# changelog

author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-2
changelog:
  - Make vgck warn about missing PVs.
  - Revert failed table load preparation after "create, load and resume".
  - Check if cluster log daemon is running before allowing cmirror create.
  - Add dm_create_lockfile to libdm and use for pidfiles for all daemons.
  - Correct LV list order used by lvconvert when splitting a mirror.
  - Check if LV with specified name already exists when splitting a mirror.
  - Fix suspend/resume logic for LVs resulting from splitting a mirror.
  - Fix possible hang when all mirror images of a mirrored log fail.
  - Adjust auto-metadata repair and caching logic to try to cope with empty mdas.
  - Update pvcreate, {pv|vg}change, and lvm.conf man pages about metadataignore.
  - Prompt if metadataignore with vgextend or pvchange would adjust vg_mda_copies.
  - Adjust vg_mda_copies if metadataignore given with vgextend or pvchange.
  - Speed up the regex matcher.
  - Use "nowatch" udev rule for inappropriate devices.
  - Document LVM fault handling in lvm_fault_handling.txt.
  - Clarify help text for vg_mda_count.
  - Add more verbose messages while checking volume_list and hosttags settings.
  - Add log_error when strdup fails in {vg|lv}_change_tag().
  - Do not log backtrace in valid _lv_resume() code path.
  - Remove log directly if all mirror images of a mirrored log fail.
  - Randomly select which mdas to use or ignore.
  - Add printf format attributes to yes_no_prompt and fix a caller.
  - Remove superfluous suspended device counter from clvmd.
  - Fix lvm shell crash when input is entirely whitespace.
  - Update partial mode warning message.
  - Restore the removemissing behaviour of lvconvert --repair --use-policies.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-4
changelog:
  - Fix data corruption bug in cluster mirrors.
  - Require logical volume(s) to be explicitly named for lvconvert --merge.
  - Disallow 'mirrored' log type for cluster mirrors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-5
changelog:
  - Fix clvmd init script to require proper dependencies.
  - Recognise and give preference to md device partitions (blkext major).
  - Split-mirror operations were ignoring user-specified PVs.
  - Never scan internal LVM devices.
  - Fix segfault in regex matcher with characters of ordinal value > 127.
  - Use built-in rule for device aliases: block/ < dm- < disk/ < mapper/ < other.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8
changelog:
  - Fix potential for corruption during cluster mirror device failure.
  - Fix 'lvconvert --splitmirrors' in cluster operation.
  - Ignore snapshots when performing mirror recovery beneath an origin.
  - Add suspend_lv_origin and resume_lv_origin using LCK_ORIGIN_ONLY.
  - Allow internal suspend and resume of origin without its snapshots.
  - Fix dev_manager_transient to access -real device not snapshot-origin.
  - Monitor origin -real device below snapshot instead of overlay device.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.1
changelog:
  - Fix usage of --yes flag for ReiserFS resize in fsadm.
  - Fix detection of mounted filesystems for fsadm when udev is used.
  - Fix assignment of default value to LVM variable in fsadm.
  - Fix support for --yes flag for fsadm.
  - Do not execute lvresize with --dry-run option for fsadm.
  - Fix fsadm return error code from user's break action.
  - Revert to old glibc vsnprintf behaviour in emit_to_buffer() to catch overflow.
  - Allocate buffer for metadata tags dynamically to remove 4k limit.
  - Fix the way regions are marked complete to avoid slow --nosync cmirror I/O.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.2
changelog:
  - Fix handling of online filesystem resize (using new fsadm return code).
  - Add DIAGNOSTICS section to fsadm man page.
  - Modify fsadm to return different status code for check of mounted filesystem.
  - Fix memory leak of field_id in _output_field function.
  - Allocate buffer for reporting functions dynamically to support long outputs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.3
changelog:
  - Support repetition of --addtag and --deltag arguments.
  - Add infrastructure for specific cmdline arguments to be repeated in groups.
  - Split the_args cmdline arguments and values into arg_props and arg_values.
  - Fix fsadm to not require '-f' for resize of unmounted filesystem.
  - Fix fsadm to detect mounted filesystems on older system
  - Fix regex optimiser not to ignore RHS of OR nodes in _find_leftmost_common.
  - Update VG metadata only once in vgchange when making multiple changes.
  - Allow independent vgchange arguments to be used together.
  - Fix vgchange to process -a, --refresh, --monitor and --poll like lvchange.
  - Don't take write lock in vgchange --refresh, --poll or --monitor.
  - Skip dm devices in scan if they contain only error targets or are empty.


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #593458)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)
    (#595828)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596937), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.1
changelog:
  - incorporate candidate patch to fix uninitialized pointer crash in the KDC
    (CVE-2010-1322, #636336)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.2
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #644825, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #644825, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.3
changelog:
  - pull up crypto changes made between 1.8.2 and 1.8.3 to fix upstream #6751,
    assumed to already be there for the next fix
  - incorporate candidate patch to fix various issues from MITKRB5-SA-2010-007
    (CVE-2010-1323, CVE-2010-1324, CVE-2010-4020, #651962)


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.23-1
changelog:
  - New upstream release
  - Supports smartcards now
  - Supports PSK with NSS
  - Supports libcap-ng for lowering capabilities of pluto process 
  - Updated README.nss


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-1
changelog:
  - New upstream release
  - Cisco interop patches
  - Improved init script
  - Fix to allow ";" in the ike/esp parameters
  - Fix to unset IKEv2 Critical flag for payloads defined in RFC 4306
  - Fix to Zeroize ISAKMP and IPsec SA's when in FIPS mode
  - Fix to the issue where Some programs were installed
    twice causing .old files
  - lwdns.req.log moved from /var/tmp/ to /var/run/pluto/ .
    This is to avoid an SElinux AVC Denial
  - Fix for the issueo where ipsec help shows the list twice
  - Fix for compile time warnings


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-2
changelog:
  - Modified summary in spec file
  - Replaced buildroot with RPM_BUILD_ROOT in spec file
  - Included html files in the doc package
  - Patch for disabling openswan startup at the system
    boot by default


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-3
changelog:
  Resolves: #568355 Implementation of new Diffie-Hellman groups 
                    described in RFC 5114
  Resolves: #568493 Pluto's child process can not add routes
  Resolves: #568648 some subcommand doesn't work
  Resolves: #568652 the transport mode doesn't work
  Resolves: #574833 Openswan client can not interop with 
                    Cisco VPN servers
  Resolves: #574839 ImplicitDSOLinking
  Resolves: #574841 Openswan Implementation issue related to 
                    hardcoded length of hash algorithms


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-4
changelog:
  Resolves: #579629
  Resolves: #584224
  Resolves: #586420
  Resolves: #592630
  Resolves: #594767
  Resolves: #579747
  Resolves: #587669


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * Addresses the follwing issues:
      from 3.0.11 release:
    Resolves: rhbz#583019, rhbz#583017, rhbz#583948, rhbz#584003
    * Rebase:
    Resolves: rhbz#582351
  - Stop build on ppc and ppc64.
    Resolves: rhbz#590985
  - Update list of supported agents.


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-2
changelog:
  - Add direct support for WTI VMR
    (add_direct_support_for_wti_vmr.patch)
    Resolves: rhbz#578617
  - Fix changelog for 3.0.12-1 release (add missing bugzilla entries)


author: Marek Grac <mgrac@redhat.com> - 3.0.12-3
changelog:
  - Add support for non-default TCP ports for WTI fence agent
    (add_ipport_to_wti.patch)
  - Resolves: rhbz#579059


author: Marek Grac <mgrac@redhat.com> - 3.0.12-4
changelog:
  - fence_apc fails for some port numbers
    (fence_apc_fails_for_some_port_numbers.patch)
  - Resolves: rhbz#606297


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Don't truncate fence_scsi log files
    (fence_scsi_do_not_truncate_log_file.patch)
    Resolves: rhbz#608887


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-7
changelog:
  - fence_rsb: Raise exceptions not strings with python 2.6
    (fence_rsb_raise_exceptions.patch)
    Resolves: rhbz#612941
  - fence_ilo: will throw exception if user does not have power priviledges
    (fence_ilo_will_throw_exception_if_user_has_no_power_privs.patch)
    Resolves: rhbz#615255
  - fence agents support clean up:
    drop support for baytech, brocade, mcdata, rackswitch and bullpap
    deprecate rsa and sanbox2
    rename ibmblade to bladecenter_snmp and add compatibility symlink
    (fence_rename_ibmblade_to_bladecenter_snmp_part1.patch)
    (fence_rename_ibmblade_to_bladecenter_snmp_part2.patch)
    Resolves: rhbz#616559
  - spec file changelog cleanup for older releases
  - rename Patch0 to be consistent with the others


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-8
changelog:
  - Fix syntax error in code that opens logfile.
    (fix_syntax_error_in_code_that_opens_logfile.patch)
    Resolves: rhbz#608887


author: Marek Grac <mgrac@redhat.com> - 3.0.12-8.el6_0.1
changelog:
  - Provide fence-rhev agent that uses the RHEV REST API
    (fence_rhevm.patch)
    Resolves: rhbz#642695


author: Marek Grac <mgrac@redhat.com> - 3.0.12-8.el6_0.2
changelog:
  - Support for ilo3 devices using fence_ipmilan
    (fence-agents-Add-power_wait-to-fence_ipmilan.patch)
    Resolves: rhbz#643340


