# changelog

author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-9
changelog:
  - Resolves: Bug 815991 - crash in ldap_initialize with multiple threads
  -  previous fix was still crashing in ldclt


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-11
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  - 1.2.10.2-10 was built from the private branch


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-12
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  - Resolves: Bug 821542 - letters in object's cn get converted to lowercase when renaming object


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-14
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  -- patch 0015 fixes a small memleak in previous patch


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-16
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  - Resolves: Bug 830256 - Audit log - clear text password in user changes


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-17
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0019 fixes deref issue.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-18
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0020 disallows users' direct modify on unhashed#user#password


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - updated 'delloem setled' command to indicate SES status and drive
    activities for a PCI-e SSD (#727314)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - added -Y option for ipmitool to hide Kg key from cmdline (#698647)
  - added 'channel setkg' command to set Kg encryption key on remote machine
    (#726390)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-11
changelog:
  - fixed delloem powermonitor on bigendian systems (#731718)
  - fixed memory leak in Serial-over-Lan module (#731977)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-13
changelog:
  - added new options to configure retransmissions on lan/lanplus interfaces
    (#748073)
  - updated dellem command (#739358)
  - fixed exit code of ipmitool -o list (#715615)
  - improved checking of command line arguments (#725993)


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-13.el6
changelog:
  - Fix a problem in the patchset, rhbz#811497 one was applied twice in -12
  - qemu, util: On restart of libvirt restart vepa callbacks (rhbz#812430)
  - qemu, util: Fix netlink callback registration for migration (rhbz#812430)
  - util: Only register callbacks for CREATE operations in virnetdevmacvlan.c (rhbz#812430)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-14.el6
changelog:
  - blockjob: Add new API flags (rhbz#638506)
  - blockjob: Add 'blockcopy' to virsh (rhbz#638506)
  - blockjob: Enhance xml to track mirrors across libvirtd restart (rhbz#638506)
  - blockjob: React to active block copy (rhbz#638506)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#638506)
  - blockjob: Return appropriate event and info (rhbz#638506)
  - blockjob: Support pivot operation on cancel (rhbz#638506)
  - blockjob: Make drive-reopen safer (rhbz#638506)
  - blockjob: Implement block copy for qemu (rhbz#638506)
  - blockjob: Allow for existing files (rhbz#638506)
  - blockjob: Allow mirroring under SELinux (rhbz#638506)
  - blockjob: Accommodate RHEL backport names (rhbz#638506)
  - virsh: Avoid strtol (rhbz#813972)
  - conf: Tighten up XML integer parsing (rhbz#813972)
  - snapshot: Fix memory leak on error (rhbz#782457)
  - virsh: Avoid uninitialized memory usage (rhbz#814080)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-15.el6
changelog:
  - qemu: Improve errors related to offline domains (rhbz#816662)
  - blockjob: Check for active vm before checking blockcopy bits (rhbz#816662)
  - qemu: Preserve original error during migration (rhbz#807907)
  - rpc: Discard non-blocking calls only when necessary (rhbz#807907)
  - qemu: Fix detection of failed migration (rhbz#807907)
  - qemu: Avoid bogus error at the end of tunnelled migration (rhbz#807907)
  - qemu: Make sure qemu can access its directory in hugetlbfs (rhbz#815206)
  - virsh: Fix docs for list command (rhbz#814021)
  - virsh: Fix and clarify the --title flag for the list command in man page (rhbz#814021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-16.el6
changelog:
  - qemuOpenFile: Don't force chown on NFS (rhbz#810241)
  - util: Fix crash when starting macvtap interfaces (rhbz#815270)
  - qemu: Fix segfault when host CPU is empty (rhbz#817078)
  - blockjob: Allow speed setting in block copy (rhbz#815791)
  - blockjob: Fix block-stream bandwidth race (rhbz#815791)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-17.el6
changelog:
  - qemu: Don't modify domain on failed blockiotune (rhbz#819014)
  - qemu: Reject blockiotune if qemu too old (rhbz#819014)
  - qemu: Don't use virDomainDefFormat* directly (rhbz#815503)
  - qemu: Emit compatible XML when migrating a domain (rhbz#815503)
  - usb: Create functions to search usb device accurately (rhbz#815755)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#815755)
  - virsh: Avoid heap corruption leading to virsh abort (rhbz#819636)
  - util: Fix libvirtd startup failure due to netlink error (rhbz#816465)
  - util: Allow specifying both src and dst pid in virNetlinkCommand (rhbz#816465)
  - util: Function to get local nl_pid used by netlink event socket (rhbz#816465)
  - util: Set src_pid for virNetlinkCommand when appropriate (rhbz#816465)
  - domain_conf: Add "usbredir" to list of valid spice channels (rhbz#819498)
  - domain_conf: Add "default" to list of valid spice channels (rhbz#819499)
  - snapshot: Allow block devices past cgroup (rhbz#810200)
  - blockjob: Allow block devices past cgroup (rhbz#810200)
  - util: Avoid libvirtd crash in virNetDevTapCreate (rhbz#817234)
  - python: Fix the forward_null error in Python binding codes (rhbz#771021)
  - xen: Fix resource leak in xen driver (rhbz#771021)
  - test: Fix resource leak in test driver (rhbz#771021)
  - node: Fix resource leak in nodeinfo.c (rhbz#771021)
  - virnet: Fix resource leak in virnetlink.c (rhbz#771021)
  - vmx: Fix resource leak (rhbz#771021)
  - qemu: Fix resource leak (rhbz#771021)
  - uuid: Fix possible non-terminated string (rhbz#771021)
  - node_device: Fix possible non-terminated string (rhbz#771021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-18.el6
changelog:
  - numad: Set memory policy from numad advisory nodeset (rhbz#810157)
  - numad: Copy 'placement' of <numatune> to <vcpu> by default (rhbz#810157)
  - numad: Always output 'placement' of <vcpu> (rhbz#810157)
  - qemu: Avoid the memory allocation and freeing (rhbz#810157)
  - numad: Divide cur_balloon by 1024 before passing it to numad (rhbz#810157)
  - numad: Check numactl-devel if compiled with numad support (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-1
changelog:
  - Change package name from libvirt-qpid to libvirt-qmf
  - Convert to QMFv2 API
  - Make libvirt-qmf a matahari agent
    Resolves: #688200
    Related: #688194


