# changelog

author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-4
changelog:
  - Fix lvresize of thin pool for striped devices.
  - Round upwards when specifying number of extents for lvresize.
  - Round downwards strip alignment for lvcreate with %FREE.
  - Fix problems when specifying PVs during RAID down-converts.
  - Fix ability to handle failures in mirrored log (2.02.89).
  - Change message severity to log_very_verbose for missing dev info in udev db.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-5
changelog:
  - Add lvmetad man page.
  - Fix RAID device replacement code so that it works under snapshot.
  - Fix inability to split RAID1 image while specifying a particular PV.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-6
changelog:
  - Allow subset of failed devices to be replaced in RAID LVs.
  - Prevent resume from creating error devices that already exist from suspend.
  - Fix lvconvert error message for non-mergeable volumes.
  - Fix volume group unlocking in vgreduce error path.
  - Update and correct lvs man page with supported column names.
  - Rename (Blk)DevNames/DevNos dmsetup header to (Blk)DevNamesUsed/DevNosUsed.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-7
changelog:
  - Disallow snapshots of mirror segment type.
  - Fix bug in cmirror that caused incorrect status info to print on some nodes.
  - Disallow changing cluster attribute of VG while RAID LVs are active.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-8
changelog:
  - Fix up-convert when mirror activation is controled by volume_list and tags.
  - Add a note for global/mirror_segtype_default setting that RAID1 is not cluster-aware.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-9
changelog:
  - Re-enable partial activation of non-thin LVs until it can be fixed (2.02.90).
  - Reinstate snapshots of mirror segment type.
    Warn of deadlock risk when using snapshots of mirror segment type.
  - Set delay_resume_if_new on deptree snapshot origin.
  - Add Conflicts: vdsm < 4.9-113.0 (new 'target' and 'zero' LV attr breaks vdsm).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.1
changelog:
  - Fix test for PV with unknown VG in process_each_pv to ignore ignored mdas.
  - Fix _alloc_parallel_area to avoid picking already-full areas for raid devices.
  - Fix extending RAID 4/5/6 logical volumes.
  - Never issue discards when LV extents are being reconfigured, not deleted.
  - Allow release_lv_segment_area to fail as functions it calls can fail.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.2
changelog:
  - Make lvremove ask before discarding data areas.
  - Don't try to issue discards to a missing PV to avoid segfault.


author: Dan Williams <dcbw@redhat.com> - 0.8.1-25
changelog:
  - core: rebase bonding patch to latest upstream git master (rh #717475)
  - core: add support for VLAN interfaces (rh #712302)
  - docs/cli: fix some infiniband omissions (rh #685096)


author: Jiří Klimeš <jklimes@redhat.com> - 0.8.1-27
changelog:
  - core: add keyfile plugin support for InfiniBand (rh #685096)
  - core: use capital 'B' in InfiniBand name (rh #685096)
  - docs: fix some docs generation errors (rh #685096) (rh #717475) (rh #712302)


author: Dan Williams <dcbw@redhat.com> - 1:0.8.1-31
changelog:
  - core: fix carrier handling on devices that don't support carrier detection
  - core: fix handling of bond/VLAN enable config option (rh #804797)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.8.1-34
changelog:
  - core: always use Opportunistic Key Caching with WPA-Enterprise (rh #834444)
  - ifcfg-rh: fix handling of EAP-LEAP connections (rh #833199)
  - applet: preserve WPA protocol and ciphers when editing connections (rh #834349)
  - applet: show WPA protocol widget when GConf key is set (rh #813573)


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.9.rc1
changelog:
  - fix race condition in the resolver module
  - nslookup: return non-zero exit code when fail to get answer (#816164)


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-25
changelog:
  - gfs_controld: don't ignore dlmc_fs_register error
    Resolves: rhbz#753300
  - gfs2_edit savemeta: crosswrite four patches from upstream (4 patches)
    Resolves: rhbz#749864
  - gfs2_utils: gfs2_grow fails to grow a filesystem with less than 3 RGs
    Resolves: rhbz#742595
  - gfs2_utils: Improve error messages
    Resolves: rhbz#742293


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-26
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - config: make altname validation position indipendent
    Resolves: rhbz#740552
  - config: drastically improve cman RRP configuration handling
    Resolves: rhbz#733298
  - cman: Improve quorum timer handling how quorum timers work
    Resolves: rhbz#759603
  - qdiskd: Make multipath issues go away
    Resolves: rhbz#678372


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-27
changelog:
  - fenced: fix handling of startup partition merge
    dlm_controld: fix handling of startup partition merge
    Resolves: rhbz#750314


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-30
changelog:
  - config: update relax ng schema to include totem miss_count_const
    Resolves: rhbz#804938
  - cman init: fix start sequence error handling
    Resolves: rhbz#806002


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-32
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - cman notifyd: deliver cluster status on startup
    Resolves: rhbz#819787


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-43
changelog:
  - The scheduler might leave old job data files in the spool directory
    (STR #3795, STR #3880, bug #735505).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-45
changelog:
  - Don't create zero-length request files (bug #740093).
  - The lp and lpr commands did not cancel jobs queued from stdin on an error
    (STR #4015, bug #738914).
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #738410)


author: Ray Strode <rstrode@redhat.com> 2.30.4-27
changelog:
  - Fix leak in xdmcp chooser
    Resolves: #723515
  - Don't show shutdown/restart buttons when non-functional
    Resolves: #645453


author: Ray Strode <rstrode@redhat.com> 2.30.4-28
changelog:
  - Place pointer thoughtfully, so it doesn't show up on a random
    monitor, or on top of the user list.
    Resolves: #670619


author: Ray Strode <rstrode@redhat.com> 2.30.4-30
changelog:
  - Add small delay between consecutive messages,
    instead of immediately overwriting any previous messages.
    Resolves: #661618, #708430


author: Ray Strode <rstrode@redhat.com> 2.30.4-31
changelog:
  - Rebuild with -fno-strict-aliasing to quiet rpmdiff
    Related: #670619, #661618, #708430, #688158, #645453, #628462, #622561


author: Ray Strode <rstrode@redhat.com> 2.30.4-33
changelog:
  - Increase X server verbosity by default, and increase it even
    more when debug is enabled.
    Resolves: #738462


author: Ian Kent <ikent@redhat.com> - 5.0.5-46
changelog:
  - bz787595 - /bin/ls --color=auto takes very long on dir with lots of symlinks to
    automounted NFS filesystems
    - fix rework error return handling in rpc code.
  - Related: rhbz#787595


author: Ian Kent <ikent@redhat.com> - 5.0.5-47
changelog:
  - bz787595 - /bin/ls --color=auto takes very long on dir with lots of symlinks to
    automounted NFS filesystems
    - allow MOUNT_WAIT to override probe.
    - improve UDP RPC timeout handling.
  - Related: rhbz#787595


