when ftp is executed in active mode
    and ftp-data port is blocked (#852636)
  - Plug memleaks in append, put and send commands (#786004)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.7-7
changelog:
  - Fix double free in free_wstr (#648906)
  - Prevent overflows by increasing YYMAXDEPTH and YYSTACKSIZE
    byacc/bison parameters (#743343)
  - Preserve argv by copying the strings (#740673)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 3.1.7-10.el6_7.2
changelog:
  - Man & info pages fixed to describe the '--posix' usage correctly,
    as discussed in #1271443 (comments #1 and #2)


author: Jakub Jelinek <jakub@redhat.com> 4.4.4-11
changelog:
  - update from gcc-4_4-branch
    - PRs target/44597, target/44705
  - VTA backports
    - PR c++/44808
    - avoid outputting invalid registers in debug info (#610455)
  - -Wunused-but-set-* vector assignment fix (PR c++/44780)
  - fix PowerPC address reloading for inline-asms (#608768, PR target/44707)
  - fix predictive commoning (#609488, PR tree-optimization/40421)
  - fix SRA not to do useless sign-extensions that confuses ivopts (#610785)
  - fix IPP handling in libgcj (#578382)


author: Jakub Jelinek <jakub@redhat.com> 4.4.4-12
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/44582, fortran/44773, fortran/44847, pch/14940, target/33743
  - fix inline-asm check for auto-inc-dec operands (PR testsuite/44701)
  - use DW_OP_const[48]u instead of DW_OP_addr for DW_OP_GNU_push_tls_address
    operand


author: Jakub Jelinek <jakub@redhat.com> 4.4.4-13
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/45019, target/42869, target/44942, testsuite/38946
  - VTA backports
    - PRs debug/45015, bootstrap/45028
    - var-tracking improvements (#616050, PR debug/45003, PR debug/45006)
  - fix fortran SELECT CASE handling with CHARACTER type (PR fortran/40206)
  - small OpenMP debug info improvements (#533181)


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-4
changelog:
  - ppc64 -mcmodel={medium,large} support (#630166)
  - reserve outgoing parameter save area on ppc64 if there
    is just __tls_get_addr call (#624889)
  - optimize/target attribute fix (#659582)


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-5
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/45081, fortran/46794, fortran/46874, middle-end/45852,
  	preprocessor/39213, rtl-optimization/46865, target/22224,
  	target/40468, target/43309, target/45447, target/46880,
  	target/46915, testsuite/33033
  - VTA backports
    - PRs debug/46893, target/47201
  - fix regmove REG_EQUAL handling (PR rtl-optimization/46804)


author: Jakub Jelinek <jakub@redhat.com> 4.4.5-6
changelog:
  - update from gcc-4_4-branch
    - PRs c++/45894, c++/47589, fortran/47569, libstdc++/47354,
  	rtl-optimization/46603, target/44606, target/46610
    - fix avxintrin.h _mm{,256}_mask{load,store}_p{d,s} (#635015,
      PR target/47318)
  - rebuilt against newer binutils to enable PowerPC64 -mcmodel={medium,large}
    support, define __CMODEL_MEDIUM__ or __CMODEL_LARGE__ in such cases
    and fix x+const@toc printing bug (#630166)


author: Jakub Jelinek <jakub@redhat.com> 4.4.6-1
changelog:
  - update from gcc-4_4-branch
    - GCC 4.4.6 release
    - PRs c++/40975, c++/42687, c++/44629, c++/45651, c++/47289, c++/47488,
  	c++/48594, c++/48873, c++/49165, c/42544, c/48197, debug/48466,
  	fortran/47775, fortran/47878, fortran/47886, fortran/48117,
  	fortran/48894, libfortran/47694, libfortran/47830, libgfortran/47878,
  	middle-end/48973, middle-end/49640, other/48179, other/48234,
  	other/48254, other/48639, preprocessor/48740, rtl-optimization/40086,
  	rtl-optimization/45593, rtl-optimization/48542,
  	rtl-optimization/48932, rtl-optimization/49007,
  	rtl-optimization/49619, target/43603, target/43653, target/43700,
  	target/47840, target/48288, target/48349, target/48366, target/48605,
  	target/48774, target/49133, target/49186, target/49723, target/49746,
  	tree-optimization/38752, tree-optimization/46491,
  	tree-optimization/46620, tree-optimization/48809,
  	tree-optimization/48837, tree-optimization/49039,
  	tree-optimization/49572, tree-optimization/49615
    - fix up unwind info if inline asm is scheduled very early in
      function prologue (#721376, PR middle-end/48597)
    - instantiate C++ constant variables in unevaluated contexts
      (#703059, PR c++/48936)
    - improve RTL DCE compilation time on some testcases
      (#684895, PR rtl-optimization/48141)
  - run ldconfig in libgcc %postun, drop libcc_post_upgrade,
    instead write the script in <lua> (#705832)
  - change V2DImode argument passing on PowerPC with VSX (#705764,
    PR target/48857, PR target/48495)
  - Intel -mrdrnd, -mfsgsbase and -mf16c support (#696145, #696495,
    PR target/44844)
  - AMD -mtbm, -mbmi, -march=bdver2 support, slight change
    to -march=bdver1 support and -march=btver1 support
    (#696352, #696370, PR target/46422)
  - disable C90 overlength string literal warnings in inline asm
    and in __extension__ guarded code (#694141)
  - PowerPC64 -mcmodel={medium,large} bugfixes (PR target/47935,
    PR target/47986, PR target/48032)
  - fix debug info for NRV optimized C++ vars (#660302, PR debug/46815)


author: Jakub Jelinek <jakub@redhat.com> 4.4.6-2
changelog:
  - update from gcc-4_4-branch
    - PRs fortran/49791, target/47364
    - further fix for signed one bit precision comparisons (PR middle-end/48973)
  - fix PowerPC vsx_splat* handling (PR target/45844)


author: Jakub Jelinek <jakub@redhat.com> 4.4.6-3
changelog:
  - decrease C++ FE memory usage on code with heavy overloading
    (#732807, PR c++/48481)
  - support used attribute on template class methods and static data
    members for forced instantiation (#722587, PR c++/43125)
  - build EH_SPEC_BLOCK with the same location as current function
    to help gcov (#732802, PR c++/50055)


author: Jakub Jelinek <jakub@redhat.com> 4.4.6-4
changelog:
  - update from gcc-4_4-branch
    - PRs bootstrap/50888, c++/48035, c++/50618, c++/50793, c++/51344, c/52290,
  	fortran/50050, fortran/50109, fortran/50659, rtl-optimization/51821,
  	target/30282, target/49920, target/50001, target/50691, target/50737,
  	target/50788, target/51393, target/51408, target/52330, target/52408
    - IPA-CP fix (#799491, PR tree-optimization/52430)
    - only look at call clobbered hardregs in regmove (#767604)
  - add f16cintrin.h header, -m*=native fix for some AMD CPUs (#739443,
    PR target/48743)
  - improve fortran type_for_size and type_for_mode langhooks (#751767)
  - fix up i386 memory_address_length (#752196)
  - fix up RTL loop cancellation (#756138, PR middle-end/42229)
  - fix up combiner (#756651, PR rtl-optimization/44858,
    PR rtl-optimization/45695)
  - fix parloops VTA handling (#784334, PR debug/46885)
  - backport OpenMP 3.1 support to libgomp (library only; PR fortran/42041,
    PR fortran/46752)
  - asm goto fixes (PRs rtl-optimization/51767, middle-end/51768, c++/52247)
  - -Wunused-but-set-* fix for OpenMP clauses (PR c/51360)
  - remove some unpackaged binaries to avoid packaging debug info for them
    (#729042)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-9
changelog:
  - make sure conversion between aggregates with different
    sizes is never considered useless (#1113878)
  - fix gfortran ICE on old-style initialization of derived type
    components (#1113793)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-10
changelog:
  - backport two further OpenMP 4.0 libgomp tasking fixes (#1099549)
  - fix scheduler wrong-code with DEBUG_INSNs containing volatile ASM_OPERANDS
    (#1127118, PR rtl-optimization/61801)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-12
changelog:
  - only use PCH in toplevel inclusions (#1177458, PR pch/38987, PR pch/52518)
  - don't vectorize bitfield and boolean types (#1150606,
    PR tree-optimization/43390)
  - fix up a Cray pointer handling bug (#1134560, PR fortran/62174)
  - fix up stdarg optimization when address of a va_list variable escapes
    in a phi node (#1190640, PR target/64979)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-17
changelog:
  - change libgomp default spincount if OMP_WAIT_POLICY is not specified
    (#1229852, PR libgomp/43706)
  - remove -Wl,-z,nodlopen from Ada libraries, which no longer contain
    trampolines (#1241495)
  - guard __gcov_flush body in libgcov.a with a mutex (#1251488,
    PR gcov/49484, PR gcov-profile/52627)
  - add missing s390.exp hunk from -mhotpatch= support (#1233260)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-18
changelog:
  - fix up std::rethrow_exception (PR libstdc++/62258, #1380760)
  - fix fortran ICE in resolve_ordinary_assign (PR fortran/43362, #1356346)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-2
changelog:
  - update from gcc-4_4-branch
    - GCC 4.4.7 release
    - fix up -freorder-blocks-and-partition EH handling
      (#821901, PR middle-end/45566)
  - add -f{,no-}strict-enums option, make -fno-strict-enums the default for C++
    (#826882, PR c++/43680)
  - lazily declare destructor when needed (#750545)
  - fix graphite ICE with VIEW_CONVERT_EXPR (#820281)
  - fix power6 ICE with bswap (#819100, PR target/53199)
  - handle multilib options in gnatmake (#801144)
  - fix up std::__uninitialized_copy (#808590)
  - fix ICE in cp_tree_equal (#831832, PR c++/54858)
  - use F_SETLKW locking for *.gcda not just in libgcov.a, but also
    in the compiler when reading it (PR gcov-profile/54487)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-4
changelog:
  - fix diagnostics reporting with digraphs (#906234)
  - handle %{, %| and %} in inline asm on multiple asm dialect
    targets as {, | and } rather than asm dialect separators (#908025)
  - fix ICE in build_zero_init_1 with va_list data member in a class
    (#921758, PR c++/56403)
  - ignore out of range registers in the unwinder (#959564, PR target/49146)
  - fix ICE in fold_stmt on debug stmts (#967003)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-29.fc13
changelog:
  - Fix prelinked executables with sepdebug and copy relocations (BZ 614659).
  - [delayed-symfile] Fix a backtrace regression on CFIs without DIE (BZ 614604).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-47.el6
changelog:
  - [ifunc] Fix ppc64 function descriptors compatibility.
  - detach-as-stopped kernel workaround is now always active, not just on RHEL-5.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-49.el6
changelog:
  - Support -gdwarf-4 -fdebug-types-section debug info (Tom Tromey, BZ 718141).
  - doc: make gdb's help a bit clearer re: ptype & whatis (BZ 704010).
  - Fix printing of memory statistics (Tom Tromey, BZ 692386).
  - Fix `info sources' output regression (BZ 712117).
  - Support DW_AT_data_member_location even for DWARF <4 (Tom Tromey, BZ 702427).
  - Core files should use linux-thread-db.c also on ppc and s390x (BZ 697900).
  - Fix case insensitive symbols for Fortran by iFort (BZ 669434).
  - Test GDB opcodes/ disassembly of Intel Ivy Bridge instructions (BZ 696890).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-50.el6
changelog:
  - Fix dlopen of libpthread.so, updated glibc required (Gary Benson, BZ 669432).
    - SystemTap probes support (Sergio Durigan Junior, for BZ 669432).
  - Improve GDB performance on inferior dlopen calls (Gary Benson, BZ 698001).
  - Fix runtime evaluation of strings, for gdb -write (Tom Tromey, BZ 730475).
  - Fix dw2-simple-locdesc.S for better arch compatibility  (for BZ 702427).
  - Fix dw2-case-insensitive.exp compatibility with ppc64 (for BZ 669434).
  - Fix backport of core files PID also for s390x (for BZ 697900).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-58.el6
changelog:
  - Fix `Cannot find new threads: generic error' (RH BZ 811648).
  - Delete gdb-core-threads-5of5.patch; rename gdb-core-threads-Nof5.patch to gdb-core-threads-Nof4.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-59.el6
changelog:
  - Fix `CVE-2011-4355 gdb: arbitrary code execution via .debug_gdb_scripts'
    (Jan Kratochvil, RH BZ 756116).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6
changelog:
  - Fix `GDB cannot access struct member whose offset is larger than 256MB'
    (Siddhesh Poyarekar, RH BZ 795424).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 954300).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6_4.2
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1108489).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6_4.3
changelog:
  - One more fix needed for 'gdb crashes while thread apply all bt is run on
    the core file' (Jan Kratochvil, RH BZ 1108489).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6_4.4
changelog:
  - Yet another fix needed for ''gdb crashes while thread apply all bt is run
    on the core file' (Tom Tromey and Paul Pluzhnikov, RH BZ 1108489).
  - Fix NVR on last ChangeLog entry.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 947564).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.1
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1108490).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.2
changelog:
  - Improve fix to ''gdb crashes while thread apply all bt is run on the core
    file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov, RH BZ 1108490).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-73.el6
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-74.el6
changelog:
  - Improve fix for 'gdb crashes while thread apply all bt is run on the core
    file' (RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-75.el6
changelog:
  - Additional fixes needed by 'gdb crashes while thread apply all bt is
    run on the core file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov,
    RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-81.el6
changelog:
  - Fix 'backport GDB 7.4 fix to RHEL 6.6 GDB' [Original Sourceware bug
    description: 'C++ (and objc): Internal error on unqualified name
    re-set', PR 11657] (RH BZ 1186476).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-82.el6
changelog:
  - Fix 'gdb/linux-nat.c:1411: internal-error:
   linux_nat_post_attach_wait: Assertion `pid == new_pid' failed.'
   (Pedro Alves, RH BZ 1162264).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-83.el6
changelog:
  - Fix 'gdb internal error' [Threaded program calls clone, which
    crashes GDB] (Pedro Alves, RH BZ 1099929).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-88.el6
changelog:
  - Add --with buildisa, remove %{?_isa} from BuildRequires by default:
    https://github.com/msimacek/koschei/issues/54 (Jan Kratochvil, RH BZ 1287044)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-91.el6
changelog:
  - Load strictly build-id-checked core files only if no executable is specified
    (Jan Kratochvil, RH BZ 1339862).