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-3
changelog:
  - Ensure all Domain properties are initialized immediately
  - Correct some erroneous error messages
  - Fix quoting of variables in init script
    Resolves: #729127


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.3.3-6
changelog:
  - merge Joe's changes:
  - improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740732)


author: Joe Orton <jorton@redhat.com> - 5.3.3-11
changelog:
  - add security fixes for CVE-2012-0781, CVE-2011-4153, CVE-2012-0057,
    CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593033


author: Tom Lane <tgl@redhat.com> 8.4.4-2
changelog:
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #561010


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812081


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830725


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.
  - Fix requires to include pygtk2-libglade


author: <dwalsh@redhat.com> - 3.0.45-1
changelog:
  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: <dwalsh@redhat.com> - 3.0.47-3
changelog:
  - Sedispatch is not handling audit messages correctly, 
    this fix allows setroubleshoot to process alerts.
  Resolves: #575686


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - Fix the double suspend on lid close issue when not using KMS hardware.
  - Resolves: #543948


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Do not ask the user to look at the help file on suspend failure,
    it is already out of date.
  - Resolves: #640296


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-5
changelog:
  - Reinstate the "Do nothing" option on the lid close combo because
    per-screen DPMS does not work in RHEL6.
  - Resolves: #623674


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.43.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787144
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed upstreamed patch7 - java-1.6.0-openjdk-6_2-Z-rmi-fix.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Sync with 6.3:
  - Bump to IcedTea6 1.11.3
  - With removed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Including patch7 - java-1.6.0-openjdk-jstack.patch
  - Including patch3, java-1.6.0-openjdk-java-access-bridge-security.patch modification
  - Resolves: rhbz#828751


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828751


author: Ian Main <imain@redhat.com> 0.2.22-1
changelog:
  - Fix init script to return 2 when invoked with no arguments and add try-restart
    to usage list.  Resolves: #570492


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831561
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-11
changelog:
  Resolves: #771464
  Resolves: #771465
  Resolves: #771466
  Resolves: #771467
  Resolves: #771473
  Resolves: #771475


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - update to 0.4.0
  - Modified the dependency to be libvirt-client instead of libvirt.
  - Added libvirt APIs up through 0.7.0
  - Added maven building tools.
  - Fixed connection and domain bugs found by Thomas Treutner
  - Resolves: rhbz#554348


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - update to upstream 0.4.1
  - better scheduler parameters checking and error reporting 
  - Resolves: rhbz#557066


author: Daniel Veillard <veillard@redhat.com> - 0.4.2-2
changelog:
  - Missing /usr/share/javadoc/libvirt symlink
  - Resolves: rhbz#579037
  - Allow libvirt-java build on all architecture, lower require to java >= 1.5
  - Resolves: rhbz#582294


author: Daniel Veillard <veillard@redhat.com> - 0.4.5-1
changelog:
  - rebase to 0.4.5
  - Added libvirt support up to 0.8.1 API
  - Improved packaging for javadocs
  - Better Free/Close handling
  - Resolves: rhbz#582332


author: Daniel Veillard <veillard@redhat.com> - 0.4.7-1
changelog:
  - rebase to 0.4.7
  - Added libvirt support up to 0.8.2 API
  - Only throw errors on real errors.
  - Remote non thread safe error reporting
  - fix 600819 Incorrect scheduler parameter value passed to native API.
  - Resolves: rhbz#675044


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.1-1
changelog:
  - Backport hivex package from Fedora Rawhide.
  - Exclude s390, s390x because of lack of OCaml packages.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Rebase to upstream version 1.2.4 (RHBZ#642631).
    * Python bindings (python-hivex subpackage).
    * Adds hivex_set_value API call (Conrad Meyer).
    * Miscellaneous small bug fixes.
  - Fix Source0.
  - Fix builds with recent perl (Dan Horák).


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-3
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4
changelog:
  - Rebase to upstream version 1.3.3
    resolves: rhbz#734208
  - Add upstream patch: hivexml: Remove unused variable.
  - Add upstream patch: hivex: Added gnulib includes from builddir [...]


author: Harald Hoyer <harald@redhat.com> 004-268
changelog:
  - fixed dracut manpage
  Resolves: rhbz#703164
  - fixed assembling of mdraid degraded arrays
  Resolves: rhbz#761584
  - fixed ifup to set broadcast address
  Resolves: rhbz#752584
  - fixed iscsiroot for multiple iscsi disks
  Resolves: rhbz#752066


author: Harald Hoyer <harald@redhat.com> 004-271
changelog:
  - no vconfig requirement anymore
  Resolves: rhbz#714039
  - new option --omit-drivers
  Resolves: rhbz#722879
  - suppress udevadm settle output
  Resolves: rhbz#747840
  - extend lsinitrd to cope with xz images
  Resolves: rhbz#752005
  - respect primary console setting
  Resolves: rhbz#752073


author: Harald Hoyer <harald@redhat.com> 004-273
changelog:
  - fixed option --omit-drivers
  Resolves: rhbz#722879
  - increase wait time for network interfaces to get UP to 10s
  Resolves: rhbz#794863


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Jeff Law <law@redhat.com> - 2.12-1.74
changelog:
  - Correctly handle large response to AF_UNSPEC dns lookup (#795498)
    - Always use another area after a failed allocation in the
     main arena (#795328)


author: Jeff Law <law@redhat.com> - 2.12-1.78
changelog:
  - Fix option rotate with single IPV6 server (#804630)
    - Fix loading first object along a path when tracing (#808337)
    - Don't free non-malloced memory.  (#809602)


author: Jeff Law <law@redhat.com> - 2.12-1.80.el6_3.3
changelog:
  - Fix incorrect/corrupt patchfile for 833716.  Did not
      affect generated code, but tests were missing (#833716).