author: Ian Kent <ikent@redhat.com> - 5.0.5-48
changelog:
  - bz787595 - /bin/ls --color=auto takes very long on dir with lots of symlinks to
    automounted NFS filesystems
    - use strtok_r() in linux_version_code().
  - Related: rhbz#787595


author: Ian Kent <ikent@redhat.com> - 5.0.5-49
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - fix sss wildcard match.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-50
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - fix dlopen() error handling in sss module.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-51
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - fix configure string length tests for sss library. 
    - add BuildRequires for sssd to ensure sss support is added.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-52
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - also add BuildRequires for libsss_autofs.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-53
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - fix libsss_autofs not available at build.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-54
changelog:
  - bz683523 - [RFE] Use sssd (when available) for automounter map
    lookups in LDAP
    - revert fix libsss_autofs not available at build.
  - Related: rhbz#683523


author: Ian Kent <ikent@redhat.com> - 5.0.5-55.el6_3
changelog:
  - bz870929 - automount segfaults during the boot-up sequence
    - fix mountd vers retry.
    - fix initialization in rpc create_client().
    - fix libtirpc name clash.
    - fix get_nfs_info() can incorrectly fail.
  - Resolves: rhbz#870929


author: Marek Grac <mgrac@redhat.com> - 3.1.5-9
changelog:
  - fence_ipmilan exposes user password on verbose mod
    Resolves: rhbz#732372
  - fence_ipmilan should honor ipmilan's -L option (privileges)
    Resolves: rhbz#726571


author: Marek Grac <mgrac@redhat.com> - 3.1.5-10
changelog:
  - fence_kdump: Newly detected Coverity defect (null dereference)
    Resolves: rhbz#734429
  - fence_scsi: fix scsi unfencing to allow simultaneous unfences
    Resolves: rhbz#738384


author: Marek Grac <mgrac@redhat.com> - 3.1.5-11
changelog:
  - fence_ipmilan: Parsing args for password script
    Resolves: rhbz#740484
  - fence_rsb: Porting RSB fence agent to fencing library (ssh support added)
    Resolves: rhbz#742003
  - fence_rhevm: Incorrect power status detection
    Resolves: rhbz#769681
  - fence_vmware_soap: Support for alias names as ports
    Resolves: rhbz#771211
  - fence_ipmilan: Possible buffer overflow
    Resolves: rhbz#771936
  - fence_vmware_soap: Support for more than 100 virtual machines
    Resolves: rhbz#772597


author: Marek Grac <mgrac@redhat.com> - 3.1.5-12
changelog:
  - fence_ipmilan: doesn't respect power_wait option for power off
    Resolves: rhbz#787706
  - fencing: Missing password is not reported properly
    Resolves: rhbz#785091
  - fencing: fence_<agent> metadata behaviour and docs 
    Resolves: rhbz#714841


author: Marek Grac <mgrac@redhat.com> - 3.1.5-16
changelog:
  - fence agents: attribute unique in XML metadata should be set 0
    Resolves: rhbz#806883
  - fence_ipmilan: Typo
    Resolves: rhbz#806912
  - fence_ipmilan: Return code can be invalid with -M cycle
    Resolves: rhbz#806897


author: Marek Grac <mgrac@redhat.com> - 3.2.5-17.1
changelog:
  - fence_vmware_soap: Improve speed of fencing and do not fail on 
  	machines without UUID
  - Resolves: rhbz#872620


author: Daniel Novotny <dnovotny@redhat.com> 5.0.0-4
changelog:
  - removed wxWidgets version of the administration frontend (#564091)
    please use bacula-console-bat instead


author: Jan Görig <jgorig@redhat.com> 5.0.0-6
changelog:
  - initscripts improvements
  - fixed consolehelper settings and menu entries
  - Resolves: rhbz#587254 rhbz#587924


author: Jan Görig <jgorig@redhat.com> 5.0.0-7
changelog:
  - fixed multilib issue (#594115)
  - removed hostnames from bconsole.config (#603052)
  - fixed desktop files (#603061)
  - unconfigured service now returns correct return code


author: Jan Görig <jgorig@redhat.com> 5.0.0-8
changelog:
  - added applybaculadate (#651776)
  - fixed umask in make_catalog_backup.pl (#651780)
  - added support for changing bacula user and group in syconfig files
    and changed privilegies of bacula-dir.conf (#651786)
  - fixed bscan alternatives links (#651787)
  - fixed tray monitor default config (#657297)
  - fixed showing wrong size of incremental backup (#689400)


author: Jan Görig <jgorig@redhat.com> 5.0.0-9
changelog:
  - upgrade scriptlet for (#651787)
  - added chkconfig dependency (#712804)
  - added shadow-utils dependency (#712794)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 5.0.0-10
changelog:
  - put correct port in my.cnf (#756803)
  - shows correct job and file retention periods (#802158)
  - build with $RPM_OPT_FLAGS, show compiler commands in build log (#729008)
  - include /var/log/bacula.log and /var/log/bacula/ in logwatch (#728693)
  - ensure that /var/spool/bacula/log has correct selinux context (#728697)


author: Martin Stransky <stransky@redhat.com> - 10.0.8-2
changelog:
  - Fixed rhbz#865284 - add the storage.nfs_filesystem
    config key to property list
  - disable OOP for wrapped plugins (nspluginwrapper)


author: Petr Lautrbach <plautrba@redhat.com> - 2.1.23-13.el6_3.1
changelog:
  - release the GSSAPI server credential handle immediately after the
    GSSAPI security context is established (#825863)


author: Jan Synáček <jsynacek@redhat.com> - 0.17-52
changelog:
  - Add listening timeout to avoid hanging up when ftp is executed in active mode
    and ftp-data port is blocked (#852636)
  - Plug memleaks in append, put and send commands (#786004)


author: Ray Strode <rstrode@redhat.com> 2.28.2-13
changelog:
  - GDM doesn't handle keyboard selection for the session anymore,
    yet it still claims to.  Ignore what it says.
    Resolves: #693843


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.2-17
changelog:
  - wacom: add support for NV-CONTROL extension (#805036)
  - wacom: fix button mapping (#805042)
  - wacom: add LED support from upstream (#805064)
    Resolves: #805036 #805042 #805064


author: Deji Akingunola <dakingun@gmail.com> - 0.1.0-3
changelog:
  - Rebuild for babl-0.1.2
  - Backport upstream patch that removed babl processing time instrumentation


author: Nils Philippsen <nils@redhat.com> - 0.1.2-1
changelog:
  - version 0.1.2
  - remove obsolete cflags, babl-instrumentation, autoreconf patches
  - backported: don't leak each node set on a GeglProcessor


author: Nils Philippsen <nils@redhat.com>
changelog:
  - avoid buffer overflow in gegl_buffer_header_init()
  - correct gegl library version, use macro for it


author: Nils Philippsen <nils@redhat.com> - 0.1.2-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because gegl is likely to deal with data coming from untrusted
    sources


author: Richard Hughes <rhughes@redhat.com> - 2.28.2-1
changelog:
  - Update to 2.28.2
  - Remove the original package from the dep-confirmation screen
  - Ignore generic errors such as 'Failed' and do not show UI in this case
  - Use the desktop icon when we unselect the installed application in gpk-application. Fixes fd#25098