author: Karel Klic <kklic@redhat.com> - 1.8.0-34
changelog:
  - -jbj patch replaced with -zeroheaders, which extends the header zeroing
    and also zeroes the buckets (#572601)
  - Fixed a memory leak in gdbm_reorganize(gdb) (rhbz#572598)
  - Handle read() returning less data than it was asked for (rhbz#572900)
  - Remove static builds from the devel package (#556050)
  - Moved autotools reinitialization from %build to %prep section


author: Stepan Kasal <skasal@redhat.com> - 1.8.0-31
changelog:
  - drop *-cflags.patch, move all makefile fixes to *-fhs.patch
  - propagate libdir to Makefile; no need to set it on cmdline


author: Marek Skalicky <mskalick@redhat.com> - 1.8.0-39
changelog:
  - dbm_* calls should call the underlying gdbm_* calls using then
    GDBM_NOLOCK flag
    Resolves: #668702


author: Ray Strode <rstrode@redhat.com> 2.30.4-30
changelog:
  - Add small delay between consecutive messages,
    instead of immediately overwriting any previous messages.
    Resolves: #661618, #708430


author: Ray Strode <rstrode@redhat.com> 2.30.4-31
changelog:
  - Rebuild with -fno-strict-aliasing to quiet rpmdiff
    Related: #670619, #661618, #708430, #688158, #645453, #628462, #622561


author: Ray Strode <rstrode@redhat.com> 2.30.4-33
changelog:
  - Increase X server verbosity by default, and increase it even
    more when debug is enabled.
    Resolves: #738462


author: Ray Strode <rstrode@redhat.com> 2.30.4-50
changelog:
  - Quietly run headless if the X server isn't installed.
    Prevents warning on s390
    Resolves: #1006947


author: Nils Philippsen <nils@redhat.com> - 0.1.2-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because gegl is likely to deal with data coming from untrusted
    sources


author: Jens Petersen <petersen@redhat.com> - 0.17-15
changelog:
  - bring back autopoint requires cvs (#517361)
  - requires info rather than /sbin/install-info
  - drop install_info and remove_install_info macros


author: Jens Petersen <petersen@redhat.com> - 0.17-16
changelog:
  - fix FTBFS by removing openmp.m4 which conflicts with recent autoconf (#539211)
  - cleanup gettext-0.17-rpathFix.patch
    - separate gl_AC_TYPE_LONG_LONG replacement to another patch
    - use trailing ':' for tests LD_LIBRARY_PATH
  - run autogen.sh with --quick and --skip-gnulib


author: Daiki Ueno <dueno@redhat.com> - 0.17-18
changelog:
  - drop BR: java-1.6.0-openjdk-devel, because:
    - it was only needed for javadoc, but the regeneration of javadoc
      files is not necessary
    - the s390/s390x buildroots are lacking the package for el6


author: Tim Waugh <twaugh@redhat.com> - 8.70-13
changelog:
  - Applied patch to prevent null pointer dereference (CVE-2010-4054,
    bug #646086).
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).
  - Applied patch to avoid reading initialization and library files from
    CWD (CVE-2010-2055, bug #599564; CVE-2010-4820, bug #771853).


author: Tim Waugh <twaugh@redhat.com> - 8.70-14
changelog:
  - Fixed character spacing problems using backported patch (bug #695766).
  - Apply some fixes from upstream to avoid gdevcups segfaults (bug #643105).


author: Tim Waugh <twaugh@redhat.com> - 8.70-20
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105520).
  - Improved support for PDF/A from upstream (bug #1060026).
  - Back-ported patch to process embedded files as a portable collection
    only if there is a /Collection attribute (bug #1027534).
  - Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 8.70-21_1
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: Tim Waugh <twaugh@redhat.com> - 8.70-4
changelog:
  - Fixed Y-axis when duplexing with cups device (bug #557458).  This
    patch incorporates upstream commits 10625, 10631, and 10890.


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Josef Ridky <jridky@redhat.com> - 2:2.6.9-9
changelog:
  - fix bug with num_threads error message on gimp startup (#1150021)
  - fix bug with showing GLib warning message on startup from terminal (#1157037)
  - fix bug with incorrect thumb image text offset (#1158426)


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-7
changelog:
  - fixes memory corruption on git shortlog
  - add -f option for "git submodule add" to add files even when
    these are included in .gitignore
  - improve performance of extremly slow http(s)
  - fix cloning using http(s) protocol when redirection is requested
    Resolves: #874659 #1207253 #1237395 #1289984


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-8
changelog:
  - fixes previous patch which add -f option for "git submodule add"
    which incorectly used unsupported option --ignore-missing for
    "git add --dry-run"
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1207253 #1368384


author: Matthias Clasen <mclasen@redhat.com> - 3.6.7-1
changelog:
  - Version bump to 3.6.7.
    * Fixed crashes when handling GtkTextView in GtkBuilder format.
    * Fixed loading and saving of GtkIconSources.
    * GNOME Goal: removed deprecated Gtk+ symbols. (GNOME Bugzilla #572756)
    * Fixed obscure crash when loading a project. (GNOME Bugzilla #585860)
    * Introspect lowest GTK+ project dependancy when loading files with missing 
      versioning information. (GNOME Bugzilla #586046)
    * Detect correct modifiers and buttons to spawn a context menu in a platform
      independant way. (GNOME Bugzilla #587128)
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.7.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.6.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.7.changes
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.6.changes
  - Drop the menu patch, since glade-3 is the version we install
    by default now, and it didn't work right anyway


author: Dan Winship <danw@redhat.com> - 2.28.6.1-2.1
changelog:
  - Disable GNOME proxy support since RHEL6 doesn't have gsettings-desktop-schemas
  - Allow building with libproxy 0.3.0


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1 to pick up some additional bug fixes.
  - Remove 0001-message_to_write_data_free-Don-t-unref-data-message-.patch
    (included in 2.26.1).
  Resolves: #883021


author: Colin Walters <walters@redhat.com> - 2.26.1-3
changelog:
  - Explicitly disable systemtap for this rebase; I am not aware
    of a significant number of current users in upstream, and it
    has not to my knowledge been tested in RHEL6.
    Resolves: #1000287


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1065429


author: Colin Walters <walters@redhat.com> - 2.26.1-7
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1065429


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.8-3
changelog:
  - Revert deprecations picked up through rebases to avoid further bugs
    like rhbz#1136304 (devhelp).


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1035941


author: Colin Walters <walters@redhat.com> - 2.26.1-8
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1036097


author: Colin Walters <walters@redhat.com> - 2.28.8-6
changelog:
  - Backport patch to avoid integer overflow on reuse of GMainContext
    source ids, which qemu hits.
    Resolves: #1212722


author: Colin Walters <walters@verbum.org> - 2.28.8-8
changelog:
  - Revert use of FAM on NFS - introduces perf regressions for deployments
    which are not using NFS for home directories; this is better handled
    in RHEL7.
    Resolves: #1399726
    Reverts: #725178


author: Jeff Law <law@redhat.com> - 2.12-1.107
changelog:
  - Simplify test for magic file to change memcpy behaviour
      and correctly handle encoded return value from inlined
      syscall (#846342, #874642)
    -


author: Patsy Franklin <pfrankli@redhat.com> - 2.12.1.107.3
changelog:
  - Consistantly MANGLE/DEMANGLE function pointers and
      fix use after free in dcigettext.c (#989558).


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.132
changelog:
  - Revert the addition of gettimeofday vDSO function for ppc and ppc64 until
    OPD VDSO function call issues are resolved (#1026533).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.132.3
changelog:
  - Don't use alloca in addgetnetgrentX (#1087789).
  - Adjust pointers to triplets in netgroup query data (#1087789).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.132.4
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.147
changelog:
  - Fix stack overflow due to large AF_INET6 requests (CVE-2013-4458, #1111460).
  - Fix buffer overflow in readdir_r (CVE-2013-4237, #1111460).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.149.7
changelog:
  - Fix invalid file descriptor reuse while sending DNS query
    (#1207995, CVE-2013-7423).
  - Fix buffer overflow in gethostbyname_r with misaligned buffer
    (#1209375, CVE-2015-1781).


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.166.1
changelog:
  - The malloc deadlock avoidance support has been temporarily removed since it
    triggers deadlocks in certain applications (#1244002).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.166.2
changelog:
  - Unlock main arena after allocation in calloc (#1256812).
  - Enable robust malloc change again (#1256812).
  - Fix perturbing in malloc on free and simply perturb_byte (#1256812).
  - Don't fall back to mmap prematurely (#1256812).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.166.3
changelog:
  - Check for NULL arena pointer in _int_pvalloc (#1256890).
  - Don't change no_dyn_threshold on mallopt failure (#1256891).


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.190
changelog:
  - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296029).
  - Update malloc free_list cyclic fix (#1264189).
  - Update tzdata-update changes (#1200555).


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.25.el6_1.1
changelog:
  - Define initgroups callback for nss_files (#705465)
  - Schedule nscd cache pruning more accurately from re-added values
    (#703481)
  - Use mmap for allocation of buffers used for __abort_msg (#676591)


author: Jeff Law <law@redhat.com> - 2.12-1.47.el6_2.4
changelog:
  - Make implementation of ARENAS_TEST and ARENAS_MAX match
    documentation (#769594)
  - Check malloc arena atomically  (#769594)


author: Jeff Law <law@redhat.com> - 2.12-1.47.el6_2.9
changelog:
  - Always use another area after a failed allocation in the
      main arena (#795328)
    - Remove sse3 memcpy (#695812) changes (#799259)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7
changelog:
  - Round cache sizes to handle odd sizes (#607010)
  - Fix initializsation of cpu features (#630801)
  - Fix ifunc thunk for strspn on x86 in static libc (#631011)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7.el6_0.1
changelog:
  - Fix bug in generic strstr/memmem implementation handling certain
    repeated patterns (#643341)
  - Correctly align TCB for AVX (#643343)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7.el6_0.5
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)


author: Jeff Law <law@redhat.com> - 2.12-1.78
changelog:
  - Fix option rotate with single IPV6 server (#804630)
    - Fix loading first object along a path when tracing (#808337)
    - Don't free non-malloced memory.  (#809602)


author: Jeff Law <law@redhat.com> - 2.12-1.80.el6_3.3
changelog:
  - Fix incorrect/corrupt patchfile for 833716.  Did not
      affect generated code, but tests were missing (#833716).


author: Jeff Law <law@redhat.com> - 2.12-1.80.el6_3.5
changelog:
  - Fix integer overflow leading to buffer overflow in strto*
    and related out of bounds array index (#847931)


author: Amar Tumballi <atumball@redhat.com> - 3.4.0.34rhs-1
changelog:
  - bug fixes for 852140 950314 980778 998832 998914 998943 1000922
    1000996 1001893 1001895 1002022 1002613 1003580 1005460 1005478
    1005553 1006172 1007866 1008173 1009851 1011694 1011905


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.35rhs-1
changelog:
  - bug fixes for 969461 1000948 1000936 1011694 1013556 1016971 979641
    950314 852140 980778 1006172 1005553 1005478 1007866 998914 981035


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.36rhs-1
changelog:
  - bug fixes for 1002885 1021808 1007536 1017014 1012216 998786 977544
    1016385 858434 1001895 1012900 980910 1001556


author: Bala FA <barumuga@redhat.com> - v3.6.0.28-1
changelog:
  - fixes bugs bz#1110694 bz#1116150 bz#1121099 bz#1124692 bz#1127234 
    bz#1136711 bz#921528 bz#969298


author: Bala FA <barumuga@redhat.com> - v3.6.0.29-2
changelog:
  - fixes bugs bz#1136711 bz#1138288 bz#1139213 bz#1139273 bz#1139473 
    bz#1140643 bz#1143960
  - build to make higher release with rhs-3.0-client to avoid build
    collision


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: enable-server-packages.patch
  -->  Enable building the glusterfs-server package
  - Added Source: glusterfs.ini
  -->  Config file for automated patch script


author: Milind Changire <mchangir@redhat.com> - 3.7.5-11
changelog:
  - fixes bugs bz#1287532 bz#1288988 bz#1275751 bz#1289071 bz#1284834 
    bz#1287980 bz#1284387 bz#1287997


author: Milind Changire <mchangir@redhat.com> - 3.7.5-12
changelog:
  - fixes bugs bz#1285226 bz#1283940 bz#1291052 bz#1275751 bz#1288003 
    bz#1283035 bz#1285238 bz#1290401 bz#1262680 bz#1289893 bz#1289423 bz#1276227


author: Milind Changire <mchangir@redhat.com> - 3.7.5-13
changelog:
  - fixes bugs bz#1293240 bz#1275751 bz#1276273 bz#1285783 bz#1286218 
    bz#1289228 bz#1282729 bz#1291152 bz#1219794 bz#1293228 bz#1293237 bz#1292762 
    bz#1274334 bz#1291195 bz#1292751 bz#1285797 bz#1291560 bz#1291566 bz#1293286 
    bz#1286028


author: Milind Changire <mchangir@redhat.com> - 3.7.5-14
changelog:
  - fixes bugs bz#1294487 bz#1293903 bz#1294594 bz#1291386 bz#1294073 
    bz#1281946 bz#1282729 bz#1285797 bz#1272409 bz#1294478


author: Milind Changire <mchangir@redhat.com> - 3.7.5-15
changelog:
  - fixes bugs bz#1285226 bz#1285167 bz#1291969 bz#1277944 bz#1288509 
    bz#1293380 bz#1278798 bz#1294816 bz#1285797 bz#1288490 bz#1272409 bz#1219794


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: enable-server-packages.patch
  -->  Enable building the glusterfs-server package
  - Added Source: glusterfs.S56copy.patch
  -->  Copied S56glusterd-geo-rep-create-post.sh to /var/lib/glusterd/hooks/1/gsync-create/post/
  - Added Source: glusterfs.ini
  -->  Config file for automated patch script


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.3.1-10
changelog:
  - Backported assembler routines from recent gmp-6:
    gmp-s390x-optimization.patch, gmp-s390-31bit-optimization.patch
  - Resolves: #1149237


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.1-11
changelog:
  - Explicitly added '-g' option into CFLAGS to correctly build .debug_info for i386
    Resolves: #729039


author: Bastien Nocera <bnocera@redhat.com> 2.28.6-7
changelog:
  - Add killswitch clean up patches
  - Fix status of the applet icon when bringing back from hard
    killswitch
  Resolves: #609291


author: Bastien Nocera <bnocera@redhat.com> 2.28.6-8
changelog:
  - Add more killswitch patches, handle the case where the
    only killswitch disappears with the adapter
  Resolves: #609291


author: Ray Strode <rstrode@redhat.com> 2.28.2-7
changelog:
  - Hide randr events from "Detect Displays" button from g-s-d's
    autoconfiguration logic
    Resolves: #582564


author: David Zeuthen <davidz@redhat.com> - 2.29.90-1.el6
changelog:
  - Update to new release for LVM2/Multipath support
  - Don't include support for connecting to remote udisks instances
  - Related: rhbz#548874
  - Related: rhbz#548870


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - When we ask to logout, actually logout, rather than shutdown
  - Don't hide the restart status icon just because the daemon exited
  - Don't check for updates every day when the user had specified 'Never'
  - Allow the user to select the GPG key information to be able to verify it
  - Fix the error when the user clicks the about menu item
  - Fix a crash where the desktop file that was installed has no root directory
  - Fix a crash when the process-working icon has zero height
  - Resolves: #585086


