<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="205">
<package pkgid="155f9596b4414f0c45fb462e194d58e8a0fe5a6666f4427bca88e94bb58c3e0d" name="thunderbird" arch="src">
    <version epoch="0" ver="17.0.5" rel="1.el6.centos"/>

<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349524800">- Update to 10.0.8 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-2" date="1350043200">- Added patches from 10.0.9 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b1-0.1" date="1351080000">- Rebase to 17 beta 1</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b2-0.1" date="1352376000">- Update to 17.0b2</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0-2" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-2" date="1358424000">- Update to 17.0.2 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362657600">- Added fix for #848644</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.5-1.el6.centos" date="1364904000">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="df25e9c361e8d376f6b947ea1dcd491818e5ea3d7f110db6b85c2c288c1b7d58" name="spice-server" arch="src">
    <version epoch="0" ver="0.12.0" rel="12.el6_4.1"/>

<changelog author="Uri Lublin &lt;uril@redhat.com&gt; 0.12.0-4" date="1353499200">- Build/Requires libjpeg-turbo-devel instead of libjpeg-devel
- Related: rhbz#788687</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-5" date="1353931200">- Fix various migration related bugs
  * don't process both cmd ring and dispatcher queue till migration data is received
  * fix assigning bad memory references to marshaller
  * fix memory corruption when receiving display migration data that exceeds 1024 bytes
  Resolves: rhbz#866929
  Resolves: rhbz#862352
  Resolves: rhbz#878700</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-6" date="1354190400">- Fix sending internal images with stride &gt; bpp*width to lz compression
  Resolves: rhbz#876685</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-7" date="1354536000">- Fix mishandling of agent data received from the client after agent disconnection
  Resolves: rhbz#881980</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-8" date="1354881600">- Fix crash when reconnecting while a video is played
  Resolves: rhbz#883564</changelog>
<changelog author="Uri Lublin &lt;uril@redhat.com&gt; 0.12.0-9" date="1355745600">- Fix calling set_client_capabilities when it is unsupported by qemu
  (fixes a crash when qemu-kvm is started with spice but without qxl)
  Resolves: rhbz#880276</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-10" date="1356004800">- Fix throwing away drawables that have masks
  Resolves: rhbz#864982</changelog>
<changelog author="Uri Lublin &lt;uril@redhat.com&gt; 0.12.0-11" date="1357732800">- Fix a crash when setting screen-saver properties.
- Fix a leak.
  Resolves: rhbz#891326</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.12.0-12" date="1358337600">- Fix a crash when rapidly changing monitor configuration
  Resolves: rhbz#868807</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; - 0.12.0-12.el6_4.1" date="1368100800">- Migration related fixes
  * Destroy video streams before sending MSG_MIGRATE
  * Fix wrong is_low_bandwidth setting after 2 migrations of a session
    that was originally a low bandwidth one.
  Resolves: rhbz#956984
  Resolves: rhbz#961427</changelog>

</package>

<package pkgid="82fd5dc21c1bc44602086deef0c210c91a605dfc2e119c6c71f9767b2350885d" name="module-init-tools" arch="src">
    <version epoch="0" ver="3.9" rel="21.el6_4"/>

<changelog author="Jon Masters &lt;jcm@redhat.com&gt; - 3.9-13" date="1275393600">- Revert the previous fix to #515413 while alternatives are considered.
- Related: #515413.</changelog>
<changelog author="Jon Masters &lt;jcm@redhat.com&gt; - 3.9-14" date="1277812800">- Remove chkconfig dependency in the SPEC file.
- Resolves: #553634.</changelog>
<changelog author="Jon Masters &lt;jcm@redhat.com&gt; - 3.9-15" date="1277899200">- Removed SHA384 line from modprobe dist file in previous build.
- Resolves: #590942.</changelog>
<changelog author="Jon Masters &lt;jcm@redhat.com&gt; - 3.9-16" date="1279886400">- Correct handling of gzipped modules (e.g. during install).
- Resolves: #594548.</changelog>
<changelog author="Jon Masters &lt;jcm@redhat.com&gt; - 3.9-17" date="1281441600">- Require binutils to ensure we pick up /usr/bin/nm in minimal install
- Resolves: #622599</changelog>
<changelog author="Martin Sivak &lt;msivak@redhat.com&gt; - 3.9-18" date="1292155200">- Fix a segfault when overrides line was incomplete
  Resolves: rhbz#673100
- Added backports directory to depmod search path
  Resolves: rhbz#761511</changelog>
<changelog author="Martin Sivak &lt;msivak@redhat.com&gt; - 3.9-19" date="1330084800">- Free some no longer needed strings in depmod
  Related: rhbz#670613</changelog>
<changelog author="Martin Sivak &lt;msivak@redhat.com&gt; - 3.9-20" date="1330430400">- Parse X.Y kernel versions properly
  Resolves: rhbz#709424</changelog>
<changelog author="Martin Sivak &lt;msivak@redhat.com&gt; - 3.9-21" date="1350043200">- Fix deprecated macros in the spec file
  Resolves: rhbz#670653</changelog>
<changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.9-21.1" date="1370952000">- Fix a SIGSEGV in modinfo when the specified module does not exist
  Resolves: rhbz#972588</changelog>

</package>

<package pkgid="ceb37199c9d89adf69f425d0ed809de3b11daaa5cc5ec06f330e37def853c00b" name="boost" arch="src">
    <version epoch="0" ver="1.41.0" rel="15.el6_4"/>

<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-6" date="1265112000">- More subpackage interdependency adjustments
  - boost doesn't bring in the MPI stuff.  Instead, $MPI-devel does.
    It needs to, so that the symlinks don't dangle.
  - boost-graph-$MPI depends on boost-$MPI so that boost-mpich2
    doesn't satisfy the SONAME dependency of boost-graph-openmpi.</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-7" date="1266840000">- Add a patch for serialization of shared pointers to non polymorphic
  types</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-8" date="1268740800">- Import 1.41.1 with fixes from Fedora 13 to RHEL 6
- Turn off OpenMPI support on s390*, which isn't available in RHEL 6
- Resolves: #571607</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-9" date="1268913600">- Use a .gz archive instead of bz2, because that's what's hosted now.
  Fill in the full URL.
- Resolves: #571607</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-10" date="1274443200">- Turn on OpenMPI support on non-s390 arches.  It was accidentally
  turned off everywhere.
- Move cmake files to libdir to avoid multilib conflicts.
- Also install Boost.cmake, which is included by BoostConfig.cmake
- Change soname selection to work on RHELs.
- Resolves: #586204
- Resolves: #592516
- Resolves: #594146</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-11" date="1274788800">- ... and revert the soname change, because that's not the smartest
  thing to do mid-release.
- Resolves: #594146</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-12" date="1311076800">- Add an upstream patch that fixes computation of CRC in zlib streams.
- Resolves: #707624</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-13" date="1360670400">- In Boost.Pool, be careful not to overflow allocated chunk size
  (boost-1.41.0-pool.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-14" date="1362657600">- Build with -fno-strict-aliasing</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-15" date="1362657601">- Add in explicit dependences between some boost subpackages</changelog>

</package>

<package pkgid="f16f8c72ee6f4d0fe9a3356c77293121a85b5c44a66212d853836283fbf795cb" name="qemu-kvm" arch="src">
    <version epoch="2" ver="0.12.1.2" rel="2.355.0.1.el6.centos.7"/>

<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.353.el6" date="1358942400">- kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
- kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
- kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
- kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
- kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
- Resolves: bz#869981
  (Cross version migration between different host with spice is broken)
- Resolves: bz#876982
  (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
- Resolves: bz#894995
  (core dump when install windows guest with x-data-plane=on)
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.354.el6" date="1358942401">- spec: add Epoch to old_conflict_ver
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6" date="1358942402">- kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
- kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
- kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
- kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
- kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
- Resolves: bz#884253
  (Allow control of volume from within Windows Guests (Volume Mixture))</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.1" date="1360152000">- kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
- Resolves: bz#907397
  (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.2" date="1362052800">- kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
- kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
- Resolves: bz#910841
  (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.3" date="1365595200">- kvm-Fix-regression-introduced-by-machine-accel.patch [bz#929105]
- Resolves: bz#929105
  ([RHEL6.4] [regression] qemu-kvm does not enable ioeventfd)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.4" date="1367582400">- kvm-virtio-balloon-fix-integer-overflow-in-BALLOON_CHANG.patch [bz#958750]
- Resolves: bz#958750
  (QMP event shows incorrect balloon value when balloon size is grater than or equal to 4G)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.5" date="1369310400">- kvm-e1000-fix-link-down-handling-with-auto-negotiation.patch [bz#907716]
- kvm-e1000-unbreak-the-guest-network-when-migration-to-RH.patch [bz#907716]
- kvm-reimplement-error_setg-and-error_setg_errno-for-RHEL.patch [bz#957056]
- kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch [bz#957056]
- kvm-qga-distinguish-binary-modes-in-guest_file_open_mode.patch [bz#957056]
- kvm-qga-unlink-just-created-guest-file-if-fchmod-or-fdop.patch [bz#957056]
- Resolves: bz#907716
  (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
- Resolves: bz#957056
  (CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode [rhel-6.4.z])</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.6" date="1373457600">- kvm-qga-cast-to-int-for-DWORD-type.patch [bz#980758]
- kvm-qga-remove-undefined-behavior-in-ga_install_service.patch [bz#980758]
- kvm-qga-diagnostic-output-should-go-to-stderr.patch [bz#980758]
- kvm-qa_install_service-nest-error-paths-more-idiomatically.patch [bz#980758]
- kvm-qga-escape-cmdline-args-when-registering-win32-service.patch [bz#980758]
- Resolves: bz#980758
  (qemu-kvm: CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path [rhel-6.4.z])</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.385.el6_4.7" date="1376308800">- kvm-qcow2-Reinitialise-counter-when-restarting-alloc-r64.patch [bz#996151]
- Resolves: bz#996151
  (qcow2 corruption bug in cluster allocation code)</changelog>

</package>

<package pkgid="d7fa200c501d1f16178ead48f883455ef443b46e97748603b34a762e7db6b99a" name="gnutls" arch="src">
    <version epoch="0" ver="2.8.5" rel="10.el6_4.2"/>

<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 2.8.5-1.1" date="1259841600">- Rebuilt for RHEL 6</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-2" date="1261137600">- disable experimental openssl compatibility code (#460310)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-3" date="1264680000">- drop superfluous rpath from binaries
- do not call autoreconf during build
- specify the license on utils subpackage
- do not create static libraries (#556052)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-4" date="1275480000">- add support for safe renegotiation CVE-2009-3555 (#533125)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-5" date="1332331200">- fix CVE-2012-1573 - security issue in packet parsing (#805432)
- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- TLS-1.2 certificate request compatibility fix</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-7" date="1336046400">- more TLS-1.2 compatibility fixes (TLS-1.2 stays disabled by default)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-9" date="1349870400">- documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
  and gnutls-cli-debug(1) manual pages (#648297, #807746)
- add fallback to import the private keys as PKCS#8 (#745242)
- silence the strict aliasing warnings</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-10" date="1351512000">- fix the build of the info manual</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-10.1" date="1361448000">- fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-10.2" date="1369656000">- fix CVE-2013-2116 - fix DoS regression in CVE-2013-1619
  upstream patch (#966754)</changelog>

</package>

<package pkgid="0ca79f8310cdf46508327e3542a284a081b4bbe0167e01950232896c668a59df" name="esc" arch="src">
    <version epoch="0" ver="1.1.0" rel="25.el6.centos.1"/>

<changelog author="Jack Magne &lt;jmagne@redhat.com&gt;= 1.1.0-18" date="1269950400">- Resolves: 469867 Cannot use arrow keys to move between cards.</changelog>
<changelog author="Jack Magne &lt;jmagne@redhat.com&gt;= 1.1.0-19" date="1270555200">- Resolves: 469867 Cannot use arrow keys to move between cards.</changelog>
<changelog author="Jack Magne &lt;jmagne@redhat.com&gt;= 1.1.0-20" date="1272024000">- Resolves: 582283 - ESC Enrollment of formatted card fails when more than one card present in usb.</changelog>
<changelog author="Jack Magne &lt;jmagne@redhat.com&gt;= 1.1.0-21" date="1272283200">- Related: 582833 - ESC already running error message when user logs out and logs in.</changelog>
<changelog author="Jack Magne &lt;jmagne@redhat.com&gt;= 1.1.0-22" date="1313236800">- Resolves: 729027 - Debuginfo package issues in esc
- Resolves: 253077 - ESC windows should keep the same size if the user resized them
- Resolves: 682216 - [abrt] esc-1.1.1.0-21.el6 __strcmp_ssse3: Process /usr/lib/esc-1.1.1.0/escd 
-    was killed by singnal 11 (SIGSEGV)
- Resolves: 702683 - esc-prefs.js file has a typo</changelog>
<changelog author="Jack Magne &lt;jmagne@redhat.com&gt;= 1.1.0-23" date="1318507200">- Resolves: 704281
- Resolves: 702683</changelog>
<changelog author="Jack Magne &lt;jmagne@redhat.com&gt;= 1.1.0-24.1" date="1332331200">- Resolves: #807264 - esc ceased working after Firefox/xulrunner update to 10 series</changelog>
<changelog author="Jack Magne &lt;jmagne@redhat.com&gt;= 1.1.0-24.2" date="1332936000">- Resolves: #807806 - ESC crashes when an enrolled smart card is inserted.</changelog>
<changelog author="Jack Magne &lt;jmagne@rehdat.com&gt;= 1.1.0-25.1" date="1363262400">- Resolves: #922646 - esc ceased working after Firefox/xulrunner update to 17 and above series</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.1.0-25.1.el6.centos" date="1365595200">- modified to build on xulrunner 17.0.5 instead of 17.0.3</changelog>

</package>

<package pkgid="b6128f2140cfe782f2b9e66678cfd594e1b9e37ac754704e3c92d4aa3a539325" name="xulrunner" arch="src">
    <version epoch="0" ver="17.0.5" rel="1.el6.centos"/>

<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 17.0-1" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.1-3" date="1354276800">- Update to 17.0.1 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-1" date="1357819200">- Update to 17.0.2 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1357905600">- Added fix for rhbz#816234 - NFS fix</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-5" date="1358251200">- Fixed NetworkManager preferences
- Added fix for NM regression (mozbz#791626)</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362657600">- Added fix for #848644</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-3" date="1363089600">- Added fix for rhbz#916180 - Wrong library directory reference 
  in /usr/bin/xulrunner</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.5-1" date="1364904000">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="937e16e8fba47eeff1e2c535d4cbc29d51a9576d60dfe021fdf249deaceeb847" name="krb5" arch="src">
    <version epoch="0" ver="1.10.3" rel="10.el6_4.2"/>

<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-4" date="1346932800">- cut down the number of times we load SELinux labeling configuration from
  a minimum of two times to actually one (more of #845125)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1347019200">- on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
  stopped linking with a symbol which we no longer export (#771687)
- pull up patch for RT#7063, in which not noticing a prompt for a long
  time throws the client library's idea of the time difference between it
  and the KDC really far out of whack (#773496)
- add a backport of more patches to set the client's list of supported enctypes
  when using a keytab to be the list of types of keys in the keytab, plus the
  list of other types the client supports but for which it doesn't have keys,
  in that order, so that KDCs have a better chance of being able to issue
  tickets with session keys of types that the client can use (#837855)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-5" date="1347278400">- add patch based on one from Filip Krska to not call poll() with a negative
  timeout when the caller's intent is for us to just stop calling it (#838548)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-6" date="1348574400">- actually pull up the patch for RT#7063, and not some other ticket (#773496)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-7" date="1350475200">- tag a couple of other patches which we still need to be applied during
  %{?_rawbuild} builds (zmraz, #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-8" date="1355140800">- untag a couple of other patches which don't strictly need to apply during
  %{?_rawbuild} builds (more of #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-9" date="1355227200">- when building with our bundled copy of libverto, package it in with -libs
  rather than with -server (#886049)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10" date="1355832000">- make -server conflict with older versions of SELinux policy that didn't
  allow us to use eventfds, which libverto's backend may depend on in order
  to properly shut down a multi-worker KDC (#871524)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.1" date="1362484800">- incorporate upstream patch to fix a NULL pointer dereference when the client
  supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
- add patch to avoid dereferencing a NULL pointer in the KDC when handling a
  draft9 PKINIT request (#917909, CVE-2012-1016)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.2" date="1365508800">- incorporate upstream patch to fix a NULL pointer dereference while processing
  certain TGS requests (CVE-2013-1416, #950342)</changelog>

</package>

<package pkgid="8866fe3f6c8bb812c4c7c8c3b44b1b050db13d78062bcb807d70f5cfec11279f" name="xulrunner" arch="src">
    <version epoch="0" ver="17.0.3" rel="2.el6.centos"/>

<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 17.0-0.5.b4" date="1352203200">- Added fix for rhbz#872752 - embeded crash</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 17.0-0.6.b5" date="1352376000">- Update to 17 Beta 5
- Updated fix for rhbz#872752 - embeded crash</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 17.0-1" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.1-3" date="1354276800">- Update to 17.0.1 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-1" date="1357819200">- Update to 17.0.2 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1357905600">- Added fix for rhbz#816234 - NFS fix</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-5" date="1358251200">- Fixed NetworkManager preferences
- Added fix for NM regression (mozbz#791626)</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362657600">- Added fix for #848644</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.rog&gt; - 17.0.3-2.el6.centos" date="1362744000">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="14d4f54c04b7a2dd2a669864a130e2c5a44eb763ff2483622e939115eb97fcca" name="pcsc-lite" arch="src">
    <version epoch="0" ver="1.5.2" rel="13.el6_4"/>

<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-4" date="1272024000">- fix hang in Scard_Cancel</changelog>
<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-5" date="1276689600">- patch overflow issue</changelog>
<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-6" date="1278936000">- Fix typo in patch</changelog>
<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-7" date="1335787200">- Make sure pcscd is not started before it's preqs.</changelog>
<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-8" date="1345550400">- Work around some issues with chkconfig prereqs</changelog>
<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-9" date="1354104000">- Bump version number so it doesn't get confused with z stream build.</changelog>
<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-10" date="1355140800">- CVE-2010-4531</changelog>
<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-11" date="1357214400">- fix overflow issue introduced in 1.5.2-5 and incorrectly corrected in
  1.5.2-6</changelog>
<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-12" date="1366718400">- hang patch</changelog>
<changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 1.5.2-13" date="1368187200">- rest of hang patch</changelog>

</package>

<package pkgid="8fa1ec90cf5448b0780f898d91d53cba798db1d9a55446739fd65977a467a657" name="tuned" arch="src">
    <version epoch="0" ver="0.2.19" rel="11.el6.1"/>

<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 0.2.19-3" date="1299758400">- universal ethernet card identifier detection (#682380)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 0.2.19-4" date="1301486400">- fix: crash when parsing unsupported network card link mode (#689715)</changelog>
<changelog author="Thomas Wörner &lt;twoerner@redhat.com&gt; 0.2.19-5" date="1311854400">- fixed handling of stdin/stdout/stderr during daemon creation (rhbz#695480)
- fixed device type determination (rhbz#707079)</changelog>
<changelog author="Thomas Wörner &lt;twoerner@redhat.com&gt; 0.2.19-6" date="1311854401">- fixed device type determination v2 (rhbz#707079)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 0.2.19-7" date="1330948800">- fix: apply scheduler settings to vd* devices (#725497)
- enhancement: add virtual-host profile (#740976)
- enhancement: add virtual-guest profile (#740977)
- fix: diskdevstat and netdevstat command line error handling (#747210)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 0.2.19-8" date="1348747200">- fix: poor ping latency in 'latency-performance' profile (#714180)
- fix: ktune breaks disks when pecifying just the device for ELEVATOR_TUNE_DEVS (#784308)
- fix: should not disable barriers on devices with write back cache (#801561)
- fix: /var/run/tuned/tuned.pid created with insecure permissions (#845336)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 0.2.19-9" date="1349870400">- add udev rule to restart ktune in new block device is added (#847445)</changelog>
<changelog author="Jaroslav Škarvada &lt;jskarvad@redhat.com&gt; - 0.2.19-10" date="1357214400">- fix: virtual-guest profile should not deploy the nobarrier option
  resolves: rhbz#886956
- fix: disable transparent hugepages in latency-performance profile
  resolves: rhbz#887355</changelog>
<changelog author="Jaroslav Škarvada &lt;jskarvad@redhat.com&gt; - 0.2.19-11" date="1357214401">- de-fuzzified thp-never patch to prevent patch of making auto-backup
  related: rhbz#887355</changelog>
<changelog author="Jaroslav Škarvada &lt;jskarvad@redhat.com&gt; - 0.2.19-11.1" date="1360065600">- fix: tuned incorrectly sets readahead values when new device is inserted
  resolves: rhbz#907856
- fix: there is a race when multiple devices are inserted
  resolves: rhbz#907768</changelog>

</package>

<package pkgid="e49a96b3303dcc59780879e53c47e9b8cc084444f4ee21f054a9e4ce06a51e5b" name="device-mapper-multipath" arch="src">
    <version epoch="0" ver="0.4.9" rel="64.el6_4.2"/>

<changelog author="Benjmain Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.57" date="1341316800">- Add 0145-RHBZ-831045-realloc-vector.patch
  * fix deleting items from vector, and handle error cases
- Resolves: bz #831045</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.58" date="1346068800">- Modify multipath.conf
  * change "selector" to "path_selector"
- Resolves: bz #827072</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.59" date="1349784000">- Add 0146-RHBZ-595692-fix-cciss-names.patch
  * convert cmdline cciss names to sysfs format
- Add 0147-RHBZ-824243-826610-833124-doc-fix.patch
- Add 0148-RHBZ-619173-storagetek-config.patch
- Add 0149-RHBZ-810788-remove-dups.patch
  * remove duplicates from builtin configs
- Add 0150-RHBZ-810755-update-conf-defaults.patch
- Add 0151-RHBZ-822389-fix-rename.patch
  * make multipath switch names on reload after disabling
    user_friendly_names
- Add 0152-RHBZ-735459-mpath_persist.patch
  * mpathpersist allows persistent reservatoins through multipath devices
- Add 0153-RHBZ-839386-retain_hwhandler.patch
  * add retain_attached_hw_handler default and multipaths config option
- Add 0154-RHBZ-578114-kpartx-retry.patch
  * retry on EBUSY for loop device deletes
- Add 0155-RHBZ-810989-load-modules.patch
  * service multipathd start loads kernel modules
- Add 0156-RHBZ-813963-new-alua-prio.patch
  * combine the "alua" and "tpg_pref" prioritizers
- Add 0157-RHBZ-816717-flush-full-paths.patch
  * make multipath accept full pathnames in -f
- Add 0158-RHBZ-821885-check-blacklist.patch
  * make multipath -c check the device blacklisting
- Add 0159-RHBZ-818367-829065-rdac.patch
- Add 0160-RHBZ-841732-dont-swap-devices.patch
- Resolves: bz #595692, #824243, #826610, #833124, #619173, #810788, #810755
- Resolves: bz #822389, #735459, #839386, #578114, #810989, #813963, #816717
- Resolves: bz #821885, #818367, #829065, #841732</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.60" date="1350129600">- Add 0161-RHBZ-836890-AIX-whitespace.patch
- Add 0162-RHBZ-860748-early-blacklist.patch
  * blacklist devices as soon as possible
- Add 0163-RHBZ-839386-detect-prio.patch
  * add default and device configuration option detect-prio
- Add 0164-RHBZ-839386-netapp-config.patch
- Modify 0153-RHBZ-839386-retain_hwhandler.patch
  * cleanup minor issues
- Resolves: bz #836890, #860748, #839386</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.61" date="1350129601">- Modify 0156-RHBZ-813963-new-alua-prio.patch
  * fix minor porting issue
- Resolves: bz #813963</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.62" date="1351166400">- Add 0165-RHBZ-869253-disable-libdm-failback.patch
  * multipathd and kpartx now set a flag to request device-mapper
    not create devices itself.
- Resolves: bz #869253</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.63" date="1354622400">- Add 0166-RHBZ-880487-make-path-fd-readonly.patch
  * revert change from 0152-RHBZ-735459-mpath_persist.patch, so that
    path fds are again opened O_RDONLY
- Resolves: bz #880487</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.64" date="1358856000">- Add 0167-RHBZ-735459-fix-mpathpersist-fns.patch
  * make reservation_key display correctly in "multipathd show config"
- Resolves: bz #735459</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.64.el6_4.1" date="1374840000">- Add 0168-RHBZ-988704-fix_cli_resize.patch
  * deal with resize happening while path device is being removed.
- Resolves: bz #988704</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.64.el6_4.2" date="1375963200">- Add 0169-RHBZ-993545-rw-change.patch
  * reload a readonly multipath device if a path device has become
    read/write
- Resolves: bz #993545</changelog>

</package>

<package pkgid="4f3e50988eda272b1e447fad62272f884b625c63b9ce02b146fde0c6d41b5a1e" name="vte" arch="src">
    <version epoch="0" ver="0.25.1" rel="8.el6_4"/>

<changelog author="Behdad Esfahbod &lt;behdad@redhat.com&gt; 0.23.5-1" date="1263470400">- Update to 0.23.5</changelog>
<changelog author="Behdad Esfahbod &lt;behdad@redhat.com&gt; 0.23.5-2" date="1264766400">- Remove stale spec code</changelog>
<changelog author="Behdad Esfahbod &lt;behdad@redhat.com&gt; 0.25.1-1" date="1274270400">- Update to 0.25.1-1
- Resolves: #469930</changelog>
<changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 0.25.1-2" date="1275912000">- Fix a strict aliasing issue
Resolves: #599344</changelog>
<changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 0.25.1-3" date="1276516800">- Fix a fullscreen redraw issue
Resolves: #602452</changelog>
<changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 0.25.1-4" date="1277812800">- Package review cleanups
Resolves: #609101</changelog>
<changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 0.25.1-5" date="1279540800">- Fix for the CVE-2010-2713 security issue (#615045)</changelog>
<changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 0.25.1-6" date="1296216000">- Fix extending selection in gnome-terminal does not refresh the buffer (#650884)</changelog>
<changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 0.25.1-7" date="1311854400">- Fix invisible cursor in some applications (#658774)</changelog>
<changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; 0.25.1-8" date="1368619200">- Fix FD leaks (#963221)</changelog>

</package>

<package pkgid="ce8f56878616fa4c9b4d01dbbdc72f1cc550e36b6d1a00456919c698535bd786" name="gdb" arch="src">
    <version epoch="0" ver="7.2" rel="60.el6_4.1"/>

<changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.2-56.el6" date="1335528000">- Revert "set auto-load" patchset (revert BZ 756116).</changelog>
<changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 7.2-57.el6" date="1342353600">- Fix `Backport gdb fix to handle identical binaries via additional build-id
  symlinks' (RH BZ 836966).</changelog>
<changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 7.2-58.el6" date="1347710400">- Fix `Cannot find new threads: generic error' (RH BZ 811648).
- Delete gdb-core-threads-5of5.patch; rename gdb-core-threads-Nof5.patch to gdb-core-threads-Nof4.patch.</changelog>
<changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 7.2-59.el6" date="1348660800">- Fix `CVE-2011-4355 gdb: arbitrary code execution via .debug_gdb_scripts'
  (Jan Kratochvil, RH BZ 756116).</changelog>
<changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 7.2-60.el6" date="1350043200">- Fix `GDB cannot access struct member whose offset is larger than 256MB'
  (Siddhesh Poyarekar, RH BZ 795424).</changelog>
<changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 7.2-61.el6" date="1366632000">- Fix `gdb can't find local static variables with gcc-4.4.6-3'
  (Alan Matsuoka, RH BZ 952100).</changelog>
<changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 7.2-62.el6" date="1366632001">- Update the patch to fix RH BZ 952100, in order to reflect the upstream
  version (RH BZ 952100).</changelog>
<changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 7.2-63.el6" date="1366632002">- Fix `gdb no longer recognises "maintenance set python print-stack off"'
  (RH BZ 952090).</changelog>
<changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 7.2-64.el6" date="1366804800">- Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
  failed.' (Tom Tromey, RH BZ 954300).</changelog>
<changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 7.2-60.el6_4.1" date="1366804801">- Fix NVR mistake, bumping version number back to 7.2-60.</changelog>

</package>

<package pkgid="016d4968a237b1032acbe645117073e73bb7c05ac6f24a068535df190692d8ad" name="cluster" arch="src">
    <version epoch="0" ver="3.0.12.1" rel="49.el6_4.1"/>

<changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.0.12.1-41" date="1348574400">- fsck.gfs2: soften the messages when reclaiming freemeta blocks
  Resolves: rhbz#803477</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-42" date="1349697600">- fenced: silence dbus error
  Resolves: rhbz#861340</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-43" date="1349870400">- cman init: make sure we start after fence_sanlockd and warn users
- checkquorum.wdmd: add integration script with wdmd
  (requires wdmd &gt;= 2.6)
  Resolves: rhbz#509056</changelog>
<changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.0.12.1-44" date="1350302400">- mkfs.gfs2: Check locktable more strictly for valid chars
  Resolves: rhbz#862847</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-45" date="1351166400">- fenced: get the cman fd before each poll
  Resolves: rhbz#857952</changelog>
<changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.0.12.1-46" date="1351598400">- fsck.gfs2: Check for formal inode number mismatch
  Resolves: rhbz#860048</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-47" date="1356004800">- cman: prevent libcman from causing SIGPIPE when corosync is down
  Resolves: rhbz#887787</changelog>
<changelog author="Bob Peterson &lt;rpeterso@redhat.com&gt; - 3.0.12.1-48" date="1357214400">- After converting a GFS1 file system with gfs2_convert errors were detected with fsck.gfs2
  Resolves: rhbz#888053</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-49" date="1357560000">- build: ship checkquorum.wdmd non executable
  Resolves: rhbz#509056</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-49.1" date="1373544000">- cman init: fix handling of lock file
  Resolves: rhbz#982700</changelog>

</package>

<package pkgid="7210fd8f64004570f2ed3fc0e97fd79696e0225c57932b37c2b23379f993c239" name="libproxy" arch="src">
    <version epoch="0" ver="0.3.0" rel="4.el6_3"/>

<changelog author="kwizart &lt; kwizart at gmail.com &gt; - 0.2.3-7" date="1224849600">- Disable Gnome/KDE default support via builtin modules.
 (it needs to be integrated via Gconf2/neon instead).</changelog>
<changelog author="kwizart &lt; kwizart at gmail.com &gt; - 0.2.3-8" date="1232625600">- Merge NetworkManager module into the main libproxy package
- Main Requires the -python and -bin subpackage 
 (splitted for multilibs compliance).</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.3-9" date="1235563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild</changelog>
<changelog author="kwizart &lt; kwizart at gmail.com &gt; - 0.2.3-10" date="1236600000">- Rebuild for webkit
- Raise requirement for xulrunner to 1.9.1</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.3-11" date="1248523200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="kwizart &lt; kwizart at gmail.com &gt; - 0.2.3-12" date="1253188800">- Remove Requirement of %{name}-pac virtual provides 
  from the main package - #524043</changelog>
<changelog author="kwizart &lt; kwizart at gmail.com &gt; - 0.3.0-1" date="1253793600">- Update to 0.3.0</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 0.3.0-2" date="1282910400">- Rebuild against newer gecko</changelog>
<changelog author="Dan Winship &lt;danw@redhat.com&gt; - 0.3.0-3" date="1351857600">- Fix CVE-2012-4505</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 0.3.0-4" date="1359720000">- Rebuild against newer gecko</changelog>

</package>

<package pkgid="08373e3935516488a8e8147f07343422147843a7e37ad7390a7f08f4e1fefc0b" name="java-1.6.0-openjdk" arch="src">
    <version epoch="1" ver="1.6.0.0" rel="1.61.1.11.11.el6_4"/>

<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.51.1.11.6" date="1359979200">- Updated to icedtea6 1.11.6
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#906708</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.53.1.11.6" date="1360152000">- added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  to remove   6664509 and 7201064 from 1.11.6 tarball
- Resolves: rhbz#906708</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.54.1.11.6" date="1360152001">- removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch8:   7201064.patch to be reverted
- added patch9:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906708</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360929600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but working
- Resolves: rhbz#911525</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.56.1.11.8" date="1361188800">- Rebuild with updated sources
- Resolves: rhbz#911525</changelog>
<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1:1.6.0.0-1.57.1.11.9" date="1362398400">- Updated to icedtea6 1.11.9
- Resolves: rhbz#917179</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.58.1.11.10" date="1366200000">- Updated to icedtea6 1.11.10
- rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
- excluded aarch64.patch
  - by patch 8 -  removingOfAarch64.patch.patch
- Resolves: rhbz#950386</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.59.1.11.11" date="1366372800">- Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
- removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
- Resolves: rhbz#950386</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.60.1.11.11" date="1366545600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950386</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366718400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950386</changelog>

</package>

<package pkgid="580e9713a754a2599ea0c3836f270c6e635148a1e30c97cac35c30a095f677f8" name="busybox" arch="src">
    <version epoch="1" ver="1.15.1" rel="16.el6_4"/>

<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-7" date="1273060800">- teach uclibc to use /etc/localtime</changelog>
<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-8" date="1275307200">- Add xz unpacking support (incl. to rpm)
- Resolves: #534092</changelog>
<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-9" date="1275393600">- Update xz unpacker to not fail on SHA-256 xz format
- Resolves: #534092</changelog>
<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-10" date="1279195200">- Add -x handling to hush: msh used to have it, thus it was a regression
- Resolves: #612394</changelog>
<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-11" date="1291118400">- Fix cpio applet to print "N blocks" to stderr, not stdout
- Change .config, making hwclock read adjtime from correct location:
  /etc/adjtime
- Fix awk to correctly interpret numbers with leading zeros: 02.345
- Resolves: #615391, #621853, #633961</changelog>
<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-12" date="1326801600">- Backport 'set -o pipefail' support
- Resolves: #782018
- Add btrfs support to findfs and related applets
- Resolves: #751927</changelog>
<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-13" date="1330516800">- Resolves: #790335 "busybox various flaws" including:
  "buffer underflow in decompression"
  "udhcpc insufficient checking of DHCP options"</changelog>
<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-14" date="1332763200">- Resolves: #790335 "busybox various flaws"
  Added a fix for SEGV on empty command in hush</changelog>
<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-15" date="1333713600">- Fix btrfs support to findfs and related applets
- Resolves: #751927</changelog>
<changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:1.15.1-16" date="1372852800">- Resolves: #859817
- "mknod in busybox can not create device file with major number greater than 255"</changelog>

</package>

<package pkgid="d17f8625512ec1089c44a68dbcf6dc90b5ad7c868e3652d1a56f223df84a10df" name="kernel" arch="src">
    <version epoch="0" ver="2.6.32" rel="358.0.1.el6"/>

<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-351.el6]" date="1356004800">- [kernel] ptrace-utrace: fix PTRACE_GETEVENTMSG(pid) in sub-namespace (Oleg Nesterov) [782330]
- [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [829149]
- [mm] memcontrol: propagate LRU accounting state when splitting THP (Johannes Weiner) [881714]
- [net] sctp: proc: protect bind_addr-&gt;address_list accesses with rcu_read_lock() (Thomas Graf) [706038]
- [net] sctp: Add RCU protection to assoc-&gt;transport_addr_list (Thomas Graf) [706038]
- [s390] zfcp: Adapt to new FC_PORTSPEED semantics (Hendrik Brueckner) [855128]
- [virt] virtio_net: allow to change mac when iface is running (Jiri Pirko) [882868]
- [virt] kvm: Minimal hyper-v support (Vadim Rozenfeld) [871350]
- [fs] gfs2: Journal DLM lock has wrong label (Steven Whitehouse) [884822]
- [mm] huge_memory: fix typo in transparent_hugepage sysfs symlink (Jeremy Eder) [887308]
- [mm] ksm: numa awareness sysfs knob (Petr Holasek) [743643]
- [fs] btrfs: handle IS_ERR(inode) in btrfs_lookup() (Zach Brown) [870944]
- [kernel] sched: Add irq_{enter,exit}() to scheduler_ipi() (Stanislaw Gruszka) [836964]
- [kernel] panic: fix a possible deadlock in panic() (Tatsuya Kitamura) [871939]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-352.el6]" date="1357214400">- [md] raid10: Do not call md_raid10_unplug_device while holding spinlock (Jonathan E Brassow) [886658]
- [md] dm-thin: commit before gathering status (Mike Snitzer) [882426]
- [md] dm-thin: cleanup dead code (Mike Snitzer) [882426]
- [md] dm-thin: rename cell_defer_except to cell_defer_no_holder (Mike Snitzer) [882426]
- [md] dm-thin: emit "ignore_discard" in status if discards are disabled (Mike Snitzer) [882426]
- [md] dm-thin: wake the worker when a discard is prepared (Mike Snitzer) [882426]
- [md] dm-thin: fix race between simultaneous io and discards to same block (Mike Snitzer) [882426]
- [md] dm-thin: replace calls to cell_release_singleton with cell_defer_except (Mike Snitzer) [882426]
- [mm] Revert: ksm: numa awareness sysfs knob (Jarod Wilson) [743643]
- [fs] gfs2: Reset rd_last_alloc when it reaches the end of the rgrp (Robert S Peterson) [882381]
- [fs] gfs2: Stop looking for free blocks at end of rgrp (Robert S Peterson) [882381]
- [drm] nouveau: cache ramcfg value for RAM_RESTRICT_ZM_GROUP (Ben Skeggs) [878384]
- [drm] nouveau: disable use of tesla/fermi copy engines for buffer moves (Ben Skeggs) [878384]
- [fs] xfs: fix direct IO nested transaction deadlock (Dave Chinner) [876426]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-353.el6]" date="1357560000">- [mm] pageattr: prevent PSE and GLOABL leftovers to confuse pmd/pte_present and pmd_huge (Andrea Arcangeli) [878877]
- [fs] gfs2: Fix FITRIM argument handling (Abhijith Das) [866932]
- [fs] gfs2: Require user to provide argument for FITRIM (Abhijith Das) [866932]
- [fs] exec: do not leave bprm-&gt;interp on stack (Josh Poimboeuf) [880146] {CVE-2012-4530}
- [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880146] {CVE-2012-4530}
- [fs] btrfs: close exclusive opens with close_bdev_exclusive() (Zach Brown) [874505]
- [kernel] sched_rt: Fix hang where umount is stuck in synchronize_sched_expedited (Larry Woodman) [814768]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-354.el6]" date="1358164800">- [char] ipmi: add new kernel options to prevent automatic ipmi init (Tony Camuso) [877177]
- [usb] xhci: New system added for Compliance Mode Patch on SN65LVPE502CP (Don Zickus) [856709]
- [x86] quirks: Mark Haswell HDMI Audio as unsupported (Prarit Bhargava) [883428]
- [scsi] bfa: fix crash in bfa_cb_ioim_done when performing failover/failback tests (Vijay Guvva) [878618]
- [fs] autofs4: Fix sparse warning: context imbalance in autofs4_d_automount() different lock contexts for basic block (Ian Kent) [876795]
- [fs] jbd, jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [886318]
- [scsi] qla4xxx: v5.03.00.00.06.04-k2 (Rob Evers) [890727]
- [scsi] qla4xxx: Correct the validation to check in get_sys_info mailbox (Rob Evers) [890727]
- [scsi] qla4xxx: Pass correct function param to qla4_8xxx_rd_direct (Rob Evers) [890727]
- [scsi] qla4xxx: v5.03.00.00.06.04-k1 (Chad Dupuis) [878048]
- [scsi] qla4xxx: update copyrights in LICENSE.qla4xxx (Chad Dupuis) [878048]
- [scsi] qla4xxx: Disable generating pause frames for ISP83XX (Chad Dupuis) [878048]
- [scsi] qla4xxx: Fix double clearing of risc_intr for ISP83XX (Chad Dupuis) [878048]
- [scsi] qla4xxx: IDC implementation for Loopback (Chad Dupuis) [878048]
- [scsi] qla4xxx: Fix panic while rmmod (Chad Dupuis) [878048]
- [scsi] qla4xxx: Fail probe_adapter if IRQ allocation fails (Chad Dupuis) [878048]
- [scsi] qla4xxx: Prevent MSI/MSI-X falling back to INTx for ISP82XX (Chad Dupuis) [878048]
- [scsi] qla4xxx: Update idc reg in case of PCI AER (Chad Dupuis) [878048]
- [scsi] qla4xxx: Fix double IDC locking in qla4_8xxx_error_recovery (Chad Dupuis) [878048]
- [scsi] qla4xxx: Clear interrupt while unloading driver for ISP83XX (Chad Dupuis) [878048]
- [scsi] qla4xxx: Print correct IDC version (Chad Dupuis) [878048]
- [scsi] qla4xxx: Added new mbox cmd to pass driver version to FW (Chad Dupuis) [878048]
- [scsi] qla4xxx: fix various printk and comment typos (Chad Dupuis) [878048]
- [fs] autofs4: use simple_empty() for empty directory check (Ian Kent) [876795]
- [fs] autofs4: dont clear DCACHE_NEED_AUTOMOUNT on rootless mount (Ian Kent) [876795]
- [fs] gfs2: Fix race in gfs2_rs_alloc (Abhijith Das) [878476]
- [fs] xfs: fix broken error handling in xfs_vm_writepage (Dave Chinner) [874539]
- [drm] radeon: force rn50 chip to always report connected on analog output (Jerome Glisse) [892723]
- [sound] alsa: add support for Teradici 2200 host card audio (Jaroslav Kysela) [890581]
- [md] dm-raid: Fix RAID10's check for sufficient redundancy (Jonathan E Brassow) [889358]
- [scsi] hpsa: update version number to 3.2.0 (Tomas Henzl) [891935]
- [netdrv] cxgb4: Initialize data structures before using (Steve Best) [885756]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-355.el6]" date="1358251200">- [netdrv] qlge: remove NETIF_F_TSO6 flag (Amerigo Wang) [891839]
- [fs] ext3: Remove BKL from ext3_put_super() and ext3_remount() (Carlos Maiolino) [885945]
- [lib] switch the protection of percpu_counter list to spinlock (Carlos Maiolino) [885945]
- [virt] hv: Add Hyper-V balloon driver (Jason Wang) [885572]
- [mm] export a function to get vm committed memory (Jason Wang) [885572]
- [drm] nouveau: extend prevent display switching issues by disabling pageflip (Ben Skeggs) [853226]
- [netdrv] mlx4: Fix advertisement of wrong PF context behaviour (Alex Williamson) [894060]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-356.el6]" date="1358769600">- [char] ipmi: use a tasklet for handling received messages (Prarit Bhargava) [890160]
- [char] ipmi: handle run_to_completion properly in deliver_recv_msg() (Prarit Bhargava) [890160]
- [usb] xhci: Reset reserved command ring TRBs on cleanup (Don Zickus) [843520]
- [usb] xhci: handle command after aborting the command ring (Don Zickus) [874541]
- [usb] xhci: cancel command after command timeout (Don Zickus) [874541]
- [usb] xhci: add aborting command ring function (Don Zickus) [874541]
- [usb] xhci: add cmd_ring_state (Don Zickus) [874541]
- [usb] xhci: Fix Null pointer dereferencing with non-DMI systems (Don Zickus) [874542]
- [usb] xhci: Intel Panther Point BEI quirk (Don Zickus) [874542]
- [usb] xhci: Increase XHCI suspend timeout to 16ms (Don Zickus) [874542]
- [powerpc] Revert: pseries/iommu: remove default window before attempting DDW manipulation (Steve Best) [890454]
- [serial] 8250_pnp: add Intermec CV60 touchscreen device (Mauro Carvalho Chehab) [894445]
- [char] ipmi: apply missing hunk from upstream commit 2407d77a (Tony Camuso) [882787]
- [acpi] Fix broken kernel build if CONFIG_ACPI_DEBUG is enabled (Lenny Szubowicz) [891948]
- [scsi] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically (Chad Dupuis) [854736]
- [mm] vmalloc: remove guard page from between vmap blocks (Johannes Weiner) [873737]
- [mm] vmalloc: vmap area cache (Johannes Weiner) [873737]
- [fs] vfs: prefer EEXIST to EROFS when creating on an RO filesystem (Eric Sandeen) [878091]
- [scsi] qla2xxx: change queue depth ramp print to debug print (Rob Evers) [893113]
- [fs] nfs: Fix umount when filelayout DS is also the MDS (Steve Dickson) [895194]
- [fs] nfs/pnfs: add set-clear layoutdriver interface (Steve Dickson) [895194]
- [fs] nfs: Don't call nfs4_deviceid_purge_client() unless we're NFSv4.1 (Steve Dickson) [895194]
- [fs] nfs: Wait for session recovery to finish before returning (Steve Dickson) [895176]
- [mm] compaction: validate pfn range passed to isolate_freepages_block (Johannes Weiner) [889456 890498]
- [drm] nouveau: ensure legacy vga is re-enabled during POST (Ben Skeggs) [625441]
- [netdrv] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [894344]
- [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862904] {CVE-2012-4461}</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-357.el6]" date="1359374400">- [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
- [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
- [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
- [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
- [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
- [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-358.el6]" date="1359460800">- [fs] Fix sget() race with failing mount (Eric Sandeen) [883276]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.0.1.el6]" date="1361361600">- [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [2.6.32-358.0.1.el6.centos]" date="1361880000">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="23b0745a71808105bc742819a25b76295aa9e2e4a74895b1bd1104b0a8e35338" name="openswan" arch="src">
    <version epoch="0" ver="2.6.32" rel="20.el6_4"/>

<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-11" date="1329220800">Resolves: #771464
Resolves: #771465
Resolves: #771466
Resolves: #771467
Resolves: #771473
Resolves: #771475</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-12" date="1329393600">Resolves: #771457
Resolves: #771460
Resolves: #771463</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-13" date="1330689600">Resolves: #795842
Resolves: #795850</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-14" date="1334145600">Resolves: #771461
Resolves: #771472</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-15" date="1334923200">Resolves: #768442</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-16" date="1335787200">Resolves: #771467</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-17" date="1340366400">Resolves: #831669
Resolves: #831676</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-18" date="1341576000">Resolves: #831676 : fixing loopback issue regression</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-19" date="1345809600">Resolves: #846797</changelog>
<changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-20" date="1368187200">Resolves: #960234 - CVE-2013-2053</changelog>

</package>

<package pkgid="4c7110a2ef9c884388f3ab9f1644c5c3c2d1f3621fb88dcc374862ab3ebec7f9" name="haproxy" arch="src">
    <version epoch="0" ver="1.4.22" rel="5.el6_4"/>

<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 1.4.22-1" date="1348142400">- Initial build.
  Resolves: rhbz#846067</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 1.4.22-2" date="1348228800">- Bump release number.
  Resolves: rhbz#846067</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 1.4.22-3" date="1349179200">- Use static uid/gid.
  Resolves: rhbz#846067</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 1.4.22-4" date="1364990400">- Rewrite rules flaw can lead to arbitrary code execution (CVE-2013-1912)
  Resolves: rhbz#947700</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 1.4.22-5" date="1371470400">- Fix possible crash when using negative header occurrences (CVE-2013-2175)
  Resolves: rhbz#974262</changelog>

</package>

<package pkgid="38e2e272692b5e58f7226f5cae610632dadf76b1a05d21c72f343089ce82ca28" name="perl" arch="src">
    <version epoch="4" ver="5.10.1" rel="131.el6_4"/>

<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-121" date="1329307200">- Resolves: rhbz#707960, rhbz#717565 - Do not own site directories located in
  /usr/local</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-122" date="1331035200">- Resolves: rhbz#738421 - Package bzip2 modules
- Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-124" date="1331553600">- Resolves: rhbz#801804 - Correct version of perl-Compress-Raw-Zlib sub-package</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-125" date="1332417600">- Resolves: rhbz#805606 - Fix POSIX::strftime memory leak</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-126" date="1332849600">- Resolves: rhbz#806373 - Fix IO::Uncompress::Unzip::nextStream to return 0 on
  last stream</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-127" date="1335787200">- Resolves: rhbz#817480 - Enable usesitecustomize
- Resolves: rhbz#817549 - Fix t/io/errno.t test</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-128" date="1350043200">- Resolves: #720644 - Do not wrap count argument of Perl_repeatcpy()</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-129" date="1354622400">- Related: #720644 - Do not wrap count argument of Perl_repeatcpy() on i386</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-130" date="1362398400">- Resolves: #915692 - CVE-2012-5526 (newline injection due to improper CRLF
  escaping in Set-Cookie and P3P headers)
- Resolves: #915692 - CVE-2012-6329 (possible arbitrary code execution via
  Locale::Maketext)
- Resolves: #915692 - CVE-2013-1667 (DoS in rehashing code)</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-131" date="1363003200">- Resolves: #948227 - Move format to prototyped subroutine properly</changelog>

</package>

<package pkgid="6e7a7c39586dca00699822630b1d782f00334cf3d4ef544074e581f0df196123" name="sos" arch="src">
    <version epoch="0" ver="2.2" rel="38.el6.centos.2"/>

<changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; = 2.2-32.el6" date="1350475200">- Collect /proc/pagetypeinfo in memory module
  Resolves: bz809727
- Strip trailing newline from command output
  Resolves: bz850433
- Add sanlock module
  Resolves: bz850779
- Do not collect archived accounting files in psacct module
  Resolves: bz850542
- Call spacewalk-debug from rhn module to collect satellite data
  Resolves: bz859142</changelog>
<changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; = 2.2-33.el6" date="1350561600">- Add Red Hat Update Infrastructure module
  Resolves: bz821323
- Collect /proc/iomem in hardware module
  Resolves: bz840975
- Collect subscription-manager output in general module
  Resolves: bz825968
- Collect rhsm log files in general module
  Resolves: bz826312
- Fix exception in gluster module on non-gluster systems
  Resolves: bz849546
- Fix exception in psql module when dbname is not given
  Resolves: bz852049</changelog>
<changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; = 2.2-34.el6" date="1350648000">- Add support for content delivery hosts to RHUI module
  Resolves: bz821323</changelog>
<changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; = 2.2-35.el6" date="1357732800">- Report --name and --ticket values as defaults
  Resolves: bz822113
- Fix device-mapper command execution logging
  Resolves: bz824378
- Fix data collection and rename PostreSQL module to pgsql
  Resolves: bz852049</changelog>
<changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; = 2.2-36.el6" date="1358424000">- Revert OpenStack patch
  Resolves: bz840057</changelog>
<changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; = 2.2-37.el6" date="1358510400">- Fix propagation of --ticket parameter in interactive mode
  Resolves: bz822113</changelog>
<changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; = 2.2-38.el6" date="1358769600">- Fix interactive mode regression when --ticket unspecified
  Resolves: bz822113</changelog>
<changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; = 2.2-38.el6_4.1" date="1374062400">- Backport SELinux enhancements from upstream
  Resolves: bz985242
- Fix invocation of 'udevadm info' in device-mapper plug-in
  Resolves: bz985244</changelog>
<changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; = 2.2-38.el6_4.2" date="1377172800">- Add ausearch and semanage output to SELinux plug-in
  Resolves: bz985242</changelog>
<changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1377777600">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="ee4425db2bcf1a6c67d3ea5311c8462e9576dc776ade3ac9d06c523cada7508c" name="microcode_ctl" arch="src">
    <version epoch="1" ver="1.17" rel="15.el6_4"/>

<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-6" date="1311163200">- Update to microcode-20110428.dat
- Resolves: rhbz#696582</changelog>
<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-7" date="1311163201">- Minor fix of the udev rule
- Include microcode update for AMD cpus
- Resolves: rhbz#682668</changelog>
<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-8" date="1311249600">- Revert: Minor fix of the udev rule
- Relates: rhbz#682668</changelog>
<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-9" date="1317816000">- Update to microcode-20110915.dat
- Resolves: rhbz#696582</changelog>
<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-10" date="1329307200">- Fix buffer overflow
- Resolves: rhbz#768803
- Update to microcode-20111110.dat
- Resolves: rhbz#736266</changelog>
<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-11" date="1329480000">- Update microcode for AMD cpus to 20120117
- Resolves: rhbz#787757</changelog>
<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-12" date="1346068800">- Fix udev rule
- Resolves: rhbz#740932
- Update to microcode-20120606.dat
- Resolves: rhbz#818096</changelog>
<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-13" date="1348488000">- Update to microcode-20120606v2.dat
- Resolves: rhbz#818096</changelog>
<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-14" date="1350907200">- Update microcode for AMD cpus to 2012-09-10
- Resolves: rhbz#867078</changelog>
<changelog author="Anton Arapov &lt;anton@redhat.com&gt; - 1:1.17-15" date="1377864000">- Update to microcode-20120808.dat
- Resolves: rhbz#915957 rhbz#1002446</changelog>

</package>

<package pkgid="34430e83a078fc493a9d3868a24cb9e3f736cb955b09b7b853502a28a7ad9470" name="firefox" arch="src">
    <version epoch="0" ver="17.0.6" rel="1.el6.centos"/>

<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-0.1.beta1" date="1350475200">- Update to 17 Beta 1</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-0.2.b4" date="1351771200">- Update to 17 Beta 4</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-1" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.1-2" date="1354276800">- Update to 17.0.1 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-3" date="1357819200">- Update to 17.0.2 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-4" date="1358251200">- Added NM preferences</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.5-2" date="1366286400">- Updated XulRunner check</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 17.0.6-1.el6.centos" date="1368532800">* Fri May 10 2013 Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1
- Update to 17.0.6 ESR</changelog>