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.7-19
changelog:
  - xserver-1.7.7-release-xtest-on-phys-buttons.patch: release XTEST buttons
    on physical button releases (#607150)


author: Adam Jackson <ajax@redhat.com> 1.7.7-20
changelog:
  - xserver-1.7.7-xephyr-24bpp.patch: Fix crash in Xephyr when running on a
    24bpp host framebuffer. (#581505)


author: Adam Jackson <ajax@redhat.com> 1.7.7-21
changelog:
  - xserver-1.7.7-int10-reserved-areas.patch: Fix vesa driver (and int10
    services generally) when VBIOS code exists below the VGA memory
    hole. (#605302)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.7-22
changelog:
  - xserver-1.7.7-postfix-DCE-PointerKeys.patch: post-fix event sequences by
    PointerKeys with DeviceChangeEvents (#618422)
  - xserver-1.7.7-reset-unused-classes.patch: reset the classes after copying
    them from the buffer. Fixes double-free on CloseDownDevices() exposed
    by xserver-1.7.7-postfix-DCE-PointerKeys.patch.


author: Adam Jackson <ajax@redhat.com> 1.7.7-23
changelog:
  - xserver-1.7.7-lid-hack.patch: Account for lid status when multiple outputs
    appear to be connected. (#601319)
  - xserver-1.6.99-randr-error-debugging.patch: Fix thinko to print the
    contents of the triggering request, not the address.


author: Adam Jackson <ajax@redhat.com> 1.7.7-24
changelog:
  - xserver-1.7.7-randr-cursor-dead-zones.patch: Clip cursor motion to CRTC
    boundaries if all your CRTCs are contiguous. (#585283)


author: Karel Klic <kklic@redhat.com> - 7.19.0-6
changelog:
  - Added do_curl_reset-refcount.patch: Fixed reference counting of
    Py_None in reset function
    Resolves: rhbz#624559
  - Added do_curl_reset-reinitialize-handle.patch: Proper
    re-initialization of internal settings in reset function
    Resolves: rhbz#565654


author: Radek Vokal <rvokal@redhat.com> - 1.2.5-1
changelog:
  - upgrade to 1.2.5
  - fixes security vulnaribilities, see http://www.wireshark.org/security/wnpa-sec-2009-09.html


author: Radek Vokal <rvokal@redhat.com> - 1.2.6-1
changelog:
  - upgrade to 1.2.6
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.6.html 
  - minor spec file tweaks for better svn checkout support (#553500)
  - init.lua is present always and not only when lua support is enabled
  - fix file list, init.lua is only in -devel subpackage (#552406)
  - Autoconf macro for plugin development.


author: Radek Vokal <rvokal@redhat.com> - 1.2.8-1
changelog:
  - upgrade to 1.2.8
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.8.html
  - use sitearch instead of sitelib to avoid pyo and pyc conflicts 
  - bring back -pie
  - add patch to allow decode of NFSv4.0 callback channel
  - add patch to allow decode of more SMB FIND_FILE infolevels


author: Radek Vokal <rvokal@redhat.com> - 1.2.9-1
changelog:
  - upgrade to 1.2.9
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.9.html
  - Resolves: #604312


author: Jan Safranek <jsafrane@redhat.com> 1.2.10-1
changelog:
  - upgrade to 1.2.10
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.10.html
  - Resolves: #604312 (proper fix for CVE-2010-2284)


author: Jan Safranek <jsafrane@redhat.com> 1.2.13-1
changelog:
  - upgrade to 1.2.13
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.11.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.12.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.13.html
  - Resolves: #657534 (CVE-2010-4300 CVE-2010-3445)


author: Jan Safranek <jsafrane@redhat.com> 1.2.15-1
changelog:
  - upgrade to 1.2.15
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.14.html
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html
  - Resolves: CVE-2011-0444 CVE-2011-0538 CVE-2011-0713 CVE-2011-1139
    CVE-2011-1140 CVE-2011-1141 CVE-2011-1143


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.9.1.el6]
changelog:
  - [fs] Do not mix FMODE_ and O_ flags with break_lease() and may_open() (Harshula Jayasuriya) [648408 642677]
  - [fs] aio: check for multiplication overflow in do_io_submit (Jeff Moyer) [629450 629451] {CVE-2010-3067}
  - [net] fix info leak from kernel in ethtool operation (Neil Horman) [646727 646728] {CVE-2010-3861}
  - [net] packet: fix information leak to userland (Jiri Pirko) [649899 649900] {CVE-2010-3876}
  - [net] clean up info leak in act_police (Neil Horman) [636393 636394] {CVE-2010-3477}
  - [kernel] sys_semctl: fix kernel stack leakage (Danny Feng) [648723 648724] {CVE-2010-4083}
  - [sound] sound/pci/rme9652: prevent reading uninitialized stack memory (Stanislaw Gruszka) [648710 648715 648711 648716] {CVE-2010-4080 CVE-2010-4081}
  - [mm] Prevent Out Of Memory when changing cpuset's mems on NUMA (Larry Woodman) [651996 597127]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.10.1.el6]
changelog:
  - [fs] xfs: prevent reading uninitialized stack memory (Dave Chinner) [630808 630809] {CVE-2010-3078}
  - [net] fix rds_iovec page count overflow (Jiri Pirko) [647423 647424] {CVE-2010-3865}
  - [scsi] Fix megaraid_sas driver SLAB memory leak detected with CONFIG_DEBUG_SLAB (Shyam Iyer) [649436 633836]
  - [usb] serial/mos*: prevent reading uninitialized stack memory (Don Zickus) [648697 648698] {CVE-2010-4074}
  - [kernel] ecryptfs_uid_hash() buffer overflow (Jerome Marchand) [626320 611388] {CVE-2010-2492}
  - [sound] seq/oss - Fix double-free at error path of snd_seq_oss_open() (Jaroslav Kysela) [630554 630555] {CVE-2010-3080}
  - [virt] virtio-net: init link state correctly (Jason Wang) [653340 646369]
  - [netdrv] prevent reading uninitialized memory in hso driver (Thomas Graf) [633143 633144] {CVE-2010-3298}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.11.1.el6]
changelog:
  - [kernel] posix-cpu-timers: workaround to suppress the problems with mt exec (Oleg Nesterov) [656267 656268] {CVE-2010-4248}
  - [fs] bio: take care not overflow page count when mapping/copying user data (Danny Feng) [652530 652531] {CVE-2010-4162}
  - [net] can-bcm: fix minor heap overflow (Danny Feng) [651846 651847] {CVE-2010-3874}
  - [net] filter: make sure filters dont read uninitialized memory (Jiri Pirko) [651704 651705] {CVE-2010-4158}
  - [net] inet_diag: Make sure we actually run the same bytecode we audited (Jiri Pirko) [651268 651269] {CVE-2010-3880}
  - [v4l] ivtvfb: prevent reading uninitialized stack memory (Mauro Carvalho Chehab) [648832 648833] {CVE-2010-4079}
  - [drm] via/ioctl.c: prevent reading uninitialized stack memory (Dave Airlie) [648718 648719] {CVE-2010-4082}
  - [char] nozomi: clear data before returning to userspace on TIOCGICOUNT (Mauro Carvalho Chehab) [648705 648706] {CVE-2010-4077}
  - [serial] clean data before filling it on TIOCGICOUNT (Mauro Carvalho Chehab) [648702 648703] {CVE-2010-4075}
  - [net] af_unix: limit unix_tot_inflight (Neil Horman) [656761 656762] {CVE-2010-4249}
  - [block] check for proper length of iov entries in blk_rq_map_user_iov() (Danny Feng) [652958 652959] {CVE-2010-4163}
  - [net] Limit sendto()/recvfrom()/iovec total length to INT_MAX (Jiri Pirko) [651894 651895] {CVE-2010-4160}
  - [netdrv] mlx4: Add OFED-1.5.2 patch to increase log_mtts_per_seg (Jay Fenlason) [643815 637284]
  - [kernel] kbuild: fix external module compiling (Aristeu Rozanski) [658879 655231]
  - [net] bluetooth: Fix missing NULL check (Jarod Wilson) [655667 655668] {CVE-2010-4242}
  - [kernel] ipc: initialize structure memory to zero for compat functions (Danny Feng) [648694 648695] {CVE-2010-4073}
  - [kernel] shm: fix information leak to userland (Danny Feng) [648688 648689] {CVE-2010-4072}
  - [md] dm: remove extra locking when changing device size (Mike Snitzer) [653900 644380]
  - [block] read i_size with i_size_read() (Mike Snitzer) [653900 644380]
  - [kbuild] don't sign out-of-tree modules (Aristeu Rozanski) [655122 653507]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.12.1.el6]
changelog:
  - [netdrv] igb: only use vlan_gro_receive if vlans are registered (Stefan Assmann) [652804 660192] {CVE-2010-4263}
  - [net] core: neighbour update Oops (Jiri Pirko) [660591 658518]
  - [scsi] lpfc: Set heartbeat timer off by default (Rob Evers) [660244 655935]
  - [scsi] lpfc: Fixed crashes for BUG_ONs hit in the lpfc_abort_handler (Rob Evers) [659611 645882]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.15.1.el6]
changelog:
  - [net] bonding: prevent oopsing on calling pskb_may_pull on shared skb (Andy Gospodarek) [671342 665110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.16.1.el6]
changelog:
  - [net] ipsec: fragment locally generated tunnel-mode IPSec6 packets as needed (Herbert Xu) [670421 661113]
  - [net] tcp: Increase TCP_MAXSEG socket option minimum to TCP_MIN_MSS (Frantisek Hrbata) [652510 652511] {CVE-2010-4165}
  - [perf] perf_events: Fix perf_counter_mmap() hook in mprotect() (Oleg Nesterov) [651672 651673] {CVE-2010-4169}
  - [md] dm mpath: revert "dm: Call blk_abort_queue on failed paths" (Mike Snitzer) [658854 636771]
  - [x86] UV: Address interrupt/IO port operation conflict (George Beshers) [662921 659480]
  - [mm] guard page for stacks that grow upwards (Johannes Weiner) [666796 630562]
  - [scsi] enable state transistions from OFFLINE to RUNNING (Mike Christie) [660590 643237]
  - [scsi] set queue limits no_cluster for stacked devices (Mike Snitzer) [662050 658293]
  - [mm] Out-of-memory under memory cgroup can call both of oom-killer-for-memcg and oom-killer-for-page-fault (Larry Woodman) [661732 592879]
  - [scsi] libfc: possible race could panic system due to NULL fsp->cmd (Mike Christie) [662049 638297]
  - [kernel] exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [kernel] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [virt] virtio: console: Send SIGIO in case of port unplug (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO on new data arrival on ports (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO to processes that request it for host events (Amit Shah) [652720 624628]
  - [virt] virtio: console: Reference counting portdev structs is not needed (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add reference counting for port struct (Amit Shah) [662721 628805]
  - [virt] virtio: console: Use cdev_alloc() instead of cdev_init() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a find_port_by_devt() function (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a list of portdevs that are active (Amit Shah) [662721 628805]
  - [virt] virtio: console: open: Use a common path for error handling (Amit Shah) [662721 628805]
  - [virt] virtio: console: remove_port() should return void (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make write() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make read() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Unblock poll on port hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Un-block reads on chardev close (Amit Shah) [662721 628805]
  - [virt] virtio: console: Check if portdev is valid in send_control_msg() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Remove control vq data only if using multiport support (Amit Shah) [662721 628805]
  - [virt] virtio: console: Reset vdev before removing device (Amit Shah) [662721 628805]
  - [fs] Fix nfsv4 client lock reclaim behaviour (Sachin Prabhu) [661730 638269]
  - [scsi] scsi_dh_alua: Handle all states correctly (Mike Snitzer) [659610 636994]
  - [kernel] execve: improve interactivity and respond to SIGKILL with large arguments (Dave Anderson) [661731 629178]
  - [virt] xen: handle events as edge-triggered (Andrew Jones) [661737 550724]
  - [virt] xen: use percpu interrupts for IPIs and VIRQs (Andrew Jones) [661737 550724]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.17.1.el6]
changelog:
  - [s390x] kdump: allow zfcpdump to mount and write to ext4 file systems (Amerigo Wang) [661667 628676]
  - [scsi] qla2xxx: Properly set the return value in function qla2xxx_eh_abort (Chad Dupuis) [664398 635710]
  - [scsi] qla2xxx: Drop srb reference before waiting for completion (Chad Dupuis) [664398 635710]
  - [virt] KVM: VMX: Really clear cr0.ts when giving the guest ownership of the fpu (Avi Kivity) [658891 645898]
  - [virt] KVM: SVM: Initialize fpu_active in init_vmcb() (Avi Kivity) [658891 645898]
  - [virt] KVM: x86: Use unlazy_fpu() for host FPU (Avi Kivity) [658891 645898]
  - [virt] KVM: Set cr0.et when the guest writes cr0 (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Give the guest ownership of cr0.ts when the fpu is active (Avi Kivity) [658891 645898]
  - [virt] KVM: Lazify fpu activation and deactivation (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Allow the guest to own some cr0 bits (Avi Kivity) [658891 645898]
  - [virt] KVM: Replace read accesses of vcpu->arch.cr0 by an accessor (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: trace clts and lmsw instructions as cr accesses (Avi Kivity) [658891 645898]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.18.1.el6]
changelog:
  - [netdrv] ixgbe: make sure FCoE DDP user buffers are really released by the HW (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: invalidate FCoE DDP context when no error status is available (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: avoid doing FCoE DDP when adapter is DOWN or RESETTING (Frantisek Hrbata) [674002 617193]
  - [fcoe] libfc: remove tgt_flags from fc_fcp_pkt struct (Mike Christie) [666797 633915]
  - [fcoe] libfc: use rport timeout values for fcp recovery (Frantisek Hrbata) [666797 633915]
  - [fcoe] libfc: incorrect scsi host byte codes returned to scsi-ml (Mike Christie) [666797 633915]
  - [scsi] scsi_dh_alua: fix overflow in alua_rtpg port group id check (Mike Snitzer) [673978 670572]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.5.1.el6]
changelog:
  - [security] IMA: require command line option to enabled (Eric Paris) [644636 643667]
  - [net] Fix priv escalation in rds protocol (Neil Horman) [642899 642900] {CVE-2010-3904}
  - [v4l] Remove compat code for VIDIOCSMICROCODE (Mauro Carvalho Chehab) [642472 642473] {CVE-2010-2963}
  - [kernel] tracing: do not allow llseek to set_ftrace_filter (Jiri Olsa) [631625 631626] {CVE-2010-3079}
  - [virt] xen: hold mm->page_table_lock in vmalloc_sync (Andrew Jones) [644038 643371]
  - [fs] xfs: properly account for reclaimed inodes (Dave Chinner) [642680 641764]
  - [drm] fix ioctls infoleak (Danny Feng) [626319 621437] {CVE-2010-2803}
  - [netdrv] wireless extensions: fix kernel heap content leak (John Linville) [628437 628438] {CVE-2010-2955}
  - [netdrv] niu: buffer overflow for ETHTOOL_GRXCLSRLALL (Danny Feng) [632071 632072] {CVE-2010-3084}
  - [mm] add debug checks for mapcount related invariants (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] move VM_BUG_ON inside the page_table_lock of zap_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] compaction: handle active and inactive fairly in too_many_isolated (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] start_khugepaged after setting transparent_hugepage_flags (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hibernate memory corruption (Andrea Arcangeli) [644037 642570]
  - [mm] ksmd wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] khugepaged wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] unlink_anon_vmas in __split_vma in case of error (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix memleak in copy_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hang on anon_vma->root->lock (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] avoid breaking huge pmd invariants in case of vma_adjust failures (Andrea Arcangeli) [642679 622327 644037 642570]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.7.1.el6]
changelog:
  - [drm] ttm: fix regression introduced in dfb4a4250168008c5ac61e90ab2b86f074a83a6c (Dave Airlie) [646994 644896]