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-0.1.20091211git
changelog:
  - New snapshot from the gnome-2-28 branch
  - Don't show the selected packages as deps of the to be updated packages.
    Note, this only affects PackageKit >= 0.5.5. Fixes rh#546247
  - Check the GpkDbusTask object only replies once to each session request


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - When we ask to logout, actually logout, rather than shutdown
  - Don't hide the restart status icon just because the daemon exited
  - Don't check for updates every day when the user had specified 'Never'
  - Allow the user to select the GPG key information to be able to verify it
  - Fix the error when the user clicks the about menu item
  - Fix a crash where the desktop file that was installed has no root directory
  - Fix a crash when the process-working icon has zero height
  - Resolves: #585086


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-2
changelog:
  - Backport a patch from upstream that adds support for support media repos
    such as those found on additional CDs or DVDs.
  - This patch just calls GetUpdates after a detected media repo is inserted,
    which is enough for PackageKit to add the repo to the default set, and for
    the repo to be used in all the GNOME and KDE tools.
  - This patch will not add explicit support for media repos in client programs,
    so the media is not requested if it is not inserted when the package tools
    are open. This functionality can be backported at a later time if required.
  - Resolves: #591534


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Don't allow shutting down when a transaction is active and cannot
    be cancelled.
  - Resolves: #669798


author: Karel Zak <kzak@redhat.com> 2.17.2-11
changelog:
  - fix #678306 - introduce safe variant of uuid_generate_time(), fix locking of counter file
  - fix #678378 - util-linux-ng code review


author: Karel Zak <kzak@redhat.com> 2.17.2-12.1
changelog:
  - fix #723546 - Defects revealed by Coverity scan
  - fix #723352 - cfdisk cannot read default installer partitioning
  - fix #712158 - uid/gid overflow in ipcs
  - fix #696959 - wipefs(8) reject partitioned devices
  - fix #694648 - document blank line at head of fstab
  - fix #684203 - umount fails on inconsistent fstab
  - fix #679831 --lines does not work
  - fix #679741 - canonicalize swap device
  - fix #692119 - include fstrim tool
  - fix #675999 - blkid crashes on a server with more than 128 storage devices
  - fix #696731 - display failed login attempts
  - fix #726092 - Pass host name from agetty to login
  - fix #716995 - Remove Deprecation Statement in /etc/udev/rules.d/60-raw.rules
  - fix #712808 - uuidd should depend on chkconfig
  - fix #723638 - Backport upstream extensions for lsblk (RHEL6.2)


author: Karel Zak <kzak@redhat.com> 2.17.2-12.4
changelog:
  - fix CVE-2011-1675 - mount fails to anticipate RLIMIT_FSIZE
  - fix CVE-2011-1677 - umount may fail to remove /etc/mtab~ lock file


author: Karel Zak <kzak@redhat.com> 2.17.2-12.5
changelog:
  - fix #588419 - Changing the console login timeout
  - fix #740163 - 'fdisk -l' returns confusing output
  - fix #785142 - uuidd service not active by defaul
  - fix #797888 - script does not play well with csh when invoked from within /etc/csh.login


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-1
changelog:
  - Update to snapshot
  - Fix text subtitles causing hangs on startup
  - Fix missing plugins installation requiring a restart
  - Queue2 element moved to gstreamer core