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.2.rc1
changelog:
  - harden dns_zone_setmasterswithkeys() to avoid INSIST failures
  - build with '--enable-fixed-rrset'
  - fix potential memory leak in code which processes rndc authentication
    (#749582)
  - generate rndc.key during `service named start` (#768798)
  - nslookup: improve handling of AA responses with recursion off
  - removed obsolete bind97-rh714049.patch patch


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.3.rc1
changelog:
  - decrease severity of various errors related to outside DNS environment
    (#788870)
  - fixed various bind-chroot packaging errors (#789886)
  - use portreserve to reserve rndc control port (#790682)


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.9.rc1
changelog:
  - fix race condition in the resolver module
  - nslookup: return non-zero exit code when fail to get answer (#816164)


author: Deepak Bhole <dbhole@redhat.com> 1.1.1-1
changelog:
  - Bump to 1.1.1
  - Removed icedtea-web-shared-classloader.patch (now upstream)
  - Updated alternative removal commands to reflect the situation in RHEL6
  - Resolves: rhbz#713514


author: Deepak Bhole <dbhole@redhat.com> 1.1.2-1
changelog:
  - Updated to 1.1.2
  - Resolves: rhbz#683479
  - Resolves: rhbz#725794
  - Resolves: rhbz#718181 
  - Resolves: rhbz#731358
  - Resolves: rhbz#725718
  - Use the new --with-jre-home switch (#731358)


author: Adam Tkac <atkac redhat com> - 1.1.0-0.5.b1
changelog:
  - don't crash on stop/reload when no zones are found in LDAP (#805814)
  - compute SOA attributes correctly when modifying it (#805871)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-6
changelog:
  - removed the --with-ldap-*conf options
  - added RELRO flags
    Resolves: rhbz#709235
    Resolves: rhbz#709859


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-8
changelog:
  - created a separate ldap configuration file, sudo-ldap.conf
  - visudo: mark unused aliases as warnings, not errors
  - backported signal handling from 1.7.5
  - don't disable coredumping from the code, rely on /proc/sys/fs/suid_dumpable
  - use correct SELinux context when editing files with sudoedit
  - fixed visudo syntax checks
  - fixed typos and inconsistencies in documentation
  - switched to an updated -getgrouplist patch to fix sudo -l -U <user> behavior 
    Resolves: rhbz#760843
    Resolves: rhbz#736030
    Resolves: rhbz#697775
    Resolves: rhbz#726634
    Resolves: rhbz#708515
    Resolves: rhbz#736653
    Resolves: rhbz#667120
    Resolves: rhbz#769701
    Resolves: rhbz#751680
    Resolves: rhbz#604297
    Resolves: rhbz#797511


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-9
changelog:
  - fixed uninitialized value warning introduced with the sudoedit-selinux patch
    Resolves: rhbz#806386


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10
changelog:
  - fixed bug in Runas_Spec group matching (#810147)
  - disable `sudo -l' output word wrapping if the output
    is piped (#810326)
  - fixed `sudo -i' command escaping (#806095)
    Resolves: rhbz#806095
    Resolves: rhbz#810147
    Resolves: rhbz#810326


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10.1
changelog:
  - backported ldap code modifications that fix an issue with tls_checkpeer (#810372)
    Resolves: rhbz#810372


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-11
changelog:
  - use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK (#821976)
    Resolves: rhbz#821976


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-27.P1
changelog:
  - dhclient-script: fix looking for other running dhclients (#656339)
  - avoid infinite loop when parsing slp-service-scope option (#747017)
  - dhclient-script: arping address in BOUND|RENEW|REBIND|REBOOT (#752116)
  - send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1
changelog:
  - don't flush old addresses in PREINIT (#815355)
  - remove inherit-leases.patch - it's not needed anymore (#815355)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1.1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843120)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843120)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-19
changelog:
  - Resolves: Bug 834096 - slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)


author: Jaromir Capik <jcapik@redhat.com> - 6.3.2-63.el6_3.3
changelog:
  - Resolves: rhbz#838998
  - Fixing 'sa -u' SIGSEGVs & wrong UIDs
  - Fixing the ChengeLog version typos ... 6.2.3 -> 6.3.2


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-26
changelog:
  - backport patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761523)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761523)
  - backport patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761523)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-27
changelog:
  - reintroduce patch to accept keytab entries with vno==0 as matches when
    we're searching for an entry with a specific name/kvno (#782211)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-28
changelog:
  - when processing etype-info and etype-info2 preauth hints, remember them all,
    and if we fail to generate enc_timestamp preauth data due to a
    key-table-entry-not-found error with a given set of hints, move on to try the
    next one until we run out of hints (#748528)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-29
changelog:
  - backport fixes to GSSAPI to obtain creds for all available mechanisms when we
    don't specify a mechanism when acquiring credentials, and to not try to use
    the default credential when accepting an initiator token for a mechanism for
    which we have no verifier creds (#799161, RT#6894)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-30
changelog:
  - move removal of krb5-user.info from %postun to %preun, and use the name
    of the compressed file (#801033)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-31
changelog:
  - backport fixes for retrying a request with referrals disabled if we get
    a referral to the same realm (#786216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-32
changelog:
  - revise the fix for #748528 so that it correctly resets the shallow
    etype_info list in cases where we get both etype-info and etype-info2


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33
changelog:
  - selinux: reliably reset the file creation context after setting it when we
    flush replay caches, in cases where there was none explicitly set beforehand
    (#813883)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.1
changelog:
  - add candidate patch from upstream to fix freeing uninitialized pointer in
    the KDC (MITKRB5-SA-2012-001, CVE-2012-1015, #839859)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.2
changelog:
  - pull up the patch to correct a possible NULL pointer dereference in
    kadmind (CVE-2012-1013, #827517)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-38
changelog:
  - fixed snmpd crashing with many AgentX subagent (#749227)
  - fixed SNMPv2-MIB::sysObjectID value when "sysObjectID" config file
    option with long OID was used (#786931)
  - fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
  - fixed parsing of "proxy" snmpd.conf option not to enable
    verbose logging by default (#746903)
  - added new "realStorageUnits" config file option to support
    disks > 16 TB in hrStorageTable (#741789)
  - added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
    (#746903)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#748907)
  - fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
    SNMP-SET request on 64-bit platforms (#754275)
  - fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
    SELinux context (#754971)
  - fixed memory leak when agentx subagent disconnects in the middle
    of request processing (#736580)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#788954)


author: Joe Orton <jorton@redhat.com> - 1.3.9-4
changelog:
  - add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
  - add fix for CVE-2011-0419 (#703520)