author: Adam Jackson <ajax@redhat.com> 7.4-14
changelog:
  - Drop xcmsdb, no one uses XCMS.
  - rgb 1.0.3
  - xgamma 1.0.3
  - xhost 1.0.3
  - xrefresh 1.0.3
  - xsetroot 1.0.3


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Ray Strode <rstrode@redhat.com> 2.30.4-15
changelog:
  - Drop 2 second delay when restarting conversations
  - Drop "Cancelling" message in all circumstances.  It's very
    fast out of the box, so we don't really need it, and we
    wouldn't want to slow canceling down just so the user can
    read the message
  - Add 2 second delay for all messages coming from pam modules
    Resolves: #563297


author: Ray Strode <rstrode@redhat.com> 2.30.4-16
changelog:
  - Fix some widget layout issues related to multi-stack
    Resolves: #614669
  - Make "Other..." item only run password stack
    Resolves: #615086
  - Add workaround for libc not handling nsswitch changes at runtime.
    Resolves: #621700


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1
changelog:
  - initscript LSB related fixes (#523435)
  - revert the "DEBUG" feature (#510283), it causes too many problems (#545128)


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P1
changelog:
  - fix occassional crash on keytable.c:286 (#554316)
  - active query might be destroyed in resume_dslookup() which triggered REQUIRE
    failure (#507429)


author: Than Ngo <than@redhat.com> - 4.3.4-3
changelog:
  - fix bz#531211, backport sonnet patch, fix rendering issue in indic, asian, arabic 
    languages
  - drop noarch hack


author: Than Ngo <than@redhat.com> - 6:4.3.4-6
changelog:
  - Redhat branding 
  - make kdeinit4 quiet
  - backport to fix critical performance
  - backport to fix issue in printing on pages with form widgets


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2.el6_0.5
changelog:
  - Add fixes from upstream git for a number of serious bugs:
    - ctrl / alt getting stuck
    - a client hang
    - a client crash
    - showing nothing but a white screen in fullscreen mode
    Related: rhbz#644840


author: Frank Ch. Eigler <fche@redhat.com> - 1.2-5
changelog:
  - Backported fixes for rhbz596085 rhbz580917 rhbz604294 rhbz602386
    rhbz599498 rhbz580197 rhbz597329 rhbz599430


author: Ville Skyttä <ville.skytta@iki.fi> - 1.6.6-5
changelog:
  - Include svn2cl and its man page only in the -svn2cl subpackage (#558598).
  - Do not include bash completion in docs, it's installed.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-2
changelog:
  - make CA dir readable - the private keys are in private subdir (#584810)
  - a few fixes from upstream CVS
  - make X509_NAME_hash_old work in FIPS mode (#568395)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-3
changelog:
  - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738)
  - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732)


author: Mike Christie <mchristie@redhat.com> - 1.0.4-0
changelog:
  - 587072 Fix tgt-admin logic error with shared accounts in targets.conf 
  - Rebase to 1.0.4 to sync fixes.