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-2
changelog:
  - Fix theoradec bug with timestamps for Empathy video calls (#537170)
  - Fix text subtitle display regression (#537559)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.10.1.el6]
changelog:
  - [mm] hugetlbfs: close race during teardown of hugetlbfs shared page tables (Rafael Aquini) [857334 856325]
  - [mm] hugetlbfs: Correctly detect if page tables have just been shared (Rafael Aquini) [857334 856325]
  - [kernel] sched: fix divide by zero at {thread_group,task}_times (Stanislaw Gruszka) [856703 843771]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.11.1.el6]
changelog:
  - [net] core: Fix napi_gro_frags vs netpoll path (Amerigo Wang) [857854 845347]
  - [netdrv] benet: disable BH in callers of be_process_mcc() (Amerigo Wang) [857854 845347]
  - [net] bonding: remove IFF_IN_NETPOLL flag (Amerigo Wang) [857854 845347]
  - [mm] fix contig_page_data kABI breakage and related memory corruption (Satoru Moriya) [857012 853007]
  - [net] sctp: backport sctp cache ipv6 source after route lookup (Michele Baldessari) [858284 855759]
  - [net] sctp: backport support of sctp multi-homing ipv6 source address selection (Michele Baldessari) [858284 855759]
  - [net] ipv6: backport RTA_PREFSRC ipv6 source route selection support (Michele Baldessari) [858285 851118]
  - [netdrv] sfc: Fix maximum number of TSO segments and minimum TX queue size (Nikolay Aleksandrov) [845556 845557] {CVE-2012-3412}
  - [s390] zfcp: No automatic port_rescan on events (Hendrik Brueckner) [856316 855131]
  - [fs] xfs: push the AIL from memory reclaim and periodic sync (Dave Chinner) [856686 855139]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.12.1.el6]
changelog:
  - [netdrv] mlx4: check promisc on proper port (Doug Ledford) [858955 854052]
  - [netdrv] mlx4: attach multicast with correct flag (Doug Ledford) [858956 854376]
  - [netdrv] mlx4: remove redundant adding of steering type to gid (Doug Ledford) [859436 854053]
  - [netdrv] Revert: Fix a merge issue (Doug Ledford) [859436 854053]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.13.1.el6]
changelog:
  - [net] sctp: Implement quick failover draft from tsvwg (Neil Horman) [861953 830716]
  - [net] sctp: be more restrictive in transport selection on bundled sacks (Neil Horman) [861953 830716]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.14.1.el6]
changelog:
  - [usb] usbhid: Fix use-after-free in USBHID (James Paradis) [864827 857518]
  - [usb] Add kernel parameter to force io_watchdog for Intel EHCI HCD (James Paradis) [865713 846024]
  - [block] Fix hanging kernel threads in blk_execute_rq() (James Paradis) [865308 855984]
  - [mm] hugetlb: do not use vma_hugecache_offset() for vma_prio_tree_foreach (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugepages: fix use after free bug in "quota" handling (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix pgoff computation when unmapping page from vma (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix ENOSPC returned by handle_mm_fault() (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [fs] gfs2: Write out dirty inode metadata in delayed deletes (Frantisek Hrbata) [859326 748827]
  - [usb] core: Fix device removal race condition (James Paradis) [864821 849188]
  - [mm] x86_32: fix SHLIB_BASE address typo (Aristeu S. Rozanski F) [804955 804956] {CVE-2012-1568}
  - [hid] hidraw: fix window in hidraw_release (Don Zickus) [841824 839973]
  - [hid] hidraw: protect hidraw_disconnect() better (Don Zickus) [841824 839973]
  - [hid] hidraw: remove excessive _EMERG messages from hidraw (Don Zickus) [841824 839973]
  - [hid] hidraw: fix hidraw_disconnect() (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_write (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_ioctl (Don Zickus) [841824 839973]
  - [hid] remove BKL from hidraw (Don Zickus) [841824 839973]
  - [mm] x86_32: randomize SHLIB_BASE (Aristeu Rozanski) [804955 804956] {CVE-2012-1568}
  - [block] fix up use after free in __blkdev_get (Jeff Moyer) [853943 847838]
  - [scsi] remove no longer valid BUG_ON in scsi_lld_busy (Jeff Garzik) [860640 842881]
  - [scsi] fix NULL request_queue in scsi_requeue_run_queue() (Jeff Garzik) [860640 842881]
  - [net] svcrpc: fix BUG() in svc_tcp_clear_pages (J. Bruce Fields) [856106 769045]
  - [scsi] lpfc: Fixed SCSI device reset escalation (Rob Evers) [861390 827566]
  - [scsi] lpfc: Fix abort status (Rob Evers) [861390 827566]
  - [kernel] cgroup: add cgroup_root_mutex (Frederic Weisbecker) [858954 844531]
  - [mm] Hold a file reference in madvise_remove (Jerome Marchand) [849738 849739] {CVE-2012-3511}
  - [base] driver-core: fix device_register race (Rob Evers) [860784 833098]
  - [netdrv] e1000e: drop check of RXCW.CW to eliminate link going up and down (Dean Nelson) [857055 847310]
  - [scsi] be2iscsi: Format the MAC_ADDR with sysfs (Rob Evers) [863147 827594]
  - [usb] usbdevfs: Add a USBDEVFS_GET_CAPABILITIES ioctl (Don Zickus) [841667 828271]
  - [fs] udf: fix retun value on error path in udf_load_logicalvol (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Avoid run away loop when partition table length is corrupted (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Use 'ret' instead of abusing 'i' in udf_load_logicalvol() (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [netdrv] bnx2x: Add remote-fault link detection (Michal Schmidt) [852450 814877]
  - [net] sunrpc: svc_xprt sends on closed socket should stop immediately (J. Bruce Fields) [853257 849702]
  - [mm] Never OOM kill tasks outside of memory cgroup when memory.limit_in_bytes is exceeded by a Transparent Huge Page (Larry Woodman) [860942 811255]
  - [powerpc] pseries: Support lower minimum entitlement for virtual processors (Steve Best) [860165 822651]
  - [usbhid] hiddev: Consolidate device existence checks in hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: Fix race between disconnect and hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: protect against disconnect/NULL-dereference race (Don Zickus) [841824 839973]
  - [crypto] algapi: Move larval completion into algboss (Herbert Xu) [854476 832135]
  - [fs] xfs: disable xfsaild idle mode (Brian Foster) [860787 813137]
  - [fs] xfs: fix the logspace waiting algorithm (Brian Foster) [860787 813137]
  - [fs] xfs: add AIL pushing tracepoints (Brian Foster) [860787 813137]
  - [fs] xfs: force the log if we encounter pinned buffers in .iop_pushbuf (Brian Foster) [860787 813137]
  - [fs] xfs: do not update xa_last_pushed_lsn for locked items (Brian Foster) [860787 813137]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.17.1.el6]
changelog:
  - [mm] Prevent kernel panic in NUMA related system calls after memory hot-add (Larry Woodman) [875382 870350] {CVE-2012-5517}
  - [md] Don't truncate size at 4TB for RAID0 and Linear (Jes Sorensen) [866470 865637]
  - [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [fs] ext4: fix undefined behavior in ext4_fill_flex_info() (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [kernel] sched_rt: Ignore RT queue throttling if idle task has RT policy (Igor Mammedov) [853950 843541]
  - [kernel] sched: Create special class for stop/migrate work (Igor Mammedov) [853950 843541]
  - [net] ipv6: fix overlap check for fragments (Amerigo Wang) [874550 819952] {CVE-2012-4444}
  - [net] ipv6: discard overlapping fragment (Jiri Pirko) [874550 819952] {CVE-2012-4444}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.18.1.el6]
changelog:
  - [scsi] sd: fix crash when UA received on DIF enabled device (Ewan Milne) [876487 865682]
  - [mm] hugetlb: fix non-atomic enqueue of huge page (Rafael Aquini) [876101 869750]
  - [x86] amd_iommu: attach device fails on the last pci device (Don Dutile) [876493 861164]
  - [net] nfs: Fix buffer overflow checking in __nfs4_get_acl_uncached (Frantisek Hrbata) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix the acl cache size calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix range checking in __nfs4_get_acl_uncached and __nfs4_proc_set_acl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: nfs_getaclargs.acl_len is a size_t (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Don't use private xdr_stream fields in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix pointer arithmetic in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Simplify the GETATTR attribute length calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Add the helper xdr_stream_pos (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Don't decode beyond the end of the RPC reply message (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Clean up xdr_set_iov() (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: xdr_read_pages needs to clear xdr->page_ptr (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid beyond bounds copy while caching ACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid reading past buffer when calling GETACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [scsi] ibmvfc: Fix double completion on abort timeout (Steve Best) [876088 865115]
  - [net] core: allocate skbs on local node (Andy Gospodarek) [876491 843163]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.19.1.el6]
changelog:
  - [drm] i915: don't clobber the pipe param in sanitize_modesetting (Frantisek Hrbata) [876549 857792]
  - [drm] i915: Sanitize BIOS debugging bits from PIPECONF (Frantisek Hrbata) [876549 857792]
  - [net] fix divide by zero in tcp algorithm illinois (Flavio Leitner) [871920 866514] {CVE-2012-4565}
  - [fs] xfs: fix reading of wrapped log data (Dave Chinner) [876499 874322]
  - [x86] mm: fix signedness issue in mmap_rnd() (Petr Matousek) [876496 875036]
  - [net] WARN if struct ip_options was allocated directly by kmalloc (Jiri Pirko) [877950 872799]
  - [fs] block_dev: Fix crash when block device is read and block size is changed at the same time (Frantisek Hrbata) [864826 855906]
  - [mm] tracing: Move include of trace/events/kmem.h out of header into slab.c (Jeff Moyer) [864826 855906]
  - [mm] slab: Move kmalloc tracepoint out of inline code (Jeff Moyer) [864826 855906]
  - [netdrv] bnx2x: organize BDs calculation for stop/resume (Frantisek Hrbata) [874022 819842]
  - [netdrv] bnx2x: fix panic when TX ring is full (Michal Schmidt) [874022 819842]