</package>

<package pkgid="efc77d360d341cfa169ceed8d71fcbcc7c113fc2d65e47a6e688af92ac0e3b9e" name="openswan" arch="src">
    <version epoch="0" ver="2.6.32" rel="21.el6_4"/>

<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-12" date="1329393600">Resolves: #771457
Resolves: #771460
Resolves: #771463</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-13" date="1330689600">Resolves: #795842
Resolves: #795850</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-14" date="1334145600">Resolves: #771461
Resolves: #771472</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-15" date="1334923200">Resolves: #768442</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-16" date="1335787200">Resolves: #771467</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-17" date="1340366400">Resolves: #831669
Resolves: #831676</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-18" date="1341576000">Resolves: #831676 : fixing loopback issue regression</changelog>
<changelog author="Avesh Agarwal &lt;avagarwa@redhat.com&gt; - 2.6.32-19" date="1345809600">Resolves: #846797</changelog>
<changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-20" date="1368187200">Resolves: #960234 - CVE-2013-2053</changelog>
<changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 2.6.32-21" date="1373544000">Resolves: #983451 - barf and look should not cause loading of kernel modules</changelog>

</package>

<package pkgid="863c1f0b18e4643986018ba53706dfb28c3575e3549f1ce70598551133aef460" name="piranha" arch="src">
    <version epoch="0" ver="0.8.6" rel="2.el6_4.1"/>

<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.5-13" date="1329480000">- Resolves: #788541 - add option for sync daemon mcast interface
- Resolves: #717556 - add option for sync daemon id</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.5-14" date="1330430400">- Resolves: #745271 - add options for ipvs timeouts</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.5-15" date="1330430401">- Resolves: #798362 - echo newline after init script reload command</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.5-16" date="1335182400">- Resolves: #745271 - remove changes to debugfiles.list and debuglinks.list</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.5-17" date="1335268800">- Resolves: #815887 - nanny doesn't write to syslog when --nodaemon is used</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.5-18" date="1335355200">- Resolves: #815887 - call openlog whenever LVS_FLAG_SYSLOG is set</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.5-19" date="1335873600">- Resolves: #813906 - add SIGCHLD handler to pulse for lvs mode</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.6-1" date="1347883200">- Resolves: #846035 - rebase to upstream version 0.8.6
- Resolves: #857917 - piranha gui does not set ipvs timeout values</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.6-2" date="1348833600">- Resolves: #860924 - fix virtual server interface in piranha-gui</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; 0.8.6-2.1" date="1361880000">- Resolves: #915584 - fix sorry server</changelog>

</package>

<package pkgid="3a8f33600e5a9408ec0e34bb8b3c5df3c6383b461747e1dc3bdb4a21588febc7" name="bind" arch="src">
    <version epoch="32" ver="9.8.2" rel="0.17.rc1.el6.3"/>

<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.11.rc1" date="1341921600">- fix rbtnode.deadlink INSIST failures in rbtdb.c (#837165)</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.12.rc1" date="1343217600">- fix CVE-2012-3817</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.13.rc1" date="1347537600">- fix  CVE-2012-4244</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.14.rc1" date="1347969600">- allow forward{,ers} statement in static-stub zones</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.15.rc1" date="1349870400">- fix CVE-2012-5166</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.16.rc1" date="1350475200">- initscript: silence spurious "named.pid: No such file" error</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1" date="1354708800">- fix CVE-2012-5688</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.1" date="1359633600">- add response rate limit patch (#873624)</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.2" date="1359720000">- fix CVE-2012-5689</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.27.rc1.3" date="1360324800">- remove one bogus file from /usr/share/doc, introduced by RRL patch</changelog>

</package>

<package pkgid="a054f1009f76109035be1178e3a8e0cf297b5840f99a4671b5d2e26b369c7e2e" name="java-1.7.0-openjdk" arch="src">
    <version epoch="1" ver="1.7.0.25" rel="2.3.10.4.el6_4"/>

<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.8.0.el6" date="1362484800">- Revert to rhel 6.3 version of spec file
- Revert to icedtea7 2.3.8 forest
- Resolves: rhbz#917183</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.8.1.el6" date="1364472000">- Added and applied patch 116 - patch 116 rh905128-non_block_ciphers.patch
- Added and applied patch 117 - patch 117 java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
 - to enable handleStartupErrors = ignoreMultipleInitialisation in icedtea 2.3
- Restorered removed nss support
- Fixed java-1.7.0-openjdk-nss-config-{1,2} patches to be valid for icedtea 2.3.x
- enable_nss switch to 0 - disabled
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.8.2.el6" date="1365595200">- Added latest Fedora spec changes
- Bumped release
- Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
- zlib in BuildReq restricted for  1.2.3-7 or higher
 - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
- Removed a -icedtea tag from the version
  - package have less and less connections to icedtea7
- Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
- Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
  - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
- Removed all fonconfig files. Fonts are now handled differently in JDK 
  and those files are redundant. This is going to be usptreamed.
  - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
- logging.properties marked as config(noreplace)
  - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
- classes.jsa marked as ghost on full path
  - see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
- nss.cfg was marked as config(noreplace)
- Add symlink to default soundfont (see 541466)
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.9-2.3.9.0.el6" date="1365681600">- updated to IcedTea  2.3.9 with latest security patches
- buildver sync to b19
- rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.1.el6" date="1366113600">- updated to updated IcedTea  2.3.9 with fix to one of security fixes
  -  fixed font glyph offset
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.19-2.3.10.0.el6" date="1371038400">- Updated to latest IcedTea7-forest 2.3.10
- patch 107 renamed to 500 for cosmetic purposes
- improved handling of patch111 - nss-config-2.patch
- removed patch 117, java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
  duplicated with patch 108 (java-1.7.0-openjdk-nss-icedtea-e9c857dcb964)
- Added client/server directories so they can be owned
- Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
- Resolves: rhbz#973119</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.1.el6" date="1371124800">- build bumped to 25
- Resolves: rhbz#973119</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.2.el6" date="1371124801">- added patch1000 MBeanFix.patch to fix regressions caused by security patches
- Resolves: rhbz#973119</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.3.el6" date="1371556800">- removed upstreamed patch1000 MBeanFix.patch
- updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
- Resolves: rhbz#973119</changelog>
<changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1.7.0.25-2.3.10.4.el6" date="1372248000">- Sync with upstream IcedTea7-forest 2.3.10 tag
- Fixes regressions as introduced with 1.7.0.25-2.3.10.3.el6:
  rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
- Related: rhbz#973119</changelog>

</package>

<package pkgid="66675e3f71693ac0b78de7610d4a681629bbd9d883ed346f9225c609df1663d7" name="firefox" arch="src">
    <version epoch="0" ver="17.0.3" rel="1.el6.centos"/>

<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349524800">- Update to 10.0.8 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.8-2" date="1349956800">- Fixed rhbz#865284 - add the storage.nfs_filesystem
  config key to property list
- disable OOP for wrapped plugins (nspluginwrapper)</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-0.1.beta1" date="1350475200">- Update to 17 Beta 1</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-0.2.b4" date="1351771200">- Update to 17 Beta 4</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-1" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.1-2" date="1354276800">- Update to 17.0.1 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-3" date="1357819200">- Update to 17.0.2 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-4" date="1358251200">- Added NM preferences</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.3-1.el6.centos" date="1361275200">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="2670221d4b06c1c9fba776235560512a0f1ad21f55ed39cb68e255bbd5b56602" name="stunnel" arch="src">
    <version epoch="0" ver="4.29" rel="3.el6_4"/>

<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.26-3" date="1235563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild</changelog>
<changelog author="Miloslav Trmač &lt;mitr@redhat.com&gt; - 4.27-1" date="1239883200">- Update to stunnel-4.27.</changelog>
<changelog author="Miloslav Trmač &lt;mitr@redhat.com&gt; - 4.27-2" date="1241006400">- Avoid aliasing undefined by ISO C</changelog>
<changelog author="Miloslav Trmač &lt;mitr@redhat.com&gt; - 4.27-3" date="1241352000">- Fix the previous patch.</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.27-4" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 4.27-5" date="1250856000">- rebuilt with new openssl</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 4.27-5.1" date="1258977600">- Rebuilt for RHEL 6</changelog>
<changelog author="Avesh Agrwal &lt;avagarwa@redhat.com&gt; - 4.29-1" date="1263384000">- New upstream realease 4.29
- Updated authpriv and sample patches for the new release
- Modified spec file to include dist tag</changelog>
<changelog author="Avesh Agrwal &lt;avagarwa@redhat.com&gt; - 4.29-2" date="1263556800">- Fixed a few problems in the sample config patch</changelog>
<changelog author="Avesh Agrwal &lt;avagarwa@redhat.com&gt; - 4.29-3" date="1364817600">Resolves: CVE-2013-1762</changelog>

</package>

<package pkgid="af2ded8623f21daa0f93f3fbd30e4eda7d56614671e3f4585466c38714975641" name="spice-vdagent" arch="src">
    <version epoch="0" ver="0.12.0" rel="4.el6_4.1"/>

<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 0.6.3-7" date="1300363200">- Daemonize per user session vdagent process on startup, this avoids a long
  delay after logging in
- Fix mouse not working with the agent installed
  Resolves: rhbz#688257</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 0.6.3-8" date="1300968000">- Fix chunk demultiplexing when chunks from messages for different ports
  get intermixed
  Related: rhbz#658464</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 0.8.1-1" date="1310990400">- New upstream release 0.8.1
  Resolves: rhbz#722477
- Fixes vdagent not auto restarting when vdagentd gets restarted
  Resolves: rhbz#681797
- Fixes vdagent crash when copying large (multiple megabytes) amount of data
  from the client clipboard to the guest clipboard
  Resolves: rhbz#690164</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 0.8.1-2" date="1317643200">- Add support for multiple monitors / Xinerama setups
  Resolves: rhbz#740851</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 0.8.1-3" date="1319803200">- Fix resolution sync not working when connecting with a multi monitor client
  to a single monitor guest
  Resolves: rhbz#748760</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.12.0-1" date="1346500800">- New upstream release 0.12.0
  Resolves: rhbz#842355
- This switches to syslog for logging, adding timestamps, etc. to the logs
  Resolves: rhbz#747894
- This adds support for dynamically adding monitors and resolutions
  Resolves: rhbz#842298</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.12.0-2" date="1350216000">- Fix wrong mouse coordinates on vms with multiple qxl devices
  Resolves: rhbz#855110</changelog>
<changelog author="Marc-André Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.12.0-3" date="1353931200">- Fix crash when first resizing monitor
  Resolves: rhbz#872633</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.12.0-4" date="1357646400">- Fix various issues with dynamic resolution and monitor support
  Resolves: rhbz#888821</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.12.0-4.el6_4.1" date="1362830400">- Restore old monitor config when failing to set a new monitor config
  Resolves: rhbz#919089</changelog>

</package>

<package pkgid="39db598458cfe3dd0b73a6f12df5c70b11a86921d32ca6430e1c1e1a9f44190c" name="cpuspeed" arch="src">
    <version epoch="1" ver="1.5" rel="20.el6_4"/>

<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.5-11" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.5-12" date="1249387200">- Move buildroot dir creation to %install</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 1.5-13" date="1258113600">- Move startup prio so we start after syslog, so any notices during
  system startup actually get logged</changelog>
<changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 1:1.5-14" date="1277899200">- Init script: added the reload function
- Init script: the service now stops when using p4-clockmod driver
- Resolves: rhbz#607223</changelog>
<changelog author="Matthew Garrett &lt;mjg@redhat.com&gt; 1:1.5-15" date="1279627200">- Init scipt: Add support for loading the pcc-cpufreq driver
- Resolves: rhbz#609659</changelog>
<changelog author="Marcela Mašláňová &lt;mmaslano@redhat.com&gt; 1:1.5-16" date="1346760000">- Whenever PCC driver is loaded, it loads the “userspace” governor, instead 
  of the “ondemand” governor.
- Resolves: rhbz#642838</changelog>
<changelog author="Marcela Mašláňová &lt;mmaslano@redhat.com&gt; 1:1.5-17" date="1347537600">- Cpuspeed init script still tries to adjust cpufreq sysfiles on a per core 
  basis 738463
- IGNORE_NICE parameter does opposite of what it says (thanks to Minto Joseph)
  797055
- Cpuspeed does not reset MIN/MAX values when config file is emptied 616976
- Resolves: rhbz#738463, rhbz#797055, rhbz#616976</changelog>
<changelog author="Petr Šabata &lt;contyk@redhat.com&gt; - 1:1.5-18" date="1349697600">- Fix #738463 for real this time.</changelog>
<changelog author="Petr Šabata &lt;contyk@redhat.com&gt; - 1:1.5-19" date="1354017600">- Fix the naive method of getting the highest available scaling frequency (#876738)</changelog>
<changelog author="Petr Šabata &lt;contyk@redhat.com&gt; - 1:1.5-20" date="1372420800">- Read cpuinfo_max_speed instead of scaling_available_frequencies (#902134)</changelog>

</package>

<package pkgid="0b503e96058e52f1768aa3cec41a33d27a885a753efa1c7b1fd353840c42a34f" name="java-1.6.0-openjdk" arch="src">
    <version epoch="1" ver="1.6.0.0" rel="1.56.1.11.8.el6_3"/>

<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.47.1.11.3" date="1339243200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828752</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.48.1.11.3" date="1339502400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828752</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.49.1.11.4" date="1346414400">- Updated to latest IedTea6 1.11.4
- Resolves: rhbz#853345</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1:1.6.0.0-1.49.1.11.5" date="1350043200">- Updated to IcedTea6 1.11.5
- Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
  865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
  865519, 865531, 865541, 865568</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.50.1.11.5" date="1350302400">- Changed permissions of sa-jdi.jar to correct 644
- Resolves: rhbz#865045</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.51.1.11.6" date="1358251200">- Updated to icedtea6 1.11.6
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Resolves: rhbz#906707</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.53.1.11.6" date="1360152000">- added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  to remove   6664509 and 7201064 from 1.11.6 tarball
- Resolves: rhbz#906707</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.54.1.11.6" date="1360152001">- removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch8:   7201064.patch to be reverted
- added patch9:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906707</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.55.1.11.8" date="1360929600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but working
- Resolves: rhbz#911524</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.56.1.11.8" date="1361188800">- Rebuild with updated sources
- Resolves: rhbz#911524</changelog>

</package>

<package pkgid="430bb851de108431f8a4ba41dfe09775e5778e123ccd745e2b11d6759908e938" name="firefox" arch="src">
    <version epoch="0" ver="17.0.8" rel="1.el6.centos"/>

<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.1-2" date="1354276800">- Update to 17.0.1 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-3" date="1357819200">- Update to 17.0.2 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-4" date="1358251200">- Added NM preferences</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.5-2" date="1366286400">- Updated XulRunner check</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368187200">- Update to 17.0.6 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371643200">- Update to 17.0.7 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-1" date="1375272000">- Update to 17.0.8 ESR</changelog>
<changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt; - 17.0.8-1.el6.centos" date="1375876800">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="b598e422e2deb588693d6021c5dff34c77d250947a7484ffb372166abd29b2fc" name="authd" arch="src">
    <version epoch="0" ver="1.4.3" rel="31.el6_4"/>

<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.3-23" date="1235390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.4.3-24" date="1238500800">- Fixed using valist with log option on.
  Resolves: #446844
- user ident has home dir set to /
  Resolves: #458144</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.4.3-25" date="1238500801">- Fixed source tag</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.4.3-26" date="1239278400">- get back to older version of jiffies64 patch</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.3-27" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.4.3-28" date="1250856000">- rebuilt with new openssl</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 1.4.3-28.1" date="1260532800">- Rebuilt for RHEL 6</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.4.3-29" date="1267012800">- Use RPM_OPT_FLAGS for CFLAGS in build section</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.4.3-30" date="1276516800">- Use only once defattr macro
  Resolves: #596150</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.4.3-31" date="1375185600">- Don't fail on negative uid
  Resolves: #994118</changelog>

</package>

<package pkgid="6ad8e35bd9bf184b5f0fb4f9f35e3e32fe1441089dcdf38950111443dfaca390" name="openssl" arch="src">
    <version epoch="0" ver="1.0.0" rel="27.el6_4.2"/>

<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-19" date="1317297600">- add known answer test for SHA2 algorithms</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-20" date="1320062400">- fix x86cpuid.pl - patch by Paolo Bonzini</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-21" date="1326974400">- fix for CVE-2011-4108 &amp; CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-22" date="1330603200">- fix incorrect encryption of unaligned chunks in CFB, OFB and CTR modes</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-23" date="1332158400">- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-24" date="1334836800">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-25" date="1337083200">- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
- properly initialize tkeylen in the CVE-2012-0884 fix</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-26" date="1345032000">- use PKCS#8 when writing private keys in FIPS mode as the old
  PEM encryption mode is not FIPS compatible (#812348)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-27" date="1350043200">- fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
- drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
- force BIO_accept_new(*:&lt;port-number&gt;) to listen on IPv4</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.0.0-27.2" date="1361793600">- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)</changelog>

</package>

<package pkgid="eb49c74c076dbd1f4dddcfd68cce1c69d69df5f0f4593fda2ae9d7764586b538" name="389-ds-base" arch="src">
    <version epoch="0" ver="1.2.11.15" rel="22.el6_4"/>

<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-15" date="1372161600">- Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half.  (Ticket 47385)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-16" date="1372680000">- Resolves: Bug 979514 - CVE-2013-2219 ACLs inoperative in some search scenarios. (Ticket 47405)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-17" date="1373630400">- Resolves: Bug 970995 - DS not shutting down when disk monitoring threshold is reached to half. (Ticket 47385)
- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold. (ticket 47427)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.18" date="1374667200">- Bump version to 1.2.11.15-18
- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 2). (ticket 47427)
- Resolves: Bug 987850 - Disk Monitoring not checking filesystem with logs (ticket 47741)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.19" date="1374753600">- Bump version to 1.2.11.15-19
- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 3). (ticket 47427)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.19" date="1374753601">- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 4). (ticket 47427)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.19" date="1374753602">- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 4). (ticket 47427)
- Patch was not added</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.20" date="1374840000">- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 5 limits not displayed correctly). (ticket 47427)</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15.21" date="1377518400">- Resolves: Bug 1000631 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15.22" date="1377518401">- Resolves: Bug 1000631 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN -- retry</changelog>

</package>

<package pkgid="0398219e27505b5510182c5fdb33b24b23c7dd7e25f3073dfd7c4cafa63add6d" name="java-1.6.0-openjdk" arch="src">
    <version epoch="1" ver="1.6.0.0" rel="1.62.1.11.11.90.el6_4"/>

<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.53.1.11.6" date="1360152000">- added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  to remove   6664509 and 7201064 from 1.11.6 tarball
- Resolves: rhbz#906708</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.54.1.11.6" date="1360152001">- removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch8:   7201064.patch to be reverted
- added patch9:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906708</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360929600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but working
- Resolves: rhbz#911525</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.56.1.11.8" date="1361188800">- Rebuild with updated sources
- Resolves: rhbz#911525</changelog>
<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1:1.6.0.0-1.57.1.11.9" date="1362398400">- Updated to icedtea6 1.11.9
- Resolves: rhbz#917179</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.58.1.11.10" date="1366200000">- Updated to icedtea6 1.11.10
- rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
- excluded aarch64.patch
  - by patch 8 -  removingOfAarch64.patch.patch
- Resolves: rhbz#950386</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.59.1.11.11" date="1366372800">- Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
- removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
- Resolves: rhbz#950386</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.60.1.11.11" date="1366545600">- added and applied (temporally) one more patch to xalan/xerces privileges
 - patch9 jaxp-backport-factoryfinder.patch
- will be upstreamed
- Resolves: rhbz#950386</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.61.1.11.11" date="1366718400">- added and applied (temporally) patch10   fixToFontSecurityFix.patch.
 - fixing regression in fonts introduced by one security patch.
- Resolves: rhbz#950386</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.62.1.11.11.90" date="1372334400">- updated to icedtea6-1.11.11.90.tar.gz
- removed upstreamed patch9 jaxp-backport-factoryfinder.patch
- removed upstreamed patch10 fixToFontSecurityFix.patch.
- modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#973129</changelog>

</package>

<package pkgid="a8ba5bc49606ecacdf1c0387b52bed0fb4e88f5de0472702db2a1141beebb71c" name="libvirt" arch="src">
    <version epoch="0" ver="0.10.2" rel="18.el6_4.3"/>

<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-12" date="1355313600">- qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
- remote: Avoid the thread race condition (rhbz#866524)
- storage: Error out earlier if the volume target path already exists (rhbz#832302)
- dnsmasq: Fix parsing of the version number (rhbz#885727)
- qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
- examples: Fix balloon event callback (rhbz#884650)
- util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
- util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
- util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
- util: Fix warning message in previous patch (rhbz#883832)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-13" date="1355918400">- network: Prevent dnsmasq from listening on localhost (rhbz#886821)
- sanlock: Re-add lockspace unconditionally (rhbz#820173)
- Fix "virsh create" example (rhbz#887187)
- docs: Fix some typos in examples (rhbz#887187)
- network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-14" date="1357214400">- util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
- util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
- util: Fix botched check for new netlink request filters (rhbz#889319)
- blockjob: Fix memleak that prevented block pivot (rhbz#888426)
- sanlock: Chown lease files as well (rhbz#820173)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-15" date="1357732800">- snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
- snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
- snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
- snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
- util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
- qemu: Add a hash table for the shared disks (rhbz#878578)
- docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
- conf: Parse and format the new XML (rhbz#878578)
- qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
- qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
- qemu: Relax hard RSS limit (rhbz#891653)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-16" date="1358337600">- qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
- Add RESUME event listener to qemu monitor. (rhbz#894085)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-17" date="1358942400">- storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
- qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
- qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18" date="1359374400">- rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
- spec: Disable libssh2 support (rhbz#513363)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.1" date="1363348800">- xen: Resolve resource leak with 'cpuset' (rhbz#908836)
- schema: Make the cpuset type reusable across schema files (rhbz#908836)
- schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
- conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
- capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
- capabilities: Add additional data to the NUMA topology info (rhbz#908836)
- test: Add support for thread and core information for the test driver (rhbz#908836)
- xen: Initialize variable before using (rhbz#908836)
- xen: Actually fix the uninitialized variable (rhbz#908836)
- spice: Properly reserve tlsPort when no port specified (rhbz#913624)
- qemu_agent: Ignore expected EOFs (rhbz#915344)
- qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
- qemu: Destroy domain on decompression binary error (rhbz#915347)
- qemu: Run lzop with '--ignore-warn' (rhbz#915347)
- Don't ignore return value of qemuProcessKill (rhbz#915353)
- Fix race condition when destroying guests (rhbz#915353)
- Log warning if storage magic matches, but version does not (rhbz#915354)
- Add lots of debugging to storage file probing code (rhbz#915354)
- Fix probing of QED file format (rhbz#915354)
- util: Add virendian.h macros (rhbz#915354)
- util: Use new virendian.h macros (rhbz#915354)
- storage: Rearrange functions (rhbz#915354)
- storage: Prepare for refactoring (rhbz#915354)
- storage: Refactor metadata lookup (rhbz#915354)
- storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
- storage: Test backing chain traversal (rhbz#915354)
- qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
- python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
- qemu: Add checking in helpers for sgio setting (rhbz#919504)
- qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
- qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
- qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
- qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
- qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
- qemu: Fix the memory leak (rhbz#919504)
- Fix crash changing CDROM media (rhbz#919504)
- qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
- qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
- Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
- util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
- qemu: Fix QMP detection of QXL graphics (rhbz#915352)
- qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
- conf: Add optional attribte primary to video &lt;model&gt; element (rhbz#915352)
- qemu: Use newer -device video device in qemu commandline (rhbz#915352)
- tests: Add one -device video device testcase (rhbz#915352)
- qemu: Detect VGA_QXL capability correctly (rhbz#915352)
- qemu: Support ram bar size for qxl devices (rhbz#915352)
- conf: Don't leak 'primary' video property on error (rhbz#915352)
- storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
- storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
- storage: Cleanup logical volume creation code (rhbz#918754)
- docs: Clarify semantics of sparse storage volumes (rhbz#918754)
- storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
- storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
- interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
- locking: Resolve resource leaks on non error path (rhbz#922095)
- selinux: Resolve resource leak using the default disk label (rhbz#922095)
- storage: Resolve resource leaks with cmd processing (rhbz#922095)
- domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
- qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
- storage: Need to add virCommandFree() (rhbz#922095)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.2" date="1363608000">- qemu: Fix startupPolicy regression (rhbz#915349)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.3" date="1364558400">- util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
- security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
- security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
- libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
- security_manager.c: Append seclabel iff generated (rhbz#928879)</changelog>

</package>

<package pkgid="467f81da27edec40bd8e64809e53f156b396aa54bb397f5c18adb5d2eab3aeee" name="nss" arch="src">
    <version epoch="0" ver="3.14.3" rel="4.el6_4"/>

<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.0.0-7" date="1351771200">- Add dummy sources file to test for and prevent breaking rhpkg commands
- Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
- Related: rhbz#837089</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.0.0-8" date="1352289600">- PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
- Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.0.0-9" date="1352289601">- Fix locking issue causing curl hangs and authenticate to the correct session
- Resolves: rhbz#872838</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.0.0-10" date="1355313600">- Remove a patch that caused a regression
- Resolves: rhbz#883620</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.0.0-11" date="1357732800">- Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.0.0-12" date="1357819200">- Recreate the distrust patch by backporting the upstream one
- Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-1" date="1364212800">- Update to NSS_3.14.3_RTM
- Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
- Update expired test certificates (fixed in upstream bug 852781)
- Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
- Reactivate the aia tests</changelog>
<changelog author="Elio Maldonado - 3.14.3-2" date="1364299200">- Install sechash.h and secmodt.h which are now provided by nss-devel
- Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
- Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-3" date="1364385600">- Ensure pem uses system freebl as with this update freebl brings in new API's
- Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-4" date="1367236800">- Revert to accepting MD5 on digital signatures by default
- Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled</changelog>

</package>

<package pkgid="fa9f0b1019814f9bbcb36843b63cc6baf0b7a6e4a949c8c073c0999f3960eab1" name="selinux-policy" arch="src">
    <version epoch="0" ver="3.7.19" rel="195.el6_4.12"/>

<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.3" date="1362571200">- Backport openshfit fixes
Resolves:#917966</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.4" date="1366804800">- Allow dirsrv-admin server to be restarted from console 
Resolves:#955703
- Allow dac_override for openshift-cron</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.5" date="1368100800">- Allow dirsrv-admin server to be restarted from console
Resolves:#955703</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.6" date="1369656000">- Allow myslqd-safe to execute shell_exec_t
Resolves:#966997
- Allow openshift-cron to read openshift link files in /var/lib</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.7" date="1369915200">- Make Quantum 2013.1.1 working with netns
- Make SSHing into an Openshift Enterprise Node working
Resolves:#969043</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.8" date="1370433600">- Allow dnsmasq to stream connect to quantum
- Allow ifconfig domtrans to iptables and execute ldconfig
Resolves:#969043</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.9" date="1370520000">- Allow iptables to read and write quantum inherited pipes
- Allow iptables to send sigchld to quantum
Resolves:#969043</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.10" date="1370520001">- Remove all transitions for quantum
Resolves:#969043</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.11" date="1371124800">- Allow qemu to manage nova lib files
- Allow hald to read svirt images
Resolves:#973776</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.12" date="1372075200">- Back port openvswitch policy
Resolves:#976000</changelog>

</package>

<package pkgid="6d0e6828b70d4e601639b8037c6f875adc3c9fac971a70b88e4cf3d136295052" name="krb5" arch="src">
    <version epoch="0" ver="1.10.3" rel="10.el6_4.6"/>

<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-7" date="1350475200">- tag a couple of other patches which we still need to be applied during
  %{?_rawbuild} builds (zmraz, #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-8" date="1355140800">- untag a couple of other patches which don't strictly need to apply during
  %{?_rawbuild} builds (more of #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-9" date="1355227200">- when building with our bundled copy of libverto, package it in with -libs
  rather than with -server (#886049)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10" date="1355832000">- make -server conflict with older versions of SELinux policy that didn't
  allow us to use eventfds, which libverto's backend may depend on in order
  to properly shut down a multi-worker KDC (#871524)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.1" date="1362484800">- incorporate upstream patch to fix a NULL pointer dereference when the client
  supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
- add patch to avoid dereferencing a NULL pointer in the KDC when handling a
  draft9 PKINIT request (#917909, CVE-2012-1016)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.2" date="1365508800">- incorporate upstream patch to fix a NULL pointer dereference while processing
  certain TGS requests (CVE-2013-1416, #950342)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.3" date="1370001600">- pull up fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.4" date="1372248000">- don't leak the memory used to hold the previous entry when walking a keytab
  to figure out which kinds of keys we have (#978312)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.5" date="1377259200">- backport fix for not being able to verify the list of transited realms
  in GSS acceptors (RT#7639, #1000313)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.6" date="1377691200">- pull fix for keeping track of the message type when parsing FAST requests in
  the KDC (RT#7605, #1002179)</changelog>

</package>

<package pkgid="efe465fa0cce854752f3f4aab718fd5a1f9b504fe4878af1ecf40ba9a021612a" name="java-1.7.0-openjdk" arch="src">
    <version epoch="1" ver="1.7.0.19" rel="2.3.9.1.el6_4"/>

<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.11-2.4.0.2.el6" date="1358942400">- Unapplied but kept (for 2.3revert) patch110,  java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
- Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch
- Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch
- Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch
- NSS enabled by default - enable_nss set to 1
- rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch
- rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch
- Resolves: rhbz#831734</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.4.0.pre2.3.el6" date="1360929600">- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.4.0.pre2, updated?
- Added java -Xshare:dump to post (see 513605) fo jitarchs
- Resolves: rhbz#911530</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.4.0.pre3.3.el6" date="1360929601">- Updated  to icedtea 2.4.0.pre3, updated!
- Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#911530</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.4.0.pre4.3.el6" date="1361188800">- Updated  to icedtea 2.4.0.pre4, 
- Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#911530</changelog>
<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.11-2.4.0.pre5.el6" date="1362398400">- Update to latest snapshot of icedtea7 2.4 forest
- Resolves: rhbz#917183</changelog>
<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.8.0.el6" date="1362484800">- Revert to rhel 6.3 version of spec file
- Revert to icedtea7 2.3.8 forest
- Resolves: rhbz#917183</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.8.1.el6" date="1364472000">- Added and applied patch 116 - patch 116 rh905128-non_block_ciphers.patch
- Added and applied patch 117 - patch 117 java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
 - to enable handleStartupErrors = ignoreMultipleInitialisation in icedtea 2.3
- Restorered removed nss support
- Fixed java-1.7.0-openjdk-nss-config-{1,2} patches to be valid for icedtea 2.3.x
- enable_nss switch to 0 - disabled
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.8.2.el6" date="1365595200">- Added latest Fedora spec changes
- Bumped release
- Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
- zlib in BuildReq restricted for  1.2.3-7 or higher
 - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
- Removed a -icedtea tag from the version
  - package have less and less connections to icedtea7
- Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
- Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
  - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
- Removed all fonconfig files. Fonts are now handled differently in JDK 
  and those files are redundant. This is going to be usptreamed.
  - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
- logging.properties marked as config(noreplace)
  - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
- classes.jsa marked as ghost on full path
  - see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
- nss.cfg was marked as config(noreplace)
- Add symlink to default soundfont (see 541466)
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.9-2.3.9.0.el6" date="1365681600">- updated to IcedTea  2.3.9 with latest security patches
- buildver sync to b19
- rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.1.el6" date="1366113600">- updated to updated IcedTea  2.3.9 with fix to one of security fixes
  -  fixed font glyph offset
- Resolves: rhbz#950380</changelog>

</package>

<package pkgid="54ede50f00d12ee56b8a691be0592d56e54c842238c223be7249685d6b904742" name="krb5" arch="src">
    <version epoch="0" ver="1.10.3" rel="10.el6_4.3"/>

<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1347019200">- on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
  stopped linking with a symbol which we no longer export (#771687)
- pull up patch for RT#7063, in which not noticing a prompt for a long
  time throws the client library's idea of the time difference between it
  and the KDC really far out of whack (#773496)
- add a backport of more patches to set the client's list of supported enctypes
  when using a keytab to be the list of types of keys in the keytab, plus the
  list of other types the client supports but for which it doesn't have keys,
  in that order, so that KDCs have a better chance of being able to issue
  tickets with session keys of types that the client can use (#837855)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-5" date="1347278400">- add patch based on one from Filip Krska to not call poll() with a negative
  timeout when the caller's intent is for us to just stop calling it (#838548)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-6" date="1348574400">- actually pull up the patch for RT#7063, and not some other ticket (#773496)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-7" date="1350475200">- tag a couple of other patches which we still need to be applied during
  %{?_rawbuild} builds (zmraz, #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-8" date="1355140800">- untag a couple of other patches which don't strictly need to apply during
  %{?_rawbuild} builds (more of #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-9" date="1355227200">- when building with our bundled copy of libverto, package it in with -libs
  rather than with -server (#886049)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10" date="1355832000">- make -server conflict with older versions of SELinux policy that didn't
  allow us to use eventfds, which libverto's backend may depend on in order
  to properly shut down a multi-worker KDC (#871524)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.1" date="1362484800">- incorporate upstream patch to fix a NULL pointer dereference when the client
  supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
- add patch to avoid dereferencing a NULL pointer in the KDC when handling a
  draft9 PKINIT request (#917909, CVE-2012-1016)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.2" date="1365508800">- incorporate upstream patch to fix a NULL pointer dereference while processing
  certain TGS requests (CVE-2013-1416, #950342)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.3" date="1370001600">- pull up fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog>

</package>

<package pkgid="944aaa85bea4c2ff792cf5dc0b44efee270a205faa17bddbd51fd24267916d9c" name="initscripts" arch="src">
    <version epoch="0" ver="9.03.38" rel="1.el6.centos.2"/>

<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.32-1" date="1349697600">- check an IP address for existence in ifup-alias
- remount /dev/shm in sysinit to apply attributes from fstab
- sets BONDING_OPTS before interface is brougth up and checks if it is not already added
- Add support for setting random bridge options via BRIDGING_OPTS
- use vgchange -aay in rc.sysinit and netfs init script
- script should not kill itself during shutdown
- fix the NIS domain setting
- be less strict about VLAN name
- clarification of work with white spaces in crypttab manpage
- re-read sysctl values for VLANs on ifup
- pass useful arguments to halt.local
- start serial console when we return from runlevel1
- move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network.
- don't accidentally match other bonding devices
- add usage stanzas for tty.conf and serial.conf
- rename_device: skip VLAN=yes configuration files
- allow duplicate address dectection to be disabled</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.33-1" date="1352376000">- apply BONDING_OPT on ifup of master (#874030)</changelog>
<changelog author="Václav Pavlín &lt;vpavlin@redhat.com&gt; - 9.03.34-1" date="1352980800">- there should be crypttab instead of crypptab in man page (#870025)
- sysconfig.txt advised saslauthd -a instad of -v (#869075)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.35-1" date="1353672000">- fix typo in ifup-aliases duplicate check (#879243)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.36-1" date="1354104000">- improve duplicate ip address check in ifup-aliases (#880684)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.37-1" date="1355400000">- don't apply BONDING_OPTS on device with active slaves (#885235)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.38-1" date="1357732800">- call ip link up on master after slaves are up (#893395)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.38-1.1" date="1362657600">- fix greps to correctly handle comments and quotation (#919086)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.38-1.2" date="1374667200">- bonding: set master up before slaves (#987998)</changelog>
<changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt; - 9.03.38-1.el6.centos.2" date="1375704000">- Roll in CentOS Branding patch</changelog>

</package>

<package pkgid="176d72cf4e1812243c7ef7f8dd7f4affbf42c08f7d2dc0a351359a0b02524b74" name="vsftpd" arch="src">
    <version epoch="0" ver="2.2.2" rel="11.el6_4.1"/>

<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-3" date="1268740800">- Resolves: #540818 - Local user access denied by default vsftpd.conf
- Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)</changelog>
<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-4" date="1273752000">- Resolves: #548802 - vsftpd gets sig=11 when user attempts to login</changelog>
<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-5" date="1274097600">- Resolves: #592850 - vsftp binds to both ipv4 and ipv6 addresses when listen_ipv6 is enabled</changelog>
<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-6" date="1274875200">- Resolves: #595617 - options "isolate" &amp; "isolate_network" not documented</changelog>
<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-7" date="1299153600">- Resolves: #681892 - CVE-2011-0762 vsftpd: remote DoS via crafted glob patter</changelog>
<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-8" date="1323691200">- Resolves: #708657 - Update to rhel 6.1 broke vsftpd authentication when using ldap</changelog>
<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-9" date="1328184000">- Resolves: #785084 - vsftpd can not handle square brackets in ls
- Resolves: #785061 - vsftpd child terminates when listing files with UID/GID larger than signed in
- Resolves: #717411 - Connection failures during upload using PORT not handled cleanly
- Resolves: #752954 - Disabling Reverse DNS lookups in VSFTPd
- Resolves: #745133 - vsftpd: documentation for 'max_per_ip' default setting is wrong
- Resolves: #765757 - SITE HELP offers CHMOD even when it is disabled/unavailable
- Resolves: #701300 - vsftpd.conf lists incorrect default value for xferlog_file
- Resolvse: #785642 - Invalid error recovery in vsf_privop_pasv_listen()</changelog>
<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-10" date="1329134400">- Resolves: #745133 - corrected doc for 'max_per_ip' and 'max_clients' default setting</changelog>
<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-11" date="1330689600">- Resolves: #785084 - improved: vsftpd can not handle square brackets in ls</changelog>
<changelog author="Jiri Skala &lt;jskala@rehat.com&gt; - 2.2.2-11.el6_4.1" date="1360670400">- Resolves: #903147 - connect rigth socket when the data are transferred between two servers</changelog>

</package>

<package pkgid="5f01b037f638cb8777802968db12584ed450265fd469820e81203e9a2507d4dd" name="curl" arch="src">
    <version epoch="0" ver="7.19.7" rel="36.el6_4"/>

<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-27" date="1308830400">- do not delegate GSSAPI credentials (CVE-2011-2192)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-28" date="1312372800">- add a new option CURLOPT_GSSAPI_DELEGATION (#719938)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-29" date="1331035200">- initialize NSS with no database if the selected database is broken (#772642)
- use NSS_InitContext() to avoid a collision with OpenLDAP (#738456)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-30" date="1343217600">- print reason phrase from HTTP status line on error (#676596)
- fix typo in curl.1 man page (#729984)
- introduce the --delegation option of curl (#730445)
- enforce versioned libssh2 dependency for libcurl (#741935)
- nss: select client certificates by DER (#746629)
- fix a build failure when building against newer libssh2-devel (#841905)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-31" date="1350388800">- fix a header problem with chunked-encoding and Content-Length (#813127)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-32" date="1350388801">- remove a redundant dependency on a fixed version of libssh2</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-33" date="1353672000">- SCP: send large files properly with new enough libssh2 (#879592)
- fix handling of errors returned from libssh2 when sending data (#873789)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-34" date="1354536000">- prevent NSS from crashing on client auth hook failure (#880897)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-35" date="1357819200">- clear NSS session cache if a client certificate from file was used (#885058)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-36" date="1365854400">- fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)</changelog>

</package>

<package pkgid="2dd2dfaf867c7093e510cc034237eeb6fddd11690d7f5cee0f48788e2532bf5d" name="pixman" arch="src">
    <version epoch="0" ver="0.26.2" rel="5.el6_4"/>

<changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 0.25.6-2" date="1337083200">- rely on runtime cpu detection for arm optimisations
- disable failing to build iwmmxt</changelog>
<changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 0.26.0-1" date="1338379200">- update to 0.26.0
- patch to add missing emms instructions
- reenable iwmmxt since configure should now detect if it can't built</changelog>
<changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 0.26.0-2" date="1340712000">- Add experimental patch to use OpenMP
  If this causes your X server to misbehave, please file bugs.</changelog>
<changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 0.26.0-3" date="1340712001">- Add -fopenmp to pixman-sse2.c CFLAGS</changelog>
<changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; - 0.26.0-4" date="1340712002">- Add -fopenmp to CFLAGS and LDFLAGS on the make command line instead
  of in Makefile.am.</changelog>
<changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.26.2-1" date="1341489600">- update to 0.26.2
- drop upstreamed patch</changelog>
<changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.26.2-2" date="1341576000">- run autoreconf to properly pull in gomp</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.26.2-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.26.2-4" date="1343649600">- Disable openmp patch in RHEL for the moment</changelog>
<changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 0.26.2-5" date="1364299200">- Fix bug 914474 (CVE 2013-1591)
- Remove openmp.patch</changelog>

</package>

<package pkgid="8e62e9755fe8832029091567eda75183cf7593682ebdaf80d69ac51c6df3b114" name="firefox" arch="src">
    <version epoch="0" ver="17.0.7" rel="1.el6.centos"/>

<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-1" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.1-2" date="1354276800">- Update to 17.0.1 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-3" date="1357819200">- Update to 17.0.2 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-4" date="1358251200">- Added NM preferences</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.5-2" date="1366286400">- Updated XulRunner check</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-1" date="1368187200">- Update to 17.0.6 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371643200">- Update to 17.0.7 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.7-1" date="1372161600">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="2e475e640d90a4de760eb6818384c254c6c95130533e59fc3d42f0fb1fd2b6e6" name="libnl" arch="src">
    <version epoch="0" ver="1.1.4" rel="1.el6_4"/>

<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1-6" date="1235563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild</changelog>
<changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 1.1-7" date="1242302400">- Don't present "extern inline nl_object_priv();" to consumers in the headers.</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1-8" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="John W. Linville &lt;linville@redhat.com&gt; - 1.1-9" date="1261483200">- Install libnl into /lib64 instead of /usr/lib64</changelog>
<changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.1-10" date="1267185600">- add patch for alignment issues</changelog>
<changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1-11" date="1273752000">- Update source link for package review (rh #592042)</changelog>
<changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1-12" date="1280923200">- Fix crashes due to multithreaded error handling (rh #617291)</changelog>
<changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1-13" date="1297166400">- Fix various memory leaks in error paths (rh #620345)</changelog>
<changelog author="Laine Stump &lt;laine@redhat.com&gt; - 1.1-14" date="1301313600">- Fix problems with thread-safety and basic logic of port allocation
  (rh #677724) (rh #677725)</changelog>
<changelog author="Thomas Graf &lt;tgraf@redhat.com&gt; - 1.1.4-1" date="1370865600">- increase receive buffer size (rh #962892)</changelog>

</package>

<package pkgid="fbbe00f3081a8469041dbbf75d35b860a7a3f886301d2bb5ed123ced6ced2674" name="thunderbird" arch="src">
    <version epoch="0" ver="17.0.6" rel="2.el6.centos"/>

<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-2" date="1350043200">- Added patches from 10.0.9 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b1-0.1" date="1351080000">- Rebase to 17 beta 1</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b2-0.1" date="1352376000">- Update to 17.0b2</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0-2" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-2" date="1358424000">- Update to 17.0.2 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362657600">- Added fix for #848644</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-2" date="1368187200">- Update to 17.0.6 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.6-2.el6.centos" date="1368532800">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="7ca6cd877d2916ddd5fce46e56c307534d8a573e67c2e96eb8d55224069b03b3" name="mesa" arch="src">
    <version epoch="0" ver="9.0" rel="0.8.el6_4.3"/>

<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 8.1-0.20" date="1348315200">- fix osmesa harder, noticed by rpmdiff</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 9.0-0.1" date="1348488000">- realign with upstream version for rebase + glu</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 9.0-0.2" date="1349179200">- fix mesa-dri-filesystem requires.</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 9.0-0.3" date="1355918400">- block intel msaa so kwin doesn't regress (#885882)</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 9.0-0.6" date="1359028800">- Quieten driver load failure messages when the display is possibly non-
  local (#901627)</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 9.0-0.7" date="1359115200">- CVE-2012-5129: heap buffer overflow in glGetUniform* (#903933)</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 9.0-0.8" date="1369051200">- CVE-2013-1872: memory corruption oob read/write on intel (#963063)
- CVE-2013-1993: interger overflows in protocol handling (#961613)</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&lt; 9.0-0.8.1" date="1369224000">- CVE-2013-1872: Updated patch (#963063)</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 9.0-0.8.2" date="1369915200">- CVE-2013-1872: Updated patch from upstream (#963063)</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 9.0-0.8.3" date="1369915201">- CVE-2013-1872: Updated patch with testing from upstream (#963063)</changelog>

</package>

<package pkgid="4aeb1b9c6a196bd1dcbe64d52426bd191b4747e696f6b29de10ee553564e1b20" name="perl" arch="src">
    <version epoch="4" ver="5.10.1" rel="130.el6_4"/>

<changelog author="Marcela Mašláňová &lt;mmaslano@redhat.com&gt; - 4:5.10.1-120" date="1317729600">- 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
- 743010 - perl: code injection vulnerability in Digest-&gt;new()
- Resolves: rhbz#743093, rhbz#743091</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-121" date="1329307200">- Resolves: rhbz#707960, rhbz#717565 - Do not own site directories located in
  /usr/local</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-122" date="1331035200">- Resolves: rhbz#738421 - Package bzip2 modules
- Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-124" date="1331553600">- Resolves: rhbz#801804 - Correct version of perl-Compress-Raw-Zlib sub-package</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-125" date="1332417600">- Resolves: rhbz#805606 - Fix POSIX::strftime memory leak</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-126" date="1332849600">- Resolves: rhbz#806373 - Fix IO::Uncompress::Unzip::nextStream to return 0 on
  last stream</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-127" date="1335787200">- Resolves: rhbz#817480 - Enable usesitecustomize
- Resolves: rhbz#817549 - Fix t/io/errno.t test</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-128" date="1350043200">- Resolves: #720644 - Do not wrap count argument of Perl_repeatcpy()</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-129" date="1354622400">- Related: #720644 - Do not wrap count argument of Perl_repeatcpy() on i386</changelog>
<changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.10.1-130" date="1362398400">- Resolves: #915692 - CVE-2012-5526 (newline injection due to improper CRLF
  escaping in Set-Cookie and P3P headers)
- Resolves: #915692 - CVE-2012-6329 (possible arbitrary code execution via
  Locale::Maketext)
- Resolves: #915692 - CVE-2013-1667 (DoS in rehashing code)</changelog>

</package>

<package pkgid="d7b78888538f7069a79a722d62ad0d1ba77ff93ad5a601d694113de1230ad344" name="ghostscript" arch="src">
    <version epoch="0" ver="8.70" rel="15.el6_4.1"/>

<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-6" date="1279281600">- Applied patch to fix CVE-2010-1628 (memory corruption at PS stack
  overflow, bug #592492).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-7" date="1290772800">- Fixed jbig2dec-nullderef patch (bug #621118).
- Applied upstream patch to fix iname.c segfault (bug #629562).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-8" date="1291982400">- Restored Fontmap.local patch, incorrectly dropped after
  ghostscript-8.15.4-3 (bug #629941).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-10" date="1296561600">- Actually apply the Fontmap.local patch (bug #629941).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-11" date="1300968000">- Fixed generation of hyperlinks in ps2pdf (bug #675692).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-12" date="1306843200">- Use landscape PXL page sizes when appropriate (bug #697488).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-13" date="1326369600">- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).
- Applied patch to prevent integer underflow in TrueType bytecode
  interpreter (CVE-2009-3743, bug #627902).
- Applied patch to avoid reading initialization and library files from
  CWD (CVE-2010-2055, bug #599564; CVE-2010-4820, bug #771853).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-14" date="1331035200">- Fixed character spacing problems using backported patch (bug #695766).
- Apply some fixes from upstream to avoid gdevcups segfaults (bug #643105).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-15" date="1346932800">- Added inputChan lower-bounds checking to icclib (bug #854227,
  CVE-2012-4405).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-15:.1" date="1362744000">- Back-ported patch to copy CIDFontType 2 properly (bug #893775).</changelog>

</package>

<package pkgid="17c35059ac187c0c81ce1640969f5065cdb133ccb9d85d2f622e9705d9023714" name="389-ds-base" arch="src">
    <version epoch="0" ver="1.2.11.15" rel="12.el6_4"/>

<changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.2.11.15-3" date="1352116800">- Resolves: Bug 870158 - slapd entered to infinite loop during new index addition
- Resolves: Bug 870162 - Cannot abandon simple paged result search
- c970af0 Coverity defects
- 1ac087a Fixing compiler warnings in the posix-winsync plugin
- 2f960e4 Coverity defects
- Ticket #491 - multimaster_extop_cleanruv returns wrong error codes</changelog>
<changelog author="Noriko Hosoi &lt;nhoso@redhat.com&gt; - 1.2.11.15-4" date="1353067200">- Resolves: Bug 868841 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
- Resolves: Bug 868853 - Winsync: DS error logs report wrong version of Windows AD when winsync is configured.
- Resolves: Bug 875862 - crash in DNA if no dnamagicregen is specified
- Resolves: Bug 876694 - RedHat Directory Server crashes (segfaults) when moving ldap entry
- Resolves: Bug 876727 - Search with a complex filter including range search is slow
- Ticket #495 - internalModifiersname not updated by DNA plugin (Bug 834053)</changelog>
<changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.2.11.15-5" date="1354017600">- Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode</changelog>
<changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.2.11.15-6" date="1354190400">- Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode
-   use perl-Socket6 on RHEL6</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-7" date="1354881600">- Resolves: Bug 830355 - [RFE] improve cleanruv functionality 
- Resolves: Bug 876650 - Coverity revealed defects 
- Ticket #20 - [RFE] Allow automember to work on entries that have already been added (Bug 768084)
- Resolves: Bug 834074 - [RFE] Disable replication agreements
- Resolves: Bug 878111 - ns-slapd segfaults if it cannot rename the logs</changelog>
<changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.2.11.15-8" date="1355832000">- Resolves: Bug 887855 - RootDN Access Control plugin is missing after upgrade from RHEL63 to RHEL64</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-9" date="1357300800">- Resolves: Bug 891930 - DNA plugin no longer reports additional info when range is depleted</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-10" date="1357646400">- Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-11" date="1358769600">- Resolves: Bug 896256 - updating package touches configuration files</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-12" date="1361534400">- Resolves: Bug 910994 - PamConfig schema not updated during upgrade
- Resolves: Bug 910995 - Valgrind reports memleak in modify_update_last_modified_attr
- Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
- Resolves: Bug 911467 - DNA: use event queue for config update only at the start up
- Resolves: Bug 911468 - Error messages encountered when using POSIX winsync
- Resolves: Bug 911469 - dse.ldif is 0 length after server kill or machine kill
- Resolves: Bug 911474 - Invalid chaining config triggers a disk full error and shutdown
- Resolves: Bug 914305 - ns-slapd segfaults while trying to delete a tombstone entry
- Resolves: Bug 913228 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data</changelog>

</package>

<package pkgid="5d5de79fa0097916bcc39a39091e27f8b48cca9633c6eb52891627bba3db9652" name="net-snmp" arch="src">
    <version epoch="1" ver="5.5" rel="44.el6_4.4"/>

<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-39" date="1334059200">- fixed proxying of out-of-tree GETNEXT requests (#799291)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-40" date="1336564800">- fixed CVE-2012-2141 (#820100)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-41" date="1337342400">- moved /var/lib/net-snmp fro net-snmp to net-snmp-libs package
  (#822480)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-42" date="1340798400">- removed fixed limit of 50 'exec' entries in snmpd.conf (#829271)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-43" date="1347278400">- fixed value of UCD-SNMP-MIB::extCommand to contain full command
  line (#842279)
- fixed rpath to perl.so (#848319)
- added support for port numbers in 'clientaddr' configuration
  option (#833013)
- fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
  is used (#824402)
- fixed engineID of outgoing traps if 'trapsess -e &lt;engineID&gt;' is used in
  snmpd.conf (#800671)
- updated documentation of '-c' option of snmptrapd (#784502)
- fixed endless loop when SIGTEM arrives in middle of internal query
  processing (#851637)
- fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
- removed various error log messages related to counte64 expansions
  (#846906)
- removed various error log messages when IPv6 is disabled (#845157)
- added support of cvfs filesystem in hrStorageTable (#846532)
- fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
  which could result in some entries missing in the table (#846436)
- added support of simfs filesystem in hrStorageTable (#861152)
- fixed responding to requests on a multihost machine (#825889)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44" date="1349870400">- rebuild with fixed libnetsnmpmibs linking broken by perl-rpath patch</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44.1" date="1366113600">- fixed snmpd crashing with 'exec' command with no arguments in snmpd.conf
  (#919259)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44.2" date="1370433600">- fixed crash when parsing invalid SNMP packets (#953926)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44.3" date="1374235200">- fixed IF-MIB::ifSpeedHi on systems with non-standard interface
  speeds (#986193)</changelog>
<changelog author="&lt;jsafrane@redhat.com&gt; - 1:5.5-44.4" date="1375790400">- fixed snmpd crashing in the middle of agentx request processing when
  a subagent disconnects (#955511)</changelog>

</package>

<package pkgid="f236107662f01d7803a64a91295741cf6cbd345d29df1cbba0e788dd87593c2f" name="tzdata" arch="src">
    <version epoch="0" ver="2012j" rel="2.el6"/>

