# changelog

author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-18
changelog:
  - add IPv6 support to comsat notification (#198403)
  - package man page for mailstat
  - change mail spool directory to /var/spool/mail


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-24
changelog:
  - rename getline to avoid conflict with glibc (#505977)
  - add -Wno-comments to CFLAGS
  - remove package name from summary


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-1
changelog:
  - create creds before calling krb5_kuserok() so that they're available when
    it goes to look up the target user's home directory (#563442)
  - collapse multiple levels of debugging into a single debug level (#157107)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-2
changelog:
  - backport fixes to make the libdefaults verify_ap_req_nofail setting control
    what happens when we can't read keytabs, and enable TGT validation by
    default, with "novalidate" as an option which takes a list of services for
    which TGT validation shouldn't be attempted (#622938)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-6
changelog:
  - backport the change to prefer krb5_change_password() over krb5_set_password()
    again from 2.3.12 (#690583)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-7
changelog:
  - don't treat setcred() as session open/close in sshd (#720609, #725797)
  - don't create a new ccache when "external" is enabled, as the calling
    application's already managing one (#690832)
  - always re-read "external" creds when possible, and use an in-memory
    ccache when setting up tokens (more of #690832)
  - during password change, if we got creds during the first pass, don't
    ask for the authtok again (#700520)
  - allow things we do to compensate for transplanting in new self-tests to
    fail if the new tests aren't patched in (#708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-8
changelog:
  - in a %{_rawbuild} environment, don't run autoconf, because current
    versions will choke on an unpatched configure.ac (more of #708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-9
changelog:
  - refuse to supply non-password information via prompter callback when
    obtaining password-changing credentials (#700520)


author: Steve Dickson <steved@redhat.com> - 0.3.3-8
changelog:
  - Allow spaces in principal names (bz 1252265)
  - nfs4_setfacl.c: Fix fd leak in edit_ACL() (bz 662726)


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Add two needed patches
  - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections
  - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Ondrej Vasik <ovasik@redhat.com> 2.10-7
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#571843)
  - comment patches


author: Marek Kasik <mkasik@redhat.com> - 2.24.1-2
changelog:
  - Import gdk-pixbuf2 package from F16
  - Disable introspection
  - Add update-gdk-pixbuf-loaders
  - Resolves: #1103734


author: Adam Jackson <ajax@redhat.com> 1.10.4-4
changelog:
  - xserver-1.10.4-lid-hack.patch: Revive. (#740581)
  - Conflict against older gnome-screensaver to avoid a deadlock condition
    more easily triggered with the above patch.


author: Dave Airlie <airlied@redhat.com> 1.10.4-6
changelog:
  - fix etracer crashes server with no modes (#746926)
  - don't allow rightof with single crtc (#738724)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.4-6.2
changelog:
  - Add patches to change the screen crossing behaviour for multiple
    ScreenRecs (#783505)
  - remove the xorg.conf.man page from our .gitignore - we need to patch it
    now and it's part of the upstream distribution


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.4-6.3
changelog:
  - xserver-1.10.4-dix-when-rescaling-from-master-rescale-from-desktop-.patch:
    fix rescaling from master to slave if the pointer (#783505)


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.2
changelog:
  - Fixes for the iwpmd start-up scripts with systemd
  - A change to enable multi devices per port mapper client
  - Releasing libiwpm-1.0.2 to be included in OFED-3.18


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3rc1
changelog:
  - Adding iwpmd.conf file to enable changing the size
    of the netlink socket receive buffer
  - Including a fix for failing to send netlink messages


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3
changelog:
  - Fix for the init script to enable the service to start automatically
    after boot on SLES11 SP4
  - Releasing libiwpm-1.0.3 to be included in OFED-3.18-1


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-7.1
changelog:
  - port the rhel-7 package version to rhel-6
  - enabled ECDSA due to Unbound
  - Fix issue in DSA algorithm (#1077799)


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Marcela Maslanova <mmaslano@redhat.com> - 0.63-4
changelog:
  - 437681 remove previous patch and use upstream patch, which should solve
          all problems with noisy logs.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.12
changelog:
  - Back port option handling in semanage to handle semodule module -D correctly
  - Back port manpage from Fedora
  Resolves: #666861


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.13
changelog:
  - Fix spec file to require rsync for sandbox
  Resolves: #734467
  - Fix spec file to require gtkhtml2 for lockdown booleans program
  Resolves: #702860
  - Fix bugs found by Coverity
  Resolves: #717640
  Resolves: #728833


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.15
changelog:
  - Needs require gnome-python2-gtkhtml2 to make system-config-selinux working
  - Not use open_init_pty by default


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.16
changelog:
  - Restorecon should not be exiting with a 1 when it is successful in relabeling a file
  Resolves: #740699
  Resolves: #739587


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.18
changelog:
  - Other fix for semanage man page
  Resolves: #677541
  - Don't report error on load_policy when system is disabled.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.19
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the 
  - parent namesspace.
  - restorecond -u needs to watch terminal for exit if run outside of dbus.
  - Fix unchecked return codes
  Related: #785678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.2
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Ian Kent <ikent@redhat.com> - 5.0.5-123
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - always set direct mounts catatonic at exit.
    - fix error handing in do_mount_indirect().
    - check negative cache much earlier.
    - log pipe read errors.
    - fix handle_mounts() termination condition check.
  - Resolves: rhbz#1277033


author: Ian Kent <ikent@redhat.com> - 5.0.5-124
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - wait for master map available at start.
    - add master read wait option.
  - Resolves: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-125
changelog:
  - bz703846 - Incorrect autofs.schema
    - update and add README for old autofs schema
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-126
changelog:
  - bz1384404 - Automounter does not fetch maps from AD
    - work around sss startup delay.
    - add sss master map wait config option.
  - Resolves: rhbz#1384404


author: Ian Kent <ikent@redhat.com> - 5.0.5-127
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - fix included master map not found return.
    - dont exit on master map read fail timeout.
    - set sane default master read wait timeout.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-128
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - don't return until after master map retry read.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-129
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - make lookup_nss_read_master() return nss status.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-130
changelog:
  - bz703846 - Incorrect autofs.schema
    - fix autofs.schema.new not copied to package.
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-131
changelog:
  - bz1396403 - Trying to access a non-existent directory using automount
                results in 4 minute hang with nfs-utils-1.2.3-73.el6
    - fix inconsistent signed usage for __rpc_ping().
    - check NFS server availability on local mount fallback
  - Resolves: rhbz#1396403


author: Ian Kent <ikent@redhat.com> - 5.0.5-132
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - make set_direct_mount_catatonic() more general.
    - set autofs mounts catatonic at exit
  - Related: rhbz#1277033


author: Jakub Filak <jfilak@redhat.com> 0.10-1
changelog:
  - New upstream version
    - Fix a segmentation fault in sr_rpm_package_uniq()
    - Respect kernel flavor when parsing package name
    - Parse backtrace without Thread header
    - Fix koops json output if there are no modules
    - Add support for multiple koops stacks


author: Jakub Filak <jfilak@redhat.com> 0.11-1
changelog:
  - New upstream version
    - Make all python objects hashable
    - Improve memory management in rpm module
    - Extend the list of normalized functions
    - Add command for debugging duphashes to satyr utility


author: Martin Milata <mmilata@redhat.com> 0.12-1
changelog:
  - New upstream version
    - JVM frames normalization
    - Add C++ symbol demangling
    - Unsigned overflow bugfixes
    - Fix malformed uReports for Java


author: Martin Milata <mmilata@redhat.com> 0.14-1
changelog:
  - New upstream version
    - Ported to elfutils-0.158 unwinder API
    - Frame fingerprinting disabled
    - Bugfixes


author: Jakub Filak <jfilak@redhat.com> 0.15-1
changelog:
  - New upstream version
    - uReport enhancements (DESKTOP_SESSION, auth_data, missing values)
    - Enhance the backtrace quality algorithm to tackle MiniDebuginfo
    - Support unusual Python and Java exceptions
    - Deal with infinite recursion in backtraces
    - Bugfixes


author: Martin Milata <mmilata@redhat.com> 0.16-1
changelog:
  - New upstream version
    - Add support for unwinding from core dump hook
    - Add support for Ruby uReports
    - Bugfixes


author: John Kacur <jkacur@redhat.com> - 1.0.5-8
changelog:
  - trace-cmd: Use splice to filter out rest of buffer {746656}
  - trace-cmd: Do not use threads for extract {746656}
  Resolves:bz746656


author: John Kacur <jkacur@redhat.com> - 1.0.5-11
changelog:
  - Rework spec to use apply patches separate from upstream
  - trace-cmd-Add-checks-for-invalid-pointers-to-fix-seg.patch (879814)
  Resolves:bz879814


author: John Kacur <jkacur@redhat.com> - 2.2.4-3
changelog:
  - trace-cmd-don-t-call-free-on-tracing-and-path-more-t.patch
  - trace-cmd-trace-cmd.c-Don-t-deref-re-if-it-is-NULL.patch
  - trace-cmd-trace-recorder.c-Prevent-free-of-unitializ.patch
  - trace-cmd-trace-util.c-Prevent-resource-leak-by-clos.patch
  Resolves: rhbz#1288579


author: Andreas Schwab <schwab@redhat.com> - 2.20.51.0.2-5.21
changelog:
  - Copy over OSABI header (#698005)
  - Don't set OSABI_LINUX in dynamic ifunc-using executable (#689829)
  - Handle non-ASCII in readelf output (#664640)
  - Remove unneeded clearing (#674925)
  - Handle old ABI calls to new ABI code (#701586)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Karsten Hopp <karsten@redhat.com> 0.6.0-2
changelog:
  - add endian info for s390, s390x
  - kipiplugin_acquireimages.so is not available as kdegraphics is compiled
    without sane support on s390x


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-1
changelog:
  - update to 4.2.6p5 (#654004, #641800, #714079, #714084, #716968, #819781,
    - bind broadcast client to new interfaces (#973807)
  - allow selection of cipher for private key files (#749530)
  - retry few times in ntpdate init script before giving up (#673198)
  - print synchronization distance instead of dispersion in ntpstat (#830821)
  - ignore duplicate servers from dhclient (#862983)
  - add fourth server to default ntp.conf and use iburst (#667524, #623616)
  - drop comment enabling local driver in default config (#816645)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-3
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - add nanosecond support to SHM refclock (#1117704)
  - allow creating all SHM segments with owner-only access (#1122015)
  - allow symmetric keys up to 32 bytes again (#1053551)
  - fix calculation of root dispersion (#1045376)
  - fix crash in ntpq mreadvar command (#1165141)
  - don't step clock for leap second with -x option (#1190619)
  - don't drop packets with source port below 123 (#1171630)
  - use larger RSA exponent in ntp-keygen (#1184421)
  - refresh peers on routing updates (#1193850)
  - increase memlock limit again (#1053568)
  - warn when monitor can't be disabled due to limited restrict (#1166596)
  - improve documentation of restrict command (#1069019)
  - update logconfig documentation for patched default (#1193849)
  - don't build ntpsnmpd (#995134)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack
    (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems
    (CVE-2015-3405)
  - log when stepping clock for leap second or ignoring it with -x (#1204625)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-9
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - add option to set Differentiated Services Code Point (DSCP) (#1228314)
  - extend rawstats log (#1242895)
  - fix resetting of leap status (#1243034)
  - report clock state changes related to leap seconds (#1242937)
  - allow -4/-6 on restrict lines with mask (#1232146)
  - retry joining multicast groups (#1288534)
  - explain synchronised state in ntpstat man page (#1286969)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10
changelog:
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.1
changelog:
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.2
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Trevor McKay <tmckay@redhat.com> - 0.10.1-3
changelog:
  - Changed requires comparison for qpid-qmf* to >= from ==
  - Add a digit to the version number for code changes.
  - Explicit linker targets added to configure.ac
  - Took sources from branch 'lucidity'
  - Bumped release to 3


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-4
changelog:
  - fix init script to check for root privileges (#883438)
  - fix race condition when enabling new connections (#902432)
  - fix crash when printing key in verbose mode (#1153902)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-5
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Zach Brown <zab@redhat.com> 0.20-0.2.git91d9eec
changelog:
  - bring btrfs-progs uptodate with current upstream git
  - updated patch to allow fs labels with slashes
  - btrfs-find-root, btrfs-restore, and btrfs-zero-log are now available
  - build with -fno-strict-aliasing


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-1
changelog:
  - New upstream version, resolves rhbz #766335
  - Build python bindings to satisfy Samba4 BuildRequires


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-2
changelog:
  - Obsolete older pytalloc{,-devel} releases to clear the upgrade path
    towards non-multilib pytalloc
  - Resolves: rhbz#862062


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Upgrade to new upstream version
    This disables openib-ibcm, which is broken in 1.5.3
    This brings in esmtp and valgrind memchecker support from Fedora
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-1
changelog:
  - Conditionalize the psm and psm-devel subpackages, to keep rpmbuild
    from trying to build them on ppc
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-2
changelog:
  - Fix the rpm macros for the -psm subpackage, so we can build
    a -psm varient of mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-1
changelog:
  - Clean up provides and requires to close
    Resolves: rhbz768457
  - Remove and obsolete the -psm variants that have been folded into the main
    packages.
    Resolves: rhbz758618
  - New upstream version
    Resolves: rhbz768109
    Related: rhbz739138


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-2
changelog:
  - Fix the build process by getting rid of the -build patch
    and autogen to fix
    Resolves: rhbz749115


author: Michal Schmidt <mschmidt@redhat.com> 1.10.1-1
changelog:
  - Update to 1.10.1.
  - Backport additional fixes from Fedora.
    - Fortran module install (bug #1154982)
    - Add upstream patch to fix zero size message
    Resolves: rhbz1130442, rhbz1142168


author: Michal Schmidt <mschmidt@redhat.com> 1.10.2-1
changelog:
  - Update to 1.10.2.
  - Use versioned directory and module names "openmpi-1.10",
    "openmpi-1.10-$arch".
    The unversioned names remain with openmpi-1.8 (built from compat-openmpi).
  - Related: rhbz1130442


author: Michal Schmidt <mschmidt@redhat.com> 1.10.2-2
changelog:
  - Name the binary package "openmpi-1.10". The provide name "openmpi"
    remains to openmpi-1.8 for maximum compatibility with RHEL 6.7.
  - Related: rhbz1130442


author: Eric Munson <ebmunson@us.ibm.com> - 1.6.7-1
changelog:
  - Update to latest lsvpd release
  - Add librtas support to build on POWERPC
  - Add patch to lookup *.ids file location at runtime


author: Jiri Skala <jskala@redhat.com> 1.6.10-4
changelog:
  - Resolves: #684646 - vpdupdate errors in install.log.syslog
  - Resolves: #741899 - lsmcode doesnt display FW version


author: Jiri Skala <jskala@redhat.com> 1.6.10-5
changelog:
  - Resolves: #688574 - lsvpd: invalid option -- 'p'
  - Resolves: #714086 - Several lsvpd tools options not documented in man page


author: Tim Waugh <twaugh@redhat.com> - 8.70-14
changelog:
  - Fixed character spacing problems using backported patch (bug #695766).
  - Apply some fixes from upstream to avoid gdevcups segfaults (bug #643105).


author: Tim Waugh <twaugh@redhat.com> - 8.70-20
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105520).
  - Improved support for PDF/A from upstream (bug #1060026).
  - Back-ported patch to process embedded files as a portable collection
    only if there is a /Collection attribute (bug #1027534).
  - Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 8.70-22
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: Doug Ledford <dledford@redhat.com> - 2.0.19-1
changelog:
  - Recompile against non-XRC libibverbs
  - Update to OFED 1.4.1 final bits
  - Related: bz506258, bz506097


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-4
changelog:
  - Patch for new configurable options(rhbz# 219201): 
    disable first upper and last digit check, passwords 
    prompts can be read from a file
  - Fixed an issue with spec file where "Release:" is not
    specified with "(?dist)". Without this, it gives problem
    when tagging across different fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-5
changelog:
  - Fixed following rpmlint errors on src rpm:
    pam_passwdqc.src: W: summary-ended-with-dot Pluggable
    password quality-control module.,
    pam_passwdqc.src:11: E: buildprereq-use pam-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-6
changelog:
  - Added explanation of new options, disable_firstupper_lastdigit_check,
    oldpass_prompt_file, and newpass_prompt_file in the man pages
  - Fixed output messages when disable_firstupper_lastdigit_check option
    is used 
  Resolves: #219201 pam_passwdqc should be more configurable


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-18
changelog:
  - python: Convert any iterable argument to a list.
    resolves: rhbz#693306
  - Renumber the RHEL 6.1-specific patches from 0500+.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-23
changelog:
  - Use git to manage patches.
  - Include all minor bugfixes from upstream stable-1.8 branch up to
    libguestfs 1.8.11.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-24
changelog:
  - inspect: Detect 32 bit applications running on WOW64 emulator
    resolves: rhbz#692394
  - perl: Binding and test for guestfs_last_errno
    resolves: rhbz#672491
  - New API: list-dm-devices
    fish: Show device mapper device in tab completion
    resolves: rhbz#688062
  - Document that fullvirt query only works for Linux guests
    resolves: rhbz#690358