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  Resolves: #547808
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.19.1.el6]
changelog:
  - [crypto] sha-s390: Reset index after processing partial block (Herbert Xu) [678996 626515]
  - [net] clear heap allocations for privileged ethtool actions (Jiri Pirko) [672434 672435] {CVE-2010-4655}
  - [usb] iowarrior: don't trust report_size for buffer size (Don Zickus) [672421 672422] {CVE-2010-4656}
  - [virt] virtio: console: Wake up outvq on host notifications (Amit Shah) [678558 643750]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] sctp: fix kernel panic resulting from mishandling of icmp dest unreachable msg (Neil Horman) [667028 667029] {CVE-2010-4526}
  - [mm] install_special_mapping skips security_file_mmap check (Frantisek Hrbata) [662198 662199] {CVE-2010-4346}
  - [kdump] vt-d: Handle previous faults after enabling fault handling (Takao Indoh) [678485 617137]
  - [kdump] Enable the intr-remap fault handling after local apic setup (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Fix the vt-d fault handling irq migration in the x2apic mode (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Quirk for masking vtd spec errors to platform error handling logic (Takao Indoh) [678485 617137]
  - [virt] virtio: console: Don't block entire guest if host doesn't read data (Amit Shah) [678562 643751]
  - [virt] virtio: console: Prevent userspace from submitting NULL buffers (Amit Shah) [678559 635535]
  - [virt] virtio: console: Fix poll blocking even though there is data to read (Amit Shah) [678561 634232]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.20.1.el6]
changelog:
  - [dvb] kernel: av7110 negative array offset (Mauro Carvalho Chehab) [672403 672404] {CVE-2011-0521}
  - [fs] sunrpc: Correct a misapplied patch (J. Bruce Fields) [678094 678146] {CVE-2011-0714}
  - [netdrv] orinoco: fix TKIP countermeasure behaviour (Stanislaw Gruszka) [667908 667909] {CVE-2010-4648}
  - [kernel] /proc/vmcore: speed up access to vmcore file (Neil Horman) [683442 672937]
  - [netdrv] cnic: Fix big endian bug (Steve Best) [678484 676640]
  - [scsi] fcoe: drop FCoE LOGO in FIP mode (Mike Christie) [683814 668114]
  - [s390x] remove task_show_regs (Danny Feng) [677854 677855] {CVE-2011-0710}
  - [ib] cm: Bump reference count on cm_id before invoking callback (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [rdma] cm: Fix crash in request handlers (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [net] bridge: Fix mglist corruption that leads to memory corruption (Herbert Xu) [678172 659421] {CVE-2011-0716}
  - [netdrv] r8169: use RxFIFO overflow workaround and prevent RxFIFO induced infinite loops (Ivan Vecera) [680080 630810]
  - [s390x] kernel: nohz vs cpu hotplug system hang (Hendrik Brueckner) [683815 668470]
  - [netdrv] cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory (Doug Ledford) [633156 633157] {CVE-2010-3296}
  - [configs] redhat: added CONFIG_SECURITY_DMESG_RESTRICT option (Frantisek Hrbata) [683822 653245]
  - [kernel] restrict unprivileged access to kernel syslog (Frantisek Hrbata) [683822 653245]
  - [fs] cifs: allow matching of tcp sessions in CifsNew state (Jeff Layton) [683812 629085]
  - [fs] cifs: fix potential double put of TCP session reference (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent possible memory corruption in cifs_demultiplex_thread (Jeff Layton) [683812 629085]
  - [fs] cifs: eliminate some more premature cifsd exits (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent cifsd from exiting prematurely (Jeff Layton) [683812 629085]
  - [fs] CIFS: Make cifs_convert_address() take a const src pointer and a length (Jeff Layton) [683812 629085]
  - [kdump] kexec: accelerate vmcore copies by marking oldmem in /proc/vmcore as cached (Neil Horman) [683445 641315]
  - [virt] KVM: VMX: Disallow NMI while blocked by STI (Avi Kivity) [683783 616296]
  - [virt] kvm: write protect memory after slot swap (Michael S. Tsirkin) [683781 647367]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.21.1.el6]
changelog:
  - [netdrv] ixgbe: limit VF access to network traffic (Frantisek Hrbata) [684129 678717]
  - [netdrv] ixgbe: work around for DDP last buffer size (Frantisek Hrbata) [684129 678717]
  - [net] gro: reset dev and skb_iff on skb reuse (Andy Gospodarek) [688311 681970]
  - [x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs (Frank Arnold) [683813 652208]
  - [virt] virtio_net: Add schedule check to napi_enable call (Michael S. Tsirkin) [684268 676579]
  - [s390x] mm: add devmem_is_allowed() for STRICT_DEVMEM checking (Hendrik Brueckner) [684267 647365]
  - [powerpc] Don't use kernel stack with translation off (Steve Best) [684266 628951]
  - [powerpc] Initialise paca->kstack before early_setup_secondary (Steve Best) [684266 628951]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.23.1.el6]
changelog:
  - [x86] Revert "[x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs" (Frank Arnold) [683813 652208]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.24.1.el6]
changelog:
  - [fs] Revert "[fs] inotify: stop kernel memory leak on file creation failure" (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.3
changelog:
  - Implement recvmmsg on all archs (#594194)
  - Avoid strict aliasing issues (#594194)
  - Fix nscd user creation (#594256)
  - Fix access outside of red zone on ppc (#593771)
  - Fix scope handling during dl_close (#593686)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7
changelog:
  - Round cache sizes to handle odd sizes (#607010)
  - Fix initializsation of cpu features (#630801)
  - Fix ifunc thunk for strspn on x86 in static libc (#631011)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7.el6_0.1
changelog:
  - Fix bug in generic strstr/memmem implementation handling certain
    repeated patterns (#643341)
  - Correctly align TCB for AVX (#643343)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7.el6_0.5
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-1.1
changelog:
  - Multiple patches to address issues with TwinView calibration and setting
    (#624560)
  - requires xorg-x11-drv-wacom-0.10.5-7 for TwinView fixes.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-1.2
changelog:
  - Multiple patches to address button mapping issues (#624560, z-stream #642915).
  - update the screen number when updating
  - requires updated xorg-x11-drv-wacom for the matching fixes to xsetwacom
    and the driver.


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error, and hang or crash in the KDC when using
    the LDAP kdb backend (CVE-2010-4022, CVE-2011-0281, CVE-2011-0282, #671101)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.6
changelog:
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681564)


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-25
changelog:
  - fix PXE booting on the virtual network
  - Resolves: rhbz#623951
  - fix tunelled migration
  - Resolves: rhbz#624062


author: Dave Allan <dallan@redhat.com> - 0.8.1-26
changelog:
  - Fix problem with capabilities XML generation
  - Resolves: rhbz#620847
  - Correctly reserve and release PCI slots
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j16
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.1
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#658143)
  - Make SASL work over UNIX domain sockets (rhbz#658144)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#656972)
  - Fix save/restore on root_squashed NFS (rhbz#656355)
  - Fix race on multiple migration (rhbz#658141)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Support forcing a CDROM eject (rhbz#658147)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.2
changelog:
  - spec file cleanups (rhbz#662045)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#662043)
  - Fix off-by-one error in clock-variable (rhbz#662046)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Ensure device is deleted from guest after unplug (rhbz#662041)
  - Distinguish between QEMU domain shutdown and crash (rhbz#662042)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.3
changelog:
  - Remove patches not suitable for proper Z-stream:
      - Export host information through SMBIOS to guests (rhbz#652678)
      - Support forcing a CDROM eject (rhbz#658147)
  - Plug several memory leaks (rhbz#672549)
  - Avoid memory overhead of matchpathcon (rhbz#672554)
  - Do not start libvirt-guests if that service is off (rhbz#668694)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.4
changelog:
  - Resolves: rhbz#660592 - SSSD shutdown sometimes hangs
  - Resolves: rhbz#660585 - getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-8
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 113)
  - CVE-2010-2089: further checks within the audioop module (patch 114)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 115)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-9
changelog:
  - cherrypick upstream fix for fatal error creating threads when memory is
  low (patch 116)
  Resolves: rhbz#598564


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-10
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 117)
  Resolves: rhbz#583931


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-11
changelog:
  - Stop python bailing out with an assertion failure when UnicodeDecodeErrors
  occur on very large buffers (patch 118, upstream issue 9058)
  Resolves: rhbz#540518


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-1
changelog:
  - 2.6.5
  - remove upstream patch 53
  - fixup selinux patch to apply cleanly against 2.6.5 (patch 110)
  Resolves: rhbz#611607
  - remove commented-out, out-of-date patches


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-2
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib
  Resolves: rhbz#563986
  - don't build the _md5 and _sha* modules: rely on _hashlib in hashlib


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-3.el6_0.1
changelog:
  - backport subprocess fixes to use the "poll" system call, rather than "select"
  Resolves: rhbz#668975


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-3.el6_0.2
changelog:
  - allow the "no_proxy" environment variable to override "ftp_proxy" in
  urllib2 (patch 128)
  Resolves: rhbz#671343


author: Jan Safranek <jsafrane@redhat.com> 0.36-4
changelog:
  - Fix libcgroup.so link to the right soname (#599367)
  - Fix segmentation fault in cgget tool (#601071)
  - Fix lscgroup commandline parsing (#601095)


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.36-6.1
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Akira TAGOH <tagoh@redhat.com> - 0.6.8-6
changelog:
  - paps-cups.patch: Fix printing with -o landscape in CUPS. (#222137)
  - paps-autoconf262.patch: Fix an error on autoreconf.


author: Steven Dake <sdake@redhat.com> 1.2.3-13
changelog:
  - Resolves: rhbz#614219
  - Add upstream revision 2989 - Don't reset the token timer when a retransmitted
    token is received.  Only reset when a token is received.


author: Steven Dake <sdake@redhat.com> 1.2.3-15
changelog:
  - Resolves: rhbz#611676
  - Add upstream revision 3000 - ensure aborts happen even if the currently
    running sync engine doesn't have an abort operation.
  - Add upstream revision 2999 - reset internal variable in syncv2 on
    configuration change.


author: Angus Salkeld <asalkeld@redhat.com> 1.2.3-16
changelog:
  - Resolves: rhbz#579126
  - Add upstream revision 3004 - Fix merge error with revision 3001.
  - Add upstream revision 3003 - Fix problem where flow control could lock
    up ipc under very heavy load in very rare circumstances.


author: Steven Dake <sdake@redhat.com> 1.2.3-17
changelog:
  - Resolves: rhbz#618570
  - Add upstream revision 3006 - Remove consensus timeout floor check that leads
    to exit in two node clusters with smaller consensus timeouts.