<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-1" date="1336996800">- Upstream 2012c
  - Haiti observes DST from 2012 on
  - Gaza Strip and Hebron observe DST in 2012
  - Change start of DST in Syria to last Friday in March
- Resolves: #820732</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-3" date="1342180800">- Morocco will not observe DST during the month of Ramadan
  (tzdata-2012c-morocco.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012f-1" date="1347883200">- Upstream 2012f
  - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
    and end at 3 am on Sunday 20th January 2013.  Guess it will be like
    that in following years as well.
- Upstream 2012e
  - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
- Upstream 2012d
  - Morocco will not observe DST during the month of Ramadan.
    DST cessation end date was corrected.
  - Drop tzdata-2012c-morocco.patch</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012g-1" date="1350907200">- Upstream 2012g
  - Adjust the packaging for new Makefile
  - Palestine: Fall transition was Sep 21, not Sep 28
  - Samoa: Daylight Saving Time commences on Sunday 30th September
    2012 and ends on Sunday 7th of April 2013.
- Resolves: #868173</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-1" date="1351684800">- Upstream 2012h
  - Brazilian state Bahia no longer has DST.
  - Brazilian state Tocantins now has DST.
  - Israel has new DST rules next year.
  - Jordan stays on DST this winter.</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-2" date="1352116800">- Switch back to using system zic, ignore upstream Makefile at all.
  We do so for java anyway.
- Drop Factory from distribution</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-1" date="1352116801">- Upstream 2012i
  - Cuba switched to DST</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352203200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354276800">- Upstream 2012j
  - Libya moved to CET</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-2" date="1361966400">- DTS in Chile will end on 2013-04-28
  (0016-Chile-is-changing-its-DST-rules.patch)</changelog>

</package>

<package pkgid="cdde326d26b72eda07910225eee5d1664e9aec0db1c80eeb5c350c86340df70e" name="ksh" arch="src">
    <version epoch="0" ver="20100621" rel="19.el6_4.4"/>

<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-12" date="1318334400">- previous fix did not scale well, use different approach (#743842)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-13" date="1324296000">- fix: ksh can exit prematurely without crash or any error (#742930)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-14" date="1330689600">- fix data corruption in a here-document section of a script at byte 8192 (#786787)
- restore tty settings after timed out read (#577223)
- do not create extra process when it's not needed (#781976)
- fix file descriptor leak (#781498)
- do not segfault on incorrect oop code (#743840)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-15" date="1331121600">- do not crash when using a lot of file descriptors (#798868)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-16" date="1334145600">- tilda expansion does not work correctly (#800684)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-17" date="1349179200">- flush output before forking (#827512)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-18" date="1351598400">- build with the logging ability (#869155)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-19" date="1351771200">- assigning a right justified typedef'd variable to a smaller one
  could corrupt the result (#846678)
- fix exporting of l/r-justified variable (#846678)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-19.3" date="1365508800">- do not crash when using more file descriptors (#924440)
- skipped a few release numbers</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-19.4" date="1368705600">- command substitution in here-document did not work propperly (#927586)</changelog>

</package>

<package pkgid="2bbf73b48dcbfc8372703f33eee7634f5a501c9194f45a4c75d0ceb32ae2cf5a" name="glibc" arch="src">
    <version epoch="0" ver="2.12" rel="1.107.el6_4.4"/>

<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.102" date="1349092800">- Add MADV_DONTDUMP/MADV_DODUMP to mman.h (#861167)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.103" date="1349697600">- Don't free memory allocated by mempool allocator (#863453)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.104" date="1350043200">- Change from magic environment variable to existance of
    magic file /etc/sysconfig/32bit_ssse3_mempy_via_32bit_ssse3_memmove
    to trigger change in memcpy behavior. (#846342, #865375)
  - Fix IPTOS_CLASS #define. (#864322)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.105" date="1350216000">- Inline open/close syscalls in #846342/865375 hack (#846342, #865375).</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.106" date="1350475200">- Fix typo in inlined open syscall for #846342/#865375 hack (#866798)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.107" date="1353412800">- Simplify test for magic file to change memcpy behaviour
    and correctly handle encoded return value from inlined
    syscall (#846342, #874642)
  -</changelog>
<changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.12-1.107.1" date="1369137600">- Fix application of SIMD FP exception mask (#929388).</changelog>
<changelog author="Carlos O&apos;Donell &lt;codonell@redhat.com&gt; - 2.12-1.107.2" date="1371643200">- Fix loading of audit libraries when TLS is in use (#970992)</changelog>
<changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12.1.107.3" date="1375272000">- Consistantly MANGLE/DEMANGLE function pointers and
    fix use after free in dcigettext.c (#989558).</changelog>
<changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12.1.107.4" date="1375358400">- Updates to dcigettext.c and loadmsgcat.c patches. (#989558).</changelog>

</package>

<package pkgid="ecc688b0bc8cfc4f51ae9d164c3c72f20faa6a440f4a80e83dd268508f2ba7ba" name="curl" arch="src">
    <version epoch="0" ver="7.19.7" rel="37.el6_4"/>

<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-28" date="1312372800">- add a new option CURLOPT_GSSAPI_DELEGATION (#719938)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-29" date="1331035200">- initialize NSS with no database if the selected database is broken (#772642)
- use NSS_InitContext() to avoid a collision with OpenLDAP (#738456)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-30" date="1343217600">- print reason phrase from HTTP status line on error (#676596)
- fix typo in curl.1 man page (#729984)
- introduce the --delegation option of curl (#730445)
- enforce versioned libssh2 dependency for libcurl (#741935)
- nss: select client certificates by DER (#746629)
- fix a build failure when building against newer libssh2-devel (#841905)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-31" date="1350388800">- fix a header problem with chunked-encoding and Content-Length (#813127)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-32" date="1350388801">- remove a redundant dependency on a fixed version of libssh2</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-33" date="1353672000">- SCP: send large files properly with new enough libssh2 (#879592)
- fix handling of errors returned from libssh2 when sending data (#873789)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-34" date="1354536000">- prevent NSS from crashing on client auth hook failure (#880897)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-35" date="1357819200">- clear NSS session cache if a client certificate from file was used (#885058)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-36" date="1365854400">- fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-37" date="1371211200">- fix heap-based buffer overflow in curl_easy_unescape() (CVE-2013-2174)</changelog>

</package>

<package pkgid="25a5e38ef7e61078513bad46af09c8963586cd56d3411ad8d0e8558e1d515ae7" name="freetype" arch="src">
    <version epoch="0" ver="2.3.11" rel="14.el6_3.1"/>

<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-6" date="1285848000">- Add freetype-2.3.11-CVE-2010-2805.patch
    (Fix comparison.)
- Add freetype-2.3.11-CVE-2010-2806.patch
    (Protect against negative string_size. Fix comparison.)
- Add freetype-2.3.11-CVE-2010-2808.patch
    (Check the total length of collected POST segments.)
- Add freetype-2.3.11-CVE-2010-3311.patch
    (Don't seek behind end of stream.)
- Resolves: #638839</changelog>
<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-7" date="1289390400">- Add freetype-2.3.11-CVE-2010-3855.patch
    (Protect against invalid `runcnt' values.)
- Resolves: #651762</changelog>
<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-8" date="1311163200">- Add freetype-2.3.11-CVE-2011-0226.patch
    (Add better argument check for `callothersubr'.)
    - based on patches by Werner Lemberg,
      Alexei Podtelezhnikov and Matthias Drochner
- Resolves: #723468</changelog>
<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-9" date="1311163201">- Allow FT_Glyph to alias (to pass Rpmdiff)
- Resolves: #723468</changelog>
<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-10" date="1311163202">- Use -fno-strict-aliasing instead of __attribute__((__may_alias__))
- Resolves: #723468</changelog>
<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-11" date="1319198400">- Add freetype-2.3.11-CVE-2011-3256.patch
    (Handle some border cases.)
- Resolves: #747084</changelog>
<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-12" date="1321358400">- Add freetype-2.3.11-CVE-2011-3439.patch
    (Various loading fixes.)
- Resolves: #754012</changelog>
<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-13" date="1333454400">- Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
  1137, 1139, 1140, 1141, 1142, 1143, 1144}
- Properly initialize array "result" in
  FT_Outline_Get_Orientation()
- Check bytes per row for overflow in _bdf_parse_glyphs()
- Resolves: #806269</changelog>
<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-14" date="1342699200">- A little change in configure part
- Related: #723468</changelog>
<changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; 2.3.11-14.el6_3.1" date="1359028800">- Fix CVE-2012-5669
    (Use correct array size for checking `glyph_enc')
- Resolves: #903542</changelog>

</package>

<package pkgid="10132a4de570253024de2ab642253c2a93221984e4dae4585968ebb27dc11a01" name="selinux-policy" arch="src">
    <version epoch="0" ver="3.7.19" rel="195.el6_4.3"/>

<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-190" date="1357300800">- Allow virtd to settattr on virt image dirs in MLS
Resolves:#885045
- Allow all postfix domains to connect to mysql stream
- Call init_daemon_domain for rsync_t
- Add labeling for /var/lib/pgsql/ssh 
- Allow certmonger to send signal to itself
- Allow rsyslog to read user tmp files using logging_syslog_can_read_tmp boolean
- Add support for 1228/tcp and 1228/udp ports and allow corosync touse them
- Allow corosync to read wdmd tmpfs
- Allow wdmd to execute consoletype
- Update man pages using sepolicy from Fedora
- Fix admin interfaces</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-191" date="1357300801">- Remove pam_selinux due to conflict
- Add labeling for /etc/multipath - lvm_metadata_t
Resolves:#880407
- Add additional gitolite3 labeling</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-192" date="1357732800">- Label /usr/lib/yaboot/addnote as bin_t
- Allow postfix_local to read/write /var/spool/postfix/active
- Allow postfix domains to list /tmp
- Allow wdmd to transition to kdump
Resolves:#887793
- Add labeling for /var/named/chroot/etc/localtime</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-193" date="1358251200">- Fix ssh_sysadm_login boolean for MLS
Resolves:#865759
- Allow rpm_script_t to dbus communicate with certmonger_t
- More fixes for qemu-ga to make "guest-fsfreeze-freeze" working</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-194" date="1358337600">- qdiskd needs to read usr_t/bin_t files
- Allow dpsam to connect/bind to spamd ports
- Allow munin services plugins to bind to generic node
Resolves:#865759</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195" date="1358856000">- Make matahari domains as unconfined
- Allow nscd to connect to nmbd
Resolves:#901565
- Allow setcap/getcap for syslogd</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4" date="1361188800">- Fix tuned policy to make it working with the lastet tuned package
Resolves:#912392</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.1" date="1361361600">- Additional fix for tuned
- Backport openshift changes
Resolves:#912392</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.2" date="1362484800">- Allow cgred to use notify
Resolves:#917966
- Allow mount to transition to gluster
Resolves:#917972</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.3" date="1362571200">- Backport openshfit fixes
Resolves:#917966</changelog>

</package>

<package pkgid="27eae71ac5553ba298f2a03c2a629522146a39824437be45af9c2d1d2b85c824" name="cups" arch="src">
    <version epoch="1" ver="1.4.2" rel="50.el6_4.5"/>

<changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.4.2-46" date="1332158400">- Fix lp and lpr return string (bug #740093).</changelog>
<changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.4.2-47" date="1332158401">- cupsPrintFiles() did not report all errors (STR #3449, bug #740093)</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-48" date="1337601600">- Fix German translation of web interface search template (STR #3635,
  bug #806818).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-49" date="1345550400">- Avoid "forbidden" error when moving job between queues via web UI
  (bug #834445).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50" date="1351252800">- Fixed LDAP browsing issues (bug #870386).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50:.1" date="1355400000">- Applied patch to fix CVE-2012-5519 (privilege escalation for users
  in SystemGroup or with equivalent polkit permission).  This prevents
  HTTP PUT requests with paths under /admin/conf/ other than that for
  cupsd.conf, and also prevents such requests altering certain
  configuration directives such as PageLog and FileDevice (bug #875898).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50:.2" date="1360929600">- Added documentation for new CVE-2012-5519 option.</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50:.3" date="1361793600">- Fix for CVE-2012-5519 patch: handle blacklisted lines that have no
  value part gracefully.</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50:.4" date="1361880000">- Added BrowseLDAPCACertFile and PrintcapGUI to restricted options
  list.</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1:1.4.2-50:.5" date="1375790400">- Fixes for jobs with multiple files and multiple formats (bug #972242).</changelog>

</package>

<package pkgid="23bc36a805d84117c9da30c87fa7d75dc18de693fa654e2207cb8223e0584ad4" name="krb5" arch="src">
    <version epoch="0" ver="1.10.3" rel="10.el6_4.1"/>

<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-3" date="1346328000">- backport patch to disable replay detection in krb5_verify_init_creds()
  while reading the AP-REQ that's generated in the same function (RT#7229)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-4" date="1346932800">- cut down the number of times we load SELinux labeling configuration from
  a minimum of two times to actually one (more of #845125)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt;" date="1347019200">- on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
  stopped linking with a symbol which we no longer export (#771687)
- pull up patch for RT#7063, in which not noticing a prompt for a long
  time throws the client library's idea of the time difference between it
  and the KDC really far out of whack (#773496)
- add a backport of more patches to set the client's list of supported enctypes
  when using a keytab to be the list of types of keys in the keytab, plus the
  list of other types the client supports but for which it doesn't have keys,
  in that order, so that KDCs have a better chance of being able to issue
  tickets with session keys of types that the client can use (#837855)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-5" date="1347278400">- add patch based on one from Filip Krska to not call poll() with a negative
  timeout when the caller's intent is for us to just stop calling it (#838548)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-6" date="1348574400">- actually pull up the patch for RT#7063, and not some other ticket (#773496)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-7" date="1350475200">- tag a couple of other patches which we still need to be applied during
  %{?_rawbuild} builds (zmraz, #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-8" date="1355140800">- untag a couple of other patches which don't strictly need to apply during
  %{?_rawbuild} builds (more of #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-9" date="1355227200">- when building with our bundled copy of libverto, package it in with -libs
  rather than with -server (#886049)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10" date="1355832000">- make -server conflict with older versions of SELinux policy that didn't
  allow us to use eventfds, which libverto's backend may depend on in order
  to properly shut down a multi-worker KDC (#871524)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.1" date="1362484800">- incorporate upstream patch to fix a NULL pointer dereference when the client
  supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
- add patch to avoid dereferencing a NULL pointer in the KDC when handling a
  draft9 PKINIT request (#917909, CVE-2012-1016)</changelog>

</package>

<package pkgid="db2472a9bf272cba36b901960f2290592222718c63eb8ba136e65a555d409e11" name="nss-pam-ldapd" arch="src">
    <version epoch="0" ver="0.7.5" rel="18.2.el6_4"/>

<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-11" date="1317729600">- do not overflow big UID values, use explicit base when converting UIDs
  and GIDs to integer types (#741362)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-12" date="1317729601">- patch the nslcd.conf manual page with the "dns:DOMAIN" syntax info (#730309)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-13" date="1318939200">- punt on negative UID/GID (#741362)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-14" date="1318939201">- run the config file upgrade in %posttrans to avoid problems on multilib
  (#706454)
- convert UID to long long on all arches to catch negative values (#741362)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-15" date="1324382400">- Do not check connection before adding a new search (#769289)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-16" date="1349784000">- Do not print a "Broken Pipe" error message after requesting a large group
  (#791042)
- Fix a typo in the disconnection logic (#747281), patch by Martin Poole</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-17" date="1349784001">- include LDAP_ADMINLIMIT_EXCEEDED in the disconnection logic patch
- Related: rhbz#747281</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-18" date="1353931200">- Correct the patch to silent a warning after retrieving a large group
- Resolves: #791042</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-18.1" date="1361275200">- Apply upstream r1926 to resolve FD_SET array index error
- Resolves: rhbz#915361</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-18.2" date="1374494400">- Apply a patch by Martin Poole to fix skipping a zero-length attribute
- Resolves: #986898</changelog>

</package>

<package pkgid="18c3d5860ec0551ec40c92ef376bb45d7af641169ee620e1e10fdb99bf720083" name="libtirpc" arch="src">
    <version epoch="0" ver="0.2.1" rel="6.el6_4"/>

<changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.0-1" date="1243598400">- Updated to latest upstream version: 0.2.0</changelog>
<changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.0-2" date="1246276800">- Updated to latest upstream tag: 0-2-1-rc2
    rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
    clnt_dg: Fix infinite loop when datagram call times ou
    Updated .gitignore file
    Replace the hard coded path name with the top_srcdir macrc
    Added 'doc' to the SUBDIRS list so make install work correctly.</changelog>
<changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.0-3" date="1247140800">- Updated to latest upstream tag: 0-2-1-rc3
    Fixed the --disable-gss options
    Fixed a number of warnings
    Change how architectures are define in xdr_float.c</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1248523200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 0.2.0-4.1" date="1259582400">- Rebuilt for RHEL 6</changelog>
<changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-1" date="1280145600">- Updated the the latest upstream release: 0.2.1-rc3 (bz 613682)</changelog>
<changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-2" date="1295006400">- Moved the libraries from /usr/lib to /lib (bz 558937)</changelog>
<changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-3" date="1298289600">- Fixed UDP mount over multi-homed servers (bz 676234)</changelog>
<changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-5" date="1313496000">- Added support for user space servers (bz 714015) - 0.2.1-4
- Some RPMdiff clean up - 0.2.1-5</changelog>
<changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-6_4" date="1369224000">- Removed a svc_freeargs() call from svc_dg_freeargs() (bz 953735)</changelog>

</package>

<package pkgid="222242884b57c31046da270907a1d6021543a733cd3f1758d2ef14dd1f09c4ff" name="ipmitool" arch="src">
    <version epoch="0" ver="1.8.11" rel="14.el6_3"/>

<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-7" date="1297080000">- added 'delloem' command for Dell-specific IPMI extensions (#631649, #63793)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-8" date="1310644800">- fixed 'ipmi sol' sending wrong packets due to miscalculation of SOL
  payload size (#675975)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-9" date="1311595200">- rebuilt for RHEL 6.2 Fastrack</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-10" date="1312459200">- updated 'delloem setled' command to indicate SES status and drive
  activities for a PCI-e SSD (#727314)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-10" date="1312977600">- added -Y option for ipmitool to hide Kg key from cmdline (#698647)
- added 'channel setkg' command to set Kg encryption key on remote machine
  (#726390)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-11" date="1313668800">- fixed delloem powermonitor on bigendian systems (#731718)
- fixed memory leak in Serial-over-Lan module (#731977)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-12" date="1322136000">- fixed wrong permissions on ipmievd.pid (#756685)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-13" date="1329739200">- added new options to configure retransmissions on lan/lanplus interfaces
  (#748073)
- updated dellem command (#739358)
- fixed exit code of ipmitool -o list (#715615)
- improved checking of command line arguments (#725993)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-13.1" date="1338379200">- fixed retransmissions of lanplus requests, broken in previous release
  (#826027)</changelog>
<changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.8.11-14" date="1360065600">- Resolves: #907926 - link=on and ipmi=on no longer work for setaccess</changelog>

</package>

<package pkgid="5d1a5d079fa22e2feac5b90f0735f741654a929a49edb831ab00ea552ab71b1b" name="firefox" arch="src">
    <version epoch="0" ver="17.0.5" rel="1.el6.centos"/>

<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 10.0.8-2" date="1349956800">- Fixed rhbz#865284 - add the storage.nfs_filesystem
  config key to property list
- disable OOP for wrapped plugins (nspluginwrapper)</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-0.1.beta1" date="1350475200">- Update to 17 Beta 1</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-0.2.b4" date="1351771200">- Update to 17 Beta 4</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0-1" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.1-2" date="1354276800">- Update to 17.0.1 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-3" date="1357819200">- Update to 17.0.2 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-4" date="1358251200">- Added NM preferences</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.5-1.el6.centos" date="1364904000">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="afb69a29a69f46fbc4d05e0965968618e6a9290211f70ac6c51cfbbdec566d02" name="net-snmp" arch="src">
    <version epoch="1" ver="5.5" rel="44.el6_4.2"/>

<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-37" date="1315828800">- recompiled with relro in perl and python modules (#725657)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-38" date="1321272000">- fixed snmpd crashing with many AgentX subagent (#749227)
- fixed SNMPv2-MIB::sysObjectID value when "sysObjectID" config file
  option with long OID was used (#786931)
- fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
- fixed parsing of "proxy" snmpd.conf option not to enable
  verbose logging by default (#746903)
- added new "realStorageUnits" config file option to support
  disks &gt; 16 TB in hrStorageTable (#741789)
- added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
  (#746903)
- fixed snmpd sigsegv when embedded perl script registers one handler
  twice (#748907)
- fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
  SNMP-SET request on 64-bit platforms (#754275)
- fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
  SELinux context (#754971)
- fixed memory leak when agentx subagent disconnects in the middle
  of request processing (#736580)
- fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
- removed 'error finding row index in _ifXTable_container_row_restore'
  error message (#788954)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-39" date="1334059200">- fixed proxying of out-of-tree GETNEXT requests (#799291)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-40" date="1336564800">- fixed CVE-2012-2141 (#820100)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-41" date="1337342400">- moved /var/lib/net-snmp fro net-snmp to net-snmp-libs package
  (#822480)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-42" date="1340798400">- removed fixed limit of 50 'exec' entries in snmpd.conf (#829271)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-43" date="1347278400">- fixed value of UCD-SNMP-MIB::extCommand to contain full command
  line (#842279)
- fixed rpath to perl.so (#848319)
- added support for port numbers in 'clientaddr' configuration
  option (#833013)
- fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
  is used (#824402)
- fixed engineID of outgoing traps if 'trapsess -e &lt;engineID&gt;' is used in
  snmpd.conf (#800671)
- updated documentation of '-c' option of snmptrapd (#784502)
- fixed endless loop when SIGTEM arrives in middle of internal query
  processing (#851637)
- fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
- removed various error log messages related to counte64 expansions
  (#846906)
- removed various error log messages when IPv6 is disabled (#845157)
- added support of cvfs filesystem in hrStorageTable (#846532)
- fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
  which could result in some entries missing in the table (#846436)
- added support of simfs filesystem in hrStorageTable (#861152)
- fixed responding to requests on a multihost machine (#825889)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44" date="1349870400">- rebuild with fixed libnetsnmpmibs linking broken by perl-rpath patch</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44.1" date="1366113600">- fixed snmpd crashing with 'exec' command with no arguments in snmpd.conf
  (#919259)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44.2" date="1370433600">- fixed crash when parsing invalid SNMP packets (#953926)</changelog>

</package>

<package pkgid="4781ba95d701756a74ba8fe07f1562b699ff0accef322ddc366a0ab38783b927" name="infinipath-psm" arch="src">
    <version epoch="0" ver="3.0.1" rel="115.1015_open.1.1.el6_4"/>

<changelog author="Mitko Haralanov &lt;mitko@qlogic.com&gt; - 1.13-1" date="1273579200">- Initial build.</changelog>
<changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; - 1.13-2" date="1275566400">- Use macros for lib and include directories, and include dist tag in
  release field.
- Corrected License field.
- Corrected Requires lines for libuuid.
- Add Exclusive-arch x86_64
  Related: rhbz570274</changelog>
<changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt;" date="1288958400">- Include the -execstack patch to get libinfinipath.so correctly
  labeled as not executing the stack.
  Resolves: rhbz612936</changelog>
<changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; - 2.9-926.1005_open.1" date="1311595200">- New upstream version.
  Resolves: rhbz635915</changelog>
<changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; -  2.9-926.1005_open.2" date="1328529600">- Add the udev rules file to close
  Resolves: rhbz747406</changelog>
<changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt; - 3.0.1-115.1015_open.1" date="1348574400">- New upstream releas
  Resolves: rhbz818789</changelog>
<changelog author="Jay Fenlason &lt;fenlason@redhat.com&gt;" date="1359028800">- include a patch from upstream to fix undefined references
  Resolves: rhbz907361</changelog>

</package>

<package pkgid="120d83c2811ce5d951e2ebf84709a232f2d072007e04eea50c45b8081165afd2" name="boost" arch="src">
    <version epoch="0" ver="1.41.0" rel="17.el6_4"/>

<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-8" date="1268740800">- Import 1.41.1 with fixes from Fedora 13 to RHEL 6
- Turn off OpenMPI support on s390*, which isn't available in RHEL 6
- Resolves: #571607</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-9" date="1268913600">- Use a .gz archive instead of bz2, because that's what's hosted now.
  Fill in the full URL.
- Resolves: #571607</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-10" date="1274443200">- Turn on OpenMPI support on non-s390 arches.  It was accidentally
  turned off everywhere.
- Move cmake files to libdir to avoid multilib conflicts.
- Also install Boost.cmake, which is included by BoostConfig.cmake
- Change soname selection to work on RHELs.
- Resolves: #586204
- Resolves: #592516
- Resolves: #594146</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-11" date="1274788800">- ... and revert the soname change, because that's not the smartest
  thing to do mid-release.
- Resolves: #594146</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-12" date="1311076800">- Add an upstream patch that fixes computation of CRC in zlib streams.
- Resolves: #707624</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-13" date="1360670400">- In Boost.Pool, be careful not to overflow allocated chunk size
  (boost-1.41.0-pool.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-14" date="1362657600">- Build with -fno-strict-aliasing</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-15" date="1362657601">- Add in explicit dependences between some boost subpackages</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-16" date="1363176000">- Fix a GCC warning for looser throw specifier in
  boost::exception_ptr::~exception_ptr.
  (boost-1.41.0-exception_ptr.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 1.41.0-17" date="1363262400">- Add in explicit dependence between boost-*mpich2* and
  boost-serialization.</changelog>

</package>

<package pkgid="17e92fbaf55ef5fbaccc7e28761edaaa1d18ede8e330fb20a40a27d27605003c" name="bash" arch="src">
    <version epoch="0" ver="4.1.2" rel="15.el6_4"/>

<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 4.1.2-6" date="1296043200">- Few man pages clarifications
  Resolves: #619704</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 4.1.2-7" date="1296129600">- Compile with -fwrapv option to satisfy rpmdiff.
  Resolves: #619704</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 4.1.2-8" date="1296129601">- Don't include backup file in bash-doc
  Resolves: #619704</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 4.1.2-9" date="1334836800">- Don't call malloc in signal handler
  Resolves: #800473</changelog>
<changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 4.1.2-10" date="1345550400">- Don't filter out environmental variables with
  a dot in the name
  Resolves: #819995</changelog>
<changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 4.1.2-11" date="1345636800">- Revert revision 4.1.2-10 - already fixed upstream
  Resolves: #819995</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 4.1.2-12" date="1346155200">- Update info about trap in man page
  Resolves: #799958
- Enable system-wide bash_logout
  Resolves: #677439
- instead of setting the signal handler to SIG_IGN while installing
  the new trap handler, block the signal and unblock it after the new handler
  is installed
  Resolves: #695656</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 4.1.2-13" date="1346241600">- Don't include backup files in doc
  Resolves: #799958</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 4.1.2-14" date="1346241601">- Tweak a logout patch so it will not create backup file
  Resolves: #677439</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 4.1.2-15" date="1373371200">- Fixed a bug that caused trap handlers to be executed recursively,
  corrupting internal data structures.
  Resolves: #982610</changelog>

</package>

<package pkgid="12493f2e35943c87e8ca20d81e03311d7863b41b055dd488aeaecd5857d7240b" name="haproxy" arch="src">
    <version epoch="0" ver="1.4.22" rel="4.el6_4"/>

<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 1.4.22-1" date="1348142400">- Initial build.
  Resolves: rhbz#846067</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 1.4.22-2" date="1348228800">- Bump release number.
  Resolves: rhbz#846067</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 1.4.22-3" date="1349179200">- Use static uid/gid.
  Resolves: rhbz#846067</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 1.4.22-4" date="1364990400">- Rewrite rules flaw can lead to arbitrary code execution (CVE-2013-1912)
  Resolves rhbz#947700</changelog>

</package>

<package pkgid="a07f1186be2e62d1c9aa34b2d06ba250822479328fcbfa265b8365aaacf09dbc" name="kernel" arch="src">
    <version epoch="0" ver="2.6.32" rel="358.14.1.el6"/>

<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.6.1.el6]" date="1364558400">- [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
- [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
- [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
- [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
- [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
- [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
- [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
- [net] sunrpc: Get rid of the redundant xprt-&gt;shutdown bit field (J. Bruce Fields) [915579 893584]
- [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
- [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
- [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
- [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
- [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
- [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
- [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
- [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
- [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.7.1.el6]" date="1365508800">- [infiniband] ipoib: Add missing locking when CM object is deleted (Doug Ledford) [928817 913645]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.8.1.el6]" date="1367668800">- [fs] raw: don't call set_blocksize when not changing the blocksize (Jeff Moyer) [951406 909482]
- [x86] Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [952570 876275]
- [netdrv] ixgbe: Only set gso_type to SKB_GSO_TCPV4 as RSC does not support IPv6 (Michael S. Tsirkin) [927292 908196]
- [netdrv] bnx2x: set gso_type (Michael S. Tsirkin) [927292 908196]
- [netdrv] qlcnic: set gso_type (Michael S. Tsirkin) [927292 908196]
- [netdrv] ixgbe: fix gso type (Michael S. Tsirkin) [927292 908196]
- [fs] gfs2: Allocate reservation structure before rename and link (Robert S Peterson) [924847 922999]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.9.1.el6]" date="1367928000">- [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
- [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
- [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
- [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
- [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
- [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
- [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
- [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
- [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
- [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
- [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
- [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
- [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
- [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
- [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
- [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
- [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
- [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
- [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
- [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
- [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
- [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
- [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
- [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
- [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
- [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
- [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
- [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
- [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
- [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
- [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.10.1.el6]" date="1368446400">- [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
- [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
- [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
- [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
- [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
- [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
- [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
- [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
- [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
- [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
- [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
- [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
- [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
- [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
- [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
- [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
- [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
- [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
- [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
- [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.11.1.el6]" date="1368619200">- [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.12.1.el6]" date="1370952000">- [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
- [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
- [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
- [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
- [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
- [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
- [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
- [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
- [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
- [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.13.1.el6]" date="1371211200">- [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
- [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
- [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
- [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
- [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
- [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
- [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
- [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [963564 886420]
- [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [963564 886420]
- [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [963564 886420]
- [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
- [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
- [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
- [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
- [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
- [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
- [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
- [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
- [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
- [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
- [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
- [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
- [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
- [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
- [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
- [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
- [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
- [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
- [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
- [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
- [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.14.1.el6]" date="1371470400">- [x86] apic: Add probe() for apic_flat (Prarit Bhargava) [975086 953342]</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [2.6.32-358.14.1.el6.centos]" date="1373976000">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="a0fecc043ef30505ddff13366f7f29d66fb917c05cd300a1ec1553ea2b5dbc43" name="upstart" arch="src">
    <version epoch="0" ver="0.6.5" rel="12.el6_4.1"/>

<changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 0.6.5-5" date="1273233600">- re-add SIGTERM handler so restart on shutdown works, avoiding dirty inodes (#588929)</changelog>
<changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 0.6.5-6" date="1277899200">- shutdown exits with nonzero exitcode when sysvinit shutdown fails (#608569)</changelog>
<changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 0.6.5-6.1" date="1277899201">- print error message and remove /etc/nologin when sysvinit shutdown fails</changelog>
<changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 0.6.5-7" date="1285070400">- don't rewind utmp file pointer, remember ut_id (#633216)</changelog>
<changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 0.6.5-8" date="1292241600">- send close fd command to shell first (#618995)
- avoid assertion for telinit u on ppc64 (#648431)</changelog>
<changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 0.6.5-9" date="1297684800">- set PIE and RELRO flags (#676002)</changelog>
<changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 0.6.5-10" date="1297771200">- fix C compiler flags</changelog>
<changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; 0.6.5-11" date="1328184000">- set BUGREPORT value to launchpad (#771736)
- add support for override files (#663594)
- add usage stanza (#735427)</changelog>
<changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; 0.6.5-12" date="1331899200">- mount proc and sys (#798551)</changelog>
<changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 0.6.5-12.1" date="1369656000">- reset console to defaults for console owners (#746801)</changelog>

</package>

<package pkgid="48873a743152c86955e4d1a35e310d3a8382f7a55fcb889d73f0c7c51e3ee74d" name="kexec-tools" arch="src">
    <version epoch="0" ver="2.0.0" rel="258.el6_4.2"/>

<changelog author="Dave Young &lt;dyoung@redhat.com&gt; - 2.0.0-251" date="1352116800">- Add ip prefix to crash directory name for mount_root_run_init, resolve bug 871663</changelog>
<changelog author="Dave Young &lt;dyoung@redhat.com&gt; - 2.0.0-252" date="1353067200">- remove hardcode for including ata_generic driver, resolve bug 820474
- mkdumprd: Fix /dev/mapper/* links not being created by default, resolve bug 874832
- vmcore-dmesg: Determine correct machine pointer size, resolve bug 871292</changelog>
<changelog author="Dave Young &lt;dyoung@redhat.com&gt; - 2.0.0-253" date="1353412800">- pull in two patches for xen domU detection, resolve bug 872086</changelog>
<changelog author="Dave Young &lt;dyoung@redhat.com&gt; - 2.0.0-254" date="1354104000">- blacklist IB module mlx4_core.ko, resolve bug 876891
- create bonding device dynamiclly, resolve bug 859824</changelog>
<changelog author="Dave Young &lt;dyoung@redhat.com&gt; - 2.0.0-255" date="1354795200">- make the SCSI dump target work with Linux on System z, resolve bug 870957
- extract Linux on System z device init into separate functions, resolve bug 870957
- remove hwclock calls for Linux on System z, resolve bug 821376</changelog>
<changelog author="Dave Young &lt;dyoung@redhat.com&gt; - 2.0.0-256" date="1355227200">- mkdumprd: Set DM_DISABLE_UDEV=1 to tell libdevmapper that there is no udev, resolve bug 880040</changelog>
<changelog author="Dave Young &lt;dyoung@redhat.com&gt; - 2.0.0-257" date="1355918400">- Document supported, unsupported, unknown/tech-preview dump targets, resolve bug 878200</changelog>
<changelog author="Dave Young &lt;dyoung@redhat.com&gt; - 2.0.0-258" date="1358510400">- mkdumprd: Fix iface substitution in cfg files, resolve bug 892703</changelog>
<changelog author="Baoquan He &lt;bhe@redhat.com&gt; -2.0.0-258.1" date="1364212800">- kexec-tools: Map network devices based on MAC address
- kexec-tools: Allow mkdumprd modules blacklist to be overwritten by extra_modules</changelog>
<changelog author="Baoquan He &lt;bhe@redhat.com&gt; -2.0.0-258.2" date="1368705600">- check_encrypted fix, resolve bug 963563</changelog>

</package>

<package pkgid="ae3a3629f3dc1f8c1bcf37d36ff22ad6d57672dd89da68624955bbacc1883efd" name="net-snmp" arch="src">
    <version epoch="1" ver="5.5" rel="44.el6_4.1"/>

<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-36" date="1315224000">- fixed crash in AgentX when closing subagent session (#729738)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-37" date="1315828800">- recompiled with relro in perl and python modules (#725657)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-38" date="1321272000">- fixed snmpd crashing with many AgentX subagent (#749227)
- fixed SNMPv2-MIB::sysObjectID value when "sysObjectID" config file
  option with long OID was used (#786931)
- fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
- fixed parsing of "proxy" snmpd.conf option not to enable
  verbose logging by default (#746903)
- added new "realStorageUnits" config file option to support
  disks &gt; 16 TB in hrStorageTable (#741789)
- added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
  (#746903)
- fixed snmpd sigsegv when embedded perl script registers one handler
  twice (#748907)
- fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
  SNMP-SET request on 64-bit platforms (#754275)
- fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
  SELinux context (#754971)
- fixed memory leak when agentx subagent disconnects in the middle
  of request processing (#736580)
- fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
- removed 'error finding row index in _ifXTable_container_row_restore'
  error message (#788954)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-39" date="1334059200">- fixed proxying of out-of-tree GETNEXT requests (#799291)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-40" date="1336564800">- fixed CVE-2012-2141 (#820100)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-41" date="1337342400">- moved /var/lib/net-snmp fro net-snmp to net-snmp-libs package
  (#822480)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-42" date="1340798400">- removed fixed limit of 50 'exec' entries in snmpd.conf (#829271)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-43" date="1347278400">- fixed value of UCD-SNMP-MIB::extCommand to contain full command
  line (#842279)
- fixed rpath to perl.so (#848319)
- added support for port numbers in 'clientaddr' configuration
  option (#833013)
- fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
  is used (#824402)
- fixed engineID of outgoing traps if 'trapsess -e &lt;engineID&gt;' is used in
  snmpd.conf (#800671)
- updated documentation of '-c' option of snmptrapd (#784502)
- fixed endless loop when SIGTEM arrives in middle of internal query
  processing (#851637)
- fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
- removed various error log messages related to counte64 expansions
  (#846906)
- removed various error log messages when IPv6 is disabled (#845157)
- added support of cvfs filesystem in hrStorageTable (#846532)
- fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
  which could result in some entries missing in the table (#846436)
- added support of simfs filesystem in hrStorageTable (#861152)
- fixed responding to requests on a multihost machine (#825889)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44" date="1349870400">- rebuild with fixed libnetsnmpmibs linking broken by perl-rpath patch</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44.1" date="1366113600">- fixed snmpd crashing with 'exec' command with no arguments in snmpd.conf
  (#919259)</changelog>

</package>

<package pkgid="0613587760b68d4ce3c0becd1cbe8281ddab224fdcbabff2b4d026ae01a14985" name="bind" arch="src">
    <version epoch="32" ver="9.8.2" rel="0.17.rc1.el6_4.5"/>

<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.13.rc1" date="1347537600">- fix  CVE-2012-4244</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.14.rc1" date="1347969600">- allow forward{,ers} statement in static-stub zones</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.15.rc1" date="1349870400">- fix CVE-2012-5166</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.16.rc1" date="1350475200">- initscript: silence spurious "named.pid: No such file" error</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1" date="1354708800">- fix CVE-2012-5688</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.1" date="1359633600">- add response rate limit patch (#873624)</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.2" date="1359720000">- fix CVE-2012-5689</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.3" date="1360324800">- remove one bogus file from /usr/share/doc, introduced by RRL patch</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.4" date="1364385600">- fix  CVE-2013-2266
- ship dns/rrl.h in -devel subpkg</changelog>
<changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.8.2-0.17.rc1.5" date="1375012800">- fix CVE-2013-4854</changelog>

</package>

<package pkgid="8a85846fe5ecaabc586351c87b200474017d2823c85306bb06f634e3ae8673d7" name="libvirt" arch="src">
    <version epoch="0" ver="0.10.2" rel="18.el6_4.8"/>

<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-17" date="1358942400">- storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
- qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
- qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18" date="1359374400">- rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
- spec: Disable libssh2 support (rhbz#513363)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.1" date="1363348800">- xen: Resolve resource leak with 'cpuset' (rhbz#908836)
- schema: Make the cpuset type reusable across schema files (rhbz#908836)
- schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
- conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
- capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
- capabilities: Add additional data to the NUMA topology info (rhbz#908836)
- test: Add support for thread and core information for the test driver (rhbz#908836)
- xen: Initialize variable before using (rhbz#908836)
- xen: Actually fix the uninitialized variable (rhbz#908836)
- spice: Properly reserve tlsPort when no port specified (rhbz#913624)
- qemu_agent: Ignore expected EOFs (rhbz#915344)
- qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
- qemu: Destroy domain on decompression binary error (rhbz#915347)
- qemu: Run lzop with '--ignore-warn' (rhbz#915347)
- Don't ignore return value of qemuProcessKill (rhbz#915353)
- Fix race condition when destroying guests (rhbz#915353)
- Log warning if storage magic matches, but version does not (rhbz#915354)
- Add lots of debugging to storage file probing code (rhbz#915354)
- Fix probing of QED file format (rhbz#915354)
- util: Add virendian.h macros (rhbz#915354)
- util: Use new virendian.h macros (rhbz#915354)
- storage: Rearrange functions (rhbz#915354)
- storage: Prepare for refactoring (rhbz#915354)
- storage: Refactor metadata lookup (rhbz#915354)
- storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
- storage: Test backing chain traversal (rhbz#915354)
- qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
- python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
- qemu: Add checking in helpers for sgio setting (rhbz#919504)
- qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
- qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
- qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
- qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
- qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
- qemu: Fix the memory leak (rhbz#919504)
- Fix crash changing CDROM media (rhbz#919504)
- qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
- qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
- Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
- util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
- qemu: Fix QMP detection of QXL graphics (rhbz#915352)
- qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
- conf: Add optional attribte primary to video &lt;model&gt; element (rhbz#915352)
- qemu: Use newer -device video device in qemu commandline (rhbz#915352)
- tests: Add one -device video device testcase (rhbz#915352)
- qemu: Detect VGA_QXL capability correctly (rhbz#915352)
- qemu: Support ram bar size for qxl devices (rhbz#915352)
- conf: Don't leak 'primary' video property on error (rhbz#915352)
- storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
- storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
- storage: Cleanup logical volume creation code (rhbz#918754)
- docs: Clarify semantics of sparse storage volumes (rhbz#918754)
- storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
- storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
- interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
- locking: Resolve resource leaks on non error path (rhbz#922095)
- selinux: Resolve resource leak using the default disk label (rhbz#922095)
- storage: Resolve resource leaks with cmd processing (rhbz#922095)
- domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
- qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
- storage: Need to add virCommandFree() (rhbz#922095)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.2" date="1363608000">- qemu: Fix startupPolicy regression (rhbz#915349)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.3" date="1364558400">- util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
- security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
- security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
- libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
- security_manager.c: Append seclabel iff generated (rhbz#928879)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.4" date="1365854400">- rpc: Fix client crash when server drops connection (rhbz#950601)
- storage: Fix volume cloning for logical volume. (rhbz#950604)
- qemu: Allow migration over IPv6 (rhbz#950597)
- qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
- remote: Don't call NULL closeFreeCallback (rhbz#950599)
- libvirt: Increase connection reference count for callbacks (rhbz#950599)
- virsh: Unregister the connection close notifier upon termination (rhbz#950599)
- virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
- virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
- rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
- tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
- Avoid use of free'd memory in auto destroy callback (rhbz#951073)
- Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.5" date="1367582400">- daemon: Fix leak after listing volumes (CVE-2013-1962)
- Don't try to add non-existant devices to ACL (rhbz#958837)
- Avoid spamming logs with cgroups warnings (rhbz#958837)
- audit: Properly encode device path in cgroup audit (rhbz#958839)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.6" date="1369915200">- qemu: Set correct migrate host in client_migrate_info (rhbz#966587)
- qemu: Fix crash in migration of graphics-less guests. (rhbz#966587)
- Fix F_DUPFD_CLOEXEC operation args (rhbz#966707)
- cgroup: Be robust against cgroup movement races (rhbz#966710)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.7" date="1370606400">- virsocket: Introduce virSocketAddrIsWildcard (rhbz#966587)
- qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#966587)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.8" date="1370865600">- virSocketAddrIsWildcard: Use IN6_IS_ADDR_UNSPECIFIED correctly (rhbz#966587)</changelog>

</package>

<package pkgid="bd6bb197140f08304d92b20dd80cb47517abda432f57c7f6db84de26ae37359d" name="autofs" arch="src">
    <version epoch="1" ver="5.0.5" rel="74.el6_4"/>

<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-66" date="1353412800">- bz866338 - update the man pages to describe 'nobind' option current behaviour
  - fix nobind man page description.
- Resolves: rhbz#866338</changelog>
<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-67" date="1354017600">- bz880242 - autofs service status fails on rhel 6.4 with version
  autofs-5.0.5-64.el6.x86_64
  - fix pid file substitution in init script.
- Resolves: rhbz#880242</changelog>
<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-68" date="1354017601">- bz880242 - autofs service status fails on rhel 6.4 with version
  autofs-5.0.5-64.el6.x86_64
  - remove pid file substution patch.
  - add backported upstream patch to add piddir to configure.
- Related: rhbz#880242</changelog>
<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-69" date="1354017602">- bz880242 - autofs service status fails on rhel 6.4 with version
  autofs-5.0.5-64.el6.x86_64
  - actually add the backported patch.
- Related: rhbz#880242</changelog>
<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-70" date="1354017603">- bz880242 - autofs service status fails on rhel 6.4 with version
  autofs-5.0.5-64.el6.x86_64
  - update configure of back ported patch.
- Related: rhbz#880242</changelog>
<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-71" date="1357128000">- bz836422 - autofs /net maps do not refresh list of shares exported on
  the NFS server
  - fix submount offset delete.
- Related: rhbz#836422</changelog>
<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-72" date="1357732800">- bz889055 - RHEL6.4 autofs initscript not LSB compliant
  - fix init script status return.
- Resolves: rhbz#889055</changelog>
<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-73" date="1357732801">- bz892846 - segfault in get_query_dn()
  - fix segfault in get_query_dn().
- Resolves: rhbz#892846</changelog>
<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-74.el6_4" date="1363262400">- bz921147 - autofs mount failures when mounting multiple nfs mounts at
  the same time
  - use numeric protocol ids instead of protoent structs.
- Resolves: rhbz#921147</changelog>
<changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-74.el6_4" date="1363262401">- bz921147 - autofs mount failures when mounting multiple nfs mounts
  at the same time
  - correct patch name in spec file.
- Related: rhbz#921147</changelog>

</package>

<package pkgid="f3d709b60a5606640e77eccde3fd567781294854c054d21d5f0c731238265b9d" name="libtevent" arch="src">
    <version epoch="0" ver="0.9.18" rel="1.el6_4"/>

<changelog author="Simo Sorce &lt;ssorce@redhat.com&gt; - 0.9.8-5" date="1253707200">- Add patch to fix a segfault case</changelog>
<changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.9.8-7" date="1267012800">- Drop ABI compatibility patch (no longer needed)</changelog>
<changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.9.8-7.1" date="1267012801">- Remove all references to ABI compatibility patch</changelog>
<changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 0.9.8-8" date="1274443200">- Run make check during RPM build
- Fix abi_check patch to guarantee script executability</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.16-1" date="1280750400">- Rebase to 0.9.16 to provide the version Samba4 needs
- Resolves: rhbz#766336
- Drop ABI compatibility patch (no longer needed)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.16-2" date="1280750401">- Add BuildRequires on libxslt and docbook-style-xsl to enable
  building manual pages

- Related: rhbz#766336</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.16-3" date="1280836800">- Update doxygen file before building documentation

- Related: rhbz#766336</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.16-4" date="1280836801">- Fix EXCLUDE_PATTERNS in doxyfile

- Related: rhbz#766336</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.17-1" date="1282305600">- Rebase to 0.9.17 to provide the version Samba4 needs
- Drop EXCLUDE_PATTERNS workaround in specfile
- Resolves: rhbz#766336</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.18-1" date="1373284800">- Resolves: rhbz#980956 - Rebase libtevent to version 0.9.18</changelog>

</package>

<package pkgid="c1b6f64a609e1e6249f340171e946d3423efdaa8ed890b45bd5dcef79479d1f5" name="java-1.7.0-openjdk" arch="src">
    <version epoch="1" ver="1.7.0.25" rel="2.3.10.3.el6_4"/>

<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.11-2.4.0.pre5.el6" date="1362398400">- Update to latest snapshot of icedtea7 2.4 forest
- Resolves: rhbz#917183</changelog>
<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.8.0.el6" date="1362484800">- Revert to rhel 6.3 version of spec file
- Revert to icedtea7 2.3.8 forest
- Resolves: rhbz#917183</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.8.1.el6" date="1364472000">- Added and applied patch 116 - patch 116 rh905128-non_block_ciphers.patch
- Added and applied patch 117 - patch 117 java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
 - to enable handleStartupErrors = ignoreMultipleInitialisation in icedtea 2.3
- Restorered removed nss support
- Fixed java-1.7.0-openjdk-nss-config-{1,2} patches to be valid for icedtea 2.3.x
- enable_nss switch to 0 - disabled
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.8.2.el6" date="1365595200">- Added latest Fedora spec changes
- Bumped release
- Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
- zlib in BuildReq restricted for  1.2.3-7 or higher
 - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
- Removed a -icedtea tag from the version
  - package have less and less connections to icedtea7
- Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
- Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
  - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
- Removed all fonconfig files. Fonts are now handled differently in JDK 
  and those files are redundant. This is going to be usptreamed.
  - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
- logging.properties marked as config(noreplace)
  - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
- classes.jsa marked as ghost on full path
  - see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
- nss.cfg was marked as config(noreplace)
- Add symlink to default soundfont (see 541466)
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.9-2.3.9.0.el6" date="1365681600">- updated to IcedTea  2.3.9 with latest security patches
- buildver sync to b19
- rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com - 1.7.0.19-2.3.9.1.el6" date="1366113600">- updated to updated IcedTea  2.3.9 with fix to one of security fixes
  -  fixed font glyph offset
- Resolves: rhbz#950380</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.19-2.3.10.0.el6" date="1371038400">- Updated to latest IcedTea7-forest 2.3.10
- patch 107 renamed to 500 for cosmetic purposes
- improved handling of patch111 - nss-config-2.patch
- removed patch 117, java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
  duplicated with patch 108 (java-1.7.0-openjdk-nss-icedtea-e9c857dcb964)
- Added client/server directories so they can be owned
- Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
- Resolves: rhbz#973119</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.1.el6" date="1371124800">- build bumped to 25
- Resolves: rhbz#973119</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.2.el6" date="1371124801">- added patch1000 MBeanFix.patch to fix regressions caused by security patches
- Resolves: rhbz#973119</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.25-2.3.10.3.el6" date="1371556800">- removed upstreamed patch1000 MBeanFix.patch
- updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
- Resolves: rhbz#973119</changelog>

</package>

<package pkgid="5aa2cc8321571088c2dc1b1741aabbe0c4a302e4c32297f9cebfd519bc1a04c8" name="mysql" arch="src">
    <version epoch="0" ver="5.1.67" rel="1.el6_3"/>

<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.47-2" date="1275912000">- Add back "partition" storage engine
Resolves: #598585
- Fix broken "federated" storage engine plugin
Resolves: #587170
- Read all certificates in SSL certificate files, to support chained certs
Resolves: #598656</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.47-3" date="1277726400">- Add -p "$mypidfile" to initscript's status call to improve corner cases.
  (Note: can't be fixed in Fedora until 595597 is fixed there.)
Resolves: #596008</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.47-4" date="1279195200">- Add backported patch for CVE-2010-2008 (upstream bug 53804)
Resolves: #614215
- Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
  by just pulling in perl.</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.52-1" date="1292846400">- Update to MySQL 5.1.52, for various fixes described at
  http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  including numerous small security issues
Resolves: #652554
- Sync with current Fedora package; this includes:
- Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
  to ensure they are available when any subset of mysql RPMs are installed,
  per revised packaging guidelines
- Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.61-1" date="1328270400">- Update to 5.1.61, for assorted upstream bugfixes including
  numerous CVEs announced in January 2012
Resolves: #787192</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.61-3" date="1330084800">- Enable innodb plugin, but only on x86 and x86_64 architectures
Resolves: #740224</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.61-4" date="1334923200">- Add backported patch for CVE-2012-2102
Resolves: #812435</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.66-1" date="1351857600">- Update to 5.1.66, for assorted upstream bugfixes including
  CVEs announced in July and October 2012
Resolves: #871813</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.66-2" date="1354622400">- Add backported patch for CVE-2012-5611
Resolves: CVE-2012-5611</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.67-1" date="1358856000">- Update to 5.1.67, for assorted upstream bugfixes including
  CVEs announced in January 2013
Resolves: #901380</changelog>

</package>

<package pkgid="374a288226397feebde72936ac99f2ce0be624a8888bb865c55ef01151a9ffda" name="libxml2" arch="src">
    <version epoch="0" ver="2.7.6" rel="12.el6_4.1"/>

<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-4" date="1318334400">- Fixes another XPath problem CVE-2011-2834
- Resolves: rhbz#732335</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-5.el6" date="1325851200">- Make sure the parser returns when getting a Stop order CVE-2011-3905
- Fix an allocation error when copying entities CVE-2011-3919
- Resolves: rhbz#771910</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-6.el6" date="1328875200">- adds randomization to hash and dict structures CVE-2012-0841
- Resolves: rhbz#788846</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-7.el6" date="1329134400">- fix previous build to force compilation of randomization code
- Resolves: rhbz#788846</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-8.el6" date="1329307200">- remove chunk in patch related to configure.in as it breaks rebuild
- Resolves: rhbz#788846</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-9.el6" date="1345550400">- Fix a failure to report xmlreader parsing failures
- Fix parser local buffers size problems (rhbz#843742)
- Fix entities local buffers size problems (rhbz#843742)
- Fix an error in previous commit (rhbz#843742)
- Do not fetch external parsed entities
- Impose a reasonable limit on attribute size (rhbz#843742)
- Impose a reasonable limit on comment size (rhbz#843742)
- Impose a reasonable limit on PI size (rhbz#843742)
- Cleanups and new limit APIs for dictionaries (rhbz#843742)
- Introduce some default parser limits (rhbz#843742)
- Implement some default limits in the XPath module
- Fixup limits parser (rhbz#843742)
- Enforce XML_PARSER_EOF state handling through the parser
- Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
- More avoid quadratic behaviour (rhbz#843742)
- Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
- More fixups on the push parser behaviour (rhbz#843742)
- Fix a segfault on XSD validation on pattern error
- Fix an unimplemented part in RNG value validation</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-10.el6" date="1345636800">- Fix an off by one pointer access (CVE-2011-3102)</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-11.el6" date="1346846400">- Change the XPath code to percolate allocation error (CVE-2011-1944)</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-12.el6" date="1354190400">- fix out of range heap access (CVE-2012-5134)</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-12.el6_4.1" date="1361275200">-detect and stop excessive entities expansion upon replacement (rhbz#912574)</changelog>