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-25
changelog:
  - Fix 'unknown filesystem' warnings in old inspection code
    resolves: rhbz#678231
    resolves: rhbz#666578


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-26
changelog:
  - Document that remote run in cmd substitution context hangs.
    resolves: rhbz#730248
  - Note that additional memory may be required to typecheck Augeas lenses.
    resolves: rhbz#729887


author: Richard W.M. Jones <rjones@redhat.com> - 1.6-9
changelog:
  - Verify that we are still matching current native package.
  - Use auto-buildrequires to identify more accurate list of BRs:
      + BR gettext (for /usr/bin/msgfmt etc)
      + BR mingw32-dlfcn
      + BR mingw32-iconv
  - Use _smp_mflags.
  - Use find_lang.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Petr Lautrbach <plautrba@redhat.com> 2.0.43-5.1
changelog:
  - Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions
  Resolves: rhbz#872700
  - Fix sources to pass all tests
  Rsolves: rhbz#591451


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1327697 - Fix netlogon credential checks
  - resolves: #1327746 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-37
changelog:
  - resolves: #1380151 - Fix memory leak in idmap_ad module
  - resolves: #1333561 - Fix smbclient connection issues to DFS shares
  - resolves: #1372611 - Allow ntlmsssp session key setup without signing
                         (Workaround for broken NetApp and EMC NAS)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-38
changelog:
  - resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                         empty list


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1190302 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1190303 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #1167470 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Use org.freedesktop.sssd.infopipe.GetUserGroups for group lists.
  - Support new org.freedesktop.sssd.infopipe.GetUserAttr parameters /
    return values.
  - Removed LookupOutputGroupsSeparator.
  - LookupOutputGroups and LookupUserAttr now support separator as
    optional second parameter.
  - Added LookupUserGroupsIter and LookupUserAttrIter.
  - Added LookupDbusTimeout.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.8.1-1
changelog:
  - Ensure we run before mod_headers so that our result can be put to
    request headers for mod_proxy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-3
changelog:
  - Fix postfix pmda failing to setgid to postfix user (BZ 1213724).
  - Fix postfix pmda not reporting incoming mails (BZ 1213764).
  - Consistent naming for tools related to LVM cache (BZ 1218007).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Resolve local_sock() double free error (BZ 1258846).
  - Resolve netfilter pmda uses outdated /proc API (BZ 1221653).
  - Update to latest PCP sources (BZ 1248272).
  - Fix pmatop attribute error (BZ 1195429).
  - Fix pmwebd fails when monitoring systems with Vector (BZ 1238863).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-3
changelog:
  - Correct papi version we link against (BZ 1295694)
  - Fix possible overflow with pmdaproc using local context options (BZ 1295801)
  - Dropped pcp-compat package from upstream (BZ 1294390)


author: Lukas Berk <lberk@redhat.com> - 3.10.9-4
changelog:
  - Correct interrupts parsing on s390x platforms (BZ 1297822)
  - Correct papi version we link against for 32 bit arches (BZ 1295694)


author: Lukas Berk <lberk@redhat.com> 3.10.9-6
changelog:
  - Update pmdanamed testcaes (BZ 1303005)
  - Fix possible fd leak in pmdanamed (BZ 1223311)
  - Fix issue with pmdagfs2 installation (BZ 1305939)
  - Address testcase 370 failure on non x86_64 archs (BZ 1305940)
  - Address endian issue with pmdalinux on some platforms (BZ 1298722)


author: Nathan Scott <nathans@redhat.com> 3.10.9-7
changelog:
  - Fix pmlogconf probing of base XFS metrics (BZ 1358972)
  - Resolve SIGFPE in pcp-atop with missing metrics (BZ 1373590)
  - Support pcp-iostat uninterpolated PCP archive replay (BZ 1293661)
  - Resolve several reporting issues in PostgreSQL PMDA (BZ 1304619)


author: Nathan Scott <nathans@redhat.com> 3.10.9-9
changelog:
  - Added pcp-iostat precision reporting capability (BZ 1297498)
  - Fixed a pcp-iostat argument checking stack trace (BZ 1414257)


author: Jiri Skala <jskala@redhat.com> - 0.49-6
changelog:
  - Resolves: #655830 - transferring small files using -v returns strange values
  - Resolves: #714240 - utimeout option parsing buffer overflow


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-78
changelog:
  - ricci: fix modules cannot return values due to bug in Module::empty_response
           (introduced with rhbz#1044122 fix)
  - Resolves: rhbz#1187745


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-79
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp)
  - Resolves: rhbz#1210679


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-83
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp) incl. reflecting fix up for wrongly generated
    RNG schema for cluster configuration wrt. "action" tag
  - Resolves: rhbz#1272588


author: Chris Feist <cfeist@redhat.com> - 0.16.2-84
changelog:
  - ccs: provide option to backup cluster.conf files when editing
  - ccs: when stopping all nodes send an option to ricci to shutdown
    the cluster before shutting down all of the nodes
  - ccs: Added --usealt option to force ccs to try to connect to
    ricci on the alt node if the normal node interface is not responding
  - Resolves: rhbz#1079529 rhbz#1192637 rhbz#1188108


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-86
changelog:
  - ccs: sync cluster.rng schema with latest updates from cluster packages
    (last-minute revamp), now also incl. new "oradg" resource agent
  - Resolves: rhbz#1272588


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 0.6.5-15
changelog:
  - fix issue with multiple nih_error_raise calls in previous patch
  - reset console only for console owners (#1046190)


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Jan Rybar <jrybar@redhat.com> - 22.6-20
changelog:
  - fuser manpage: note about handling not-owned processes moved from BUGS to RESTRICTIONS
  - Resolves: rhbz#1211743


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3
changelog:
  - use the proper %patch stanza to make rpmdiff happy
  - related: rhbz#873422 - LDB 1.1.13 exports improper ABI


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3.1
changelog:
  - Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-2
changelog:
  - Multiple patches to address issues with TwinView calibration and setting
    (#624560)
  - requires xorg-x11-drv-wacom-0.10.5-7 for TwinView fixes.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.9.0-3
changelog:
  - Multiple patches to address button mapping issues (#624560).
  - update the screen number when updating
  - requires updated xorg-x11-drv-wacom for the matching fixes to xsetwacom
    and the driver.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.0-2
changelog:
  - Fix cintiq calibration issues (#675672)
  - Set eraser mappings same as stylus (#711619)
  - Allow multiple wacomcplrc files to be used  (#711618)


author: Hans de Goede <hdegoede@redhat.com> 2.1-7
changelog:
  - Properly check dm_task_run return value (#585158)
    Resolves: #585158
  - Fix mkpartfs (ext2) on partitions >2TB (#585159)
    Resolves: #585159
  - Add a flag for detecting diagnostics / recovery partitions


author: Brian C. Lane <bcl@redhat.com> 2.1-11
changelog:
  - Document the align-check command
    Resolves: #642476
  - Default to 1MiB partition alignment
    Resolves: #618255


author: Brian C. Lane <bcl@redhat.com> 2.1-13
changelog:
  - Double the buffer for fdasd_check_api_version
    Resolves: #693852
  - Disable tests that fail when run as root


author: Brian C. Lane <bcl@redhat.com> 2.1-14
changelog:
  - Fix scsi_debug race condition in tests
  - turn t9020 and t9030 tests back on
  - Add legacy_boot support to GPT disklabel (#711148)
    Resolves: #711148
  - Remove asserts from CHS guessing code (#692562)
    Resolves: #692562
  - Fix snap radius and don't allow values < 1 (#665496)
    Resolves: #665496


author: Brian C. Lane <bcl@redhat.com> 2.1-17
changelog:
  - Disable t9020 (scsi_debug num_parts is broken)
  - Add a wait loop to t9030 when removing the partition
  - Remove size parameter from scsi_debug in t9030
    Resolves: #746098


author: Doug Ledford <dledford@redhat.com> - 1.1.6-1
changelog:
  - Update to latest upstream release (includes FDR link speed capability)
  - Related: bz751220, bz750609


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Don't print link state on iWARP links as it's always invalid
  - Don't try to do ud transfers in excess of port MTU
  - Resolves: bz822781


author: Doug Ledford <dledford@redhat.com> - 1.1.7-1
changelog:
  - Update to latest upstream release
  - Remove patches that are now part of upstream
  - Fix ibv_srq_pingpong with negative value to -s option
  - Resolves: bz879191


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Update to latest upstream release (which adds XRC support,
    infrastructure for verbs extensions, core support for usNIC
    nodes and transports, uverbs extensions, and receive flow
    steering extension)
  - The HPN channel in rhel6 is going away and the RoCE capability
    is being folded back into the base OS channel package (aka
    this one).  Provide an Obsoletes tag to cause this package
    to replace the older libibverbs-rocee package from the HPN
    channel
  - Resolves: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Add the RoCE IP Address GID support patches
  - Create our own tarball that is the three patches we needed
    then autoreconf run with an acceptable version of autotools
    as the version in the build system is too old
  - Resolves: bz1051211


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Fix a coverity found issue
  - Resolves: bz1119105


author: Dan Horák <dhorak@redhat.com> - 0.23-2
changelog:
  - fix path separator for FC devices (#589327)
  - fix for kernels with unified string representation of NULL (#589860)
  - Resolves: #589327, #589860


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-138
changelog:
  - Fix backslash interpolation in Locale::Maketext (bug #1025906)
  - Do not ignore single-letter-named packages by Module::Plugable (bug #1086215)
  - Run-require exact version of perl-libs by perl-suidperl (bug #1161170)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.10.1-143
changelog:
  - Fix typo in name of the signal PIPE in IPC::Cmd (bug #1315053)
  - Fix crash in httpd mod_perl Perl_sv_pvn_force_flags (bug #1364206)


author: Alon Levy <alevy@redhat.com> - 0.1.0-4
changelog:
  - address review issues:
   - Group for main and devel and tools
   - Requires for devel and tools
  - fix changelog for previous entry (day was wrong, and macro quoting)


author: Alon Levy <alevy@redhat.com> - 0.1.2-1
changelog:
  - bump version to 0.1.2
   - style fixes
   - vscclient.c: fix tabulation
    - add copyright header
    - send init on connect, only start vevent thread on response
    - use hton,ntoh
    - read payload after header check, before type switch
    - update for vscard_common changes, empty Flush implementation
   - vcard_emul_nss: load coolkey in more situations
   - vscard_common.h:
    - VSCMsgInit capabilities and magic
    - VSCMsgReconnect stringified
    - define VSCARD_MAGIC
    - update copyright
    - fix message type enum
   - bump version to 0.1.1
    - vcard_emul,vcard_emul_nss
     - add VCARD_EMUL_INIT_ALREADY_INITED
     - add vcard_emul_replay_insertion_events
   - vreader: add vreader_queue_card_event
    Resolves: rhbz#663063


author: Alon Levy <alevy@redhat.com> - 0.15.0-rc0
changelog:
  - upstream update, it is now qemu based, so build process changed, and version to match.
   - no non-rc release yet of qemu with required patches, hence using rc0. There are still
     some patches carried here that hopefully will get into 0.15.0 or 0.16.0 in the latest.
   - upstream updated to 0.15.0-rc0
   - resolves rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.14.90-2
changelog:
  - fix permissions of h files to not change because of rebase.
   - change NVR to match libcacard.so
     - will change when qemu-0.15.0 is released.
   - Copied correct README
   - Resolves: rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.15.0
changelog:
  - not a rebase - no changes in libcacard subdirectory
     between 0.15.0-rc0 and 0.15.0 in the upstream package.
    - but allows the fedora and RHEL package to remain in sync
      on a released version.
   - dropped zlib dep which was only required for configure phase
     via added patch 0001-drop-zlib-check.patch
   - added three patches that only cleanup the build process
     0010-Fix-spelling-in-comments-and-debug-messages-recieve-.patch
     0011-Improvements-to-libtool-support.patch
     0012-Silence-make-if-nothing-is-to-do-for-libcacard.patch
   - Final two patches resolve the bug 727916:
     0013-libcacard-cac-fix-typo-in-cac_delete_pki_applet_priv.patch
     0014-libcacard-vscclient-fix-error-paths-for-socket-creat.patch
   - Resolves: rhbz#727916


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-3
changelog:
  - when checking for pty-handling functions, do so with the benefit of the
    libutil library we think might include them (#595411)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#632442, RT#6773)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713342)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-3
changelog:
  - drop calls to pam_selinux from the gssftp PAM configuration (#713459)
  - reference password-auth instead of system-auth in the gssftp and kshell
    PAM configurations


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-4
changelog:
  - increase the size of the ftp client's command line input buffer (#665834)
  - incorporate patch to correct parsing errors with "restrict" lines in
    ftpusers (#713521, RT#6889)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-7.1
changelog:
  - add Siddhesh Poyarekar's patch to ensure that when performing an "mdir"
    or "mls" operation, that the FTP client always passes an actually-terminated
    string as the open mode for fopen() (#816689, RT#7079)


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-24
changelog:
  - switch ownership of new directories from "abrt:user" to "user:abrt"
  - fix a bug allowing libreport to read files outside dump directories
  - Related: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282144


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-29
changelog:
  - Change reporting workflow to enhance the quality of opened customer cases
  - Limit the description section for ABRT reported cases
  - Resolves: #1258474, #1261398


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-31
changelog:
  - Add pkg_vendor, reproducer and reproducible to description
  - Attach all dump dir's element to a new case
  - Change libreport-version to 2.0.9.1
  - Resolves: #1261398


author: Ian Main <imain@redhat.com> - 0.2.21-1
changelog:
  - Misunderstanding of the 'index' keyword was making all objects have the same 
    id. Resolves: #596682


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-16
changelog:
  - Fix memory leak
    Resolves: rhbz#1192154
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1151559


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1199355
  - Remove enable-resizable-surface0.patch. It's causing more troubles than
    it solves, and QEMU now has the needed ram/vram support to make it
    unnecessary
    Resolves: rhbz#1140765


author: Frediano Ziglio <fziglio@redhat.com> 0.1.1-19
changelog:
  - Remove RHEL 7 hack
    Resolves: rhbz#1226723
  - Fix memory leak caused by image cache
    Resolves: rhbz#1221010


author: Jaroslaw Polok <jaroslaw.polok@cern.ch> 0.4.1-1.20121119
changelog:
  - update to: http://repo.or.cz/w/msktutil.git/commit/70d415464d99a1748570a79b724ed9af22f112cb
  - adds --old-account-password option
  - fixes sAMAccountName limit to 20 chars (was 19)
  - adding autoconf to buildreqs.


author: Jaroslaw Polok <jaroslaw.polok@cern.ch> 1.0
changelog:
  - update to 1.0
  - add patch for user keytabs without password change: 
    https://sourceforge.net/p/msktutil/tickets/57/


author: Jaroslaw Polok <jaroslaw.polok@cern.ch> 1.0
changelog:
  - add patch for --dont-update-dnshostname
    (https://sourceforge.net/p/msktutil/code/merge-requests/1/)


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: David Sommerseth <davids@redhat.com> - 1.28-9
changelog:
  - Added packaging of COPYING (#974147)
  - Removed packaging of INSTALL (info not needed for binary installs)


author: David Sommerseth <davids@redhat.com> - 1.28-11
changelog:
  - Avoid deletion of /dev/null (#1245302)
  - Fix sg_persist returns "Host_status=0x11 is invalid", backport of DID_TRANSPORT_*/DID_TARGET_/DID_NEXUS_FAILURE flags (#886611)


author: Michal Sekletar <msekleta@redhat.com> - 147-2.66
changelog:
  - prevent creation of duplicate udev rules by write_net_rules helper (#652499)
  - fix memory leak in scsi_id (#891669)
  - introduce SECLABEL{selinux} for setting explicit SELinux labels on device nodes (#1015300)
  - for ATA disks udev will now also create by-id/wwn-* symlinks when appropriate (#1220617)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.2-1
changelog:
  - version 0.6.2
  Resolves: rhbz#1003465,rhbz#1084225,rhbz#1133523,rhbz#1158564,rhbz#1207557,rhbz#1212449


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Nikola Forró <nforro@redhat.com> - 3.9.4-14
changelog:
  - Merge previously released fixes for CVEs:
  - CVE-2013-1960 CVE-2013-1961 CVE-2013-4231
  - CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
  - Resolves: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-16
changelog:
  - Add patches for CVEs:
  - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
  - CVE-2016-3991 CVE-2016-5320
  - Related: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-19
changelog:
  - Add patches for CVEs:
  - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
  - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
  - CVE-2016-5652
  - Resolves: #1412078


author: Nils Philippsen <nils@redhat.com> - 0.5.8-20
changelog:
  - yum: require pygobject2 (#684861)
  - yum-plugin: require dbus-python (#700448)
  - yum: fix untrusted password entry (#744359)
  - pkcon: fix --noninteractive (#783537)
  - fix building with newer xulrunner
  - add/fix BR: xulrunner-devel >= 8.0, nspr-devel >= 4.8