author: Jarod Wilson <jarod@redhat.com> [2.6.32-277.el6]
changelog:
  - [scsi] be2iscsi: fix dma free size mismatch regression (Mike Christie) [824287]
  - [scsi] libsas: check dev->gone before submitting sata i/o (David Milburn) [824025]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-278.el6]
changelog:
  - [kernel] sysctl: silence warning about missing strategy for file-max at boot time (Jeff Layton) [803431]
  - [net] sunrpc: make new tcp_max_slot_table_entries sysctl use CTL_UNNUMBERED (Jeff Layton) [803431]
  - [drm] i915: set AUD_CONFIG N_value_index for DisplayPort (Dave Airlie) [747890]
  - [scsi] scsi_lib: fix scsi_io_completion's SG_IO error propagation (Mike Snitzer) [827163]
  - [fs] nfs: Fix corrupt read data after short READ from server (Sachin Prabhu) [817738]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.1.1.el6]
changelog:
  - [kernel] Prevent keyctl new_session from causing a panic (David Howells) [833433 827424] {CVE-2012-2745}
  - [net] ipv6/netfilter: fix null pointer dereference in nf_ct_frag6_reasm() (Petr Matousek) [833410 833412] {CVE-2012-2744}
  - [fs] nfs: Map minor mismatch error to protocol not support error (Steve Dickson) [832365 796352]
  - [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate() (Lukas Czerner) [833034 830209]
  - [ata] libata: Add 2GB ATA Flash Disk/ADMA428M to DMA blacklist (Prarit Bhargava) [832363 812904]
  - [netdrv] r8169: fix typo in firmware filenames (Ivan Vecera) [832359 829211]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.2.1.el6]
changelog:
  - [net] bonding: Fix up refcounting issues with bond/vlan config (Neil Horman) [837843 836164]
  - [net] bonding: Always add vid to new slave group (Neil Horman) [837227 834764]
  - [net] bonding: fix regression on vlan module removal (Neil Horman) [837218 823822]
  - [kernel] futex: Fix uninterruptible loop due to gate_area (Jerome Marchand) [836904 834038]
  - [kernel] futex: Fix regression with read only mappings (Jerome Marchand) [836904 834038]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.4.1.el6]
changelog:
  - [fs] proc: stats: Use arch_idle_time for idle and iowait times if available (Steve Best) [841579 841149]
  - [drm] i915: fix integer overflow in i915_gem_execbuffer2() (Jacob Tanenbaum) [824553 824555] {CVE-2012-2383}
  - [usb] core: change the memory limits in usbfs URB submission (Don Zickus) [841667 828271]
  - [usb] core: unify some error pathways in usbfs (Don Zickus) [841667 828271]
  - [netdrv] ixgbe: BIT_APP_UPCHG not set by ixgbe_copy_dcb_cfg() (Andy Gospodarek) [840156 814044]
  - [netdrv] ixgbe: driver fix for link flap (Andy Gospodarek) [840156 814044]
  - [net] bridge: Fix enforcement of multicast hash_max limit (Thomas Graf) [840023 832575]
  - [net] bluetooth: fix sco_conninfo infoleak (Jacob Tanenbaum) [681307 681308] {CVE-2011-1078}
  - [wireless] ipw2200: remove references to CFG80211_WEXT config option (John Linville) [841406 839311]
  - [netdrv] be2net: enable GRO by default (Ivan Vecera) [838821 837230]
  - [virt] kvm/vmx: Fix KVM_SET_SREGS with big real mode segments (Orit Wasserman) [841411 756044]
  - [fs] writeback: merge for_kupdate and !for_kupdate cases (Eric Sandeen) [832360 818172]
  - [fs] writeback: fix queue_io() ordering (Eric Sandeen) [832360 818172]
  - [fs] writeback: don't redirty tail an inode with dirty pages (Eric Sandeen) [832360 818172]


author: Petr Sabata <contyk@redhat.com> - 0.9.43-12
changelog:
  - lldpad: fix core dump (#749943)
  - Support for multiple filter info formats (#731407)
  - Updating documentation for previous commit (#749057)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - Build libraries with -fpic/-fPIC, not with -fPIE (#736999)
  - Add dhcp-common subpackage (#736194)
  - Do not run dhcpd as root (#693381)
    - Use '--enable-paranoia' configure flag
    - Create dhcpd user in %pre
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'
    - Move changing of the effective user/group ID after writing new PID file.


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011l-3
changelog:
  - State of Bahia, Brazil, to resume Summer Time on Oct 16
  - The project moved, reflect this in URL
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011n-1
changelog:
  - Rebase to 2011n
    - Cuba postponed DST by two weeks to Nov 13
    - Fiji will enter DST on Jan 21
  - Add a patch for the leap second that will occur this summer
  - Resolves: #773755


author: Petr Machata <pmachata@redhat.com> - 2011n-2
changelog:
  - The Chilean Government has decided to postpone the entrance into
    winter time (to leave DST) from March 11 2012 to April 28th 2012
  - Resolves: #796569


author: Petr Machata <pmachata@redhat.com> - 2012b-1
changelog:
  - Rebase to 2012b; changes vs. 2011n-2:
    - Changes to zones for Antarctica stations
    - Armenia abolished DST in 2012 and forward
    - Cuba enters DST on 31st March
    - Falkland Islands will stay on permanent Summer Time
    - New zone for Creston Valley, Canada, which differs from Dawson
      Creek in past stamps.  Changes to historical stamps in Canada.
    - Last year, Tokelau skipped over the date line together with Samoa
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012b-2
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820732


author: Petr Holasek <pholasek@redhat.com> - 2:0.55-32
changelog:
  - NUMA awareness bits were thrown away (from #673234 and #798648)
  - Mistake in sysconfig documentation was fixed (bz 732435)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-20
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#730311)
  - fix regression: openldap built without tcp_wrappers (#742592)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-21
changelog:
  - fix: ldapsearch crashes with invalid parameters (#743781)
  - fix: replication (syncrepl) with TLS causes segfault (#783445)
  - fix: openldap server in MirrorMode sometimes fails to resync via syncrepl (#784211)
  - use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
  - fix: missing options in manual pages of client tools (#745470)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
  - fix: slapd segfaults when certificate key cannot be loaded (#796808)
  - Jan Synáček <jsynacek@redhat.com>
    + fix: overlay constraint with count option work bad with modify operation (#742163)
    + fix: Default SSL certificate bundle is not found by openldap library (#742023)
    + fix: Duplicate close() calls in OpenLDAP (#784203)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-23
changelog:
  - security fix: CVE-2012-1164: assertion failure by processing search queries
    requesting only attributes for particular entry (#813162)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-24
changelog:
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
  - fix: memberof overlay on the frontend database causes server segfault (#730745)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
changelog:
  - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
  - fix: memory leak: def_urlpre is not freed (#816168)
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26.2
changelog:
  - CVE-2012-2668 (#825875)
    + cipher suite selection by name can be ignored
    + default cipher suite is always selected