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885310


author: Deepak Bhole <dbhole@redhat.com> 1.1.1-1
changelog:
  - Bump to 1.1.1
  - Removed icedtea-web-shared-classloader.patch (now upstream)
  - Updated alternative removal commands to reflect the situation in RHEL6
  - Resolves: rhbz#713514


author: Deepak Bhole <dbhole@redhat.com> 1.1.2-1
changelog:
  - Updated to 1.1.2
  - Resolves: rhbz#683479
  - Resolves: rhbz#725794
  - Resolves: rhbz#718181 
  - Resolves: rhbz#731358
  - Resolves: rhbz#725718
  - Use the new --with-jre-home switch (#731358)


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6
changelog:
  - Updated priority to be > 17000 and to depend on buildver variable
  - Variable buildver increased to 5 as it should be
  - Resolves: rhbz#828759


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6
changelog:
  - Added patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
    to fix vulnerability until it is fixed in upstream sources. 
  - Resolves: rhbz#852299


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6.3
changelog:
  - Removed patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
  - Applied upstream patches for same issue:
     patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
     patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
     patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
     patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
     patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
  - Resolves: rhbz#852299


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6.4
changelog:
  - Cleanup before security release
  - Removed patches:
     patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
     patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
     patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
     patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
     patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
  - Resolves: rhbz#852299


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el6
changelog:
  - Updated to 2.3.3
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.2.el6
changelog:
  - Sync with 6.4
  - introduced tmp-patches source tarball
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#880352


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895033


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.4.1.el6
changelog:
  - Rewerted to IcedTea 2.3.4
    - rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
    - removed jxmd and idlj to alternatives
    - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
    - re-applied patch302 and restored systemtap.patch
    - buildver set to 9
    - icedtea_version set to 2.3.4
    - unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
    - restored tmp-patches source tarball
    - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
    - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
      java.security-linux back to java.security
  - Resolves: rhbz#895033


author: Dave Young <dyoung@redhat.com> - 2.0.0-242
changelog:
  - add s390x support in firstboot, resolve bug 805040
  - deal with s390x threshold in firstboot, resolve bug 805040


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-18.el6
changelog:
  - numad: Set memory policy from numad advisory nodeset (rhbz#810157)
  - numad: Copy 'placement' of <numatune> to <vcpu> by default (rhbz#810157)
  - numad: Always output 'placement' of <vcpu> (rhbz#810157)
  - qemu: Avoid the memory allocation and freeing (rhbz#810157)
  - numad: Divide cur_balloon by 1024 before passing it to numad (rhbz#810157)
  - numad: Check numactl-devel if compiled with numad support (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.2
changelog:
  - qemu_hotplug: Don't free the PCI device structure after hot-unplug (rhbz#836916)
  - nodeinfo: Drop static variable (rhbz#836919)
  - nodeinfo: Avoid probing host filesystem during test (rhbz#836919)
  - nodeinfo: Add some more tests (rhbz#836919)
  - nodeinfo: Get the correct CPU number on AMD Magny Cours platform (rhbz#836919)
  - nodeinfo: Test more details (rhbz#836919)
  - drop sanlock on i686 since it is not available anymore


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.3
changelog:
  - sanlock: Fix locking for readonly devices (rhbz#838819)
  - Add support for shared sanlock leases (rhbz#838819)
  - Fix compilation on older sanlock (rhbz#838819)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.4
changelog:
  - daemon: Fix crash in virTypedParameterArrayClear (rhbz#844735)
  - remote: Fix locking in stream APIs (rhbz#847946)
  - Using virOnce for global initialization is desirable (rhbz#847959)
  - json: Fix interface locale dependency (rhbz#847959)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.5
changelog:
  - security: Fix libvirtd crash possibility (CVE-2012-4423)
  - Fix augeas test of shared sanlock leases (rhbz#858988)
  - qemu augeas: Add spice_tls/spice_tls_x509_cert_dir (rhbz#858988)
  - Fix mistakes in augeas lens (rhbz#858988)
  - qemu: Fix failure path in disk hotplug (rhbz#859376)
  - blockjob: Relabel entire existing chain (rhbz#860720)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.6
changelog:
  - rpc: Switch to dynamically allocated message buffer (rhbz#869650)
  - rpc: Size up RPC limits (rhbz#869650)
  - client: Free message when freeing client (rhbz#869650)
  - nodeinfo_test: Enhance test data before changing nodeinfo gathering (rhbz#869723)
  - nodeinfo: Fix gathering of nodeinfo data structure (rhbz#869723)
  - test: Add new test case for nodeinfotest (rhbz#869723)
  - test: Add test case for nodeinfotest if host machine doesn't have NUMA (rhbz#869723)
  - nodeinfo: Deal with offline cpus in a node (rhbz#869723)
  - qemu: Always format CPU topology (rhbz#868972)
  - iohelper: Fdatasync() at the end (rhbz#873292)
  - iohelper: Don't report errors on special FDs (rhbz#873292)
  - Introduce new VIR_DOMAIN_EVENT_SUSPENDED_API_ERROR event (rhbz#874235)
  - qemu: Emit event if 'cont' fails (rhbz#874235)
  - qemu: Allow migration to be cancelled at prepare phase (rhbz#875770)
  - AbortJob: Fix documentation (rhbz#875770)
  - qemu: Avoid deadlock on HandleAgentEOF (rhbz#875788)


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-17
changelog:
  - fix #703389 - fixed file permissions in /usr/lib/mailman
  - fix #636825 - fix #!/usr/bin/env python shebang in migrate-fhs
  - fix #704699 - fixed directories permissions in /usr/lib/mailman
  - fix #684622 - do not create and install /etc/mailman/mm_cfg.pyc and pyo files


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-18
changelog:
  - fix #834023 - escape From in email body properly
  - fix #832920 - fix word-wrap in web front-end
  - fix #772998 - fix reset_pw.py script
  - fix #799323 - handle urlhost in newlist script


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-1
changelog:
  - Update to 2.16.2
  - Mark /etc/crond.d/mrtg file as "noreplace" to keep current setup
    during mrtg update
    Related: #391261
  - Fix mrtg complains of undefined subroutine AF_UNSPEC
    Resolves: #451783