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-22
changelog:
  - Handle unbuffered input in a better way to fix the simulate declined failure
    when using pkcon.
  - Resolves: #811097


author: Richard Hughes <rhughes@redhat.com> - 0.5.8-26
changelog:
  - Fix a python traceback when the comps groups cannot be loaded
  - Do not substitute '%' in error messages as this is misleading
  - Do not ever run the transaction plugins even for modified configs
  - Resolves: #1268932, #984836, #1204932


author: Lyude Paul <cpaul@redhat.com> 7.6.1-2
changelog:
  - Fix annoying trailing whitespace after %description
  - Update firmware license
  - Added missing firmware file TAHITI_vce.bin (#1310823)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-14
changelog:
  - release the GSSAPI server credential handle immediately after the
    GSSAPI security context is established (#825863)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-15
changelog:
  - don't use " for saslauth user's description (#1081445)
  - backport the ad_compat option (#994242)
  - fixed a memory leak in the client side DIGEST-MD5 code (#838628)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Doug Ledford <dledford@redhat.com> - 0.5-5.el5
changelog:
  - Fix a minor memleak (from upstream)
  - Rebuild against libibverbs that has xrc support
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 0.6-1.el5
changelog:
  - Build against non-XRC libibverbs
  - Update to ofed 1.4.1 final bits
  - Remove no longer needed memleak patch
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Rebuild against latest libibverbs
  - Add psuedo provide of libibverbs-driver.%{_arch}
  - Fix exclusivearch to work on i686
  - Related: bz725016, bz724900


author: Doug Ledford <dledford@redhat.com> - 1.1.3-1
changelog:
  - Update to latest upstream release
  - Rebuild against latest libibverbs (native FDR/IBoE enabled)
  - Related: bz750609


author: Ryan O'Hara <rohara@redhat.com> 0.8.6-1
changelog:
  - Resolves: #846035 - rebase to upstream version 0.8.6
  - Resolves: #857917 - piranha gui does not set ipvs timeout values


author: Gavin Romig-Koch <gavin@redhat.com> 0.17-1
changelog:
  - better fix for bug in localsave to /tmp
      (Fedora 595854)(RHEL 595855)(RHEL 607507)
  - Revert "fix bug in localsave to /tmp (Fedora 595854)(RHEL 595855)"
  - correct SyntaxWarning: name 'HAVE_gnomekeyring' is used prior to
      global declaration. (Fedora 604235)
      Author: Ales Kozumplik <akozumpl@redhat.com>
  - l10n: Updates to Polish (pl) translation
      Author: raven <raven@fedoraproject.org>
  - l10n: Updates to Ukrainian (uk) translation
      Author: yurchor <yurchor@fedoraproject.org>


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-1
changelog:
  - strata plugin buttonURLXxxx (RHEL 589704)
  - improve strata server testing scripts
  - reorg functions in strata_client_lib (RHEL 591922 related)
  - improved error checking of C compiler
  - Eliminate crash in DisplayXXXMessage


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-2
changelog:
  - fix crash in ftp plugin (Fedora 610870)(RHEL 609480)
  - Production/GA configuration of report, enable Strata plugin (RHEL 567972)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-3
changelog:
  - correct Obsoletes for report-*-RHEL-*
  - strata: handle self signed certs
  - strata-test.conf: setup URL translation
  - add html and xml response translation to strata_client_lib


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-5
changelog:
  - scp plugin: force password auth (RHEL 589702)
  - fix known hosts bug for strata scp target (RHEL 589702)
  - GTKIO: only show 'clickable' button if displaying the link is possible (RHEL 594827)
  - strata client needs to attach each file as separate file (RHEL 591922)
  - report cmd: check access to file immediatly (RHEL 614274)
  - Report throws traceback when there is a configuration for a non-present plugin (RHEL 614139)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-6
changelog:
  - Correct the order of target choices
  - remove http headers from user display (RHEL 621354)
  - correct GTKIO success dialog box (partial RHEL 621354)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-8
changelog:
  - honor the options in [main]  (RHEL 624676) (Fedora 635107)
  - Allow Strata plugin to send original filenames from report to server (Fedora 635118)(RHEL 626994)
  -  add _isa macro to spec file. (RHEL 672647)(Fedora 670215)


author: Gavin Romig-Koch <gavin@redhat.com> 0.18-9
changelog:
  - Correct the patch for Allow Strata plugin to send original filenames from report to server (RHEL 626994)


author: Doug Ledford <dledford@redhat.com> - 1.5.3-1.el5
changelog:
  - Update to latest upstream version
  - Don't include the newly added devel stuff as it's likely only needed
    internally (and certainly not needed by anything we've supported before
    since we've never shipped it)
  - Related: bz518218


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-9
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Adam Jackson <ajax@redhat.com> 7.7-1
changelog:
  - rgb 1.0.5
  - xsessreg 1.0.8
  - xgamma 1.0.5
  - xhost 1.0.5
  - xmodmap 1.0.7
  - xsetroot 1.1.1
  - xstdcmap 1.0.3


author: Than Ngo <than@redhat.com> - 1.6.0-2
changelog:
  - fix #516339, allow to enable/disable timstamp to avoid the multilib issue
    HTMP_TIMESTAMP is disable by default


author: Daniel Vrátil <dvratil@redhat.com> 1.2.1-3
changelog:
  - Backport couple upstream patches to support running Akonadi when $HOME is on AFS (resolves #1073939)


author: Seth Vidal <skvidal at fedoraproject.org> - 1.1.2-14
changelog:
  - apply latest patches from upstream - consolidate into one big patch
  - test before a 1.1.3 from upstream


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Michal Hlavinka <mhlavink@redhat.com> - 39-5
changelog:
  - fix crash when bad substitution is used
  - fix crash when alias contains alias
  - fix crash when xtrace is enabled
  - use alternatives for ksh/mksh selection


author: Michal Hlavinka <mhlavink@redhat.com> - 39-9
changelog:
  - tab completion did not work correctly with files containing multibyte 
    characters in name (#771198)


author: Michal Hlavinka <mhlavink@redhat.com> - 3.1.10-4
changelog:
  - close directory after processing pci.ids.d directory (#684000)
  - sysfs: do not warn on incomplete slot addresses (#1032827)


author: Ryan O'Hara <rohara@redhat.com> - 1.2.13-1
changelog:
  - Rebase to upstream version 1.2.13
    Resolves: rhbz#1052380, rhbz#1077201, rhbz#1007575, rhbz#967641


author: parag <paragn@fedoraproject.org> 3.5.7-3
changelog:
  - Merge-Review #226081
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Bump release and correct changelog


author: Karel Zak <kzak@redhat.com> 4.82-1
changelog:
  - upgrade to 4.82 (see the 00DIST file for list of changes)
  - backport an upstream patch from 4.83A-linux
  - remove lsof_4.81-man.patch (fixed upstream)


author: Peter Schiffer <pschiffe@redhat.com> 4.82-2
changelog:
  - resolves: #671480
    [RFE] Add ability to exclude a file descriptors corresponding to a particular file system


author: Peter Schiffer <pschiffe@redhat.com> 4.82-4
changelog:
  - resolves: #795799
    lsof fails to suppress warning messages if -b -w option is used
    and some nfs volume mounted


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.1.1-1
changelog:
  - New upstream release.
  - spec file updates:
    * Cleanup macro usage
    * Drop Conflict: in favour of correct Requires:
    * Whitespace cleanup


author: Ryan O'Hara <rohara@redhat.com> - 1.1.1-2
changelog:
  - Resolves: rhbz#555164
  - Resolves: rhbz#557275
  - Resolves: rhbz#557622
  - Add upstream revision 2104 - Fix saCkptDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2105 - Fix saTmrDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2106 - Fix saLckDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2107 - Fix saClmDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2108 - Fix saMsgDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2109 - Prevents iteration of a checkpoint section during synchronization.
  - Add upstream revision 2111 - Update to openais.spec.in to fix URL and File location.


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-15
changelog:
  - Enhance e2fsck detection of invalid extent trees (#922847)
  - Several filefrag fixes (#927541)
  - Clear errors stored in superblock by newer kernels (#895679)
  - Fix journal superblock error handling (#885083)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-18
changelog:
  - Fix e2fsck false positive when blocks exist past EOF (#994615)
  - Fix resize2fs shrink corruption when moving files with many extents (#873201)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-19
changelog:
  - Fix for some resize2fs corruptions (#1036122)
  - Allow tune2fs to remove a dirty journal with -ff (#1040122)
  - Add enable_periodic_fsck to mke2fs.conf (#1052409)
  - Disallow too-high revision during mke2fs (#1093446)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-22
changelog:
  - e2fsck: fix last mount time and last write time in preen mode (#1218262)
  - e2fsck: don't prompt for time fixes with accept_time_fudge (#1218262)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-23
changelog:
  - e2image: check return value from check_if_mounted() (#1139936)
  - e2fsck: do not process impossibly large dir blocks (#1297694)
  - resize2fs: fix off-line resize of file systems (#1285227)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.6.0-3
changelog:
  - Patch to make upstream build system honor our CFLAGS and friends.
  - Don't bother building throwaway static libs.
  - Disable autotools dependency tracking for cleaner build logs and possible
    slight build speedup.
  - Convert docs to UTF-8.
  - Update URLs.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.0-2
changelog:
  - Add a patch to allow usage of IPv6 nameservers
    (upstream revisions 1199,1201,1202)
  - Resolves: rhbz#560116


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.0-6
changelog:
  - Only fall back to AF_INET searches when looking for AF_UNSPEC
    addresses (#730695)
  - Do not leak memory in ares_parse_a_reply when parsing an invalid
    record (#730693)
  - Add a missing break (#713133) - reported and patched by Michal Luscon
  - Fix a SIGBUS when resolving SRV queries on architectures that do
    not support unaligned memory access (#695426)
  - Amend the ares_gethostbyname manpage so that it lists ARES_ENODATA as
    an allowed return code (#640944)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-3
changelog:
  - Fall back to AF_INET when ares_gethostbyname() is called with AF_UNSPEC
  - Only set search domains from /etc/resolv.conf if there isn't a value
    already present in the channel (David Drisdale)
  - Related: rhbz#1077544 - Rebase c-ares to version 1.10


author: Kees Monshouwer <km|monshouwer_com> 0.9.8-1
changelog:
  - Address reported security bug in chroot mode. Thanks to the
    "cPanel Security Team" for the discovery of this bug.
  - Improve chroot behavior in drop capability mode.


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-14
changelog:
  - Fix vfsv0 format detection (bug #609795)
  - Initialize vfsold block and inode value boundries for new quota file
    (bug #668709)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-18
changelog:
  - Do not use real domains in warnquota example (bug #680919)
  - Disable grace period/times remote setting (bug #683554)
  - Initialize v2r1 ddquot padding in dump (bug #692390)
  - Make dirname static to work with nss_db (bug #704216)
  - Do not report missing utmp record to syslog (bug #730057)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-19
changelog:
  - Report quotacheck failures by return code (bug #717948)
  - Improve quotacheck error message (bug #717948)
  - Do not fiddle with quota files on XFS and GFS (bug #846120)
  - Allow to set limits using multiplicative units (bug #890051)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-22
changelog:
  - Remove fixed limit on number of autofs mount points (bug #1024097)
  - Print negative quota values properly (bug #1009397)


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.1-1
changelog:
  - Backport hivex package from Fedora Rawhide.
  - Exclude s390, s390x because of lack of OCaml packages.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Rebase to upstream version 1.2.4 (RHBZ#642631).
    * Python bindings (python-hivex subpackage).
    * Adds hivex_set_value API call (Conrad Meyer).
    * Miscellaneous small bug fixes.
  - Fix Source0.
  - Fix builds with recent perl (Dan Horák).


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-3
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4
changelog:
  - Rebase to upstream version 1.3.3
    resolves: rhbz#734208
  - Add upstream patch: hivexml: Remove unused variable.
  - Add upstream patch: hivex: Added gnulib includes from builddir [...]


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4.2
changelog:
  - Remove loaded text from description
    resolves: rhbz#822741
  - Add patch to fix parsing of hives that contain large ri-records
    resolves: rhbz#841924


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4.3
changelog:
  - Add missing checks for small/truncated files
    resolves: rhbz#1158993
  - Fix typo in man page Win::Hivex.3.pm
    resolves: rhbz#1164693


author: Florian La Roche <laroche@redhat.com> - 1.08-1
changelog:
  - change Source: tag
  - Bernardo Innocenti bernie at codewiz.org: add LDFLAGS to opt patch
    to enable cross building on 64bit host
  - release 1.08 with loginpause option from Bernardo Innocenti bernie at codewiz.org


author: Petr Pisar <ppisar@redhat.com> - 1.08-5
changelog:
  - Check chroot(), chdir(), and nice() (bug #640933)
  - Limit TTY name length to prevent buffer overflow (bug #640940)
  - Allow login name up to LOGIN_NAME_MAX length (bug #651955)


author: Eric Sandeen <sandeen@redhat.com> - 1.0.1-2
changelog:
  - Upstream respun the release tarball to re-include top-level dir
  - drop exclude of bno_plot.py[co], not getting built now?


author: Edward Shishkin <edward@redhat.com> - 1.0.1-4
changelog:
  - blktrace doesn't run when device name is duplicated (#583615)
  - blktrace prints incorrect usage when running w/o parameters (#619201)
  - btreplay cannot work for /dev/cciss/c0d0 device (#650229)
  - option -k doesn't kill running trace (#583624)
  - blkiomon prints nothing when blktrace works with logical volume (#650243)
  - blkparese exit with non-zero status when tracefile doesn't exist (#583695)
  - run time went but blktrace is still running (#595356)
  - inconsistencies in btrecord man page (#595413)
  - undocumented options in blkiomon (#595419)
  - undocumented options in blkparce (#595615)
  - undocumented options in blktrace (#595620)
  - undocumented options in btreplay (#595623)
  - undocumented options in btt (#595628)