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-8
changelog:
  - Resolves: rhbz#798983 Kannada langpack missing
  - Resolves: rhbz#798926 fix endianess assumptions of lotuswordpro filter
  - Resolves: rhbz#800272 complain about unknown commandline options


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-12
changelog:
  - Resolves: rhbz#810267 better CSV import default separators
  - Resolves: rhbz#807392 focus problems and tearable menus


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-13
changelog:
  - Resolves: rhbz#809466 libreoffice-core (unintentionally) provides
    libraptor.so.1()() and librdf.so.0()()


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-147
changelog:
  - Fix man pages for SELinux users
  - Allow all user domains to setexec
  - Allow cobblerd to get SELinux status and booleans
  - Add labeling for /etc/zipl.conf
  Resolves:#813803
  - Allow fenced to read SNMP lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-149
changelog:
  - Add labeling for /usr/sbin/matahari-dbus-sysconfigd
  - Add additional labeling for zarafa
  - Allow guest_t to fix labeling
  - Corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - squashfs does not support xattr in RHEL6
  Resolves:#815898
  - Remove pyzor labeling and move it to spamassassin.fc
  - Fix config.tgz


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-151
changelog:
  - Add openstack-nova, openstack-keystone, openstack-glance, openstack-quantum policies
  - Allow sysadm_t to create other crontabs
  - Allow nfsd_t to read defaul_t link files
  - Fix labeling for /var/run/heartbeat
  - Fixes for admin_template() interface to make sysadm_secadm.pp module working correctly
  - More fixes for condor policy
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Fix auth_role() interface
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-152
changelog:
  - Add label for condor_starter
  Resolves:#807682
  - Dontaudit sys_module for brctl
  - Allow winbind to send signull to smbd
  - Add jacorb port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-154
changelog:
  - Allow fenced to manage snmpd lib files
  - Allow certmonger to get attributes on init script files
  Resolves:#790967
  - Fix labeling for Firefox plugins
  Resolves:#747993
  - Add mta_signal_user_agent() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155
changelog:
  - Allow setroubleshootd to execute rpm
  Resolves:#833053
  - Add labeling for /usr/lib/flash-plugin/libflashplayer.so


author: Doug Ledford <dledford@redhat.com> - 1.0.15-1
changelog:
  - Update to latest upstream release (adds FDR support and fixes 696019 the
    upstream way)
  - Include fixes in git not yet in a release
  - Related: bz750609
  - Resolves: bz700289


author: Jarod Wilson <jarod@redhat.com> [2.6.32-272.el6]
changelog:
  - [md] bitmap: ensure to load bitmap when creating via sysfs (Jes Sorensen) [821329]
  - [infiniband] mlx4: fix RoCE oops (Doug Ledford) [749059]
  - [x86] setup: Add rh_check_supported() (Prarit Bhargava) [821561]
  - [mm] read_pmd_atomic: fix pmd_populate SMP race condition (Andrea Arcangeli) [820762] {CVE-2012-1179}
  - [drm] i915: add Ivy Bridge GT2 Server entries (Dave Airlie) [817926]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-273.el6]
changelog:
  - [s390] qeth: remove siga retry for HiperSockets devices (Hendrik Brueckner) [817090]
  - [scsi] lpfc: Changed version number to 8.3.5.68.5p (Rob Evers) [821515]
  - [scsi] lpfc: Fixed system crash due to not providing SCSI error-handling host reset handler (Rob Evers) [821515]
  - [scsi] lpfc: Correct handling of SLI4-port XRI resource-provisioning profile change (Rob Evers) [821515]
  - [scsi] lpfc: Fix driver crash during back-to-back ramp events. (Rob Evers) [821515]
  - [scsi] lpfc: Fixed system panic due to midlayer abort and driver complete race on SCSI cmd (Rob Evers) [821515]
  - [scsi] sd: Fix device removal NULL pointer dereference (Rob Evers) [817853]
  - [md] Add del_timer_sync to mddev_suspend, fixes a panic (Jonathan E Brassow) [818371]
  - [virt] virtio_net: invoke softirqs after __napi_schedule (Michael S. Tsirkin) [819435]
  - [virt] virtio_net: do not reschedule rx refill forever (Michael S. Tsirkin) [819435]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-274.el6]
changelog:
  - [net] sunrpc: fix loss of task->tk_status after rpc_delay call in xprt_alloc_slot (Jeff Layton) [822189]
  - [net] sunrpc: suppress page allocation warnings in xprt_alloc_slot() (Jeff Layton) [822189]
  - [net] netfilter: Fix ip_route_me_harder triggering ip_rt_bug (Jiri Benc) [812108]
  - [net] netfilter/tproxy: do not assign timewait sockets to skb->sk (Jiri Benc) [812108]
  - [usb] Don't fail USB3 probe on missing legacy PCI IRQ (Don Zickus) [812254]
  - [usb] Fix handoff when BIOS disables host PCI device (Don Zickus) [812254]
  - [usb] Remove duplicate USB 3.0 hub feature #defines (Don Zickus) [812254]
  - [usb] Set hub depth after USB3 hub reset (Don Zickus) [812254]
  - [usb] xhci: Fix encoding for HS bulk/control NAK rate (Don Zickus) [812254]
  - [usb] Fix issue with USB 3.0 devices after system resume (Don Zickus) [812254]
  - [virt] xenpv: avoid paravirt __pmd in read_pmd_atomic (Andrew Jones) [822697]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-275.el6]
changelog:
  - [net] bridge: fix broadcast flood regression (Jesper Brouer) [817157]
  - [ipc] mqueue: use correct gfp flags in msg_insert (Doug Ledford) [750260]
  - [security] fix compile error in commoncap.c (Eric Paris) [806726] {CVE-2012-2123}
  - [security] fcaps: clear the same personality flags as suid when fcaps are used (Eric Paris) [806726] {CVE-2012-2123}
  - [fs] proc: Fix vmstat crashing with trap divide error (Larry Woodman) [820507]
  - [net] rds: fix rds-ping inducing kernel panic (Jay Fenlason) [803936] {CVE-2012-2372}
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [814504] {CVE-2012-2136}
  - [virt] kvm: Fix buffer overflow in kvm_set_irq() (Avi Kivity) [816155] {CVE-2012-2137}