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-2
changelog:
  - Backport a patch from upstream that adds support for support media repos
    such as those found on additional CDs or DVDs.
  - This patch just calls GetUpdates after a detected media repo is inserted,
    which is enough for PackageKit to add the repo to the default set, and for
    the repo to be used in all the GNOME and KDE tools.
  - This patch will not add explicit support for media repos in client programs,
    so the media is not requested if it is not inserted when the package tools
    are open. This functionality can be backported at a later time if required.
  - Resolves: #591534


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Don't allow shutting down when a transaction is active and cannot
    be cancelled.
  - Resolves: #669798


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-6
changelog:
  - Fix the progress update of the update viewer when multiarch packages
    are installed.
  - Resolves: #744906


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Do not attempt to refresh the updates list when a transaction is in
    progress. This prevents the update UI from going blank.
  - Resolves: #744980


author: Ray Strode <rstrode@redhat.com> 2.30.2-12
changelog:
  - Fix positioning negotiation problem noticed by QE when
    testing fix that went in 2.30.2-11
    Resolves: #671088
  - Improve monitor labeling heuristics
    Related: #585312


author: Ray Strode <rstrode@redhat.com> 2.30.2-7
changelog:
  - Drop panel names from default config so they don't override
    translated fallback names
    Resolves: #633853


author: Ray Strode <rstrode@redhat.com> 2.30.2-10
changelog:
  - Fix monitor naming problem noticed by QE when testing fix
    that went in 2.30.2-8
    Related: #585312


author: Ray Strode <rstrode@redhat.com> 2.30.2-11
changelog:
  - Fix size negotiation problem noticed by QE and GSS when
    testing fix that went in 2.30.2-9
    Resolves: #671088
    Related: #607665


author: Ray Strode <rstrode@redhat.com> - 2.30.2-16
changelog:
  - Add patch from Noriki Mizumoto <noriko@redhat.com> to
    increase translation coverage
    Resolves: #819798


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - Fix the double suspend on lid close issue when not using KMS hardware.
  - Resolves: #543948


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Do not ask the user to look at the help file on suspend failure,
    it is already out of date.
  - Resolves: #640296


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-5
changelog:
  - Reinstate the "Do nothing" option on the lid close combo because
    per-screen DPMS does not work in RHEL6.
  - Resolves: #623674


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Don't dim the screen by default on battery power -- it was never a
    good default, and we're doing this a different way in GNOME 3.
  - Resolves: #912270


author: Ray Strode <rstrode@redhat.com> 2.28.3-16
changelog:
  - More monitor dock fixes
    Resolves: #719023 746237
  - Potential workaround for libxklavier brokeness
    Related: #677580


author: Ray Strode <rstrode@redhat.com> 2.28.3-18
changelog:
  - Revert libxklavier workarounds introduced in -16 and -17
    They're causing additional problems.
    Resolves: #677580


author: Ray Strode <rstrode@redhat.com> 2.28.3-22
changelog:
  - Don't show unlock dialog immediately after user locks
    screen in some multimonitor scanarios
    Resolves: #744763


author: Ray Strode <rstrode@redhat.com> 2.28.3-24.1
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #994868


author: Ray Strode <rstrode@redhat.com> 2.28.3-26
changelog:
  - Fix up fix-fade-on-nvidia patch from -19 to properly
    handle X servers that don't support setting gamma ramp.
    Resolves: #947671


author: Jon McCann <jmccann@redhat.com> 2.28.3-6
changelog:
  - Properly handle monitor configuration changes
    Resolves: #594696
  - Remove the leave a message feature
    Resolves: #559652


author: Ray Strode <rstrode@redhat.com> 2.28.0-21
changelog:
  - Add a close button in the session selector save dialog, to
    provide a way to close the dialog without saving.
    Resolves: #786573


author: Ray Strode <rstrode@redhat.com> 2.28.2-11
changelog:
  - Add a sanity check to prevent the "p" key and related
    from ever getting grabbed on accident.
    Related: #595763


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.2-29
changelog:
  - wacom: Update input transformation matrix on monitor changes (#861890)
    wacom: Re-fix LED as per latest discussions on linuxwacom-devel (#805064)
    Resolves: #805064 #861890


author: Ray Strode <rstrode@redhat.com> - 2.28.2-35.2
changelog:
  - Another smartcard update to support drivers that don't
    announce already inserted smartcards at startup
    Related: #1299992


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-10
changelog:
  - Add a patch from upstream to ignore non CPU data from /proc/cpuinfo,
    which would lead to a spurious processor displayed in the application,
    under certain architectures
  Resolves: #682011


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-11
changelog:
  - Add a patch from upstream that looks for the "clock" line in the
    /proc/cpuinfo output. This fixes missing CPU speed for architectures
    that put such information in the "clock" line, such as Power6
  Resolves: #692956


author: Matthias Clasen <mclasen@redhat.com> 2.28.0-8
changelog:
  - Add explicit requires to avoid interoperability problems
    between combinations of old and new subpackages
  - Remove a space-saving hack that causes multilib conflicts
  Resolves: #596165


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.14-8
changelog:
  - fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
  - add missing initialization of libgcrypt in gpgv
  - properly encode s2k iteration count in gpg-agent (#638635)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 2.12.23-21
changelog:
  - Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
    (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
  - Modified gnutls-serv to accept --sni-hostname (#1333521)
  - Modified gnutls-serv to always reply with an alert message (#1327656)
  - Removed support for DSA2 as it causes interoperability issues (#1321112)
  - Allow sending and receiving certificates which were not in the
    signature algorithms extension (#1328205)
  - Removed support for EXPORT ciphersuites (#1337460)
  - Raised the minimum acceptable DH size to 1024 (#1335924)
  - Restricted the number of alert that can be received during handshake (#1388730)
  - Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
  - The exposed (but internal) crypto back-end registration API is deprecated and no
    longer functional. The ABI is kept compatible (#1415682)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-9
changelog:
  - documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
    and gnutls-cli-debug(1) manual pages (#648297, #807746)
  - add fallback to import the private keys as PKCS#8 (#745242)
  - silence the strict aliasing warnings


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage
  - do not create static libraries (#556052)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-4.2
changelog:
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.20.6-11
changelog:
  - add manpages
  - add Requires: gpm-libs = 1.20.6-11.el6
  - Resolves: #605053 - RPMdiff run failed for package gpm-1.20.6-10.el6
  [snip from email]
   npajkovs@redhat.com: I'd like to ask you what kind of license did you use for inputattach?
   steve@sk2.org: I didn't mention it in debian/copyright, but
   all the packaging (including the manpages) are licensed under the same
   terms as the packaged source, ie. GPL-2 or later.


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.20.6-11
changelog:
  - add manpages
  - add Requires: gpm-libs = 1.20.6-12.el6
  - Resolves: #605053 - RPMdiff run failed for package gpm-1.20.6-10.el6
  [snip from email]
   npajkovs@redhat.com: I'd like to ask you what kind of license did you use for inputattach?
   steve@sk2.org: I didn't mention it in debian/copyright, but
   all the packaging (including the manpages) are licensed under the same
   terms as the packaged source, ie. GPL-2 or later.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-8
changelog:
  - All docs are now installed into /usr/share/doc/graphviz-%{version}
  - Demos packaged as docs not to automatically bring in unnecessary deps
    Resolves: rhbz#821920
  - Removed -ffast-math, added -ffloat-store (on i386) to fix arithmetic on i386
    Resolves: rhbz#772637
  - Fixed build failure due to change in php_zend_api macro type


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-5
changelog:
  - Fixed broken links in index.html (doc-index-fix patch)
    Resolves: rhbz#624658
  - Enabled and fixed testsuite (testsuite-sigsegv-fix, rtest-errout-fix patches)
    Resolves: rhbz#624690
  - Fixed rpmlint warnings on spec file
  - Rebuilt with updated swig
    Resolves: rhbz#679715
  - Fixed gtk plugin program-name (gtk-progname patch)
    Resolves: rhbz#640247
  - Added urw-fonts to BuildRequires
  - Compiled with -fno-strict-aliasing


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-1
changelog:
  - New version
    Resolves: rhbz#1064668
    Resolves: rhbz#982215
    Resolves: rhbz#1126757
    Resolves: rhbz#1167766
    Resolves: rhbz#1171806
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#799863
  - Documented --fixed-regexp option
    Resolves: rhbz#1103270


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1193030
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed bogus date in the changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1367309


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1256756


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-2
changelog:
  - Added dfa-optimize-period patch (speedup for . patterns in UTF-8)
  - Added glibc-matcher-fallback patch (speedup for [a-z] patterns in UTF-8)
  - Added mmap-option-fix patch
  - Added dfa-convert-to-wide-char patch (speedup for -m and remove quadratic
    complexity when going to glibc)
  - Added dfa-speedup-digit-xdigit patch (speedup for [[:digit:]] [:xdigit:]])


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Peter Jones <pjones@redhat.com> - 0.97-70.1
changelog:
  - Fix error on invocation of "grub-install /dev/cciss/c0d0" (patch from jnevill)
    Resolves: rhbz#742976


author: Peter Jones <pjones@redhat.com> - 0.97-74
changelog:
  - Fix error on invocation of "grub-install /dev/cciss/c0d0" (patch from jnevill)
    Resolves: rhbz#736833


author: Peter Jones <pjones@redhat.com> - 0.97-76
changelog:
  - [UEFI] Iterate PXE objects and try to find an active one instead
    of letting the firmware pick for us.
    Resolves: rhbz#670266
  - [UEFI] Handle tftp implementations that give invalid error codes
    from TFTP_GET_FILE_SIZE.
    Related: rhbz#670266


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-79
changelog:
  - Scan for virtio disks
    Resolves: rhbz#814014
  - Let user specify efi boot disk as root
    Resolves: rhbz#737732
  - Pass hig order bits to EFI system map and memory map
    Resolves: rhbz#825054


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-82
changelog:
  - Disable the watchdog timer on EFI platforms
    Resolves: rhbz#911715
  - Add MACAPPEND command
    Resolves: rhbz#848628
  - Retry getting memory map and exit boot services on fail
    Resolves: rhbz#918824
  - Fixed regexps for matching devices in device.map and resolve symlinks
    when getting stats for block device
    Resolves: rhbz#928938
  - Remove grub.info when make clean is called to be sure that it is
    recreated with all changes.
    Resolves: rhbz#854652
  - Replace glibc-static with /usr/lib/libc.a in BuildRequires
    Resolves: rhbz#922705
  - If the title is too long, print remaining seconds to the new line
    Resolves: rhbz#851706
  - Recognize virtio-blk devices when running on OVMF
    Resolves: rhbz#916016


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-83
changelog:
  - Allocate size of struct instead of size of pointer
    Resolves: rhbz#1008305
  - Add support for NVMe to grub-install
    Resolves: rhbz#1017296


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-84
changelog:
  - grub-install: add regex for partition and multipath when
    use_friendly_names is off
    Resolves: rhbz#1121321


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-91
changelog:
  - Suppress failure message on EFI systems when loading splashscreen
    Resolves: rhbz#1129436
  - Return proper disk operation status
    Resolves: rhbz#1130209
  - Stick with default GOP mode unless resolution is absurdly small
    Resolves: rhbz#1130313


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-94
changelog:
  - Properly expand IPv6 address
    Resolves: bz#1177321
  - Support various types of DHCP IPv6 packet for MAC address extraction
    Resolves: bz#1206542


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-94.el6_7.1
changelog:
  - Fix the ineffectiveness when loading fragmented initramfs from Ext4 filesystem
    Resolves: #1311474


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-97
changelog:
  - Patch from previous commit c445aac0ee30f has been removed, because it did not
    fix the issues with some SGI hardware. Bumping up the release number, so the
    building of grub package is not affected in the future. For more info see:

    Related: #1325860 (https://bugzilla.redhat.com/show_bug.cgi?id=1325860)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.97-98
changelog:
  - Workaround for SGI UV100/1000 hardware (TFTP transfers in UEFI mode) added
    Resolves: #1124862
  - Allow more than 1 letter in device name when using the grub-install script
    Resolves: #1349389


author: Peter Jones <pjones@redhat.com> - 7.0.15-3
changelog:
  - Ensure that all stanzas are fixed with --update-kernel=ALL (patch from bcl)
    Resolves: rhbz#696960


author: Wim Taymans <wtaymans@redhat.com> 0.10.23-2
changelog:
  - add patch to post provide-clock message to fix a major regression
    in 0.10.23
  - bump version to rebuild for fastrack
  Resolves: rhbz#622776


author: Paul Howarth <paul@city-fan.org> 1:1.2.10-68
changelog:
  - remove unused shared library dependencies
  - use install -p to maintain timestamps where reasonable
  - recode docs as UTF-8
  - cosmetic spec changes


author: Paul Howarth <paul@city-fan.org> 1:1.2.10-70
changelog:
  - don't own dir %{_datadir}/themes/ (owned by filesystem since F-8, #534097)
  - make %files lists more specific


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.10-2
changelog:
  - Drop VNC connection if the server sends a update spaning outside bounds of desktop (rhbz #590068)
  - Fix gcrypt threading initialization (rhbz #591827)


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-8
changelog:
  - Apply the show-size-column setting when switching from search to 
    browse mode.
  Resolves: #697437


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-10
changelog:
  - Backport a patch fixing GtkBuilder behavior with construct properties
    initialization.
  Resolves: #801620


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-12
changelog:
  - Additional filechooser patch to make sure the size column is shown
    when switching from Recent Files to Search
  Resolves: #889172


author: Matthias Clasen <mclasen@redhat.com> - 2.18.9-5
changelog:
  - Update Gujarati translation
  - Fix a problem with the location entry in file choosers
  Resolves: #636476, #625440. #647922, #647923


author: Matthew Barnes <mbarnes@redhat.com> - 2.20.1-2
changelog:
  - Rebase to 2.20.0 based on the Fedora 13 package.
  - Removed patches (merged into 2.20.0 tarball):
    0001-Avoid-spurious-notifications-from-GtkEntry.patch
    0001-Prevent-the-destruction-of-the-menu-label-on-page-re.patch
    0002-Yet-another-fix-for-shape-handling.patch
    allow-set-hint.patch
    filesystemref.patch
    gtk2-preview.patch
    gtk2-rotate-layout.patch
    o-minus.patch
    strftime-format.patch
  - Removed translation patches that no longer apply:
    gtk2-translations.patch
    gtk2-translations-gu.patch
  - Fixed conflicts in patches:
    gtk2-filechooser-empty-location.patch
    gtk2-filechooser-size-column-hiding-additional.patch
    gtk2-landscape-pdf-print.patch
    icon-padding.patch
    tooltip-positioning.patch
  Resolves: #883022


author: Milan Crha <mcrha@redhat.com> - 2.20.1-3
changelog:
  - Add patch for RH bug #970594 (a11y combo names not shown without string column in model)
  Resolves: #970594


author: Milan Crha <mcrha@redhat.com> - 2.20.1-4
changelog:
  - Add patch for RH bug #979049 (GtkTreeView: make tree expanding/collapsing more robust)
  Resolves: #979049


author: Ray Strode <rstrode@redhat.com> - 2.24.23-5
changelog:
  - Don't crash if enumeration finishes just as it gets cancelled
    in file selector. Fixes crash in libreoffice when saving to
    SFTP mounts.
    Resolves: #1129605