author: Michael Stead <mstead@redhat.com> 0.99.10-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 801434: Add at-spi accessibility name to calendar selection widget.
    (awood@redhat.com)
  - 800917: Display service level and type in All Subs tab (dgoodwin@redhat.com)
  - Add support for "release" command (alikins@redhat.com)
  - 801517: Missed translating a label during the registration process
    (bkearney@redhat.com)
  - 801513: One translation had a copy/paste error (bkearney@redhat.com)
  - The migration script should write default proxy auth settings.
    (awood@redhat.com)
  - Revert "801513: A replacement variable was used in a translation file where
    it was not needed" (dgoodwin@redhat.com)
  - 801545: Break apart the string to make them easier for the translators
    (bkearney@redhat.com)
  - 801513: A replacement variable was used in a translation file where it was
    not needed (bkearney@redhat.com)
  - 798015: Migration script should play nicely with proxies. (awood@redhat.com)
  - 742033: Unsubscribe button is not greyed out when nothing is selected
    (wpoteat@redhat.com)
  - 783990: Handle network errors when migrating. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.11-1
changelog:
  - 805906: fix missing imports for firstboot (jbowes@redhat.com)
  - Fix RHEL6 firstboot attribute error (dgoodwin@redhat.com)
  - 772218: throw an error if unparsed command line options exist
    (cduryee@redhat.com)
  - Add missing imports to rhsm_login for error dialogs (jbowes@redhat.com)
  - 803386: Display product ID in GUI and CLI. (awood@redhat.com)
  - Fix specfile for el5 firstboot (jbowes@redhat.com)
  - 804227,804076,804228: Handle 404's from old candlepin servers without
    /release (alikins@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for subscribe
    command (mstead@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for register
    command (mstead@redhat.com)
  - 803756,803762: Updated error message for service-level command
    (mstead@redhat.com)
  - fixups for strings from zanata (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 789007: Migration should fail early when attempted with non org admin user.
    (awood@redhat.com)
  - 805024: Hide extra separator along with redeem button. (awood@redhat.com)
  - 800999: Added --servicelevel arg to CLI list command (mstead@redhat.com)
  - 804227: Fix issues with repos --list (alikins@redhat.com)
  - Add proper back/forward logic for firstboot sla subscribe (jbowes@redhat.com)
  - 800933: Display service level and type in CLI list commands.
    (dgoodwin@redhat.com)
  - 789008: Print a more specific error message when Candlepin calls fail.
    (awood@redhat.com)
  - hook up sla firstboot to more registration cases (jbowes@redhat.com)
  - Define globals at module scope. (awood@redhat.com)
  - Remove firstboot subscriptions module (jbowes@redhat.com)
  - Fix broken tests for DST. Stop using time.time() (alikins@redhat.com)
  - Add error cases for firstboot autobind (jbowes@redhat.com)
  - Perform the actual entitlement bind on confirm subs screen
    (jbowes@redhat.com)
  - Set up shared state for AutobindController in firstboot (jbowes@redhat.com)
  - Extract a controller class for sla select logic (jbowes@redhat.com)
  - Break apart autobind first boot module (jbowes@redhat.com)
  - Add some autobind wizard button spacing. (dgoodwin@redhat.com)
  - Always update the icon and notification details on status change.
    (mstead@redhat.com)
  - Only add icon click listeners once. (mstead@redhat.com)
  - Adding notification nag icon support for Registration Required
    (mstead@redhat.com)
  - add firstboot rhsm_autobind to spec file (jbowes@redhat.com)
  - Autobind cancel during registration will now unregister you.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Move back/forward/cancel buttons in sla selection to parent
    (jbowes@redhat.com)
  - Revert "Update CLI to handle server that doesn't support service levels."
    (dgoodwin@redhat.com)
  - Update GUI to handle server that does not support service levels.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Add autobind screen to firstboot (jbowes@redhat.com)
  - Fix firstboot unregister import error. (dgoodwin@redhat.com)
  - Add missing spacers to main window toolbar. (dgoodwin@redhat.com)
  - Fix an error handling bug. (dgoodwin@redhat.com)
  - Get register screen working in el6 firstboot (jbowes@redhat.com)
  - Center wizard's error dialog on main window (mstead@redhat.com)
  - Removing commented out code in register dialog (mstead@redhat.com)
  - Add skip option instead of autobind in register dialog. (mstead@redhat.com)
  - Fix preferences dialog error when not registered. (dgoodwin@redhat.com)
  - Improved error handling for autobind wizard. (dgoodwin@rm-rf.ca)
  - Fix message window warnings. (dgoodwin@rm-rf.ca)
  - Fix alignment on select SLA screen. (dgoodwin@redhat.com)
  - Display the service level selected when confirming autobind subs (dgoodwin
    @rm-rf.ca)
  - Implement Cancel button on autobind wizard screens. (dgoodwin@redhat.com)
  - Allow setting service level from preferences dialog. (dgoodwin@redhat.com)
  - First cut at a preferences dialog. (dgoodwin@redhat.com)
  - Pack SLA's into a scrolled window. (dgoodwin@rm-rf.ca)
  - Handle any exception that happens when the autobind wizard is loaded.
    (mstead@redhat.com)
  - Setting parent window on AutobindDialog and add titles to screens.
    (mstead@redhat.com)
  - Integrating autobind wizard with register gui. (mstead@redhat.com)
  - Fix autobind wizard disappearing on window switch. (dgoodwin@redhat.com)
  - Do not set SLA until user hit's subscribe button. (dgoodwin@redhat.com)
  - Polish autobind glade UI (dgoodwin@redhat.com)
  - Set and use the system's service level. (dgoodwin@redhat.com)
  - Cleaning up Select SLA screen (mstead@redhat.com)
  - Added framework for back button support (mstead@redhat.com)
  - Handle no SLAs cover all installed products. (dgoodwin@rm-rf.ca)
  - Handle launching autobind when no entitlements needed. (dgoodwin@rm-rf.ca)
  - Set detected prod list in Select SLA screen (mstead@redhat.com)
  - Close autobind wizard once complete. (dgoodwin@redhat.com)
  - Hookup actual bind in autobind wizard. (dgoodwin@redhat.com)
  - SelectSLA now keeps track of selected SLA and pass to confirm dialog.
    (mstead@redhat.com)
  - Load the autobind glade file on wizard creation. (mstead@redhat.com)
  - Switch to more explicit screen switching. (dgoodwin@redhat.com)
  - Set screen title when screen is changed. (mstead@redhat.com)
  - Allow screens to pass custum data during wizard screen change.
    (mstead@redhat.com)
  - Hooking up button signals for selectsla (mstead@redhat.com)
  - Add callback to allow screen change in wizard (mstead@redhat.com)
  - Fixing broken tests due to leap year. (mstead@redhat.com)
  - Attempt to keep button bar right aligned. (mstead@redhat.com)
  - Removed the button bar form the wizard. (mstead@redhat.com)
  - Created AutobindWizardScreen to provide contract for AutobindWizard
    (mstead@redhat.com)
  - Display appropriate screen in SLA wizard. (mstead@redhat.com)
  - Fixed GtkWarning: IA__gtk_widget_reparent error when launchig dialog
    (mstead@redhat.com)
  - First cut at adding the Select SLA screen. (mstead@redhat.com)
  - Check if dry-run results cover required products. (dgoodwin@redhat.com)
  - Check dry run autobind results for each service level. (dgoodwin@redhat.com)
  - Sketch out an autobind wizard class. (dgoodwin@redhat.com)
  - Start sketching out the confirm subscriptions screen. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.12-1
changelog:
  - Don't skip past firstboot login page on invalid user/pass (jbowes@redhat.com)
  - 805690: Turn repo gpgcheck off if no gpgkey specified. (dgoodwin@redhat.com)
  - 795552: Put safe int conversions around certain fact checks.
    (bkearney@redhat.com)
  - 804100: display an error when candlepin doesn't support release
    (jbowes@redhat.com)
  - 804227: expect a Release object instead of a bare string (alikins@redhat.com)
  - Latest string files from zanata (bkearney@redhat.com)
  - 805450: display better error message when autosubscribing
    (cduryee@redhat.com)
  - 805594: Give each "Subscribe" button in the GUI a unique at-spi name.
    (awood@redhat.com)
  - 803374: Provide unambiguous at-spi names for widgets. (awood@redhat.com)
  - 805353: subscription-manager list --help should use consistent wording for
    servicelevel option. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.13-1
changelog:
  - latest strings into keys.pot and updated from zanata (alikins@redhat.com)
  - 809611: Fix undefined variable in installedtab for expired
    (alikins@redhat.com)
  - pep8/pyflakes cleanups (alikins@redhat.com)
  - Repolib now requires a UEP connection. (awood@redhat.com)
  - Use numeric index to access portion of URL. (awood@redhat.com)
  - 807785: use a better title on the autobind wizard (jbowes@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Add release selection to preferences dialog (alikins@redhat.com)
  - 805415: handle entitlements for socket count of 0 (alikins@redhat.com)
  - 804201: Fix sla select in firstboot after back button (jbowes@redhat.com)
  - 807477: Delay attempt to connect to RHN until after basic error checks.
    (awood@redhat.com)
  - 803374: Change the 'Subscribe' button to read 'Auto-subscribe.'
    (awood@redhat.com)
  - 808217: Add a header to the release list (bkearney@redhat.com)
  - 807153: Provide a more informative error message when encountering repodata
    errors. (awood@redhat.com)
  - 807822: Allow setting release to '' (mstead@redhat.com)
  - 807036: Instruct users to go to All Subscriptions for all SLA failures
    (bkearney@redhat.com)
  - 807407: Subscripton Manager substitutes "" for $releasever when releaseVer
    not set on consumer (wpoteat@redhat.com)
  - 803756: Trap RemoteServerException as well as RestLibException (404) for
    service-level command (mstead@redhat.com)
  - 806941: Removed unknown swapped attribute from autobind.glade.
    (mstead@redhat.com)
  - 807360: Allow the repos command to work without being registered
    (bkearney@redhat.com)
  - 806457: Fix deletion of productids with yum localinstall (alikins@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.14-1
changelog:
  - Update strings and pull latest from zanata (alikins@redhat.com)
  - 810306: Improved messaging in firstboot (mstead@redhat.com)
  - 811337: Unregister any time we return to rhsm_login (jbowes@redhat.com)
  - 811294: Refresh strings to fix broken kn.po (alikins@redhat.com)
  - 807153: Allow more aggressive deletion of product certs. (awood@redhat.com)
  - 810399: Require the latest rhn-setup-gnome for firstboot (alikins@redhat.com)
  - 810290: Use correct calculation for "Next update" time in sm-gui
    (cduryee@redhat.com)
  - Extracted the latest strings, and sent them to the zanata
    (bkearney@redhat.com)
  - 810363: Handle socket errors for bad proxy host in firstboot
    (alikins@redhat.com)
  - Latest man page and documentation (dlackey@redhat.com)
  - 809989: Add the shortened password url to the strings files.
    (bkearney@redhat.com)
  - 809989: Add a shorter URL to the registration screen (bkearney@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.15-1
changelog:
  - update translations from zanata (alikins@redhat.com)
  - 815563: Remove incorrect at-spi locators. (awood@redhat.com)
  - 795541: Environment command should omit the Library from katello
    (bkearney@redhat.com)
  - 811952: Don't try to unsubscribe old ents if we register (alikins@redhat.com)
  - 811952: Handle errors on unsubscribing ent certs (alikins@redhat.com)
  - 812929: Fix issue with selected sla not being in suitable_slas
    (mstead@redhat.com)
  - 811863: Handle unforseen errors in preferences dialog. (dgoodwin@redhat.com)
  - 812104: add "release" and "service-level" to completion (alikins@redhat.com)
  - Latest man page (bkearney@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.99.16-1
changelog:
  - 817390: add completion support for servicelevel (alikins@redhat.com)
  - 817117: fix completion of environment command (alikins@redhat.com)
  - 816377: handle cert migration data being missing (alikins@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.17-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 810236: Update facts after registering with --consumerid.
    (dgoodwin@redhat.com)
  - 818298: release --list should not display rhel-5 when only rhel-6 product is
    installed (wpoteat@redhat.com)
  - adding mention that subscription-manager-migration-data is a required package
    for the migration scripts to work, bz818767 (deon@deonlackey.com)
  - 818461: invalid date format error when using or_IN.UTF-8 (cduryee@redhat.com)
  - 815479: Incorrect owner should be relayed on service level list call.
    (wpoteat@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.18-1
changelog:
  - 813296: Remove check for candlepin_version (jbowes@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 820743: fix multiline string that was not extracted (alikins@redhat.com)
  - 820080: Fix "Configuration" spelling on firstboot page (alikins@redhat.com)
  - 820671: Fix issues finding translated strings from glade (alikins@redhat.com)
  - 820765 removing reference to migration being supported on rhel 5.8 and later
    (deon@deonlackey.com)
  - 821024: Properly handle ESC on preferences dialog (mstead@redhat.com)
  - 820639: Don't show unenabled content as an available release
    (alikins@redhat.com)
  - 820743: fix some merge errors from fix for 820743 (alikins@redhat.com)
  - 820743: some multiline strings extracted into string catalog incorrectly
    (alikins@redhat.com)
  - 820080: Fix "Configuration" spelling on firstboot page (alikins@redhat.com)
  - 820027: Fix unlocalized string blurb for "list --servicelevels"
    (alikins@redhat.com)
  - 820042: update translations from zanata (alikins@redhat.com)
  - 819808: Fix untranslated string "No service levels..." (alikins@redhat.com)
  - 820040,820037,820030: don't break multibyte help blurbs (alikins@redhat.com)
  - 819828: Add translated strings for missing translations (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.19-1
changelog:
  - 824100: fix pt_BR translations, and update zanata (alikins@redhat.com)
  - 822057: do not hard-code cdn to port 443 (cduryee@redhat.com)
  - 820743: fix translation errors for "service-level" command
    (alikins@redhat.com)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-53
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1301758)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-55
changelog:
  - Resolves: #1372315 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-56
changelog:
  - Resolves: #1310582 - when ProxyErrorOverride is On, modcluster return
    503 status code on subsequent requests


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-58
changelog:
  - Resolves: #1349546 - comments no longer allowed at the end of Allow
    from statements and maybe other statements from mod_authz*


author: Petr Sabata <psabata@redhat.com> - 2.6.32-8
changelog:
  - Add support for setting and showing SR-IOV virtual function link params
  - Patch from Petr Lautrbach
  - Resolves: rhbz#606680


author: Petr Sabata <psabata@redhat.com> - 2.6.32-13
changelog:
  - Do not segfault when creating veth with peer option without any name provided
  - link_veth_segv.patch
  - Resolves: rhbz#636943


author: Petr Sabata <psabata@redhat.com> - 2.6.32-14
changelog:
  - Fix'd to properly build against xtables interface
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986


author: Petr Sabata <psabata@redhat.com> - 2.6.32-16
changelog:
  - Link and install m_xt.so properly
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986
  - Related: rhbz#678986


author: Petr Sabata <contyk@redhat.com> - 2.6.32-17
changelog:
  - Fix GRED options clearing
  - Resolves: rhbz#709652
  - Add macvlan/macvtap passtru support
  - Resolves: rhbz#692867
  - Resolves: rhbz#693878


author: Miloslav Trmač <mitr@redhat.com> - 0.22.2-2
changelog:
  - Add "lustre" to PRUNEFS
  - Add all nodev filesystems from the Fedora kernel to PRUNEFS, to make
    (updatedb) work as some users expect
    Related: #543948


author: Miloslav Trmač <mitr@redhat.com> - 0.22.2-4
changelog:
  - Fix a typo in locate(1)
    Resolves: #690800
  - When encountering an empty file name in updatedb, print the name of the
    offending directory instead of aborting
    Resolves: #699363


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-5
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1023779)
  - use more strict permissions for cron script and mark it as config (#1012534)
  - add gpfs to PRUNEFS (#1168301)


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-6
changelog:
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182304)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6
changelog:
  - Resolves: #556398
  - Directly included relevant patches, scripts and man pages from Debian
  - Removed rpath
  - rpmlint is silent now


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6.1
changelog:
  - Fixed CVE-2010-2642, CVE-2011-0433, CVE-2011-0764, CVE-2011-1552, CVE-2011-1553, CVE-2011-1554
    Resolves: rhbz#772900


author: Richard Hughes <richard@hughsie.com> - 010-4
changelog:
  - Continue to poll when we guessed a status value, and only stop when the
    kernel says definitively that we are fully charged.


author: Richard Hughes <rhughes@redhat.com> - 011-0.1.20090914git
changelog:
  - Update to todays git snapshot to fix the session exploding when a USB UPS is
    inserted then removed a few times.


author: Richard Hughes <richard@hughsie.com> - 012-1
changelog:
  - Update to 012
  - Detect encrypted swap and prevent hibernate in this case.
  - When we do a delayed refresh, actually do 5 x 1 second apart rather
    than 1 x 3 seconds which should fix some slow battery devices.


author: Richard Hughes <rhughes@redhat.com> - 013-0.1.20091118git
changelog:
  - Update to a git snapshot
  - Don't crash the daemon if the battery is broken. Fixes #533654
  - Avoid going from discharging to pending-discharge when the battery is very low
  - Fix the toshiba battery recall notices


author: Richard Hughes <richard@hughsie.com> - 013-1
changelog:
  - Update to 013
  - Detect more supported UPS devices.
  - Fix the Toshiba battery recall data.
  - Fix a crash when the battery NVRAM is invalid.
  - Add a couple of fixes for very new battery support.


author: Richard Hughes <rhughes@redhat.com> - 014-1
changelog:
  - Check if swap exists before determining how much is free
  - Prevent segfault if connection to system dbus fails
  - Fix segfault in the history code.
  - Resolves: #553589


author: Richard Hughes <rhughes@redhat.com> - 014-3
changelog:
  - Fix the multilib file conflict when installing DeviceKit-power-devel
    by splitting out a noarch DeviceKit-power-devel-docs subpackage.
  - The reason this is required is that gtk-doc generates random link
    targets in the autogenerated documentation which upsets rpm as the
    files no longer have the same checksum.
  - Resolves: #727544


author: Rich Megginson <rmeggins@redhat.com> - 4.0.2-3
changelog:
  - Bump spec rev to 3
  - Remove unneeded buildrequires perl, gawk, sed
  - Remove leading / from path macros
  - Remove provides for package name - done automatically
  - Move pkgconfig file stuff under install
  - Added LICENSE and README under docs


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.3.01-0
changelog:
  - Fixed support for windows build by moving old makefile to src/Makefile.win
  - and updating instructions - I could not get configure/libtool to work
  - with cygwin and the msvc compiler
  - Added support for --with-nspr and --with-nss and finding nspr/nss
  - "in-tree" when building with other mozilla components
  - Use PK11_TokenKeyGenWithFlags instead of PK11_KeyGen


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.4-1
changelog:
  - Removed some autoconf generated files which were GPL only - all
  - code needs to be tri-licensed
  - updated version to 4.0.4
  - added empty COPYING file - do not use the one generated by autoreconf
  - use bz2 for source tarball instead of gz


author: Rex Dieter <rdieter@fedoraproject.org> - 1.900.1-13
changelog:
  - CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
  - CVE-2008-3522 jasper: possible buffer overflow in 
    jas_stream_printf() (#461478)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.1
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171208)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.2
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173566)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173566)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-16.3
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183671)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183679)


author: Justin Ross <jross@redhat.com> - 0.14-1
changelog:
  - Rebase to 0.14
  - rhbz#743657 - The pure-python QMF console unnecessarily retains
    references to query results
  - rhbz#699499 - [RFE] qmfv2 must provide mainloop integration
  - rhbz#681680 - QMF agents wake up several times a second
  - rhbz#663461 - Enable new architectures
  - Remove python-qpid-qmf and ruby-qpid-qmf from ppc and s390 architectures


author: Adam Jackson <ajax@redhat.com> 1.6.0-18
changelog:
  - Silence amazing amounts of log spam in the i2c code (#888607)
  - Fix a crash in DDC fetch (#888607)


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-2
changelog:
  - Add -Wl,-z,relro to the linker flags in order to fix a rpmdiff
    error. These flags used to be provided indirectly by openssl, and after
    openssl stopped exporting them, they were added by
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch
    which was dropped during the rebase
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-3
changelog:
  - Add -Wl,-z,now as well to the link flags.  This flag was present in
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch, and
    pkgwrangler still complains about:
    File /usr/lib/libspice-client-glib-2.0.so.8.5.0 lost GNU_RELRO security
    protection on i686
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-4
changelog:
  - Fix smartcard issues after VM restart (virsh destroy/virsh start)
    Resolves: rhbz#1205171
  - Remove obsolete patches
    Related: rhbz#1185434


author: Fabiano Fidêncio <fidencio@redhat.com> 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242605
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247920
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1265361
  - Add Client capability for windows monitor_config messsage
    Resolves: rhbz#1265359
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1247749
  - Drop isoc packages on low bandwith
    Resolves: rhbz#1276707


author: Pavel Grunt <pgrunt@redhat.com> 0.26-8
changelog:
  - Make grab session related
    Resolves: rhbz#1330652
  - Improve messages in usb redirection dialog
    Resolves: rhbz#1298772
  - Use proxy only when needed
    Resolves: rhbz#1306311


author: Rafael Schloming <rafaels@redhat.com> - 0.1.897961-1
changelog:
  - Added groups to subpackages.
  - Replaced python_sitelib with python_sitearch, use %global instead of %define, and killed unused ruby_sitelib.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-17
changelog:
  - Resolves: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-18
changelog:
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-19
changelog:
  - Resolved: #1334490 - CVE-2016-4554 CVE-2016-4556 squid: various flaws
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-24
changelog:
  - Resolves: #1235114 - Squid crashes with 'assertion failed: disk.cc:377:
    "fd >= 0"' after reloading the configuration.