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6
changelog:
  - Imported from Fedora into RHEL 6.3 branch
  - Removed unused macros
  - Removed rh740762 patch (removed from Fedora now too)
  - Disabled system lcms (not available in RHEL6)
  - Updated virtual provides to provide "7" specific items
  - Made exclusive arch for i686 and x86_64


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.1
changelog:
  - Synched with 7.0 branch
  - Removed unnecessary unsetting of USE_SYSTEM_LCMS
  - Added SystemTap fixes from Mark Wielaard


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.3
changelog:
  - Added ALT_STRIP_POLICY="no_strip" flag so that binaries are not stripped
  - Collapsed if cases for x86
  - Decreased priority
  - Removed xalan and xerces reqs in favor of libxslt which is what we use


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.3-2.2.1.el6
changelog:
  - Used newly prepared tarball with security fixes
  - Bump to icedtea7-forest-2.2.1
  - _mandir/man1/jcmd-name.1 added to alternatives
  - Updated rhino.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Modified partially upstreamed patch302 - systemtap.patch
  - Temporarly disabled patch102 - java-1.7.0-openjdk-size_t.patch
  - Removed already upstreamed patches 104,108,109,301,110:
    - java-1.7.0-openjdk-arm-ftbfs.patch
    - java-1.7.0-openjdk-system-zlib.patch
    - java-1.7.0-openjdk-remove-mimpure-opt.patch
    - systemtap-alloc-size-workaround.patch
    - java-1.7.0-fix-gio-detection.patch
  - Access gnome bridge jar forced to be 644
  - Added patch303 - java-1.7.0-openjdk-jstack.patch which resolved RH804632 for openjdk6
  - Resolves: rhbz#828759


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6
changelog:
  - Updated priority to be > 17000 and to depend on buildver variable
  - Variable buildver increased to 5 as it should be
  - Resolves: rhbz#828759


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.48
changelog:
  - Add 0124-RHBZ-751039-fix-shutdown.patch
    * make sure to test if the threads have been cancelled after locking
  - Add 0125-RHBZ-727429-dont-print-exec-fails.patch
  - Add 0126-RHBZ-740760-kpartx-man-page.patch
  - Add 0127-RHBZ-737051-add-netapp-brand.patch
  - Add 0128-RHBZ-796384-fix-alua.patch
    * gerneralize the vpd 0x83 handling
  - Add 0129-RHBZ-788963-eternus-config.patch
  - Add 0130-RHBZ-754586-use-sync-support.patch 
    * multipathd and kpartx now use udev_sync_support. They just don't
      use any cookies
  - Add 0131-RHBZ-662433-override-queue-no-daemon.patch
    * make queue_without_daemon default to off, but make service restart
      override that so, you won't fail IO on restart.
  - Add 0132-RHBZ-744756-regex-hw-match.patch
    * add hwtable_regex_match parameter, which makes the user device entries
      in multipath.conf regex with the builtin ones to override them.
  - Add 0133-RHBZ-744210-config-changes.patch
    * default max_fs to "max" and make user_friendly_names configurable in
      the devices and multipaths section.
  - Add 0134-RHBZ-769527-fix-flush-on-last-del.patch
  - Resolves: bz #662433, #727429, #737051, #740760, #744210, #744756, #751039
  - Resolves: bz #754586, #769527, #788963, #796384


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.49
changelog:
  - Modify 0132-RHBZ-744756-regex-hw-match.patch
    * The regex comparison was working in the wrong direction.
  - Modify 0133-RHBZ-744210-config-changes.patch
    * add missing entries to store_hwe
  - Add 0135-RHBZ-798541-build-options.patch
    * build rpm with RPM_OPT_FLAGS
  - Add 0136-RHBZ-799908-ibm-xiv.patch
  - Add 0137-RHBZ-799842-change-netapp-config.patch
  - Add 0138-RH-fix-strings.patch
    * fix two spots where multipath wasn't checking string size before copying
  - Pass RPM_OPT_FLAGS to make
  - Resolves: bz #798541, #799842, #799908
  - Related: bz #744210, #744756


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.50
changelog:
  - Modify 0135-RHBZ-798541-build-options.patch
    * switch from compiling with -lpthread to -pthread, to make sure
      and use reentrant versions of functions.
  - Related: bz #798541


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.51
changelog:
  - Add 0139-RHBZ-800288-netapp-devloss.patch
    * Set fast_io_fail_tmo and dev_loss_tmo for netapp devices
  - Add 0140-RHBZ-803527-blacklist-management-luns.patch
  - Resolves: bz #800288, #803527


author: Benjamin Marzinski <bmarzins@redaht.com> -0.4.9.52
changelog:
  - Modify 0130-RHBZ-754586-use-sync-support.patch
    * This fix now just calls dm_task_update_nodes() after renaming the
      the devices.
  - Refresh 0110-RHBZ-725541-04-serialize-startup.patch
  - Refresh 0131-RHBZ-662433-override-queue-no-daemon.patch
  - Refresh 0135-RHBZ-798541-build-options.patch
  - Resolves: bz #805809


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.54
changelog:
  - Modify 0132-RHBZ-744756-regex-hw-match.patch (bz #802630)
    * Added documentation to the multipath.conf man page
  - Modify 0138-RH-fix-strings.patch (bz #810208)
  - Resolves: bz #802630, #810208