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-7
changelog:
  - Fix kMG option with more number of values causes segmentation fault
    Resolves: #707188
  - Fix cfgmaker doesn't use ifHighSpeed on IBM FibreChannel switches
    Resolves: #836197


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html
    including fixes for CVE-2010-1621, CVE-2010-1626,
    CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #590598
  - Create mysql group explicitly in pre-server script, to ensure correct GID


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.61-1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787192


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871813


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155.9
changelog:
  - Fix cron_admin_role() to make sysadm cronjobs running in sysadm_t instead of cronjob_t which causes issues in MLS
  Resolves:#878360


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155.13
changelog:
  - Allow consolehelper-gtk to connect to xserver port
  - Make rhev_agentd_consolehelper_t also as permissive domain
  - Allow rhev-agentd to connect to xserver
  Resolves:#886210


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155.14
changelog:
  - Apache is sending sinal to openshift_initrc_t now
  - Dontaudit attempts by openshift to read apache logs
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow quota to manage openshift_var_lib_t directories
  Resolves:#888381


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-8
changelog:
  - switch to only munging the contents of /etc/nslcd.conf on the very first
    install (#706454)
  - make sure that we have enough space to parse any valid GID value when
    parsing a user's primary GID (#716822,#720230)
  - tweak the default "validnames" setting to also allow shorter and shorter
    names to pass muster (#706860)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-9
changelog:
  - include backported enhancement to take URIs in the form "dns:DOMAIN" in
    addition to the already-implemented "dns" (#730309)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-10
changelog:
  - update the validnames changes to the self-tests so that their expectations
    match the modified defaults (#737496)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-11
changelog:
  - do not overflow big UID values, use explicit base when converting UIDs
    and GIDs to integer types (#741362)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-14
changelog:
  - run the config file upgrade in %posttrans to avoid problems on multilib
    (#706454)
  - convert UID to long long on all arches to catch negative values (#741362)


author: David Knox <dknox@redhat.com> 0:6.0.24-37
changelog:
  - resolves: cve-2011-3190 rhbz 738504
  - resolves: cve-2011-2204 rhbz 738504
  - resolves: cve-2011-2526 rhbz 738504
  - resolves: cve-2011-1184 rhbz 738504
  - resolves: rhbz 698624 - revisited


author: David Knox <dknox@redhat.com> 0:6.0.24-38
changelog:
  - resolves: rhbz 748813 NPE w/no data in chunked POST request
  -  Not included in 6.2. Slated for 6.3


author: David Knox <dknox@redhat.com> 0:6.0.24-41
changelog:
  - Resolves: rhbz 782400 - remove redhat-lsb dependency
  - Resolves: rhbz 726169 (783407) - Unable to compile class for JSP
  - Resolves: rhbz 783567 - tag attributes parsing throws exception


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-73
changelog:
  - remove openssh-4.3p2-no-v6only.patch (#732955)
  - adjust Linux out-of-memory killer (#744236)
  - fix sshd init script - check existence of crypto (#797384)
  - add RequiredAuthentications[12] (#657378)
  - run privsep slave process as the users SELinux context (#798241)


author: Tom Lane <tgl@redhat.com> 2.2.14-1
changelog:
  - Update to unixODBC 2.2.14.  Note this involves an ABI break and a consequent
    soname version bump, because upstream fixed some mistakes in the widths of
    some API datatypes for 64-bit platforms.  Also, the formerly embedded
    mysql, postgresql, and text drivers have been removed.  (For mysql and
    postgresql, use the separate mysql-connector-odbc and postgresql-odbc
    packages, which are far more up to date.  The text driver is not currently
    shipped by upstream at all, but might get revived as a separate SRPM later.)
  - Stop shipping .a library files, per distro policy.
  - Fixes for libtool 2.2.


author: Peter Lemenkov <lemenkov@gmail.com> - 2.2.14-4
changelog:
  - Properly install *.desktop files
  - No need to ship INSTALL in docs
  - Use macros instead of hardcoded /usr/share and /usr/include
  - fixed permissions on some doc- and src-files
  - Almost all rpmlint messages are gone now


author: Tom Lane <tgl@redhat.com> 2.2.14-6
changelog:
  - Switch to building against qt4, not qt3.  This means the DataManager,
    DataManagerII, and odbctest applications are gone.
  Resolves: #514064
  - Use Driver64/Setup64 to eliminate need for hand-adjustment of odbcinst.ini
  Resolves: #514688
  - Fix misdeclaration of SQLBIGINT and SQLUBIGINT in generated header files
  Resolves: #518623


author: Tom Lane <tgl@redhat.com> 2.2.14-9
changelog:
  - Sync with Fedora head
  - Fix bug preventing drivers from being selected in ODBCConfig
  Resolves: #554501
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparcv9 isn't a possible uname -i output


author: Petr Machata <pmachata@redhat.com> - 2012b-2
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820732


author: Petr Machata <pmachata@redhat.com> - 2012f-1
changelog:
  - Upstream 2012f
    - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
      and end at 3 am on Sunday 20th January 2013.  Guess it will be like
      that in following years as well.
  - Upstream 2012e
    - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.
    - Drop tzdata-2012c-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.042-2
changelog:
  - fix license tag (technically, it was correct before, but this keeps rpmlint from
    flagging this package as a false positive)


author: Hans de Goede <hdegoede@redhat.com> - 0.4.3-1
changelog:
  - Update to upstream 0.4.3 release
  - Don't crash on devices in unconfigured state
  - Resolves: rhbz#808758
  - Significantly speed up reset handling
  - Resolves: rhbz#808730


author: Jan Görig <jgorig@redhat.com> 3.2.8-17
changelog:
  - fixed bugs in procps-3.2.7-ps-cgroup.patch and procps-3.2.8-pmap-smaps.patch
  - fixed memory leaks in vmstat
  - Resolves: rhbz#684031


author: Jan Görig <jgorig@redhat.com> 3.2.8-18
changelog:
  - fix #692397 - wrong formatting of ps man page
  - fix #709684 - procps/top SWAP statistics makes no sense
    patch by KOSAKI Motohiro
  - fix #690078 - replace dlopen with build time linking
    - dropped procps-3.2.7-libselinux.patch and procps-3.2.7-ps-libselinux.patch
  - fix #690078 - nullifying variables in procps-3.2.8-pmap-smaps.patch


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-20
changelog:
  - fix #701710 - vmstat does not print out correct free page count on 8TB SGI system
  - Resolves: rhbz#701710


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-21
changelog:
  - fix #736023 - Common realloc mistake: 'screen' nulled but not freed upon failure
  - Resolves: rhbz#736023