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-4
changelog:
  - for prelink -u -o ... if no .gnu.prelink_undo section is
    present just pass through the original bits to the output file
    instead of saving the ELF file using libelf into a temporary
    and then copying over or renaming that to the final output file
    (#614382)


author: Jakub Jelinek <jakub@redhat.com> 0.4.4-1
changelog:
  - support copying over extended attributes (#456105)
  - handle DW_OP_GNU_implicit_pointer, fix handling of DW_OP_call_ref


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-1
changelog:
  - enable for arm (#733089)
    - adjust arm default dynamic linker
    - fix up fast PIE detection to handle PT_LOPROC ... PT_HIPROC phdrs
      before PT_PHDR
    - disable cxx{1,2}.sh test checking for conflict removal on arm
      due to EABI weirdnesses, add new cxx3.sh test that tests conflict
      removal even on arm


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3
changelog:
  - add --layout-page-size=N option, default to --layout-page-size=32768
    on AMD Bulldozer (#739460)
  - handle 0%{?rhel} >= 7 like 0%{?fedora} >= 13


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3.1
changelog:
  - fix saving of cache if some dependencies are unprelinkable and their                                            
    dependencies bad (#788238)                                                                                      
  - fix up DWARF4 DW_AT_data_member_location handling                                                               
  - add .debug_macro support                                                                                        
  - add DWZ multifile support


author: Petr Machata <pmachata@redhat.com> - 0.5-19.45svn
changelog:
  - Add a patch to fix two coverity citations
  - Resolves: #805198
  - Fix a bug in multi-threaded support (ltrace-0.5-pass-leader.patch)
  - Update man page (ltrace-0.5-dlopen-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-20.45svn
changelog:
  - Fix dlopen support when dynamic linker is not prelinked
    (ltrace-0.5-dlopen-double-bias.patch)
  - Fix unexpected breakpoint messages appearing after exec
  - Resolves: #738254


author: Petr Machata <pmachata@redhat.com> - 0.5-22.45svn
changelog:
  - Bias shoud be applied to address read from .opd only if that address
    wasn't yet resolved by the dynamic linker
    (ltrace-0.5-dlopen-opd-bias.patch)
  - Resolves: #738254


author: Petr Machata <pmachata@redhat.com> - 0.5-23.45svn
changelog:
  - Fix the case that a breakpoint is reported by SIGILL instead of
    SIGTRAP, and DECR_PC_AFTER_BREAK is non-zero, as is the case on
    s390 (ltrace-0.5-s390x-sigill.patch)
  - Fix detach from sleeping process (ltrace-0.5-sigint.patch)
  - Resolves: #738254
  - Fix attach test case, patch courtesy of
    Edjunior Barbosa Machado <emachado@br.ibm.com>
    (ltrace-0.5-fix-testcase-attach-process.patch)
  - Resolves: #811088
  - Fix tracing return from functions called using a plain branch
    instead of library call (ltrace-0.5-ppc64-linked-calls.patch)
  - Add a patch for single-stepping over a lwarx/ldarx instruction
    (ltrace-0.5-ppc64-atomic-skip.patch)
  - Resolves: #811184
  - Adjust the code to avoid some warnings (ltrace-0.5-warnings.patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-25.45svn
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.5-account_execl.patch)


author: Eric Sandeen <sandeen@redhat.com> 3.0.4-4
changelog:
  - Add /var/lib/xfsdump/inventory to file list (was created runtime) (#1055655)
  - Preserve file capabilities on restore (#905585)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-4
changelog:
  - Backported turbo detection (turbo patch, #610464)
  - Show all P-states in dump mode (dump-all-pstates patch, accepted by upstream)
  - Backported tty handling for non-interactive mode (notty patch, #628514)
  - Output error in interactive mode if there is no tty (checktty patch,
    posted upstream)
  - Fixed rpmlint warning about mixed tabs and spaces


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-6
changelog:
  - Improved sigwinch handling
    Resolves: rhbz#698422

    * Tue Aug 02 2011 Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-5
  - Fixed sigwinch handling
    Resolves: rhbz#698422


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-3
changelog:
  - New version of unlimit-fds patch
  - Fixed error message if FDs limit is reached (by fd-limit-err patch)
    Related: rhbz#998021


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-4
changelog:
  - Reintroduced -d dump switch and improved reporting options
    (by improve-reporting-options patch)
    Resolves: rhbz#1333439


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-20
changelog:
  - Install tmpfiles configuration into /usr/lib/tmpfiles.d (#1180995)
  - Fix root key management to comply to RFC5011 (#1180267)


author: Jan Kaluza <jkaluza@redhat.com> 5.04-22
changelog:
  - fix #1169509 - add support for Java 1.7 and 1.8
  - fix #1243650 - comment out too-sensitive Pascal magic
  - fix #1080453 - remove .orig files from magic directory
  - fix #1161058 - add support for EPUB
  - fix #1162149 - remove parts of patches patching .orig files
  - fix #1154802 - fix detection of zip files containing file named "mime"
  - fix #1246073 - fix detection UTF8 and UTF16 encoded XML files
  - fix #1263987 - add new "execfn" to coredump output to show the real name of
    executable which generated the coredump
  - fix #809898 - add support for detection of Python 3.2-3.5 byte-compiled files
  - fix #966953 - backport support for MSOOXML


author: Jan Kaluza <jkaluza@redhat.com> 5.04-27
changelog:
  - fix CVE-2014-3587 (incomplete fix for CVE-2012-1571)
  - fix CVE-2014-3710 (out-of-bounds read in elf note headers)
  - fix CVE-2014-8116 (multiple DoS issues (resource consumption))
  - fix CVE-2014-8117 (denial of service issue (resource consumption))
  - fix CVE-2014-9620 (limit the number of ELF notes processed)
  - fix CVE-2014-9653 (malformed elf file causes access to uninitialized memory)


author: Miroslav Suchý <msuchy@redhat.com> 0.5.0-4
changelog:
  - 612998 - remove binaries. Just in case
  - 612998 - filter provide PAMmodule.so()(64bit)
  - 612998 - do not use INSTALLED_FILES feature, and enumerate files manualy
  - 612998 - use %{__python} in %build section
  - 612998 - fix buildrequires for PyPAM
  - 612998 - add macros for rhel5


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.0.0-3
changelog:
  - Change /dev/i2c-# creation from /lib/udev/devices to /etc/udev/makedev.d
    usage
  - Add an /etc/modprobe.d/i2c-dev file to work around bug 380971


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15
changelog:
  - Resolves: rhbz#902397

  - totemip: Properly detect ipv6 address (rhbz#902397)
  - merge upstream commit d76759ec26ecaeb9cc01f49e9eb0749b61454d27 (rhbz#902397)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-16
changelog:
  - Resolves: rhbz#854216
  - Resolves: rhbz#877349
  - Resolves: rhbz#880598
  - Resolves: rhbz#881729
  - Resolves: rhbz#906432
  - Resolves: rhbz#907894
  - Resolves: rhbz#915490
  - Resolves: rhbz#915769
  - Resolves: rhbz#916227
  - Resolves: rhbz#922671
  - Resolves: rhbz#924261
  - Resolves: rhbz#947936
  - Resolves: rhbz#949491
  - Resolves: rhbz#959184
  - Resolves: rhbz#959189

  - If failed_to_recv is set, consensus can be empty (rhbz#854216)
  - merge upstream commit 81ff0e8c94589bb7139d89e573a75473cfc5d173 (rhbz#854216)
  - objdb: Don't read uninitialized memory in inc/dec (rhbz#880598)
  - merge upstream commit 0a11d261a361726703084897471608d9914e0548 (rhbz#880598)
  - log: Handle race in printf_to_logs and format_set (rhbz#881729)
  - merge upstream commit a282eeecb4899ec415f76442217836338edfbeec (rhbz#881729)
  - log: Avoid deadlock caused by previous commit (rhbz#881729)
  - merge upstream commit e69f322d52a967e19ac6cf4eba60c54fc64b1688 (rhbz#881729)
  - Handle colon in configuration file (rhbz#906432)
  - merge upstream commit c04af91ada3c4ca29643cad599ed5605f6bb10bd (rhbz#906432)
  - Handle unexpected closing brace in config file (rhbz#906432)
  - merge upstream commit 60a9f809c17d6cfe73c34263233dbf8e4677d6b5 (rhbz#906432)
  - Put handle to hdb in dispatch on unknown message (rhbz#922671)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#922671)
  - Properly check result of coroipcc_dispatch_put (rhbz#922671)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#922671)
  - Handle config file with service without name (rhbz#915769)
  - merge upstream commit 6b719961b36b3b780f2c9ff148aa2273872f8788 (rhbz#915769)
  - Move corosync exit semaphore initialization (rhbz#916227)
  - merge upstream commit b6aaa6e2af625467316e54e67a39c6327cf73cbc (rhbz#916227)
  - coroipcs: Ensure rb data are not overwritten (rhbz#922671)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#922671)
  - Properly lock pending_semops (rhbz#922671)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#922671)
  - cfg: When send_shutdown fails, clear shutdown_con (rhbz#924261)
  - merge upstream commit fd967b6db504b1fe6667da8ce8a141924e3914a9 (rhbz#924261)
  - cfgtool: Retry shutdown on CS_ERR_TRY_AGAIN (rhbz#924261)
  - merge upstream commit 3324d31819d359fae75d6f91a942fc84e3b9be23 (rhbz#924261)
  - totempg: Make iov_delv local variable (rhbz#907894)
  - merge upstream commit 3e3231375c29d562af050a48f18b301bf1cdca82 (rhbz#907894)
  - Fix race for sending_allowed (rhbz#907894)
  - merge upstream commit 94331b5e0226f985364ef0632fdf4d5f0d91d625 (rhbz#907894)
  - schedwrk: Set values before create callback (rhbz#907894)
  - merge upstream commit 7f00dcb548584911191f1e70483d4523c3ba1319 (rhbz#907894)
  - Remove exit thread and replace it by exit pipe (rhbz#907894)
  - merge upstream commit 9f8279a3f1853139e9bd472c23f905baf9298c32 (rhbz#907894)
  - totempg: Store and restore global variables (rhbz#907894)
  - merge upstream commit 5e6e1a000db8b066aff08b0649886e4ce07b843c (rhbz#907894)
  - Logsys: Ensure logging PID is really corosync (rhbz#915490)
  - merge upstream commit 830df013a853ffa7e9b49efb030ccc7920d2f683 (rhbz#915490)
  - fplay: Check minimum record size (rhbz#915490)
  - merge upstream commit ef63aae13945bd790e54181593561468426baca4 (rhbz#915490)
  - corosync-fplay: Check incorrect idx and cycle (rhbz#915490)
  - merge upstream commit d8761bae84c12285ef40426c0ad7f09f569c3d87 (rhbz#915490)
  - Improve handling of getpwnam_r() and getgrnam_r() (rhbz#947936)
  - merge upstream commit c3422128a45a2833103c8351e0adc84ba6c341be (rhbz#947936)
  - Detect big scheduling pauses (rhbz#949491)
  - merge upstream commit 7475db7102bf387cfcd16a65b0b0ace3e194bd4b (rhbz#949491)
  - Improve corosync-notifyd example (rhbz#877349)
  - merge upstream commit 614d897209c8d9d8b38bc583d0ce056a5d3445b6 (rhbz#877349)
  - Install sysconfig/corosync-notifyd in specfile (rhbz#877349)
  - merge upstream commit bc130cb10c4ec014829286ba61c0de544f82656d (rhbz#877349)
  - Free confdb message holder list on confdb exit (rhbz#959189)
  - merge upstream commit 013b4ba8ebdc089da76313d43b1454fe324d597b (rhbz#959189)
  - Handle SIGPIPE in req_setup_send (rhbz#959184)
  - merge upstream commit a9c4bbd9f10d9453730f71d8bd9a02ee8bcf2eed (rhbz#959184)
  - confdb: Make objdb_notify_dispatch preemptable (rhbz#959189)
  - merge upstream commit 0194e6455983947c9c496658b5d593c769e58bfe (rhbz#959189)
  - Lock sync_in_process variable (rhbz#907894)
  - merge upstream commit 460a495243b1ebb225e15c1757554ff625aca99e (rhbz#907894)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-17
changelog:
  - Resolves: rhbz#956739

  - Add timestamps to the Corosync black-box output (rhbz#956739)
  - merge upstream commit 3ede0352ea4a7ea71ebe16db59c0c7ad0a01f733 (rhbz#956739)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-18
changelog:
  - Resolves: rhbz#1001210
  - Resolves: rhbz#1011307
  - Resolves: rhbz#1018232
  - Resolves: rhbz#1025321
  - Resolves: rhbz#1067043

  - totemiba: Properly allocate RDMA buffers (rhbz#1001210)
  - merge upstream commit 795b04780ff6cd94b2e10aa1826a289f36119ce7 (rhbz#1001210)
  - totemiba: Del channel fd from poll before destroy (rhbz#1001210)
  - merge upstream commit 86fd9a14f6e74b711eb7e89cec72096bdcd1441b (rhbz#1001210)
  - totemiba: Fix parameters position for poll_add (rhbz#1001210)
  - merge upstream commit cba0f90af4af55702c1daa7afa03c8be10eaa5f3 (rhbz#1001210)
  - corosync to start in infiniband + redundant ring active/passive mode (rhbz#1001210)
  - merge upstream commit d0ca2ceb980242dd8c28b57f449eeeac1eb54176 (rhbz#1001210)
  - totemiba: Check if configured MTU is allowed by HW (rhbz#1001210)
  - merge upstream commit 3403fe06e8a915632679c48ccccb2662521746f2 (rhbz#1001210)
  - logsys: Handle full /dev/shm correctly (rhbz#1011307)
  - merge upstream commit 095a114ab84074e16d384f3ccaadfecff80b54a2 (rhbz#1011307)
  - ipcs: Backport socket creds handling from libqb (rhbz#1018232)
  - merge upstream commit 7897e4ae3e1c1ff20a2f375a0a5dc102ab0e98e8 (rhbz#1018232)
  - ipcs: Set SO_PASSCRED also on listening socket (rhbz#1018232)
  - merge upstream commit f11e5bf61941fd6aca018bb2f15f2371c668974f (rhbz#1018232)
  - cpg: Avoid list corruption (rhbz#1025321)
  - merge upstream commit 3c11ea7b84c109e6f8451229437351c5a14c7168 (rhbz#1025321)
  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1067043)
  - merge upstream commit e9d9c4be7293c04ca97bfd84f95b76a22690a92a (rhbz#1067043)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1067043)
  - merge upstream commit 0b825f22f2b95beca1aeb614d22a7e74a84c66b5 (rhbz#1067043)
  - cpg: Make sure left nodes are really removed (rhbz#1067043)
  - merge upstream commit b55f32fe2e1538db33a1ec584b67744c724328c6 (rhbz#1067043)
  - totemiba: Add multicast recovery (rhbz#1001210)
  - merge upstream commit 0ea20a3d545c4bf1a02306dd2152eb497a03b7d0 (rhbz#1001210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-19
changelog:
  - Related: rhbz#1001210