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.55
changelog:
  - Modify 0131-RHBZ-662433-override-queue-no-daemon.patch
    * enforce queueing on condrestart as well
  - Add 0142-RHBZ-769527-fix-features-build.patch
    * remove "queue_if_no_path" feature when flushing due to
      "flush_on_last_del"
  - Add 0143-RHBZ-467709-followover-chkr-state.patch
    * Only failback if the path checker's reported state has changed
  - Resolves: bz #467709, #769527
  - Related: bz #662433


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.56
changelog:
  - Modify 0137-RHBZ-799842-change-netapp-config.patch
    * Add pg_init_retries to netapp config
  - Add 0144-RHBZ-812832-shutdown-crash.patch
    * kill waiter threads with pthread_cancel() instead of SIGUSR1
  - Resolves: bz #799842, #812832


author: Benjmain Marzinski <bmarzins@redhat.com> -0.4.9.56.el6_3.1
changelog:
  - Add 0145-RHBZ-831045-realloc-vector.patch
    * fix deleting items from vector, and handle error cases
  - Resolves: bz #837594


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.287.el6
changelog:
  - kvm-trace-events-Rename-next-argument.patch [bz#798676]
  - kvm-Revert-raw-posix-do-not-linearize-anymore-direct-I-O.patch [bz#814617]
  - Resolves: bz#798676
    (do not use next  as a variable name in qemu-kvm systemtap tapset)
  - Resolves: bz#814617
    (NFS performance regression in large file sequential writes.)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.288.el6
changelog:
  - kvm-qcow2-Don-t-hold-cache-references-across-yield.patch [bz#812705]
  - Resolves: bz#812705
    (Installing guest with cluster_size=4096, failed)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.289.el6
changelog:
  - kvm-virtio-serial-bus-fix-guest_connected-init-before-dr.patch [bz#787974]
  - kvm-virtio-serial-bus-Unset-guest_connected-at-reset-and.patch [bz#787974]
  - Resolves: bz#787974
    (Spice Client mouse loss after live migrate windows guest with spice vmc channel and inactive guest service)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.290.el6
changelog:
  - kvm-block-change-block-job-set-speed-argument-from-value.patch [bz#813953]
  - kvm-block-add-speed-optional-parameter-to-block-stream.patch [bz#813953]
  - Resolves: bz#813953
    (block-job-set-speed is racy with block-stream/drive-mirror)


author: Eduardo Habkost <ehabkost@redhat.com> - 2:0.12.1.2-2.291.el6
changelog:
  - kvm-fix-mirror_abort-NULL-pointer-dereference.patch [bz#818226]
  - kvm-fail-drive-reopen-before-reaching-mirroring-steady-s.patch [bz#813862]
  - kvm-qemu-kvm-rhev-obsoletes-all-released-qemu-kvm-versio.patch [bz#818620]
  - Resolves: bz#813862
    (post-snap1 fixups to live block copy aka mirroring)
  - Resolves: bz#818226
    (Weird check for null pointer in mirror_abort())
  - Resolves: bz#818620
    (qemu-kvm-rhev should obsolete qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - 2:0.12.1.2-2.292.el6
changelog:
  - kvm-block-do-not-reuse-the-backing-file-across-bdrv_clos.patch [bz#816471]
  - kvm-block-Introduce-path_has_protocol-function.patch [bz#818876]
  - kvm-block-Fix-the-use-of-protocols-in-backing-files.patch [bz#818876]
  - kvm-block-simplify-path_is_absolute.patch [bz#818876]
  - kvm-block-protect-path_has_protocol-from-filenames-with-.patch [bz#818876]
  - kvm-qemu-img-make-info-backing-file-output-correct-and-e.patch [bz#818876]
  - Resolves: bz#816471
    (qemu-kvm is not closing the merged images files (mirroring with "full"=true))
  - Resolves: bz#818876
    (streaming to stable iscsi path names (with colons) fails to close backing file)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.293.el6
changelog:
  - kvm-qxl-set-size-of-PCI-IO-BAR-correctly-16-for-revision.patch [bz#698936]
  - Resolves: bz#698936
    (Migrate failed from RHEL6.1 host to RHEL6.3 host with -M rhel6.1.0 (qxl and usb device related))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.294.el6
changelog:
  - Re-adding patches that were missing
  - kvm-scsi-fix-fw-p1-take2.patch [bz#782029]
  - kvm-scsi-fix-fw-p2-take2.patch [bz#782029]
  - kvm-remove-blkmirror-take2.patch [bz#802284]
  - Resolves: bz#782029
    ([RFE] virtio-scsi: qemu-kvm implementation)
  - Resolves: bz#802284
    (RFE: Support live migration of storage (mirroring))


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6
changelog:
  - kvm-x86-Pass-KVMState-to-kvm_arch_get_supported_cpui.patch [bz#819562]
  - kvm-Expose-CPUID-leaf-7-only-for-cpu-host-v2.patch [bz#819562]
  - Resolves: bz#819562
    (SMEP is enabled unconditionally)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.295.el6_3.1
changelog:
  - postinstall scriptlet no longer loads KVM modules [bz#839897]
  - kvm-isa-bus-Remove-bogus-IRQ-sharing-check.patch [bz#840054]
  - Resolves: bz#840054
    (guest fails with error: isa irq 4 already assigned when starting guest with more than two serial devices)
  - Resolves: bz#839897
    (postinstall scriptlet no longer loads KVM modules)


author: Harald Hoyer <harald@redhat.com> 147-2.34
changelog:
  - add CFLAGS and LDFLAGS to add missing PIE and RELRO flags
  Resolves: rhbz#676004
  - fixed udevadm trigger segmentation fault
  Resolves: rhbz#677857


author: Harald Hoyer <harald@redhat.com> 147-2.36
changelog:
  - handle Vodafone K3565-Z 3G modem
  Resolves: rhbz#632646
  - update path_id to upstream version, which can handle SAS devices that 
    have no enclosure and handles iSCSI devices.
  Resolves: rhbz#698540 rhbz#714951
  - use IFINDEX for temporary network interface renaming
  Resolves: rhbz#701265
  - udev now changes the IO scheduler for all disks except sata disks to the 
    "deadline" scheduler.
  Resolves: rhbz#711254


author: Harald Hoyer <harald@redhat.com> 147-2.37
changelog:
  - add requires for libgudev1 on libudev with version and release
  Resolves: rhbz#727500
  - change import property buffer to 16384 bytes
  Resolves: rhbz#726566


author: Harald Hoyer <harald@redhat.com> 147-2.41
changelog:
  - add "nowatch" option to manpage
  Resolves: rhbz#628762
  - fixed return code of udev-post for "status"
  Resolves: rhbz#735410
  - fixed udev_device_get_devnode()
    backported cdb1d7608a2e2ba708a890eeab6e5e99409a1953
  Resolves: rhbz#784648