author: Steven Dake <sdake@redhat.com> 1.2.3-18
changelog:
  - Resolves: rhbz#619565
  - Add upstream revision 3013 - dont cancel token retransmit timeout on receipt
    of a multicast message.


author: Steven Dake <sdake@redhat.com> 1.2.3-19
changelog:
  - Resolves: rhbz#623790
  - Add upstream revision 3023 - Properly detect server failure instead of falsely
    detecting during a configuration change.


author: Steven Dake <sdake@edhat.com> 1.2.3-21.1
changelog:
  - Resolves: rhbz#638592
  - merge upstream commit bab4945b57c150301c034085f3ce7b4187b6c864
  -  Works around problem where some switch hardware delays multicast
  -  packets compared to the unicast token.  This would result in messages
  -  being retransmitted when no retransmission was necessary.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-22.fc13
changelog:
  - Remove core file when starting a process (BZ 594560).
  - Fix lock up on loops in the solib chain (BZ 593926).
  - Import fix of TUI layout internal error (BZ 595475).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-23.fc13
changelog:
  - Fix and support DW_OP_*piece (Tom Tromey, BZ 589467).
  - Fix follow-exec for C++ programs (bugreported by Martin Stransky).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-24.fc13
changelog:
  - Fix crash on /proc/PID/stat race during inferior exit (BZ 596751).
  - testsuite: gdb.threads/watchthreads-reorder.exp kernel-2.6.33 compat. fix.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-27.fc13
changelog:
  - Fix obstack corruptions on C++ (BZ 606185, Chris Moller, Jan Kratochvil).
  - Improve support for typedefs in classes (BZ 602314).
  - Fix `set print object on' for some non-dynamic classes (BZ 606660).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-29.fc13
changelog:
  - Fix prelinked executables with sepdebug and copy relocations (BZ 614659).
  - [delayed-symfile] Fix a backtrace regression on CFIs without DIE (BZ 614604).


author: Tom Lane <tgl@redhat.com> 3.9.4-1.el6_0.2
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688829
  - Add fix for CVE-2011-1167
  Resolves: #688742


author: Vojtech Vitek <vvitek@redhat.com> - 3.0.6-5.1
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments
    Resolves: #684932


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-7
changelog:
  - In client initiated message exchanges stop retransmission
    upon reaching the MRD rather than at some point after it (#559404)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-9
changelog:
  - If the Reply was received in response to Renew or Rebind message,
    client adds any new addresses in the IA option to the IA (#578098)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-10
changelog:
  - Add domain-search to the list of default requested DHCP options (#588352)
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#591140).
  - Compile with -fno-strict-aliasing (#594151).


author: Marek Kasik <mkasik@redhat.com> 2.3.11-4
changelog:
  - Add freetype-2.3.11-CVE-2010-2498.patch
      (Assure that `end_point' is not larger than `glyph->num_points')
  - Add freetype-2.3.11-CVE-2010-2499.patch
      (Check the buffer size during gathering PFB fragments)
  - Add freetype-2.3.11-CVE-2010-2500.patch
      (Use smaller threshold values for `width' and `height')
  - Add freetype-2.3.11-CVE-2010-2519.patch
      (Check `rlen' the length of fragment declared in the POST fragment header)
  - Add freetype-2.3.11-CVE-2010-2520.patch
      (Fix bounds check)
  - Add freetype-2.3.11-CVE-2010-2527.patch
      (Use precision for `%s' where appropriate to avoid buffer overflows)
  - Add freetype-2.3.11-axis-name-overflow.patch
      (Avoid overflow when dealing with names of axes)
  - Resolves: #613298


author: Marek Kasik <mkasik@redhat.com> 2.3.11-5
changelog:
  - Add freetype-2.3.11-CVE-2010-1797.patch
      (Check stack after execution of operations too.
       Skip the evaluations of the values in decoder, if
       cff_decoder_parse_charstrings() returns any error.)
  - Resolves: #621624


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_0.1
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638838


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6.el6_0.2
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651761


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Dave Allan <dallan@redhat.com> - 0.8.1-21
changelog:
  - Fix multiple PCI device assignment bugs
  - Resolves: rhbz#617116
  - Fix the ACS checking in the PCI code
  - Resolves: rhbz#615218
  - Disable boot=on when not using KVM
  - Resolves: rhbz#594068
  - Don't leak delay string when freeing virInterfaceBridgeDefs
  - Resolves: rhbz#620837


author: Dave Allan <dallan@redhat.com> - 0.8.1-22
changelog:
  - Mitigate asynchronous device_del
  - Resolves: rhbz#609437
  - Fix PCI address allocation
  - Resolves: rhbz#618484
  - Make nodeinfo skip offline CPUs
  - Resolves: rhbz#622515


author: Miloslav Trmač <mitr@redhat.com> - 0.3.1-4
changelog:
  - Clarify documentation about which block device to use as an argument
    Resolves: #636541
  - Report readable error messages instead of random characters in some cases
    Resolves: #638732
  - Make passphrase prompts interruptable, report incorrect passphrases
    Resolves: #641111
  - Ask for passphrases only after checking for easily detectable problems
    Resolves: #643897


author: Peter Gordon <peter@thecodergeek.com> - 1.1.15.1-3
changelog:
  - Forcibly disable JIT until we can properly resolve the execmem-caused
    segfaulting. (Temporary workaround until bug #516057 can be properly fixed.)
  - Remove the gnome-keyring build option (no longer used by the build scripts).
  - Correct release value of previous %changelog entry.


author: Matthias Clasen <mclasen@redhat.com> - 1.1.15.2-1
changelog:
  - Update to 1.1.15.2, which has multiple crash and other fixes
  - See https://lists.webkit.org/pipermail/webkit-gtk/2009-October/000040.html


author: Matthias Clasen <mclasen@redhat.com> - 1.1.15.3-1
changelog:
  - Update to 1.1.15.3, more crash fixes and important media player fixes
  - See https://lists.webkit.org/pipermail/webkit-gtk/2009-October/000047.html


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-1
changelog:
  - update to 2.8.15
  - update cracklib-words to the current version (2008-05-07)
  - fixup URLs for various dictionary sources that we use
  - fix freeing-an-uninitialized-pointer in the python module (SF#2907102)
  - add a disttag


author: Deepak Bhole <dbhole@redhat.com> 1.6.0.0-1.18.b16
changelog:
  - Build only on x86 and x86_64
  - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402
  - Added java-1.6.0-openjdk-jar-misc.patch
  - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch to separate debuginfo
  - Added patch for March 2010 security issues (java-1.6.0-openjdk-securitypatches-20100323.patch)


author: Martin Matejovic <mmatejov@redhat.com> - 1.6.0.0-1.19.b17
changelog:
  - Added icedtea6-1.7.3
  - Added openjdk b17
  - Enabled NPPlugin
  - Removed Files:
      java-1.6.0-openjdk-icedtea-gcc-stack-markings.patch
      java-1.6.0-openjdk-jar-misc.patch
      java-1.6.0-openjdk-linux-separate-debuginfo.patch
      java-1.6.0-openjdk-memory-barriers.patch
      java-1.6.0-openjdk-rhino-rewrite.patch
      java-1.6.0-openjdk-s390-optimizer-failure.patch
      java-1.6.0-openjdk-s390-serializer.patch
      java-1.6.0-openjdk-systemtap-fixes-jni-jstack.patch
      java-1.6.0-openjdk-x11.patch
  - Resolves: rhbz#593135
  - Resolves: rhbz#572675


author: Martin Matejovic <mmatejov@redhat.com> - 1.6.0.0-1.20.b17
changelog:
  - Fixed brew build for i686
  - Removed Files:
      java-1.6.0-openjdk-securitypatches-20091103.patch
      java-1.6.0-openjdk-securitypatches-20100323.patch
      java-1.6.0-openjdk-sparc-fixes.patch
      java-1.6.0-openjdk-sparc-hotspot.patch


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.21.b17
changelog:
  - Updated to IcedTea 1.7.4
  - Resolves: rhbz#537121
  - Resolves: rhbz#612467
  - Resolves: rhbz#613824
  - Additionally, fixed rh bugs 616893 and 616895


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.33.b17
changelog:
  - bumped release number, it was accidentaly reduced, and now lower version then last one was released.
  - Resolves: rhbz#676295


author: Jeff Layton <jlayton@redhat.com> 4.4-5.el6.0.1
changelog:
  - cifs.upcall: set GSSAPI checksum in SPNEGO blobs (bz 668366)
  - cifs.upcall: fix '-l' option (bz 668366)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.23
changelog:
  - Add 0055-RHBZ-602257-update-on-show-topology.patch
    * make multipathd updated state with the kernel before showing topology
  - Add 0056-RHBZ-603812-better-type-check.patch
    * only count files a path devices, if they are block devices, and are not
      device-mapper devices.
  - Add 0057-RHBZ-607869-fix-resize.patch
    * use the resize calls that don't set noflush, when you reload for size
      changes.
  - Add 0058-RHBZ-601665-assemble-features.patch
    * When multipathd reloads paths, add queue_if_no_path to the features
      based on the no_path_retry value.
  - Add 0059-RHBZ-607874-handle-offlined-paths.patch
    * get the sysfs pathinfo in multipath if necessary, and only retry
      failed ev_add_path reloads 3 times.
  - Resolves: bz #602257, #603812, #607869, #601665, #607874


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.24
changelog:
  - Modify 0055-RHBZ-602257-update-on-show-topology.patch
    * fix patch so that multipath only syncs with the kernel, and doesn't
      update other features
  - Add 0060-RHBZ-606420-fix-remove-map.patch
    * multipathd will now only report a success for remove map when it
      actually succeeds.
  - Resolves: bz #602257, #606420