  - totemiba: Fix incorrect failed log message (rhbz#1001210)
  - merge upstream commit 4130d7448dcea024820d20e3c474c54e14ec9cb5 (rhbz#1001210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-2
changelog:
  - Resolves: rhbz#1136431
  - Resolves: rhbz#1141367
  - Resolves: rhbz#1163846
  - Resolves: rhbz#742999

  - Adjust MTU for IPv6 correctly (rhbz#1136431)
  - merge upstream commit 6fc58377d9f3201a74afedbb53311ff95fde700b (rhbz#1136431)
  - config: Make sure user doesn't mix IPv6 and IPv4 (rhbz#742999)
  - merge upstream commit df4d4da6e204a9f151a764c868bf7c99c97186f5 (rhbz#742999)
  - config: Process broadcast option consistently (rhbz#742999)
  - merge upstream commit 90d458532b59a15ae8e936f43e8bf1f8f3a32ac7 (rhbz#742999)
  - config: Ensure mcast address/port differs for rrp (rhbz#742999)
  - merge upstream commit 6f74374d3ff23735cf5e1d5e01e56d6cd866085c (rhbz#742999)
  - totem: Inform RRP about membership changes (rhbz#1163846)
  - merge upstream commit f35ffb168f8ee3eac4660309088372df4cb215f2 (rhbz#1163846)
  - totemnet: Add totemnet_member_set_active (rhbz#1163846)
  - merge upstream commit 3dafc4c508e4928d459719958918052ce49fd223 (rhbz#1163846)
  - totemrrp: Implement *_membership_changed (rhbz#1163846)
  - merge upstream commit 3dcdfeaddbe054fad63d3a3cb046dd018e118e69 (rhbz#1163846)
  - totemudpu: Implement member_set_active (rhbz#1163846)
  - merge upstream commit bd02ac319af40e4c484c6e4cdb8e049db8813541 (rhbz#1163846)
  - totemudpu: Send msgs to all members occasionally (rhbz#1163846)
  - merge upstream commit 0bd29025419204672e4d7857434019045bf7b456 (rhbz#1163846)
  - ipcc: Fix ERR_LIBRARY error if finalise called inside dispatch (rhbz#1141367)
  - merge upstream commit 83bf77e6f42c2a8b01b1d079e8dc792d9cc7d35d (rhbz#1141367)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-3
changelog:
  - Resolves: rhbz#1200387
  - Resolves: rhbz#1278473
  - Resolves: rhbz#1278478
  - Resolves: rhbz#1278490

  - config: Fix 'then' for 'than' typos in messages and some comments. (rhbz#1278478)
  - merge upstream commit 1be4f7b899f91a8dc23ade10c539177f2b39d88e (rhbz#1278478)
  - totemconfig: Make sure join timeout is less than consensus (rhbz#1278478)
  - merge upstream commit 17e90526aaa702cc3079fe5089253590267418d4 (rhbz#1278478)
  - Reset timer_problem_decrementer on fault (rhbz#1278473)
  - merge upstream commit c5a5bedf6e086acb9f3bda374ac495670a5fcf25 (rhbz#1278473)
  - totem: Ignore duplicated commit tokens in recovery (rhbz#1278473)
  - merge upstream commit 49236f3a16a0980cdb605040f027722b116a8250 (rhbz#1278473)
  - objdb: Fix incorrect using lock (rhbz#1278473)
  - merge upstream commit 42c09a78d9ed2dc393e76308f4fce000535674e6 (rhbz#1278473)
  - totemip: Be more selective when matching bindnetaddr to IP addresses (rhbz#1278490)
  - merge upstream commit 8e90c68fc0a7d5bce035fe7939eb03fa5cf333a2 (rhbz#1278490)
  - totem: Log a message if JOIN or LEAVE message is ignored (rhbz#1200387)
  - merge upstream commit d3c51cd6e4c293a7222172ccec4b80d70b79f5d4 (rhbz#1200387)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-4
changelog:
  - Resolves: rhbz#1286759

  - Revert "ipcc: Fix ERR_LIBRARY error if finalise called inside dispatch" (rhbz#1286759)
  - merge upstream commit 67242e15c298abff4f93a7bfcd72372f7ba60270 (rhbz#1286759)
  - ipcc: Fix ERR_LIBRARY on finalize call in dispatch (rhbz#1286759)
  - merge upstream commit 514dd9784559feb237af498020bf74cb16091a9e (rhbz#1286759)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-5
changelog:
  - Resolves: rhbz#1305119

  - totempg: Fix memory leak (rhbz#1305119)
  - merge upstream commit 349613b2dce8219a5d08dad816cb4da9c12faf83 (rhbz#1305119)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-105
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since RHEL-6.1 network devices can have arbitrary names (#682368)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-106
changelog:
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#680837)
  - plipconfig man page and usage output fixes (#694766)
  - Add -A,--all-fqdns and -I,--all-ip-addresses options to hostname (#705110)
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (#708538)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-108
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).
    (#725348)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-8
changelog:
  - Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
  - Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z


author: Jan Kaluza <jkaluza@redhat.com> - 5.4-14
changelog:
  - Fix principal creation in Constrained Delegation so the principal can
    be defined in KrbServiceName rather than always computing the value.
    (#1210184)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Miroslav Lichvar <mlichvar@redhat.com> 14:2.1a15-14
changelog:
  - update ethercodes.dat
  - mark ethercodes.dat as noreplace
  - include Debian arp2ethers and massagevendor man pages (#578201)
  - don't include massagevendor-old script anymore


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-25
changelog:
  - rgmanager: Fix bash syntax error in clunfslock
    rgmanager: clunfslock: copy state info if it exists
    Resolves: rhbz#1278943


author: Ryan McCabe <rmccabe@redhat.com> - 3.0.12.1-29
changelog:
  - rgmanager: Forget that we were transition master if quorum is dissolved
    rgmanager: Re-init the vf key callbacks after losing and recovering quorum
    Resolves: rhbz#1084053
  - rgmanager: Exit more gracefully if cman stops first when cpg locks are used
    Resolves: rhbz#1342825


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.2-1
changelog:
  - Add get_priority_{min,max} methods
  - Add constants for SCHED_{BATCH,FIFO,OTHER,RR}
  - Implement get_priority method
  - Add pchrt utility for testing the bindings, chrt clone
  - Add ptaskset utility for testing the bindings, taskset clone


author: Peter Jones <pjones@redhat.com> - 7.0.13-1
changelog:
  - Strip boot partition prefix from initrd path if present during --update.
  - add host only support for local kernel compiles (airlied)


author: Peter Jones <pjones@redhat.com> - 7.0.15-3
changelog:
  - Ensure that all stanzas are fixed with --update-kernel=ALL (patch from bcl)
    Resolves: rhbz#696960


author: Richard W.M. Jones <rjones@redhat.com> - 2.11-3
changelog:
  - Backport patch to improve the stability of the checksum and reduce
    the need to rebuild the appliance.
  - Add BR + Requires on insmod.static.


author: Richard Jones <rjones@redhat.com> - 2.11-6
changelog:
  - Split package into febootstrap (for building) and febootstrap-supermin-helper
    (for running).  Note that febootstrap depends on febootstrap-supermin-helper,
    but you can install febootstrap-supermin-helper on its own (RHBZ#669839).


author: Richard Jones <rjones@redhat.com> - 2.11-7
changelog:
  - Splitting the package broke RHEL 6.0 -> 6.1 upgrades.  Add an Obsoletes
    header to fix this.
    resolves: RHBZ#669839


author: Richard Jones <rjones@redhat.com> - 3.9-1
changelog:
  - Rebase to febootstrap 3.9.
    resolves: RHBZ#719877
  - This package contains febootstrap (version 2.11) and febootstrap3.


author: Richard Jones <rjones@redhat.com> - 3.21-4
changelog:
  - Fix directory permissions to include setgid and sticky bits.
  - Ignore ghost non-regular files.
  - Fix segfault when -u/-g options missing argument.
    related: rhbz#958184


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038987 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Nikola Forró <nforro@redhat.com> - 1.3-16
changelog:
  - Revert previous changes in patch for CVE-2016-5159
  - Fix double free in patch for CVE-2016-5139
  - Fix memory leaks and invalid read in cio_bytein
    Related: #1419775


author: Vritant Jain <vrjain@redhat.com> 1.17.2-1
changelog:
  - Added 7.3 releaser (vrjain@redhat.com)
  - Updated UEPConnection.getProduct to explicitly reference product UUID
    (crog@redhat.com)


author: Vritant Jain <vrjain@redhat.com> 1.17.4-1
changelog:
  - 1346417: Allow users to set socket timeout. (awood@redhat.com)
  - Fix Flake8 Errors (bcourt@redhat.com)
  - Add Fedora 24 to the branch list. (awood@redhat.com)
  - Added basic SLES compatibilty. Tested against SLES 11 SP3
    (darinlively@gmail.com)


author: Alex Wood <awood@redhat.com> 1.18.2-1
changelog:
  - 1176219: Raise ProxyException in Restlib (khowell@redhat.com)
  - 1367243: Handle RestlibException 404 in refresh (khowell@redhat.com)
  - 1367243: Fix 404 check in regen entitlement funcs (khowell@redhat.com)
  - Revert "1367243: Fix 404 check in regen entitlement funcs"
    (khowell@redhat.com)
  - 1367243: Fix 404 check in regen entitlement funcs (khowell@redhat.com)
  - Ensure both cert regen methods succeed despite BadStatusLine from server
    (csnyder@redhat.com)
  - Update fix to include BadStatusLine responses from the server
    (csnyder@redhat.com)
  - 1366301: Entitlement regeneration no longer propagates server errors
    (crog@redhat.com)
  - 1365280: Update default_log_level to INFO (csnyder@redhat.com)
  - 1334916: Add rhsm.conf logging section defaults (csnyder@redhat.com)
  - 1360909: Added functionality for regenerating entitlement certificates
    (crog@redhat.com)
  - 1315901: Exception handling for PEM cert read (wpoteat@redhat.com)


author: Vritant Jain <adarshvritant@gmail.com> 1.18.3-1
changelog:
  - 1320371: Fix case of retry-after header handling (khowell@redhat.com)
  - Fedora 22 is end-of-life. (awood@redhat.com)
  - 1311429: Honor no_proxy environment variable (khowell@redhat.com)


author: Vritant Jain <adarshvritant@gmail.com> 1.18.5-1
changelog:
  - 1396405: Use an int for port on connections (csnyder@redhat.com)
  - 1393010: Correlate request ID, method and handler in logs
    (csnyder@redhat.com)
  - 1394776: Fix port, insecure, and handler options on M2Crypto wrapper
    (csnyder@redhat.com)
  - 1394351: Add httplib constants to m2cryptohttp (khowell@redhat.com)
  - 1390688: Add missing socket import (khowell@redhat.com)
  - Reduce usage of m2crypto (#184) (kevin@kahowell.net)


author: Vritant Jain <adarshvritant@gmail.com> 1.18.6-1
changelog:
  - 1400719: Proxy host not available for release command (wpoteat@redhat.com)
  - 1397201: Expose classes in m2crypto wrapper (khowell@redhat.com)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-44.P1
changelog:
  - option 97 - pxe-client-id (#1058674)
  - dhclient-script: PREINIT6: make sure link-local address is available (#1130804)
  - dhcpd generates spurious responses when seeing requests
    from vlans on plain interface (#1150587)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-50.P1
changelog:
  - Lease table overflow crash. (#1133917)
  - Add ignore-client-uids option. (#1196768)
  - dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
  - VLAN ID is only bottom 12-bits of TCI. (#1259552)
  - dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
  - dhclient-script: make_resolv_conf(): Keep old nameservers
    if server sends domain-name/search, but no nameservers. (#1269595)


author: Tomas Mraz - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-5
changelog:
  - move library to /lib so the binaries needed when /usr might
    not be mounted can link to it (#669077)


author: Jay Fenlason <fenlason@redhat.com> 3.2-5.el6
changelog:
  - Rebuild against newer infinipath-psm, openmpi, mvapich, mvapich2
    This removes the openmpi-psm subpackage, as openmpi now switches between
     psm and non- at runtime.
  - Correct version numbers for IMB and OSU benchmarkes in the description.
  - Update spec file to fix pkgwrangler warnings.
    Resolves: rhbz557803
    Related: rhbz739138


author: Jay Fenlason <fenlason@redhat.com> 3.2-10
changelog:
  - Add BuildRequires for libibmad-devel
  - Build against mpich, now that we have a mpi-3 version of it.
  - rebuild against new mvapich2
    R e s o l v e s: rhbz1011910, rhbz1011915


author: Jay Fenlason <fenlason@redhat.com> 3.2.4-1
changelog:
  - Backport from RHEL-7.0
  - Edit old changelog entries so commit can work.
  - Update to latest imb and osu versions, no longer using openfabrics.org
    tarball.
    Resolves: rhbz1093468


author: Richard Jones <rjones@redhat.com> - 2.7-1
changelog:
  - Backport version 2.7 from Rawhide (fixes RHBZ#592051).
  - febootstrap-supermin-helper shell script rewritten in C for speed.
  - This package contains C code so it is no longer 'noarch'.
  - MAKEDEV isn't required.


author: Richard W.M. Jones <rjones@redhat.com> - 2.10-2
changelog:
  - Rebase to version 2.10 (RHBZ#628849).
  - Include fixes for building on ppc and ppc64 ...
  - ... but set ExclusiveArch x86_64.


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Update to latest upstream version
  - Drop 6 patches rolled into latest upstream version
  - Drop ifnarch ia64 around valgrind usage as we don't build for ia64
  - Fix broken libmlx4-modprobe.conf file
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.0.2-5
changelog:
  - Fix modprobe file so it can't render a machine unbootable if run against
    an older kernel.
  - Resolves: bz805129


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.
  - Resolves: rhbz#726476


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-8
changelog:
  - Print the error message only after cleaning up curses.
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.
  - Resolves: rhbz#633698


author: Milan Crha <mcrha@redhat.com> - 3.32.2-1.el6
changelog:
  - Rebase to 3.32.2
  - Remove patch for RH bug #588457 (part of rebase)
  - Remove patch for RH bug #590877 (part of rebase)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-2.el6
changelog:
  - Add patch for some issues found by Coverity scan
  - Add patch for RH bug #577797 (Cursor misplaced after paste)
  - Add patch for RH bug #615969 (Whitespaces drop on paste)
  - Add patch for RH bug #627199 (Underline/strikeout misplaced in printout)
  - Add patch for RH bug #626690 (Paragraph style not drawn after font style change)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.9-0.6.rc1
changelog:
  - Don't split bulk transfers unnecessary
  - Resolves: rhbz#830751
  - Don't let disconnect_kernel_driver detach the usbfs driver
  - Resolves: rhbz#820205


author: Jeff Layton <jlayton@redhat.com> 4.7-2
changelog:
  - rebase to version 4.7 (bz 658981)
  - fix hardcoded paths in manpages (bz 658981)
  - set GSSAPI checksum in SPNEGO blobs (bz 645127)


author: Jeff Layton <jlayton@redhat.com> 4.7-4
changelog:
  - make cifs.upcall take the '-l' flag (bz 667382)
  - fix segfault in cifs.upcall when passing an invalid option (bz 667382)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-3
changelog:
  - mount.cifs: reacquire CAP_DAC_READ_SEARCH before calling mount (bz 676439)
  - manpage: document missing mount.cifs options (bz 719363)


author: Baoquan He <bhe@redhat.com> - 2.0.0-298
changelog:
  - b0e4c65 Use file offset in initialize_mmap(), resolves bug 1314158
  - 85f20f9 mkdumprd: redirect stderr of bmc-watchdog to /dev/null resolves bug 1315270


author: Baoquan He <bhe@redhat.com> - 2.0.0-299
changelog:
  - mkdumprd: Use a flexible way to create rtc device, resolves bug 1315148
  - hyper-v: do not exclude hv_utils module, resolves bug 1228774


author: Baoquan He <bhe@redhat.com> - 2.0.0-301
changelog:
  - mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1343282
  - mkdumprd: Kill useless code in moduledep(), resolves bug 1343282
  - mkdumprd: skip logical interfaces for bridge, resolves bug 1356615


author: Baoquan He <bhe@redhat.com> - 2.0.0-303
changelog:
  - mkdumprd: Remove load_selinux_policy script, resolves bug 1323086
  - mkdumprd: pass the value of DEV_ID to kdump, resolves bug 1322802


author: Baoquan He <bhe@redhat.com> - 2.0.0-306
changelog:
  - mkdumprd: fix env for mdadm, resolves bug 1404263
  - mkdumprd: create node for partition within RAID device, resolves bug 1404263
  - mkdumprd: refactor block_mknod(), resolves bug 1404263
  - uefi: Pass efi_smbios_addr to 2nd kernel, resolves bug 1404552


author: Joe Orton <jorton@redhat.com> - 1.3.9-4
changelog:
  - add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
  - add fix for CVE-2011-0419 (#703520)


author: Tomas Mraz <tmraz@redhat.com> 0.75-1
changelog:
  - fix disabling SELinux and audit in spec (#433284)
  - remove obsolete no.po (#332121)
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> 0.77-6
changelog:
  - add -e option to expire the password for user
  - compile the binary with PIE and full RELRO options