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-6
changelog:
  - Set "entry-text-column" property in constructor of GtkComboBoxText.
  - Fixes crash in evolution when creating new appointment.
  - Resolves: #1126916


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-1
changelog:
  - Rebase to 2.24.23
  - Make immodule cache handling the same as in gtk3. The cache
    file is now in $libdir, no longer in /etc
  - Disable tracker explicitly
  - Initialize variable "key" in gtk_print_backend_cups_set_password()
  - Modify fresh-tooltips.patch so the "new-tooltip-style" property
    is still accepted
  - Revert deprecations added between 2.20 and 2.24 so that building
    of dependent packages don't fail
  - Update relevant patches so that they apply correctly
  - Resolves: #1100886


author: Milan Crha <mcrha@redhat.com> - 3.32.2-1.el6
changelog:
  - Rebase to 3.32.2
  - Remove patch for RH bug #588457 (part of rebase)
  - Remove patch for RH bug #590877 (part of rebase)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-2.el6
changelog:
  - Add patch for some issues found by Coverity scan
  - Add patch for RH bug #577797 (Cursor misplaced after paste)
  - Add patch for RH bug #615969 (Whitespaces drop on paste)
  - Add patch for RH bug #627199 (Underline/strikeout misplaced in printout)
  - Add patch for RH bug #626690 (Paragraph style not drawn after font style change)


author: Tim Waugh <twaugh@redhat.com> 5.2.4-10
changelog:
  - Better defattr use in file manifests.
  - Fixed mixed spaces and tabs.
  - Fixed main package summary.
  - Added comments for all sources and patches.
  - The cups sub-package requires the exactly-matching main gutenprint
    package.


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.2.5-3
changelog:
  - gutenprint: libgutenprintui2 defines "yyin" symbol (bug #882197)
  - gutenprint base package must also include a copy of license text (bug #613706)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-10
changelog:
  - Fix emblem handling in trash (#616145)
  - Require new gnome-disk-utility (#636540)
  - Hide mounts having a path element starting with dot (#624795)
  - Fix SELinux while accessing a leaked /dev/ptmx file descriptor (#616838)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-13
changelog:
  - Fix interaction with LUKS volumes with fstab records (#599055)
  - Fix defects revealed by Coverity scan (#722465)
  - Correct return values on error for programs (#682799)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-15
changelog:
  - Fix several memory leaks (#809708)
  - Fix formatted BD-RE media detection (#669526)
  - Fix gvfs-open exit code on error (#746978)
  - Fix gvfs-info exit code on error (#746977)
  - Fix gvfs-cat exit code on error (#749369)
  - Fix gvfs-ls exit code on error (#749371)
  - Fix gvfs-mount exit code on error (#749372)


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-17
changelog:
  - Check GConf2 key before use to avoid error dialog (#1049232)
  - Fix renaming files on webdav (#1011835)
  - Fix libarchive dependency


author: Ondrej Holy <oholy@redhat.com> - 1.4.3-18
changelog:
  - Fix GConf module building with updated GLib2 (#1118704)
  - Fix SFTP mounting with updated OpenSSH (#1118325)


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output 
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-9
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters.
  - Resolves: #576048


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-10
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters. This fixes the patch from -9.
  - Resolves: #576048


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-13
changelog:
  - Initialize DBus errors correctly to resolve crashes when the probers are run
    directly.
  - Resolves: #755209


author: David Walluck <dwalluck@redhat.com> 0:1.1-7.1
changelog:
  - Fedora-specific: enable GCJ support
  - Fedora-specific: build with java 1.6.0
  - Fedora-specific: disable integration and tests


author: Ryan O'Hara <rohara@redhat.com> - 1.4.24-1
changelog:
  - Rebase to upstream version 1.4.24.
    Resolves: rhbz#947987
  - Rewrite rules flaw can lead to arbitrary code execution (CVE-2013-1912).
    Resolves: rhbz#947701
  - Fix possible crash when using negative header occurrences (CVE-2013-2175).
    Resolves: rhbz#974263
  - Enable TPROXY support.
    Resolves: rhbz#921064


author: Kevin Fenzi <kevin@tummy.com> - 2.1.4-7
changelog:
  - Move ldirector dep to subpackage (#493625)
  - Add zlib-devel to BuildRequires (#497079)
  - Add pygtk2-libglade (#497079)


author: Kevin Fenzi <kevin@tummy.com> - 2.1.4-8
changelog:
  - Add perl(Net::IMAP::Simple::SSL) to ldirector subpackage
  - Fix MAILCMD (#502443)
  - Add patch to fix duplicate install of OCF drbd


author: Nalin Dahyabhai <nalin@redhat.com> 3.1.0-7
changelog:
  - drop unnecessary %post/%postun
  - tweak default payload file attributes (guidelines)
  - tweak summary (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.1-1
changelog:
  - Backport hivex package from Fedora Rawhide.
  - Exclude s390, s390x because of lack of OCaml packages.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Rebase to upstream version 1.2.4 (RHBZ#642631).
    * Python bindings (python-hivex subpackage).
    * Adds hivex_set_value API call (Conrad Meyer).
    * Miscellaneous small bug fixes.
  - Fix Source0.
  - Fix builds with recent perl (Dan Horák).


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-3
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4
changelog:
  - Rebase to upstream version 1.3.3
    resolves: rhbz#734208
  - Add upstream patch: hivexml: Remove unused variable.
  - Add upstream patch: hivex: Added gnulib includes from builddir [...]


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4.2
changelog:
  - Remove loaded text from description
    resolves: rhbz#822741
  - Add patch to fix parsing of hives that contain large ri-records
    resolves: rhbz#841924


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4.3
changelog:
  - Add missing checks for small/truncated files
    resolves: rhbz#1158993
  - Fix typo in man page Win::Hivex.3.pm
    resolves: rhbz#1164693


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.11-1
changelog:
  - error out when we previously skipped a check entry because the value to be
    checked is the wrong size
  - fix estimation of the expected length for truncated values


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-1
changelog:
  - fix regression of #512275 -- we looked for prelink, but didn't record
    its location properly (#548438)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-2
changelog:
  - backport fix to treat unexpected command-line arguments as an error to
    avoid setting incorrect expectations, and warn when a check file doesn't
    appear to contain anything for us to check (#1016706)


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-1
changelog:
  - Re-based to 3.10.9 with fixes from Fedora (bug #652255).
  - Change shebang /usr/bin/env python -> /usr/bin/python (bug #608003).
  - Added COPYING to common sub-package (bug #613707).
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #616569).
  - Fixed "CUPS Web Interface" button (bug #633899).


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4
changelog:
  - Applied patch to fix CVE-2013-0200, temporary file vulnerability
    (bug #902163).
  - Fixed hpijs-marker-supply patch.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4:.1
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Tim Waugh <twugh@redhat.com> 3.14.6-3
changelog:
  - Fixes from Fedora:
    - Fixed incorrect name in function call in makeURI when a parallel
      port device is used (bug #1159161).
    - Fixed uses of strncpy throughout.


author: Joe Orton <jorton@redhat.com> - 2.2.15-15
changelog:
  - mod_proxy_ftp: fix handling of EPSV w/IPv6 localhost (#737960)
  - core: add security fix for CVE-2011-3368 (#743659)
  - mod_proxy_ajp: add security fix for CVE-2011-3348 (#738961)
  - mod_cache: forward-port CacheMaxExpire "hard" option (#740242)


author: Joe Orton <jorton@redhat.com> - 2.2.15-15.1
changelog:
  - add security fixes for CVE-2011-4317, CVE-2012-0053, CVE-2012-0031,
    CVE-2011-3607 (#787598)
  - obviates fix for CVE-2011-3638, patch removed


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV> 2.2.15-15.sl6.1
changelog:
  This package must not feature TUVs branding
    Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Added patch httpd-sl_index.html.sl6.patch
    Switches to an SL branded default index
  - Added patch httpd-spec_sl_index.html.sl6.patch
  - Prevented application of patch httpd-sl_index.html.sl6.patch
    This is the patch we need, just can	 be applied in the normal place
  - Prevented application of patch httpd-spec_sl_index.html.sl6.patch


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV> 2.2.15-15.sl6
changelog:
  This package must not feature TUVs branding
    Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Added patch httpd-spec_sl_index.html.sl6.patch
  - Added patch httpd_sl_index.html.sl6.patch
    Switches to an SL branded default index
  - Prevented application of patch httpd_sl_index.html.sl6.patch
  - Prevented application of patch httpd-spec_sl_index.html.sl6.patch


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-25
changelog:
  - htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
  - rotatelogs: omit the second arg when invoking a post-rotate program (#876923)


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV> 2.2.15-26.sl6
changelog:
  This package must not feature TUVs branding
    Spec change: The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Added patch httpd-spec_sl_index.html.sl6.patch
  - Added patch httpd-sl_index.html.sl6.patch
    Switches to an SL branded default index
  - Prevented application of patch httpd-sl_index.html.sl6.patch
    This is the patch we need, just can	 be applied in the normal place
  - Prevented application of patch httpd-spec_sl_index.html.sl6.patch


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: httpd-spec_sl_index.html.sl.patch
  -->  The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Ran Regex: vstring Red Hat => vstring Scientific Linux
  -->  This package must not feature TUVs branding
  - Ran Regex: distro Red Hat => distro Scientific Linux
  -->  This package must not feature TUVs branding
  - Added Source: httpd-sl_index.html.sl.patch
  -->  This patch removes TUV branding from the default index.html
  - Added Source: httpd.ini
  -->  Config file for automated patch script
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-30
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1078174)
  - mod_log_config: add security fix for CVE-2014-0098 (#1078174)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-31
changelog:
  - mod_cgid: add security fix for CVE-2014-0231
  - mod_deflate: add security fix for CVE-2014-0118
  - mod_status: add security fix for CVE-2014-0226


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-47.1
changelog:
  - mod_proxy: fix regression caused inherited workers to use a different
    scoreboard slot then the original one (#1252574)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-47.4
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1304712)


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - add "Satisfy All" for .htaccess in httpd.conf (#594981)
  - adjust user/group creation in %pre (#594395)
  - mod_ssl: tweak OID() evaluation of unknown exts (#594980)


author: Joe Orton <jorton@redhat.com> - 2.2.15-4
changelog:
  - use init script to rotate logs (#606955)
  - disable keepalive for 100-continue and error response (#606964)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-48
changelog:
  - core: backport NoDecode option of AllowEncodedSlashes (#1002658)
  - mod_authz_host: disallow the '#' character in allow, deny (#1179911)
  - mod_ssl: fix memory leak on httpd reloads (#1236515)
  - mod_proxy: fix regression caused inherited workers to use a different
    scoreboard slot then the original one (#1252574)
  - mod_rewrite: allow running external mapping program as non-root (#1035230)
  - mod_reqtimeout: fix a timed out connection going into the keep-alive state
    after a timeout when discarding a request body (#1213967)
  - core: fix possible crash in SIGINT handling (#1233109)
  - mod_ssl: extend SSLSessionCacheTimeout to sessions resumed by TLS (#1190509)
  - initscript: do not print error when stopping stopped httpd (#1189941)
  - mod_ssl: fail for colons in credentials with FakeBasicAuth (#1027442)
  - mod_proxy: add "proxy-flushall" env variable which reduces the impact
    of caching 16K of the request body. (#952395)
  - mod_ssl: Do not send SSL warning when SNI hostname is not found as per
    RFC 6066 (#1289096)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-53
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1301758)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-54.1
changelog:
  - Resolves: #1374729 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-54.2
changelog:
  - Resolves: #1391517 - when ProxyErrorOverride is On, modcluster
    return 503 status code on subsequent requests


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-58
changelog:
  - Resolves: #1349546 - comments no longer allowed at the end of Allow
    from statements and maybe other statements from mod_authz*


author: Joe Orton <jorton@redhat.com> - 2.2.15-9.3
changelog:
  - add security fixes for CVE-2011-3347, CVE-2011-3368 (#743901)
  - fix regressions in CVE-2011-3192 patch (#736592)


author: Joe Orton <jorton@redhat.com> - 2.2.15-7
changelog:
  - mod_ldap: fix caching with per-vhost directive use (#676635)
  - mod_ssl: fix startup with duplicate SSL vhost configurations (#676831)
  - prefork: ensure early child exit during graceful restart (#679476)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.1-0
changelog:
  - 1.1 rel# Patch to the 1.1 fix 2967 http://www.open-mpi.org/software/hwloc/nightly/v1.1/hwloc-1.1rc6r2967.tar.bz2
  - Fix hwloc_bitmap_to_ulong right after allocating the bitmap.
  - Fix the minimum width of NUMA nodes, caches and the legend in the graphical lstopo output.
  - Cleanup error management in hwloc-gather-topology.sh.
  - Add a manpage and usage for hwloc-gather-topology.sh on Linux.
  - Rename hwloc-gather-topology.sh to hwloc-gather-topology to be consistent with the upcoming version 1.2ease


author: Jay Fenlason <fenlason@redhat.com> - 1.5-2
changelog:
  - Build the 1.1 version as well, so we have the old library for backward
    compatability.
    Resolves: rhbz1070347


author: Michal Schmidt <mschmidt@redhat.com> - 1.5-3
changelog:
  - Make libhwloc.so point to the current library version, not the compat one.
    Resolves: rhbz1135040


author: Tomas Hozza <thozza@redhat.com> - 0-0.10
changelog:
  - Fix segfault when cgred is running (#920032)
  - Fix errors found by static analysis of code (#965944)
  - Start hypervkvpd only if Hyper-V drivers are loaded (#962565)


author: Tomas Hozza <thozza@redhat.com> - 0-0.11
changelog:
  - Fix initscript test if Hyper-V drivers are loaded (#978300)
  - Build the daemon with full RELRO and PIE (#977861)


author: Tomas Hozza <thozza@redhat.com> - 0-0.8
changelog:
  - Bumping release to 0.8 to avoid update path from RHEL5
  - changing the way how Netlink source address is validated (#872593)
  - fix for long names from readdir (#872566)
  - applied reasonable Debian/Ubuntu patches (#872584)


author: Tomas Hozza <thozza@redhat.com> - 0-0.9
changelog:
  - Fix a typo in hv_set_ifconfig.sh script
  - Fix creation process of ifcfg-* files when doing IP injection
  - Use CLOEXEC when opening pool files to prevent FD leaking
  - Changes in SPEC file:
   - remove/create %{_sharedstatedir}/hyperv if removing/installing package
   - install scripts without ".sh" extension


author: Doug Ledford <dledford@redhat.com> - 1.0.5-2
changelog:
  - Don't install the address file or config file, the config file isn't
    strictly needed and defaults will be used if it isn't installed, but
    with the address file we specifically need to build one based upon
    the machine where the program is installed, a default file is not only
    not helpful, but it messes up the daemon.
  - Related: bz700285


author: Doug Ledford <dledford@redhat.com> - 1.0.5-3
changelog:
  - Until the next upstream release, the pid file is in a wonky location.
    Make the init script know about that location so we can stop properly.
  - Resolves: bz808599


author: Doug Ledford <dledford@redhat.com> - 0.5-4.el6
changelog:
  - Rebuild against latest opensm, which was required for latest ibutils,
    which was required to resolve licensing issues during pkgwrangler review
  - Related: bz555835