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.2
changelog:
  - qemu_hotplug: Don't free the PCI device structure after hot-unplug (rhbz#836916)
  - nodeinfo: Drop static variable (rhbz#836919)
  - nodeinfo: Avoid probing host filesystem during test (rhbz#836919)
  - nodeinfo: Add some more tests (rhbz#836919)
  - nodeinfo: Get the correct CPU number on AMD Magny Cours platform (rhbz#836919)
  - nodeinfo: Test more details (rhbz#836919)
  - drop sanlock on i686 since it is not available anymore


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.3
changelog:
  - sanlock: Fix locking for readonly devices (rhbz#838819)
  - Add support for shared sanlock leases (rhbz#838819)
  - Fix compilation on older sanlock (rhbz#838819)


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.9-1.el6
changelog:
  - Update to 2.7.9 (RH bug #616917).
  - Remove patches now included upstream:
      pidgin-2.6.6-clientLogin-proxy-fix.patch
      pidgin-2.6.6-clientLogin-use-https.patch
      pidgin-2.6.6-CVE-2010-1624.patch
      pidgin-2.6.6-CVE-2010-3711.patch
  - Disable the translation updates patch.  It doesn't apply anymore and
    will have to be redone.  Saving the patch for now in case some parts
    are still useful to translators.


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.9-5.el6.1
changelog:
  - Add patch for CVE-2012-1178 (RH bug #837560).
  - Add patch for CVE-2012-2318 (RH bug #837560).
  - Add patch for CVE-2012-3374 (RH bug #837560).


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-27
changelog:
  - last update of init script modified to work with SELinux correctly
  - added support for new configuration option - file limit for service


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-28
changelog:
  - fixed an issue with flooding log with error messages (see fedora bug #573764)
  - fixed issue with segfaulting tcpmux service (fedora bug #543968)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-34
changelog:
  - Avoid possible hang while logging an unexpected signal (#694820)
  - Fix Rpmdiff build warning about "dereferencing type-punned pointer" (#697783)
  - Let RPC services bind to a specific port (#697788)
  - Prevent memory corruption error while using large number of services (#711787)
  - Fix coverity defects in poll patch (#715303)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.9-1
changelog:
  - version 2.6.9

    Overview of Changes from GIMP 2.6.8 to GIMP 2.6.9
    =================================================

    * Bugs fixed:

     612618 - Font selection remains visible
     622234 - gimp.desktop: image/x-psd in MimeTypes twice
     622196 - Unportable test(1) construct in configure script
     620604 - Description of "histogram" procedure is slightly inaccurate
     541586 - Tool options not saved/loaded correctly?
     614153 - Importing PDF files with long titles
     600112 - blur-gauss-selective.exe crashes
     599233 - Dialog of "Save as BMP" ignores changes which are not made
              with a mous
     565001 - Text-Tool crashes when edit a 2.4.2 version xcf
     610478 - Layer preview suddenly stops getting updated
     609026 - leaks shared memory
     609056 - Exporting to Alias PIX format fails
     608188 - a few strings in Save as... > Raw image data dialog are always
              in English
     604820 - GEGL Operation "path" crashes GIMP
     603711 - Crashes when using path tool
     607242 - GIMP 2.7.0 fails to build against libpng 1.4.0
     606372 - Saving to .ppm fails on indexed colorspace
     605237 - the "Antialiasing..." message in the progress bar does not show
              translated
     604508 - gimp-layer-new-from-visible should work from updated projection

    * Updated and new translations:

     Asturian (ast)
     Basque (eu)
     Burmese (my)
     Catalan (ca)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)
     German (de)
     Italian (it)
     Latvian (lv)
     Low German (nds)
     Romanian (ro)
     Simplified Chinese (zh_CN)
     Slovenian (sl)
     Ukrainian (uk)
     Valencian (ca@valencia)

  - remove obsolete gtk219, never-stack-trace-desktop, indexed-pnm patches
  - don't manually provide "gimp-libs%{?_isa}" in gimp-libs
  - don't package %{_datadir}/gtk-doc/html, but dirs beneath


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-24
changelog:
  - fsck.gfs2: add ability to fix GFS (gfs1) file systems (66 patches)
    Resolves: rhbz#675723
  - libgfs2: Don't count sentinel dirent as an entry
    Resolves: rhbz#745161
  - mkfs.gfs2: Improve error messages
    Resolves: rhbz#769400


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-25
changelog:
  - gfs_controld: don't ignore dlmc_fs_register error
    Resolves: rhbz#753300
  - gfs2_edit savemeta: crosswrite four patches from upstream (4 patches)
    Resolves: rhbz#749864
  - gfs2_utils: gfs2_grow fails to grow a filesystem with less than 3 RGs
    Resolves: rhbz#742595
  - gfs2_utils: Improve error messages
    Resolves: rhbz#742293


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-26
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - config: make altname validation position indipendent
    Resolves: rhbz#740552
  - config: drastically improve cman RRP configuration handling
    Resolves: rhbz#733298
  - cman: Improve quorum timer handling how quorum timers work
    Resolves: rhbz#759603
  - qdiskd: Make multipath issues go away
    Resolves: rhbz#678372


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-27
changelog:
  - fenced: fix handling of startup partition merge
    dlm_controld: fix handling of startup partition merge
    Resolves: rhbz#750314


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-30
changelog:
  - config: update relax ng schema to include totem miss_count_const
    Resolves: rhbz#804938
  - cman init: fix start sequence error handling
    Resolves: rhbz#806002


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-32
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - cman notifyd: deliver cluster status on startup
    Resolves: rhbz#819787


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-21
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25.1
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