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-23
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-31
changelog:
  - Resolves: rhbz#1088656 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1070356 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1041576 (pluto cannot write to directories not owned by root)
  - Resolves: rhbz#1025687 service ipsec stop shows errors about unloading used modules
  - Resolves: rhbz#1092913 The default nss database created by ipsec can not be used
  - Resolves: rhbz#1105179 ipsec_auto --ready doesn't work properly
  - Resolves: rhbz#1002708 rightid=%fromcert does not use the ID from the offered peer certificate
  - Resolves: rhbz#908478  Openswan is sending DPD and/or NAT-T keep alive messages when the IPsec SA is active
  - Resolves: rhbz#970349  ikev2 pending SA and rekey issues
  - Resolves: rhbz#970279  ikev2=insist allows an ikev1 proposal when acting as responder
  - Resolves: rhbz#988106  strict checking of phase2alg= parameters allows mismatched policy
  - Resolves: rhbz#1019746 ipsec ikeping does not recognize --exchangenum parameter
  - Resolves: rhbz#1018327 ipsec.conf man page lacks example for AES-GCM configuration
  - Resolves: rhbz#730975  Openswan doesn't work with ike=modp1536 option
  - Resolves: rhbz#1021961 pluto abort when using SHA2_{384,512} IKE encryption algorithm
  - Resolves: rhbz#739949  Openswan net-to-net not work with unencrypted connection on specific port
  - Resolves: rhbz#993124  ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#834397  ikev2 crashes when firing up a few conns at once
  - Resolves: rhbz#1099871  Missing man-page ipsec_whack


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-32
changelog:
  - Resolves: rhbz#1092913 create nss db before startup if not there
  - Resolves: rhbz#1098473 ipsec newhostkey returns 0 even if it fails (and enforce min 2192 RSA key size)
  - Resolves: rhbz#1114683 configuring a non-standard ESP algorithm (like CAST) cause a restart of pluto
  - Resolves: rhbz#1126066 dcookie code enabled with force_busy=yes uses bad pointer causing restart


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-35
changelog:
  - Resolves: rhbz#1114683 configuring a non-standard AH / ESP algorithm [updated]
  - Resolves: rhbz#993124 ikev2 delete - work around to unbreak -fstack-protector [updated]


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-25
changelog:
  - Moved /sbin/ypbind to /usr/sbin/ypbind, as the package
    depends on several utilities from /usr (selinuxenabled,
    rpcinfo, ypwhich), and /usr/lib/libdbus-glib-1.so
    Resolves: #593271
  - Fixed previous ChangeLog entry header


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-26
changelog:
  - Fix "dereferencing type-punned pointer will break strict-aliasing rules"
    GCC warning
    Resolves #596221


author: Honza Horak <hhorak@redhat.com> - 3:1.20.4-30
changelog:
  - Modified the chkconfig priorities from 27/73 to 24/76, to move ypbind
    before netfs. This is useful for hosts that mount NFS file systems
    that reside on a server which is resolvable through NIS.
    Resolves: #647495


author: Honza Horak <hhorak@redhat.com> - 3:1.20.4-31
changelog:
  - ypbind init script should check for ypbind in /etc/rpc
    Resolves: #888778
  - ypbind does not bind to ypserv on localhost (same machine) if NetworkManager
    thinks that the network is off.
    Resolves: #829487
  - ypbind does not take NISTIMEOUT into account during service start if
    rpcinfo doesn't work
    Resolves: #846080
  - add SIGPIPE into signal set
    Resolves: #842228
  - Fix differencies between man page and program --help
    Resolves: #627492
  - Fix nis.sh run by dhclient to not create files with wrong context
    Resolves: #681134
  - Add rebind option to ypbind
    Resolves: #918276


author: Matej Muzila <mmuzila@redhat.com> - 3:1.20.4-32
changelog:
  - Do not resstart ypbind on dhcp renew if nis domain or nis servers
    haven't changed
    Resolves: #1238771


author: Honza Horak <hhorak@redhat.com> - 2.9-11
changelog:
  - Added YP_PASSWD_HASH environment variable to set default 
    algorithm for hashing a new password
    Resolves: #699666


author: Honza Horak <hhorak@redhat.com> - 2.9-12
changelog:
  - Fixed -hash patch to omit an old password check when shadow 
    passwords or passwd.adjunct enabled and use correct password length
    Resolves: #699666


author: Tim Waugh <twaugh@redhat.com> 1.1.0-16
changelog:
  - Unknown pseudo-encodings (those with negative values) would cause
    vncviewer to crash (bug #1121041).
  - Set source as well as target when building java as some JDKs require
    this (bug #1078427).


author: Jan Grulich <jgrulich@redhat.com> 1.1.0-17
changelog:
  - Rebuild against xorg-x11-server-1.17
    Resolves: bz#1248637
  - Added Requires: libXfont
    Resolves: bz#1011315
  - Remove lock file after stopping vncserver service
    Resolves: bz#1236559


author: Jan Grulich <jgrulich@redhat.com> 1.1.0-20
changelog:
  - Rebuild against fixed xorg-x11-server to avoid automatical disconnects
    when initiazed from xinetd
    Resolves: bz#1390458


author: Tim Waugh <twaugh@redhat.com> - 8.70-7
changelog:
  - Fixed jbig2dec-nullderef patch (bug #621118).
  - Applied upstream patch to fix iname.c segfault (bug #629562).


author: Tim Waugh <twaugh@redhat.com> - 8.70-11:.3
changelog:
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).
  - Applied patch to avoid reading initialization files from CWD
    (CVE-2010-2055, bug #599564).


author: Dan Horák <dhorak@redhat.com> - 2.14.1-4
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#891626),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #891626


author: Dan Horák <dhorak@redhat.com> - 2.14.1-5
changelog:
  - add mssing sensor RDRs for the fan resource (#924852)
  - fix openhpi connection failures with redundant OAs (#948386)
  - fix segfaults when retrieving thermal info (#953515)
  - add missing thermal sensors (#953525)
  - Resolves: #924852, #948386, #953515, #953525


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-36
changelog:
  - Recognize up to 10 certs and keys on PIV and CAC cards.
  - Allow cards to have no cert in slot '0'.
  - Allow cards to have ECC and RSA certs and keys


author: Bob Relyea <rrelyea@redhat.com> - 1.1.0-38
changelog:
  - rename the cache changes done in -36 so that they have issues with old
    cache values
  - fix cac 1 alt tokens that store certs beyond the top three slots
  - fix hand when using hp keyboard


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Bump and rebuild against latest libibverbs and latest valgrind-devel
  - Update to latest upstream release for various fixes and improvements
  - Resolves: bz1142162, bz1116096


author: Martin Milata <mmilata@redhat.com> - 0.17-2
changelog:
  - Backport commit ec1bf395 that fixes several memory leaks
  - Backport abf036d5 that fixes a NULL dereference
  - Backport 6e0f49a3 that adds version to the manual page
  - Resolves: #803774, #903140, #905854


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4
changelog:
  - Applied patch to fix CVE-2013-0200, temporary file vulnerability
    (bug #902163).
  - Fixed hpijs-marker-supply patch.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-5
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Tim Waugh <twugh@redhat.com> 3.14.6-3
changelog:
  - Fixes from Fedora:
    - Fixed incorrect name in function call in makeURI when a parallel
      port device is used (bug #1159161).
    - Fixed uses of strncpy throughout.


author: Daniel Veillard <veillard@redhat.com> - 0.5.4-1
changelog:
  - update to new version to fix problems in libvirt-cim rebase
  - Resolves: rhbz#633332
  - fix a packaging naming problem on previous build
  - Resolves: rhbz#604551


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.1
changelog:
  - Add support for IBM PowerVM Lx86 Linux/x86 emulator (RHBZ#668857).
  - Move configure into build (not prep).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.2
changelog:
  - Add support for Microsoft HyperV (RHBZ#670272).
  - Add support for Hitachi Virtage (RHBZ#670530).
  - Add support for EC2 (Xen) instances (RHBZ#671126).  This includes
    backporting the test framework and enabling tests.
  - Add support for IBM Systemz z/VM, LPAR (RHBZ#671132).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.4
changelog:
  - Various improvements to the wording in the manual page.
    resolves: rhbz#672285
  - Confirm support for Microsoft HyperV and add a regression test.
    resolves: rhbz#670272


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.1
changelog:
  - Rebase to virt-what 1.11.
    resolves: rhbz#672211
  - Add patch "IA64 Xen HVM should print 'xen-hvm' not 'xen-domU'" from upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.2
changelog:
  - Add patch to fix dmidecode detection of Hitachi Virtage
    (thanks Satoru Moriya, Masaki Kimura)
    resolves: rhbz#829427


author: Sumit Bose <sbose@redhat.com> - 1.0.112-2
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 17,
     git commit c07cd2cb042d62ee4adcfa1b75dd423424ca681b


author: Sumit Bose <sbose@redhat.com> - 1.0.112-3
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 18,
     git commit de49edcc0dfea7c4396cdbd9e4897358b5474100


author: Sumit Bose <sbose@redhat.com> - 1.0.114.3-2
changelog:
  - Resolves: rhbz#728545 - ctdbd leaks a file descriptor
   - Resolves: rhbz#727913 - Coverity scan revealed defects


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-1
changelog:
  - Updated to ctdb version 1.0.114.5
   - Resolves: rhbz#821715 - ctdbd on a node crashes when another node in the
     cluster is brought down
   - Resolves: rhbz#758367 - ctdb w/ GFS2: A stable node gets banned
   - Resolves: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-2
changelog:
  - Increased release number to be able to update RHS version of ctdb
   - Related: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-3
changelog:
  - Improve output of ctdb status by adding the number of deleted nodes
   - Fix a memory and an unchecked return value found by coverity
   - Resolves: rhbz#866670 - ctdb status reports more nodes then available
   - Resolves: rhbz#874058 - One resource leak && unchecked return value


author: Sumit Bose <sbose@redhat.com> - 2.5.1-1
changelog:
  - Update to ctdb version 2.5.1
   - Resolves: rhbz#1061630
   - Resolves: rhbz#1085447
   - Resolves: rhbz#987099
   - Resolves: rhbz#1085413


author: Stepan Kasal <skasal@redhat.com> - 0.47-5
changelog:
  - require perl(:MODULE_COMPAT_5.10.x) because the package requires libperl.so
  - the same for inkscape-view


author: Zane Bitter <zbitter@redhat.com> 0.6.0-5
changelog:
  - Fix buffer overflow in broker wrapper
    Related: rhbz#795430
  - Move shadow-utils dependency to correct subpackage


author: Jeff Peeler <jpeeler@redhat.com> 0.6.0-6
changelog:
  - Fix man pages not being installed properly.
  - Fix permission on lockfile preventing broker daemon startup.
  - Resolves: rhbz#803718, rhbz#803590


author: Jay Fenlason <fenlason@redhat.com> - 1.5-2
changelog:
  - Build the 1.1 version as well, so we have the old library for backward
    compatability.
    Resolves: rhbz1070347


author: Michal Schmidt <mschmidt@redhat.com> - 1.5-3
changelog:
  - Make libhwloc.so point to the current library version, not the compat one.
    Resolves: rhbz1135040


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-1
changelog:
  - Bump to newer release
  - Removed mkdosfs-ygg from Obsoletes/Provides tag as it looks really deprecated
  - Drop bounds patch - fixed upstream


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-4
changelog:
  - Fixed dosfsck and dosfslabel on s390x (s390x-unalign patch)
    Resolves: rhbz#624596
  - Fixed buffer overflow in alloc_rootdir_entry (fix-alloc-rootdir-entry patch)
    Resolves: rhbz#677789
  - Fixed dosfslabel on FAT32 (dosfslabel-fat32 patch)
    Resolves: rhbz#688128
  - Fixed device partitions detection (dev-detect-fix patch)
    Resolves: rhbz#709266


author: Rob Crittenden <rcritten@redhat.com> - 1.1-7
changelog:
  - Fix calculation of username string length in authenticate_gss_client_wrap
    (#1057333)
  - Fix version in setup.py so egg information is correct (#973379)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-40
changelog:
  - Map ASCII to ISO-8859-1 in the transcoding code (STR #3832, bug #681836).
  - Check for empty values for some configuration directives (STR #3861, bug #706673).
  - The network backends no longer try to collect SNMP supply and status
    information for raw queues (STR #3809, bug #709896).
  - Handle EAI_NONAME when resolving hostnames (bug #712430).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-43
changelog:
  - The scheduler might leave old job data files in the spool directory
    (STR #3795, STR #3880, bug #735505).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-44.1
changelog:
  - Don't create zero-length request files (STR #4015, bug #803419).
  - The lp and lpr commands did not cancel jobs queued from stdin on an error
    (STR #4015, bug #803419).


author: Petr Machata <pmachata@redhat.com> - 2.0-2.20070927
changelog:
  - Review fixes
    - GCC 4.3 patchset
    - Add BR util-linux net-tools
    - Add full URL to Source0
    - Build in debug mode to work around problems with GCC 4.3


author: Petr Machata <pmachata@redhat.com> - 2.2-2.20090809
changelog:
  - Replace mfence instruction with xchg to make it run on ia32-class
    machines without SSE2.
  - Resolves: #600654


author: Andras Horvath <Andras.Horvath@cern.ch> 8.1.16-cern.18
changelog:
  - conserver-exec: better error handling, no 'deactivate', ping first
  - !autoreinit, plus cron job to restart 'down' consoles (this makes for a
    closer connection between status and actuality for IPMI consoles)


author: Andras HORVATH <andras.horvath@cern.ch> 8.1.17-cern.2
changelog:
  - updated to upstream release (no more DAG); removed unneeded patches
  - version 8.1.17 (Sep 29, 2009):           
  - fix for interface detection when HAVE_SA_LEN is defined - first
    detected on NetBSD 5.0 and patched by Chris Ross
    <cross+conserver@distal.com>         
  - first person to connect to a console wanting read/write now gets it
    once the active user drops read/write - suggested by Thomas Gardner
    <tmg@pobox.com>                       
  - fix typo when setting nonblocking socket for client connections,
    fixing stall issues - patch by Eric Biederman
    <ebiederm@aristanetworks.com>
  - GSS-API patch (--with-gssapi) to help with Kerberos tokens - patch by
    Nate Straz <nstraz@redhat.com>
  - authenticate username without @REALM when using GSS-API
    (--with-striprealm) - based on patch by Andras Horvath
    <Andras.Horvath@cern.ch>
  - various contrib/redhat-rpm fixes - patch by Fabien Wernli
    <wernli@in2p3.fr>
  - fix handling of read(stdin) returning -1 in console client - patch by
    Ed Swierk <eswierk@arastra.com>


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-6
changelog:
  - don't require logrotate (#922769)
  - move pppd database to /var/run/ppp to prevent SELinux AVCs (#968398)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-7
changelog:
  - ignore unrecognised radiusclient configuration directives (#906912)
  - add missing l2tp support (#815128)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-8
changelog:
  - prevent running into issues caused by undefined behavior (pointers of incompatible types aliasing the same object)


author: Peter Hatina <phatina@redhat.com> - 1.8.10-16
changelog:
  - security patches
  - Resolves: CVE-2014-8710
              CVE-2014-8711
              CVE-2014-8712
              CVE-2014-8713
              CVE-2014-8714
              CVE-2015-0562
              CVE-2015-0564


author: Martin Sehnoutka <msehnout@redhat.com> - 1.8.10-21
changelog:
  - Resolves: #1222902 - Encrypt-then-MAC TLS extension unrecognised
  - Patch also include master secret extension decoding in TLS


author: Martin Sehnoutka <msehnout@redhat.com> - 1.8.10-24
changelog:
  - Related: #1245887
  - segfault with CVE-2013-4075 capture
  - valgrind error with CVE-2015-3812 capture


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Adam Jackson <ajax@redhat.com> 1.17.4-7
changelog:
  - Add bug-compatibility for exposure event generation for backing store's
    Always mode, and re-enable the feature


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100216-1
changelog:
  - Fixed when typing English immediately after incomplete Chinese character.
  - Add zh_TW summary.
  - Revised description and write its zh_TW translation.