</package>

<package pkgid="ce551e9cbc5889c21eb223d92bd9421a4b237066b83105cbcd6be81f4af97795" name="squid" arch="src">
    <version epoch="7" ver="3.1.10" rel="18.el6_4"/>

<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-9" date="1347019200">- Resolves: #847056 - Squid incorrectly marks elements as stale</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-10" date="1347537600">- Resolves #798090 - Client timeout uses server-side "read_timeout"
- Resolves #833086 - Private md5 hash function does not comply FIPS
- Resolves #782732 - Squid crashes by segfault when it reboots
- Resolves #797571 - Squid userid is not added to wbpriv group
- Disable strict-error-checking on account of squid-fips.patch</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-11" date="1349352000">- Resolves #861062 - Squid delays on FQDNs that don't contains AAAA record</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-12" date="1349352001">- Resolves #861062 - add configure directive --enable-internal-dns</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-13" date="1355918400">- Resolves: #888198 - CVE-2012-5643: DoS (excessive resource consumption)</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-14" date="1355918401">- Resolves: #888198 - CVE-2012-5643: patch</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-15" date="1358251200">- Reverts: #861062 - Squid delays on FQDNs that don't contains AAAA record</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-16" date="1358251201">- Resolves: #888198 - CVE-2012-5643: improved upstream patch</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-17" date="1370952000">- Resolves: #959460 - Active mode FTP causes assertion failed</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 7:3.1.10-18" date="1371729600">- Resolves: #895526 - Squid sends "Proxy-Connection: keepalive" in http GET</changelog>

</package>

<package pkgid="525ef40db48273840a8218f0552438f5fc357573ceed3b9341b1b37db23e56ec" name="spice-gtk" arch="src">
    <version epoch="0" ver="0.14" rel="7.el6_4.1"/>

<changelog author="Marc-André Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.13.29-2" date="1346760000">- Rebase spice-gtk to latest upstream (with SPICE_DEPRECATED_FOR macro)
  Resolves: rhbz#842354</changelog>
<changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.13.29-3" date="1347278400">- Add patch fixing CVE-2012-3524
  Resolves: rhbz#854825</changelog>
<changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14-1" date="1348228800">- Rebase spice-gtk to 0.14
  Resolves: rhbz#842354</changelog>
<changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14-2" date="1348574400">- Readd G_GNUC_DEPRECATED_FOR patch as this issue is not fixed upstream yet
  Related: rhbz#842354</changelog>
<changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14-3" date="1349956800">- Add info message when USB dialog is empty
  Resolves: rhbz#804187
- Properly reset usb channels after non-seamless migration
  Resolves: rhbz#861332
- Fix read error handling for USB redirection
  Related: rhbz#842354
- Auto-discover already plugged-in USB devices
  Resolves: rhbz#820964
- Add support for disabling Ctrl+Alt+Del
  Resolves: rhbz#807771</changelog>
<changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14-4" date="1350302400">- Fix application of Patch2, it includes the git commit log which
  contained a diff hunk which %patch happily applied, which caused
  https://bugzilla.redhat.com/show_bug.cgi?id=804187#c9
  Related: rhbz#804187</changelog>
<changelog author="Marc-André Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.14-5" date="1350993600">- Apply color conversion when creating image
  Resolves: rhbz#843134
- Show correct ungrab key combination in spicy
  Resolves: rhbz#851090
- Fix sending 00 scancodes to guests
  Resolves: rhbz#868237
- Improve open_host() debugging message
  Resolves: rhbz#858232
- Empty host subject from qemu should only validate hostname
  Resolves: rhbz#858228
- Fix disabling mouse acceleration on X11
  Resolves: rhbz#867885
- use more explicit SSL error message
  Resolves: rhbz#846666</changelog>
<changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14-6" date="1356091200">- Don't ask for root/admin password when users want to redirect USB
  devices
  Resolves: rhbz#859392</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.14-7" date="1357819200">- Update agent monitor settings when closing a window
  Resolves: rhbz#881072</changelog>
<changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.14-7.1" date="1375099200">- Fix crash when pressing ctrl+shift+v in outlook
  Resolves: rhbz#988924</changelog>

</package>

<package pkgid="8caec5f5ebe62de1fc9bfeb2fa82c24d44b6b44647df93f93b20fad47051dad3" name="sssd" arch="src">
    <version epoch="0" ver="1.9.2" rel="82.7.el6_4"/>

<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-80" date="1358942400">- Resolves: rhbz#903078 - Out-of-bounds read flaws in
                          autofs and ssh services responders</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-81" date="1358942401">- Resolves: rhbz#903078 - TOCTOU race conditions by copying
                          and removing directory trees</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82" date="1358942402">- Resolves: rhbz#888614 - Failure in memberof can lead to failed
                          database update</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.1" date="1359547200">- Resolves: rhbz#907362 - Serious performance regression in sssd</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.2" date="1361534400">- Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                          Kerberos
- Fix the NVR</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.3" date="1362139200">- Fix pwd_expiration_warning=0
- Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                          Kerberos</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.4" date="1362484800">- Resolves: rhbz#911298 - sssd: simple access provider flaw prevents intended
                           ACL use when client to an AD provider</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.5" date="1363780800">- Resolves: #948263: Resolve local group members in LDAP groups</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.6" date="1366027200">- Resolves: #950874: Simple access control always denies uppercased users
                     in case insensitive domain</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.7" date="1366718400">- Resolves: #906398 - sssd_be crashes sometimes</changelog>

</package>

<package pkgid="d92c5b41aad5b942a4165a3a70c2a370a7e350b65d3fd7e9d74c12e1613571fa" name="xulrunner" arch="src">
    <version epoch="0" ver="17.0.3" rel="1.el6.centos"/>

<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 17.0-0.4.b4" date="1351771200">- Update to 17 Beta 4</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 17.0-0.5.b4" date="1352203200">- Added fix for rhbz#872752 - embeded crash</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 17.0-0.6.b5" date="1352376000">- Update to 17 Beta 5
- Updated fix for rhbz#872752 - embeded crash</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 17.0-1" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.1-3" date="1354276800">- Update to 17.0.1 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-1" date="1357819200">- Update to 17.0.2 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1357905600">- Added fix for rhbz#816234 - NFS fix</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-5" date="1358251200">- Fixed NetworkManager preferences
- Added fix for NM regression (mozbz#791626)</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.3-1.el6.centos" date="1361275200">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="36805de4bef31799da91e32e1b55e590a2b83af77d2878fdc0af1f34d49e0cee" name="jakarta-commons-httpclient" arch="src">
    <version epoch="1" ver="3.1" rel="0.7.el6_3"/>

<changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; - 1:3.0.1-1jpp.1" date="1174046400">- Merge with upstream and more rpmlint cleanup.</changelog>
<changelog author="Andrew Overholt &lt;overholt@redhat.com&gt; 1:3.0.1-1jpp.2" date="1189080000">- Add OSGi MANIFEST.MF information.</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@fedoraproject.org&gt; - 1:3.0.1-2jpp.2" date="1203422400">- Autorebuild for GCC 4.3</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 0:3.1-0jpp.1" date="1207310400">- Update to 3.1</changelog>
<changelog author="Tom &quot;spot&quot; Callaway &lt;tcallawa@redhat.com&gt; - 1:3.1-0.2" date="1215604800">- drop repotag
- fix license tag</changelog>
<changelog author="Andrew Overholt &lt;overholt@redhat.com&gt; 1:3.1-0.3" date="1216900800">- Update OSGi MANIFEST.MF</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1-0.4" date="1235563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1-0.5" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 1:3.1-0.6" date="1259582400">- Rebuilt for RHEL 6</changelog>
<changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1-0.7" date="1358769600">- Add missing connection hostname check against X.509 certificate name
- Resolves: CVE-2012-5783</changelog>

</package>

<package pkgid="4c9ee88076c6ce0c1baf841f4cf2cc44ba4e9492cbcb37f9f1e1b9755a03b982" name="crash-gcore-command" arch="src">
    <version epoch="0" ver="1.0" rel="4.el6_4"/>

<changelog author="HATAYAMA Daisuke &lt;d.hatayama@jp.fujitsu.com&gt; - 1.0-0" date="1302091200">- Initial crash-gcore-command package</changelog>
<changelog author="HATAYAMA Daisuke &lt;d.hatayama@jp.fujitsu.com&gt; - 1.0-1" date="1302696000">- Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
  on crash-devel package. Instead, use a new interface for them.
- Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
  and %{ix86} there.
- Add descriptions in BuildRequires and Requires about crash and crash-devel.</changelog>
<changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 1.0-2" date="1327492800">Compile with RPM_OPT_FLAGS and fix warnings generated from using it. 
  Resolves: rbhz#692799</changelog>
<changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 1.0-3" date="1328011200">Address Pkgwrangler/rpmlint issues.
  Resolves: rbhz#692799</changelog>
<changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 1.0-4" date="1338292800">Fixes for missing VDSO and vsyscall pages in core dump. 
  Resolves: rbhz#890232</changelog>

</package>

<package pkgid="3df0e53ac945d04bc6493dbceaa1347192d318c507e19a7d851cf0770c42946c" name="net-snmp" arch="src">
    <version epoch="1" ver="5.5" rel="44.el6_4.3"/>

<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-38" date="1321272000">- fixed snmpd crashing with many AgentX subagent (#749227)
- fixed SNMPv2-MIB::sysObjectID value when "sysObjectID" config file
  option with long OID was used (#786931)
- fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
- fixed parsing of "proxy" snmpd.conf option not to enable
  verbose logging by default (#746903)
- added new "realStorageUnits" config file option to support
  disks &gt; 16 TB in hrStorageTable (#741789)
- added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
  (#746903)
- fixed snmpd sigsegv when embedded perl script registers one handler
  twice (#748907)
- fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
  SNMP-SET request on 64-bit platforms (#754275)
- fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
  SELinux context (#754971)
- fixed memory leak when agentx subagent disconnects in the middle
  of request processing (#736580)
- fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
- removed 'error finding row index in _ifXTable_container_row_restore'
  error message (#788954)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-39" date="1334059200">- fixed proxying of out-of-tree GETNEXT requests (#799291)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-40" date="1336564800">- fixed CVE-2012-2141 (#820100)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-41" date="1337342400">- moved /var/lib/net-snmp fro net-snmp to net-snmp-libs package
  (#822480)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-42" date="1340798400">- removed fixed limit of 50 'exec' entries in snmpd.conf (#829271)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-43" date="1347278400">- fixed value of UCD-SNMP-MIB::extCommand to contain full command
  line (#842279)
- fixed rpath to perl.so (#848319)
- added support for port numbers in 'clientaddr' configuration
  option (#833013)
- fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
  is used (#824402)
- fixed engineID of outgoing traps if 'trapsess -e &lt;engineID&gt;' is used in
  snmpd.conf (#800671)
- updated documentation of '-c' option of snmptrapd (#784502)
- fixed endless loop when SIGTEM arrives in middle of internal query
  processing (#851637)
- fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
- removed various error log messages related to counte64 expansions
  (#846906)
- removed various error log messages when IPv6 is disabled (#845157)
- added support of cvfs filesystem in hrStorageTable (#846532)
- fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
  which could result in some entries missing in the table (#846436)
- added support of simfs filesystem in hrStorageTable (#861152)
- fixed responding to requests on a multihost machine (#825889)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44" date="1349870400">- rebuild with fixed libnetsnmpmibs linking broken by perl-rpath patch</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44.1" date="1366113600">- fixed snmpd crashing with 'exec' command with no arguments in snmpd.conf
  (#919259)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44.2" date="1370433600">- fixed crash when parsing invalid SNMP packets (#953926)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-44.3" date="1374235200">- fixed IF-MIB::ifSpeedHi on systems with non-standard interface
  speeds (#986193)</changelog>

</package>

<package pkgid="dad5529bb99ba4336b4fe96e8bfc0ac371fb6faf068bdfb11da95e2bbc2ac329" name="selinux-policy" arch="src">
    <version epoch="0" ver="3.7.19" rel="195.el6_4.5"/>

<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-192" date="1357732800">- Label /usr/lib/yaboot/addnote as bin_t
- Allow postfix_local to read/write /var/spool/postfix/active
- Allow postfix domains to list /tmp
- Allow wdmd to transition to kdump
Resolves:#887793
- Add labeling for /var/named/chroot/etc/localtime</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-193" date="1358251200">- Fix ssh_sysadm_login boolean for MLS
Resolves:#865759
- Allow rpm_script_t to dbus communicate with certmonger_t
- More fixes for qemu-ga to make "guest-fsfreeze-freeze" working</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-194" date="1358337600">- qdiskd needs to read usr_t/bin_t files
- Allow dpsam to connect/bind to spamd ports
- Allow munin services plugins to bind to generic node
Resolves:#865759</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195" date="1358856000">- Make matahari domains as unconfined
- Allow nscd to connect to nmbd
Resolves:#901565
- Allow setcap/getcap for syslogd</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4" date="1361188800">- Fix tuned policy to make it working with the lastet tuned package
Resolves:#912392</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.1" date="1361361600">- Additional fix for tuned
- Backport openshift changes
Resolves:#912392</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.2" date="1362484800">- Allow cgred to use notify
Resolves:#917966
- Allow mount to transition to gluster
Resolves:#917972</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.3" date="1362571200">- Backport openshfit fixes
Resolves:#917966</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.4" date="1366804800">- Allow dirsrv-admin server to be restarted from console 
Resolves:#955703
- Allow dac_override for openshift-cron</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.5" date="1368100800">- Allow dirsrv-admin server to be restarted from console
Resolves:#955703</changelog>

</package>

<package pkgid="9e163eeb01cbd47353daf36f9735c3418fe1b7568e153f1ddf1fc2bdc7ac5738" name="openldap" arch="src">
    <version epoch="0" ver="2.4.23" rel="32.el6_4.1"/>

<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-24" date="1335787200">- fix update: Default SSL certificate bundle is not found by openldap library (#742023)
- fix: memberof overlay on the frontend database causes server segfault (#730745)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-25" date="1335960000">- fix update: Default SSL certificate bundle is not found by openldap library (#742023)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-26" date="1336392000">- fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
- fix: memory leak: def_urlpre is not freed (#816168)
- fix update: Default SSL certificate bundle is not found by openldap library (#742023)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-27" date="1343649600">- fix: smbk5pwd module computes invalid LM hashes (#820278)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-28" date="1343736000">- CVE-2012-2668 (#825875)
  + cipher suite selection by name can be ignored
  + default cipher suite is always selected</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-29" date="1348574400">- fix: invalid order of TLS shutdown operations (#818572)
- fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
- fix: reading pin from file can make all TLS connections hang (#829319)
- fix: replication with TLS does not work (#707599)
- fix: some TLS ciphers cannot be enabled (#852339)
- fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
- fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
- fix: MozNSS certificate database in SQL format cannot be used (#857390)
- fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
- fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-30" date="1350043200">- fix: slapd with rwm overlay segfault following ldapmodify (#864913)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-31" date="1351684800">- fix update: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)</changelog>
<changelog author="Jan Synáček &lt;jsynacek@redhat.com&gt; 2.4.23-32" date="1361880000">- fix: segfault in syncprov overlay (#910241)</changelog>
<changelog author="Jan Synáček &lt;jsynacek@redhat.com&gt; 2.4.23-32.1" date="1366632000">- fix: NSS related resource leak (#954299)</changelog>

</package>

<package pkgid="289dcd9845ad9aff7f693f7d216ffc40f3b788b8c358157250a277e9a75eca02" name="tzdata" arch="src">
    <version epoch="0" ver="2013b" rel="1.el6"/>

<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012c-3" date="1342180800">- Morocco will not observe DST during the month of Ramadan
  (tzdata-2012c-morocco.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012f-1" date="1347883200">- Upstream 2012f
  - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
    and end at 3 am on Sunday 20th January 2013.  Guess it will be like
    that in following years as well.
- Upstream 2012e
  - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
- Upstream 2012d
  - Morocco will not observe DST during the month of Ramadan.
    DST cessation end date was corrected.
  - Drop tzdata-2012c-morocco.patch</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012g-1" date="1350907200">- Upstream 2012g
  - Adjust the packaging for new Makefile
  - Palestine: Fall transition was Sep 21, not Sep 28
  - Samoa: Daylight Saving Time commences on Sunday 30th September
    2012 and ends on Sunday 7th of April 2013.
- Resolves: #868173</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-1" date="1351684800">- Upstream 2012h
  - Brazilian state Bahia no longer has DST.
  - Brazilian state Tocantins now has DST.
  - Israel has new DST rules next year.
  - Jordan stays on DST this winter.</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-2" date="1352116800">- Switch back to using system zic, ignore upstream Makefile at all.
  We do so for java anyway.
- Drop Factory from distribution</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-1" date="1352116801">- Upstream 2012i
  - Cuba switched to DST</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352203200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354276800">- Upstream 2012j
  - Libya moved to CET</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-2" date="1361966400">- DTS in Chile will end on 2013-04-28
  (0016-Chile-is-changing-its-DST-rules.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-1" date="1363176000">- Upstream 2013b
  - Paraguay will end DST on March 24 this year
  - Haiti uses US daylight-saving rules this year
  - Morocco does not observe DST during Ramadan
- Upstream 2013a
  - Retire Chile patch, 2013a has the data
  - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
  - Many changes in historical timestamps</changelog>

</package>

<package pkgid="a4017408370a31eeea690855fccc82630a96e8d3aae4564ae59c5b7f918e8fd4" name="gnutls" arch="src">
    <version epoch="0" ver="2.8.5" rel="10.el6_4.1"/>

<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-1" date="1257163200">- upgrade to a new upstream version</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 2.8.5-1.1" date="1259841600">- Rebuilt for RHEL 6</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-2" date="1261137600">- disable experimental openssl compatibility code (#460310)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-3" date="1264680000">- drop superfluous rpath from binaries
- do not call autoreconf during build
- specify the license on utils subpackage
- do not create static libraries (#556052)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-4" date="1275480000">- add support for safe renegotiation CVE-2009-3555 (#533125)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-5" date="1332331200">- fix CVE-2012-1573 - security issue in packet parsing (#805432)
- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- TLS-1.2 certificate request compatibility fix</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-7" date="1336046400">- more TLS-1.2 compatibility fixes (TLS-1.2 stays disabled by default)</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-9" date="1349870400">- documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
  and gnutls-cli-debug(1) manual pages (#648297, #807746)
- add fallback to import the private keys as PKCS#8 (#745242)
- silence the strict aliasing warnings</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-10" date="1351512000">- fix the build of the info manual</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 2.8.5-10.1" date="1361448000">- fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)</changelog>

</package>

<package pkgid="5ca74fc4151060e0c21130619e158074b12bac7957c3d0f5c831abd7d249ff46" name="kdelibs" arch="src">
    <version epoch="6" ver="4.3.4" rel="20.el6_4.1"/>

<changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 6:4.3.4-12" date="1317816000">- Resolves: bz#743516, CVE-2011-3365 - input validation failure</changelog>
<changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 6:4.3.4-13" date="1317988800">- Resolves: bz#734446, use ca-certificates' ca-bundle.crt</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 6:4.3.4-14" date="1328184000">- Resolves: bz#698286, big endian issue on s390(x)</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 6:4.3.4-15" date="1345636800">- Resolves: bz#587016, print dialogue does not remember previous settings
- Resolves: bz#682611, Konqueror splash page in zh_TW is wrong
- Resolves: bz#734734, plasma eating up cpu-time when systemtray some icon
- Resolves: bz#826114, konqueror crash when trying to add "Terminal Emulator" to main menu bar</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 6:4.3.4-16" date="1346155200">- Resolves: bz#754161, stop/warn when a subdir is not accessible when copying</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 4.3.4-17" date="1347019200">- Resolves: bz#754161, bz#587016, bz#682611, bz#734734, bz#826114, respin</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 6:4.3.4-18" date="1350475200">- Resolves: bz#866230, CVE-2012-4512 CVE-2012-4513</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 6:4.3.4-19" date="1350561600">- fix multilib conflict</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 6:4.3.4-20" date="1370865600">- Resolves: bz#882895, crash when switching activity of 2 desktops from activity applet</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 6:4.3.4-20.1" date="1370952000">- add missing Buildrequires on libXdmcp</changelog>

</package>

<package pkgid="6c5252b8e281bd85b60cc13ee0e4fb5474862feec2e2c107464adbc480105d6b" name="gnome-power-manager" arch="src">
    <version epoch="0" ver="2.28.3" rel="7.el6_4"/>

<changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 2.28.1-5" date="1256817600">- Fix OSD showing a volume label when switching compositing off</changelog>
<changelog author="Richard Hughes  &lt;rhughes@redhat.com&gt; - 2.28.2-1" date="1260187200">- Update to 2.28.2
- Translation updates</changelog>
<changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.28.2-2" date="1262606400">- Avoid warning messages at startup</changelog>
<changelog author="Richard Hughes  &lt;rhughes@redhat.com&gt; - 2.28.3-1" date="1264507200">- Update to 2.28.3
- Fix the double suspend on lid close issue when not using KMS hardware.
- Resolves: #543948</changelog>
<changelog author="Richard Hughes  &lt;rhughes@redhat.com&gt; - 2.28.3-2" date="1271332800">- Do not show a link to the obsolete quirk site
- Resolves: #571784</changelog>
<changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.28.3-3" date="1273060800">- Update translations
Resolves: #575710</changelog>
<changelog author="Richard Hughes  &lt;rhughes@redhat.com&gt; - 2.28.3-4" date="1296475200">- Do not ask the user to look at the help file on suspend failure,
  it is already out of date.
- Resolves: #640296</changelog>
<changelog author="Richard Hughes  &lt;rhughes@redhat.com&gt; - 2.28.3-5" date="1296561600">- Reinstate the "Do nothing" option on the lid close combo because
  per-screen DPMS does not work in RHEL6.
- Resolves: #623674</changelog>
<changelog author="Richard Hughes  &lt;rhughes@redhat.com&gt; - 2.28.3-6" date="1330948800">- Do not ever use a status icon for debugging idle problems.
- Resolves: #676866</changelog>
<changelog author="Richard Hughes  &lt;rhughes@redhat.com&gt; - 2.28.3-7" date="1358337600">- Don't dim the screen by default on battery power -- it was never a
  good default, and we're doing this a different way in GNOME 3.
- Resolves: #912270</changelog>

</package>

<package pkgid="e82b06985ba58d619d7a064fbbe1f502c7bb1325f2ca46244481c4be952b4a5e" name="bind" arch="src">
    <version epoch="32" ver="9.8.2" rel="0.17.rc1.el6_4.6"/>

<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.14.rc1" date="1347969600">- allow forward{,ers} statement in static-stub zones</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.15.rc1" date="1349870400">- fix CVE-2012-5166</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.16.rc1" date="1350475200">- initscript: silence spurious "named.pid: No such file" error</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1" date="1354708800">- fix CVE-2012-5688</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.1" date="1359633600">- add response rate limit patch (#873624)</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.2" date="1359720000">- fix CVE-2012-5689</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.3" date="1360324800">- remove one bogus file from /usr/share/doc, introduced by RRL patch</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.4" date="1364385600">- fix  CVE-2013-2266
- ship dns/rrl.h in -devel subpkg</changelog>
<changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.8.2-0.17.rc1.5" date="1375012800">- fix CVE-2013-4854</changelog>
<changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.8.2-0.17.rc1.6" date="1376481600">- Fix gssapictx memory leak (#996955)</changelog>

</package>

<package pkgid="e1f06c14c671561ecec7e58ca3bff91e004cba1ae015726a5c3b601eeb4575be" name="ipmitool" arch="src">
    <version epoch="0" ver="1.8.11" rel="14.el6_4.1"/>

<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-8" date="1310644800">- fixed 'ipmi sol' sending wrong packets due to miscalculation of SOL
  payload size (#675975)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-9" date="1311595200">- rebuilt for RHEL 6.2 Fastrack</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-10" date="1312459200">- updated 'delloem setled' command to indicate SES status and drive
  activities for a PCI-e SSD (#727314)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-10" date="1312977600">- added -Y option for ipmitool to hide Kg key from cmdline (#698647)
- added 'channel setkg' command to set Kg encryption key on remote machine
  (#726390)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-11" date="1313668800">- fixed delloem powermonitor on bigendian systems (#731718)
- fixed memory leak in Serial-over-Lan module (#731977)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-12" date="1322136000">- fixed wrong permissions on ipmievd.pid (#756685)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-13" date="1329739200">- added new options to configure retransmissions on lan/lanplus interfaces
  (#748073)
- updated dellem command (#739358)
- fixed exit code of ipmitool -o list (#715615)
- improved checking of command line arguments (#725993)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.8.11-13.1" date="1338379200">- fixed retransmissions of lanplus requests, broken in previous release
  (#826027)</changelog>
<changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.8.11-14" date="1360065600">- (#907926) - link=on and ipmi=on no longer work for setaccess</changelog>
<changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.8.11-14.1" date="1360238400">- related: #907973 link=on and ipmi=on no longer work for setaccess</changelog>

</package>

<package pkgid="dfdbde3da46438e00cad992da621bdc531df0974f0898c5a8d8b7076e9370aaf" name="tzdata" arch="src">
    <version epoch="0" ver="2013c" rel="1.el6"/>

<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012g-1" date="1350907200">- Upstream 2012g
  - Adjust the packaging for new Makefile
  - Palestine: Fall transition was Sep 21, not Sep 28
  - Samoa: Daylight Saving Time commences on Sunday 30th September
    2012 and ends on Sunday 7th of April 2013.
- Resolves: #868173</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-1" date="1351684800">- Upstream 2012h
  - Brazilian state Bahia no longer has DST.
  - Brazilian state Tocantins now has DST.
  - Israel has new DST rules next year.
  - Jordan stays on DST this winter.</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-2" date="1352116800">- Switch back to using system zic, ignore upstream Makefile at all.
  We do so for java anyway.
- Drop Factory from distribution</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-1" date="1352116801">- Upstream 2012i
  - Cuba switched to DST</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352203200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354276800">- Upstream 2012j
  - Libya moved to CET</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-2" date="1361966400">- DTS in Chile will end on 2013-04-28
  (0016-Chile-is-changing-its-DST-rules.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-1" date="1363176000">- Upstream 2013b
  - Paraguay will end DST on March 24 this year
  - Haiti uses US daylight-saving rules this year
  - Morocco does not observe DST during Ramadan
- Upstream 2013a
  - Retire Chile patch, 2013a has the data
  - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
  - Many changes in historical timestamps</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-2" date="1364385600">- Palestine starts Daylight Saving Time on March 29, 2013
  (tzdata-2013b-gaza.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-1" date="1368792000">- Upstream 2013c
  - Sync past stamps for Palestine and West Bank with timeanddate.com
  - Assume that the recent change to Paraguay's DST rules is permanent
  - Macquarie was uninhabited between 1919 and 1948.  It's also part
    of Australia (update in zone.tab).</changelog>

</package>

<package pkgid="c4e91b7a79faec1b915884298d6ed40088b768bf8761036e94e0a4af3275db4e" name="tzdata" arch="src">
    <version epoch="0" ver="2013c" rel="2.el6"/>

<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-1" date="1351684800">- Upstream 2012h
  - Brazilian state Bahia no longer has DST.
  - Brazilian state Tocantins now has DST.
  - Israel has new DST rules next year.
  - Jordan stays on DST this winter.</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012h-2" date="1352116800">- Switch back to using system zic, ignore upstream Makefile at all.
  We do so for java anyway.
- Drop Factory from distribution</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-1" date="1352116801">- Upstream 2012i
  - Cuba switched to DST</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012i-2" date="1352203200">- Preserve hardlinks that zic leaves behind, install with cp -d</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-1" date="1354276800">- Upstream 2012j
  - Libya moved to CET</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2012j-2" date="1361966400">- DTS in Chile will end on 2013-04-28
  (0016-Chile-is-changing-its-DST-rules.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-1" date="1363176000">- Upstream 2013b
  - Paraguay will end DST on March 24 this year
  - Haiti uses US daylight-saving rules this year
  - Morocco does not observe DST during Ramadan
- Upstream 2013a
  - Retire Chile patch, 2013a has the data
  - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
  - Many changes in historical timestamps</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013b-2" date="1364385600">- Palestine starts Daylight Saving Time on March 29, 2013
  (tzdata-2013b-gaza.patch)</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-1" date="1368792000">- Upstream 2013c
  - Sync past stamps for Palestine and West Bank with timeanddate.com
  - Assume that the recent change to Paraguay's DST rules is permanent
  - Macquarie was uninhabited between 1919 and 1948.  It's also part
    of Australia (update in zone.tab).</changelog>
<changelog author="Petr Machata &lt;pmachata@redhat.com&gt; - 2013c-2" date="1372939200">- Update descriptions in iso3166.tab; make Jerusalem coordinates in
  zone.tab more precise
  (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
- Update local mean time for Jerusalem to match more-precise longitude
  (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
- Move Morocco's midsummer 2013 transitions
  (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
  Fixes 980805 980807 981019 981020
- Israel now falls back on the last Sunday of October
  (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)</changelog>

</package>

<package pkgid="528a954d68cf6e59c23e5ccac4906102950fdb52fdf0ca01d70e5b3e4e662163" name="cluster" arch="src">
    <version epoch="0" ver="3.0.12.1" rel="49.el6_4.2"/>

<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-42" date="1349697600">- fenced: silence dbus error
  Resolves: rhbz#861340</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-43" date="1349870400">- cman init: make sure we start after fence_sanlockd and warn users
- checkquorum.wdmd: add integration script with wdmd
  (requires wdmd &gt;= 2.6)
  Resolves: rhbz#509056</changelog>
<changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.0.12.1-44" date="1350302400">- mkfs.gfs2: Check locktable more strictly for valid chars
  Resolves: rhbz#862847</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-45" date="1351166400">- fenced: get the cman fd before each poll
  Resolves: rhbz#857952</changelog>
<changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.0.12.1-46" date="1351598400">- fsck.gfs2: Check for formal inode number mismatch
  Resolves: rhbz#860048</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-47" date="1356004800">- cman: prevent libcman from causing SIGPIPE when corosync is down
  Resolves: rhbz#887787</changelog>
<changelog author="Bob Peterson &lt;rpeterso@redhat.com&gt; - 3.0.12.1-48" date="1357214400">- After converting a GFS1 file system with gfs2_convert errors were detected with fsck.gfs2
  Resolves: rhbz#888053</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-49" date="1357560000">- build: ship checkquorum.wdmd non executable
  Resolves: rhbz#509056</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 3.0.12.1-49.1" date="1373544000">- cman init: fix handling of lock file
  Resolves: rhbz#982700</changelog>
<changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.0.12.1-49.2" date="1377777600">- gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts
- libgfs2: check return code of rename
- libgfs2: Correct error message in mtab update code
- libgfs2: Set umask before calling mkstemp
- gfs2_grow: report bad return codes on error
  Resolves: rhbz#1001504</changelog>

</package>

<package pkgid="d474d3441badbca6455b2d8f1d7e7ef17039b48c5dc640197cd0b970a945a0dc" name="xorg-x11-drv-mach64" arch="src">
    <version epoch="0" ver="6.9.3" rel="4.1.el6_4"/>

<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.8.1-1" date="1247659200">- mach64 6.8.1
- mach64-6.8.1-defaultdepth.patch: Default to depth 16 (#472687)</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.8.1-2" date="1248696000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 6.8.2-1" date="1249387200">- mach64 6.8.2</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 6.8.2-1.1" date="1259582400">- Rebuilt for RHEL 6</changelog>
<changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; 6.9.0-1" date="1309262400">- upstream release 6.9.0</changelog>
<changelog author="Jerome Glisse &lt;jglisse@redhat.com&gt; 6.9.3-1" date="1344254400">- latest upstream release 6.9.3</changelog>
<changelog author="airlied@redhat.com - 6.9.3-2" date="1345636800">- rebuild for server ABI requires</changelog>
<changelog author="Jerome Glisse &lt;jglisse@redhat.com&gt; 6.9.3-3" date="1346241600">- Resolves: #835239</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.9.3-4" date="1349179200">- Disable EXA and DRI, use ShadowFB by default, and don't gratuitously disable
  Render when using ShadowFB. (#860676)</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.9.3-4.1" date="1368619200">- Fix a crash in preinit (#963219)</changelog>

</package>

<package pkgid="3564a3acee40c543fc33c4022b8e326e4e8f9ca3a55192dbe513c428d0da28ba" name="elinks" arch="src">
    <version epoch="0" ver="0.12" rel="0.21.pre5.el6_3"/>

<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 0.12-0.13.pre3" date="1240920000">- use appropriate BuildRequires for nss_compat_ossl (#495532)
- support for trusted CA certificates loading from file in PEM format</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; 0.12-0.14.pre3" date="1240920001">- enable certificate verification by default via configuration
  file(#495532)</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 0.12-0.15.pre3" date="1241006400">- try to load default NSS root certificates if the configuration option
  connection.ssl.trusted_ca_file is set to an empty string (#497788)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; 0.12-0.16.pre4" date="1243857600">- new upstream bugfix prerelease
- defuzz patches</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; 0.12-0.17.pre5" date="1247054400">- new upstream bugfix prerelease</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.12-0.18.pre5" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Orion Poplawski &lt;orion@cora.nwra.com&gt; 0.12-0.19.pre5" date="1250251200">- Add Requires(post/postun): coreutils for readlink</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 0.12-0.19.pre5.1" date="1259582400">- Rebuilt for RHEL 6</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.20.pre5" date="1262865600">- remove patch for configure script to find OpenSSL (we use NSS instead)
- rediffed all patches with non-zero offset
- add buildrequires for zlib-devel</changelog>
<changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.21.pre5" date="1351512000">- do not delegate GSSAPI credentials (CVE-2012-4545)</changelog>

</package>

<package pkgid="c40b30182bd8a8bd8d5e5a7807affa0264513983fc94abed069dfb678d040142" name="scsi-target-utils" arch="src">
    <version epoch="0" ver="1.0.24" rel="3.el6_4"/>

<changelog author="Mike Christie &lt;mchristie@redhat.com&gt; - 1.0.13-0" date="1295265600">- Rebase to upstream 1.0.13.
- Add upstream iser target. This requires setting the driver/lld
type to iser. See targets.conf for example or the README.iscsi for
a tgtadm example.
- 616402 read-only support</changelog>
<changelog author="Mike Christie &lt;mchristie@redhat.com&gt; - 1.0.13-1" date="1296734400">- Drop scsi-target-utils-dynamic-link-iser.patch patch. It turns out
in 6.0 this patch was broken and linked against rdma libs, so
the got brought in by yum. The new patch was not broken and did not
force linking but yum/iser users are not expecting the depencies
to be broken.</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.0.13-2" date="1298894400">- Resolves: rhbz #677475 Fix semkey and control socket clashes</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.0.14-1" date="1300363200">- Rebase to upstream 1.0.14
- Update git-sync patch to pull in add'l fixes to 9c1cd78.</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.0.14-2" date="1300363201">- Rebuild for fudged cvs checkin</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.0.14-3" date="1317297600">- Add patch
  * scsi-target-utils-fix-segfault-on-exit.patch</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.0.14-4" date="1317729600">- Add patches
  * scsi-target-utils-dont-reparse-conf.patch
  * scsi-target-utils-allow-guids.patch</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.0.24-1" date="1331035200">- Update to upstream 1.0.24 for bugfixes</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.0.24-2" date="1332244800">- Add patch
  * scsi-target-utils-discovery-auth.patch</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.0.24-3" date="1367841600">- Add libaio-devel as a BuildReq and libaio as a Req for #910638</changelog>

</package>

<package pkgid="701b3ee8e9ac152eb7537ae652c768bd1831cc44d3d097ba008bab35c28d7aac" name="rsyslog" arch="src">
    <version epoch="0" ver="5.8.10" rel="7.el6_4"/>

<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 4.6.2-11" date="1317297600">- provide configuration directive for sysklogd message format compatibility
- provide log format template for sysklogd message format compatibility
  Resolves: #737096</changelog>
<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 4.6.2-12" date="1317816000">- fix typo in RSYSLOG_SysklogdFileFormat documentation
  Resolves: #737096</changelog>
<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.7-1" date="1328616000">- rebase to rsyslog-5.8.7
  - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
    http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
  - remove patches obsoleted by rebase
  - add patches for better sysklogd compatibility (taken from upstream)
  - update included files for the new major version
  Resolves: #672182
  Resolves: #727380
  Resolves: #756664
  Resolves: #767527
  Resolves: #769025
- add several directories for storing auxiliary data
  Resolves: #740420
- fix source package URL</changelog>
<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.10-1" date="1335355200">- rebase to rsyslog 5.8.10
  Resolves: #803550
  Resolves: #805424
  Resolves: #813079
  Resolves: #813084
- consider lock file in 'status' action
  Resolves: #807608
- add impstats and imptcp modules
- include new license text files
- specify which versions of sysklogd are obsoleted</changelog>
<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.10-2" date="1337256000">- add patch to update information on debugging in the man page
  Resolves: #820311
- add patch to prevent debug output to stdout after forking
  Resolves: #820996
- add patch to support ssl certificates with domain names longer than 128 chars
  Resolves: #822118</changelog>
<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.10-3" date="1350043200">- add 'conflicts' on incompatible version of selinux-policy
  Resolves: #838148</changelog>
<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.10-4" date="1350216000">- add patch to correct the order in which selector filters are added
  Resolves: #847568</changelog>
<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.10-5" date="1357646400">- add a patch to permit RFC3339 timestamps in messages comming from
  the local log socket, patch taken from upstream - commit:
  bfae69d68b0032a383821a54bc52aeff36a90e52
  Resolves: #886004</changelog>
<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.10-6" date="1357732800">- the previous patch to enable RFC3339 timestamps revealed a bug
  in the upstream code - adding another patch
  Resolves: #886004</changelog>
<changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 5.8.10-7" date="1377518400">- drop patch 5 which introduced a regression
  resolves: #996826
  reverts: #847568</changelog>

</package>

<package pkgid="882205581ed6005594ff604ae651930c9592f6920212ce41179a6099f983e490" name="xulrunner" arch="src">
    <version epoch="0" ver="17.0.7" rel="1.el6.centos"/>

<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362657600">- Added fix for #848644</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-3" date="1363089600">- Added fix for rhbz#916180 - Wrong library directory reference 
  in /usr/bin/xulrunner</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.5-2" date="1366286400">- Updated nss and nspr versions</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-2" date="1368187200">- Update to 17.0.6 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-3" date="1368446400">- Added patch for aliasing issues (mozbz#821502)</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-4" date="1371038400">- Added a workaround for rhbz#961687 - Prelink throws message 
  "Cannot safely convert .rel.dyn' section from REL to RELA"</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.6-5" date="1371556800">- Added workaround for rhbz#973721 - fixing problem with installation
  of  some addons</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371643200">- Update to 17.0.7 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.7-1.el6.centos" date="1372161600">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="f54290d2fb30be842548747effd22dc0f32db48c3767f2f320e564a73fa2c154" name="samba" arch="src">
    <version epoch="0" ver="3.6.9" rel="151.el6_4.1"/>

<changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.9-143" date="1352462400">- Fix winbind rpm dependency
- related: #649479</changelog>
<changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.9-144" date="1352808000">- Fix AES session key usage
- related: #748407</changelog>
<changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.9-145" date="1352894400">- Failover if LogonSamLogon fails to connect to Netlogon.
- resolves: #875879</changelog>
<changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.9-146" date="1354104000">- Fix large read requests cause server to issue malformed reply.
- resolves: #879578</changelog>
<changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.9-147" date="1354104001">- Rebuild with correct libtalloc and libtdb versions.
- related: #879578</changelog>
<changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.9-148" date="1354276800">- Fix work around for 'winbind use default domain'.
- resolves: #876262</changelog>
<changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.9-149" date="1354708800">- Fix leaking sockets of SMB connections to a DC.
- resolves: #852175</changelog>
<changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.9-150" date="1354795200">- Fix typo in winbind-krb-locator post uninstall script.
- related: #864950</changelog>
<changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.9-151" date="1355745600">- Fix typo in winbind-krb-locator post uninstall script.
- related: #864950</changelog>
<changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 3.6.9-151.1" date="1377864000">- Fix crash in _wkssvc_NetWkstaEnumUsers.
- resolves: #997747</changelog>

</package>

<package pkgid="6008e403d7d759d36cd36677037b09a68f8784df0d0269f2ef3dc8a2bd6d435f" name="util-linux-ng" arch="src">
    <version epoch="0" ver="2.17.2" rel="12.9.el6_4.3"/>

<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.4" date="1316088000">- fix CVE-2011-1675 - mount fails to anticipate RLIMIT_FSIZE
- fix CVE-2011-1677 - umount may fail to remove /etc/mtab~ lock file</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.5" date="1330948800">- fix #588419 - Changing the console login timeout
- fix #740163 - 'fdisk -l' returns confusing output
- fix #785142 - uuidd service not active by defaul
- fix #797888 - script does not play well with csh when invoked from within /etc/csh.login</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.6" date="1332936000">- fix #785142 - uuidd service not active by default</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.7" date="1333713600">- fix #740163 - 'fdisk -l' returns confusing output (sfdisk)</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.8" date="1349179200">- fix #679833 - [RFE] tailf should support `-n 0`
- fix #719927 - [RFE] add adjtimex --compare functionality to hwclock
- fix #730272 - losetup does not warn if backing file is &lt; 512 bytes
- fix #730891 - document cfdisk and sfdisk incompatibility with 4096-bytes sectors
- fix #736245 - lscpu segfault on non-uniform cpu configuration
- fix #783514 - default barrier setting for EXT3 filesystems in mount manpage is wrong
- fix #790728 - blkid ignores swap UUIDs if the first byte is a zero byte
- fix #818621 - lsblk should not open device it prints info about
- fix #819945 - hwclock --systz causes a system time jump
- fix #820183 - mount(8) man page should include relatime in defaults definition
- fix #823008 - update to the latest upstream lscpu and chcpu
- fix #837935 - lscpu coredumps on a system with 158 active processors
- fix #839281 - inode_readahead for ext4 should be inode_readahead_blks
- fix #845477 - Duplicate SElinux mount options cause mounting from the commandline to fail
- fix #845971 - while reading /etc/fstab, mount command returns a device before a directory
- fix #858009 - login doesn't update /var/run/utmp properly
- fix #809449 - Backport inverse tree (-s) option for lsblk and related patches
- fix #809139 - lsblk option -D missing in manpage</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.9" date="1357732800">- fix #892471 - CVE-2013-0157 mount folder existence information disclosure</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.9.el6_4" date="1365595200">- fix #911756 - Make silicon medley signature recognition more robust</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.9.el6_4.1" date="1366113600">- fix patch for #911756 to make it usable on big-endian machines</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.9.el6_4.2" date="1366113601">- make patch for #911756 more robust</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.9.el6_4.3" date="1366718400">- fix #917678 - mount in RHEL 6.4 ignores user option</changelog>

</package>

<package pkgid="6517d38668c47b55f9ea7d2ff859d186a48cf4b42e18c406a1569f60c2ad77e1" name="libcgroup" arch="src">
    <version epoch="0" ver="0.37" rel="7.2.el6_4"/>

<changelog author="Ivana Hutarova Varekova &lt;varekova@redhat.com&gt; 0.36-6" date="1279108800">- Resolves: #609816
  serivces of libcgroup not LSB-compliant</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 0.37-1.el6" date="1292328000">- Updated to 0.37
  - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
  - fixed 'cgget' reading long variable values like devices.list (#626127)
  - fixed reading list of mounted controllers on library init (#635984)
  - fixed the library not to change current working directory when creating
    groups (#628895)
  - new user 'cgred' was added for better security - /bin/cgexec tool is no
    longer SUID to root but SGID to the new 'cgred' user, which has write
    access to /var/run/cgred.socket
  - may other fixes an enhancements
- Removed rpath from compiled binaries
- Fixed spelling and rpmlint errors in the .spec file (#634939)
- Fixed exit code of cgclassify tool (#667957)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 0.37-2.el6" date="1298980800">- Fixed buffer overflow when parsing cgexec command line parameters.
- Added checking of source of netlink messages to cgrulesengd daemon.
- Resolves: CVE-2011-1006 CVE-2011-1022</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 0.37-3.el6" date="1309348800">- Fixed 'cgred' group not being created as system-group during installation
  of the package.
- Resolves: #715413</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-4" date="1329912000">- Resolves: #758493
  fixes the admin/assign id bug in libcgroup</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-5" date="1349956800">- resolves: #819137
  fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
- resolves: #773544
  made --sticky option effective when setuid(2) and setgid(2)
- resolves: #849757
  added inotify fd to scan running tasks and set control groups
- resolves: #738737
  logging improvement</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-6" date="1355745600">- related: #738737
  updated logging improvement
- resolves: #877042
  fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
- resolves: #869990
  fixed bug when cgconfig service was failing to start on read only file systems</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-7" date="1356004800">- related: #738737
  lowered default logging level from warning to error</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-7.1" date="1361361600">- resolves: #913282
  fixed problem when cgred service could segfault if entry in cgrules.conf file
  doesn't specify procname</changelog>
<changelog author="Ivana Hutarova Varekova &lt;varekova@redhat.com&gt; 0.37-7.2" date="1371211200">- resolves: #974471
  enable cache for pam_cgroup</changelog>

</package>

<package pkgid="c99d38bfca1eca2d399513ecb446151eb484a68951edd293333569334adc0f98" name="thunderbird" arch="src">
    <version epoch="0" ver="17.0.7" rel="1.el6.centos"/>

<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b1-0.1" date="1351080000">- Rebase to 17 beta 1</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b2-0.1" date="1352376000">- Update to 17.0b2</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0-2" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-2" date="1358424000">- Update to 17.0.2 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362657600">- Added fix for #848644</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-2" date="1368187200">- Update to 17.0.6 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371816000">- Update to 17.0.7 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.7-1.el6.centos" date="1372161600">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="e55e54c648a0ecf6ce20196554e12ef0a1965e159a65d5e1fbea1e77b68dd288" name="sssd" arch="src">
    <version epoch="0" ver="1.9.2" rel="82.4.el6_4"/>

<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-77" date="1358856000">- Resolves: rhbz#902436 - possible segfault when backend callback is removed</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-78" date="1358856001">- Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning
                          value is higher than passwordWarning LDAP attribute.</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-79" date="1358856002">- Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh
                          on ppc64 and s390x</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-80" date="1358942400">- Resolves: rhbz#903078 - Out-of-bounds read flaws in
                          autofs and ssh services responders</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-81" date="1358942401">- Resolves: rhbz#903078 - TOCTOU race conditions by copying
                          and removing directory trees</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82" date="1358942402">- Resolves: rhbz#888614 - Failure in memberof can lead to failed
                          database update</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.1" date="1359547200">- Resolves: rhbz#907362 - Serious performance regression in sssd</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.2" date="1361534400">- Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                          Kerberos
- Fix the NVR</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.3" date="1362139200">- Fix pwd_expiration_warning=0
- Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                          Kerberos</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.2-82.4" date="1362484800">- Resolves: rhbz#911298 - sssd: simple access provider flaw prevents intended
                           ACL use when client to an AD provider</changelog>

</package>

<package pkgid="ab857cea46fc7b915685a1b1b735e7659950a8bf4dd4703e79ee9e70d7ac395c" name="qemu-kvm" arch="src">
    <version epoch="2" ver="0.12.1.2" rel="2.355.el6_4.2"/>

<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.348.el6" date="1355918400">- kvm-spice-add-new-spice-server-callbacks-to-ui-spice-dis.patch [bz#879559]
- kvm-vmmouse-add-reset-handler.patch [bz#884450]
- kvm-vmmouse-fix-queue_size-field-initialization.patch [bz#884450]
- kvm-hw-vmmouse.c-Disable-vmmouse-after-reboot.patch [bz#884450]
- kvm-block-Fix-vpc-initialization-of-the-Dynamic-Disk-Hea.patch [bz#887897]
- kvm-block-vpc-write-checksum-back-to-footer-after-check.patch [bz#887897]
- Resolves: bz#879559
  (spice with non-qxl vga dumps core)
- Resolves: bz#884450
  (after change mac address of guest, mouse inside guest can not be used after system_reset in qemu)
- Resolves: bz#887897
  (Backport vpc initialization of the Dynamic Disk Header fix)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.349.el6" date="1357646400">- kvm-pc-rhel6-compat-enable-S3-S4-for-6.1-and-lower-machi.patch [bz#886798]
- kvm-e1000-no-need-auto-negotiation-if-link-was-down.patch [bz#890288]
- kvm-rtl8139-preserve-link-state-across-device-reset.patch [bz#890288]
- kvm-pci-assign-Enable-MSIX-on-device-to-match-guest.patch [bz#886410]
- Resolves: bz#886410
  (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)
- Resolves: bz#886798
  (Guest should get S3/S4 state according to machine type to avoid cross migration issue)
- Resolves: bz#890288
  (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
- Resolves: bz#886410
  (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.350.el6" date="1357732800">- kvm-raw-posix-add-raw_get_aio_fd-for-virtio-blk-data-pla.patch [bz#877836]
- kvm-configure-add-CONFIG_VIRTIO_BLK_DATA_PLANE.patch [bz#877836]
- kvm-vhost-make-memory-region-assign-unassign-functions-p.patch [bz#877836]
- kvm-dataplane-add-host-memory-mapping-code.patch [bz#877836]
- kvm-dataplane-add-virtqueue-vring-code.patch [bz#877836]
- kvm-event_notifier-add-event_notifier_set.patch [bz#877836]
- kvm-dataplane-add-event-loop.patch [bz#877836]
- kvm-dataplane-add-Linux-AIO-request-queue.patch [bz#877836]
- kvm-iov-add-iov_discard_front-back-to-remove-data.patch [bz#877836]
- kvm-iov-add-qemu_iovec_concat_iov.patch [bz#877836]
- kvm-virtio-blk-Turn-drive-serial-into-a-qdev-property.patch [bz#877836]
- kvm-virtio-blk-define-VirtIOBlkConf.patch [bz#877836]
- kvm-virtio-blk-add-scsi-on-off-to-VirtIOBlkConf.patch [bz#877836]
- kvm-dataplane-add-virtio-blk-data-plane-code.patch [bz#877836]
- kvm-virtio-blk-add-x-data-plane-on-off-performance-featu.patch [bz#877836]
- kvm-virtio-pci-fix-virtio_pci_set_guest_notifiers-error-.patch [bz#877836]
- Resolves: bz#877836
  (backport virtio-blk data-plane patches)</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.351.el6" date="1357732801">- kvm-qxl-save-qemu_create_displaysurface_from-result.patch [bz#885644]
- Resolves: bz#839832
  (qemu-ga: document selinux policy for read/write of guest files)
- Resolves: bz#885644
  (Memory leak and use after free in qxl_render_update_area_unlocked())</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.352.el6" date="1358337600">- kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
- kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
- kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
- Resolves: bz#895392
  (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.353.el6" date="1358942400">- kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
- kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
- kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
- kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
- kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
- Resolves: bz#869981
  (Cross version migration between different host with spice is broken)
- Resolves: bz#876982
  (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
- Resolves: bz#894995
  (core dump when install windows guest with x-data-plane=on)
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.354.el6" date="1358942401">- spec: add Epoch to old_conflict_ver
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6" date="1358942402">- kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
- kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
- kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
- kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
- kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
- Resolves: bz#884253
  (Allow control of volume from within Windows Guests (Volume Mixture))</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.1" date="1360152000">- kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
- Resolves: bz#907397
  (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.2" date="1362052800">- kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
- kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
- Resolves: bz#910841
  (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])</changelog>

</package>

<package pkgid="914f52249c34e6ac7df1a386fc0b129b73d64f79310444a758a4d38f9d82be41" name="selinux-policy" arch="src">
    <version epoch="0" ver="3.7.19" rel="195.el6_4.10"/>

<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.1" date="1361361600">- Additional fix for tuned
- Backport openshift changes
Resolves:#912392</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.2" date="1362484800">- Allow cgred to use notify
Resolves:#917966
- Allow mount to transition to gluster
Resolves:#917972</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.3" date="1362571200">- Backport openshfit fixes
Resolves:#917966</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.4" date="1366804800">- Allow dirsrv-admin server to be restarted from console 
Resolves:#955703
- Allow dac_override for openshift-cron</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.5" date="1368100800">- Allow dirsrv-admin server to be restarted from console
Resolves:#955703</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.6" date="1369656000">- Allow myslqd-safe to execute shell_exec_t
Resolves:#966997
- Allow openshift-cron to read openshift link files in /var/lib</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.7" date="1369915200">- Make Quantum 2013.1.1 working with netns
- Make SSHing into an Openshift Enterprise Node working
Resolves:#969043</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.8" date="1370433600">- Allow dnsmasq to stream connect to quantum
- Allow ifconfig domtrans to iptables and execute ldconfig
Resolves:#969043</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.9" date="1370520000">- Allow iptables to read and write quantum inherited pipes
- Allow iptables to send sigchld to quantum
Resolves:#969043</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.10" date="1370520001">- Remove all transitions for quantum
Resolves:#969043</changelog>