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.1-3
changelog:
  - Fixed Bug 661597 - the latest page_size for ibus.LookupTable.
  - Added -fno-strict-aliasing option in CFLAGS for rpmdiff


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100608-1
changelog:
  - ibus-chewing can now use mouse to click on mouse. Thus
    Fix Issue 951: Chewing does not support selection of candidates via mouseclick
    Thanks zork@chromium.org for the patch.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.5.20100706-1
changelog:
  - Fixed google issue 965:
    Candidate missing if both "Plain Zhuyin" and "Space As selection" are enabled.
  - Revised Basic.macro
  - Resolved: #608991


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-2
changelog:
  - Revert the version not to be rebased.
  - Fix bug 608988 - Cannot de-select Hanja lock in applet menu
    Resolves: #608988


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-4
changelog:
  - Resolves: #651915 Wrong window position with ibus-x11
    Added ibus-651915-x11-position.patch
  - Resolves: #633330 Fixed kn.po
  - Resolves: #635541 Fixed gu.po
    Added ibus-1.3.4-po-2010-11-17.tar.bz2


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-6
changelog:
  - Fixed Bug 667031 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20091031-1
changelog:
  - Update version to 1.2.0.20091031.
  - Drop ibus-hangul-1.1.0.20090328-right-ctrl-hanja.patch and
    ibus-hangul-1.1.0.20090328-hanja-arrow-keys.patch temporarily, because
    patches conflict with 1.2.0.20091031, and the key configure will available
    in next release.


author: Daiki Ueno <dueno@redhat.com> - 1.3.0.20100329-5
changelog:
  - Add workaround for the race of XIM client and IBUS_ENGINE_PREEDIT_COMMIT
  - Fix bug 965554 - ibus-hangul may not handle key event after focus change


author: Peng Huang <shawn.p.huang@gmail.com> - 1.3.0-1
changelog:
  - Update to 1.3.0.
  - Update iok patch.
  - Fix bug 577148 - IOK screen appears with all keyboard layouts on ibus language panel


author: Daiki Ueno <dueno@redhat.com> - 1.3.0-2
changelog:
  - Add ibus-m17n-641243-indic-ranks.patch.
  - Fix bug 641243 - Ibus does not load all the keymaps for a language
    that is used for logging in
  - Add ibus-m17n-652201-altgr.patch.
  - Fix bug 652201 - [Indic] Rupee Symbol (U+20B9) Need to include in
    Indic Keyboard


author: Doug Ledford <dledford@redhat.com> - 1.5.4-1.el6
changelog:
  - Update to latest upstream version, which cleans up some licensing issues
    found in the previous versions during review
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-9
changelog:
  - We built a new opensm against a new libibumad and libibmad
    to resolve a bug.  So we need to rebuild this to be against
    the new libs.  Updated to latest upstream since we had to
    rebuild anyway and it's often needed to make it compatible
    with the minor changes in libibumad and libibmad and
    opensm-libs
  - Related: bz1082730


author: Deepak Bhole <dbhole@redhat.com> 1.0.2-1
changelog:
  - Resolves rhbz#693601 
  - Update to IcedTea-Web 1.0.2
  - Dropped patch0 (instance validity check). Now part of 1.0.2
  - Also resolves #682674 by adding a javaws Provides


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-0
changelog:
  - Updated to latest ustream release of 1.2 branch - 1.2.3
   - Security Updates
    - CVE-2013-1927, RH884705 - fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
   - Plugin
    - PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch 0- icedtea-web-PR1161.patch
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-1
changelog:
  - fixed postun - removal of alternatives for plugin restricted to 
    (correct) removal process only
  - fixed date in changelog previous entry
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-2
changelog:
  - Added (temporally!) posttrans forcing creation of symlinks
    - should be removed next release
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-3
changelog:
  - added patch1 b25-appContextFix.patch to make it run with future openjdk
  - rmeoved posttrans
  - Resolves: rhbz#975426


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-4
changelog:
  - improved patch1 b25-appContextFix.patch to make it run with future openjdk better
  - Resolves: rhbz#975426


author: Jiri Vanek <jvanek@redhat.com> 1.4.1-0
changelog:
  - updated to 1.4.1
  - add icedtea-web man page
  - removed upstreamed  patch1 b25-appContextFix.patch
  - Resolves: rhbz#916161


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - Resolves: rhbz#1275523


author: Troy Dawson <dawson@fnal.gov> 1.2.37-1
changelog:
  - Updated to 1.2.37
  - Added ooffice icons
  - Changed menu and toolbar entries to be ooffice instead of soffice


author: Troy Dawson <dawson@fnal.gov> 1.2.37-1.1
changelog:
  - Scaled background (added imlib build requirements which replaces libXpm-devel)
    Spec file patch provided by Oleg Sadov


author: Caolan McNamara <caolanm@redhat.com> - 4.2.1-9
changelog:
  - Resolves: rhbz#596171 drop icu.icu6284.strictalias.patch and use
    -fno-strict-aliasig as upstream has added a pile more and doesn't look
    interested in proposed patchs


author: Akira TAGOH <tagoh@redhat.com> - 1.3.1-1
changelog:
  - New upstream release.
    - Fallback to the themed icon if no icons are installed
      on the specified path. (#604482)


author: Paul Howarth <paul@city-fan.org> 1:1.9.15-13
changelog:
  - drop %{_datadir}/aclocal dependency from devel package from Fedora 14,
    where this directory is part of the filesystem package (#533962)
  - drop manual pkgconfig dependency from devel package from Fedora 11, where
    this dependency is auto-detected
  - drop some of the %description text no longer appropriate for this legacy
    package
  - don't self-obsolete Imlib and imlib-cfgeditor


author: Paul Howarth <paul@city-fan.org> 1:1.9.15-14
changelog:
  - EL-6 builds don't need manual pkgconfig dependency
  - Fix up patches to avoid need for autotools during build
  - Comment patches


author: Jens Petersen <petersen@redhat.com> - 0.108.0-3.5
changelog:
  - only enable XIM for X locale compose for necessary locales (#616061)
    (for pt_BR, fi_FI, am_ET, el_GR, and ru_RU):
  - drop imsettings-none.conf-gtk-xim-default.patch
  - add imsettings-xinput-xcompose.patch


author: Doug Ledford <dledford@redhat.com> - 1.5.12-1
changelog:
  - Update to latest upstream release
  - Initial Fedora import
  - Add devel and devel static packages (review item)
  - Make etc file config(noreplace) (review item)
  - Remove no longer support scripts (review item)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 1.5.12-3
changelog:
  - Reorganize this spec file to include /usr/sbin/ibswportwatch.pl
    and remove man pages for programs that aren't included.
    Resolves: bz814518


author: Doug Ledford <dledford@redhat.com> - 1.5.12-4
changelog:
  - Update the all_hcas patch to resolve several problems
  - Give a simple help message to the ibnodes script
  - Resolves: bz818606, bz847129


author: Jay Fenlason <fenlason@redhat.com> 1.5.3-3.el6
changelog:
  - Correct the perldir macro for rhel-6's perl.
  - Remove the unrecognized --with-node-name-map configure option.
  - reorganize the files section to use fewer globs, so that it's less likely
    to pick up files inappropriately.


author: Doug Ledford <dledford@redhat.com> - 1.5.5-1.el6
changelog:
  - Update and rebuild against latest opensm (which was needed for latest
    ibutils, which was needed for licensing issues resolved in new upstream
    tarball, which was needed for pkgwrangler review)
  - Related: bz555835


author: Doug Ledford <dledford@redhat.com> - 1.5.8-1.el6
changelog:
  - Update to latest upstream version
  - Make build work on i686 arch
  - Modify perfquery to be able to loop through all HCAs in a single host
  - Resolves: bz593767
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.6.4-1
changelog:
  - Update to latest upstream release
  - Simplify and reduce spec file
  - Ship the various scripts we used to remove, they can be useful
  - Pick up changes from rhel7 and bring them to rhel6
  - Related: bz1082730


author: Jay Fenlason <fenlason@redhat.com> - 1.13-2
changelog:
  - Use macros for lib and include directories, and include dist tag in
    release field.
  - Corrected License field.
  - Corrected Requires lines for libuuid.
  - Add Exclusive-arch x86_64
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include the -execstack patch to get libinfinipath.so correctly
    labeled as not executing the stack.
    Resolves: rhbz612936


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Put the udev rules file in the right place
    Resolves: rhbz866732
  - include a patch from upstream to fix undefined references
    Resolves: rhbz887730


author: Michal Schmidt <mschmidt@redhat.com> - 3.3-1.7.git05f6f14_open
changelog:
  - Update to latest upstream tarball
  - Replace no-exec-stack patch with one cherry-picked from upstream.
  - Resolves: bz1247994


author: Petr Lautrbach <plautrba@redhat.com> 9.03.22-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode (#682879)
  - network-functions: fix check for unmanaged devices (#670154)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.26-1
changelog:
  - add 'emergency' mode (#681357)
  - kexec - free reservation memory only for crashkernel=auto (#734987)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.39-1
changelog:
  - remount /proc to set attributes from fstab #984003
  - print something when arping is detecting colliding ip addresses
  - try dhcpv6 after v4 failed
  - Allow dhclient configuration files for DHCPv6 as well. (#815676)
  - ifdown: don't call nmcli on interface that is alread down
  - call flush addresses with scope global
  - init: inform users about .override files in .conf files
  - netfs: do not force NFS exports to be mounted before _netdev mounts
  - set net.ipv6.conf..autoconf in ifup-ipv6
  - mention rule6 files
  - securetty: check if the device is in the file before attempting to write to it
  - Process rule6-* for sit devices (#840009)
  - Killproc -d should parse same values as sleep
  - Make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - bonding: set master up before slaves
  - Fix greps to correctly handle comments and quotation (#915659)


author: Lukas Nykryn <lnykryn@redhat.com> - 9.03.40-1
changelog:
  - sync disks before halt (#1006294)
  - provide KVM guest count and limit info message (#1014731)
  - add ability to disable LVM activation on boot (#1015065)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.47-1
changelog:
  - rc.sysinit: be more verbose
  - init.d/functions: rc.debug option to debug initscripts
  - ifup-aliases: inherit ARPCHECK from parent device
  - netfs: don't race NFS umount to network shutdown
  - network: report that we can't shut down network for root on netfs
  - Fix tcsh + grep-2.7. (#636552)
  - sysctl.conf: move bridge setting to module-init-tools
  - rc.sysinit: set affinity also for current shell
  - ifdown-eth: use scope host for lo
  - improve_check_for_bond_master_in_install_bonding_driver
  - network-functions: fix check in install_bonding_driver
  - ifdown-post: remove resolv.conf only in specific cases
  - netconsole: lets run earlier
  - ipcalc: support RFC3021 (#997271)
  - halt: add delay after upsdrvctl shutdown
  - ifup: also set multicast_snooping after the bridge is up


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.50-1
changelog:
  - functions: improve killing loops
  - netfs: tweak nfs umount
  - sysctl.conf: mention sysctl -a
  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
  - spec: require plymouth
  - fix mangled sysconfig/init.s390
  - rc.sysinit: don't perform fsck twice with /.autorelabel
  - ifdown-eth: fix comparison
  - ifup-eth: if arping fails, output responding MAC
  - network-functions: fix change_resolv_conf after grep update
  - spec: add sysctl.d dir
  - rc.sysinit: fix typo in fs
  - rename_devices: comments need to have a blank before them
  - rename_device: remove comments and trailing whitespaces
  - bonding: warn if the ifup for slave device failed
  - clarify daemon() usage message
  - ifdown: clean ipv4 localhost addresses
  - ifup-post: check resolve.conf also with DNS2
  - ifup: add missing quotes
  - ifup-eth: some bridge options are applied later
  - init.d/halt: give init some time to reexecute
  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
  - ifup-wireless: fix calling of phy_wireless_device
  - rc.sysinit: apply quotas after system is relabeled


author: Stepan Kasal <skasal@redhat.com> - 0.47-5
changelog:
  - require perl(:MODULE_COMPAT_5.10.x) because the package requires libperl.so
  - the same for inkscape-view


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-1
changelog:
  - Resolves:rh#752667 - iok looks for ~/.m17n not ~/.m17n.d
  - Resolves:rh#752668 - input fail on touch-screen with finger, while mouse click is working for iok
  - Resolves:rh#736992 - iok crashed and segfaults occurred while selecting xkb-Hindi Wx keyboard
  - Update to 1.3.13 release


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-2
changelog:
  - Resolves:rh#798592 - iok crashed while selecting 'xkb-Malayalam (enhanced Inscript with Rupee Sign)'


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-3
changelog:
  - Resolves:rh#814548: Save File option should suggests a predefined file name format
  - Resolves:rh#814521: iok does not fetch any .mim file name which does not contain "inscript2" word.
  - Resolves:rh#814541: Predefined naming convention followed when save File name, but no clue of that to user 
  - Resolves:rh#819795: Translation tracker for iok


author: Rob Crittenden <rcritten@redhat.com> - 2.0-7
changelog:
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails the build. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-8
changelog:
  - Re-add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed. This got inadvertantly
    dropped when the source tarball was re-based (#559004)
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails at runtime. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-23.el6_1.1
changelog:
  - Wait for 389-ds tasks to complete (#709329)
  - Set replica to restart ipa on boot (#709330)
  - Managed Entries not configured on replicas (#709331)
  - Don't create bogus aRecord when creating new zone (#709332)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-23.el6_1.2
changelog:
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#729805) 
  - Set minimum requires of xmlrpc-c to 1.16.24-1200.1840.el6_1.4
  - Set minimum requires of libcurl to 7.19.7-26.el6_1.2