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.25
changelog:
  - Add 0061-RHBZ-620479-find-rport.patch
    * multipath now will correctly set the dev_loss_tmo and fast_io_fail_tmo
      for setups where a devices rport id doesn't match its target id.
  - Resolves: bz #620479


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.27
changelog:
  - Add 0063-RHBZ-595719-udev_link_priority.patch
     * Increase the priority of multipath symlinks
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.28
changelog:
  - Add 0064-RHBZ-612173-fix-reverse-lookup.patch
     * Fix multipath's wwid bindings file reverse lookup
  - Resolves: bz #612173


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.29
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * Change link priority from 5 to 10
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.30
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * move link_priority line up in the udev rules. Hopefully this is the
        actual fix.
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.31
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * make link_priority only work on multipath devices and partitions.
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.31.el6_0.1
changelog:
  - Add 0065-RHBZ-635088-update-priority.patch
      * refresh all priorities when a new path comes online
  - Resolves: bz #658937


author: Jiri Moskovcak <jmoskovc@redhat.com> - 1.11.23.5
changelog:
  - added support for passing arguments thru stdin (patch from arozansk@redhat.com)
  - Resolves: #501942


author: Jaroslav Reznik <jreznik@redhat.com> - 4.6.2-8
changelog:
  - WebKit security update:
    CVE-2010-0046, CVE-2010-0049, CVE-2010-0050, CVE-2010-0051,
    CVE-2010-0052, CVE-2010-0054


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#575248, rebase to 4.6.2
  - fix build issue in webkit on s390x
  - fix a crash when reparenting an item in QGraphicsView, QTBUG-6932


author: Than Ngo <than@redhat.com> - 4.6.2-15
changelog:
  - Resolves: bz#589165
     fix multiple flaws in webkit
     CVE-2010-0047, CVE-2010-0648, CVE-2010-0656


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Sync with Fedora devel, including:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Resolves: #552617
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #554431
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Use -N not the obsolete -n in useradd call
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql
  - add sparc/sparc64 to multilib header support


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557297
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html
  Resolves: #565558
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #561010
  - adjust license tag to reflect OSI decision


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593033


author: Tom Lane <tgl@redhat.com> 8.4.4-2
changelog:
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #561010


author: Tom Lane <tgl@redhat.com> 8.4.5-1.el6_0.1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640069
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1.el6_0.1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672634


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond 
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19
changelog:
  - Fix sandbox -H and -T regression
  Resolves: #626404
  - Fix fcontext translation handling in system-config-selinux


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.4
changelog:
  - fix to sandbox 
    - Fix seunshare to use more secure handling of /tmp
      - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
     - Change to allow sandbox to run on nfs homedirs, add start python script
     - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
     - Move seunshare to sandbox package
     - Fix sandbox to show correct types in  usage statement


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-18
changelog:
  - bz563769 - [RFE] autofs needs to wait for a network up event before starting
    - dont connect at ldap lookup module init.
    - fix reconnect get base dn.
  - bz563772 - automount cannot use rpc ping to select from list of replicated servers
    - fix random selection option.
  - bz563773 - [RHEL 5] RHEL5.4 TIMEOUT=0 automount constantly unmount fileystems
    - fix disable timeout.
  - bz563777 - Incorrect strdup() return value check in lib/defaults.c:get_env_string()
    - fix strdup() return value check.
  - Resolves: rhbz#563769 rhbz#563772 rhbz#563773 rhbz#563777


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-19
changelog:
  - bz563769 - [RFE] autofs needs to wait for a network up event before starting
    - fix get query dn failure
  - bz574309 - autofs cannot mount the folder name including "&"
    - fix ampersand escape in auto.smb.
  - bz465463 - CRM 1203376 autofs/automount to mount nfs4 or nfs3 for mixed servers
    - make nfs4 default for RedHat replicated selection configuration.
  - Resolves: rhbz#574309 rhbz#465463
  - Related: rhbz#563769


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-21
changelog:
  -bz578677 - random server selection is not random if any host is on a different network
   - fix random selection for host on different network
  - Resolves: rhbz#578677


author: Ian Kent <kpnt@redhat.com> - 1:5.0.5-22
changelog:
  - bz578128 - Service autofs initscript not LSB compliant
  - bz577097 - automount aborts when it authenticates by DIGEST-MD5
  - Resolves: rhbz#578128 rhbz#577097


author: Ian Kent <ikent@redhat.com> - 5.0.5-23
changelog:
  - bz597944 - autofs5: segfault in close_mount()
    - add mutex to serialize access to mount module handle in parse module.
    - dont check null cache on expire.
    - fix null cache race.
    - fix cache_init() on source re-read.
    - fold autofs-5.0.5-fix-memory-leak-on-reload.patch into
      fix cache_init() on source re-read patch where it belongs.
  - bz594565 - If maps include both file and nis maps, included nis maps which
      worked on RHEL 5.3 no longer work on RHEL 5.4
    - fix negative cache included map lookup
  - Resolves: rhhz#597944 rhbz#594565


author: Ian Kent <ikent@redhat.com> - 5.0.5-23.el6_0.1
changelog:
  - bz689754 - automount hangs on startup when started with an already
    mounted cifs share
    - fix remount locking
  - Resolves: rhbz#689754


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.26.1.el6]
changelog:
  - [net] bnep: fix buffer overflow (Don Howard) [681315 681316] {CVE-2011-1079}
  - [scsi] aic94xx: world-writable sysfs update_bios file (Don Howard) [679306 679307]
  - [x86] tc1100-wmi: world-writable sysfs wireless and jogdial files (Don Howard) [679306 679307]
  - [x86] acer-wmi: world-writable sysfs threeg file (Don Howard) [679306 679307]
  - [mfd] ab3100: world-writable debugfs *_priv files (Don Howard) [679306 679307]
  - [v4l] sn9c102: world-wirtable sysfs files (Don Howard) [679306 679307]
  - [x86] Fix EFI pagetable to map whole memory (Takao Indoh) [670850 664364]
  - [kernel] CAP_SYS_MODULE bypass via CAP_NET_ADMIN (Phillip Lougher) [681772 681773] {CVE-2011-1019}
  - [kernel] failure to revert address limit override in OOPS error path (Dave Anderson) [659572 659573] {CVE-2010-4258}
  - [fs] xfs: zero proper structure size for geometry calls (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [fs] xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1 (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [tty] tty_audit: fix tty_audit_add_data live lock on audit disabled (Danny Feng) [684275 680126]
  - [kernel] proc: protect mm start_code/end_code in /proc/pid/stat (Eugene Teo) [684572 684573] {CVE-2011-0726}
  - [net] dccp oops (Eugene Teo) [682957 682958] {CVE-2011-1093}
  - [firmware] dcdbas: force SMI to happen when expected (Shyam Iyer) [683440 664832]
  - [security] ima: fix add LSM rule bug (Eric Paris) [667914 667915] {CVE-2011-0006}
  - [sound] caiaq: Fix possible string buffer overflow (Jaroslav Kysela) [678475 678476] {CVE-2011-0712}
  - [net] ixgbe: add option to control interrupt mode (Andy Gospodarek) [670114 670110 622640 637332]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.27.1.el6]
changelog:
  - [scsi] megaraid: give FW more time to recover from reset (Tomas Henzl) [695322 692673]
  - [netdrv] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [683820 669231]
  - [sound] ALSA: hda - nvhdmi: Add missing codec IDs, unify names (Jaroslav Kysela) [683817 636922]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Larry Woodman) [695256 691310]
  - [net] fix ebtables stack infoleak (Eugene Teo) [681322 681323] {CVE-2011-1080}
  - [drm] fix unsigned vs signed comparison issue in modeset ctl ioctl (Don Howard) [679927 679928] {CVE-2011-1013}
  - [pci] Enable ASPM state clearing regardless of policy (Alex Williamson) [694073 681017]
  - [pci] Disable ASPM if BIOS asks us to (Alex Williamson) [694073 681017]
  - [mm] do not keep kswapd awake for an unreclaimable zone (Johannes Weiner) [694186 633825]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.28.1.el6]
changelog:
  - [net] bonding: fix jiffy comparison issues (Andy Gospodarek) [698109 696337]
  - [drm] radeon/kms: check AA resolve registers on r300 + regression fix (Dave Airlie) [680001 680002] {CVE-2011-1016}
  - [infiniband] uverbs: Handle large number of entries in poll CQ (Eugene Teo) [688429 696137] {CVE-2011-1044 CVE-2010-4649}
  - [net] sctp: fix the INIT/INIT-ACK chunk length calculation (Thomas Graf) [695386 690743] {CVE-2011-1573}
  - [net] CAN: Use inode instead of kernel address for /proc file (Danny Feng) [664560 664561] {CVE-2010-4565}
  - [fs] inotify: fix double free/corruption of stuct user (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] netfilter: ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689341 689342]
  - [net] bonding: change test for presence of VLANs (Jiri Pirko) [696487 683496]
  - [scsi] scsi_dh: fix reference counting in scsi_dh_activate error path (Mike Snitzer) [696889 680140]
  - [net] enable VLAN NULL tagging (Neil Horman) [683810 633571]
  - [scsi] scsi_dh: propagate SCSI device deletion (Mike Snitzer) [698114 669411]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.29.1.el6]
changelog:
  - [mm] Revert "[mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode" (Larry Woodman) [695256 691310]


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.4-1
changelog:
  - wacom 0.10.4
  - Update sources to point to sourceforge.
  - Install the upstream fdi file instead of our custom one.
  - Update Requires and BuildRequires for xsetwacom.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-2
changelog:
  - wacom-0.10.5-linuwacom-man-page.patch: drop reference to linuxwacom from
    man page (#584588)
  - wacom-0.10.5-pad-scrolling.patch: force relative mode for pad (#584589)
  - wacom-0.10.5-tpcbutton-on.patch: enable TPCButton for ISDV4 devices
    (#584597)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-4
changelog:
  - Remove wacom-0.10.5-axis-mode.patch: this is an X server bug (#594523)
  - wacom-0.10.5-relative-pressure.patch: subtract old pressure from new
    pressue values to get a relative value (#597932)
  - wacom-0.10.05-xsetwacom-man-page.patch: add xsetwacom man page (#598312)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-5
changelog:
  - wacom-0.10.5-wheel-events.patch: don't convert the wheel events to scroll
    events for anything but the pad (#593948)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-6
changelog:
  - wacom-0.10.5-keycodes-not-keysyms.patch: load keycodes into the driver,
    not keysyms. Avoids server hangs when XkbGetCoreMap() allocs in signal
    handler (#616653)
  - wacom-0.10.5-scroll-wheel-zoom.patch: zoom with wheel, not ctrl+/- since
    the latter is now layout-dependent.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-6.1
changelog:
  - wacom-0.10.5-xsetwacom-add-super-and-hyper-to-modifiers.patch: parse Hyper
    and Super as modifiers.
  - wacom-0.10.5-xsetwacom-fix-strjoinsplit.patch: fix parameter advancement.
  - A list of patches to improve TwinView configuration (#624560).