</package>

<package pkgid="fb4fb0f75cd750a3cc2576577cd9b86896bd126833ebe574e0abb9af6b8d2d67" name="httpd" arch="src">
    <version epoch="0" ver="2.2.15" rel="28.el6.centos"/>

<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-20" date="1350302400">- add htcacheclean init script (Jan Kaluza, #805810)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-21" date="1350561600">- mod_proxy_ajp: ignore flushing if headers have not been sent (#853160)
- mod_proxy_ajp: do not mark worker in error state when one request
  timeouts (#864317)
- mod_ssl: do not run post script if all files are already created (#752618)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-22" date="1350907200">- mod_cache: fix header merging for 304 case, thanks to Roy Badami (#868283)
- mod_cache: fix handling of 304 responses (#868253)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-23" date="1352289600">- mod_log_config: fix cookie parsing substring mismatch (#867268)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-24" date="1352376000">- mod_ssl: improved patch for mod_nss fallback (w/mharmsen, #805720)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-25" date="1354536000">- htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
- rotatelogs: omit the second arg when invoking a post-rotate program (#876923)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-26" date="1354708800">- htcacheclean: exit with code 4 also for "restart" action (#805810)</changelog>
<changelog author="&lt;jorton@redhat.com&gt; - 2.2.15-27" date="1362657600">- add security fixes for CVE-2012-3499, CVE-2012-4558 (#915883, #915884)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-28" date="1367236800">- mod_rewrite: add security fix for CVE-2013-1862 (#953729)</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.2.15-28.el6.centos" date="1368446400">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="4c26ef88b130f4423acd6871fb923712eca206c736ac2e4b0fec49341614b508" name="resource-agents" arch="src">
    <version epoch="0" ver="3.9.2" rel="21.el6_4.3"/>

<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 3.9.2-15" date="1350302400">- Fixes issue with rgmanager not recognizing a mounted cifs share due to
  trailing slashes
- Resolves: rhbz#848642</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 3.9.2-16" date="1351771200">- Add support for 'volume group per service HA-LVM support for RAID logical
  volumes'
- Resolves: rhbz#824153</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 3.9.2-17" date="1353067200">- HA LVM is now able to properly shutdown when device failures cause LVs
  to go missing which allows the service to migrate to another machine
- Resolves: rhbz#860981</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 3.9.2-18" date="1354017600">- SAPInstance and sapdb.sh were re-synced to the latest upstream versions
- Resolves: rhbz#834293</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 3.9.2-19" date="1354276800">- Better error messages for the script resource have been added to aid
  debugging
- Resolves: rhbz#773478</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 3.9.2-20" date="1354881600">- Update the rgmanager SAPInstance agent so resource limits configured in
  /usr/sap/services are properly applied.
- Resolves: rhbz#869695</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 3.9.2-21" date="1358942400">- Fixed missing '$' in lvm_by_vg.sh script
- Retry VG shutdown to cope with udev collisions
- Resolves: rhbz#729812</changelog>
<changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; - 3.9.2-21.1" date="1370865600">- Clean up the Oracle resource agents and add support for Oracle 11g
- Resolves: rhbz#670022</changelog>
<changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; - 3.9.2-21.2" date="1371729600">- Med: oracledb.sh: Set RESTART_RETRIES back to 0
  Resolves: rhbz#972931</changelog>
<changelog author="David Vossel &lt;dvossel@redhat.com&gt; - 3.9.2-21.3" date="1372334400">- Fix: lvm: detection of clusternode with lvm using tags.
  Resolves: rhbz#978775</changelog>

</package>

<package pkgid="7ecef0833890b81d955df1a3db565fc95e29505dc63c405a0591f717a2f899be" name="thunderbird" arch="src">
    <version epoch="0" ver="17.0.3" rel="2.el6.centos"/>

<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-1" date="1345896000">- Update to 10.0.7 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349524800">- Update to 10.0.8 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-2" date="1350043200">- Added patches from 10.0.9 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b1-0.1" date="1351080000">- Rebase to 17 beta 1</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b2-0.1" date="1352376000">- Update to 17.0b2</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0-2" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-2" date="1358424000">- Update to 17.0.2 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362657600">- Added fix for #848644</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.3-2.el6.centos" date="1363003200">- Rolled in CentOS Branding</changelog>

</package>

<package pkgid="3966d74226ef241dde7e517816617dba980fb8728f7691eb6577c09258470b66" name="e2fsprogs" arch="src">
    <version epoch="0" ver="1.41.12" rel="14.el6_4.2"/>

<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.41.12-7" date="1299153600">- Add explicit dependencies between subpackages (#599338)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.41.12-8" date="1306152000">- e2fsck: don't clone dup xattr blocks in fs without xattr feat (#676465)
- Allow specification of default mntopts in superblock (#679892)
- Handle devices with large physical blocksizes (#679931)
- Fix some typos in man pages (#683906)</changelog>
<changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.41.12-9" date="1308139200">- e2image: Add support for exporting image in qcow2 format (#713468)
- mke2fs: Skip inode table initialization on some discardable devices (#713475)
- mke2fs: Add -E discard/nodiscard options (#713475)
- mke2fs: Allow to specify discard option in mke2fs.conf (#713475)
- e2fsck: Allow to discard free data and inode blocks in e2fsck (#713475)
- mke2fs: Show discard progress (#713475)
- Don't attempt to discard flash device if -n option is given (#713475)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.41.12-10" date="1313150400">- build with partial relro support (#730083)</changelog>
<changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.41.12-11" date="1316001600">- fix invalid lseek error detection in e2image (#732940)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.41.12-12" date="1330689600">- Fix spurious e2fsck checksum errors when -b option is used (#786021)
- Fix bugs related to e2fsck -E discard (#795846)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.41.12-13" date="1350043200">- Fix mke2fs -S on uninit_bg fs (#806137)
- Make it harder to damage fs by fscking while mounted (#824126)
- Update resize2fs manpage to include ext4 online resizing (#813820)</changelog>
<changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.41.12-14" date="1350043201">- remove EXT4_EOFBLOCKS_FL flag handling (#858338)
- add new test f_eofblocks (#858338)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.41.12-14.1" date="1371124800">- Enhance e2fsck detection of invalid extent trees (#974193)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.41.12-14.2" date="1371556800">- Further enhance e2fsck detection of invalid extent trees (#974193)</changelog>

</package>

<package pkgid="e3ee92cbb6b011d17ee2abcd96274329a51ded54c716d93e1aa52f1e082f9355" name="qt" arch="src">
    <version epoch="1" ver="4.6.2" rel="26.el6_4"/>

<changelog author="Than Ngo &lt;than@redhat.com&gt; - 1:4.6.2-17" date="1296043200">- Resolves: rhbz#562049, rhbz#562060, rhbz#562058, rhbz#631732, rhbz#636399</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 1:4.6.2-18" date="1310385600">- Resolves: rhbz#562132, Malayalam rakar is not getting reordered</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 1:4.6.2-19" date="1310558400">- Resolves: rhbz#679759, missing executable bit in qt-examples binaries
- Resolves: rhbz#716694, move macros.qt4 to -devel
- Resolves: rhbz#680088, rpmdiff failure</changelog>
<changelog author="Jaroslav Reznik &lt;jreznik@redhat.com&gt; - 1:4.6.2-20" date="1315915200">- Resolves: #rhbz737813
   fix multiple flaws in Qt
   CVE-2011-3193, CVE-2011-3194</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 1:4.6.2-21" date="1322740800">- Resolves: #rhbz757793, add OpenGL 3.1, 3.2, 3.3 and 4.0 recognition to QGLFormat</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 1:4.6.2-22" date="1328529600">- Resolves: bz#694684, phonon crash</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 1:4.6.2-23" date="1332331200">- Resolves: bz#805433, CVE-2011-3922</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; 1:4.6.2-24" date="1332331201">- Resolves: bz#734444, list of trusted CA certificates should not be compiled into library</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 1:4.6.2-25" date="1345809600">- Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
- Resolves: bz#678604, Wrong Cursor when widget become native on X11</changelog>
<changelog author="Than Ngo &lt;than@redhat.com&gt; - 1:4.6.2-26" date="1363608000">- Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions</changelog>

</package>

<package pkgid="e43d62daa35d7f3651aa641a3c28765b782ce15b28912ddf48941588bc493b7b" name="ipa" arch="src">
    <version epoch="0" ver="3.0.0" rel="26.el6_4.4"/>

<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-21.el6" date="1357905600">- Properly handle migrated uniqueMember attributes (#894090)
- ipa permission-find using valid targetgroup throws internal error (#893827)
- Fix migration of CRLs to new directory location (#893722)
- Installing IPA with a single realm component sometimes fails (#893187)</changelog>
<changelog author="Martin Kosek &lt;mkosek@redhat.com&gt; - 3.0.0-22.el6" date="1358251200">- Set minimum version of bind-dyndb-ldap to 2.3-2 to pick up missing DNS
  zone SOA serial fix (#894131)
- Stopped named service crashed ipa-upgradeconfig program (#895298)
- ipa-replica-prepare crashed when manipulating DNS zone without SOA
  serial (#894143)
- Use new certmonger locking to prevent NSS database corruption during
  CA subsystem renewal (#883484)
- Set minimum selinux-policy to 3.7.19-193 to allow certmonger to talk
  to dbus in an rpm scriptlet. (related #883484)
- Set minimum vresion of certmonger to 0.61-3 for new locking scheme
  (related #883484)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-23.el6" date="1358769600">- Installer should not connect to 127.0.0.1. (#895561)
- Don't initialize NSS if we don't have to. (#878220)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-24.el6" date="1359028800">- Add certmonger condrestart to server post scriptlet (#903758)
- Make certmonger a (pre) Requires (#903758)
- Add selinux-policy to Requires(pre) to avoid post scriptlet AVCs
  (#903758)
- Set minimum version of pki-ca to 9.0.3-30 and add to Requires(pre)
  to pick up certmonger upgrade fix (#902474)
- Update anonymous access ACI to protect secret attributes (#902481)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-25.el6" date="1359460800">- Filter generated winbind dependencies so the right version of samba
  can be installed. (#905594)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-26.el6_4" date="1360238400">- Significant decrease in migration performance. (#908308)
- ipa-client-install failed to fall over to replica with master down (#909161)
- During Migration - If Schema is unavailable migration fails (#908400)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-26.el6_4.1" date="1360324800">- respin to fix issues with rpmdiff</changelog>
<changelog author="Martin Kosek &lt;mkosek@redhat.com&gt; - 3.0.0-26.el6_4.2" date="1362139200">- Missing LDAP schema attributeType and objectClass after upgrade (#916535)
- ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
  correctly and crash (#917065)</changelog>
<changelog author="Martin Kosek &lt;mkosek@redhat.com&gt; - 3.0.0-26.el6_4.3" date="1368792000">- client installation fails with anonymous binds set to rootdse (#952741)
- LDAP upload CA cert sometimes double-encodes the value (#964128)
- wrong trust argument assigned to renewed certs in ipa cert automatic
  renew (#964130)</changelog>
<changelog author="Martin Kosek &lt;mkosek@redhat.com&gt; - 3.0.0-26.el6_4.4" date="1369051200">- Require 389-ds-base &gt;= 1.2.11.15-14 to pick up fix for CVE-2013-1897
  (#928160)</changelog>

</package>

<package pkgid="3e631447bbe2be7fb0123ed4dd3601626ae9681637fc0494da0e242dccb3a4f5" name="mysql" arch="src">
    <version epoch="0" ver="5.1.69" rel="1.el6_4"/>

<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.47-3" date="1277726400">- Add -p "$mypidfile" to initscript's status call to improve corner cases.
  (Note: can't be fixed in Fedora until 595597 is fixed there.)
Resolves: #596008</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.47-4" date="1279195200">- Add backported patch for CVE-2010-2008 (upstream bug 53804)
Resolves: #614215
- Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
  by just pulling in perl.</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.52-1" date="1292846400">- Update to MySQL 5.1.52, for various fixes described at
  http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  including numerous small security issues
Resolves: #652554
- Sync with current Fedora package; this includes:
- Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
  to ensure they are available when any subset of mysql RPMs are installed,
  per revised packaging guidelines
- Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.61-1" date="1328270400">- Update to 5.1.61, for assorted upstream bugfixes including
  numerous CVEs announced in January 2012
Resolves: #787192</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.61-3" date="1330084800">- Enable innodb plugin, but only on x86 and x86_64 architectures
Resolves: #740224</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.61-4" date="1334923200">- Add backported patch for CVE-2012-2102
Resolves: #812435</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.66-1" date="1351857600">- Update to 5.1.66, for assorted upstream bugfixes including
  CVEs announced in July and October 2012
Resolves: #871814</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.66-2" date="1354622400">- Add backported patch for CVE-2012-5611
Resolves: CVE-2012-5611</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.67-1" date="1358856000">- Update to 5.1.67, for assorted upstream bugfixes including
  CVEs announced in January 2013
Resolves: #901381</changelog>
<changelog author="Tom Lane &lt;tgl@redhat.com&gt; 5.1.69-1" date="1366372800">- Update to 5.1.69, for assorted upstream bugfixes including
  CVEs announced in April 2013
Resolves: #953084</changelog>

</package>

<package pkgid="b49342afe3d898ce79001b7ffa78abb8f13353fcff2c0bc6eb5d1dae0e43f20e" name="qemu-kvm" arch="src">
    <version epoch="2" ver="0.12.1.2" rel="2.355.0.1.el6.centos.2"/>

<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.348.el6" date="1355918400">- kvm-spice-add-new-spice-server-callbacks-to-ui-spice-dis.patch [bz#879559]
- kvm-vmmouse-add-reset-handler.patch [bz#884450]
- kvm-vmmouse-fix-queue_size-field-initialization.patch [bz#884450]
- kvm-hw-vmmouse.c-Disable-vmmouse-after-reboot.patch [bz#884450]
- kvm-block-Fix-vpc-initialization-of-the-Dynamic-Disk-Hea.patch [bz#887897]
- kvm-block-vpc-write-checksum-back-to-footer-after-check.patch [bz#887897]
- Resolves: bz#879559
  (spice with non-qxl vga dumps core)
- Resolves: bz#884450
  (after change mac address of guest, mouse inside guest can not be used after system_reset in qemu)
- Resolves: bz#887897
  (Backport vpc initialization of the Dynamic Disk Header fix)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.349.el6" date="1357646400">- kvm-pc-rhel6-compat-enable-S3-S4-for-6.1-and-lower-machi.patch [bz#886798]
- kvm-e1000-no-need-auto-negotiation-if-link-was-down.patch [bz#890288]
- kvm-rtl8139-preserve-link-state-across-device-reset.patch [bz#890288]
- kvm-pci-assign-Enable-MSIX-on-device-to-match-guest.patch [bz#886410]
- Resolves: bz#886410
  (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)
- Resolves: bz#886798
  (Guest should get S3/S4 state according to machine type to avoid cross migration issue)
- Resolves: bz#890288
  (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
- Resolves: bz#886410
  (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.350.el6" date="1357732800">- kvm-raw-posix-add-raw_get_aio_fd-for-virtio-blk-data-pla.patch [bz#877836]
- kvm-configure-add-CONFIG_VIRTIO_BLK_DATA_PLANE.patch [bz#877836]
- kvm-vhost-make-memory-region-assign-unassign-functions-p.patch [bz#877836]
- kvm-dataplane-add-host-memory-mapping-code.patch [bz#877836]
- kvm-dataplane-add-virtqueue-vring-code.patch [bz#877836]
- kvm-event_notifier-add-event_notifier_set.patch [bz#877836]
- kvm-dataplane-add-event-loop.patch [bz#877836]
- kvm-dataplane-add-Linux-AIO-request-queue.patch [bz#877836]
- kvm-iov-add-iov_discard_front-back-to-remove-data.patch [bz#877836]
- kvm-iov-add-qemu_iovec_concat_iov.patch [bz#877836]
- kvm-virtio-blk-Turn-drive-serial-into-a-qdev-property.patch [bz#877836]
- kvm-virtio-blk-define-VirtIOBlkConf.patch [bz#877836]
- kvm-virtio-blk-add-scsi-on-off-to-VirtIOBlkConf.patch [bz#877836]
- kvm-dataplane-add-virtio-blk-data-plane-code.patch [bz#877836]
- kvm-virtio-blk-add-x-data-plane-on-off-performance-featu.patch [bz#877836]
- kvm-virtio-pci-fix-virtio_pci_set_guest_notifiers-error-.patch [bz#877836]
- Resolves: bz#877836
  (backport virtio-blk data-plane patches)</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.351.el6" date="1357732801">- kvm-qxl-save-qemu_create_displaysurface_from-result.patch [bz#885644]
- Resolves: bz#839832
  (qemu-ga: document selinux policy for read/write of guest files)
- Resolves: bz#885644
  (Memory leak and use after free in qxl_render_update_area_unlocked())</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.352.el6" date="1358337600">- kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
- kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
- kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
- Resolves: bz#895392
  (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.353.el6" date="1358942400">- kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
- kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
- kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
- kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
- kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
- Resolves: bz#869981
  (Cross version migration between different host with spice is broken)
- Resolves: bz#876982
  (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
- Resolves: bz#894995
  (core dump when install windows guest with x-data-plane=on)
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.354.el6" date="1358942401">- spec: add Epoch to old_conflict_ver
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6" date="1358942402">- kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
- kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
- kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
- kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
- kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
- Resolves: bz#884253
  (Allow control of volume from within Windows Guests (Volume Mixture))</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.1" date="1360152000">- kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
- Resolves: bz#907397
  (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.2" date="1362052800">- kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
- kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
- Resolves: bz#910841
  (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])</changelog>

</package>

<package pkgid="e48b106a194f4fac8d60d6a79ebbd6e23a3c1e46d31e4179fb2eb9c8ddc83043" name="device-mapper-multipath" arch="src">
    <version epoch="0" ver="0.4.9" rel="64.el6_4.1"/>

<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.56" date="1335441600">- Modify 0137-RHBZ-799842-change-netapp-config.patch
  * Add pg_init_retries to netapp config
- Add 0144-RHBZ-812832-shutdown-crash.patch
  * kill waiter threads with pthread_cancel() instead of SIGUSR1
- Resolves: bz #799842, #812832</changelog>
<changelog author="Benjmain Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.57" date="1341316800">- Add 0145-RHBZ-831045-realloc-vector.patch
  * fix deleting items from vector, and handle error cases
- Resolves: bz #831045</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.58" date="1346068800">- Modify multipath.conf
  * change "selector" to "path_selector"
- Resolves: bz #827072</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.59" date="1349784000">- Add 0146-RHBZ-595692-fix-cciss-names.patch
  * convert cmdline cciss names to sysfs format
- Add 0147-RHBZ-824243-826610-833124-doc-fix.patch
- Add 0148-RHBZ-619173-storagetek-config.patch
- Add 0149-RHBZ-810788-remove-dups.patch
  * remove duplicates from builtin configs
- Add 0150-RHBZ-810755-update-conf-defaults.patch
- Add 0151-RHBZ-822389-fix-rename.patch
  * make multipath switch names on reload after disabling
    user_friendly_names
- Add 0152-RHBZ-735459-mpath_persist.patch
  * mpathpersist allows persistent reservatoins through multipath devices
- Add 0153-RHBZ-839386-retain_hwhandler.patch
  * add retain_attached_hw_handler default and multipaths config option
- Add 0154-RHBZ-578114-kpartx-retry.patch
  * retry on EBUSY for loop device deletes
- Add 0155-RHBZ-810989-load-modules.patch
  * service multipathd start loads kernel modules
- Add 0156-RHBZ-813963-new-alua-prio.patch
  * combine the "alua" and "tpg_pref" prioritizers
- Add 0157-RHBZ-816717-flush-full-paths.patch
  * make multipath accept full pathnames in -f
- Add 0158-RHBZ-821885-check-blacklist.patch
  * make multipath -c check the device blacklisting
- Add 0159-RHBZ-818367-829065-rdac.patch
- Add 0160-RHBZ-841732-dont-swap-devices.patch
- Resolves: bz #595692, #824243, #826610, #833124, #619173, #810788, #810755
- Resolves: bz #822389, #735459, #839386, #578114, #810989, #813963, #816717
- Resolves: bz #821885, #818367, #829065, #841732</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.60" date="1350129600">- Add 0161-RHBZ-836890-AIX-whitespace.patch
- Add 0162-RHBZ-860748-early-blacklist.patch
  * blacklist devices as soon as possible
- Add 0163-RHBZ-839386-detect-prio.patch
  * add default and device configuration option detect-prio
- Add 0164-RHBZ-839386-netapp-config.patch
- Modify 0153-RHBZ-839386-retain_hwhandler.patch
  * cleanup minor issues
- Resolves: bz #836890, #860748, #839386</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.61" date="1350129601">- Modify 0156-RHBZ-813963-new-alua-prio.patch
  * fix minor porting issue
- Resolves: bz #813963</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.62" date="1351166400">- Add 0165-RHBZ-869253-disable-libdm-failback.patch
  * multipathd and kpartx now set a flag to request device-mapper
    not create devices itself.
- Resolves: bz #869253</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.63" date="1354622400">- Add 0166-RHBZ-880487-make-path-fd-readonly.patch
  * revert change from 0152-RHBZ-735459-mpath_persist.patch, so that
    path fds are again opened O_RDONLY
- Resolves: bz #880487</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.64" date="1358856000">- Add 0167-RHBZ-735459-fix-mpathpersist-fns.patch
  * make reservation_key display correctly in "multipathd show config"
- Resolves: bz #735459</changelog>
<changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.64.el6_4.1" date="1374840000">- Add 0168-RHBZ-988704-fix_cli_resize.patch
  * deal with resize happening while path device is being removed.
- Resolves: bz #988704</changelog>

</package>

<package pkgid="42548add96eda82841b615021d325f9b7fc2dd09ddd4b4cedf60cf665204f6b7" name="kernel" arch="src">
    <version epoch="0" ver="2.6.32" rel="358.18.1.el6"/>

<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.10.1.el6]" date="1368446400">- [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
- [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
- [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
- [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
- [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
- [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
- [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
- [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
- [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
- [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
- [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
- [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
- [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
- [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
- [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
- [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
- [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
- [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
- [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
- [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.11.1.el6]" date="1368619200">- [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.12.1.el6]" date="1370952000">- [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
- [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
- [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
- [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
- [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
- [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
- [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
- [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
- [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
- [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.13.1.el6]" date="1371211200">- [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
- [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
- [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
- [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
- [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
- [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
- [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
- [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [963564 886420]
- [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [963564 886420]
- [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [963564 886420]
- [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
- [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
- [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
- [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
- [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
- [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
- [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
- [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
- [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
- [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
- [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
- [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
- [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
- [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
- [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
- [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
- [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
- [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
- [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
- [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
- [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.14.1.el6]" date="1371470400">- [x86] apic: Add probe() for apic_flat (Prarit Bhargava) [975086 953342]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.15.1.el6]" date="1373371200">- [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
- [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
- [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
- [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
- [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
- [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
- [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.16.1.el6]" date="1374062400">- [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559]
- [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
- [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
- [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.17.1.el6]" date="1374580800">- [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
- [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
- [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.18.1.el6]" date="1375444800">- [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
- [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
- [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
- [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
- [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
- [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
- [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
- [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
- [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
- [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
- [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
- [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
- [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
- [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
- [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
- [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
- [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
- [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
- [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
- [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
- [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
- [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
- [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
- [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
- [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
- [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
- [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
- [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
- [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
- [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
- [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
- [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]</changelog>
<changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt; [2.6.32-358.18.1.el6.centos]" date="1377691200">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="6ac25ede1bcad04e65c42f543bc41503523c69c91bafce37f5e98a96b99d3485" name="glibc" arch="src">
    <version epoch="0" ver="2.12" rel="1.107.el6_4.2"/>

<changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.100" date="1347451200">- Fix gcc_asset failure in _Unwind_SetSpColumn() on ppc64.  (BZ852445)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.101" date="1347883200">- Use __GI_getenv rather than getenv in memcpy ifunc handler (#846342)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.102" date="1349092800">- Add MADV_DONTDUMP/MADV_DODUMP to mman.h (#861167)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.103" date="1349697600">- Don't free memory allocated by mempool allocator (#863453)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.104" date="1350043200">- Change from magic environment variable to existance of
    magic file /etc/sysconfig/32bit_ssse3_mempy_via_32bit_ssse3_memmove
    to trigger change in memcpy behavior. (#846342, #865375)
  - Fix IPTOS_CLASS #define. (#864322)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.105" date="1350216000">- Inline open/close syscalls in #846342/865375 hack (#846342, #865375).</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.106" date="1350475200">- Fix typo in inlined open syscall for #846342/#865375 hack (#866798)</changelog>
<changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.12-1.107" date="1353412800">- Simplify test for magic file to change memcpy behaviour
    and correctly handle encoded return value from inlined
    syscall (#846342, #874642)
  -</changelog>
<changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.12-1.107.1" date="1369137600">- Fix application of SIMD FP exception mask (#929388).</changelog>
<changelog author="Carlos O&apos;Donell &lt;codonell@redhat.com&gt; - 2.12-1.107.2" date="1371643200">- Fix loading of audit libraries when TLS is in use (#970992)</changelog>

</package>

<package pkgid="dbeec138d5284b66d667ec45c8e07548801aa3a5db5955bbaa4313bc6c949def" name="nspr" arch="src">
    <version epoch="0" ver="4.9.5" rel="2.el6_4"/>

<changelog author="elio maldonado &lt;emaldona@redhat.com&gt; - 4.8.9-1" date="1326888000">- Resolves: Bug 744069 - Rebase nspr to 4.8.9 or higher</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.8.9-2" date="1326888001">- Related: Bug 744069 - Avoid %post/un shell invocations and dependencies.</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9-1" date="1330603200">- Resolves: rhbz#799193 - Update to 4.9</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-1" date="1340193600">- Resolves: rhbz#833149 - Update to NSPR_4_9_1_RTM</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-2" date="1340280000">- Resolves: rhbz#833149 - remove unwanted changes to nspr.pc</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-3" date="1340366400">- Resolves: rhbz#833149 - Prevent multilib regressions</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.1-4" date="1342008000">- Related: rhbz#833149 - Update License to MPLv2.0</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.2-1" date="1350043200">- Update to nspr-4.9.2
- Related: rhbz#863286</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.5-1" date="1363953600">- Resolves: Rebase to nspr-4.9.5</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.9.5-2" date="1364212800">- Update to NSPR_4_9_5_RTM
- Resolves: rhbz#927186 - Rebase to nspr-4.9.5
- Add upstream URL for an existing patch per packaging guidelines</changelog>

</package>

<package pkgid="37f1f0442ee41fabb719bc09d94ecb19609b033f82b76b018b1fb0d1f3d369f9" name="virt-viewer" arch="src">
    <version epoch="0" ver="0.5.2" rel="18.el6_4.2"/>

<changelog author="Daniel P. Berrange &lt;berrange@redhat.com&gt; - 0.5.2-11" date="1348488000">- Rebuild for change in spice-gtk soname (rhbz #854318)</changelog>
<changelog author="Daniel P. Berrange &lt;berrange@redhat.com&gt; - 0.5.2-12" date="1350043200">- Use real binary name in help message (rhbz #814150)
- Correctly detect IPv6 any address (rhbz #832121)
- Add --title option to remote-viewer (rhbz #828339)
- Add newline at end of verbose info output (rhbz #822794)</changelog>
<changelog author="Daniel P. Berrange &lt;berrange@redhat.com&gt; - 0.5.2-13" date="1350043201">- Propagate ctrl-alt-del from spice controller (rhbz #865793)</changelog>
<changelog author="Daniel P. Berrange &lt;berrange@redhat.com&gt; - 0.5.2-14" date="1350302400">- Add support for multi-monitors per QXL device (rhbz #842305)</changelog>
<changelog author="Daniel P. Berrange &lt;berrange@redhat.com&gt; - 0.5.2-15" date="1351080000">- Fix crash starting remote-viewer from XPI plugin (rhbz #867459)
- Fix crash connecting with wrong spice password (rhbz #867248)</changelog>
<changelog author="Daniel P. Berrange &lt;berrange@redhat.com&gt; - 0.5.2-16" date="1351080001">- Don't resize to 50x50 when toggling autoresize (rhbz #856610)
- Allow zooming beyond normal size (rhbz #856678)
- Allow changing resolution when in fullsreen (rhbz #864929)</changelog>
<changelog author="Daniel P. Berrange &lt;berrange@redhat.com&gt; - 0.5.2-17" date="1354622400">- Fix handling of AltGr+V in non-us keyboard layouts (rhbz #860669)</changelog>
<changelog author="Daniel P. Berrange &lt;berrange@redhat.com&gt; - 0.5.2-18" date="1355227200">- Fix resolution when switching to fullscreen (rhbz #881020)
- Ensure correct file extension on screenshots (rhbz #875126)</changelog>
<changelog author="Daniel P. Berrange &lt;berrange@redhat.com&gt; - 0.5.2-18.el6_4.1" date="1363176000">- Fix window resolution in full screen (rhbz #918570)</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.5.2-18.el6_4.2" date="1363780800">- Fix fullscreen resolution occasionally still being wrong (rhbz #918570)</changelog>

</package>

<package pkgid="96c32bcbbdc7994ca550aedd3dd219c7e75973e45c6dc155d119036e8ef6496e" name="axis" arch="src">
    <version epoch="0" ver="1.2.1" rel="7.3.el6_3"/>

<changelog author="Fedora Release Engineering &lt;rel-eng@fedoraproject.org&gt; - 0:1.2.1-3jpp.8" date="1203422400">- Autorebuild for GCC 4.3</changelog>
<changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; 0:1.2.1-3jpp.9" date="1212667200">- Add javac.source=1.4 to the ant command for the build</changelog>
<changelog author="Tom &quot;spot&quot; Callaway &lt;tcallawa@redhat.com&gt; 0:1.2.1-4" date="1215604800">- drop repotag
- fix license tag</changelog>
<changelog author="Permaine Cheung &lt;pcheung@redhat.com&gt; 0:1.2.1-4.1" date="1222862400">- Specify source=1.4 for javac</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.1-5.1" date="1235390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.1-6.1" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Dan Horak &lt;dan[at]danny.cz&gt; 0:1.2.1-7" date="1253880000">- Backport fix for building with java 1.6, synced from F-11 branch (#511480, #523203)</changelog>
<changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:1.2.1-7.1" date="1263038400">- Drop gcj support.</changelog>
<changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:1.2.1-7.2" date="1265716800">- Use apache-tomcat-apis instead of tomcat5-*.</changelog>
<changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.1-7.3" date="1358769600">- Add missing connection hostname check against X.509 certificate name
- Resolves: CVE-2012-5784</changelog>

</package>

<package pkgid="74dc6ca42045927fb1b8bfa1b4ad35c5449a095a1c7e52637826614a91655857" name="initscripts" arch="src">
    <version epoch="0" ver="9.03.38" rel="1.el6.centos.1"/>

<changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; 9.03.31-1" date="1335528000">- set NIS domain (#704919)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.32-1" date="1349697600">- check an IP address for existence in ifup-alias
- remount /dev/shm in sysinit to apply attributes from fstab
- sets BONDING_OPTS before interface is brougth up and checks if it is not already added
- Add support for setting random bridge options via BRIDGING_OPTS
- use vgchange -aay in rc.sysinit and netfs init script
- script should not kill itself during shutdown
- fix the NIS domain setting
- be less strict about VLAN name
- clarification of work with white spaces in crypttab manpage
- re-read sysctl values for VLANs on ifup
- pass useful arguments to halt.local
- start serial console when we return from runlevel1
- move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network.
- don't accidentally match other bonding devices
- add usage stanzas for tty.conf and serial.conf
- rename_device: skip VLAN=yes configuration files
- allow duplicate address dectection to be disabled</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.33-1" date="1352376000">- apply BONDING_OPT on ifup of master (#874030)</changelog>
<changelog author="Václav Pavlín &lt;vpavlin@redhat.com&gt; - 9.03.34-1" date="1352980800">- there should be crypttab instead of crypptab in man page (#870025)
- sysconfig.txt advised saslauthd -a instad of -v (#869075)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.35-1" date="1353672000">- fix typo in ifup-aliases duplicate check (#879243)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.36-1" date="1354104000">- improve duplicate ip address check in ifup-aliases (#880684)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.37-1" date="1355400000">- don't apply BONDING_OPTS on device with active slaves (#885235)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.38-1" date="1357732800">- call ip link up on master after slaves are up (#893395)</changelog>
<changelog author="Lukáš Nykrýn &lt;lnykryn@redhat.com&gt; - 9.03.38-1.1" date="1362657600">- fix greps to correctly handle comments and quotation (#919086)</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 9.03.38-1.1.el6.centos" date="1363608000">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="ae8026063f273636fcab9947c0711be9c53ea6c2e73f574f2408025e79cf641d" name="libvirt" arch="src">
    <version epoch="0" ver="0.10.2" rel="18.el6_4.5"/>

<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-14" date="1357214400">- util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
- util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
- util: Fix botched check for new netlink request filters (rhbz#889319)
- blockjob: Fix memleak that prevented block pivot (rhbz#888426)
- sanlock: Chown lease files as well (rhbz#820173)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-15" date="1357732800">- snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
- snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
- snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
- snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
- util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
- qemu: Add a hash table for the shared disks (rhbz#878578)
- docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
- conf: Parse and format the new XML (rhbz#878578)
- qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
- qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
- qemu: Relax hard RSS limit (rhbz#891653)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-16" date="1358337600">- qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
- Add RESUME event listener to qemu monitor. (rhbz#894085)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-17" date="1358942400">- storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
- qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
- qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18" date="1359374400">- rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
- spec: Disable libssh2 support (rhbz#513363)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.1" date="1363348800">- xen: Resolve resource leak with 'cpuset' (rhbz#908836)
- schema: Make the cpuset type reusable across schema files (rhbz#908836)
- schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
- conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
- capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
- capabilities: Add additional data to the NUMA topology info (rhbz#908836)
- test: Add support for thread and core information for the test driver (rhbz#908836)
- xen: Initialize variable before using (rhbz#908836)
- xen: Actually fix the uninitialized variable (rhbz#908836)
- spice: Properly reserve tlsPort when no port specified (rhbz#913624)
- qemu_agent: Ignore expected EOFs (rhbz#915344)
- qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
- qemu: Destroy domain on decompression binary error (rhbz#915347)
- qemu: Run lzop with '--ignore-warn' (rhbz#915347)
- Don't ignore return value of qemuProcessKill (rhbz#915353)
- Fix race condition when destroying guests (rhbz#915353)
- Log warning if storage magic matches, but version does not (rhbz#915354)
- Add lots of debugging to storage file probing code (rhbz#915354)
- Fix probing of QED file format (rhbz#915354)
- util: Add virendian.h macros (rhbz#915354)
- util: Use new virendian.h macros (rhbz#915354)
- storage: Rearrange functions (rhbz#915354)
- storage: Prepare for refactoring (rhbz#915354)
- storage: Refactor metadata lookup (rhbz#915354)
- storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
- storage: Test backing chain traversal (rhbz#915354)
- qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
- python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
- qemu: Add checking in helpers for sgio setting (rhbz#919504)
- qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
- qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
- qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
- qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
- qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
- qemu: Fix the memory leak (rhbz#919504)
- Fix crash changing CDROM media (rhbz#919504)
- qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
- qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
- Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
- util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
- qemu: Fix QMP detection of QXL graphics (rhbz#915352)
- qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
- conf: Add optional attribte primary to video &lt;model&gt; element (rhbz#915352)
- qemu: Use newer -device video device in qemu commandline (rhbz#915352)
- tests: Add one -device video device testcase (rhbz#915352)
- qemu: Detect VGA_QXL capability correctly (rhbz#915352)
- qemu: Support ram bar size for qxl devices (rhbz#915352)
- conf: Don't leak 'primary' video property on error (rhbz#915352)
- storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
- storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
- storage: Cleanup logical volume creation code (rhbz#918754)
- docs: Clarify semantics of sparse storage volumes (rhbz#918754)
- storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
- storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
- interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
- locking: Resolve resource leaks on non error path (rhbz#922095)
- selinux: Resolve resource leak using the default disk label (rhbz#922095)
- storage: Resolve resource leaks with cmd processing (rhbz#922095)
- domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
- qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
- storage: Need to add virCommandFree() (rhbz#922095)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.2" date="1363608000">- qemu: Fix startupPolicy regression (rhbz#915349)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.3" date="1364558400">- util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
- security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
- security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
- libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
- security_manager.c: Append seclabel iff generated (rhbz#928879)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.4" date="1365854400">- rpc: Fix client crash when server drops connection (rhbz#950601)
- storage: Fix volume cloning for logical volume. (rhbz#950604)
- qemu: Allow migration over IPv6 (rhbz#950597)
- qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
- remote: Don't call NULL closeFreeCallback (rhbz#950599)
- libvirt: Increase connection reference count for callbacks (rhbz#950599)
- virsh: Unregister the connection close notifier upon termination (rhbz#950599)
- virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
- virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
- rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
- tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
- Avoid use of free'd memory in auto destroy callback (rhbz#951073)
- Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.5" date="1367582400">- daemon: Fix leak after listing volumes (CVE-2013-1962)
- Don't try to add non-existant devices to ACL (rhbz#958837)
- Avoid spamming logs with cgroups warnings (rhbz#958837)
- audit: Properly encode device path in cgroup audit (rhbz#958839)</changelog>

</package>

<package pkgid="160b9d3aad3fe22cb8f4c5342f93c28f04cb30fc0b7b9998cbf48321930256f0" name="yelp" arch="src">
    <version epoch="0" ver="2.28.1" rel="17.el6_3"/>

<changelog author="Matthias Clasen &lt;mclasen@redhatcom&gt; 2.28.1-3" date="1270123200">- Fix loading the TOC with xulrunner 1.9.2
  Resolves: #577331</changelog>
<changelog author="Martin Stransky &lt;stransky@redhatcom&gt; 2.28.1-4" date="1271419200">- regenerated xulrunner patch</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.28.1-5" date="1274702400">- Require gnome-user-docs so that Help-&gt;Contents works (RH bug #580002).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.28.1-6" date="1275998400">- Crash on startup in or_IN locale (RH bug #578094).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.28.1-7" date="1276257600">- Translation updates for Red Hat Supported Languages (RH bug #575674).
- This also includes the fix for the or_IN crasher (RH bug #578094).</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 2.28.1-8" date="1282910400">- Rebuild against newer gecko</changelog>
<changelog author="Martin Stransky &lt;stransky@redhatcom&gt; 2.28.1-10" date="1317038400">- Rebuild against newer gecko</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 2.28.1-13" date="1327838400">- Rebuild against newer gecko
- Fixed gecko-2.0 patch</changelog>
<changelog author="Martin Stransky &lt;stransky@redhatcom&gt; 2.28.1-15" date="1351771200">- Build fixes for gecko 17</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 2.28.1-17" date="1357819200">- Rebuild against gecko 17.0.2</changelog>

</package>

<package pkgid="05cc2498e403bc9e161c53b8a073db757256b7988ec96d9e2a81c781fbc407a6" name="java-1.6.0-openjdk" arch="src">
    <version epoch="1" ver="1.6.0.0" rel="1.57.1.11.9.el6_4"/>

<changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 1:1.6.0.0-1.45.1.11.1" date="1337947200">- Resolves: rhbz#804632
- Tweak java-1.6.0-openjdk-jstack.patch stack to remove two uses of sprintf
  to make it work against systemtap 1.7.</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.46.1.11.3" date="1339156800">- Updated to IcedTea6 1.11.3
- Removed upstreamed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added to patch
- Resolves: rhbz#828752</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.47.1.11.3" date="1339243200">- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
  - packages added also to package.definition
- Resolves: rhbz#828752</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.48.1.11.3" date="1339502400">- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#828752</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.51.1.11.6" date="1359979200">- Updated to icedtea6 1.11.6
- Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
- Access gnome bridge jar is forced to have 644 permissions
- Resolves: rhbz#906708</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.53.1.11.6" date="1360152000">- added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  to remove   6664509 and 7201064 from 1.11.6 tarball
- Resolves: rhbz#906708</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.54.1.11.6" date="1360152001">- removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
- added patch8:   7201064.patch to be reverted
- added patch9:   8005615.patch to fix the 6664509.patch
- Resolves: rhbz#906708</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.34.1.11.8" date="1360929600">- Updated to icedtea6 1.11.8
- Removed patch9   7201064.patch
- Removed patch10   8005615.patch
- Removed  not-applied patch 6664509.patch
- Removed mauve as deadly outdated and run on QA
  -  jtreg kept, useless, but working
- Resolves: rhbz#911525</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.6.0.0-1.56.1.11.8" date="1361188800">- Rebuild with updated sources
- Resolves: rhbz#911525</changelog>
<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1:1.6.0.0-1.57.1.11.9" date="1362398400">- Updated to icedtea6 1.11.9
- Resolves: rhbz#917179</changelog>

</package>

<package pkgid="904d1260a79a533b0beea283cb1f027a92e35551deebb2fe4019b1559f766283" name="coreutils" arch="src">
    <version epoch="0" ver="8.4" rel="19.el6_4.2"/>

<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-12" date="1296648000">- document that dd's iflag=fulblock prevents dd's oflag=direct
 automatic turn off when reading via pipe(#614605)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-13" date="1299758400">- fix possible uninitalized variables usage caused by i18n
  patch(#683799)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-14" date="1313064000">- tweak documentation of tail --sleep-interval (#725618)
- prevent build failure on system with mock&gt;=1.1.9 (#691292)
- su: fix shell suspend in tcsh (#703712)
- ls: use acl_extended_file_nofollow() to prevent unnecessary
  autofs mounts(#720325)
- fix cp -Z functionality if the destination exists(#715557)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-15" date="1313582400">- ensure that we have libacl-devel with support for
  acl_extened_file_nofollow()</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-16" date="1317816000">- improve the acl_extended_file_nofollow() fix to prevent
 ls -L regression(#720325)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-17" date="1329393600">- fix memory leak in ls -l (#751974)
- document difference between ls -lZ and ls -Zl (#771843)
- fix various i18n patch related issues in pr (#772172)
- df should display target device information when
  a symbolic link is specified as a parameter(#766461)
- su no longer hangs when a program set itself to ignore
  SIG_CHLD signal, and fork a child to exec su(#754029)
- stat recognizes few new filesystems, tail -f recognizes
  FhGFS and GPFS as remote (disables inotify) (#769874)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-18" date="1330948800">- add support for cleaning special bits on directories
  via 5+ digits octals (#691466)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-19" date="1334664000">- fix the tcsh colorls.csh behaviour in non-interactive
  mode (#804604)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-19.1" date="1363953600">- revert to polling for unknown filesystems, update
  known fs for tail and stat based on coreutils-8.21 (#924711)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-19.2" date="1368619200">- fix parsing of field regression in sort command
  (introduced between RHEL5 and RHEL6 upstream) (#963327)</changelog>

</package>

<package pkgid="83ab2a8e64d72452e170bc2acc4c600e848c97e2319e4ea4a97da342da395ed1" name="scl-utils" arch="src">
    <version epoch="0" ver="20120927" rel="2.el6_4.6"/>

<changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 20120613-1" date="1340366400">- update to 20120613 (#855999)</changelog>
<changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 20120613-2" date="1349352000">- backport patch from upstream to correctly process buildroot
  after installation (compress man pages, etc.) (#844028)</changelog>
<changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 20120927-1" date="1350043200">- update to 20120927 (#855999)</changelog>
<changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 20120927-2" date="1352721600">- fix usage of freed variable and umask for temp files (#874628)</changelog>
<changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-2.1" date="1367236800">- revert the umask patch, as per #953462 and #961422</changelog>
<changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-2.2" date="1367236801">- prepare for sync with RHEL5 version</changelog>
<changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-2.3" date="1367236802">- Allow overriding values in macro scl_package (#960556)
- Delete redundant argument from check_asprintf (#961424)
- Enable all collections given as arguments, not just the first one (#961430)
- Prevent collections to be enabled multiple times (#961429)</changelog>
<changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-2.4" date="1367236803">- rename scl-utils-free.patch to match the patch naming scheme</changelog>
<changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-2.5" date="1367236804">- use absolute path when calling scl_enabled</changelog>
<changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-2.6" date="1368792000">- run enable scriptlet only if the collection is not enabled (#976551)</changelog>

</package>

<package pkgid="ca2f62c36d46783a4e24848caffe815206126b162972fd24ec534dbe09ee5c35" name="nss-pam-ldapd" arch="src">
    <version epoch="0" ver="0.7.5" rel="18.1.el6_4"/>

<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.7.5-10" date="1315828800">- update the validnames changes to the self-tests so that their expectations
  match the modified defaults (#737496)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-11" date="1317729600">- do not overflow big UID values, use explicit base when converting UIDs
  and GIDs to integer types (#741362)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-12" date="1317729601">- patch the nslcd.conf manual page with the "dns:DOMAIN" syntax info (#730309)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-13" date="1318939200">- punt on negative UID/GID (#741362)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-14" date="1318939201">- run the config file upgrade in %posttrans to avoid problems on multilib
  (#706454)
- convert UID to long long on all arches to catch negative values (#741362)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-15" date="1324382400">- Do not check connection before adding a new search (#769289)</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-16" date="1349784000">- Do not print a "Broken Pipe" error message after requesting a large group
  (#791042)
- Fix a typo in the disconnection logic (#747281), patch by Martin Poole</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-17" date="1349784001">- include LDAP_ADMINLIMIT_EXCEEDED in the disconnection logic patch
- Related: rhbz#747281</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-18" date="1353931200">- Correct the patch to silent a warning after retrieving a large group
- Resolves: #791042</changelog>
<changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; 0.7.5-18.1" date="1361275200">- Apply upstream r1926 to resolve FD_SET array index error
- Resolves: rhbz#915361</changelog>

</package>

<package pkgid="1ab744d63755ea2c81c11224066dba7ca6daecef1bfebaa634cd9f33d5fc5524" name="kernel" arch="src">
    <version epoch="0" ver="2.6.32" rel="358.11.1.el6"/>

<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.3.1.el6]" date="1363003200">- [net] netfilter: improve out-of-sync situation in TCP tracking (Flavio Leitner) [917690 629857]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.4.1.el6]" date="1363608000">- [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [921150 913704]
- [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921961 896224]
- [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921961 896224]
- [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920268 916324]
- [powerpc] pseries: Fix partition migration hang in stop_topology_update (Steve Best) [921963 910597]
- [infiniband] qib: correction for faulty sparse warning correction (Jay Fenlason) [922154 901701]
- [usb] io_ti: Fix NULL dereference in chase_port() (Nikola Pajkovsky) [916198 916200] {CVE-2013-1774}
- [net] bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Nikola Pajkovsky) [914690 914691] {CVE-2013-0349}
- [char] tty: set_termios/set_termiox should not return -EINTR (Oleg Nesterov) [921145 904907]
- [netdrv] ehea: fix VLAN support (Steve Best) [921535 911359]
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919388 919389] {CVE-2013-1826}
- [net] dccp: check ccid before NULL poiter dereference (Weiping Pan) [919187 919188] {CVE-2013-1827}
- [mm] tmpfs: fix use-after-free of mempolicy object (Nikola Pajkovsky) [915714 915715] {CVE-2013-1767}
- [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916957 915135]
- [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915583 876600]
- [fs] cifs: after upcalling for krb5 creds, invalidate key rather than revoking it (Niels de Vos) [912452 885899]
- [fs] cifs: tmp_key_invalidate() should not set key-&gt;expiry to 0 (Niels de Vos) [912452 885899]
- [block] disable discard request merge temporarily (Mike Snitzer) [911475 907844]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.5.1.el6]" date="1364040000">- [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [921958 883905]
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_auth() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922386 922387] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922386 922387] {CVE-2012-6546}
- [fs] nls: improve UTF8 -&gt; UTF16 string conversion routine (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
- [fs] fat: Fix stat-&gt;f_namelen (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
- [netdrv] tun: fix ioctl() based info leaks (Thomas Graf) [922350 922351] {CVE-2012-6547}
- [virt] x86: Add a check to catch Xen emulation of Hyper-V (Andrew Jones) [923204 918239]
- [fs] cifs: fix expand_dfs_referral (Sachin Prabhu) [923098 902492]
- [fs] cifs: factor smb_vol allocation out of cifs_setup_volume_info (Sachin Prabhu) [923098 902492]
- [fs] cifs: have cifs_cleanup_volume_info not take a double pointer (Sachin Prabhu) [923098 902492]
- [fs] nfs: Dont allow NFS silly-renamed files to be deleted, no signal (Dave Wysochanski) [920266 905095]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.6.1.el6]" date="1364558400">- [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
- [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
- [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
- [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
- [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
- [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
- [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
- [net] sunrpc: Get rid of the redundant xprt-&gt;shutdown bit field (J. Bruce Fields) [915579 893584]
- [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
- [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
- [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
- [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
- [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
- [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
- [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
- [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
- [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.7.1.el6]" date="1365508800">- [infiniband] ipoib: Add missing locking when CM object is deleted (Doug Ledford) [928817 913645]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.8.1.el6]" date="1367668800">- [fs] raw: don't call set_blocksize when not changing the blocksize (Jeff Moyer) [951406 909482]
- [x86] Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [952570 876275]
- [netdrv] ixgbe: Only set gso_type to SKB_GSO_TCPV4 as RSC does not support IPv6 (Michael S. Tsirkin) [927292 908196]
- [netdrv] bnx2x: set gso_type (Michael S. Tsirkin) [927292 908196]
- [netdrv] qlcnic: set gso_type (Michael S. Tsirkin) [927292 908196]
- [netdrv] ixgbe: fix gso type (Michael S. Tsirkin) [927292 908196]
- [fs] gfs2: Allocate reservation structure before rename and link (Robert S Peterson) [924847 922999]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.9.1.el6]" date="1367928000">- [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
- [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
- [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
- [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
- [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
- [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
- [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
- [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
- [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
- [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
- [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
- [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
- [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
- [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
- [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
- [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
- [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
- [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
- [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
- [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
- [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
- [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
- [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
- [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
- [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
- [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
- [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
- [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
- [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
- [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
- [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.10.1.el6]" date="1368446400">- [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
- [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
- [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
- [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
- [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
- [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
- [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
- [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
- [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
- [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
- [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
- [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
- [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
- [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
- [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
- [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
- [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
- [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
- [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
- [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.11.1.el6]" date="1368619200">- [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [2.6.32-358.11.1.el6.centos]" date="1370952000">- CentOS Branding</changelog>

</package>

<package pkgid="64debf22fe3655502f1afa6e27451b0de83a3a8ac922470ce5694087f656c82f" name="dbus-glib" arch="src">
    <version epoch="0" ver="0.86" rel="6.el6"/>

<changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.82-1" date="1247745600">- New upstream 0.82
- Remove mclasen accidental commit of CFLAGS="-O0 -g3"</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.82-2" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.82-3" date="1263556800">- Add ListActivatableNames to dbus-bus-introspect.xml to help tracker build</changelog>
<changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.84-1" date="1264593600">- New upstream
  Has introspect.xml internally, drop it from here</changelog>
<changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.84-2" date="1266235200">- Add patch to avoid assertions when setting a GError that
  includes a '-' in the enumeration value.  Should fix #528897</changelog>
<changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.84-3" date="1267531200">- Revert previous broken patch for error names, add better fix</changelog>
<changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.86-1" date="1268913600">- New upstream
  Drop upstreamed patch</changelog>
<changelog author="Colin Walters &lt;walters@redhat.com&gt; - 0.86-3" date="1272456000">- Sync with F-13 (bugfix only release)
- Add patch to validate property access
  Resolves: #585396</changelog>
<changelog author="Colin Walters &lt;walters@redhat.com&gt; - 0.86-5" date="1279108800">- Add patch from upstream to fix shadow properties
  Resolves: #609628</changelog>
<changelog author="Colin Walters &lt;walters@redhat.com&gt; - 0.86-6" date="1329739200">- Add patch from upstream for CVE-2013-0292
  Resolves: #913077</changelog>

</package>

<package pkgid="475bee7453e0c5a686059d4b7c386e0c4ebc3c9886465869222db981ad88297d" name="icedtea-web" arch="src">
    <version epoch="0" ver="1.2.3" rel="2.el6_4"/>

<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.1.4-1" date="1319803200">- Updated to 1.1.4
- Resolves: rhbz#744739</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2-0.1.2pre" date="1329307200">- Updated to 1.2pre snapshot</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2-1" date="1330948800">- Updated to 1.2 proper</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.1-1" date="1343217600">- Updated to 1.2.1
- Resolves: CVE-2012-3422
- Resolves: CVE-2012-3423</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.2-1" date="1351771200">- Updated to 1.2.2
- Resolves: CVE-2012-4540</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.2-2" date="1354536000">- Build with OpenJDK7
- Import fix for PR1161 (needed for proper functionality with OpenJDK7)</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.2-3" date="1354881600">- Fixed provides and obsolates
- Resolves: rhbz#838084.</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.3-0" date="1365681600">- Updated to latest ustream release of 1.2 branch - 1.2.3
 - Security Updates
  - CVE-2013-1927, RH884705 - fixed gifar vulnerability
  - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
 - Common
  - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
 - Plugin
  - PR1157: Applets can hang browser after fatal exception
- Removed upstreamed patch 0- icedtea-web-PR1161.patch
- Resolves: rhbz#949094</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.3-1" date="1365768000">- fixed postun - removal of alternatives for plugin restricted to 
  (correct) removal process only
- fixed date in changelog previous entry
- Resolves: rhbz#949094</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.3-2" date="1365768001">- Added (temporally!) posttrans forcing creation of symlinks
  - should be removed next release
- Resolves: rhbz#949094</changelog>