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-8.el6
changelog:
  - Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
    xmlrpc-c in RHEL-6 doesn't suppose the dont_advertise option so that is
    not set any more. Another fake header, X-Original-User_Agent, is added
    so there is no more trailing junk after the Referer header.  (#749870)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-9.el6
changelog:
  - Add current password prompt when changing own password in web UI (#751179)
  - Remove extraneous trailing ' from netgroup patch (#749352)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-17.el6_3.1
changelog:
  - Fix changelog issue. The dist tag was in each entry and changing the
    build release changed history. (#878219)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-23.el6
changelog:
  - Installer should not connect to 127.0.0.1. (#895561)
  - Don't initialize NSS if we don't have to. (#878220)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-24.el6
changelog:
  - Add certmonger condrestart to server post scriptlet (#903758)
  - Make certmonger a (pre) Requires (#903758)
  - Add selinux-policy to Requires(pre) to avoid post scriptlet AVCs
    (#903758)
  - Set minimum version of pki-ca to 9.0.3-30 and add to Requires(pre)
    to pick up certmonger upgrade fix (#902474)
  - Update anonymous access ACI to protect secret attributes (#902481)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-26.el6_4
changelog:
  - Significant decrease in migration performance. (#908308)
  - ipa-client-install failed to fall over to replica with master down (#909161)
  - During Migration - If Schema is unavailable migration fails (#908400)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.2
changelog:
  - Missing LDAP schema attributeType and objectClass after upgrade (#916535)
  - ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
    correctly and crash (#917065)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.3
changelog:
  - client installation fails with anonymous binds set to rootdse (#952741)
  - LDAP upload CA cert sometimes double-encodes the value (#964128)
  - wrong trust argument assigned to renewed certs in ipa cert automatic
    renew (#964130)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-37.el6
changelog:
  - group-add-member command reported wrong error on duplicates (#970541)
  - ipa-client installation succeeding in ipa server instance (#1011044)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-40.el6
changelog:
  - Explicitly specify auth mechanism when calling ldapmodify in
    the installers (#1108661)
  - Add support for DNS classless reverse domains (#1095250)
  - Multiple nsDS5ReplicaId attributes created in
    cn=replication,cn=etc (#1109050)
  - ipa-client-install should configure sudo automatically (#1111121)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-41.el6
changelog:
  - ipasam does not support deleting multiple child trusted domains due
    to LDAP delete operation (#1110664)
  - Excessive LDAP calls by ipa-sam during file operations to samba file
    share on freeipa master cause high CPU and slow performance (#1074314)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-42.el6
changelog:
  - Require 389-ds-base >= 1.2.11.15-38 to fix roken dereference control with
    the FreeIPA 4.0 ACIs (#1112698)


author: Petr Vobornik <pvoborni@redhat.com> - 3.0.0-46.el6
changelog:
  - Use tls version range in NSSHTTPS initialization
  - Resolves: #1154687 - POODLE: force using safe ciphers (non-SSLv3) in IPA
                         client and server
  - Resolves: #1012224 - host certificate not issued to client during
                         ipa-client-install


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-47.el6.1
changelog:
  - Resolves: #1280207 Unable to resolve group memberships for AD users when
    using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
    ipa-server-3.0.0-42.el6.x86_64 with AD Trust
    - Do not lookup up the domain too early if only the SID is known
    - Do not store SID string in a local buffer
    - Allow ID-to-SID mappings in the extdom plugin
  - Resolves: #1280208 ipa-server-install with externally signed CA fails with
    NSS error (SEC_ERROR_BUSY)
    - Free NSS objects in --external-ca scenario


author: Petr Vobornik <pvoborni@redhat.com> - 3.0.0-43.el6
changelog:
  - Release 3.0.0-43
  - Resolves: #1191040 - ipa-client-automount: failing with error LDAP server
                         returned UNWILLING_TO_PERFORM. This likely means that
                         minssf is enabled.
  - Resolves: #1185207 - ipa-client dont end new line character in
                         /etc/nsswitch.conf
  - Resolves: #1166241 - CVE-2010-5312 CVE-2012-6662 ipa: various flaws
  - Resolves: #1161722 - IDM client registration failure in a high load
                         environment
  - Resolves: #1154687 - POODLE: force using safe ciphers (non-SSLv3) in IPA
                         client and server
  - Resolves: #1146870 - ipa-client-install fails with "KerbTransport instance
                         has no attribute '__conn'" traceback
  - Resolves: #1132261 - ipa-client-install failing produces a traceback
                         instead of useful error message
  - Resolves: #1131571 - Do not allow IdM server/replica/client installation
                         in a FIPS-140 mode
  - Resolves: #1198160 - /usr/sbin/ipa-server-install --uninstall does not
                         clean /var/lib/ipa/pki-ca
  - Resolves: #1198339 - ipa-client-install adds extra sss to sudoers in
                         nsswitch.conf
  - Require: 389-ds-base >= 1.2.11.15-51
  - Require: mod_nss >= 1.0.10
  - Require: pki-ca >= 9.0.3-40
  - Require: python-nss >= 0.16


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-48.el6
changelog:
  - Resolves: #1263703 ipa-server-install with externally signed CA fails with
    NSS error (SEC_ERROR_BUSY)
    - Free NSS objects in --external-ca scenario
  - Resolves: #1263262 Unable to resolve group memberships for AD users when
    using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
    ipa-server-3.0.0-42.el6.x86_64 with AD Trust
    - Do not lookup up the domain too early if only the SID is known
    - Do not store SID string in a local buffer
    - Allow ID-to-SID mappings in the extdom plugin


author: Martin Basti <mbasti@redhat.com> - 3.0.0-49.el6
changelog:
  - Resolves: #1127211 ipa-server-install --uninstall produces avc
    - sysrestore: copy files instead of moving them to avoind SELinux issues
    - Use 'mv -Z' in specfile to restore SELinux context
  - Resolves: #1222999 ipa aci plugin is not parsing aci's correctly.
    - ACI plugin: correctly parse bind rules enclosed in parentheses
  - Resolves: #1225868 display browser config options that apply to the browser -
    Chrome
    - webui: add Kerberos configuration instructions for Chrome
    - Remove ico files from Makefile
    - WebUI: fix ipa_error.css
  - Resolves: #1232468 The Domain option is not correctly set in idmapd.conf when
    ipa-client-automount is executed.
    - Simplify adding options in ipachangeconf
    - ipachangeconf: Add ability to preserve section case
    - ipa-client-automount: Leverage IPAChangeConf to configure the domain for
      idmapd
  - Resolves: #1232899 ipa-client-install does not respect --realm option
    - Allow user to force Kerberos realm during installation.
  - Resolves: #1276358 Remove /usr/share/ipa/updates/50-lockout-policy.update
    file from IPA 3.0 releases
    - Remove 50-lockout-policy.update file


author: Jan Cholasta <mbasti@redhat.com> - 3.0.0-50.el6
changelog:
  - Resolves: #1225868 display browser config options that apply to the browser -
    Chrome
    - Remove ico files from Makefile
  - Resolves: #1232843 ipa-client-install errors out if client and server time
    are not in sync or unreachable
    - Skip time sync during client install when using --no-ntp
  - Resolves: #1288495 Add userCertificate index used in Smart Card
    authentication
    - add DS index for userCertificate attribute
  - Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot
    read property 'mozilla' of undefined
    - webui: fix browser detection in browserconfig.html and ssbrowser.html
  - Resolves: #1296124 Adjust Firefox configuration to new extension signing
    policy
    - webui: use manual Firefox configuration for Firefox >= 40
  - Remove binary patching from patch 0140


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.2
changelog:
  - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
    certificate revocation
    - cert-revoke: fix permission check bypass (CVE-2016-5404)


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.3
changelog:
  - Resolves: #1369470 IPA Replica-Install from RHEL6 to RHEL7 Fails
    - Modififed NSSConnection not to shutdown existing database.
    - Do not erroneously reinit NSS in Dogtag interface
    - Make sure replication works after DM password is changed


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-50.el6.3
changelog:
  - Resolves: #1322059 IPA Replica-Install from RHEL6 to RHEL7 Fails
    - Modififed NSSConnection not to shutdown existing database.
    - Do not erroneously reinit NSS in Dogtag interface
    - Make sure replication works after DM password is changed


author: Jan Cholasta <jcholast@redhat.com> - 3.0.0-51.el6
changelog:
  - Resolves: #1321138 Missing dependency package "python-sss-murmur" in
    ipa-server-3.0.0-50.el6.x86_64
    - SPEC: Require python2 version of sssd bindings
  - Resolves: #1367026 Document and test procedure for running IdM Server in TLS
    1.2+ environment
    - Require 389-ds-base with TLS 1.0 disable switch


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - updated 'delloem setled' command to indicate SES status and drive
    activities for a PCI-e SSD (#727314)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - added -Y option for ipmitool to hide Kg key from cmdline (#698647)
  - added 'channel setkg' command to set Kg encryption key on remote machine
    (#726390)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-11
changelog:
  - fixed delloem powermonitor on bigendian systems (#731718)
  - fixed memory leak in Serial-over-Lan module (#731977)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-13
changelog:
  - added new options to configure retransmissions on lan/lanplus interfaces
    (#748073)
  - updated dellem command (#739358)
  - fixed exit code of ipmitool -o list (#715615)
  - improved checking of command line arguments (#725993)


author: Ales Ledvinka <aledvink@redhat.com> - 1.8.11-23
changelog:
  - (#1194420) Fix DDR4 SDR crash.
  - (#1170266) Wrong version reported.
  - (#1162175) Extra dependency.
  - (#1126333) Very slow response from SDR owner type SW ID
  - (#903019)  SDR lists x4600m2 fan units as unspecified


author: Petr Sabata <psabata@redhat.com> - 2.6.32-8
changelog:
  - Add support for setting and showing SR-IOV virtual function link params
  - Patch from Petr Lautrbach
  - Resolves: rhbz#606680


author: Petr Sabata <psabata@redhat.com> - 2.6.32-14
changelog:
  - Fix'd to properly build against xtables interface
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986


author: Petr Sabata <psabata@redhat.com> - 2.6.32-16
changelog:
  - Link and install m_xt.so properly
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986
  - Related: rhbz#678986


author: Petr Sabata <contyk@redhat.com> - 2.6.32-17
changelog:
  - Fix GRED options clearing
  - Resolves: rhbz#709652
  - Add macvlan/macvtap passtru support
  - Resolves: rhbz#692867
  - Resolves: rhbz#693878


author: Petr Šabata <contyk@redhat.com> - 2.6.32-18
changelog:
  - Fix changing of ip6ip6 tunnel hoplimit
  - Resolves: rhbz#730627
  - lnstat -d should dump to stdout
  - Resolves: rhbz#736106


author: Petr Šabata <contyk@redhat.com> - 2.6.32-19
changelog:
  - Adding mqprio qdisc support (#748767)
  - Adding QFQ discipline support (#788120)
  - A required update of include/linux/pkt_sched.h


author: Petr Šabata <contyk@redhat.com> - 2.6.32-20
changelog:
  - Add support for multicast rules, IPv4 only due to kernel limitations;
    see #631984, comment 14 for details (#812779)


author: Petr Pisar <ppisar@redhat.com> - 2.6.32-29
changelog:
  - Document tc -OK option (#851371)
  - Document "bridge mdb" and "bridge monitor mdb" (#885977)
  - Document bridge unsupported features (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-31
changelog:
  - Removed the unsporrted features from the bridge(8) manpage and
    document bridge fdb replace (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-32
changelog:
  - Fix a floating point exception regression introduced with the
    incorrect fix of #859145 (#1045200)


author: Phil Sutter - 2.6.32-46
changelog:
  - Resolves: #974693 - lnstat manpage insufficient
  - Resolves: #1042799 - Inconsistent detailed link information between "ip link" and "ip monitor link"
  - Resolves: #684691 - can't change the remote/local address of tunnel interface to "any" in ipip mode
  - Resolves: #1094676 - iproute2 route table querying broken for table numbers >= 2147483648
  - Resolves: #1261115 - tc does not allow to attach pfifo_fast qdisc
  - Resolves: #1229355 - ss -an shows only tcp sockets
  - Resolves: #1199867 - iproute could not show correct hoplimit info with value -1


author: Phil Sutter - 2.6.32-47
changelog:
  - Resolves: #1277102 - ip neighbour segfaults if bad mac address is used
  - Resolves: #1243413 - ip rule help output contains action reject, but this action does not work
  - Resolves: #1268058 - backport additional tcp_info dump support in ss tool
  - Resolves: #1045032 - iproute2: "ip -o link" doesn't show devices entries in a single line when reporting SR-IOV devs.
  - Resolves: #1093726 - manpage for tc needs info on filters
  - Resolves: #1265240 - ss returns zero (ok) when invalid option is added


author: Phil Sutter - 2.6.32-48
changelog:
  - Resolves: #1269814 - [6wind 6.8 Feat]: implement support for basic bridge IFA_INFO_DATA
  - Resolves: #1276591 - iproute: 'ip addr flush' failed to send flush request: Cannot assign requested address


author: Phil Sutter - 2.6.32-54
changelog:
  - Resolves: #1086512 - "ip link show" commands display Message Truncated
  - Resolves: #1301148 - [RFE] Monitoring per connection TCP retransmission


author: Thomas Woerner <twoerner@redhat.com> - 6.11-1
changelog:
  - new version 6.11 with so library version 2, includes
  - cleaned up spec file for 6.11, dropped patch, no kernel will be built
  - adapted for RHEL-6: added clean tag, BuildRoot


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-9
changelog:
  - make alternatives names arch dependant for multilib (rhbz#860148)
  - added virtual provides for base libraries to be able to resolve library file requires


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-10
changelog:
  - New reload action for ip*tables services (rhbz#928812)
    It tries to reload the firewall rules from /etc/sysconfig/ip*tables. If this
    failes, it does not load the fallbacks and the old firewall rules are still
    there.
  - Use /lib*/xtables without version and not linked by alternatives again for 
    compatibility to older versions (rhbz#924362)
    The symlink for /lib*/xtables with the previous version will be cleaned up
    in a pre script.
  - Backport of --queue-bypass (rhbz#845435)
    Thanks to Florian Westphal and kay
  - Make ip*tables-save consistent to man page (rhbz#983198)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-11
changelog:
  - fixed shutdown hang if root filesystem is network based (rhbz#1007632)
    Thanks to Rodrigo A B Freire for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-12
changelog:
  - added ip6t_set (rhbz#1033270)
  - do not block uninstall on a failing alternatives --remove call in preun
    (rhbz#1059214) (rhbz#1070123)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-15
changelog:
  - Add message for init script error returns (rhbz#1081191)
  - Fix rule deletion of ipset matches (rhbz#1081422)
  - Add space after dccp types (rhbz#1084974)
  - Add -C option to check for existing rules (rhbz#1088361)
  - Copy custom plugins for updates from iptables < 1.4.7-10 (rhbz#1088400)
  - Enable the IPv6 set target (rhbz#1161330)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-16
changelog:
  - Fixed ressource leak in libiptc found by coverity (rhbz#1088361)
  - Copy custom plugins also for releases up to 14 (rhbz#1088400)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - rebase to version 1.4.7:
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - fixed initscript to be LSB compliant (rhbz#593228)
    - added euid 0 check
    - reload returns 3 (unimplemented feature)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-4
changelog:
  - added IPv6 transparent proxy support (rhbz#590186)
  - added auditing support (rhbz#642393)
    Thanks to Thomas Graf for the patch
  - init: restore context for save and use /etc/sysconfig for temps (rhbz#644273)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-5
changelog:
  - fixed option parser problem (mark matches with mark options) (rhbz#725879)
    based on upstream commits:
      600f38db82548a683775fd89b6e136673e924097
      59e8114c6792242e80785f4461d5e663fb9a3d64
      d3b2e391e3b944581e20e216af76339cc87d0590
      2d68ae7ce6e40e3977ee11a57296cf76801ae320
      1dc27393b7ba401e6228a5ee2472a6eb72836c43
      1e128bd804b676ee91beca48312de9b251845d09
      fa503ad59f73d20d85f4cdf53324a01d2ad8591e