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-22
changelog:
  - fix #751475 - top displays incorrect CPU summary the first time with CPULOOP=1
  -   Patch15: procps-3.2.7-top-env-cpuloop.patch altered
  - fix #746997 - top utility can't sort by memory usage in batch mode
  - fix #766792 - No devel headers for procps
  - Resolves: rhbz#751475 rhbz#746997 rhbz#766792


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-23
changelog:
  - fix for #757734 - top: Sorting by memory usage is not documented
  - additionally introduces other missing switches in the top man-page
  - Resolves: rhbz#746997


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-24
changelog:
  - fix for #851664 - vmstat -S M 1' and 'vmstat -S m 1' erronously
  - ... output constant 'si' and 'so' value of 0
  - Resolves: rhbz#851664


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-11
changelog:
  - Add support for 64-bit vfsv1 quota format (bugs #609795, #669598)
  - Use /proc/mounts for mountpoint scanning (#623656)
  - Add quota_nld deamon init script (bug #634137)
  - Comment example quotatab to silent warnquota (bug #663027)
  - Add GFS2 query support via RPC (bug #547748)
  - Document --always-resolve option (bug #662997)
  - Use rq_bsize to convert quotas transferred by RPC (bug #667755)
  - Make RPC block factor dynamic (bug #667755)
  - Check whether set limits fit into the range supported by quota format
    (bug #668709)
  - Check set limits fit into the range supported by RPC transport (bug #668710)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-12
changelog:
  - Do not own common directories under /etc (bug #634137)
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-13
changelog:
  - Correct spec file comment (bug #634137)
  - Add quotasync tool (bug #658586)
  - Implement quotacheck for GFS2 (bug #658586)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-14
changelog:
  - Fix vfsv0 format detection (bug #609795)
  - Initialize vfsold block and inode value boundries for new quota file
    (bug #668709)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-18
changelog:
  - Do not use real domains in warnquota example (bug #680919)
  - Disable grace period/times remote setting (bug #683554)
  - Initialize v2r1 ddquot padding in dump (bug #692390)
  - Make dirname static to work with nss_db (bug #704216)
  - Do not report missing utmp record to syslog (bug #730057)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.24.1.el6]
changelog:
  - [fs] NFS: Don't allow NFS silly-renamed files to be deleted, no signal (Frantisek Hrbata) [920264 905095]
  - [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920267 916324]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.25.1.el6]
changelog:
  - [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911266 887006]
  - [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [923850 913704]
  - [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921960 896224]
  - [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921960 896224]
  - [mm] fix potential anon_vma locking issue in mprotect() (Andrea Arcangeli) [924838 858389]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.26.1.el6]
changelog:
  - [scsi] lpfc: Fixed kernel warning on spinlock usage on some distributions (Dave Wysochanski) [956933 877149]
  - [scsi] lpfc: Correct missing queue destroy on function reset (Dave Wysochanski) [956933 877149]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.28.1.el6]
changelog:
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962367 960717]
  - [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962795 962794] {CVE-2013-2094}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.29.1.el6]
changelog:
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [964960 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Frantisek Hrbata) [964960 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [964960 952785]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.30.1.el6]
changelog:
  - [virt] kvm: fix CVE-2013-1796 and CVE-2013-1797 (Petr Matousek) [964432 964430 917025 917021] {CVE-2013-1796 CVE-2013-1797}
  - [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [964435 917032] {CVE-2013-1798}
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956295 908158]
  - [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960410 916722]
  - [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960424 916735]
  - [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960419 912867]
  - [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955503 947550]
  - [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955503 947550]
  - [virt] vhost: fix length for cross region descriptor (Michael S. Tsirkin) [953215 862265] {CVE-2013-0311}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.31.1.el6]
changelog:
  - [block] sg_io: use different default filters for each device class (Nikola Pajkovsky) [878126 875361] {CVE-2012-4542}
  - [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [878126 875361] {CVE-2012-4542}
  - [block] sg_io: pass request_queue to blk_verify_command (Paolo Bonzini) [878126 875361] {CVE-2012-4542}
  - [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Frantisek Hrbata) [960416 912842]
  - [fs] nfs: Fix a race in the pNFS return-on-close code (Frantisek Hrbata) [960416 912842]
  - [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Frantisek Hrbata) [960416 912842]
  - [fs] nfs: Fix a reboot recovery race when opening a file (Frantisek Hrbata) [952612 908524]
  - [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952612 908524]
  - [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952612 908524]
  - [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952612 908524]
  - [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Frantisek Hrbata) [952612 908524]
  - [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952612 908524]
  - [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952612 908524]
  - [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952612 908524]
  - [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952612 908524]
  - [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Frantisek Hrbata) [952612 908524]
  - [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952612 908524]
  - [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952612 908524]
  - [kernel] seqlock: optimise seqlock (Steve Dickson) [952612 908524]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [965716 920785] {CVE-2013-1848}
  - [fs] nls: improve UTF8 -> UTF16 string conversion routine (Frantisek Hrbata) [965720 916119] {CVE-2013-1773}
  - [fs] fat: Fix stat->f_namelen (Nikola Pajkovsky) [965720 916119] {CVE-2013-1773}
  - [mm] tmpfs: fix use-after-free of mempolicy object (Nikola Pajkovsky) [958696 915715] {CVE-2013-1767}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.33.1.el6]
changelog:
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977667 827548]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [969341 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [969341 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [969341 908751]
  - [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [972599 883905]
  - [kernel] sched: Add irq_{enter,exit}() to scheduler_ipi() (Stanislaw Gruszka) [976695 836964]


author: Elio Maldonado <emaldona@redhat.com> - 4.9.2-0.1
changelog:
  - Retagging to ensure n-v-r is lower than the one for rhel-6.4
  - Resolves: rhbz#891661 - [RFE] Rebase nspr to 4.9.2 due to Firefox 17 ESR


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-1
changelog:
  - Update to NSS_3_13_6_RTM
  - Resolves: rhbz#891663 - Update to 3.13.5 for mozilla 10.0.6
  - Resolves: rhbz#891151 [CVE-2013-0743]


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-2
changelog:
  - Retagging for rhel-6.3 z-stream
  - Update to NSS_3_13_6_RTM
  - Resolves: rhbz#891663 - Update to 3.13.5 for mozilla 10.0.6
  - Resolves: rhbz#891151 [CVE-2013-0743]


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
changelog:
  * Set errno=EINVAL for invalid contexts from Dan Walsh.
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.
  Resolves: #593788


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-6
changelog:
  - removed the --with-ldap-*conf options
  - added RELRO flags
    Resolves: rhbz#709235
    Resolves: rhbz#709859