</package>

<package pkgid="8f04e5f354b52b020108016c1eb6fb32427c0eb778b1b9c6a52a7ac88d479831" name="qemu-kvm" arch="src">
    <version epoch="2" ver="0.12.1.2" rel="2.355.0.1.el6.centos.6"/>

<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.353.el6" date="1358942400">- kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
- kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
- kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
- kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
- kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
- Resolves: bz#869981
  (Cross version migration between different host with spice is broken)
- Resolves: bz#876982
  (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
- Resolves: bz#894995
  (core dump when install windows guest with x-data-plane=on)
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.354.el6" date="1358942401">- spec: add Epoch to old_conflict_ver
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6" date="1358942402">- kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
- kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
- kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
- kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
- kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
- Resolves: bz#884253
  (Allow control of volume from within Windows Guests (Volume Mixture))</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.1" date="1360152000">- kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
- Resolves: bz#907397
  (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.2" date="1362052800">- kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
- kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
- Resolves: bz#910841
  (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.3" date="1365595200">- kvm-Fix-regression-introduced-by-machine-accel.patch [bz#929105]
- Resolves: bz#929105
  ([RHEL6.4] [regression] qemu-kvm does not enable ioeventfd)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.4" date="1367582400">- kvm-virtio-balloon-fix-integer-overflow-in-BALLOON_CHANG.patch [bz#958750]
- Resolves: bz#958750
  (QMP event shows incorrect balloon value when balloon size is grater than or equal to 4G)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.5" date="1369310400">- kvm-e1000-fix-link-down-handling-with-auto-negotiation.patch [bz#907716]
- kvm-e1000-unbreak-the-guest-network-when-migration-to-RH.patch [bz#907716]
- kvm-reimplement-error_setg-and-error_setg_errno-for-RHEL.patch [bz#957056]
- kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch [bz#957056]
- kvm-qga-distinguish-binary-modes-in-guest_file_open_mode.patch [bz#957056]
- kvm-qga-unlink-just-created-guest-file-if-fchmod-or-fdop.patch [bz#957056]
- Resolves: bz#907716
  (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
- Resolves: bz#957056
  (CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode [rhel-6.4.z])</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.6" date="1373457600">- kvm-qga-cast-to-int-for-DWORD-type.patch [bz#980758]
- kvm-qga-remove-undefined-behavior-in-ga_install_service.patch [bz#980758]
- kvm-qga-diagnostic-output-should-go-to-stderr.patch [bz#980758]
- kvm-qa_install_service-nest-error-paths-more-idiomatically.patch [bz#980758]
- kvm-qga-escape-cmdline-args-when-registering-win32-service.patch [bz#980758]
- Resolves: bz#980758
  (qemu-kvm: CVE-2013-2231 qemu: qemu-ga win32 service unquoted search path [rhel-6.4.z])</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; qemu-kvm-0.12.1.2-2.355.0.1.el6.centos.6" date="1374494400">- increment the version due to centos bug #6297</changelog>

</package>

<package pkgid="150d1b165a902624c9bb8bd108a7c6c2f15e0de4640ce33b236bb214f9f3014c" name="tomcat6" arch="src">
    <version epoch="0" ver="6.0.24" rel="57.el6_4"/>

<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-47" date="1352376000">- Resolves: rhbz 857066 apache bz 48843 ArrayIndexOutofBounds</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-48" date="1355227200">- Resolves: rhbz 576540 - regression init script in the 
- wrong place. Changed _initrddir definition herein to point to the 
- right place.</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-49" date="1358337600">- Related: rhbz 576540
- Javadoc is not being generated correctly by the build</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-50" date="1360584000">- Resolves: rhbz 882010 CVE-2012-3439 CVE-2012-5885 CVE-2012-5886 CVE-2012-5887
- three DIGEST authentication issues
- Resolves: rhbz 883692 CVE-2012-4534 Denial of service when using
- SSL NIO sendfile
- Resolves: rhbz 883705 CVE-2012-3546 Bypass of Realm security constraints</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-52" date="1362139200">- Related: rhbz 882010 rhbz 883692 rhbz 883705
- Javadoc generation did not work. Using targetrhel-6.4.Z-noarch-candidate
- to avoid building on ppc64, ppc, and x390x.</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-53" date="1367409600">- Resolves: rhbz#955976 CVE-2013-1976 improper TOMCAT_LOG
- management in init script</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-54" date="1367841600">- Resolves: rhbz#956771 Related: CVE-2012-3439 digest 
- authentication broken after errata for cve-2012-3439
- patch for 3439 corrected</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-55" date="1368619200">- Related: rhbz#955976 CVE-2013-1976. Changed log location
- so only root can use it. Touching TOMCAT_LOG is no longer
- required</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-56" date="1370952000">- Resolves: CVE-2013-2067 session fixation</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-57" date="1371124800">- Related: CVE-2013-2067 Session fixation</changelog>

</package>

<package pkgid="2fe98c1bcac7c5998e338cdaf46bbe732615aea52192f8df64552f75345b87e8" name="kernel" arch="src">
    <version epoch="0" ver="2.6.32" rel="358.2.1.el6"/>

<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-352.el6]" date="1357214400">- [md] raid10: Do not call md_raid10_unplug_device while holding spinlock (Jonathan E Brassow) [886658]
- [md] dm-thin: commit before gathering status (Mike Snitzer) [882426]
- [md] dm-thin: cleanup dead code (Mike Snitzer) [882426]
- [md] dm-thin: rename cell_defer_except to cell_defer_no_holder (Mike Snitzer) [882426]
- [md] dm-thin: emit "ignore_discard" in status if discards are disabled (Mike Snitzer) [882426]
- [md] dm-thin: wake the worker when a discard is prepared (Mike Snitzer) [882426]
- [md] dm-thin: fix race between simultaneous io and discards to same block (Mike Snitzer) [882426]
- [md] dm-thin: replace calls to cell_release_singleton with cell_defer_except (Mike Snitzer) [882426]
- [mm] Revert: ksm: numa awareness sysfs knob (Jarod Wilson) [743643]
- [fs] gfs2: Reset rd_last_alloc when it reaches the end of the rgrp (Robert S Peterson) [882381]
- [fs] gfs2: Stop looking for free blocks at end of rgrp (Robert S Peterson) [882381]
- [drm] nouveau: cache ramcfg value for RAM_RESTRICT_ZM_GROUP (Ben Skeggs) [878384]
- [drm] nouveau: disable use of tesla/fermi copy engines for buffer moves (Ben Skeggs) [878384]
- [fs] xfs: fix direct IO nested transaction deadlock (Dave Chinner) [876426]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-353.el6]" date="1357560000">- [mm] pageattr: prevent PSE and GLOABL leftovers to confuse pmd/pte_present and pmd_huge (Andrea Arcangeli) [878877]
- [fs] gfs2: Fix FITRIM argument handling (Abhijith Das) [866932]
- [fs] gfs2: Require user to provide argument for FITRIM (Abhijith Das) [866932]
- [fs] exec: do not leave bprm-&gt;interp on stack (Josh Poimboeuf) [880146] {CVE-2012-4530}
- [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880146] {CVE-2012-4530}
- [fs] btrfs: close exclusive opens with close_bdev_exclusive() (Zach Brown) [874505]
- [kernel] sched_rt: Fix hang where umount is stuck in synchronize_sched_expedited (Larry Woodman) [814768]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-354.el6]" date="1358164800">- [char] ipmi: add new kernel options to prevent automatic ipmi init (Tony Camuso) [877177]
- [usb] xhci: New system added for Compliance Mode Patch on SN65LVPE502CP (Don Zickus) [856709]
- [x86] quirks: Mark Haswell HDMI Audio as unsupported (Prarit Bhargava) [883428]
- [scsi] bfa: fix crash in bfa_cb_ioim_done when performing failover/failback tests (Vijay Guvva) [878618]
- [fs] autofs4: Fix sparse warning: context imbalance in autofs4_d_automount() different lock contexts for basic block (Ian Kent) [876795]
- [fs] jbd, jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [886318]
- [scsi] qla4xxx: v5.03.00.00.06.04-k2 (Rob Evers) [890727]
- [scsi] qla4xxx: Correct the validation to check in get_sys_info mailbox (Rob Evers) [890727]
- [scsi] qla4xxx: Pass correct function param to qla4_8xxx_rd_direct (Rob Evers) [890727]
- [scsi] qla4xxx: v5.03.00.00.06.04-k1 (Chad Dupuis) [878048]
- [scsi] qla4xxx: update copyrights in LICENSE.qla4xxx (Chad Dupuis) [878048]
- [scsi] qla4xxx: Disable generating pause frames for ISP83XX (Chad Dupuis) [878048]
- [scsi] qla4xxx: Fix double clearing of risc_intr for ISP83XX (Chad Dupuis) [878048]
- [scsi] qla4xxx: IDC implementation for Loopback (Chad Dupuis) [878048]
- [scsi] qla4xxx: Fix panic while rmmod (Chad Dupuis) [878048]
- [scsi] qla4xxx: Fail probe_adapter if IRQ allocation fails (Chad Dupuis) [878048]
- [scsi] qla4xxx: Prevent MSI/MSI-X falling back to INTx for ISP82XX (Chad Dupuis) [878048]
- [scsi] qla4xxx: Update idc reg in case of PCI AER (Chad Dupuis) [878048]
- [scsi] qla4xxx: Fix double IDC locking in qla4_8xxx_error_recovery (Chad Dupuis) [878048]
- [scsi] qla4xxx: Clear interrupt while unloading driver for ISP83XX (Chad Dupuis) [878048]
- [scsi] qla4xxx: Print correct IDC version (Chad Dupuis) [878048]
- [scsi] qla4xxx: Added new mbox cmd to pass driver version to FW (Chad Dupuis) [878048]
- [scsi] qla4xxx: fix various printk and comment typos (Chad Dupuis) [878048]
- [fs] autofs4: use simple_empty() for empty directory check (Ian Kent) [876795]
- [fs] autofs4: dont clear DCACHE_NEED_AUTOMOUNT on rootless mount (Ian Kent) [876795]
- [fs] gfs2: Fix race in gfs2_rs_alloc (Abhijith Das) [878476]
- [fs] xfs: fix broken error handling in xfs_vm_writepage (Dave Chinner) [874539]
- [drm] radeon: force rn50 chip to always report connected on analog output (Jerome Glisse) [892723]
- [sound] alsa: add support for Teradici 2200 host card audio (Jaroslav Kysela) [890581]
- [md] dm-raid: Fix RAID10's check for sufficient redundancy (Jonathan E Brassow) [889358]
- [scsi] hpsa: update version number to 3.2.0 (Tomas Henzl) [891935]
- [netdrv] cxgb4: Initialize data structures before using (Steve Best) [885756]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-355.el6]" date="1358251200">- [netdrv] qlge: remove NETIF_F_TSO6 flag (Amerigo Wang) [891839]
- [fs] ext3: Remove BKL from ext3_put_super() and ext3_remount() (Carlos Maiolino) [885945]
- [lib] switch the protection of percpu_counter list to spinlock (Carlos Maiolino) [885945]
- [virt] hv: Add Hyper-V balloon driver (Jason Wang) [885572]
- [mm] export a function to get vm committed memory (Jason Wang) [885572]
- [drm] nouveau: extend prevent display switching issues by disabling pageflip (Ben Skeggs) [853226]
- [netdrv] mlx4: Fix advertisement of wrong PF context behaviour (Alex Williamson) [894060]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-356.el6]" date="1358769600">- [char] ipmi: use a tasklet for handling received messages (Prarit Bhargava) [890160]
- [char] ipmi: handle run_to_completion properly in deliver_recv_msg() (Prarit Bhargava) [890160]
- [usb] xhci: Reset reserved command ring TRBs on cleanup (Don Zickus) [843520]
- [usb] xhci: handle command after aborting the command ring (Don Zickus) [874541]
- [usb] xhci: cancel command after command timeout (Don Zickus) [874541]
- [usb] xhci: add aborting command ring function (Don Zickus) [874541]
- [usb] xhci: add cmd_ring_state (Don Zickus) [874541]
- [usb] xhci: Fix Null pointer dereferencing with non-DMI systems (Don Zickus) [874542]
- [usb] xhci: Intel Panther Point BEI quirk (Don Zickus) [874542]
- [usb] xhci: Increase XHCI suspend timeout to 16ms (Don Zickus) [874542]
- [powerpc] Revert: pseries/iommu: remove default window before attempting DDW manipulation (Steve Best) [890454]
- [serial] 8250_pnp: add Intermec CV60 touchscreen device (Mauro Carvalho Chehab) [894445]
- [char] ipmi: apply missing hunk from upstream commit 2407d77a (Tony Camuso) [882787]
- [acpi] Fix broken kernel build if CONFIG_ACPI_DEBUG is enabled (Lenny Szubowicz) [891948]
- [scsi] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically (Chad Dupuis) [854736]
- [mm] vmalloc: remove guard page from between vmap blocks (Johannes Weiner) [873737]
- [mm] vmalloc: vmap area cache (Johannes Weiner) [873737]
- [fs] vfs: prefer EEXIST to EROFS when creating on an RO filesystem (Eric Sandeen) [878091]
- [scsi] qla2xxx: change queue depth ramp print to debug print (Rob Evers) [893113]
- [fs] nfs: Fix umount when filelayout DS is also the MDS (Steve Dickson) [895194]
- [fs] nfs/pnfs: add set-clear layoutdriver interface (Steve Dickson) [895194]
- [fs] nfs: Don't call nfs4_deviceid_purge_client() unless we're NFSv4.1 (Steve Dickson) [895194]
- [fs] nfs: Wait for session recovery to finish before returning (Steve Dickson) [895176]
- [mm] compaction: validate pfn range passed to isolate_freepages_block (Johannes Weiner) [889456 890498]
- [drm] nouveau: ensure legacy vga is re-enabled during POST (Ben Skeggs) [625441]
- [netdrv] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [894344]
- [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862904] {CVE-2012-4461}</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-357.el6]" date="1359374400">- [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
- [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
- [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
- [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
- [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
- [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-358.el6]" date="1359460800">- [fs] Fix sget() race with failing mount (Eric Sandeen) [883276]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.1.1.el6]" date="1361016000">- [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
- [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
- [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
- [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
- [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
- [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
- [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
- [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
- [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
- [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
- [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
- [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
- [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
- [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
- [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
- [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
- [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
- [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
- [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
- [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
- [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
- [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
- [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
- [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
- [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
- [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
- [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
- [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
- [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
- [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
- [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
- [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
- [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
- [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
- [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
- [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
- [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
- [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
- [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.2.1.el6]" date="1361361600">- [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1363089600">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="6e7341cc61f7bd7aea8b3739e6dc416badf43c5103fa37fc2294a5295cf2011b" name="libvirt" arch="src">
    <version epoch="0" ver="0.10.2" rel="18.el6_4.9"/>

<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18" date="1359374400">- rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
- spec: Disable libssh2 support (rhbz#513363)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.1" date="1363348800">- xen: Resolve resource leak with 'cpuset' (rhbz#908836)
- schema: Make the cpuset type reusable across schema files (rhbz#908836)
- schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
- conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
- capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
- capabilities: Add additional data to the NUMA topology info (rhbz#908836)
- test: Add support for thread and core information for the test driver (rhbz#908836)
- xen: Initialize variable before using (rhbz#908836)
- xen: Actually fix the uninitialized variable (rhbz#908836)
- spice: Properly reserve tlsPort when no port specified (rhbz#913624)
- qemu_agent: Ignore expected EOFs (rhbz#915344)
- qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
- qemu: Destroy domain on decompression binary error (rhbz#915347)
- qemu: Run lzop with '--ignore-warn' (rhbz#915347)
- Don't ignore return value of qemuProcessKill (rhbz#915353)
- Fix race condition when destroying guests (rhbz#915353)
- Log warning if storage magic matches, but version does not (rhbz#915354)
- Add lots of debugging to storage file probing code (rhbz#915354)
- Fix probing of QED file format (rhbz#915354)
- util: Add virendian.h macros (rhbz#915354)
- util: Use new virendian.h macros (rhbz#915354)
- storage: Rearrange functions (rhbz#915354)
- storage: Prepare for refactoring (rhbz#915354)
- storage: Refactor metadata lookup (rhbz#915354)
- storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
- storage: Test backing chain traversal (rhbz#915354)
- qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
- python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
- qemu: Add checking in helpers for sgio setting (rhbz#919504)
- qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
- qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
- qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
- qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
- qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
- qemu: Fix the memory leak (rhbz#919504)
- Fix crash changing CDROM media (rhbz#919504)
- qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
- qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
- Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
- util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
- qemu: Fix QMP detection of QXL graphics (rhbz#915352)
- qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
- conf: Add optional attribte primary to video &lt;model&gt; element (rhbz#915352)
- qemu: Use newer -device video device in qemu commandline (rhbz#915352)
- tests: Add one -device video device testcase (rhbz#915352)
- qemu: Detect VGA_QXL capability correctly (rhbz#915352)
- qemu: Support ram bar size for qxl devices (rhbz#915352)
- conf: Don't leak 'primary' video property on error (rhbz#915352)
- storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
- storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
- storage: Cleanup logical volume creation code (rhbz#918754)
- docs: Clarify semantics of sparse storage volumes (rhbz#918754)
- storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
- storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
- interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
- locking: Resolve resource leaks on non error path (rhbz#922095)
- selinux: Resolve resource leak using the default disk label (rhbz#922095)
- storage: Resolve resource leaks with cmd processing (rhbz#922095)
- domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
- qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
- storage: Need to add virCommandFree() (rhbz#922095)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.2" date="1363608000">- qemu: Fix startupPolicy regression (rhbz#915349)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.3" date="1364558400">- util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
- security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
- security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
- libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
- security_manager.c: Append seclabel iff generated (rhbz#928879)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.4" date="1365854400">- rpc: Fix client crash when server drops connection (rhbz#950601)
- storage: Fix volume cloning for logical volume. (rhbz#950604)
- qemu: Allow migration over IPv6 (rhbz#950597)
- qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
- remote: Don't call NULL closeFreeCallback (rhbz#950599)
- libvirt: Increase connection reference count for callbacks (rhbz#950599)
- virsh: Unregister the connection close notifier upon termination (rhbz#950599)
- virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
- virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
- rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
- tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
- Avoid use of free'd memory in auto destroy callback (rhbz#951073)
- Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.5" date="1367582400">- daemon: Fix leak after listing volumes (CVE-2013-1962)
- Don't try to add non-existant devices to ACL (rhbz#958837)
- Avoid spamming logs with cgroups warnings (rhbz#958837)
- audit: Properly encode device path in cgroup audit (rhbz#958839)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.6" date="1369915200">- qemu: Set correct migrate host in client_migrate_info (rhbz#966587)
- qemu: Fix crash in migration of graphics-less guests. (rhbz#966587)
- Fix F_DUPFD_CLOEXEC operation args (rhbz#966707)
- cgroup: Be robust against cgroup movement races (rhbz#966710)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.7" date="1370606400">- virsocket: Introduce virSocketAddrIsWildcard (rhbz#966587)
- qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#966587)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.8" date="1370865600">- virSocketAddrIsWildcard: Use IN6_IS_ADDR_UNSPECIFIED correctly (rhbz#966587)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.9" date="1371729600">- qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976543)
- build: Fix build with -Werror (rhbz#976543)</changelog>

</package>

<package pkgid="21331011626365878a46c1fc617b7a7513ef1d36212fb2fe9ce421693f0c404f" name="krb5" arch="src">
    <version epoch="0" ver="1.10.3" rel="10.el6_4.4"/>

<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-5" date="1347278400">- add patch based on one from Filip Krska to not call poll() with a negative
  timeout when the caller's intent is for us to just stop calling it (#838548)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-6" date="1348574400">- actually pull up the patch for RT#7063, and not some other ticket (#773496)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-7" date="1350475200">- tag a couple of other patches which we still need to be applied during
  %{?_rawbuild} builds (zmraz, #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-8" date="1355140800">- untag a couple of other patches which don't strictly need to apply during
  %{?_rawbuild} builds (more of #874177)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-9" date="1355227200">- when building with our bundled copy of libverto, package it in with -libs
  rather than with -server (#886049)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10" date="1355832000">- make -server conflict with older versions of SELinux policy that didn't
  allow us to use eventfds, which libverto's backend may depend on in order
  to properly shut down a multi-worker KDC (#871524)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.1" date="1362484800">- incorporate upstream patch to fix a NULL pointer dereference when the client
  supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
- add patch to avoid dereferencing a NULL pointer in the KDC when handling a
  draft9 PKINIT request (#917909, CVE-2012-1016)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.2" date="1365508800">- incorporate upstream patch to fix a NULL pointer dereference while processing
  certain TGS requests (CVE-2013-1416, #950342)</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.3" date="1370001600">- pull up fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443,</changelog>
<changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 1.10.3-10.4" date="1372248000">- don't leak the memory used to hold the previous entry when walking a keytab
  to figure out which kinds of keys we have (#978312)</changelog>

</package>

<package pkgid="c4fab03f25dc314a5d2865890ce9e7a98cb8b85f57d0bd176a7dfa0fa9cd6d54" name="ruby" arch="src">
    <version epoch="0" ver="1.8.7.352" rel="12.el6_4"/>

<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-1" date="1310472000">- Update to Ruby 1.8.7-p352.
  * Remove Patch43: ruby-1.8.7-CVE-2011-1004.patch; subsumed
  * Remove Patch44: ruby-1.8.7-CVE-2011-1005.patch; subsumed
  * Remove Patch200: ruby-1.8.7-webrick-CVE.patch; subsumed
- Resolves: rhbz#706332
- Fix of conflict between 32bit and 64bit library versions.
- Resolves: rhbz#674787
- Add systemtap static probes.
- Resolves: rhbz#673162
- Remove duplicate path entry
- Resolves: rhbz#722887</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-2" date="1312804800">- Fix of ruby interpreter crash in FIPS mode.
  * ruby-1.8.7-FIPS.patch
- Resolves: rhbz#717709</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-3" date="1313150400">- mkconfig.rb: fix for continued lines.
  * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
- Resolves: rhbz#730287</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-4" date="1324296000">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-p352-CVE-2011-4815.patch
- Resolves: rhbz#768833</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-7" date="1330948800">- Addresses segfauls in Marshal.load.
  * ruby-1.8.7-p358-marshal-load-segv-fix.patch
- Resolves: rhbz#789120</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-8" date="1361880000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915379</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-9" date="1362052800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915379</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-10" date="1362139200">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Related: rhbz#915379</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-11" date="1372420800">- hostname check bypassing vulnerability in SSL client.
  * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
  - Resolves: rhbz#979300</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-12" date="1373284800">- Fix regression introduced by CVE-2013-4073
  https://bugs.ruby-lang.org/issues/8575
  * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
  - Related: rhbz#979300</changelog>

</package>

<package pkgid="4398f3e3ca27a280eb7918d8557a44bd8ae780fb2cda771c5697a80d35e9ce06" name="httpd" arch="src">
    <version epoch="0" ver="2.2.15" rel="29.el6.centos"/>

<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-21" date="1350561600">- mod_proxy_ajp: ignore flushing if headers have not been sent (#853160)
- mod_proxy_ajp: do not mark worker in error state when one request
  timeouts (#864317)
- mod_ssl: do not run post script if all files are already created (#752618)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-22" date="1350907200">- mod_cache: fix header merging for 304 case, thanks to Roy Badami (#868283)
- mod_cache: fix handling of 304 responses (#868253)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-23" date="1352289600">- mod_log_config: fix cookie parsing substring mismatch (#867268)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-24" date="1352376000">- mod_ssl: improved patch for mod_nss fallback (w/mharmsen, #805720)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-25" date="1354536000">- htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
- rotatelogs: omit the second arg when invoking a post-rotate program (#876923)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-26" date="1354708800">- htcacheclean: exit with code 4 also for "restart" action (#805810)</changelog>
<changelog author="&lt;jorton@redhat.com&gt; - 2.2.15-27" date="1362657600">- add security fixes for CVE-2012-3499, CVE-2012-4558 (#915883, #915884)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-28" date="1367236800">- mod_rewrite: add security fix for CVE-2013-1862 (#953729)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-29" date="1375444800">- mod_dav: add security fix for CVE-2013-1896 (#991368)</changelog>
<changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt; - 2.2.15-29.el6.centos" date="1376395200">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="08b72f9ad32172a9017328f5bb652280aafb7f35bdcf0b704a0d3a6fddd1d0ee" name="nss-softokn" arch="src">
    <version epoch="0" ver="3.14.3" rel="3.el6_4"/>

<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.9-5" date="1311336000">- Add partial RELRO support as a security enhancement</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.9-7" date="1311595200">- Fix the tag</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.9-8" date="1311595201">- Include the patch</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.9-9" date="1317124800">- Add relro support for executables and shared libraries</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.9-10" date="1319457600">- Bug 747053 - FIPS changes for NSS, more DRBG tests</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.12.9-11" date="1319716800">- Bug 748524 - On NSS_NoDB_Init don't try to open pkcs11.txt or secmod.db</changelog>
<changelog author="Elio Maldonado - 3.12.9-12" date="1364040000">- Bootstrapping of the builroot in preparation for rebase to 3.14.3
- Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
- With 3.14.3 hasht.h will be provided by nss-util-devel
- Related: rhbz#927158 - rebase nss-softokn to 3.14.3</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-1" date="1364212800">- Update to NSS_3_14_3_RTM
- Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
- Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib64 before the signing commands in __spec_install_post scriplet
  to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
- Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
- Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
- Update the licence to MPLv2.0</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-2" date="1365508800">- Revert to using a code patch for relro support
- Related: rhbz#927158</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-3" date="1366977600">- Add patch to conditionally compile according to old or new sqlite api
- new is used on rhel-6 while rhel-5 uses old but we need the same code for both
- Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue</changelog>

</package>

<package pkgid="2b4f53dbacc16f5c61498f24ef3d70b609c7fc93e74192709f62d51aae4d7db4" name="gzip" arch="src">
    <version epoch="0" ver="1.3.12" rel="19.el6_4"/>

<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.12-10" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Ivana Varekova &lt;varekova redhat com&gt; - 1.3.12-11" date="1249992000">- fix installation with --excludedocs option (#515975)</changelog>
<changelog author="Ivana Varekova &lt;varekova@redhat.com&gt; - 1.3.12-12" date="1255089600">- change the source tag</changelog>
<changelog author="Karel Klic &lt;kklic@redhat.com&gt; - 1.3.12-13" date="1259582400">- Fixed silent data loss due to unchecked close of stdout (rhbz#514562)</changelog>
<changelog author="Karel Klic &lt;kklic@redhat.com&gt; - 1.3.12-14" date="1262779200">- Fixed license tag in the spec file</changelog>
<changelog author="Karel Klic &lt;kklic@redhat.com&gt; - 1.3.12-15" date="1263470400">- Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
  LZW format files
- Added fix for CVE-2009-2624: Missing input sanitation by decompressing 
  dynamic Huffman code blocks
  Resolves: rhbz#555090</changelog>
<changelog author="Karel Klic &lt;kklic@redhat.com&gt; - 1.3.12-16" date="1263988800">- Improved the patch fixing CVE-2009-2624: get "Bad table" output 
  instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
  Related: rhbz#555090</changelog>
<changelog author="Karel Klic &lt;kklic@redhat.com&gt; - 1.3.12-17" date="1266926400">- Added a patch to disallow -S '' parameter in gunzip (noemptysuffix)
  Resolves: #567586</changelog>
<changelog author="Karel Klic &lt;kklic@redhat.com&gt; - 1.3.12-18" date="1277726400">- Added a patch to fix CRC error on valid file
  Resolves: #608787</changelog>
<changelog author="Michal Luscon &lt;mluscon@redhat.com&gt; - 1.3.12-19" date="1368446400">- fix issue with nonblocking open for PAR and OFL files
  Resolves: #915503</changelog>

</package>

<package pkgid="9ad31973b1cc704aa2687dbc92aca671889c9bfe8b4a3e80d74c7784f263fe31" name="openldap" arch="src">
    <version epoch="0" ver="2.4.23" rel="32.el6_4"/>

<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-23" date="1334923200">- security fix: CVE-2012-1164: assertion failure by processing search queries
  requesting only attributes for particular entry (#813162)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-24" date="1335787200">- fix update: Default SSL certificate bundle is not found by openldap library (#742023)
- fix: memberof overlay on the frontend database causes server segfault (#730745)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-25" date="1335960000">- fix update: Default SSL certificate bundle is not found by openldap library (#742023)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-26" date="1336392000">- fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
- fix: memory leak: def_urlpre is not freed (#816168)
- fix update: Default SSL certificate bundle is not found by openldap library (#742023)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-27" date="1343649600">- fix: smbk5pwd module computes invalid LM hashes (#820278)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-28" date="1343736000">- CVE-2012-2668 (#825875)
  + cipher suite selection by name can be ignored
  + default cipher suite is always selected</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-29" date="1348574400">- fix: invalid order of TLS shutdown operations (#818572)
- fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
- fix: reading pin from file can make all TLS connections hang (#829319)
- fix: replication with TLS does not work (#707599)
- fix: some TLS ciphers cannot be enabled (#852339)
- fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
- fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
- fix: MozNSS certificate database in SQL format cannot be used (#857390)
- fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
- fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-30" date="1350043200">- fix: slapd with rwm overlay segfault following ldapmodify (#864913)</changelog>
<changelog author="Jan Vcelak &lt;jvcelak@redhat.com&gt; 2.4.23-31" date="1351684800">- fix update: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)</changelog>
<changelog author="Jan Synáček &lt;jsynacek@redhat.com&gt; 2.4.23-32" date="1361880000">- fix: segfault in syncprov overlay (#910241)</changelog>

</package>

<package pkgid="7a87ee545e2c7a3a7e479f80e449ef0eb0fae06e63873911611194f64b570266" name="thunderbird" arch="src">
    <version epoch="0" ver="17.0.3" rel="1.el6.centos"/>

<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.6-1" date="1342267200">- Update to 10.0.6 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.7-1" date="1345896000">- Update to 10.0.7 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-1" date="1349524800">- Update to 10.0.8 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 10.0.8-2" date="1350043200">- Added patches from 10.0.9 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b1-0.1" date="1351080000">- Rebase to 17 beta 1</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b2-0.1" date="1352376000">- Update to 17.0b2</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0-2" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-2" date="1358424000">- Update to 17.0.2 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 17.0.3-1.el6.centos" date="1361275200">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="0e57deef5e021482c49c8bebb11edce6354e4bb2171fd2b4d55d8cdc137189be" name="xorg-x11-drv-mga" arch="src">
    <version epoch="0" ver="1.6.1" rel="8.el6_4"/>

<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.13-4" date="1330084800">- Add RANDR 1.2 support for G200xx chips. (#657580)</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.13-6" date="1335355200">- Fix rendering corruption on RANDR-enabled setups (#814381)
- Fix display setup on G200ER (#810224)</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.13-7" date="1337342400">- randr-dpms-fix.patch: Fix DPMS on EV and others (#821956)</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.6.1-1" date="1344340800">- rebase to upstream 1.6.1 release with randr 1.2 on top</changelog>
<changelog author="airlied@redhat.com - 1.6.1-2" date="1345636800">- rebuild for server ABI requires</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.6.1-3" date="1348660800">- fix so mga driver loads properly</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.6.1-4" date="1348833600">- fix mga DRI1 regression since XAA removal</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.6.1-5" date="1349092800">- mga-1.6.1-no-rr13-panning.patch: Disable RANDR 1.3 panning (#821551)</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.6.1-7" date="1355227200">- mga-1.6.1-shadowfb-clip.patch: Fix clipping in shadow upload (#877071)</changelog>
<changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.6.1-8" date="1374235200">- mga-1.6.1-size-range.patch: Fix large resolutions on G200SE &amp;c (#986833)</changelog>

</package>

<package pkgid="edece99dd18f10e5fa72f7ded608c842ae56da1e17df8f503d07e00f470f073d" name="bind" arch="src">
    <version epoch="32" ver="9.8.2" rel="0.17.rc1.el6_4.4"/>

<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.12.rc1" date="1343217600">- fix CVE-2012-3817</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.13.rc1" date="1347537600">- fix  CVE-2012-4244</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.14.rc1" date="1347969600">- allow forward{,ers} statement in static-stub zones</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.15.rc1" date="1349870400">- fix CVE-2012-5166</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.16.rc1" date="1350475200">- initscript: silence spurious "named.pid: No such file" error</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1" date="1354708800">- fix CVE-2012-5688</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.1" date="1359633600">- add response rate limit patch (#873624)</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.2" date="1359720000">- fix CVE-2012-5689</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.3" date="1360324800">- remove one bogus file from /usr/share/doc, introduced by RRL patch</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 32:9.8.2-0.17.rc1.4" date="1364385600">- fix  CVE-2013-2266
- ship dns/rrl.h in -devel subpkg</changelog>

</package>

<package pkgid="a84d2d0d516d2dd975601cd3c65e82cf7f522ed1f828f2da99bf1353d2642b6b" name="coreutils" arch="src">
    <version epoch="0" ver="8.4" rel="19.el6_4.1"/>

<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-11" date="1295265600">- adjust the wording in the octal value byte representation
  documentation to match with upstream(#660033)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-12" date="1296648000">- document that dd's iflag=fulblock prevents dd's oflag=direct
 automatic turn off when reading via pipe(#614605)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-13" date="1299758400">- fix possible uninitalized variables usage caused by i18n
  patch(#683799)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-14" date="1313064000">- tweak documentation of tail --sleep-interval (#725618)
- prevent build failure on system with mock&gt;=1.1.9 (#691292)
- su: fix shell suspend in tcsh (#703712)
- ls: use acl_extended_file_nofollow() to prevent unnecessary
  autofs mounts(#720325)
- fix cp -Z functionality if the destination exists(#715557)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-15" date="1313582400">- ensure that we have libacl-devel with support for
  acl_extened_file_nofollow()</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-16" date="1317816000">- improve the acl_extended_file_nofollow() fix to prevent
 ls -L regression(#720325)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-17" date="1329393600">- fix memory leak in ls -l (#751974)
- document difference between ls -lZ and ls -Zl (#771843)
- fix various i18n patch related issues in pr (#772172)
- df should display target device information when
  a symbolic link is specified as a parameter(#766461)
- su no longer hangs when a program set itself to ignore
  SIG_CHLD signal, and fork a child to exec su(#754029)
- stat recognizes few new filesystems, tail -f recognizes
  FhGFS and GPFS as remote (disables inotify) (#769874)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-18" date="1330948800">- add support for cleaning special bits on directories
  via 5+ digits octals (#691466)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-19" date="1334664000">- fix the tcsh colorls.csh behaviour in non-interactive
  mode (#804604)</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.4-19.1" date="1363953600">- revert to polling for unknown filesystems, update
  known fs for tail and stat based on coreutils-8.21 (#924711)</changelog>

</package>

<package pkgid="24e751d097c32110baf0aad30aa93cc022dcbeb7c97fa39d386b6f1a5c369d15" name="libvirt" arch="src">
    <version epoch="0" ver="0.10.2" rel="18.el6_4.4"/>

<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-13" date="1355918400">- network: Prevent dnsmasq from listening on localhost (rhbz#886821)
- sanlock: Re-add lockspace unconditionally (rhbz#820173)
- Fix "virsh create" example (rhbz#887187)
- docs: Fix some typos in examples (rhbz#887187)
- network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-14" date="1357214400">- util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
- util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
- util: Fix botched check for new netlink request filters (rhbz#889319)
- blockjob: Fix memleak that prevented block pivot (rhbz#888426)
- sanlock: Chown lease files as well (rhbz#820173)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-15" date="1357732800">- snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
- snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
- snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
- snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
- util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
- qemu: Add a hash table for the shared disks (rhbz#878578)
- docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
- conf: Parse and format the new XML (rhbz#878578)
- qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
- qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
- qemu: Relax hard RSS limit (rhbz#891653)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-16" date="1358337600">- qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
- Add RESUME event listener to qemu monitor. (rhbz#894085)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-17" date="1358942400">- storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
- qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
- qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18" date="1359374400">- rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
- spec: Disable libssh2 support (rhbz#513363)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.1" date="1363348800">- xen: Resolve resource leak with 'cpuset' (rhbz#908836)
- schema: Make the cpuset type reusable across schema files (rhbz#908836)
- schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
- conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
- capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
- capabilities: Add additional data to the NUMA topology info (rhbz#908836)
- test: Add support for thread and core information for the test driver (rhbz#908836)
- xen: Initialize variable before using (rhbz#908836)
- xen: Actually fix the uninitialized variable (rhbz#908836)
- spice: Properly reserve tlsPort when no port specified (rhbz#913624)
- qemu_agent: Ignore expected EOFs (rhbz#915344)
- qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
- qemu: Destroy domain on decompression binary error (rhbz#915347)
- qemu: Run lzop with '--ignore-warn' (rhbz#915347)
- Don't ignore return value of qemuProcessKill (rhbz#915353)
- Fix race condition when destroying guests (rhbz#915353)
- Log warning if storage magic matches, but version does not (rhbz#915354)
- Add lots of debugging to storage file probing code (rhbz#915354)
- Fix probing of QED file format (rhbz#915354)
- util: Add virendian.h macros (rhbz#915354)
- util: Use new virendian.h macros (rhbz#915354)
- storage: Rearrange functions (rhbz#915354)
- storage: Prepare for refactoring (rhbz#915354)
- storage: Refactor metadata lookup (rhbz#915354)
- storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
- storage: Test backing chain traversal (rhbz#915354)
- qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
- python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
- qemu: Add checking in helpers for sgio setting (rhbz#919504)
- qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
- qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
- qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
- qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
- qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
- qemu: Fix the memory leak (rhbz#919504)
- Fix crash changing CDROM media (rhbz#919504)
- qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
- qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
- Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
- util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
- qemu: Fix QMP detection of QXL graphics (rhbz#915352)
- qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
- conf: Add optional attribte primary to video &lt;model&gt; element (rhbz#915352)
- qemu: Use newer -device video device in qemu commandline (rhbz#915352)
- tests: Add one -device video device testcase (rhbz#915352)
- qemu: Detect VGA_QXL capability correctly (rhbz#915352)
- qemu: Support ram bar size for qxl devices (rhbz#915352)
- conf: Don't leak 'primary' video property on error (rhbz#915352)
- storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
- storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
- storage: Cleanup logical volume creation code (rhbz#918754)
- docs: Clarify semantics of sparse storage volumes (rhbz#918754)
- storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
- storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
- interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
- locking: Resolve resource leaks on non error path (rhbz#922095)
- selinux: Resolve resource leak using the default disk label (rhbz#922095)
- storage: Resolve resource leaks with cmd processing (rhbz#922095)
- domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
- qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
- storage: Need to add virCommandFree() (rhbz#922095)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.2" date="1363608000">- qemu: Fix startupPolicy regression (rhbz#915349)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.3" date="1364558400">- util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
- security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
- security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
- libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
- security_manager.c: Append seclabel iff generated (rhbz#928879)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.4" date="1365854400">- rpc: Fix client crash when server drops connection (rhbz#950601)
- storage: Fix volume cloning for logical volume. (rhbz#950604)
- qemu: Allow migration over IPv6 (rhbz#950597)
- qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
- remote: Don't call NULL closeFreeCallback (rhbz#950599)
- libvirt: Increase connection reference count for callbacks (rhbz#950599)
- virsh: Unregister the connection close notifier upon termination (rhbz#950599)
- virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
- virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
- rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
- tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
- Avoid use of free'd memory in auto destroy callback (rhbz#951073)
- Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)</changelog>

</package>

<package pkgid="971b7e36f039d849b962c81f8c368bedf84fe1377ebccd5fa1f8efab67ca8a0f" name="ipa" arch="src">
    <version epoch="0" ver="3.0.0" rel="26.el6_4.2"/>

<changelog author="Martin Kosek &lt;mkosek@redhat.com&gt; - 3.0.0-19.el6" date="1357128000">- Client installation crashes when Kerberos SRV record is not found (#889583)
- Fix typo in patch 0048 for CVE-2012-5484 (#878220)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-20.el6" date="1357646400">- Set maxbersize to a large value to accomondate large CRLs during replica
  installation. (#888956)
- Set minimum version of pki-ca, pki-slient and pki-setup to 9.0.3-29 to
  pick up default CA validity period of 20 years. (#891980)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-21.el6" date="1357905600">- Properly handle migrated uniqueMember attributes (#894090)
- ipa permission-find using valid targetgroup throws internal error (#893827)
- Fix migration of CRLs to new directory location (#893722)
- Installing IPA with a single realm component sometimes fails (#893187)</changelog>
<changelog author="Martin Kosek &lt;mkosek@redhat.com&gt; - 3.0.0-22.el6" date="1358251200">- Set minimum version of bind-dyndb-ldap to 2.3-2 to pick up missing DNS
  zone SOA serial fix (#894131)
- Stopped named service crashed ipa-upgradeconfig program (#895298)
- ipa-replica-prepare crashed when manipulating DNS zone without SOA
  serial (#894143)
- Use new certmonger locking to prevent NSS database corruption during
  CA subsystem renewal (#883484)
- Set minimum selinux-policy to 3.7.19-193 to allow certmonger to talk
  to dbus in an rpm scriptlet. (related #883484)
- Set minimum vresion of certmonger to 0.61-3 for new locking scheme
  (related #883484)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-23.el6" date="1358769600">- Installer should not connect to 127.0.0.1. (#895561)
- Don't initialize NSS if we don't have to. (#878220)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-24.el6" date="1359028800">- Add certmonger condrestart to server post scriptlet (#903758)
- Make certmonger a (pre) Requires (#903758)
- Add selinux-policy to Requires(pre) to avoid post scriptlet AVCs
  (#903758)
- Set minimum version of pki-ca to 9.0.3-30 and add to Requires(pre)
  to pick up certmonger upgrade fix (#902474)
- Update anonymous access ACI to protect secret attributes (#902481)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-25.el6" date="1359460800">- Filter generated winbind dependencies so the right version of samba
  can be installed. (#905594)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-26.el6_4" date="1360238400">- Significant decrease in migration performance. (#908308)
- ipa-client-install failed to fall over to replica with master down (#909161)
- During Migration - If Schema is unavailable migration fails (#908400)</changelog>
<changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 3.0.0-26.el6_4.1" date="1360324800">- respin to fix issues with rpmdiff</changelog>
<changelog author="Martin Kosek &lt;mkosek@redhat.com&gt; - 3.0.0-26.el6_4.2" date="1362139200">- Missing LDAP schema attributeType and objectClass after upgrade (#916535)
- ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
  correctly and crash (#917065)</changelog>

</package>

<package pkgid="54c3537af98c814d693d43d9db92adcc7d476aad15f16b155693812a65a5fc7c" name="icedtea-web" arch="src">
    <version epoch="0" ver="1.2.3" rel="4.el6_4"/>

<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2-1" date="1330948800">- Updated to 1.2 proper</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.1-1" date="1343217600">- Updated to 1.2.1
- Resolves: CVE-2012-3422
- Resolves: CVE-2012-3423</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.2-1" date="1351771200">- Updated to 1.2.2
- Resolves: CVE-2012-4540</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; 1.2.2-2" date="1354536000">- Build with OpenJDK7
- Import fix for PR1161 (needed for proper functionality with OpenJDK7)</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.2-3" date="1354881600">- Fixed provides and obsolates
- Resolves: rhbz#838084.</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.3-0" date="1365681600">- Updated to latest ustream release of 1.2 branch - 1.2.3
 - Security Updates
  - CVE-2013-1927, RH884705 - fixed gifar vulnerability
  - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
 - Common
  - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
 - Plugin
  - PR1157: Applets can hang browser after fatal exception
- Removed upstreamed patch 0- icedtea-web-PR1161.patch
- Resolves: rhbz#949094</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.3-1" date="1365768000">- fixed postun - removal of alternatives for plugin restricted to 
  (correct) removal process only
- fixed date in changelog previous entry
- Resolves: rhbz#949094</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.3-2" date="1365768001">- Added (temporally!) posttrans forcing creation of symlinks
  - should be removed next release
- Resolves: rhbz#949094</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.3-3" date="1371556800">- added patch1 b25-appContextFix.patch to make it run with future openjdk
- rmeoved posttrans
- Resolves: rhbz#975426</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.2.3-4" date="1371643200">- improved patch1 b25-appContextFix.patch to make it run with future openjdk better
- Resolves: rhbz#975426</changelog>

</package>

<package pkgid="4f865077cef2fad1d44522e253f5a67f203a7d5a1085bc8030b0312ddb745442" name="qemu-kvm" arch="src">
    <version epoch="2" ver="0.12.1.2" rel="2.355.0.1.el6.centos.3"/>

<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.350.el6" date="1357732800">- kvm-raw-posix-add-raw_get_aio_fd-for-virtio-blk-data-pla.patch [bz#877836]
- kvm-configure-add-CONFIG_VIRTIO_BLK_DATA_PLANE.patch [bz#877836]
- kvm-vhost-make-memory-region-assign-unassign-functions-p.patch [bz#877836]
- kvm-dataplane-add-host-memory-mapping-code.patch [bz#877836]
- kvm-dataplane-add-virtqueue-vring-code.patch [bz#877836]
- kvm-event_notifier-add-event_notifier_set.patch [bz#877836]
- kvm-dataplane-add-event-loop.patch [bz#877836]
- kvm-dataplane-add-Linux-AIO-request-queue.patch [bz#877836]
- kvm-iov-add-iov_discard_front-back-to-remove-data.patch [bz#877836]
- kvm-iov-add-qemu_iovec_concat_iov.patch [bz#877836]
- kvm-virtio-blk-Turn-drive-serial-into-a-qdev-property.patch [bz#877836]
- kvm-virtio-blk-define-VirtIOBlkConf.patch [bz#877836]
- kvm-virtio-blk-add-scsi-on-off-to-VirtIOBlkConf.patch [bz#877836]
- kvm-dataplane-add-virtio-blk-data-plane-code.patch [bz#877836]
- kvm-virtio-blk-add-x-data-plane-on-off-performance-featu.patch [bz#877836]
- kvm-virtio-pci-fix-virtio_pci_set_guest_notifiers-error-.patch [bz#877836]
- Resolves: bz#877836
  (backport virtio-blk data-plane patches)</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.351.el6" date="1357732801">- kvm-qxl-save-qemu_create_displaysurface_from-result.patch [bz#885644]
- Resolves: bz#839832
  (qemu-ga: document selinux policy for read/write of guest files)
- Resolves: bz#885644
  (Memory leak and use after free in qxl_render_update_area_unlocked())</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.352.el6" date="1358337600">- kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
- kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
- kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
- Resolves: bz#895392
  (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.353.el6" date="1358942400">- kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
- kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
- kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
- kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
- kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
- Resolves: bz#869981
  (Cross version migration between different host with spice is broken)
- Resolves: bz#876982
  (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
- Resolves: bz#894995
  (core dump when install windows guest with x-data-plane=on)
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.354.el6" date="1358942401">- spec: add Epoch to old_conflict_ver
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6" date="1358942402">- kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
- kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
- kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
- kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
- kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
- Resolves: bz#884253
  (Allow control of volume from within Windows Guests (Volume Mixture))</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.1" date="1360152000">- kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
- Resolves: bz#907397
  (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.2" date="1362052800">- kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
- kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
- Resolves: bz#910841
  (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.3" date="1365595200">- kvm-Fix-regression-introduced-by-machine-accel.patch [bz#929105]
- Resolves: bz#929105
  ([RHEL6.4] [regression] qemu-kvm does not enable ioeventfd)</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - qemu-kvm-0.12.1.2-2.355.0.1.el6.centos.3" date="1369224000">- increment the version due to centos bug #6297</changelog>

</package>

<package pkgid="b2eb74f446f3f783143cbde5323ef83068c4cacacdeb876e28af4c2e00016ace" name="xulrunner" arch="src">
    <version epoch="0" ver="17.0.8" rel="3.el6.centos"/>

<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.5-2" date="1366286400">- Updated nss and nspr versions</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-2" date="1368187200">- Update to 17.0.6 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-3" date="1368446400">- Added patch for aliasing issues (mozbz#821502)</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-4" date="1371038400">- Added a workaround for rhbz#961687 - Prelink throws message 
  "Cannot safely convert .rel.dyn' section from REL to RELA"</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.6-5" date="1371556800">- Added workaround for rhbz#973721 - fixing problem with installation
  of  some addons</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371643200">- Update to 17.0.7 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-1" date="1375272000">- Update to 17.0.8 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-2" date="1375358400">- Added fix for rhbz#990921 - firefox does not build with 
  required nss/nspr</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.8-3" date="1375790400">- Update to 17.0.8 ESR Build 2</changelog>
<changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt; - 17.0.8-3.el6.centos" date="1375876800">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="ffe32fa25837b710e530a026c8186868959124ba9888758d36c9e674cb1910c7" name="selinux-policy" arch="src">
    <version epoch="0" ver="3.7.19" rel="195.el6_4.1"/>

<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-188" date="1355832000">- Allow rpcd_t to read /var/run/utmp
- Make glance domains as permissive instead of just glance_t
- Allow kill capability for ftpd
- Add labeling for prespawn helper script
Resolves:#886619
- Allow winbind to stream connect to nmbd
- Allow transition from virt domains to bridgehelper domain
- Add support for watchdog script from sanlock
- Add labeling for tmp-inst
- Fix rhev policy
- Update virt_qemu_ga policy
- Backport wm_domain policy
- Backport virtd_lxc_t and make it as unconfined domain</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-189" date="1355832001">- Allow virt_qemu_ga to execute shutdown
- sssd needs to connect to kerberos password port if a user changes his password
- More fixes for the dspam domain
- Allow dovecot to execute bash
- Additional fixes for passenger
Resolves:#886619
- Add labeling for /var/run/checkquorum-timer</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-190" date="1357300800">- Allow virtd to settattr on virt image dirs in MLS
Resolves:#885045
- Allow all postfix domains to connect to mysql stream
- Call init_daemon_domain for rsync_t
- Add labeling for /var/lib/pgsql/ssh 
- Allow certmonger to send signal to itself
- Allow rsyslog to read user tmp files using logging_syslog_can_read_tmp boolean
- Add support for 1228/tcp and 1228/udp ports and allow corosync touse them
- Allow corosync to read wdmd tmpfs
- Allow wdmd to execute consoletype
- Update man pages using sepolicy from Fedora
- Fix admin interfaces</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-191" date="1357300801">- Remove pam_selinux due to conflict
- Add labeling for /etc/multipath - lvm_metadata_t
Resolves:#880407
- Add additional gitolite3 labeling</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-192" date="1357732800">- Label /usr/lib/yaboot/addnote as bin_t
- Allow postfix_local to read/write /var/spool/postfix/active
- Allow postfix domains to list /tmp
- Allow wdmd to transition to kdump
Resolves:#887793
- Add labeling for /var/named/chroot/etc/localtime</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-193" date="1358251200">- Fix ssh_sysadm_login boolean for MLS
Resolves:#865759
- Allow rpm_script_t to dbus communicate with certmonger_t
- More fixes for qemu-ga to make "guest-fsfreeze-freeze" working</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-194" date="1358337600">- qdiskd needs to read usr_t/bin_t files
- Allow dpsam to connect/bind to spamd ports
- Allow munin services plugins to bind to generic node
Resolves:#865759</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195" date="1358856000">- Make matahari domains as unconfined
- Allow nscd to connect to nmbd
Resolves:#901565
- Allow setcap/getcap for syslogd</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4" date="1361188800">- Fix tuned policy to make it working with the lastet tuned package
Resolves:#912392</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.1" date="1361361600">- Additional fix for tuned
- Backport openshift changes
Resolves:#912392</changelog>

</package>

<package pkgid="7a6e92f5df874d84b7f71ef5b177fa69781c35a6f83d8238b4154f06f75b3426" name="python-dmidecode" arch="src">
    <version epoch="0" ver="3.10.13" rel="3.el6_4"/>

<changelog author="David Sommerseth &lt;davids@redhat.com&gt; - 3.10.7-3" date="1259236800">- Fixed even more .spec file issues and removed explicit mentioning
  of /usr/share/python-dmidecode/pymap.xml</changelog>
<changelog author="Nima Talebi &lt;nima@it.net.au&gt; - 3.10.8-1" date="1260878400">- New Upstream release.
- Big-endian and little-endian approved.
- Packaged unit-test to tarball.
- Rewritten unit-test to be able to run as non-root user, where it will not
  try to read /dev/mem.
- Added two dmidump data files to the unit-test.</changelog>
<changelog author="Nima Talebi &lt;nima@it.net.au&gt; - 3.10.9-1" date="1262865600">- Update to new release</changelog>
<changelog author="Nima Talebi &lt;nima@it.net.au&gt; - 3.10.10-1" date="1263297600">- Update to new release</changelog>
<changelog author="Nima Talebi &lt;nima@it.net.au&gt; - 3.10.11-1" date="1266321600">- Update to new release</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 3.10.11-2" date="1267185600">- Upstream license patch (now GPLv2+)</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 3.10.12-1" date="1274270400">- Update to 3.10.12 release
  Resolves: #588387</changelog>
<changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 3.10.13-1" date="1309348800">- Update to 3.10.13 release
  Resolves: #621567, #627901, #667363
- Signal handler for SIGILL
  Resolves #646429</changelog>
<changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-2" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
  Resolves: #975059</changelog>
<changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-3" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.
  Resolves: #975059</changelog>