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-5.1
changelog:
  - reverted upstream patches, because they are breaking the ABI (rhbz#725879)
  - created new patch based on upstream but without ABI break (rhbz#725879)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-7
changelog:
  - Use alternatives to support other iptables versions for MRG kernels
    (rhbz#747068)
  - Restore sysctl values on service restart (rhbz#800208)
  - Added fallback support in case of error in service start (rhbz#808272)
  - Added AUDIT targets to to man pages (rhbz#809108)
  - Fixed maximum chain name length (rhbz#821441)
  - Added missing dependency for poliycoreutils package (rhbz#836286)


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.0.1-12
changelog:
  - add patch 0001-fix-strcpy-overlap-memory.patch
  - Resolves: 595454  - Doesn't detect any ethernet interface


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.0.1-13
changelog:
  - add patch iptraf-3.0.1-strict-aliasing.patch
  - Resolves: #596173 - RPMdiff run failed for package iptraf-3.0.1-11.el6


author: Jan Synáček <jsynacek@redhat.com> - 20071127-20
changelog:
  - Resolves: #1149574 - Ping produces "WARNING: kernel is not very fresh, upgrade is recommended."
  - Resolves: #829998 - The arping command may have return value of 0.
  - Resolves: #1099426 - Count of "back" is not correct in tracepath
  - Resolves: #1113082 - ping returns odd results with options inet6 in resolv.conf


author: Jan Synáček <jsynacek@redhat.com> - 20071127-22
changelog:
  - Resolves: #1351720 - documentation inconsistency on arping
  - Resolves: #1334775 - backport upstream ping change unmasking signals
  - Resolves: #1298344 - Ping assumes EACCESS errors are due to broadcast addresses


author: Petr Holasek <pholasek@redhat.com> - 2:0.55-32
changelog:
  - NUMA awareness bits were thrown away (from #673234 and #798648)
  - Mistake in sysconfig documentation was fixed (bz 732435)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.4-10
changelog:
  - Minor source hardening (bz 878001)
  - Migrating algorithm fix (bz 1031230)
  - Introducing deepestcache option (bz 1052166)
  - Debug option behavior fix (bz 1096392)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - Unused variable removed (bz 1119404)
  - Warning when started as non-root (bz 749651)
  - More robust signal handling (bz 1158932)
  - Fixed manpage hostname (bz 1162247)
  - Fixed memleak (bz 1178247)
  - Fixed help message typo (bz 1178903)


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.20
changelog:
  - 696267 Create a offloaded session if the iscsi_host MAC and ibft
  MAC match. This enables support for Broadcoms hba boot mode.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.21
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code [patch from .14 got dropped
  due to mismerge].


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.31
changelog:
  - 749051 Sync iscsiuio to iscsiuio-0.7.0.14g to fix boot hang
    when connection is lost during startup.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.40
changelog:
  - 738192 Fix regression added when handling 738192 where unknown params
    messages got logged by mistake.


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - 1054587 iscsiuio update
  - 1053374 upstream backports to support new driver features
  - 1052361 IPC sockaddr compat to communicate with older iscsid on upgrade
  - 1076344 fix handling of multiple oustanding async events


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - Sync with upstream 2.0.873
  - 854776 Bring up network interface for iSCSI boot with bnx2i
  - 811428 make version string reported by iscsiadm match RPM version
  - fix iscsid segfault during qla4xxx login


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-15
changelog:
  - 1125984 iscsistart vlan support
  - 906242 fix segfault from unexpected netlink event during driver load
  - 1181463 iscsiuio update


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1294965 iscsiuio match based on driver to support new hardware without
    adding PCI IDs (still need IDs added to kernel)
  - bnx2i pass through ping support


author: Radek Vykydal <rvykydal@redhat.com> - 1:1.0.6-1
changelog:
  - Add abort check feature (dpierce, rvykydal)
    Resolves: rhbz#555107
  - Remove output to stderr from library (bcl)
    Resolves: rhbz#586339
  - Use separate return value for image not found (bcl)
    Resolves: rhbz#586351


author: Rex Dieter <rdieter@fedoraproject.org> - 1.900.1-13
changelog:
  - CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
  - CVE-2008-3522 jasper: possible buffer overflow in 
    jas_stream_printf() (#461478)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.1
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171208)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.2
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173566)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173566)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.3
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183671)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183679)


author: Martin Matejovic <mmatejov@redhat.com> - 1.6.0.0-1.19.b17
changelog:
  - Added icedtea6-1.7.3
  - Added openjdk b17
  - Enabled NPPlugin
  - Removed Files:
      java-1.6.0-openjdk-icedtea-gcc-stack-markings.patch
      java-1.6.0-openjdk-jar-misc.patch
      java-1.6.0-openjdk-linux-separate-debuginfo.patch
      java-1.6.0-openjdk-memory-barriers.patch
      java-1.6.0-openjdk-rhino-rewrite.patch
      java-1.6.0-openjdk-s390-optimizer-failure.patch
      java-1.6.0-openjdk-s390-serializer.patch
      java-1.6.0-openjdk-systemtap-fixes-jni-jstack.patch
      java-1.6.0-openjdk-x11.patch
  - Resolves: rhbz#593135
  - Resolves: rhbz#572675


author: Martin Matejovic <mmatejov@redhat.com> - 1.6.0.0-1.20.b17
changelog:
  - Fixed brew build for i686
  - Removed Files:
      java-1.6.0-openjdk-securitypatches-20091103.patch
      java-1.6.0-openjdk-securitypatches-20100323.patch
      java-1.6.0-openjdk-sparc-fixes.patch
      java-1.6.0-openjdk-sparc-hotspot.patch


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.21.b17
changelog:
  - Updated to IcedTea 1.7.4
  - Resolves: rhbz#537121
  - Resolves: rhbz#612467
  - Resolves: rhbz#613824
  - Additionally, fixed rh bugs 616893 and 616895


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.31.b17
changelog:
  - excluded bin/javaws files
  		exclude  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/jre/bin/javaws
  		files devel
  		exclude  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/bin/javaws

  - garbage removed to separated file
  - Resolves: rhbz#639954


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.31.b17
changelog:
  - excluded bin/javaws files
  		exclude  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/bin/javaws
  		files devel
  		exclude  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/bin/javaws

  - garbage removed to separated file
  - Resolves: rhbz#639954


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.33.b17
changelog:
  - bumped release number, it was accidentaly reduced, and now lower version then last one was released.
  - Resolves: rhbz#676295


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.39.1.9.8
changelog:
  - Resolves: rhbz#709375
  - Bumped to IcedTea6 1.9.8
  - Copy fontconfig files to match names for current and next release
  - RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
    disabled get still selected for read ops (win)
  - RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
  - RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
    FileDialog.show()
  - RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
    code
  - RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
    bindings
  - RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
  - RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
  - RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
    with scale close to zero
  - RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
  - RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
    size variables


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.40.1.9.10
changelog:
  - Resolves: rhbz#744788
  - Bumped to IcedTea6 1.9.8
  -removed font copying
   Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: JSSE
    - S7070134, CVE-2011-3558: Hotspot unspecified issue
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
   NetX
    - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.43.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787144
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed upstreamed patch7 - java-1.6.0-openjdk-6_2-Z-rmi-fix.patch


author: Mark Wielaard <mjw@redhat.com> - 1:1.6.0.0-1.45.1.11.1
changelog:
  - Resolves: rhbz#804632
  - Tweak java-1.6.0-openjdk-jstack.patch stack to remove two uses of sprintf
    to make it work against systemtap 1.7.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Sync with 6.3:
  - Bump to IcedTea6 1.11.3
  - With removed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Including patch7 - java-1.6.0-openjdk-jstack.patch
  - Including patch3, java-1.6.0-openjdk-java-access-bridge-security.patch modification
  - Resolves: rhbz#828751


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828751


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828752


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.49.1.11.5
changelog:
  - Updated to IcedTea6 1.11.5
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.55.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911524


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911525


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.60.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.62.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973129


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.13
changelog:
  - removed upstreamed  patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.13
  - Resolves: rhbz#992909


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - removed useless runtests parts
  - included also java.security.old files
  - Resolves: rhbz#1017618


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.68.1.11.14
changelog:
  - updated to icedtea6-1.11.14.tar.gz
  - added and applied 1.11.14-fixes.patch, patch10 to fix build issues
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - Resolves: rhbz#1017618


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.13
changelog:
  - removed upstreamed  patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.13
  - Resolves: rhbz#983411


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - removed useless runtests parts
  - included also java.security.old files
  - Resolves: rhbz#1017621


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - reworked patch for unsyncHashMap.patch
    - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115868


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.0-11.1.13.4
changelog:
  - Add fix for ArrayIndexOutOfBoundsException when certain glyphs are processed
  - Regenerate rpath patch to apply after upstreamed patch.
  - Resolves: rhbz#1112806


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050190


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085009


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115580
  - Resolves: rhbz#1115867


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.0-7.1.13.4
changelog:
  - Add fix for ArrayIndexOutOfBoundsException when certain glyphs are processed
  - Resolves: rhbz#1132523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Remove upstreamed patches.
  - Regenerate add-final-location-rpaths patch against new release.
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - Use xz for tarballs to reduce file size.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148899


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Resolves: rhbz#1209065


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235150


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271927


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271927


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271927


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with newer tarball, including 6763122 fix for TCK regression.
  - Use release + 1 to avoid having a lower version than the 6.7 version.
  - Resolves: rhbz#1271928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.5
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.0
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1325425


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.1
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Remove patches added for RH1183014 which are now upstream in 2.6.5/7u99.
  - Resolves: rhbz#1320657


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.1
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop a leading zero from the priority as the update version is now three digits
  - Update PR2809 patch to apply against 2.6.6.
  - Resolves: rhbz#1325426


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
  - Resolves: rhbz#1350039


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350039


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Require at least the build-time version of NSS at run-time due to static linking.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.1
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Remove unneeded AArch64 environment variable setting.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Resolves: rhbz#1410612


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.8.2.el6
changelog:
  - Added latest Fedora spec changes
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - classes.jsa marked as ghost on full path
    - see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
  - nss.cfg was marked as config(noreplace)
  - Add symlink to default soundfont (see 541466)
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.9.0.el6
changelog:
  - updated to IcedTea  2.3.9 with latest security patches
  - buildver sync to b19
  - rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.1.el6
changelog:
  - updated to updated IcedTea  2.3.9 with fix to one of security fixes
    -  fixed font glyph offset
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.el6
changelog:
  - added patch1000 MBeanFix.patch to fix regressions caused by security patches
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.3.el6
changelog:
  - removed upstreamed patch1000 MBeanFix.patch
  - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
  - Resolves: rhbz#973119


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.25-2.3.10.4.el6
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.3.el6:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - Related: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.3.el6
changelog:
  - added back patch404 tck20131015_1.patch, to resolve one of tck failures
  - added back patch405 tck20131015_2.patch, to resolve one of tck failures
  - added back patch406 tck20131015_3.patch, to resolve one of tck failures (modified)
  - added back patch407 tck20131015_4.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.1.el6
changelog:
  - sync with rhel 6.5 to icedtea 2.4 because of pernament tck failures
   - nss kept disabled
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.0.el6
changelog:
  - security update to icedtea 2.4.3  (u45, b15)
  - removed unnecessary revert patch404: RH661505-toBeReverted.patch
  - get rid of unaplied patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - Resolves:rhbz#1017627


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.4.el6
changelog:
  -  patch111 - nss-config-2.patch applied jsut as dry-run
    (== not applied) as it have invalid consequences
  - Resolves: rhbz#1036813


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6
changelog:
  - Updated priority to be > 17000 and to depend on buildver variable
  - Variable buildver increased to 5 as it should be
  - Resolves: rhbz#828759


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6
changelog:
  - Added patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
    to fix vulnerability until it is fixed in upstream sources. 
  - Resolves: rhbz#852299


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6.3
changelog:
  - Removed patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
  - Applied upstream patches for same issue:
     patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
     patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
     patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
     patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
     patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
  - Resolves: rhbz#852299


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.3-2.2.1.el6
changelog:
  - Used newly prepared tarball with security fixes
  - Bump to icedtea7-forest-2.2.1
  - _mandir/man1/jcmd-name.1 added to alternatives
  - Updated rhino.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Modified partially upstreamed patch302 - systemtap.patch
  - Temporarly disabled patch102 - java-1.7.0-openjdk-size_t.patch
  - Removed already upstreamed patches 104,108,109,301,110:
    - java-1.7.0-openjdk-arm-ftbfs.patch
    - java-1.7.0-openjdk-system-zlib.patch
    - java-1.7.0-openjdk-remove-mimpure-opt.patch
    - systemtap-alloc-size-workaround.patch
    - java-1.7.0-fix-gio-detection.patch
  - Access gnome bridge jar forced to be 644
  - Added patch303 - java-1.7.0-openjdk-jstack.patch which resolved RH804632 for openjdk6
  - Resolves: rhbz#828759


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.0.el6
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 0
  - sync with fedora
   - added and applied patch411 1029588.patch (rh 1029588)
   - added aand applied patch410, 1015432 (rh 1015432)
  - Resolves: rhbz#1050935


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.7.0.el6
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed upstreamed patch402 gstackbounds.patch
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - fixed FT2_CFLAGS and FT2_LIBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085002


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115874


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115875


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.65-2.5.3pre01.1
changelog:
  - Bump to 2.5.3pre01.
  - Remove obsolete patches, which are now included upstream.
  - Disable LCMS via environment variables rather than maintaining a patch.
  - Resolves: rhbz#1148309


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.71-2.5.3.2
changelog:
  - added and applied patch407, bug1146622-fix.patch
  - removed chrpath (sync with 6.7)
  - Resolves: rhbz#1173706