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-6.2
changelog:
  - Several patches related to bug #624560 (zstream-bug #642915)
    - xsetwacom: remove core keyword parsing, has no effect
    - fix button map handling in xsetwacom
    - add more keywords and special characters
    - twinview and calibration fixes


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.6
changelog:
  - Properly initialize supplementary groups for qemu process (rhbz#668692)
  - Make error reporting in libvirtd thread safe (CVE-2011-1486)


author: Hans de Goede <hdegoede@redhat.com> 0.0.12-2.1.el6_0.1
changelog:
  - Fix crash and vga font corruption when switching vc
    Resolves: rhbz#648935
  - Add support for many more resolutions and enable resolutions > 1024x768
    without requiring an xorg.conf
    Resolves: rhbz#648933


author: Peter Vrabec <pvrabec@redhat.com> - 0.19-6
changelog:
  - make initscript LSB compliant
  - show version of netlabelctl and libnetlabel in help
  - fixing return codes
    Resolves: #537053 #602577 #602291


author: Jiri Skala <jskala@rehat.com> - 2.2.2-1
changelog:
  - Resolves: #555321 - vsftpd segfaults with passive mode and SSL
  - updated to latest upstream version - fixes the bug #555321


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.7
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696341,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.10-43
changelog:
  - 630019 set correct (f)pie build flags
  - 615104 fix double echo in initscript
  - 589099 Wrong file permissions for atd configuration
  - Resolves: rhbz#630019, rhbz#615104, rhbz#589099


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-9
changelog:
  - regenerated patches so patch fuzz 3 is not needed (bz#513207)
  - mm_cfg.pyc and .pyo are now %verify(not md5 size mtime) (bz#512794)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Jiri Skala <jskala@redhat.com> - 0.99.12-3
changelog:
  - fixed #516005 - Errors installing quagga-0.99.11-2.fc11.i586 with --excludedocs
  - fixed #522787 - quagga: build future versions without PAM


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.2
changelog:
  - Add 0066-RHBZ-672151-fix-sysfs-caching.patch
      * Remove attribute value caching, and free cached parent devices on remove
  - Resolves: bz #672151


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.3
changelog:
  - Add 0067-RHBZ-684684-sysfs-device-cleanup.patch
     * Make sure to remove the sysfs device from cache when the path is
       removed. Also, only search the sysfs device cache under the vecs lock
  - Resolves: bz #684684


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.6-1
changelog:
  - update to 2.6.6 (#588781)
  - move sasl config to /etc/sasl2 (#574439)
  - drop sasl v1 support
  - require Date::Calc for pflogsumm (#588726)


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.4
changelog:
  - Add 0068-RHBZ-696133-fix-offline-check.patch
     * Make path_offline return false if it can't deterime a paths state. and
       don't check the path if it has no sysdev, since it is about to be
       removed
  - Resolves: bz #696133


author: Benjamin Marzinski <bmarizns@redhat.com> -0.4.9.31.el6_0.5
changelog:
  - Add 0069-RHBZ-702402-fix-prio-segfault.patch
     * Don't reuse the the path argument as a variable in the vector
       loop.
  - Resolves: bz #702402


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-19
changelog:
  - fixed exit code of snmp utilities when wrong argument to '-A' option
    is specified (#574061)
  - fixed BER parsing of incoming packets - siletnly discard the invalid ones
    according to RFC (#568651)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-21
changelog:
  - fixed hrFSTable and hrStorageTable to provide persistent table indexes
    according to RFS 2790 (#595325)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-22
changelog:
  - fixed value of ipIfStatsTable.Ip6ReasmReqds (#597265)
  - added missing include files from util_funcs directory (#604636)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-23
changelog:
  - fixed segfault when parsing snmpd.conf with disman entries (#607080)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#607074)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#606874)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-27.1
changelog:
  - fixed truncation of sysObjectID (#652223)
  - fixed assertions in calculating of statistics in IF-MIB (#652551)


author: Karsten Hopp <karsten@redhat.com> 7.2.411-1.1
changelog:
  - augroup "fedora" in /etc/vimrc renamed to "redhat"
  - Resolves: #578785
  - fix vim.csh  'tcsh -e' scripts
  - Resolves: #578795


author: Bill Nottingham <notting@redhat.com> - 9.03.9-1
changelog:
  - check NM_CONTROLLED before deciding to use NM for a connection. (#600454)
  - always reboot on autorelabel. (#599879)
  - correct the fix for not clearing  environment with runuser. (#564105)
  - properly handle permission denied on pid file (#595597)


author: Bill Nottingham <notting@redhat.com> - 9.03.10-1
changelog:
  - ifup-eth: check for dhclient configuration in /etc/dhcp as well (#607766)
  - network-functions: handle quoted SUBCHANNELS (#607481)
  - netfs: allow for encrypted network block devices (#605600)


author: Bill Nottingham <notting@redhat.com> - 9.03.13-1
changelog:
  - rename_device - handle quoted 'DEVICE' (#614943, <harald@redhat.com>)
  - rename_device - fix handling of s390 subchannels (#614739, <harald@redhat.com>)


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-3
changelog:
  - Remove 'ipport' option from WTI fence agent
    (remove_ipport_option_from_wti_fence_agent.patch)
    Resolves: rhbz#579059


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-5
changelog:
  - Discard unicast Request/Renew/Release/Decline message
    (unless we set unicast option) and respond with Reply
    with UseMulticast Status Code option (#554622)
  - Remove DHCPV6 OPERATION section from dhclient.conf.5
    describing deprecated 'send dhcp6.oro' syntax


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-6
changelog:
  - In dhclient-script check whether bound address
    passed duplicate address detection (DAD) (#559403)
  - If the bound address failed DAD (is found to be in use on the link),
    the dhcpv6 client sends a Decline message to the server
    as described in section 18.1.7 of RFC-3315 (#559403)


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.1
changelog:
  - Rebase to Ruby 1.8.7.  Based on Mohammed Morsi's port of the 1.9.1
    spec file to Fedora 11: <http://mo.morsi.org/blog/node/318>.
    * ruby-multilib.patch (aka patch23): Rewrite the mkconfig.rb patch so that
    it may be applied unconditionally.  This addresses an rpmlint complaint
    about the arch-dependent patch.  Now, the script itself tests the target
    architecture.  Remove the ".ifarch ppc64 s390x sparc64 x86_64" conditional.


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.2
changelog:
  - Integrate addition of patch101 by Mohammed Morsi.  This fixes
    the segv-inducing marshaling bug affecting rails-3.0.0.
  - Integrate Mamoru Tasaka's path-fixing feedback, including
    updates to ruby-1.8.7-lib-paths.patch


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-0.3
changelog:
  - split some long lines; as in Mamoru Tasaka's 1.8.7.x spec file
  - don't require emacs; remove vestiges of emacs


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-1
changelog:
  - Resolves: rhbz#602435
  - (sitelib2): remove unused definition
  - correct search path, using changes from Mohammed Morsi's
    http://mo.morsi.org/files/ruby-1.8.7.249-5.fc13.src.rpm


author: Jim Meyering <meyering@redhat.com> - 1.8.7.249-2
changelog:
  - Rebase to ruby-1.8.7.299
    * remove patch30, aka ruby-1.8.7-openssl-1.0.patch; subsumed
    * remove patch101, aka ruby-1.8.7-rb_gc_guard_ptr-optimization.patch; subsumed


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-4
changelog:
  - Address CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    by applying the patch from Apple as included in
    http://bugzilla.redhat.com/587731.
    * ruby-1.8.7-webrick-CVE.patch: New file.
  - Resolves: rhbz#605418


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid thread-related segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
    Do not ignore test failure on ppc64.
  - Resolves: rhbz#653824


author: Owen Taylor <otaylor@redhat.com> - 0.8.2-21
changelog:
  - Unconditionally remove KDE, instead of conditionalizing on Fedora,
    remove kde-desktop-effects
    Resolves: rhbz 553693
  - Remove conditionalization of logo on Fedora, update redhat-logo.patch
    to apply to current Compiz.
    Resolves: rhbz 553627


author: Owen Taylor <otaylor@redhat.com> - 0.8.2-22
changelog:
  - Cleanups: fix URL to sources, remove commented out references to a
      patch not in CVS
    Related: rhbz 543948


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-4
changelog:
  - Add interface-mtu to the list of default requested DHCP options (#571719)
  - Fix paths in man pages (#571720)
  - Remove odd tests in %preun


author: Jan Kaluza <jkaluza@redhat.com> 5.04-6
changelog:
  - fix #637782 - identify the zip64 format correctly
  - fix #643046 - recognize volume_key escrow packets
  - fix #594083 - improve Python recognition
  - fix #608686 - mention return code in manpage
  - fix #610795 - recognize webm content
  - fix #670125 - don't identify GFS2 filesystems as GFS1 filesystems