</package>

<package pkgid="0e05a97d5ae2a6d59b000fb0770502f660a081df380808595cd97db7a7ca8bb4" name="bind-dyndb-ldap" arch="src">
    <version epoch="0" ver="2.3" rel="2.el6_4.1"/>

<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.1.0-0.8.b1" date="1335355200">- rebuild</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.1.0-0.9.b1" date="1336564800">- escape DNS names in queries correctly</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.1.0-0.10.b1" date="1343390400">- fix CVE-2012-3429</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0-0.1.20120925git072225" date="1348574400">- rebase to the latest 2.0 snapshot
- patches merged
  - 0001-Fix-ticket-55-BIND-cannot-be-shutdown-correctly-if-p.patch
  - 0001-Fix-crash-on-reload-without-any-zones.patch
  - 0001-Fix-SOA-record-update.patch
  - 0001-Find-A-AAAA-delegation-glue-records-correctly.patch
  - bind-dyndb-ldap11-CVE-2012-2134.patch
  - 0001-Add-proper-DN-escaping-before-LDAP-library-calls.patch
  - bind-dyndb-ldap-CVE-2012-3429.patch</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0-1" date="1350388800">- update to 2.0</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.1-1" date="1351512000">- update to 2.1</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.2-1" date="1351684800">- update to 2.2</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3-1" date="1352376000">- update to 2.3 (fixes some issues with forwarding)</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3-2" date="1358251200">- idnsSOAserial attribute can be missing on LDAP replicas (#895083)</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3-2.1" date="1363953600">- processing of configuration opts too early could lead to crash (#923113)</changelog>

</package>

<package pkgid="7bf46cfaeacf80ac9e3d2197d2f3589b84f2125fe008f34a63751da36829dc23" name="nss-util" arch="src">
    <version epoch="0" ver="3.14.3" rel="3.el6_4"/>

<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 3.13.1-2" date="1327924800">- Rebuild for NSPR 4.8.9</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.1-5" date="1330948800">- Resolves: rhbz#799192 - Update to 3.13.3</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.3-2" date="1331121600">- Resolves: rhbz#799192 - Update to 3.13.3
- Update minimum nspr version for Requires and BuildRequires to 4.9
- Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-1" date="1340193600">- Update to NSS_3_13_5_RTM
- Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
- Add -L${libdir}/nss3 to Libs: line in nspr.pc.in</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-2" date="1340280000">- Resolves: rhbz#833480 - revert unwanted change to nss-util.pc.in</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.13.5-3" date="1349956800">- Update to nss-3.14.0.0-1
- Add temporary patch so utilmod doesn't include any headers from softoken
- Keep the hasht.h from current nss-softokn-devel
- Remove the long obsoleted nss-nolocalsql.patch</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.0.0-2" date="1357732800">- Fix inconstent n-v-r tag number numbers</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-1" date="1363953600">- Update to NSS_3_14_3_RTM
- Resolves: rhbz#927171 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue</changelog>
<changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.14.3-2" date="1369915200">- Revert to accepting MD5 on digital signatures by default
- Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled</changelog>
<changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-3" date="1373976000">- Resolves: rhbz#984967 - nssutil_ReadSecmodDB leaks memory</changelog>

</package>

<package pkgid="eeaa359a123936f921e917cec44ca011e1d12e7fa990d1241d3774b503dbfe2c" name="xulrunner" arch="src">
    <version epoch="0" ver="17.0.6" rel="2.el6.centos"/>

<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-1" date="1357819200">- Update to 17.0.2 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-2" date="1357905600">- Added fix for rhbz#816234 - NFS fix</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.2-5" date="1358251200">- Fixed NetworkManager preferences
- Added fix for NM regression (mozbz#791626)</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362657600">- Added fix for #848644</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-3" date="1363089600">- Added fix for rhbz#916180 - Wrong library directory reference 
  in /usr/bin/xulrunner</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.5-2" date="1366286400">- Updated nss and nspr versions</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-2" date="1368187200">- Update to 17.0.6 ESR</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.rog&gt; - 17.0.6-2.el6.centos" date="1368532800">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="dc8d0a78c85c11af7e9f2c5ca4b6d2a2ecc75df16cb0b7f94762ff75c4015edf" name="qemu-kvm" arch="src">
    <version epoch="2" ver="0.12.1.2" rel="2.355.el6_4_4.1"/>

<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.348.el6" date="1355918400">- kvm-spice-add-new-spice-server-callbacks-to-ui-spice-dis.patch [bz#879559]
- kvm-vmmouse-add-reset-handler.patch [bz#884450]
- kvm-vmmouse-fix-queue_size-field-initialization.patch [bz#884450]
- kvm-hw-vmmouse.c-Disable-vmmouse-after-reboot.patch [bz#884450]
- kvm-block-Fix-vpc-initialization-of-the-Dynamic-Disk-Hea.patch [bz#887897]
- kvm-block-vpc-write-checksum-back-to-footer-after-check.patch [bz#887897]
- Resolves: bz#879559
  (spice with non-qxl vga dumps core)
- Resolves: bz#884450
  (after change mac address of guest, mouse inside guest can not be used after system_reset in qemu)
- Resolves: bz#887897
  (Backport vpc initialization of the Dynamic Disk Header fix)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.349.el6" date="1357646400">- kvm-pc-rhel6-compat-enable-S3-S4-for-6.1-and-lower-machi.patch [bz#886798]
- kvm-e1000-no-need-auto-negotiation-if-link-was-down.patch [bz#890288]
- kvm-rtl8139-preserve-link-state-across-device-reset.patch [bz#890288]
- kvm-pci-assign-Enable-MSIX-on-device-to-match-guest.patch [bz#886410]
- Resolves: bz#886410
  (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)
- Resolves: bz#886798
  (Guest should get S3/S4 state according to machine type to avoid cross migration issue)
- Resolves: bz#890288
  (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
- Resolves: bz#886410
  (interrupts aren't passed from the Hypervisor to VMs running Mellanox ConnectX3 VFs)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.350.el6" date="1357732800">- kvm-raw-posix-add-raw_get_aio_fd-for-virtio-blk-data-pla.patch [bz#877836]
- kvm-configure-add-CONFIG_VIRTIO_BLK_DATA_PLANE.patch [bz#877836]
- kvm-vhost-make-memory-region-assign-unassign-functions-p.patch [bz#877836]
- kvm-dataplane-add-host-memory-mapping-code.patch [bz#877836]
- kvm-dataplane-add-virtqueue-vring-code.patch [bz#877836]
- kvm-event_notifier-add-event_notifier_set.patch [bz#877836]
- kvm-dataplane-add-event-loop.patch [bz#877836]
- kvm-dataplane-add-Linux-AIO-request-queue.patch [bz#877836]
- kvm-iov-add-iov_discard_front-back-to-remove-data.patch [bz#877836]
- kvm-iov-add-qemu_iovec_concat_iov.patch [bz#877836]
- kvm-virtio-blk-Turn-drive-serial-into-a-qdev-property.patch [bz#877836]
- kvm-virtio-blk-define-VirtIOBlkConf.patch [bz#877836]
- kvm-virtio-blk-add-scsi-on-off-to-VirtIOBlkConf.patch [bz#877836]
- kvm-dataplane-add-virtio-blk-data-plane-code.patch [bz#877836]
- kvm-virtio-blk-add-x-data-plane-on-off-performance-featu.patch [bz#877836]
- kvm-virtio-pci-fix-virtio_pci_set_guest_notifiers-error-.patch [bz#877836]
- Resolves: bz#877836
  (backport virtio-blk data-plane patches)</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.351.el6" date="1357732801">- kvm-qxl-save-qemu_create_displaysurface_from-result.patch [bz#885644]
- Resolves: bz#839832
  (qemu-ga: document selinux policy for read/write of guest files)
- Resolves: bz#885644
  (Memory leak and use after free in qxl_render_update_area_unlocked())</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.352.el6" date="1358337600">- kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
- kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
- kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
- Resolves: bz#895392
  (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.353.el6" date="1358942400">- kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
- kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
- kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
- kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
- kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
- Resolves: bz#869981
  (Cross version migration between different host with spice is broken)
- Resolves: bz#876982
  (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
- Resolves: bz#894995
  (core dump when install windows guest with x-data-plane=on)
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.354.el6" date="1358942401">- spec: add Epoch to old_conflict_ver
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6" date="1358942402">- kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
- kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
- kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
- kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
- kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
- Resolves: bz#884253
  (Allow control of volume from within Windows Guests (Volume Mixture))</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.356.el6" date="1360152000">- kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
- Resolves: bz#907397
  (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.356.el6_4.1" date="1360152001">- kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
- Resolves: bz#907397
  (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)</changelog>

</package>

<package pkgid="3932736a24b76db42d7d7d5546b577b0ad9429d35c26af06795cae1ef442baff" name="libvirt" arch="src">
    <version epoch="0" ver="0.10.2" rel="18.el6_4.2"/>

<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-11" date="1354708800">- Fix uninitialized variable in virLXCControllerSetupDevPTS (rhbz#880064)
- storage: Fix device detach regression with cgroup ACLs (rhbz#876828)
- storage: Fix bug of fs pool destroying (rhbz#878400)
- qemu: Fix a crash when save file can't be opened (rhbz#880919)
- bitmap: Fix typo to use UL type of integer constant in virBitmapIsAllSet (rhbz#876415)
- virsh: Rewrite cmdDomDisplay (rhbz#878779)
- network: Fix crash when portgroup has no name (rhbz#879473)
- util: Capabilities detection for dnsmasq (rhbz#882265)
- util: New virSocketAddrIsPrivate function (rhbz#882265)
- network: Use dnsmasq --bind-dynamic when available (rhbz#882265)
- storage: Fix scsi detach regression with cgroup ACLs (rhbz#876828)
- libssh2_session: Support DSS keys as well (rhbz#878376)
- virsh: Fix error messages in iface-bridge (rhbz#878376)
- virsh: Check the return value of virStoragePoolGetAutostart (rhbz#878376)
- conf: Check the return value of virXPathNodeSet (rhbz#878376)
- conf: snapshot: Check return value of virDomainSnapshotObjListNum (rhbz#878376)
- util: Fix virBitmap allocation in virProcessInfoGetAffinity (rhbz#878376)
- virsh: Use correct sizeof when allocating cpumap (rhbz#878376)
- rpc: Don't destroy xdr before creating it in virNetMessageEncodeHeader (rhbz#878376)
- virsh: Do timing even for unusable connections (rhbz#878376)
- conf: Fix uninitialized variable in virDomainListSnapshots (rhbz#878376)
- Fix error handling in virSecurityManagerGetMountOptions (rhbz#878376)
- conf: Prevent crash with no uuid in cephx auth secret (rhbz#878376)
- conf: Fix virDomainNetGetActualDirect*() and BridgeName() (rhbz#881480)
- virsh: Report errors if arguments of the schedinfo command are incorrect (rhbz#882915)
- systemd: Require dbus service (rhbz#830201)
- spec: Require dbus-daemon when using libvirtd in Fedora (rhbz#830201)
- qemu: Don't free PCI device if adding it to activePciHostdevs fails (rhbz#877095)
- util: Slightly refactor PCI list functions (rhbz#877095)
- qemu: Fix memory (and FD) leak on PCI device detach (rhbz#877095)
- util: Do not keep PCI device config file open (rhbz#877095)
- node_memory: Improve the docs (rhbz#872656)
- node_memory: Do not fail if there is parameter unsupported (rhbz#872656)
- node_memory: Fix bug of node_memory_tune (rhbz#872656)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-12" date="1355313600">- qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
- remote: Avoid the thread race condition (rhbz#866524)
- storage: Error out earlier if the volume target path already exists (rhbz#832302)
- dnsmasq: Fix parsing of the version number (rhbz#885727)
- qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
- examples: Fix balloon event callback (rhbz#884650)
- util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
- util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
- util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
- util: Fix warning message in previous patch (rhbz#883832)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-13" date="1355918400">- network: Prevent dnsmasq from listening on localhost (rhbz#886821)
- sanlock: Re-add lockspace unconditionally (rhbz#820173)
- Fix "virsh create" example (rhbz#887187)
- docs: Fix some typos in examples (rhbz#887187)
- network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-14" date="1357214400">- util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
- util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
- util: Fix botched check for new netlink request filters (rhbz#889319)
- blockjob: Fix memleak that prevented block pivot (rhbz#888426)
- sanlock: Chown lease files as well (rhbz#820173)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-15" date="1357732800">- snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
- snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
- snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
- snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
- util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
- qemu: Add a hash table for the shared disks (rhbz#878578)
- docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
- conf: Parse and format the new XML (rhbz#878578)
- qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
- qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
- qemu: Relax hard RSS limit (rhbz#891653)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-16" date="1358337600">- qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
- Add RESUME event listener to qemu monitor. (rhbz#894085)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-17" date="1358942400">- storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
- qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
- qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18" date="1359374400">- rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
- spec: Disable libssh2 support (rhbz#513363)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.1" date="1363348800">- xen: Resolve resource leak with 'cpuset' (rhbz#908836)
- schema: Make the cpuset type reusable across schema files (rhbz#908836)
- schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
- conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
- capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
- capabilities: Add additional data to the NUMA topology info (rhbz#908836)
- test: Add support for thread and core information for the test driver (rhbz#908836)
- xen: Initialize variable before using (rhbz#908836)
- xen: Actually fix the uninitialized variable (rhbz#908836)
- spice: Properly reserve tlsPort when no port specified (rhbz#913624)
- qemu_agent: Ignore expected EOFs (rhbz#915344)
- qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
- qemu: Destroy domain on decompression binary error (rhbz#915347)
- qemu: Run lzop with '--ignore-warn' (rhbz#915347)
- Don't ignore return value of qemuProcessKill (rhbz#915353)
- Fix race condition when destroying guests (rhbz#915353)
- Log warning if storage magic matches, but version does not (rhbz#915354)
- Add lots of debugging to storage file probing code (rhbz#915354)
- Fix probing of QED file format (rhbz#915354)
- util: Add virendian.h macros (rhbz#915354)
- util: Use new virendian.h macros (rhbz#915354)
- storage: Rearrange functions (rhbz#915354)
- storage: Prepare for refactoring (rhbz#915354)
- storage: Refactor metadata lookup (rhbz#915354)
- storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
- storage: Test backing chain traversal (rhbz#915354)
- qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
- python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
- qemu: Add checking in helpers for sgio setting (rhbz#919504)
- qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
- qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
- qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
- qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
- qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
- qemu: Fix the memory leak (rhbz#919504)
- Fix crash changing CDROM media (rhbz#919504)
- qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
- qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
- Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
- util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
- qemu: Fix QMP detection of QXL graphics (rhbz#915352)
- qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
- conf: Add optional attribte primary to video &lt;model&gt; element (rhbz#915352)
- qemu: Use newer -device video device in qemu commandline (rhbz#915352)
- tests: Add one -device video device testcase (rhbz#915352)
- qemu: Detect VGA_QXL capability correctly (rhbz#915352)
- qemu: Support ram bar size for qxl devices (rhbz#915352)
- conf: Don't leak 'primary' video property on error (rhbz#915352)
- storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
- storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
- storage: Cleanup logical volume creation code (rhbz#918754)
- docs: Clarify semantics of sparse storage volumes (rhbz#918754)
- storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
- storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
- interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
- locking: Resolve resource leaks on non error path (rhbz#922095)
- selinux: Resolve resource leak using the default disk label (rhbz#922095)
- storage: Resolve resource leaks with cmd processing (rhbz#922095)
- domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
- qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
- storage: Need to add virCommandFree() (rhbz#922095)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-18.el6_4.2" date="1363608000">- qemu: Fix startupPolicy regression (rhbz#915349)</changelog>

</package>

<package pkgid="777e2565c6d5d5d8175603c62cb6053421c1b5a0992538fd2fe5829a69ec5a2d" name="kernel" arch="src">
    <version epoch="0" ver="2.6.32" rel="358.6.1.el6"/>

<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-356.el6]" date="1358769600">- [char] ipmi: use a tasklet for handling received messages (Prarit Bhargava) [890160]
- [char] ipmi: handle run_to_completion properly in deliver_recv_msg() (Prarit Bhargava) [890160]
- [usb] xhci: Reset reserved command ring TRBs on cleanup (Don Zickus) [843520]
- [usb] xhci: handle command after aborting the command ring (Don Zickus) [874541]
- [usb] xhci: cancel command after command timeout (Don Zickus) [874541]
- [usb] xhci: add aborting command ring function (Don Zickus) [874541]
- [usb] xhci: add cmd_ring_state (Don Zickus) [874541]
- [usb] xhci: Fix Null pointer dereferencing with non-DMI systems (Don Zickus) [874542]
- [usb] xhci: Intel Panther Point BEI quirk (Don Zickus) [874542]
- [usb] xhci: Increase XHCI suspend timeout to 16ms (Don Zickus) [874542]
- [powerpc] Revert: pseries/iommu: remove default window before attempting DDW manipulation (Steve Best) [890454]
- [serial] 8250_pnp: add Intermec CV60 touchscreen device (Mauro Carvalho Chehab) [894445]
- [char] ipmi: apply missing hunk from upstream commit 2407d77a (Tony Camuso) [882787]
- [acpi] Fix broken kernel build if CONFIG_ACPI_DEBUG is enabled (Lenny Szubowicz) [891948]
- [scsi] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically (Chad Dupuis) [854736]
- [mm] vmalloc: remove guard page from between vmap blocks (Johannes Weiner) [873737]
- [mm] vmalloc: vmap area cache (Johannes Weiner) [873737]
- [fs] vfs: prefer EEXIST to EROFS when creating on an RO filesystem (Eric Sandeen) [878091]
- [scsi] qla2xxx: change queue depth ramp print to debug print (Rob Evers) [893113]
- [fs] nfs: Fix umount when filelayout DS is also the MDS (Steve Dickson) [895194]
- [fs] nfs/pnfs: add set-clear layoutdriver interface (Steve Dickson) [895194]
- [fs] nfs: Don't call nfs4_deviceid_purge_client() unless we're NFSv4.1 (Steve Dickson) [895194]
- [fs] nfs: Wait for session recovery to finish before returning (Steve Dickson) [895176]
- [mm] compaction: validate pfn range passed to isolate_freepages_block (Johannes Weiner) [889456 890498]
- [drm] nouveau: ensure legacy vga is re-enabled during POST (Ben Skeggs) [625441]
- [netdrv] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [894344]
- [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862904] {CVE-2012-4461}</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-357.el6]" date="1359374400">- [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
- [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
- [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
- [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
- [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
- [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-358.el6]" date="1359460800">- [fs] Fix sget() race with failing mount (Eric Sandeen) [883276]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.1.1.el6]" date="1361016000">- [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
- [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
- [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
- [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
- [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
- [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
- [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
- [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
- [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
- [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
- [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
- [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
- [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
- [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
- [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
- [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
- [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
- [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
- [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
- [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
- [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
- [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
- [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
- [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
- [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
- [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
- [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
- [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
- [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
- [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
- [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
- [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
- [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
- [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
- [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
- [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
- [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
- [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
- [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.2.1.el6]" date="1361361600">- [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.3.1.el6]" date="1363003200">- [net] netfilter: improve out-of-sync situation in TCP tracking (Flavio Leitner) [917690 629857]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.4.1.el6]" date="1363608000">- [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [921150 913704]
- [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921961 896224]
- [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921961 896224]
- [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920268 916324]
- [powerpc] pseries: Fix partition migration hang in stop_topology_update (Steve Best) [921963 910597]
- [infiniband] qib: correction for faulty sparse warning correction (Jay Fenlason) [922154 901701]
- [usb] io_ti: Fix NULL dereference in chase_port() (Nikola Pajkovsky) [916198 916200] {CVE-2013-1774}
- [net] bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Nikola Pajkovsky) [914690 914691] {CVE-2013-0349}
- [char] tty: set_termios/set_termiox should not return -EINTR (Oleg Nesterov) [921145 904907]
- [netdrv] ehea: fix VLAN support (Steve Best) [921535 911359]
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919388 919389] {CVE-2013-1826}
- [net] dccp: check ccid before NULL poiter dereference (Weiping Pan) [919187 919188] {CVE-2013-1827}
- [mm] tmpfs: fix use-after-free of mempolicy object (Nikola Pajkovsky) [915714 915715] {CVE-2013-1767}
- [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916957 915135]
- [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915583 876600]
- [fs] cifs: after upcalling for krb5 creds, invalidate key rather than revoking it (Niels de Vos) [912452 885899]
- [fs] cifs: tmp_key_invalidate() should not set key-&gt;expiry to 0 (Niels de Vos) [912452 885899]
- [block] disable discard request merge temporarily (Mike Snitzer) [911475 907844]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.5.1.el6]" date="1364040000">- [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [921958 883905]
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_auth() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922386 922387] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922386 922387] {CVE-2012-6546}
- [fs] nls: improve UTF8 -&gt; UTF16 string conversion routine (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
- [fs] fat: Fix stat-&gt;f_namelen (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
- [netdrv] tun: fix ioctl() based info leaks (Thomas Graf) [922350 922351] {CVE-2012-6547}
- [virt] x86: Add a check to catch Xen emulation of Hyper-V (Andrew Jones) [923204 918239]
- [fs] cifs: fix expand_dfs_referral (Sachin Prabhu) [923098 902492]
- [fs] cifs: factor smb_vol allocation out of cifs_setup_volume_info (Sachin Prabhu) [923098 902492]
- [fs] cifs: have cifs_cleanup_volume_info not take a double pointer (Sachin Prabhu) [923098 902492]
- [fs] nfs: Dont allow NFS silly-renamed files to be deleted, no signal (Dave Wysochanski) [920266 905095]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.6.1.el6]" date="1364558400">- [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
- [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
- [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
- [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
- [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
- [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
- [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
- [net] sunrpc: Get rid of the redundant xprt-&gt;shutdown bit field (J. Bruce Fields) [915579 893584]
- [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
- [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
- [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
- [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
- [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
- [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
- [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
- [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
- [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [2.6.32-358.6.1.el6]" date="1366718400">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="1573653c400c5b7e0db455ee99aa664d360c06d5db36630688281a0b07443e47" name="neon" arch="src">
    <version epoch="0" ver="0.29.3" rel="3.el6_4"/>

<changelog author="Joe Orton &lt;jorton@redhat.com&gt; 0.28.6-1" date="1250683200">- update to 0.28.6</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; 0.29.0-1" date="1252843200">- update to 0.29.0</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; 0.29.0-3" date="1252843201">- enable libproxy support</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0.29.1-1" date="1260878400">- update to 0.29.1</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0.29.2-1" date="1262952000">- update to 0.29.2</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0.29.3-1" date="1263211200">- update to 0.29.3</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0.29.3-1.1" date="1271419200">- note that docs license is GPLv2+</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0.29.3-1.2" date="1277380800">- fix Release (#604555)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0.29.3-2" date="1331035200">- fix SNI support (#798636)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0.29.3-3" date="1373889600">- disable TLS record padding in GnuTLS (#1000969)</changelog>

</package>

<package pkgid="25929c8c87bfb26d31ad03e44bef148f70564a00f0f7fef4a51e3521baa249a7" name="libvirt-cim" arch="src">
    <version epoch="0" ver="0.6.1" rel="4.el6_4.1"/>

<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 0.5.11-3.el6" date="1302696000">- re-add require to tog-pegasus which went missing
- Resolves: rhbz#694749</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 0.5.13-1.el6" date="1310040000">- Rebase to libvirt-cim-0.5.13
- Resolves: rhbz#633337</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 0.5.14-1.el6" date="1311595200">- Rebase to libvirt-cim-0.5.14
- Resolves: rhbz#633337</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 0.5.14-2.el6" date="1313496000">- apply various fixes found by Coverity and upstream since 0.5.14
- Resolves: rhbz#728245</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 0.6.0-1.el6" date="1326369600">- Rebase to libvirt-cim 0.6.0 rhbz#739154
- Support libvirt domain events rhbz#739153
- Network QoS support rhbz#633338
- cpu cgroup support rhbz#739156</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 0.6.1-1.el6" date="1328875200">- Rebase to libvirt-cim 0.6.1 rhbz#739154</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 0.6.1-2.el6" date="1331208000">- do not require specifically tog-pegasus server (rhbz#799037)
- (de)register the schemas with sblim-sfcb if found</changelog>
<changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 0.6.1-3.el6" date="1331640000">- fix leaks raised by Coverity (rhbz#750418)</changelog>
<changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.6.1-4.el6" date="1350043200">- Fix an incomplete substitution in Makefile (rhbz#805892)
- Only deregister cim classes on uninstall (rhbz#864096)</changelog>
<changelog author="John Ferlan &lt;jferlan@redhat.com&gt; - 0.6.1-4.el6_4.1" date="1369396800">- Distinguish running or inactive state (rhbz#913164)
- Only support script on bridge for xen domains (rhbz#951402)
- Need to initialize domain-&gt;type to UNKNOWN (rhbz#951402)</changelog>

</package>

<package pkgid="5837a760295de897517ab752b51379a732049fa2c5febcb54ea7a9f0fa6837bd" name="libselinux" arch="src">
    <version epoch="0" ver="2.0.94" rel="5.3.el6_4.1"/>

<changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2.0.94-1" date="1269432000">* Set errno=EINVAL for invalid contexts from Dan Walsh.
	* pkgconfig fix to respect LIBDIR from Dan Walsh.
Resolves: #593788</changelog>
<changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2.0.94-2" date="1281700800">- Add ruby patch to allow libselinux to build on RHEL6
Resolves: #558910</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; - 2.0.94-3" date="1296820800">- Thread local storage fixes from Eamon Walsh</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; - 2.0.94-4" date="1299758400">- Library destructors for thread local storage keys from Eamon Walsh.</changelog>
<changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2.0.94-5" date="1302091200">- Fix Library destructors to only free keys iff they were actually initialized
Resolves: #658571</changelog>
<changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2.0.94-5.1" date="1306324800">- Cleanup selinux_mnt on disabled machines
Resolves: #706049
- Make restorecon python binding use realpath
Resolves: #698583</changelog>
<changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2.0.94-5.2" date="1319457600">- Apply libselinux patch to handle large groups.
Resolves: #748471</changelog>
<changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2..0.94-5.3" date="1328270400">- avc_netlink_recieve should continue to poll if it receinves an EINTR rather 
Resolves: #717147</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; - 2..0.94-5.3.el6_4" date="1367409600">- Handle substitutions for /
Resolves:#956983</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; - 2..0.94-5.3.el6_4.1" date="1367928000">- Fix patch that Handles substitutions for /
Resolves:#956983</changelog>

</package>

<package pkgid="486087433192880d1326f095ab7c48b61ca7f660971ff13215bf84488aabc9bf" name="tigervnc" arch="src">
    <version epoch="0" ver="1.1.0" rel="5.el6_4.1"/>

<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.0.90-0.14.20110314svn4359" date="1300449600">- improve fix for keyboards with no mods (#628054)</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.0.90-0.15.20110314svn4359" date="1301572800">- flush internal Xvnc event queue early to avoid overflowing
- improve compatibility with viewers with wrong VeNCrypt implementation
  (vinagre)
- link libvnc.so with "-z now" to catch all undefined symbols
- fix undefined symbol "getvnchomedir" in libvnc.so</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.0.90-0.16.20110314svn4359" date="1305028800">- viewer can send password without proper validation of X.509 certs
  (CVE-2011-1775)</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.0.90-0.17.20110314svn4359" date="1320840000">- rebuild for X server 1.10.4 (#752471)</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.0-1" date="1344513600">- import from F18 for 1.13.0 server</changelog>
<changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.1.0-2" date="1348660800">- rebuild against 1.13.0 due to ABI issues</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.1.0-3" date="1350907200">- initscript: print msg when vnc password is not configured</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.1.0-4" date="1352894400">- allow to change AcceptPointerEvents via vncconfig</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.1.0-5" date="1353931200">- previous change was incomplete</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.1.0-5.1" date="1366891200">- reenable GLX extension (#950708)</changelog>

</package>

<package pkgid="b101fd2d389653153fe31b194a8f9390467f3760e32fcfd353255d8a17ee7123" name="corosync" arch="src">
    <version epoch="0" ver="1.4.1" rel="15.el6_4.1"/>

<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-7" date="1336564800">- Resolves: rhbz#773720

- objctl: add missing calls to dispatch notifications and fix memory corruption (rhbz#773720)
- merge upstream commit dc9b04a7196b316a596036296ac1a78b21717e97 (rhbz#773720)</changelog>
<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-8" date="1343908800">- Resolves: rhbz#770455
- Resolves: rhbz#783068
- Resolves: rhbz#786735
- Resolves: rhbz#786737
- Resolves: rhbz#794744
- Resolves: rhbz#821352
- Resolves: rhbz#824902
- Resolves: rhbz#827100
- Resolves: rhbz#838524

- Fixed bug when corosync receive JoinMSG in OPERATIONAL state (rhbz#786737)
- merge upstream commit ffe4943ff52843e1c7beba1250256dc7b6f283e4 (rhbz#786737)
- Correct nodeid of token when we retransmit it (rhbz#786735)
- merge upstream commit 081bfb0a4d6050416d4daa27d7a8417f0ba697fc (rhbz#786735)
- Wait for corosync-notifyd exit in init script (rhbz#783068)
- merge upstream commit fbe6de4d162644aa07b14e93aa2f01299bf4692f (rhbz#783068)
- iba: Use configured node id (rhbz#794744)
- merge upstream commit 0b6e1dc3290cfbc6c38a19bead9f39c582f54c40 (rhbz#794744)
- Correctly handle point-to-point IP (rhbz#821352)
- merge upstream commit a853b6180e9832fa763ea796f310dc3de5718324 (rhbz#821352)
- totemip: Support bind to exact address (rhbz#824902)
- merge upstream commit 1c7b706441d18fe45c6e9c0b17ed1c8c5a723114 (rhbz#824902)
- Register reload callback only once (rhbz#838524)
- merge upstream commit ec51f02373d7f0372b8739ab695ae79f2dea26ce (rhbz#838524)
- cpg: Be more verbose for procjoin message (rhbz#770455)
- merge upstream commit dc22fd13bff1c38888ac16bc8f8fea8117ef27bd (rhbz#770455)
- totemudpu: Bind sending sockets to bindto address (rhbz#827100)
- merge upstream commit 71e5257eb1485ed6544ed2d17792492043e0e48d (rhbz#827100)</changelog>
<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-9" date="1345204800">- Resolves: rhbz#847232
- Resolves: rhbz#848210

- confdb: Fix crash with long values and add API calls to get them (rhbz#847232)
- merge upstream commit 5704a34612d8829fce6991f130b7732108cca761 (rhbz#847232)
- confdb: Fix crash with long values (rhbz#847232)
- merge upstream commit 16d309be840045b3fc6d468faf07fbd727756b3f (rhbz#847232)
- Fix dbus part of corosync-notifyd (rhbz#848210)
- merge upstream commit 4ac9cd59e7873914fe5845e69fd79b7a2877c290 (rhbz#848210)
- flatiron: Free outq items list on conn exit (rhbz#848210)
- merge upstream commit 4cdaf8ef1e7676b179eaeb5bde18d4b63d17ce52 (rhbz#848210)</changelog>
<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-10" date="1345550400">- Related: rhbz#847232

- sa-confdb: fix crash due to incorrect malloc size (rhbz#847232)
- merge upstream commit 0a85b888b0384e83fa4a80c3751a23f4de8a9310 (rhbz#847232)</changelog>
<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-11" date="1349784000">- Resolves: rhbz#787789
- Resolves: rhbz#794522
- Resolves: rhbz#838743
- Resolves: rhbz#850757
- Resolves: rhbz#861032

- When flushing, discard only memb_join messages (rhbz#850757)
- merge upstream commit 17e15322b7500247c539166441fb2e78cc95d02b (rhbz#850757)
- Add man page with Confdb keys created by corosync (rhbz#794522)
- merge upstream commit c741dbe01ea9bb45ae5d8706c8e4287aeae4bfd5 (rhbz#794522)
- confdb_keys: Document few more runtime statistics (rhbz#794522)
- merge upstream commit 060abd069483aa7b9d90261c11c79b2a6f6e21c1 (rhbz#794522)
- Add support for debug level trace in config file (rhbz#838743)
- merge upstream commit 842d387c2f53e23c055da4509a2f28753d6ffa97 (rhbz#838743)
- Move some totem and cpg messages to trace level (rhbz#838743)
- merge upstream commit 9deff57e779375631541bd52146701c41e3bed68 (rhbz#838743)
- Don't access invalid mem in totemconfig (rhbz#861032)
- merge upstream commit 539917e35a8c74b3ea4eb9ae8cddc2f73378d203 (rhbz#861032)
- Use unix socket for local multicast loop (rhbz#787789)
- merge upstream commit cea2b1a302e6e4563ee5817782f15ea5d941daec (rhbz#787789)
- Move "Totem is unable to form..." message to main (rhbz#787789)
- merge upstream commit e032c14341c38be4d273093f1e6691f8417e264d (rhbz#787789)
- Return back "Totem is unable to form..." message (rhbz#787789)
- merge upstream commit b343668bbfa09ebcfa4816ddf205eeb8f2ea159c (rhbz#787789)
- Change specfile to use runautogen</changelog>
<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-12" date="1353499200">- Resolves: rhbz#794522
- Resolves: rhbz#873059
- Resolves: rhbz#876908

- Fix minor errors in man page documentation for corosync.conf (rhbz#873059)
- merge upstream commit b14cd84e96fff1083837a70548ff9e18472c938b (rhbz#873059)
- manpages: Fix typo in evs* manpages (rhbz#873059)
- merge upstream commit 6735455c598393880188db7f297ec699c8ae0492 (rhbz#873059)
- manpages: Add links for referenced confdb calls (rhbz#873059)
- merge upstream commit b98d4ab44979a52ef74259e0676929055442cbfb (rhbz#873059)
- manpages: Add confdb_key_get man page (rhbz#873059)
- merge upstream commit e414e2d34c2e5e26318cfc06f8bdd5b8c8812a7e (rhbz#873059)
- Add link to confdb_keys in corosync-objctl mpage (rhbz#794522)
- merge upstream commit a4e7e2bc46545a5acacb3c840bda5270efec987c (rhbz#794522)
- Track changes for confdb logging object (rhbz#876908)
- merge upstream commit 6c9cae79dc2680d363b0cca85cbbe55a2bc9b517 (rhbz#876908)
- Don't call reload on corosync-objctl actions (rhbz#876908)
- merge upstream commit bdabbf6f20138c5e33154caf32cf66330356893d (rhbz#876908)</changelog>
<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-13" date="1357473600">- Resolves: rhbz#830799
- Resolves: rhbz#863940
- Resolves: rhbz#869609

- cpg: Never choose downlist with localnode (rhbz#830799)
- merge upstream commit 559d4083ed8355fe83f275e53b9c8f52a91694b2 (rhbz#830799)
- cpg: Process join list after downlists (rhbz#830799)
- merge upstream commit 02c5dffa5bb8579c223006fa1587de9ba7409a3d (rhbz#830799)
- cpg: Enhance downlist selection algorithm (rhbz#830799)
- merge upstream commit 64d0e5ace025cc929e42896c5d6beb3ef75b8244 (rhbz#830799)
- Don't call sync_* funcs for unloaded services (rhbz#863940)
- merge upstream commit 6ed260b0bfc5e5230a4e765b9c63caf985708c41 (rhbz#863940)
- Handle sync and service unload correctly (rhbz#863940)
- merge upstream commit e7536bdaf82044671d2d18ee799eeacd8603af08 (rhbz#863940)
- Make service_build contain correct number of msgs (rhbz#863940)
- merge upstream commit 1cea171c4d8f9dd19b4995f96842111e41f23d6c (rhbz#863940)
- Ignore sync barrier msgs if sync doesn't started (rhbz#869609)
- merge upstream commit ee292e7968f749f7ebc4daddeb09f39cfbb037b4 (rhbz#869609)
- Fix problem with sync operations under very rare circumstances (rhbz#830799)
- merge upstream commit 6fae42ba72006941c1fde99616ea30f4f10ebb38 (rhbz#830799)
- Handle segfault in backlog_get (rhbz#830799)
- merge upstream commit a559ccf7247bc448ba30b6ebc02a91fa986f146f (rhbz#830799)
- Add waiting_trans_ack also to fragmentation layer (rhbz#830799)
- merge upstream commit 7de25c3b64b2066de19b3f9075c075fb08816de6 (rhbz#830799)</changelog>
<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-14" date="1358251200">- Resolves: rhbz#865039

- coroipc: Don't spin when waiting on semaphore (rhbz#865039)
- merge upstream commit 7ce8718a71b7afe341d9f9ac21c6724d6f18dfc4 (rhbz#865039)
- On places with POLLERR check also POLLNVAL (rhbz#865039)
- merge upstream commit 105305a486ae9f171def221ad971d607604a4770 (rhbz#865039)
- Check socket_recv error code in ipc_dispatch_get (rhbz#865039)
- merge upstream commit 694a9c2cf0804428671bf815b974a080c7fd1c6c (rhbz#865039)
- coroipc: Handle pfd.revents as bit-field (rhbz#865039)
- merge upstream commit b6aabed698d34e4e79e03a3354e59a2d0121e692 (rhbz#865039)
- ipcc: Return dup of socket fd to user application (rhbz#865039)
- merge upstream commit 28c5907f59afd52a67be3bddff22df57e1fb36ba (rhbz#865039)</changelog>
<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-15" date="1358942400">- Resolves: rhbz#902397

- totemip: Properly detect ipv6 address (rhbz#902397)
- merge upstream commit d76759ec26ecaeb9cc01f49e9eb0749b61454d27 (rhbz#902397)</changelog>
<changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 1.4.1-15.1" date="1364558400">- Resolves: rhbz#929101

- Put handle to hdb in dispatch on unknown message (rhbz#929101)
- merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#929101)
- Properly check result of coroipcc_dispatch_put (rhbz#929101)
- merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#929101)
- coroipcs: Ensure rb data are not overwritten (rhbz#929101)
- merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#929101)
- Properly lock pending_semops (rhbz#929101)
- merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#929101)</changelog>

</package>

<package pkgid="ba9d8504e00971830cec0eb70355b4609bb89871339befb32dfba996af3d21a2" name="python" arch="src">
    <version epoch="0" ver="2.6.6" rel="37.el6_4"/>

<changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6.6-28" date="1313409600">- avoid truncating the compilation flags of extension modules that have CFLAGS
set in their environment
Resolves: rhbz#727364</changelog>
<changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6.6-29" date="1315828800">- protect GIL detection within gdb debug hooks against C stack frames that
lack a name (source 1)
Related: rhbz#711818
Resolves: rhbz#736085</changelog>
<changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6.6-30" date="1330084800">- oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
variable, to provide an opt-in way to protect against denial of service
attacks due to hash collisions within the dict and set types
Resolves: CVE-2012-1150</changelog>
<changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6.6-31" date="1332504000">- fix endless loop in SimpleXMLRPCServer upon malformed POST request
Resolves: CVE-2012-0845
- send encoding in SimpleHTTPServer.list_directory to protect IE7 against
potential XSS attacks
Resolves: CVE-2011-4940</changelog>
<changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6.6-32" date="1332936000">- distutils.config: create ~/.pypirc securely
Resolves: CVE-2011-4944</changelog>
<changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6.6-33" date="1335268800">- if hash randomization is enabled, also enable it within pyexpat
Resolves: CVE-2012-0876</changelog>
<changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6.6-34" date="1345032000">- add an RPATH to pyexpat.so to avoid ImportError on XML_SetHashSalt when a
vanilla build of expat is present in LD_LIBRARY_PATH
Resolves: rhbz#833271</changelog>
<changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6.6-35" date="1349956800">- add -DNDEBUG to OPT during the build, disabling C-level assertions
Resolves: rhbz#810847
Resolves: rhbz#841748
- avoid allocating thunks in ctypes unless absolutely necessary, to avoid
generating SELinux denials on "import ctypes" and "import uuid" when
embedding Python within httpd
Resolves: rhbz#814391
- avoid infinite loop in logging.handlers.SysLogHandler with eventlet when
the syslog daemon is stopped
Resolves: rhbz#835460</changelog>
<changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6.6-36" date="1350043200">- disable patch 110 (python-2.6.5-ctypes-noexecmem.patch)
Related: rhbz#707944
- disable patch 129 (python-2.6.6-gc-assertions.patch) now that we're
building with -DNDEBUG
Related: rhbz#810847
Related: rhbz#841748
Related: rhbz#614680</changelog>
<changelog author="Bohuslav Kabrda &lt;bkabrda@redhat.com&gt; - 2.6.6-37" date="1367928000">- only call subprocess's wait with timeout kwarg when appropriate
Related: rhbz#966991</changelog>

</package>

<package pkgid="6aa0c97747621658b9051963d307a9b02395de4cf9d822cc1da57414b284c9ae" name="java-1.7.0-openjdk" arch="src">
    <version epoch="1" ver="1.7.0.9" rel="2.3.8.0.el6_4"/>

<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.3-2.1.el6.7" date="1335873600">- Updated priority to be higher than GCJ but lower than OpenJDK6</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.3.el6.1" date="1354104000">- Sync with 6.3
- introduced tmp-patches source tarball
- Resolves: rhbz#871771</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.3.el6.2" date="1354276800">- Added nss support (see 831733)
  -added  enable_nss variable, set to true - 1 as default
  -added and applied if enable_nss true patch108 java-1.7.0-openjdk-aes-buffering.patch
  -added and applied if enable_nss true patch109 java-1.7.0-openjdk-nss-config-1.patch
  -added and applied if enable_nss true patch111 java-1.7.0-openjdk-nss-config-2.patch
  -added and applied if enable_nss true patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
- openjdk-nss-config-2.patch, is dynamically modified after build time and is
  changing build dependence (nss last) to runtime depndecne (nss first)
- release tag moved before dist (see 875245)
- Resolves: rhbz#871771</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.11-2.4.0.1.el6" date="1358164800">- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
- Added jxmd and idlj to alternatives
- make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
- Unapplied patch302 and deleted systemtap.patch
- buildver increased to 11
- icedtea_version set to 2.4.0
- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
- removed tmp-patches source tarball
- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
- Disabled nss - enable_nss set to 0
- Resolves: rhbz#895034</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.11-2.4.0.2.el6" date="1358942400">- Unapplied but kept (for 2.3revert) patch110,  java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
- Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch
- Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch
- Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch
- NSS enabled by default - enable_nss set to 1
- rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch
- rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch
- Resolves: rhbz#831734</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.4.0.pre2.3.el6" date="1360929600">- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.4.0.pre2, updated?
- Added java -Xshare:dump to post (see 513605) fo jitarchs
- Resolves: rhbz#911530</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.4.0.pre3.3.el6" date="1360929601">- Updated  to icedtea 2.4.0.pre3, updated!
- Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#911530</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.4.0.pre4.3.el6" date="1361188800">- Updated  to icedtea 2.4.0.pre4, 
- Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves: rhbz#911530</changelog>
<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.11-2.4.0.pre5.el6" date="1362398400">- Update to latest snapshot of icedtea7 2.4 forest
- Resolves: rhbz#917183</changelog>
<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.8.0el6" date="1362484800">- Revert to rhel 6.3 version of spec file
- Revert to icedtea7 2.3.8 forest
- Resolves: rhbz#917183</changelog>

</package>

<package pkgid="ff8588f94c34b6d09b6e1d31dcf9175e4b0059628c3d9aa2875961d404002326" name="389-ds-base" arch="src">
    <version epoch="0" ver="1.2.11.15" rel="20.el6_4"/>

<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-13" date="1364817600">- Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)
- Resolves: Bug 929111 - Coverity issue 13091
- Resolves: Bug 929196 - Deadlock in DNA plug-in (ticket 634)
- Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
- Resolves: Bug 929115 - crash in aci evaluation (ticket 628)
- Resolves: Bug 923240 - unintended information exposure when anonymous access is set to rootdse (ticket 47308)</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-14" date="1365595200">- Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
- Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-15" date="1372161600">- Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half.  (Ticket 47385)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-16" date="1372680000">- Resolves: Bug 979514 - CVE-2013-2219 ACLs inoperative in some search scenarios. (Ticket 47405)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-17" date="1373630400">- Resolves: Bug 970995 - DS not shutting down when disk monitoring threshold is reached to half. (Ticket 47385)
- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold. (ticket 47427)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.18" date="1374667200">- Bump version to 1.2.11.15-18
- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 2). (ticket 47427)
- Resolves: Bug 987850 - Disk Monitoring not checking filesystem with logs (ticket 47741)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.19" date="1374753600">- Bump version to 1.2.11.15-19
- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 3). (ticket 47427)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.19" date="1374753601">- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 4). (ticket 47427)</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.19" date="1374753602">- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 4). (ticket 47427)
- Patch was not added</changelog>
<changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15.20" date="1374840000">- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 5 limits not displayed correctly). (ticket 47427)</changelog>

</package>

<package pkgid="05c6b18c66cf415f0d4f382ac5648cb54a9fa463b554d210acdc11ee07234dd5" name="389-ds-base" arch="src">
    <version epoch="0" ver="1.2.11.15" rel="14.el6_4"/>

<changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.2.11.15-5" date="1354017600">- Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode</changelog>
<changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.2.11.15-6" date="1354190400">- Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode
-   use perl-Socket6 on RHEL6</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-7" date="1354881600">- Resolves: Bug 830355 - [RFE] improve cleanruv functionality 
- Resolves: Bug 876650 - Coverity revealed defects 
- Ticket #20 - [RFE] Allow automember to work on entries that have already been added (Bug 768084)
- Resolves: Bug 834074 - [RFE] Disable replication agreements
- Resolves: Bug 878111 - ns-slapd segfaults if it cannot rename the logs</changelog>
<changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.2.11.15-8" date="1355832000">- Resolves: Bug 887855 - RootDN Access Control plugin is missing after upgrade from RHEL63 to RHEL64</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-9" date="1357300800">- Resolves: Bug 891930 - DNA plugin no longer reports additional info when range is depleted</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-10" date="1357646400">- Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-11" date="1358769600">- Resolves: Bug 896256 - updating package touches configuration files</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-12" date="1361534400">- Resolves: Bug 910994 - PamConfig schema not updated during upgrade
- Resolves: Bug 910995 - Valgrind reports memleak in modify_update_last_modified_attr
- Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
- Resolves: Bug 911467 - DNA: use event queue for config update only at the start up
- Resolves: Bug 911468 - Error messages encountered when using POSIX winsync
- Resolves: Bug 911469 - dse.ldif is 0 length after server kill or machine kill
- Resolves: Bug 911474 - Invalid chaining config triggers a disk full error and shutdown
- Resolves: Bug 914305 - ns-slapd segfaults while trying to delete a tombstone entry
- Resolves: Bug 913228 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-13" date="1364817600">- Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)
- Resolves: Bug 929111 - Coverity issue 13091
- Resolves: Bug 929196 - Deadlock in DNA plug-in (ticket 634)
- Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
- Resolves: Bug 929115 - crash in aci evaluation (ticket 628)
- Resolves: Bug 923240 - unintended information exposure when anonymous access is set to rootdse (ticket 47308)</changelog>
<changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-14" date="1365595200">- Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
- Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)</changelog>

</package>

<package pkgid="6c88738bf85138425afa18f4ca0b498f231eac3b08ccefdd36275f864407a51f" name="git" arch="src">
    <version epoch="0" ver="1.7.1" rel="3.el6_4.1"/>

<changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 1.6.5-0.2.rc2" date="1254139200">- git-1.6.5.rc2
- Enable Linus' block-sha1 implementation</changelog>
<changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 1.6.5-1" date="1255262400">- git-1.6.5</changelog>
<changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 1.6.5.1-1" date="1255780800">- git-1.6.5.1</changelog>
<changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 1.6.5.2-1" date="1256558400">- git-1.6.5.2
- Drop asciidoc --unsafe option, it should not be needed anymore
- Don't use install -t/-T, they're not compatible with older coreutils
- Don't use -perm /a+x with find, it's incompatible with older findutils</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 1.6.5.2-1.1" date="1258113600">- Fix conditional for RHEL</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 1.6.5.2-1.2" date="1259841600">- Rebuilt for RHEL 6</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.7.1-1" date="1276171200">- update to 1.7.1 (#585990)
- Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
- Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
- Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
- Include gitweb/INSTALL file as documentation [Todd Zullinger]
- Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
- Install missing gitweb.js (#558740) [Todd Zullinger]
- Only BR perl(Error) [Todd Zullinger]
- Use config.mak to set build options [Todd Zullinger]
- Disable building of unused python remote helper libs [Todd Zullinger]
- Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
  - Place elisp source files in separate emacs-git-el package
  - Place git support files in own directory under site-lisp
  - Use Emacs packaging macros
- Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-2" date="1280232000">- fix CVE-2010-2542 (#618108)</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
<changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3.1" date="1361880000">- fix CVE-2013-0308</changelog>

</package>

<package pkgid="c36c02aa994327cf9d0724117240ddb5b4b89073f19b2ed83f78336c98552310" name="kernel" arch="src">
    <version epoch="0" ver="2.6.32" rel="358.6.2.el6"/>

<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-357.el6]" date="1359374400">- [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
- [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
- [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
- [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
- [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
- [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]</changelog>
<changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [2.6.32-358.el6]" date="1359460800">- [fs] Fix sget() race with failing mount (Eric Sandeen) [883276]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.1.1.el6]" date="1361016000">- [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
- [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
- [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
- [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
- [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
- [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
- [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
- [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
- [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
- [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
- [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
- [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
- [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
- [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
- [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
- [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
- [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
- [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
- [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
- [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
- [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
- [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
- [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
- [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
- [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
- [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
- [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
- [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
- [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
- [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
- [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
- [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
- [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
- [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
- [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
- [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
- [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
- [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
- [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
- [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.2.1.el6]" date="1361361600">- [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.3.1.el6]" date="1363003200">- [net] netfilter: improve out-of-sync situation in TCP tracking (Flavio Leitner) [917690 629857]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.4.1.el6]" date="1363608000">- [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [921150 913704]
- [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921961 896224]
- [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921961 896224]
- [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920268 916324]
- [powerpc] pseries: Fix partition migration hang in stop_topology_update (Steve Best) [921963 910597]
- [infiniband] qib: correction for faulty sparse warning correction (Jay Fenlason) [922154 901701]
- [usb] io_ti: Fix NULL dereference in chase_port() (Nikola Pajkovsky) [916198 916200] {CVE-2013-1774}
- [net] bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Nikola Pajkovsky) [914690 914691] {CVE-2013-0349}
- [char] tty: set_termios/set_termiox should not return -EINTR (Oleg Nesterov) [921145 904907]
- [netdrv] ehea: fix VLAN support (Steve Best) [921535 911359]
- [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919388 919389] {CVE-2013-1826}
- [net] dccp: check ccid before NULL poiter dereference (Weiping Pan) [919187 919188] {CVE-2013-1827}
- [mm] tmpfs: fix use-after-free of mempolicy object (Nikola Pajkovsky) [915714 915715] {CVE-2013-1767}
- [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916957 915135]
- [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915583 876600]
- [fs] cifs: after upcalling for krb5 creds, invalidate key rather than revoking it (Niels de Vos) [912452 885899]
- [fs] cifs: tmp_key_invalidate() should not set key-&gt;expiry to 0 (Niels de Vos) [912452 885899]
- [block] disable discard request merge temporarily (Mike Snitzer) [911475 907844]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.5.1.el6]" date="1364040000">- [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [921958 883905]
- [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] xfrm_user: fix info leak in copy_to_user_auth() (Thomas Graf) [922428 922429] {CVE-2012-6537}
- [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922386 922387] {CVE-2012-6546}
- [net] atm: fix info leak via getsockname() (Thomas Graf) [922386 922387] {CVE-2012-6546}
- [fs] nls: improve UTF8 -&gt; UTF16 string conversion routine (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
- [fs] fat: Fix stat-&gt;f_namelen (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
- [netdrv] tun: fix ioctl() based info leaks (Thomas Graf) [922350 922351] {CVE-2012-6547}
- [virt] x86: Add a check to catch Xen emulation of Hyper-V (Andrew Jones) [923204 918239]
- [fs] cifs: fix expand_dfs_referral (Sachin Prabhu) [923098 902492]
- [fs] cifs: factor smb_vol allocation out of cifs_setup_volume_info (Sachin Prabhu) [923098 902492]
- [fs] cifs: have cifs_cleanup_volume_info not take a double pointer (Sachin Prabhu) [923098 902492]
- [fs] nfs: Dont allow NFS silly-renamed files to be deleted, no signal (Dave Wysochanski) [920266 905095]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.6.1.el6]" date="1364558400">- [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
- [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
- [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
- [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
- [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
- [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
- [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
- [net] sunrpc: Get rid of the redundant xprt-&gt;shutdown bit field (J. Bruce Fields) [915579 893584]
- [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
- [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
- [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
- [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
- [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
- [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
- [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
- [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
- [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]</changelog>
<changelog author="Nikola Pajkovsky &lt;npajkovs@redhat.com&gt; [2.6.32-358.6.2.el6]" date="1368532800">- [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [2.6.32-358.6.2.el6.centos]" date="1368705600">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="85b32ee66f4a42dd91a493de61e3ba6f0faf9bbb6fe2481655bdc8d7942f0ea6" name="gnome-screensaver" arch="src">
    <version epoch="0" ver="2.28.3" rel="24.el6_4.1"/>