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Remove earlier temporary patch for RH1146622 (included upstream)
  - Fix elliptic curve list as part of fsg.sh
  - Resolves: rhbz#1180295
  - Resolves: rhbz#1173706


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.2
changelog:
  - Add backports of PR2233, PR2161, PR1661 (GConf changeset) and PR2320 from IcedTea 2.6.x
  - No longer set SYSTEM_GIO to false as we can link against it now GSettings is not required
  - Add test case to ensure file type detection works
  - Add build dependency on GConf2-devel for native proxy support.
  - Remove outdated dependencies on mercurial, redhat-lsb and libxslt from IcedTea builds.
  - Remove python dependency introduced for rpath rewrite script, which has now been removed.
  - Add build dependency on redhat-lsb-core to provide lsb_release for jdk_generic_profile.sh
  - Apply PR2323 to fix building of networking support with system GConf on and system GIO off
  - Revise PR2323 to use header defines to mark whether GLib types have been defined or not
  - Revise PR2323 to account for different glibconfig.h define used on RHEL 6
  - Use installed directory in check section and remove duplicate tests in build
  - Resolves: rhbz#1217984


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.3
changelog:
  - Revise PR2323 to account for different glibconfig.h define used on RHEL 6
  - Resolves: rhbz#1190835


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.3
changelog:
  - Use installed directory in check section and remove duplicate tests in build
  - Resolves: rhbz#1190835


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el6
changelog:
  - Updated to 2.3.3
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.2.el6
changelog:
  - Sync with 6.4
  - introduced tmp-patches source tarball
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#880352


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895033


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.4.1.el6
changelog:
  - Rewerted to IcedTea 2.3.4
    - rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
    - removed jxmd and idlj to alternatives
    - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
    - re-applied patch302 and restored systemtap.patch
    - buildver set to 9
    - icedtea_version set to 2.3.4
    - unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
    - restored tmp-patches source tarball
    - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
    - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
      java.security-linux back to java.security
  - Resolves: rhbz#895033


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.0.el6_3
changelog:
  - Removed patch1000 sec-2013-02-01-8005615.patch
  - Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
  - Removed patch1010 sec-2013-02-01-7201064.patch
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.3.7
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911529


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
  - Resolves: rhbz#1295765


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320656


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.91-2.6.2.1
changelog:
  - Bump to 2.6.2 and u91b00.
  - Drop PR2568/RH1248530 backport now applied upstream.
  - Resolves: rhbz#1271920


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.1
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
  - Resolves: rhbz#1295767


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13
changelog:
  - Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
  - Resolves: rhbz#1350034


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13
changelog:
  - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
  - Resolves: rhbz#1350034


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15
changelog:
  - Remove method reference from java.io.ObjectInputStream to allow compilation on old ECJ.
  - Resolves: rhbz#1393047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-0.b16
changelog:
  - Update to aarch64-jdk8u112-b16.
  - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
  - Re-generate size_t and key size (RH1163501) patches against u112.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-0.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
  - Re-generate RH1393047 ObjectInputStream patch against u121.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted)
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13
changelog:
  - Add backports from 8u131 and 8u152 ahead of April CPU.
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-0.b11
changelog:
  - Update to aarch64-jdk8u131-b11.
  - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
  - Update generate_source_tarball.sh to remove patch remnants.
  - Cleanup tarball creation documentation to avoid duplication.
  - Resolves: rhbz#1438751


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-1.b26
changelog:
  - updated to u20-b26
  - adapted patch9999 enableArm64.patch
  - adapted patch100 s390-java-opts.patch
  - adapted patch102 size_t.patch
  - removed upstreamed patch  0001-PPC64LE-arch-support-in-openjdk-1.8.patch
  - adapted  system-lcms.patch
  - removed patch8 set-active-window.patch
  - removed patch9 javadoc-error-jdk-8029145.patch
  - removed patch10 javadoc-error-jdk-8037484.patch
  - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26
changelog:
  - fixed headless (policytool moved to normal)
   - jre/bin/policytool added to not headless exclude list
  - updated aarch694 source
  - ppc64le synced from fedora
  - Resolves: rhbz#1081073


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: RHBZ#1154948


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17
changelog:
  - updated aarch64 sources
  - epoch synced to 1
  - all ppcs excluded from classes dump(1156151)
  - Resolves: rhbz#1173706


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13
changelog:
  - updated to security u45
  - minor sync with 6.7
   - generate_source_tarball.sh
   - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
   - reworked (synced) zero patches (removed 103,11 added 204, 400-403)
   - added upstreamed patch 501 and 505
   - included removeSunEcProvider-RH1154143.patch
  - returned java (jre only) provides
  - repacked policies (source20)
  - removed duplicated NVR provides
  - added automated test for priority (length7)
  - Resolves: RHBZ#1209074


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13
changelog:
  - Omit jsa files from power64 file list as well, as they are never generated
  - Use the template interpreter on ppc64le
  - priority set  gcj < lengthOffFour < otherJdks (RH1175457)
  - misusing already fixed bug
  - Resolves: rhbz#1189853


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235160


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235161


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16
changelog:
  - another touching attempt to polycies...
  - main links in alternatives moved to versionless format
  - Resolves: rhbz#1254197


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-3.b16
changelog:
  - direcotries aligned to rhel6, jdk7 like style ifarch 64 name.arch else naem
  - moved to rhel7, jdk8 like style of name.arch. Fixes 1259241
  - Resolves: rhbz#1254197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Fix library removal script so jpeg, giflib and png sources are removed.
  - Update system-lcms.patch to regenerated upstream (8042159) version.
  - Drop LCMS update from rhel6-built.patch
  - Resolves: rhbz#1257654


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-4.b17
changelog:
  - Add flag logic back to spec file but disable for now.
  - Restore system-lcms.patch as used in October CPU.
  - Resolves: rhbz#1295751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-0.b15
changelog:
  - January 2016 security update to u71b15.
  - Improve verbosity and helpfulness of tarball generation script.
  - Update patch documentation using version originally written for Fedora.
  - Drop prelink requirement as we no longer use execstack.
  - Drop ifdefbugfix patch as this is fixed upstream.
  - Provide optional boostrap build and turn it off by default.
  - Add patch for size_t formatting on s390 as size_t != intptr_t there.
  - Resolves: rhbz#1295751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
  - Resolves: rhbz#1295751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03
changelog:
  - Update to u77b03.
  - Drop 8146566 which is applied upstream.
  - Replace s390 Java options patch with general version from IcedTea.
  - Apply s390 patches unconditionally to avoid arch-specific patch failures.
  - Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
  - Remove aarch64-specific suffix as update/build version are now the same as for other archs.
  - Only use z format specifier on s390, not s390x.
  - Adjust tarball generation script to allow ecc_impl.h to be included.
  - Correct spelling mistakes in tarball generation script.
  - Synchronise minor changes from Fedora.
  - Use a simple backport for PR2462/8074839.
  - Don't backport the crc check for pack.gz. It's not tested well upstream.
  - Resolves: rhbz#1320661


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03
changelog:
  - Remove what remains of the SunEC sources in the remove-intree-libraries script.
  - Resolves: rhbz#1320661


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.71-5.b17
changelog:
  - returned jre_versionless_lnk/bin instead of jrebindir and
  -   and    sdk_versionless_lnk/bin isntead of sdkbindir
  - Resolves: rhbz#1295752


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03
changelog:
  - Update to u77b03.
  - Drop 8146566 which is applied upstream.
  - Replace s390 Java options patch with general version from IcedTea.
  - Apply s390 patches unconditionally to avoid arch-specific patch failures.
  - Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
  - Remove aarch64-specific suffix as update/build version are now the same as for other archs.
  - Only use z format specifier on s390, not s390x.
  - Adjust tarball generation script to allow ecc_impl.h to be included.
  - Correct spelling mistakes in tarball generation script.
  - Synchronise minor changes from Fedora.
  - Use a simple backport for PR2462/8074839.
  - Don't backport the crc check for pack.gz. It's not tested well upstream.
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03
changelog:
  - Remove patches to generated configure script, which we re-generate anyway.
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03
changelog:
  - RHEL 6 adds -fasynchronous-unwind-tables which leads to libjvm.so being too big on x86
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03
changelog:
  - Revert previous change to CFLAGS/LDFLAGS as issue is not us, but rhbz#1320961
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03
changelog:
  - Avoid WithSeed versions of NSS functions as they do not fully process the seed
  - Resolves: rhbz#1320662


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Use basename of test file to avoid misinterpretation of full path as a package
  - Resolves: rhbz#1325421


author: Andrew Overholt <overholt@redhat.com> 0:1.2.6-9.5
changelog:
  - Fix Group tags
  - Remove ghost symlinking in %post{,un}
  - Add cleaning of buildroot in %install
  - Remove dot in javadoc Summary
  - Fix URL for Source0
  - Fix mixed tabs and spaces


author: Christina Fu <cfu@redhat.com> - 4.2.6-21
changelog:
  - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - support for PKCS5v2; support for secure PKCS12
  - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
    in-place upgrade( CS 8.0->8.1)


author: Christina Fu <cfu@redhat.com> - 4.2.6-23
changelog:
  - Bugzilla Bug #804838 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #797352 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #797353 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1190302 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1190303 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #1167470 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-4
changelog:
  - Support ECC POP on the server (#224688)
  - Server Sockets are hard coded to IPV4 (#469456)
  - Set NSS dependency >= 3.12.3.99


author: Robert Scheck <robert@fedoraproject.org> - 4.0-17
changelog:
  - Update jwhois.conf for .edu.ar, .bs, .by, .dk, .name, .ng, .ps,
    .sg, .sl, .sv, .co.zw domains and handles from .name and .aero


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-19
changelog:
  - Fix IDN encoding failed with error code 5
    Resolves: #682832
  - Update jwhois.conf for dotEmarat extension
    Resolves: #664449


author: Radek Novacek <rnovacek@redhat.com> 1:1.0.5-12
changelog:
  - Added "-fno-strict-aliasing" flag
  - Added missing % to the summary of k3b-common
  - Resolves: #596179


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-2
changelog:
  - Resolves: #605063 - RPMdiff run failed for package kcoloredit-4.3.3-1.el6
    (create a noarch doc subpackage to fix multilib issues)


author: Than Ngo <than@redhat.com> - 4.3.4-5
changelog:
  - Resolves: bz#692737, hidde Network Settings in Control Center
  - Resolves: bz#587904, add missing hicolor icons


author: Than Ngo <than@redhat.com> - 6:4.3.4-5
changelog:
  - Resolves: bz#631481, Undecodable sequence message starting konsole
  - Resolves: bz#609039, Password & User account becomes non responding


author: Than Ngo <than@redhat.com> - 6:4.3.4-6
changelog:
  - Resolves: bz#608007, "Show menu bar" is always checked
  - Resolves: bz#729307, not possible to set default konsole size


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-7
changelog:
  - Resolves: bz#895364 - konsole's zmodem file transfer is not working
  - Resolves: bz#988464 - KDE konsole minimised on taskbar hangs upon close


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-8
changelog:
  - Resolves: bz#1069065 - konsole cuts off descenders of characters
  - Resolves: bz#1230656 - konsole can SEGV when resized


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-9
changelog:
  - Resolves: bz#1279151 - System wide plasma-desktop-appletsrc settings not reflected in user profile


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3:4-7
changelog:
  - Resolves: bz#1305833 - System wide plasma-desktop-appletsrc settings not reflected in user profile


author: Than Ngo <than@redhat.com> - 4.3.4-6
changelog:
  - backport patch from stable branch
    fix kde#210463, Don't watch subdirs for changes unless they've been listed.


author: Than Ngo <than@redhat.com> - 4.3.4-9
changelog:
  - Resolves: bz#607100, Requires: hal-storage-addon 
  - Resolves: bz#597271, drop WebKit support in Qt


author: Than Ngo <than@redhat.com> - 4.3.4-22
changelog:
  - Resolves: bz#666295, Missing help page(s) for Plasma workspace
  - Resolves: bz#587917, gnome/kde system monitor tool use same icon


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-30
changelog:
  - Make sure all windows are properly closed and removed from the task manager applet
    Resolves: bz#1027703


author: Jan Grulich <jgrulich@redhat.com> - 4.3.4-37
changelog:
  - Add explicit dependency for KDM subpackage to require -libs subpackage
    at the same version
    Resolves: bz#1304735


author: Than Ngo <than@redhat.com> - 6:4.3.4-15
changelog:
  - Resolves: bz#587016, print dialogue does not remember previous settings
  - Resolves: bz#682611, Konqueror splash page in zh_TW is wrong
  - Resolves: bz#734734, plasma eating up cpu-time when systemtray some icon
  - Resolves: bz#826114, konqueror crash when trying to add "Terminal Emulator" to main menu bar


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1206180 - Opening a terminal in Konqueror / Dolphin does not 
    inherit environment variables


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1088925 - Opening a terminal in Konqueror / Dolphin does not 
    inherit environment variables


author: Lukáš Tinkl <ltinkl@redhat.com> - 6:4.3.4-22
changelog:
  - Resolves rhbz#1088925 - Opening a terminal in Konqueror / Dolphin does not
    inherit environment variables


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-24
changelog:
  - Resolves: rhbz#1241170 - KDE wallpaper change requiring reboot to take affect
  - Resolves: rhbz#1123512 - Clicking 3x in empty kwrite window causes segfault


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-25
changelog:
  - Resolves: rhbz#1105072 - kbuildsycoca4 goes into infinite recursion while scanning for .desktop file


author: Jan Grulich <jgrulich@redhat.com> - 6:4.3.4-26
changelog:
  - Resolves: rhbz:623642 - do not crash konqueror on specific HTML content
  - Resolves: rhbz:1104205 - meinproc4 does not replace entities after libxml2 fixes
  - Resolves: rhbz:1279627 - do not crash kdirwatch on re-entrancy from slots


author: Than Ngo <than@redhat.com> - 3.5.10-21
changelog:
  - fix security issues in libltdl bundle within kdelibs CVE-2009-3736
  - backport upstream patches
  - patch autoconfigury to build with autoconf >= 2.64 (Stepan Kasal)


author: Than Ngo <than@redhat.com> - 3.5.10-25
changelog:
  - Resolves: bz#681901, drops old Obsoletes/Provides
  - Resolves; bz#734447, use ca-certificates' ca-bundle.crt


author: Jaroslav Reznik <jreznik@redhat.com> - 7:4.3.4-8
changelog:
  - Resolves: #591967,
      CVE-2010-1000, CVE-2010-1511: improper sanitization of metalink 
      attribute


author: Than Ngo <than@redhat.com> 6:4.3.4-6
changelog:
  - Resolves: bz#587895, ark does not seem to have icon on menu
  - Resolves: bz#595784, disable JS / Java / plugins in khtml file preview