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-8
changelog:
  - created a separate ldap configuration file, sudo-ldap.conf
  - visudo: mark unused aliases as warnings, not errors
  - backported signal handling from 1.7.5
  - don't disable coredumping from the code, rely on /proc/sys/fs/suid_dumpable
  - use correct SELinux context when editing files with sudoedit
  - fixed visudo syntax checks
  - fixed typos and inconsistencies in documentation
  - switched to an updated -getgrouplist patch to fix sudo -l -U <user> behavior 
    Resolves: rhbz#760843
    Resolves: rhbz#736030
    Resolves: rhbz#697775
    Resolves: rhbz#726634
    Resolves: rhbz#708515
    Resolves: rhbz#736653
    Resolves: rhbz#667120
    Resolves: rhbz#769701
    Resolves: rhbz#751680
    Resolves: rhbz#604297
    Resolves: rhbz#797511


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-9
changelog:
  - fixed uninitialized value warning introduced with the sudoedit-selinux patch
    Resolves: rhbz#806386


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10
changelog:
  - fixed bug in Runas_Spec group matching (#810147)
  - disable `sudo -l' output word wrapping if the output
    is piped (#810326)
  - fixed `sudo -i' command escaping (#806095)
    Resolves: rhbz#806095
    Resolves: rhbz#810147
    Resolves: rhbz#810326


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10.1
changelog:
  - backported ldap code modifications that fix an issue with tls_checkpeer (#810372)
    Resolves: rhbz#810372


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-11
changelog:
  - use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK (#821976)
    Resolves: rhbz#821976


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828752


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.49.1.11.5
changelog:
  - Updated to IcedTea6 1.11.5
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.55.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911524


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.5.el6_3
changelog:
  - Bumped to 2.3.5
  - Changed BR to java7-devel >= 1:1.7.0 as required by CORBA changes in 2.3.5
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.0.el6_3
changelog:
  - Removed patch1000 sec-2013-02-01-8005615.patch
  - Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
  - Removed patch1010 sec-2013-02-01-7201064.patch
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.3.7
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911529


author: Soren Sandmann <sandmann@redhat.com> 0.0.14-5.el6
changelog:
  - Add patches 

  	Ignore-devices-classes-when-matching-PCI-devices.patch
  	Only-save-the-VGA-fonts-for-the-primary-device.patch

    both related to rhbz #730729.


author: Soren Sandmann <ssp@redhat.com> 0.0.14-8.el6
changelog:
  - Add back in 0001-Rever-use-spice-protocol-defines-for-ring-size.patch
    that was accidentally dropped in -5.


author: Ulrich Obergfell <uobergfe@redhat.com> - 0.0.14-14.el6
changelog:
  - backport of upstream commit 30b4b72cdbdf9f0e92a8d1c4e01779f60f15a741
    support _ASYNC io calls and interrupt handling (busy wait)
    Related: #888364


author: Dan Williams <dcbw@redhat.com> - 1:0.6.8-7
changelog:
  - Fix supplicant initscript return value (rh #521807)
  - Fix race when connecting to WPA-Enterprise/802.1x-enabled access points (rh #508509)
  - Don't double-scan when attempting to associate


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-1
changelog:
  - Update to 0.7.3 - for nl80211 and background scanning (rh #713280)
  - Drop upstreamed and backported patches


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-4
changelog:
  - Fix issues with Opportunistic/Proactive Key Caching (OKC) (rh #813579)
  - Be less aggressive when choosing to roam (rh #837402)


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638839


author: Marek Kasik <mkasik@redhat.com> 2.3.11-7
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651762


author: Marek Kasik <mkasik@redhat.com> 2.3.11-8
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723468


author: Marek Kasik <mkasik@redhat.com> 2.3.11-13
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806269


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.10-21.el6_3.7
changelog:
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#877024)
  - tests: Reduce length of nodeinfodata test names (rhbz#877024)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#877024)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#877024)
  - Wire up handling for QMP's BALLOON_EVENT (rhbz#884713)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-7
changelog:
  - Translation updates for Red Hat Supported Languages (RH bug #575674).
  - This also includes the fix for the or_IN crasher (RH bug #578094).


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-27
changelog:
  - Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client
                            upgrade
  - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-28
changelog:
  - Resolves: rhbz#822236 - SSSD netgroups do not honor
                            entry_cache_nowait_percentage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-29
changelog:
  - Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in
                            _tevent_schedule_immediate()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-30
changelog:
  - Resolves: rhbz#824616 - sssd_nss crashes when configured with
                            use_fully_qualified_names = true


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-31
changelog:
  - Resolves: rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-32
changelog:
  - Fix protocol break for services map
  - Related:  rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-32.1
changelog:
  - Resolves: rhbz#840089 -  sssd incorrectly sets shadowLastChange in seconds
                             not days


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-32.2
changelog:
  - Resolves: rhbz#867012 - SSSD does not auto renew kerberos credentials
                            when auth_provider is 'ipa'


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-32.3
changelog:
  - Resolves: rhbz#881460 - SSSD cannot cope with empty naming context coming
                            from Novell eDirectory


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-11
changelog:
  Resolves: #771464
  Resolves: #771465
  Resolves: #771466
  Resolves: #771467
  Resolves: #771473
  Resolves: #771475


author: Patsy Franklin <pfrankli@redhat.com> - 2014c-1
changelog:
  - Rebase to 2014c
    - Egypt's government to re-apply daylight saving time.
    - zic now generates transitions for minimum time values
    - Port to Cygwin sans glibc.
    - Remove now-confusing comment about Jordan.


author: Patsy Franklin <pfrankli@redhat.com> - 2014d-1
changelog:
  - Rebase to 2014d
    - zic no longer generates files containing time stamps before
      the Big Bang.  This works around GNOME bug 730332


author: Patsy Franklin <pfrankli@redhat.com> - 2014e-1
changelog:
  - Rebase to 2014e
    - Morrocco suspends DTS for Ramadan 
         June 28 at 03:00 and August 2 at 02:00
    - Egypt suspends DTS for Ramadan
         June 26 and July 31 at 24:00


author: Patsy Franklin <pfrankli@redhat.com> - 2014f-1
changelog:
  - Rebase to 2014f
    - Several Russian time zone changes effective on 2014-10-26
      at 02:00 local time.  See NEWS file for additional details.


author: Patsy Franklin <pfrankli@redhat.com> - 2014g-1
changelog:
  - Rebase to 2014g
    - Turks & Caicos is switching from US eastern time to UTC-4
      year-round, modeled as a switch from EST/EDT to AST 
      on 2014-11-02 at 02:00.


author: Petr Machata <pmachata@redhat.com> - 2014h-1
changelog:
  - Rebase to 2014h
    - Changes to historical transitions in America/Jamaica and
      Asia/Novokuznetsk.
    - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
      Lusaka} now alias Africa/Maputo, because they don't differ in
      post-1970 stamps.
    - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
      the same reason.


author: Patsy Franklin <pfrankli@redhat.com> - 2014i-1
changelog:
  - Rebase to 2014i
    - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
    - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
      that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.