<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-16" date="1319544000">- More monitor dock fixes
  Resolves: #719023 746237
- Potential workaround for libxklavier brokeness
  Related: #677580</changelog>
<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-17" date="1320408000">- Fix crash on systems with single keyboard layouts
  Related: #677580,Resolves:751402</changelog>
<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-18" date="1320840000">- Revert libxklavier workarounds introduced in -16 and -17
  They're causing additional problems.
  Resolves: #677580</changelog>
<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-19" date="1348574400">- Fix fade on nvidia
  Resolves: #648869</changelog>
<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-20" date="1348660800">- Desensitize toggle in preferences when lock down is enabled
  Resolves: #759395</changelog>
<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-21" date="1348747200">- Fix sluggish unlock animation
  Resolves: #752230</changelog>
<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-22" date="1348747201">- Don't show unlock dialog immediately after user locks
  screen in some multimonitor scanarios
  Resolves: #744763</changelog>
<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-23" date="1348747202">- Don't allow mouse to escape primary monitor
  Resolves: #824752</changelog>
<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-24" date="1355832000">- Fix long fade at lock time
  Resolves: #848016</changelog>
<changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 2.28.3-24.1" date="1376568000">- When trying to acquire a contentious keyboard grab, don't
  nuke input focus, but instead move it to new grab window
  before taking grab.
  Resolves: #994868</changelog>

</package>

<package pkgid="ba1d2e6665b884ebfbcd0adefcae0a76a0390cb30dee352a9facd5097b88271a" name="cups" arch="src">
    <version epoch="1" ver="1.4.2" rel="50.el6_4.4"/>

<changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.4.2-45" date="1329220800">- Don't create zero-length request files (bug #740093).
- The lp and lpr commands did not cancel jobs queued from stdin on an error
  (STR #4015, bug #738914).
- Fixed condition in textonly filter to create temporary file
  regardless of the number of copies specified. (bug #738410)</changelog>
<changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.4.2-46" date="1332158400">- Fix lp and lpr return string (bug #740093).</changelog>
<changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; 1:1.4.2-47" date="1332158401">- cupsPrintFiles() did not report all errors (STR #3449, bug #740093)</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-48" date="1337601600">- Fix German translation of web interface search template (STR #3635,
  bug #806818).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-49" date="1345550400">- Avoid "forbidden" error when moving job between queues via web UI
  (bug #834445).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50" date="1351252800">- Fixed LDAP browsing issues (bug #870386).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50:.1" date="1355400000">- Applied patch to fix CVE-2012-5519 (privilege escalation for users
  in SystemGroup or with equivalent polkit permission).  This prevents
  HTTP PUT requests with paths under /admin/conf/ other than that for
  cupsd.conf, and also prevents such requests altering certain
  configuration directives such as PageLog and FileDevice (bug #875898).</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50:.2" date="1360929600">- Added documentation for new CVE-2012-5519 option.</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50:.3" date="1361793600">- Fix for CVE-2012-5519 patch: handle blacklisted lines that have no
  value part gracefully.</changelog>
<changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 1:1.4.2-50:.4" date="1361880000">- Added BrowseLDAPCACertFile and PrintcapGUI to restricted options
  list.</changelog>

</package>

<package pkgid="2b5c5b8e4c07f727cb6248936733686a22757bd7eef5d252d63de969f4755da6" name="tomcat6" arch="src">
    <version epoch="0" ver="6.0.24" rel="52.el6_4"/>

<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-42" date="1330603200">- Resolves cve-2012-0022 (2011-4858) rhbz 783728</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-43" date="1331640000">- Resolves: rhbz# 802396. Changes made to init script.</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-44" date="1333022400">- Resolves: CVE-2012-0022 regression. Change made to patch.</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-45" date="1337688000">- Resolves: rhbz 757632 regression</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-46" date="1349179200">- Resolves: rhbz 847288 classloader deadlock compiler JSPs
- Resolves: rhbz 785954 HTML filtering needed
- Resolves: rhbz 798617 init gives incorrect status</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-47" date="1352376000">- Resolves: rhbz 857066 apache bz 48843 ArrayIndexOutofBounds</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-48" date="1355227200">- Resolves: rhbz 576540 - regression init script in the 
- wrong place. Changed _initrddir definition herein to point to the 
- right place.</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-49" date="1358337600">- Related: rhbz 576540
- Javadoc is not being generated correctly by the build</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-50" date="1360584000">- Resolves: rhbz 882010 CVE-2012-3439 CVE-2012-5885 CVE-2012-5886 CVE-2012-5887
- three DIGEST authentication issues
- Resolves: rhbz 883692 CVE-2012-4534 Denial of service when using
- SSL NIO sendfile
- Resolves: rhbz 883705 CVE-2012-3546 Bypass of Realm security constraints</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-52" date="1362139200">- Related: rhbz 882010 rhbz 883692 rhbz 883705
- Javadoc generation did not work. Using targetrhel-6.4.Z-noarch-candidate
- to avoid building on ppc64, ppc, and x390x.</changelog>

</package>

<package pkgid="3a437ee55df1f9e485f0b6065d4bfa40f403e3fa071b98ef32b0501c5b1df9c0" name="tog-pegasus" arch="src">
    <version epoch="2" ver="2.12.0" rel="3.el6_4"/>

<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.9.1-2" date="1271937600">- Fix initscript permissions</changelog>
<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.9.1-3" date="1274788800">- Fix memory leak</changelog>
<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.9.1-4" date="1276776000">- Mark files in /var/lib/Pegasus as noverify in spec file</changelog>
<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.9.1-5" date="1279195200">- Add cimsub to the pegasus_arch_alternatives script</changelog>
<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.11.0-1" date="1311595200">- Update to upstream version 2.11.0
  Resolves: #633577
- Improve package to comply multilib policy
  Resolves: #607722
- Don't strip debug information
  Resolves: #693389
- Change build options
  Resolves: #694513</changelog>
<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.11.0-2" date="1311681600">- Add -libs requirement with explicit version to the main package
- Build with -fno-strict-aliasing
- Use correct init script
- Add OpenSLP support
  Resolves: #712525</changelog>
<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.11.0-3" date="1331035200">- Backport upstream patch which enables the embedded instanaces to have
  correct empty string values
  Resolves: #796191
- Add "cim-server" to provides
  Resolves: #799040</changelog>
<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.12.0-1" date="1349784000">- Update to upstream version 2.12.0
  Resolves: #825471, #739118, #716474
- Change post created symlinks group owner to 'pegasus'
  Resolves: #759064
- Fix invocation of useradd without specifying a UID
  Resolves: #800319
- Fix initscript is not world readable
  Resolves: #824297</changelog>
<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.12.0-2" date="1351512000">- Fix local-or-remote-auth patch to work with IPv6 and with enabled
  privilege separation
  Resolves: #869664</changelog>
<changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.12.0-3" date="1370865600">- Disable privilege separation
  Resolves: #957233</changelog>

</package>

<package pkgid="79646b7d323685762c33a61b26648937de05ea39317ff41acfb6c4a76ca6be04" name="selinux-policy" arch="src">
    <version epoch="0" ver="3.7.19" rel="195.el6_4.6"/>

<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-193" date="1358251200">- Fix ssh_sysadm_login boolean for MLS
Resolves:#865759
- Allow rpm_script_t to dbus communicate with certmonger_t
- More fixes for qemu-ga to make "guest-fsfreeze-freeze" working</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-194" date="1358337600">- qdiskd needs to read usr_t/bin_t files
- Allow dpsam to connect/bind to spamd ports
- Allow munin services plugins to bind to generic node
Resolves:#865759</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195" date="1358856000">- Make matahari domains as unconfined
- Allow nscd to connect to nmbd
Resolves:#901565
- Allow setcap/getcap for syslogd</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4" date="1361188800">- Fix tuned policy to make it working with the lastet tuned package
Resolves:#912392</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.1" date="1361361600">- Additional fix for tuned
- Backport openshift changes
Resolves:#912392</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.2" date="1362484800">- Allow cgred to use notify
Resolves:#917966
- Allow mount to transition to gluster
Resolves:#917972</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.3" date="1362571200">- Backport openshfit fixes
Resolves:#917966</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.4" date="1366804800">- Allow dirsrv-admin server to be restarted from console 
Resolves:#955703
- Allow dac_override for openshift-cron</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.5" date="1368100800">- Allow dirsrv-admin server to be restarted from console
Resolves:#955703</changelog>
<changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-195.el6_4.6" date="1369656000">- Allow myslqd-safe to execute shell_exec_t
Resolves:#966997
- Allow openshift-cron to read openshift link files in /var/lib</changelog>

</package>

<package pkgid="93ad0f63311f3b9cba97c0615d15ddaea01d5c6a8ff6f0c4899628556fa0c054" name="libcgroup" arch="src">
    <version epoch="0" ver="0.37" rel="7.1.el6"/>

<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 0.36-5" date="1277812800">- Relax the dependency on redhat-lsb package (#607537)
- Fix installation of -devel libraries (#607538)</changelog>
<changelog author="Ivana Hutarova Varekova &lt;varekova@redhat.com&gt; 0.36-6" date="1279108800">- Resolves: #609816
  serivces of libcgroup not LSB-compliant</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 0.37-1.el6" date="1292328000">- Updated to 0.37
  - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
  - fixed 'cgget' reading long variable values like devices.list (#626127)
  - fixed reading list of mounted controllers on library init (#635984)
  - fixed the library not to change current working directory when creating
    groups (#628895)
  - new user 'cgred' was added for better security - /bin/cgexec tool is no
    longer SUID to root but SGID to the new 'cgred' user, which has write
    access to /var/run/cgred.socket
  - may other fixes an enhancements
- Removed rpath from compiled binaries
- Fixed spelling and rpmlint errors in the .spec file (#634939)
- Fixed exit code of cgclassify tool (#667957)</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 0.37-2.el6" date="1298980800">- Fixed buffer overflow when parsing cgexec command line parameters.
- Added checking of source of netlink messages to cgrulesengd daemon.
- Resolves: CVE-2011-1006 CVE-2011-1022</changelog>
<changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; 0.37-3.el6" date="1309348800">- Fixed 'cgred' group not being created as system-group during installation
  of the package.
- Resolves: #715413</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-4" date="1329912000">- Resolves: #758493
  fixes the admin/assign id bug in libcgroup</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-5" date="1349956800">- resolves: #819137
  fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
- resolves: #773544
  made --sticky option effective when setuid(2) and setgid(2)
- resolves: #849757
  added inotify fd to scan running tasks and set control groups
- resolves: #738737
  logging improvement</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-6" date="1355745600">- related: #738737
  updated logging improvement
- resolves: #877042
  fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
- resolves: #869990
  fixed bug when cgconfig service was failing to start on read only file systems</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-7" date="1356004800">- related: #738737
  lowered default logging level from warning to error</changelog>
<changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; 0.37-7.1" date="1361361600">- resolves: #913282
  fixed problem when cgred service could segfault if entry in cgrules.conf file
  doesn't specify procname</changelog>

</package>

<package pkgid="0f2ba7e315682bd634019c48982b5a8e25f2ff05889344db1cad7ed61382314f" name="thunderbird" arch="src">
    <version epoch="0" ver="17.0.8" rel="5.el6.centos"/>

<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0b2-0.1" date="1352376000">- Update to 17.0b2</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0-2" date="1353326400">- Update to 17.0 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.2-2" date="1358424000">- Update to 17.0.2 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.3-1" date="1361016000">- Update to 17.0.3 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.3-2" date="1362657600">- Added fix for #848644</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.5-1" date="1364558400">- Update to 17.0.5 ESR</changelog>
<changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 17.0.6-2" date="1368187200">- Update to 17.0.6 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.7-1" date="1371816000">- Update to 17.0.7 ESR</changelog>
<changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 17.0.8-5" date="1375444800">- Update to 17.0.8 ESR
- Added strict aliasing patch (mozbz#821502)</changelog>
<changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt; - 17.0.8-5.el6.centos" date="1375876800">- Roll in CentOS Branding</changelog>

</package>

<package pkgid="fce02f0f11c7813e238dbecd55c8782b3b3818305b56beadf02c3e96bb1d07ed" name="ksh" arch="src">
    <version epoch="0" ver="20100621" rel="19.el6_4.3"/>

<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-11" date="1317902400">- ksh sometimes returns wrong exit code when pid numbers are being recycled (#743842)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-12" date="1318334400">- previous fix did not scale well, use different approach (#743842)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-13" date="1324296000">- fix: ksh can exit prematurely without crash or any error (#742930)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-14" date="1330689600">- fix data corruption in a here-document section of a script at byte 8192 (#786787)
- restore tty settings after timed out read (#577223)
- do not create extra process when it's not needed (#781976)
- fix file descriptor leak (#781498)
- do not segfault on incorrect oop code (#743840)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-15" date="1331121600">- do not crash when using a lot of file descriptors (#798868)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-16" date="1334145600">- tilda expansion does not work correctly (#800684)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-17" date="1349179200">- flush output before forking (#827512)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-18" date="1351598400">- build with the logging ability (#869155)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-19" date="1351771200">- assigning a right justified typedef'd variable to a smaller one
  could corrupt the result (#846678)
- fix exporting of l/r-justified variable (#846678)</changelog>
<changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20100621-19.3" date="1365508800">- do not crash when using more file descriptors (#924440)
- skipped a few release numbers</changelog>

</package>

<package pkgid="3710243fa210fa0902c4d2d7d25c429ce7bae3f0df8626e510a7b5547529f0cf" name="pcs" arch="src">
    <version epoch="0" ver="0.9.26" rel="10.el6_4.1"/>

<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.25-1" date="1348488000">- Resync to latest version of pcs</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.26-1" date="1348574400">- Resync to latest version of pcs</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.26-2" date="1348574401">- Updates to fix issues with RHEL6 and pcs/corosync/pacemaker</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.26-3" date="1352635200">- Added in missing pcs resource move/unmove functionality
- Resolves: rhbz#878681</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.26-6" date="1354622400">- Added additional specific steps for configuring pcs on Red Hat Enterprise
  Linux 6
- Resolves: rhbz#878682</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.26-7" date="1354622401">- Fixed minor issue with pcs resource move/unmove display
- Resolves: rhbz#878681</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.26-8" date="1355745600">- Fixed issue with error when listing resource providers and standards
- Resolves: rhbz#bz887870</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.26-9" date="1358251200">- pcs now allows assigning constraints to group/clone/multistate resources
- pcs no longer deletes resources from the lrm during resource removal
- Resolves: rhbz#894174 rhbz#893221</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.26-10" date="1358856000">- Removed one extra place where pcs incorrectly deleted resources from the lrm
- Resolves: rhbz#893221</changelog>
<changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.26-10.el6_4.1" date="1363003200">- Fixed missing master/slave resources in 'pcs config'
- Resolves: rhbz#915585</changelog>

</package>

<package pkgid="6ae2fb6675d5a0d47d8f3e325267f0dc1d66b00840e11b546d508c3c3286bf46" name="spice-server" arch="src">
    <version epoch="0" ver="0.12.0" rel="12.el6_4.2"/>

<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-5" date="1353931200">- Fix various migration related bugs
  * don't process both cmd ring and dispatcher queue till migration data is received
  * fix assigning bad memory references to marshaller
  * fix memory corruption when receiving display migration data that exceeds 1024 bytes
  Resolves: rhbz#866929
  Resolves: rhbz#862352
  Resolves: rhbz#878700</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-6" date="1354190400">- Fix sending internal images with stride &gt; bpp*width to lz compression
  Resolves: rhbz#876685</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-7" date="1354536000">- Fix mishandling of agent data received from the client after agent disconnection
  Resolves: rhbz#881980</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-8" date="1354881600">- Fix crash when reconnecting while a video is played
  Resolves: rhbz#883564</changelog>
<changelog author="Uri Lublin &lt;uril@redhat.com&gt; 0.12.0-9" date="1355745600">- Fix calling set_client_capabilities when it is unsupported by qemu
  (fixes a crash when qemu-kvm is started with spice but without qxl)
  Resolves: rhbz#880276</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-10" date="1356004800">- Fix throwing away drawables that have masks
  Resolves: rhbz#864982</changelog>
<changelog author="Uri Lublin &lt;uril@redhat.com&gt; 0.12.0-11" date="1357732800">- Fix a crash when setting screen-saver properties.
- Fix a leak.
  Resolves: rhbz#891326</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.12.0-12" date="1358337600">- Fix a crash when rapidly changing monitor configuration
  Resolves: rhbz#868807</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; - 0.12.0-12.el6_4.1" date="1368100800">- Migration related fixes
  * Destroy video streams before sending MSG_MIGRATE
  * Fix wrong is_low_bandwidth setting after 2 migrations of a session
    that was originally a low bandwidth one.
  Resolves: rhbz#956984
  Resolves: rhbz#961427</changelog>
<changelog author="Uri Lublin &lt;uril@redhat.com&gt; - 0.12.0-12.el6_4.2" date="1371729600">- Fix a crash running a F19 guest -- do not abort on stride &gt; 0
  Resolves: rhbz#973703</changelog>

</package>

<package pkgid="258323b68526cc620b799d3dda21001be784784e1c508d8c513cf2b2a519262f" name="prelink" arch="src">
    <version epoch="0" ver="0.4.6" rel="3.1.el6_4"/>

<changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 0.4.3-4" date="1279108800">- for prelink -u -o ... if no .gnu.prelink_undo section is
  present just pass through the original bits to the output file
  instead of saving the ELF file using libelf into a temporary
  and then copying over or renaming that to the final output file
  (#614382)</changelog>
<changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 0.4.4-1" date="1290513600">- support copying over extended attributes (#456105)
- handle DW_OP_GNU_implicit_pointer, fix handling of DW_OP_call_ref</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.4-2" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
<changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 0.4.5-1" date="1301659200">- handle DW_OP_GNU_entry_value and DW_AT_GNU_call_site*</changelog>
<changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 0.4.5-2" date="1306843200">- handle DW_OP_GNU_{{const,regval,deref}_type,convert,reinterpret}</changelog>
<changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 0.4.5-3" date="1308744000">- handle DW_OP_GNU_parameter_ref</changelog>
<changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 0.4.6-1" date="1314360000">- enable for arm (#733089)
  - adjust arm default dynamic linker
  - fix up fast PIE detection to handle PT_LOPROC ... PT_HIPROC phdrs
    before PT_PHDR
  - disable cxx{1,2}.sh test checking for conflict removal on arm
    due to EABI weirdnesses, add new cxx3.sh test that tests conflict
    removal even on arm</changelog>
<changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 0.4.6-2" date="1314360001">- fix cxx3.sh for ppc</changelog>
<changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 0.4.6-3" date="1318420800">- add --layout-page-size=N option, default to --layout-page-size=32768
  on AMD Bulldozer (#739460)
- handle 0%{?rhel} &gt;= 7 like 0%{?fedora} &gt;= 13</changelog>
<changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 0.4.6-3.1" date="1374235200">- fix saving of cache if some dependencies are unprelinkable and their                                            
  dependencies bad (#788238)                                                                                      
- fix up DWARF4 DW_AT_data_member_location handling                                                               
- add .debug_macro support                                                                                        
- add DWZ multifile support</changelog>

</package>

<package pkgid="500951a099c45f76a6cc6d9e9195f46a74c04a838aa80bd273bc27e8c5565677" name="python-rtslib" arch="src">
    <version epoch="0" ver="2.1.fb21" rel="3.el6_4"/>

<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.9.9-1" date="1305028800">- Initial packaging</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1.9.9-6" date="1313582400">- Update based on review comments
  - Fully document steps to build archive
  - Remove commented-out extraneous text
  - Remove a repeat in Requires line
  - Update git-version.patch to have proper sha1
  - Change location of fabric spec files to /var/lib/target
- Remove unused specs</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb9-1" date="1329307200">- Update from Fedora</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb12-1" date="1331035200">- New upstream version, from Fedora</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb12-2" date="1334836800">- Add patch fix-nodeacl-dump.patch</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb12-3" date="1337860800">- Add patch retry-target-creation.patch for bz 815981</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb20-1" date="1344340800">- Update to new upstream version
- Remove patches
  * fix nodeacl-dump.patch
  * retry-target-creation.patch</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb21-1" date="1344427200">- Update for new upstream version</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb21-2" date="1362139200">- Add patch fix-exception-in-pscsi-backstore.patch</changelog>
<changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb21-3" date="1370347200">- Add patches:
  * fix-pscsi-1.patch
  * fix-pscsi-2.patch</changelog>

</package>

<package pkgid="d4a5e9402ae2618e6348f08c2c96a979840483d7cb4b98fff38f031835d5d472" name="mdadm" arch="src">
    <version epoch="0" ver="3.2.5" rel="4.el6_4.1"/>

<changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.2.3-7" date="1333800000">- Fix Monitor mode sometimes crashes when a resync completes
- Fix missing symlink for mdadm container device when incremental creates
  the array
- Make sure when creating a second array in a container that the second
  array uses all available space since leaving space for a third array
  is invalid
- Validate the number of imsm volumes per controller
- Fix issues with imsm arrays and disks larger than 2TB
- Add support for expanding imsm arrays/containers
- Resolves: bz808424, bz808519, bz808492, bz808438, bz808507,
	    bz808475</changelog>
<changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.2.3-8" date="1335182400">- The support for expanding imsm arrays/containers was accepted upstream,
  update to the official patches from there
- Fix for the issue of --add not being very smart
- Fix an issue causing rebuilds to fail to restart on reboot (data
  corrupter level problem)
- Reset the bad flag on map file updates
- bitmap_offset is signed, treat it as such
- Related: bz808475
- Resolves: bz808776, bz812001, bz814743, bz811282</changelog>
<changelog author="Jes Sorensen &lt;Jes.Sorensen@redhat.com&gt; - 3.2.3-9" date="1335441600">- Correctly fix failure when trying to add internal bitmap to 1.0 arrays
- Resolves bz811282</changelog>
<changelog author="Jes Sorensen &lt;Jes.Sorensen@redhat.com&gt; - 3.2.3-10" date="1336651200">- Fix man-page to state the correct location for the device-map file
- Resolves bz820643</changelog>
<changelog author="Jes Sorensen &lt;Jes.Sorensen@redhat.com&gt; - 3.2.3-11" date="1338465600">- Fix case where reshape of IMSM RAID fails because we don't check the
  return value when trying to read the word 'degraded' from sysfs,
  resulting in the use of random stack data.
- Resolves bz824815</changelog>
<changelog author="Jes Sorensen &lt;Jes.Sorensen@redhat.com&gt; - 3.2.5-1" date="1344600000">- Update mdadm to upstream release v3.2.5
  This includes all current patches, except for
  mdadm-3.2.3-imsm-fix-correct-checking-volume-s-degradation.patch
- Resolved bz812358</changelog>
<changelog author="Jes Sorensen &lt;Jes.Sorensen@redhat.com&gt; - 3.2.5-2" date="1349352000">- Resolve issue with ambiguous licenses
- Resolves bz862565</changelog>
<changelog author="Jes Sorensen &lt;Jes.Sorensen@redhat.com&gt; - 3.2.5-3" date="1354104000">- Avoid corruption by prohibiting an IMSM array from spanning multiple
  controllers (bz878810)
- Prevent creation of a second IMSM array of size 0 (bz880208)
- Avoid segfault when running mdadm --detail on an IMSM raid1 array
  where two drives have been disabled (bz880225)
- Resolves bz878810, bz880208, bz880225</changelog>
<changelog author="Jes Sorensen &lt;Jes.Sorensen@redhat.com&gt; - 3.2.5-4" date="1354795200">- Fix typo in error message in fix for 880208. No code functional change
- Resolves bz880208</changelog>
<changelog author="Jes Sorensen &lt;Jes.Sorensen@redhat.com&gt; - 3.2.5-4.1" date="1367928000">- Z-Stream fix
- Fix problem with IMSM metadata where resync progress would be lost
  if an array was stopped during ongoing expansion of a RAID1/5 volume.
- Fix problem with IMSM RAID5 not rebuilding after reboot
- Resolves bz958024, bz960612</changelog>

</package>

<package pkgid="1bb1f3d82a54b5a9034c697e0c1eaef026d3e9699f58cf2e02c1fe2613655cd1" name="fence-agents" arch="src">
    <version epoch="0" ver="3.1.5" rel="25.el6_4.2"/>

<changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 3.1.5-17" date="1334232000">- fence_brocade: does not accept "action" option from STDIN
  Resolves: rhbz#804805</changelog>
<changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; -  3.1.5-18" date="1345032000">- fence_eaton_snmp: add agent to supported matrix
  Resolves: rhbz#752449</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 3.1.5-19" date="1347883200">- fence_scsi: add metadata action to man page
  Resolves: rhbz#825667</changelog>
<changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 3.0.15-20" date="1349352000">- fence_ipdu: New fence agent for IBM iPDU
  Resolves: rhbz#740869
- fence_hpblade: New fence agent for HP blades
  Resolves: rhbz#818337
- Add fence symlinks for most used fence agents
  Resolves: rhbz#800650
- Fix unique attributes in XML output
  Resolves: rhbz#822507
- Automatic detection of EOL in telnet sessions
  Resolves: rhbz#823430</changelog>
<changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 3.0.15-21" date="1349697600">- fence_vmware_soap: Faster fencing and fix issue with VM without valid UUID
  Resolves: rhbz#769798
- fence_rhevm: Support new RHEV-M API
  Resolves: rhbz#863568</changelog>
<changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 3.0.15-22" date="1349697601">- fencing: add action=metadata to the rest of the fence agents
  Resolves: rhbz#837174</changelog>
<changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 3.0.15-23" date="1349784000">- fence_rhevm: fix typo in RE
  Resolves: rhbz#863568</changelog>
<changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 3.0.15-24" date="1349784001">- fence_ipdu, fence_hpblade: fix building process</changelog>
<changelog author="Ryan O&apos;Hara &lt;rohara@redhat.com&gt; - 3.0.15-25" date="1356004800">- fence_scsi: allow action=metadata via STDIN
  Resolves: rhbz#837174</changelog>
<changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 3.0.15-25.2" date="1360238400">- fence_drac5: fix regression due to invalid EOL
  Resolves: rhbz#908401
- fence_vmware_soap: traceback when hostname cannot be resolved
  Resolves: rhbz#908409</changelog>

</package>

<package pkgid="7a43f000ddafc7dc5268ad186f532c982f9774578b3f532e8aa45d529a255224" name="util-linux-ng" arch="src">
    <version epoch="0" ver="2.17.2" rel="12.9.el6_4.2"/>

<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.3" date="1314705600">- fix fatal typos in patch for #723546</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.4" date="1316088000">- fix CVE-2011-1675 - mount fails to anticipate RLIMIT_FSIZE
- fix CVE-2011-1677 - umount may fail to remove /etc/mtab~ lock file</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.5" date="1330948800">- fix #588419 - Changing the console login timeout
- fix #740163 - 'fdisk -l' returns confusing output
- fix #785142 - uuidd service not active by defaul
- fix #797888 - script does not play well with csh when invoked from within /etc/csh.login</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.6" date="1332936000">- fix #785142 - uuidd service not active by default</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.7" date="1333713600">- fix #740163 - 'fdisk -l' returns confusing output (sfdisk)</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.8" date="1349179200">- fix #679833 - [RFE] tailf should support `-n 0`
- fix #719927 - [RFE] add adjtimex --compare functionality to hwclock
- fix #730272 - losetup does not warn if backing file is &lt; 512 bytes
- fix #730891 - document cfdisk and sfdisk incompatibility with 4096-bytes sectors
- fix #736245 - lscpu segfault on non-uniform cpu configuration
- fix #783514 - default barrier setting for EXT3 filesystems in mount manpage is wrong
- fix #790728 - blkid ignores swap UUIDs if the first byte is a zero byte
- fix #818621 - lsblk should not open device it prints info about
- fix #819945 - hwclock --systz causes a system time jump
- fix #820183 - mount(8) man page should include relatime in defaults definition
- fix #823008 - update to the latest upstream lscpu and chcpu
- fix #837935 - lscpu coredumps on a system with 158 active processors
- fix #839281 - inode_readahead for ext4 should be inode_readahead_blks
- fix #845477 - Duplicate SElinux mount options cause mounting from the commandline to fail
- fix #845971 - while reading /etc/fstab, mount command returns a device before a directory
- fix #858009 - login doesn't update /var/run/utmp properly
- fix #809449 - Backport inverse tree (-s) option for lsblk and related patches
- fix #809139 - lsblk option -D missing in manpage</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.9" date="1357732800">- fix #892471 - CVE-2013-0157 mount folder existence information disclosure</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.9.el6_4" date="1365595200">- fix #911756 - Make silicon medley signature recognition more robust</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.9.el6_4.1" date="1366113600">- fix patch for #911756 to make it usable on big-endian machines</changelog>
<changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.9.el6_4.2" date="1366113601">- make patch for #911756 more robust</changelog>

</package>

<package pkgid="d59b36a2e01d642fa9686e2965c8733719593a3b96f493671554c6746fb2ff97" name="xfsprogs" arch="src">
    <version epoch="0" ver="3.1.1" rel="10.el6_4.1"/>

<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.1-2" date="1265025600">- Fix mkfs of target with nothing blkid can recognize (#561870)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.1-3" date="1268654400">- Fix missing locking for btree manipulation in xfs_repair (#573831)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.1-4" date="1273492800">- Two important fixes from 3.1.2 release (#590773)
- Fix up attribute handling in xfs_fsr
- Make sure xfs_admin writes both sb fields when changing lazy_count</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.1-5" date="1307102400">- Don't try to report quotas which aren't there (#679154)</changelog>
<changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 3.1.1-6" date="1311595200">- Check if agno is inside the filesystem (#694706)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.1-7" date="1329307200">- Fix xfs_metadump hang (#730886)
- mkfs.xfs: don't increase agblocks past maximum (#738279)
- Fix double reporting of quota values (#749435)
- xfs_quota: handle malformed entries in mtab (749434)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.1-8" date="1348574400">- mkfs.xfs: better handle misaligned 4k devices (#836433)
- mkfs.xfs: default to physical sectorsize (#836433)
- mkfs.xfs: clarify errors when specified AG size is too large (#730433)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.1-9" date="1350302400">- Add 32-bit project ID support (#827186)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.1-10" date="1354104000">- Validate string -&gt; number conversion (#878859)</changelog>
<changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.1-10.1" date="1371643200">- mkfs.xfs: Use multidisk mode when geometry is on cmdline (#971698)
- xfs_repair: Handle fragmented multiblock dir2 directories (#976217)</changelog>

</package>

<package pkgid="3ac6cf42c00d16af74cd1d0e022ec2f654efb121df4aec076892734699516244" name="pidgin" arch="src">
    <version epoch="0" ver="2.7.9" rel="10.el6_4.1"/>

<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.7.9-2.el6" date="1299844800">- Add patch for CVE-2011-1091 (RH bug #683031).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.7.9-3.el6" date="1300104000">- Add patch for RH bug #684685 (zero-out crypto keys before freeing).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.7.9-4.el6" date="1323691200">- Add patch for CVE-2011-4601 (RH bug #766453).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.7.9-5.el6" date="1323691201">- Add patch for CVE-2011-4602 (RH bug #766453).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.7.9-6.el6" date="1341489600">- Add patch for CVE-2012-1178 (RH bug #837560).
- Add patch for CVE-2012-2318 (RH bug #837560).
- Add patch for CVE-2012-3374 (RH bug #837560).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.7.9-7.el6" date="1341835200">- Add patch for CVE-2011-2485 (RH bug #837562).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.7.9-8.el6" date="1361534400">- Add patch for CVE-2013-0272 (RH bug #910653).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.7.9-9.el6" date="1361534401">- Add patch for CVE-2013-0273 (RH bug #910653).</changelog>
<changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 2.7.9-10.el6" date="1361534402">- Add patch for CVE-2013-0274 (RH bug #910653).</changelog>
<changelog author="Huzaifa Sidhpurwala &lt;huzaifas@redhat.com&gt; - 2.7.9-10.el6_4.1" date="1362398400">- Fix spec file for disttag</changelog>

</package>

<package pkgid="ba4934b58aaf0cf19ae68b6f3f3556026c3632fa510a6b0f075e9fc7b2124c66" name="tomcat6" arch="src">
    <version epoch="0" ver="6.0.24" rel="55.el6_4"/>

<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-45" date="1337688000">- Resolves: rhbz 757632 regression</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-46" date="1349179200">- Resolves: rhbz 847288 classloader deadlock compiler JSPs
- Resolves: rhbz 785954 HTML filtering needed
- Resolves: rhbz 798617 init gives incorrect status</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-47" date="1352376000">- Resolves: rhbz 857066 apache bz 48843 ArrayIndexOutofBounds</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-48" date="1355227200">- Resolves: rhbz 576540 - regression init script in the 
- wrong place. Changed _initrddir definition herein to point to the 
- right place.</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-49" date="1358337600">- Related: rhbz 576540
- Javadoc is not being generated correctly by the build</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-50" date="1360584000">- Resolves: rhbz 882010 CVE-2012-3439 CVE-2012-5885 CVE-2012-5886 CVE-2012-5887
- three DIGEST authentication issues
- Resolves: rhbz 883692 CVE-2012-4534 Denial of service when using
- SSL NIO sendfile
- Resolves: rhbz 883705 CVE-2012-3546 Bypass of Realm security constraints</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-52" date="1362139200">- Related: rhbz 882010 rhbz 883692 rhbz 883705
- Javadoc generation did not work. Using targetrhel-6.4.Z-noarch-candidate
- to avoid building on ppc64, ppc, and x390x.</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-53" date="1367409600">- Resolves: rhbz#955976 CVE-2013-1976 improper TOMCAT_LOG
- management in init script</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-54" date="1367841600">- Resolves: rhbz#956771 Related: CVE-2012-3439 digest 
- authentication broken after errata for cve-2012-3439
- patch for 3439 corrected</changelog>
<changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-55" date="1368619200">- Related: rhbz#955976 CVE-2013-1976. Changed log location
- so only root can use it. Touching TOMCAT_LOG is no longer
- required</changelog>

</package>

<package pkgid="257edc25c2f27bde625259c9924e3ec2111791349c4959f5a0d731386473de30" name="iputils" arch="src">
    <version epoch="0" ver="20071127" rel="17.el6_4"/>

<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 20071127-9" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 20071127-9.1" date="1259582400">- Rebuilt for RHEL 6</changelog>
<changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 20071127-10" date="1262779200">- Related: rhbz#543948
- fixed license</changelog>
<changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 20071127-11" date="1268740800">- Resolves: #574036 - arping ignores the deadline option</changelog>
<changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 20071127-12" date="1273665600">- Resolves: #586114 - ping6 does not support -F flowlabel and nexthop option</changelog>
<changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 20071127-13" date="1280232000">- Resolves: CVE-2010-2529 - prevent DoS vulnerability in ping</changelog>
<changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 20071127-14" date="1283774400">- Resolves: #630022 - [security audit] iputils lost PIE</changelog>
<changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 20071127-15" date="1295956800">- Resolves: #671579 - tracepath6 fails to resolve target when using -n option</changelog>
<changelog author="Jiri Skala &lt;jskala@redhat.com&gt; - 20071127-16" date="1300795200">- Resolves: #688332 - rdisc error message with two IP addresses on one dev</changelog>
<changelog author="Jan Synáček &lt;jsynacek@redhat.com&gt; - 20071127-17" date="1369656000">- Resolves: #963927 - arping is not compatible with network namespaces</changelog>

</package>

<package pkgid="5d577c433750a161512f6efe0185ea5fac951f036000b60cf5be6d38e41c63ec" name="ruby" arch="src">
    <version epoch="0" ver="1.8.7.352" rel="10.el6_4"/>

<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.299-7" date="1296561600">- Reverted to the readline5. The mentioned version change is relevant only
  for Ruby 1.9.</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.299-8" date="1304337600">- Address CVE-2011-1004 "Symlink race condition by removing directory trees in
  fileutils module"
  * ruby-1.8.7-CVE-2011-1004.patch
- Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
  * ruby-1.8.7-CVE-2011-1005.patch
- Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
  * ruby-1.8.7-CVE-2011-0188.patch
- Resolves: rhbz#709964</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-1" date="1310472000">- Update to Ruby 1.8.7-p352.
  * Remove Patch43: ruby-1.8.7-CVE-2011-1004.patch; subsumed
  * Remove Patch44: ruby-1.8.7-CVE-2011-1005.patch; subsumed
  * Remove Patch200: ruby-1.8.7-webrick-CVE.patch; subsumed
- Resolves: rhbz#706332
- Fix of conflict between 32bit and 64bit library versions.
- Resolves: rhbz#674787
- Add systemtap static probes.
- Resolves: rhbz#673162
- Remove duplicate path entry
- Resolves: rhbz#722887</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-2" date="1312804800">- Fix of ruby interpreter crash in FIPS mode.
  * ruby-1.8.7-FIPS.patch
- Resolves: rhbz#717709</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-3" date="1313150400">- mkconfig.rb: fix for continued lines.
  * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
- Resolves: rhbz#730287</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-4" date="1324296000">- Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
  attacks (oCERT-2011-003)"
  * ruby-1.8.7-p352-CVE-2011-4815.patch
- Resolves: rhbz#768833</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-7" date="1330948800">- Addresses segfauls in Marshal.load.
  * ruby-1.8.7-p358-marshal-load-segv-fix.patch
- Resolves: rhbz#789120</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-8" date="1361880000">- Addresses entity expansion DoS vulnerability in REXML.
  * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
- Resolves: rhbz#915379</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-9" date="1362052800">- Fix regression introduced by fix for entity expansion DOS vulnerability
  in REXML (https://bugs.ruby-lang.org/issues/7961)
  * ruby-2.0.0-add-missing-rexml-require.patch
- Related: rhbz#915379</changelog>
<changelog author="Vít Ondruch &lt;vondruch@redhat.com&gt; - 1.8.7.352-10" date="1362139200">- $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  * ruby-1.8.7-p371-CVE-2012-4481.patch
  - Related: rhbz#915379</changelog>

</package>

<package pkgid="2d782c4aab712a61e7ced45c17df8fd40af4231a6ba1dfa4f4ed09040fe4a8da" name="java-1.7.0-openjdk" arch="src">
    <version epoch="1" ver="1.7.0.9" rel="2.3.7.1.el6_3"/>

<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.3.el6.1" date="1350302400">- Changed permissions of sa-jdi.jar to correct 644
- Resolves: rhbz#865050</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.3.2.el6" date="1354276800">- Sync with 6.4
- introduced tmp-patches source tarball
- release tag moved before dist (see 875245)
- Resolves: rhbz#880352</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.11-2.4.0.1.el6" date="1358164800">- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
- Added jxmd and idlj to alternatives
- make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
- Unapplied patch302 and deleted systemtap.patch
- buildver increased to 11
- icedtea_version set to 2.4.0
- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
- removed tmp-patches source tarball
- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
- Resolves: rhbz#895033</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.4.1.el6" date="1358251200">- Rewerted to IcedTea 2.3.4
  - rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - removed jxmd and idlj to alternatives
  - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - re-applied patch302 and restored systemtap.patch
  - buildver set to 9
  - icedtea_version set to 2.3.4
  - unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - restored tmp-patches source tarball
  - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
    java.security-linux back to java.security
- Resolves: rhbz#895033</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.el6_3" date="1359892800">- Bumped to 2.3.5
- Changed BR to java7-devel &gt;= 1:1.7.0 as required by CORBA changes in 2.3.5
- Resolves: rhbz#906707</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.el6_3.1" date="1360152000">- Backed out 6664509 and 7201064.patch which cause regressions</changelog>
<changelog author="Deepak Bhole &lt;dbhole@redhat.com&gt; - 1.7.0.9-2.3.5.1.el6_3" date="1360238400">- Removed 6664509 backout and added 8005615 to fix the issue</changelog>
<changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 1.7.0.9-2.3.5.3.el6_3" date="1360238401">- Sync logging fixes with upstream (icedtea7-forest and jdk7u)</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.0.el6_3" date="1361016000">- Removed patch1000 sec-2013-02-01-8005615.patch
- Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
- Removed patch1010 sec-2013-02-01-7201064.patch
- Removed testing
 - mauve was outdated and
 - jtreg was icedtea relict
- Updated  to icedtea 2.3.7
- Added java -Xshare:dump to post (see 513605) fo jitarchs
- Resolves: rhbz#911529</changelog>
<changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0.9-2.3.7.1.el6_3" date="1361188800">- Updated main source tarball
- Resolves: rhbz#911529</changelog>

</package>

<package pkgid="d385533d531364a8bc2abe80010cde6f7ea20d4da248fd19f71fd364aeb47cb8" name="openhpi" arch="src">
    <version epoch="0" ver="2.14.1" rel="3.el6_4.3"/>

<changelog author="Dan Horak &lt;dan[at]danny.cz&gt; - 2.14.0-3" date="1247572800">- add BR: libuuid-devel</changelog>
<changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.14.0-4" date="1248523200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
<changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.14.0-5" date="1250856000">- rebuilt with new openssl</changelog>
<changelog author="Dan Horák &lt;dan[at]danny.cz&gt; - 2.14.0-6" date="1255089600">- rebuilt with net-snmp 5.5</changelog>
<changelog author="Dan Horák &lt;dan[at]danny.cz&gt; - 2.14.1-1" date="1259150400">- updated to bug fix release 2.14.1</changelog>
<changelog author="Dan Horák &lt;dan[at]danny.cz&gt; - 2.14.1-2" date="1263556800">- added fix for inconsistent SaHpi.h
- Related: #459522</changelog>
<changelog author="Dan Horák &lt;dhorak@redhat.com&gt; - 2.14.1-3" date="1268136000">- switched to new initscript
- Related: #543948</changelog>
<changelog author="Dan Horák &lt;dhorak@redhat.com&gt; - 2.14.1-3.1" date="1359028800">- Fix support for Power Supply Serial/Part Numbers (#915336),
  patch by Michele Baldessari &lt;michele@redhat.com&gt;
- Resolves: #915336</changelog>
<changelog author="Dan Horák &lt;dhorak@redhat.com&gt; - 2.14.1-3.2" date="1366372800">- add mssing sensor RDRs for the fan resource (#969003)
- fix openhpi connection failures with redundant OAs (#969004)
- fix segfaults when retrieving thermal info (#969005)
- add missing thermal sensors (#969006)
- Resolves: #969003, #969004, #969003, #969006</changelog>
<changelog author="Dan Horák &lt;dhorak@redhat.com&gt; - 2.14.1-3.3" date="1369915200">- add explicit Requires for the main package</changelog>

</package>

<package pkgid="ab3f69a8240896456708536131e02dfa4da0d1353ad1db155a1b5a92c6d09807" name="subversion" arch="src">
    <version epoch="0" ver="1.6.11" rel="9.el6_4"/>

<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.9-2" date="1266062400">- fix detection of libkdecore</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-1" date="1271505600">- update to 1.6.11 (#587588)
- BR zip and unzip to fix JAR repacking (#587222)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-2" date="1283515200">- restore PIE support (#629940)
- build using GCJ</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-3" date="1286971200">- add security fix for CVE-2010-3315 (#640323)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-4" date="1308916800">- add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709221)
- add security fix for CVE-2011-0715 (#681174)
- add security fixes for CVE-2010-4644, CVE-2010-4539 (#672679)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-5" date="1330516800">- add init script for svnserve (#720790, #711904)
- fix segfault with "AuthzForceUsernameCase lower" (#751321)
- fix parent directory access with merges (#749494)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-6" date="1334059200">- fix return value for non-root "start" in svnserve.init (#711904)</changelog>
<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-7" date="1334232000">- fix regression in patch for #749494 (upstream r1174076)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-8" date="1364904000">- add security fix for CVE-2013-1845 (#947372)</changelog>
<changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.6.11-9" date="1364904001">- add security fixes for CVE-2013-1846, CVE-2013-1847, CVE-2013-1849 (#947372)</changelog>

</package>

<package pkgid="2debffb371943602069702349e73fc76e2b2d93e2e4d5ef5e93125695d62baa0" name="spice-server" arch="src">
    <version epoch="0" ver="0.12.0" rel="12.el6_4.3"/>

<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-6" date="1354190400">- Fix sending internal images with stride &gt; bpp*width to lz compression
  Resolves: rhbz#876685</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-7" date="1354536000">- Fix mishandling of agent data received from the client after agent disconnection
  Resolves: rhbz#881980</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-8" date="1354881600">- Fix crash when reconnecting while a video is played
  Resolves: rhbz#883564</changelog>
<changelog author="Uri Lublin &lt;uril@redhat.com&gt; 0.12.0-9" date="1355745600">- Fix calling set_client_capabilities when it is unsupported by qemu
  (fixes a crash when qemu-kvm is started with spice but without qxl)
  Resolves: rhbz#880276</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; 0.12.0-10" date="1356004800">- Fix throwing away drawables that have masks
  Resolves: rhbz#864982</changelog>
<changelog author="Uri Lublin &lt;uril@redhat.com&gt; 0.12.0-11" date="1357732800">- Fix a crash when setting screen-saver properties.
- Fix a leak.
  Resolves: rhbz#891326</changelog>
<changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.12.0-12" date="1358337600">- Fix a crash when rapidly changing monitor configuration
  Resolves: rhbz#868807</changelog>
<changelog author="Yonit Halperin &lt;yhalperi@redhat.com&gt; - 0.12.0-12.el6_4.1" date="1368100800">- Migration related fixes
  * Destroy video streams before sending MSG_MIGRATE
  * Fix wrong is_low_bandwidth setting after 2 migrations of a session
    that was originally a low bandwidth one.
  Resolves: rhbz#956984
  Resolves: rhbz#961427</changelog>
<changelog author="Uri Lublin &lt;uril@redhat.com&gt; - 0.12.0-12.el6_4.2" date="1371729600">- Fix a crash running a F19 guest -- do not abort on stride &gt; 0
  Resolves: rhbz#973703</changelog>
<changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.12.0-12.el6_4.3" date="1377691200">- Fixes an abort on unsafe client ring access
  Resolves: rhbz#986298</changelog>

</package>

<package pkgid="be16e2d281fb02b3eb96c94cc38ffe3330762615881fd890313b78f601978db5" name="php" arch="src">
    <version epoch="0" ver="5.3.3" rel="23.el6_4"/>

<changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 5.3.3-14" date="1340625600">- add security fix for CVE-2010-2950</changelog>
<changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-15" date="1349352000">- fix permission on source files (#676364)
- fix negative keys with var_export (#771738)
- fix setDate when DateTime created from timestamp (#812819)
- add php(language) and missing provides (#837042)
- use arch-specific requires (#833545)
- fix possible buffer overflow in pdo_odbc (#836264)
- fix possible segfault in pdo_mysql (#824199)</changelog>
<changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-16" date="1349784000">- fix stream support in fileinfo (#858653)
- fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)</changelog>
<changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-17" date="1350388800">- add security fixes for CVE-2012-2688, CVE-2012-0831, CVE-2011-1398</changelog>
<changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-18" date="1350475200">- php script hangs when it exceeds max_execution_time
  when inside an ODBC call (#864951)</changelog>
<changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-19" date="1350561600">- add FastCGI Process Manager (php-fpm) SAPI (#806132, #824293)</changelog>
<changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-20" date="1350648000">- remove reproducer from security fix for CVE-2012-0781</changelog>
<changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-21" date="1350993600">- fix CVE reference in previous changelog entry</changelog>
<changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-22" date="1354190400">- php-xml provides php-xmlreader and php-xmlwriter (#874987)
- fix possible NULL derefence and buffer overflow (#879179)
- fix zend garbage collector (#848186, #868375)</changelog>
<changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-23" date="1373630400">- add security fix for CVE-2013-4113</changelog>

</package>

<package pkgid="fe7c73cd7e46be8922a9cb19640533fc3455a7c41471df20ec548f76cfb061ca" name="irqbalance" arch="src">
    <version epoch="2" ver="1.0.4" rel="4.el6_4"/>

<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:0.55-30" date="1329134400">- NUMA awareness bits (bz 673234)
- network devices are classified more correctly</changelog>
<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:0.55-31" date="1330948800">- Fix fclose call (bz 798648)</changelog>
<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:0.55-32" date="1335355200">- NUMA awareness bits were thrown away (from #673234 and #798648)
- Mistake in sysconfig documentation was fixed (bz 732435)</changelog>
<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:0.55-33" date="1335960000">- Fix classifying net devices with biosdevname (bz 682211)</changelog>
<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:0.55-34" date="1336046400">- numactl* dependencies removed.</changelog>
<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:0.55-35" date="1343908800">- Fix segfault (bz 843379)</changelog>
<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.4-1" date="1348574400">- Rebase to 1.0.4 (bz 789946)</changelog>
<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.4-2" date="1349092800">- Correct security flags added
- Init file fixed (bz 860627)</changelog>
<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.4-3" date="1350043200">- Man page regression fix (bz 813078)</changelog>
<changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.4-4" date="1372161600">- Fixed kernel dependency (bz 951720)</changelog>

</package>

<package pkgid="ea3a5183c1105b4d5baf4f3cb393addfaae25339a51631804dffa561c9da1523" name="qemu-kvm" arch="src">
    <version epoch="2" ver="0.12.1.2" rel="2.355.0.1.el6.centos.5"/>

<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.352.el6" date="1358337600">- kvm-block-make-qiov_is_aligned-public.patch [bz#895392]
- kvm-dataplane-extract-virtio-blk-read-write-processing-i.patch [bz#895392]
- kvm-dataplane-handle-misaligned-virtio-blk-requests.patch [bz#895392]
- Resolves: bz#895392
  (fail to initialize the the data disk specified x-data-plane=on via 'Device Manager' in win7 64bit guest)</changelog>
<changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - qemu-kvm-0.12.1.2-2.353.el6" date="1358942400">- kvm-qxl-fix-range-check-for-rev3-io-commands.patch [bz#876982]
- kvm-dataplane-avoid-reentrancy-during-virtio_blk_data_pl.patch [bz#894995]
- kvm-dataplane-support-viostor-virtio-pci-status-bit-sett.patch [bz#894995]
- kvm-qxl-stop-using-non-revision-4-rom-fields-for-revisio.patch [bz#869981]
- kvm-qxl-change-rom-size-to-8192.patch [bz#869981]
- Resolves: bz#869981
  (Cross version migration between different host with spice is broken)
- Resolves: bz#876982
  (Start Windows 7 guest, connect using virt-viewer within seconds guest locks up)
- Resolves: bz#894995
  (core dump when install windows guest with x-data-plane=on)
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.354.el6" date="1358942401">- spec: add Epoch to old_conflict_ver
- Resolves: bz#895954
  (qemu-kvm-rhev conflicts and provides qemu-kvm)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6" date="1358942402">- kvm-Revert-audio-spice-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-add-support-for-volume-control.patch [bz#884253]
- kvm-Revert-hw-ac97-the-volume-mask-is-not-only-0x1f.patch [bz#884253]
- kvm-Revert-hw-ac97-remove-USE_MIXER-code.patch [bz#884253]
- kvm-Revert-audio-don-t-apply-volume-effect-if-backend-ha.patch [bz#884253]
- kvm-Revert-audio-add-VOICE_VOLUME-ctl.patch [bz#884253]
- kvm-Revert-audio-split-sample-conversion-and-volume-mixi.patch [bz#884253]
- Resolves: bz#884253
  (Allow control of volume from within Windows Guests (Volume Mixture))</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.1" date="1360152000">- kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
- Resolves: bz#907397
  (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.2" date="1362052800">- kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
- kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
- Resolves: bz#910841
  (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.3" date="1365595200">- kvm-Fix-regression-introduced-by-machine-accel.patch [bz#929105]
- Resolves: bz#929105
  ([RHEL6.4] [regression] qemu-kvm does not enable ioeventfd)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.4" date="1367582400">- kvm-virtio-balloon-fix-integer-overflow-in-BALLOON_CHANG.patch [bz#958750]
- Resolves: bz#958750
  (QMP event shows incorrect balloon value when balloon size is grater than or equal to 4G)</changelog>
<changelog author="Michal Novotny &lt;minovotn@redhat.com&gt; - qemu-kvm-0.12.1.2-2.355.el6_4.5" date="1369310400">- kvm-e1000-fix-link-down-handling-with-auto-negotiation.patch [bz#907716]
- kvm-e1000-unbreak-the-guest-network-when-migration-to-RH.patch [bz#907716]
- kvm-reimplement-error_setg-and-error_setg_errno-for-RHEL.patch [bz#957056]
- kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch [bz#957056]
- kvm-qga-distinguish-binary-modes-in-guest_file_open_mode.patch [bz#957056]
- kvm-qga-unlink-just-created-guest-file-if-fchmod-or-fdop.patch [bz#957056]
- Resolves: bz#907716
  (use set_link  to change rtl8139 and e1000 network card's status but fail to make effectively after reboot guest)
- Resolves: bz#957056
  (CVE-2013-2007 qemu: guest agent creates files with insecure permissions in deamon mode [rhel-6.4.z])</changelog>
<changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - qemu-kvm-0.12.1.2-2.355.0.1.el6.centos.5" date="1370260800">- increment the version due to centos bug #6297</changelog>

</package>

</otherdata>