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-9
changelog:
  - fixed broken link /usr/sbin/slapschema (#583568)
  - removed some static libraries from openldap-devel (#583575)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-10
changelog:
  - updated overlay list in config file (#586143)
  - config dir slapd.d added to package payload (#585276)
  - init script now creates only symlink, not harldink, in /var/run (#584870)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-12
changelog:
  - updated man pages - only slaptest can convert configuration schema
    (#584787)
  - openldap compiled with -fno-strict-aliasing (#596193)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.19-15.1
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-5
changelog:
  - do not change permissions with pam_console_apply
  - drop obsolete pam_tally module and the faillog file (#461258)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-7
changelog:
  - pam_console: fix memory corruption when executing handlers (patch by
    Stas Sergeev) and a few more fixes in the handler execution code (#532302)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-4.1
changelog:
  - fix insecure dropping of priviledges in pam_xauth, pam_env,
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Jiri Skala <jskala@redhat.com> - 0.99.12-1
changelog:
  - update to latest upstream version
  - fix #499960 - BGPd in Quagga prior to 0.99.12 has a serious assert problem crashing with ASN4's


author: Tim Waugh <twaugh@redhat.com> 3.9.8-25
changelog:
  - Retry when connecting to device fails (bug #552582).
  - Don't ship PolicyKit mechanism (bug #552536).
  - Don't run automake/autoconf etc as it causes build failures.
  - Reverted fix for bug #533462 until bug #541604 is solved (bug #553220).


author: Jiri Popelka <jpopelka@redhat.com> - 3.9.8-28
changelog:
  - Fixed crash when using Preferences dialog (bug #557099).
  - Ship %{_datadir}/hplip/prnt/plugins directory (bug #565875).


author: Tim Waugh <twaugh@redhat.com> - 3.9.8-30
changelog:
  - Explicitly destroy tray icon on exit (bug #576282).
  - Fixed duplex handling in hpcups.drv (bug #557515).


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-10
changelog:
  - fix #604686 - pass currently rotated file as argument to
    postrotate/prerotate script in nosharedscripts mode


author: Karel Zak <kzak@redhat.com> 2.17.1-1
changelog:
  - upgrade to 2.17.1 (bugfix release, #567555)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ChangeLog
  - spec file fixes:
    fix floppyutil URL in specfile
    add missing liceces to License field
    fix mixed-use-of-spaces-and-tabs
  - fix #565888 - uuidd initscript lsb compliance
  - remove util-linux-ng-2.17-mount-mtabfake.patch (merged upstream)


author: Karel Zak <kzak@redhat.com> 2.17.1-3
changelog:
  - fix #572121 - RHEL6: reset tiny flag in libblkid
  - fix #572122 - RHEL6: blkid (and related) should be a bit more robust


author: Karel Zak <kzak@redhat.com> 2.17.2-1
changelog:
  - upgrade to the bugfix release 2.17.2 (#575722)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ChangeLog
  - remove: util-linux-ng-2.17-blkid-alignment-offset.patch
            util-linux-ng-2.17-blkid-minix.patch
            util-linux-ng-2.17-blkid-tinyflag.patch
  - fix #572937 - RHEL6: use microsecond resolution for blkid cache entries


author: Karel Zak <kzak@redhat.com> 2.17.2-2
changelog:
  - fix #588248 - RHEL6: don't probe for RAIDs on CD-ROMs
  - fix #586368 - RHEL6: mdraid assembles incorrectly
  - fix #586942 - Add utempter support to "script"
  - fix #588298 - RHEL6: improve fdisk(8) move command.


author: Karel Zak <kzak@redhat.com> 2.17.2-3
changelog:
  - fix #592958 - whole disk raid members to not be identified
  - fix #594689 - partx infinite loop
  - fix #589955 - add command-line interface for libblkid topology support


author: Karel Zak <kzak@redhat.com> 2.17.2-4
changelog:
  - fix #604875 - memory usage in wipefs(8)
  - fix #591133 - udev /dev/disk/by-uuid not populated
  - fix #602657 - fdisk -l does not show correctly partitions names for FCoE volumes
  - fix #591617 - lscpu does not use cpu masks properly


author: Karel Zak <kzak@redhat.com> 2.17.2-5
changelog:
  - fix #561111 - remount of tmpfs fails on RHEL6 alpha
  - fix #612668 - backport fsfreeze from util-linux-ng 2.18
  - fix #598631 - shutdown, reboot, halt and C-A-D don't work


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-9
changelog:
  - Don't set $REMOTEHOST on the local machine
    Resolves: #669176
  - Don't print history in verbose mode
    Resolves: #658171


author: Jaroslav Reznik <jreznik@redhat.com> - 7:4.3.4-8
changelog:
  - Resolves: #591967,
      CVE-2010-1000, CVE-2010-1511: improper sanitization of metalink 
      attribute


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Resolves: #549329
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html
  Resolves: #565554
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.
  Resolves: #565210


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  Resolves: #565554
  - Remove mysql.info, which is not freely redistributable
  Related: #560181
  - Revert broken upstream fix for their bug 45058
  Related: #566547
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #557711
  Resolves: #562749


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html
    including fixes for CVE-2010-1621, CVE-2010-1626,
    CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #590598
  - Create mysql group explicitly in pre-server script, to ensure correct GID


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.52-1.1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652553
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.1
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.2
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.3
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-19
changelog:
  - dlm_controld/gfs_controld: make default plock_ownership 0
    Use the simpler, safer, and more reliable option as default.
    (controld_make_default_plock_ownership_0.patch)
    Resolves: rhbz#618303
  - dlm_controld: fix plock checkpoint signatures
    (dlm_controld_fix_plock_checkpoint_signatures.patch)
    Resolves: rhbz#618806
  - dlm_controld: fix plock owner in checkpoints
    (dlm_controld_fix_plock_owner_in_checkpoints.patch)
    Resolves: rhbz#618814
  - cman: fix consensus calculation
    Bump Requires: corosync to 1.2.3-17 to guarantee that corosync
    is at the minimal version for this fix to work.
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#618534


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - Fix regression in "Fix fsck.gfs2 unaligned access on ia64" that
    affects all 32bit systems.
    Rename fsck_gfs2_unaligned_access_on_ia64.patch to
    fsck_gfs2_unaligned_access_on_ia64_part1.patch
    (fsck_gfs2_unaligned_access_on_ia64_part2.patch)
    Resolves: rhbz#608154


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - cman: do not propagate old configurations around
    (cman_do_not_propagate_old_configurations_around.patch)
    cman: Clarify man page on config distribution
    (cman_clarify_man_page_on_config_distribution.patch)
    Resolves: rhbz#619680


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-22
changelog:
  - gfs2-utils: mkfs can't fsync device with 32MB RGs
    (gfs2_utils_mkfs_can_t_fsync_device_with_32mb_rgs.patch)
    Resolves: rhbz#622844


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23
changelog:
  - gfs2-utils: fsck.gfs2 deletes directories if they get too big
    (gfs2_fsck_do_not_delete_directories_if_they_get_too_big.patch)
    Resolves: rhbz#624691


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-23.el6_0.1
changelog:
  - Updating /proc/mounts and /etc/mtab with mount args for GFS2 fs
    (updating_proc_mounts_and_etc_mtab_with_mount_args_for_gfs2_fs.patch)
    Resolves: rhbz#634201


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-23.el6_0.2
changelog:
  - fsck.gfs2 segfaults if journals are missing
    (fsck_gfs2_segfaults_if_journals_are_missing.patch)
    Resolves: rhbz#637699


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23.el6_0.3
changelog:
  - cman init: fix "stop remove" operation
    (cman_init_fix_stop_remove_ops.patch)
  - cman: Calculate expected_votes correctly after leave remove
    (cman_fix_calculate_expected_vote_after_leave_remove.patch)
    Resolves: rhbz#638954


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23.el6_0.4
changelog:
  - cman: fix startup race condition when configs are different across nodes
    (cman_fix_startup_race_condition_with_different_config_versions.patch)
    Resolves: rhbz#639958


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-23.el6_0.6
changelog:
  - gfs2_convert: corrupts file system when directory has di_height 3
    (gfs2_convert_corrupts_file_system_when_directory_has_di_height_3.patch)
    Resolves: rhbz#643279


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1
changelog:
  - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
  - Obsolete old PolicyKit packages


author: Nalin Dahyabhai <nalin@redhat.com> 0.29.1-1
changelog:
  - when we install the mkhomedir subpackage, if there's a running oddjobd, ask
    it to reload its configuration
  - fix missing bits from the namespace changes in configuration files
  - restart the service in %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - drop the shared library and python bindings, which so far as i can tell
    weren't being used, obsoleting them to avoid a mess on upgrades
  - move the mkhomedir helper from %{_libdir}/oddjob to %{_libexecdir}/oddjob
    to make the multilib configuration files agree (#559232)
  - use %global instead of %define


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-2
changelog:
  - backport patch to stop trying to close a stale connection to the bus,
    which used to generate a warning from libdbus, but which now causes an
    assertion failure (#634356)
  - when creating home directories, default to the UMASK setting from
    /etc/login.defs (part of #659681) and ensure the execute bit is set
    on any intermediate directories we create (the rest of #659681)
  - make sure the test helper has consistent permissions and make sure our
    self-tests verify them (#612617)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - make the init script exit with status 2 when given an unknown command, rather
    than with status 1 (#674534)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-5
changelog:
  - signal the system message bus to reload its configuration whenever we
    drop a new configuration file in place for it during package %post (#678345)