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100317-1
changelog:
  - Fix google 796: English input for dvorak
  - Fix google 797: Zhuyin input for dvorak
  - Fix google 807: ibus-chewing shows the over-the-spot panel
    even when not necessary


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100605-1
changelog:
  - Fix Issue 942: Fix unsunk references in ibus-chewing
    Applied the patch provided by zork@chromium.org.
  - Rename CVS_DIST_TAGS to FEDORA_DIST_TAGS, and move its
    definition to cmake_modules/
  - Gob2 generated file is now removed, because
    Bug 519108 is fixed from Fedora 11.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100608-1
changelog:
  - ibus-chewing can now use mouse to click on mouse. Thus
    Fix Issue 951: Chewing does not support selection of candidates via mouseclick
    Thanks zork@chromium.org for the patch.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.5.20100706-1
changelog:
  - Fixed google issue 965:
    Candidate missing if both "Plain Zhuyin" and "Space As selection" are enabled.
  - Revised Basic.macro
  - Resolved: #608991


author: Ales Ledvinka <aledvink@redhat.com> - 1.8.11-23
changelog:
  - (#1194420) Fix DDR4 SDR crash.
  - (#1170266) Wrong version reported.
  - (#1162175) Extra dependency.
  - (#1126333) Very slow response from SDR owner type SW ID
  - (#903019)  SDR lists x4600m2 fan units as unspecified


author: Jan Synáček <jsynacek@redhat.com> - 0.17-52
changelog:
  - Add listening timeout to avoid hanging up when ftp is executed in active mode
    and ftp-data port is blocked (#852636)
  - Plug memleaks in append, put and send commands (#786004)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-8
changelog:
  - e2fsck: don't clone dup xattr blocks in fs without xattr feat (#676465)
  - Allow specification of default mntopts in superblock (#679892)
  - Handle devices with large physical blocksizes (#679931)
  - Fix some typos in man pages (#683906)


author: Lukas Czerner <lczerner@redhat.com> 1.41.12-9
changelog:
  - e2image: Add support for exporting image in qcow2 format (#713468)
  - mke2fs: Skip inode table initialization on some discardable devices (#713475)
  - mke2fs: Add -E discard/nodiscard options (#713475)
  - mke2fs: Allow to specify discard option in mke2fs.conf (#713475)
  - e2fsck: Allow to discard free data and inode blocks in e2fsck (#713475)
  - mke2fs: Show discard progress (#713475)
  - Don't attempt to discard flash device if -n option is given (#713475)


author: Stepan Kasal <skasal@redhat.com> - 4.0-1
changelog:
  - new upstream version
  - drop upstreamed patches; ./autogen not needed anymore
  - pack the xbrlapi server; move its man page to brlapi package
  - add man-page for brltty.conf (#526168)


author: Stepan Kasal <skasal@redhat.com> - 4.0-2
changelog:
  - escape rpm macros in the rpm change log
  - add requires to bind subpackages from one build together


author: Stepan Kasal <skasal@redhat.com> - 4.1-1
changelog:
  - new upstream version
  - use --disable-stripping instead of make variable override
  - install the default brltty-pm.conf to docdir only (#526168)
  - remove the duplicate copies of rhmkboot and rhmkroot from docdir
  - patch configure so that the dirs in summary are not garbled:
    brltty-autoconf-quote.patch
  - move data-directory to ${datadir}/brltty


author: Stepan Kasal <skasal@redhat.com> - 4.1-2
changelog:
  - move data-directory back to default: /etc/brltty
  - move brltty to /bin and /lib, so that it can be used to repair the system
    without /usr mounted (#276181)
  - move vstp and libbrlttybba.so to brlapi
  - brltty no longer requires brlapi
  - brlapi now requires brltty from the same build


author: Stepan Kasal <skasal@redhat.com> - 4.1-3
changelog:
  - build the TTY driver (it was disabled since it first appered in 3.7.2-1)
  - build with speech-dispatcher, packed into a separate sub-package


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.1-7
changelog:
  - Fixed build in case ocaml is preinstalled in build root
    Resolves: rhbz#684526
  - Fixed /usr/lib/libbrlapi.so symbolic link
    Resolves: rhbz#809326


author: Doug Ledford <dledford@redhat.com> - 1.1.3-2
changelog:
  - Add Requires of -devel package to -devel-static package
  - Add Requires of libibverbs-driver (this pulls in the various driver packages
    automatically when the libibverbs package is installed)


author: Doug Ledford <dledford@redhat.com> - 1.1.5-1
changelog:
  - Update to latest upstream version (1.1.4 to 1.1.5)
  - Drop libibverbs cow.patch as it is in 1.1.5 already
  - Enable valgrind support so memory corruption is easier to debug
  - Make sure RPATH entries are removed from programs
  - Related: bz725016


author: Petr Machata <pmachata@redhat.com> - 1:3.81-20
changelog:
  - Add a patch for use-after-free when eval in variable assignments
    reassigns the same variable
  - Resolves: #699911


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-22
changelog:
  - When the exit status is 2, clean_jobserver() would incorrectly write an
    extra jobserver token to the pipe leading to an internal error message
    complaining that an extra jobserver token is available.
    Resolves: #861189


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-23
changelog:
  - Get rid of any avoidable limit on stack size for processes spawned
    via $(shell). 
  - In eval_buffer() don't assume reading_file != NULL. This is not the
    case during the secondexpansion phase.
    Resolves: #835483


author: David Lutterkort <lutter@redhat.com> - 0.9.0-2
changelog:
  - Fix BZ 781690 "Grub password --encrypted argument not parsed correctly"
  - Fix BZ 628507 "It's better to support fadot --help or fadot -h"
  - Fix BZ 759311 "augtool --autosave does not save changes"


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-4
changelog:
  - Rebase to Augeas 1.0.0
    resolves: rhbz#817753
  - Add dependency on libxml2-devel.
  - Remove all patches (all upstream and included in 1.0.0).
  - Print tests/test-suite.log when the tests fail.
  - Add fix for regression added in 1.0.0 (RHBZ#920609).
  - Fix tests/test-run.


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-6
changelog:
  - Fix CVE-2013-6412, incorrect permissions under strict umask (RHBZ#1036080)
  - Grub: support 'setkey' and 'lock' directives (RHBZ#1001635)
  - ActiveMQ: add ActiveMQ lens (RHBZ#1016899)
  - Splunk: add Splunk lens (RHBZ#1016900)
  - Sudoers: user aliases fail to parse (RHBZ#1016904)
  - Tests: testPermsError during compilation (RHBZ#1024275)
  - Shellvars: multi-variable export lines (RHBZ#1033795)
  - Shellvars: case statements with same-line ;; tokens (RHBZ#1033799)
  - Sysconfig: permit empty comments (RHBZ#1043636)
  - Grub: support 'foreground' directive (RHBZ#1059383)
  - Yum: permit space after equals sign (RHBZ#1062091)
  - IniFile: add generic INI lenses (RHBZ#1073072)
  - Automounter: permit hostnames with hyphens (RHBZ#1075112)
  - Rsyslog: parse property filters and templates (RHBZ#1083016)
  - Ldso: parse hwcap lines (RHBZ#1083021)
  - Sudoers: permit underscores in group names (RHBZ#1093711)
  - augtool: remove dump-xml filename arg (RHBZ#1100182)
  - augtool: add commands to autocomplete (RHBZ#1100184)
  - docs: update command and arg lists (RHBZ#1100186)
  - Nrpe: parse unknown config options (RHBZ#1100237)


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-8
changelog:
  - Cgconfig: parse other valid controllers (RHBZ#1112388)
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144652)
  - Services: permit colons in service name (RHBZ#1121263)
  - Shadow: add lens (RHBZ#1160261)
  - Syslog: parse TCP loghosts (RHBZ#1129508)


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-10
changelog:
  - Escape paths returned from aug_match (RHBZ#1186318)
  - Krb5: parse braces in values (RHBZ#1203597)
  - Properties: handle empty line in multi-line value (RHBZ#1209885)


author: John Dennis <jdennis@redhat.com> - 1.0.90-2
changelog:
  - Resolves: bug 642414
    Update to latest upstream release (includes the following)
    - return the contents of the AP_REP message from rd_rep()
    - improved memory handling
    - removed use of KRB_PRIVATE
    - better docstrings


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.17-36
changelog:
  - fix regression with 'jobs' builtin output not going to stdout (#1338986)
  - fix several regressions in tcsh-6.17.00-quote-backslashes-properly.patch (#1334751)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.2
changelog:
  - backported GSSAPI delegation from upstream version 1.27.04 with strong attention
    to libxmlrpc++ client ABI backward compatibility (#719945)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.3
changelog:
  - Fix memory leak in libxmlrpc_client.so (#741641)
  - Remove autoconf variables from pkgconfig files that are not used (#653702)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1209.1840
changelog:
  - fixed various RpmDiff warning messages about missing sub-packages requires
  - added Requires libcurl to the client/apps packages (.so libraries needed)
  - specified BuildRequires curl-devel version for CURLOPT_GSSAPI_DELEGATION option
  - fix & increase release number (svnrev should be after N-V-R)


author: Jindrich Novy <jnovy@redhat.com> 4.999.9-0.3.20091007.beta
changelog:
  - move xz man pages to main package, leave lzma ones where they belong
  - remove URL from Source0, it is a git snapshot


author: Pavel Raiskup <praiskup@redhat.com> - 4.999.9-0.4.beta.20091007git
changelog:
  - fix 'xzgrep -h' to behave as expected (#850898)
  - fix 'xzgrep -l' to behave as expected (#863024)
  - fix 'xzfgrep -F' to behave as expected (#988703)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.3.1-10
changelog:
  - Backported assembler routines from recent gmp-6:
    gmp-s390x-optimization.patch, gmp-s390-31bit-optimization.patch
  - Resolves: #1149237


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.1-11
changelog:
  - Explicitly added '-g' option into CFLAGS to correctly build .debug_info for i386
    Resolves: #729039


author: Adam Jackson <ajax@redhat.com> 2.11.0-2
changelog:
  - intel-2.11.0-vga-clock-max.patch: Clamp VGA pixel clock to 250MHz,
    anything higher's going to look awful anyway. (#559426)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3.0-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix indentation of Version and Release.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.43-6
changelog:
  - Don't build the MinGW parts with debugging information, NSIS corrupts the
    debugging information in the stubs when building installers from them
  - Drop debian-debug-opt patch, all its changes are either taken care of by our
    rpm-opt patch, unwanted (see above) or unneeded


author: Doug Ledford <dledford@redhat.com> - 1.5.4-1.el6
changelog:
  - Update to latest upstream version, which cleans up some licensing issues
    found in the previous versions during review
  - Related: bz555835


author: David Howells <dhowells@redhat.com> 0.9-1
changelog:
  - The cachefiles module no longer accepts directory fds on cull and inuse
    commands, but rather uses current working directory.


author: David Howells <dhowells@redhat.com>
changelog:
  - Must include sys/stat.h to use stat() and co. [RH BZ 565135].
  - Remove tail comments from functions.


author: David Howells <dhowells@redhat.com>
changelog:
  - The SELinux policies for cachefilesd now live in the selinux-policy RPM, so
    the cachefilesd-selinux RPM is now redundant.
  - Move the default cache dir to /var/cache/fscache.
  - Make the initscript do a restorecon when starting the cache to make sure the
    labels are correct.
  - Fix a wildchar that should be a literal dot in the SELinux policy.


author: David Howells <dhowells@redhat.com>
changelog:
  - Fix the initscript to contain an LSB parseable description.
  - Fix the initscript to return the correct error codes [RH BZ 605631].


author: David Howells <dhowells@redhat.com> 0.10.2-2
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Suspend culling when cache space is short and cache objects are pinned (#1109640).
  - Set the security label on the device file only after loading the module (#1066139).


author: David Howells <dhowells@redhat.com> 0.10.2-3
changelog:
  - postuninstall: Only restorecon /var/cache/fscache if it exists (#1316776)
  - Fix bogus dates in changelog


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: Matthew Barnes <mbarnes@redhat.com> - 1.30.0-1
changelog:
  - Rebase to 1.30.0 based on the Fedora 13 package.
  - Build with introspection disabled since glib-introspection is not
    avalable in rhel6.
  Resolves: #883027


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721306


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.13.pre3
changelog:
  - use appropriate BuildRequires for nss_compat_ossl (#495532)
  - support for trusted CA certificates loading from file in PEM format


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.15.pre3
changelog:
  - try to load default NSS root certificates if the configuration option
    connection.ssl.trusted_ca_file is set to an empty string (#497788)


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.20.pre5
changelog:
  - remove patch for configure script to find OpenSSL (we use NSS instead)
  - rediffed all patches with non-zero offset
  - add buildrequires for zlib-devel


author: Jindrich Novy <jnovy@redhat.com> 2007-57
changelog:
  - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
    CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773184)


author: Than Ngo <than@redhat.com> - 2007-58
changelog:
  - Resolves: bz#699575, running latex when the .aux file is non-writable can erase the input .tex file


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-19
changelog:
  - cman: fix multicast address in cman.5 man page
    Resolves: rhbz#735906
  - cman: default to 2 different mcast addresses in RRP mode and set
    rrp_problem_count_threshold
    cman now requires corosync > 1.4.1-3 for RRP operations
    Resolves: rhbz#735912
  - cman: improve cman/qdisk interactions
    * cman: do better logging/error reports/checking of the quorum API usage
    * qdiskd: allow qdiskd to update device name in cman
    * qdiskd: perform better error checking at startup
    Resolves: rhbz#735917


author: Steve Grubb <sgrubb@redhat.com> 0.3.13-1
changelog:
  - New upstream bug fix release
  resolves: #633584 - Pick up latest TrouSerS package
  resolves: #1074634 - Buffer overflow detected in TrouSerS daemon


author: Samantha N. Bueno <sbueno@redhat.com> 3.3.15-1
changelog:
  - rebase to 3.3.15 version
  - drop obsolete ncurses, pfkeys, resize, and script patches
  - modify a few other patches to apply cleanly to new version
  - Resolves: rhbz#1171849
  - add patch to fix some typos in man pages
  - change location of manpages to section 5
  - Resolves: rhbz#893912


author: Dan Williams <dcbw@redhat.com> - 0.8.1-6
changelog:
  - core: enable proactive key caching when using PEAP-GTC (rh #636877)
  - applet: fix inital sensitivity of context menu checkboxes (rh #633501)
  - applet: fix Punjabi translations (rh #589230)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-7
changelog:
  - core: add DHCP lease-change events to the dispatcher (rh #662730)
  - core: validate Enable/Disable WiFi and WWAN requests (rh #626337)
  - core: don't update /etc/hosts with current hostname (rh #668830)
  - wifi: ensure Enabled state is preserved regardless of rfkill (rh #584271)
  - ifcfg-rh: respect GATEWAYDEV for ibft/iSCSI configs (rh #665027)
  - ifcfg-rh: handle IPv6 gateway correctly for static addressing configs (rh #666078)


author: Jiří Klimeš <jklimes@redhat.com> - 0.8.1-8
changelog:
  - applet: display IPv6 info under applet's 'Connection Information' (rh #634152)
  - applet,nm: fix translations (rh #589230)


author: Jiří Klimeš <jklimes@redhat.com> - 0.8.1-10
changelog:
  - wifi: use nl80211 supplicant driver and background scanning (rh #713283)
  - applet: pressing Enter in secrets dialogs comfirms them (rh #696585)
  - applet: fix freed memory access on reading gconf entries (rh #696916)
  - core: send hostname to DHCP server by default (rh #590096)
  - core: handle s390 CTC-type devices (rh #660666)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-15
changelog:
  - wifi: calculate quality correctly with nl80211/mac80211 drivers (rh #748075)
  - wifi: fix Ad-Hoc associations when using nl80211/mac80211 drivers (rh #747066)
  - vpn: fix D-Bus interface properties export (rh #659685)


author: Adam Jackson <ajax@redhat.com> 1.8.6-3
changelog:
  - cairo-1.8.6-repeat-modes.patch: Enable the repeat and pad blend modes in
    the xlib backend to make firefox performance slightly less dire.


author: Adam Jackson <ajax@redhat.com> 1.6.0-10
changelog:
  - Don't Require: libao-devel at runtime (#820008)
  - rdesktop-1.6.0-ts2008-licence.patch: Fix licence handling against some
    versions of Terminal Services. (#831095)
  - rdesktop-1.6.0-cursor.patch: Fix cursor rendering for Windows Server 2008
    (#782494)
  - rdesktop-1.6.0-smart-card-lp64.patch: Fix smartcard support on 64-bit
    hosts (#772020, #680917)
  - rdesktop-1.6.0-scard-crash.patch: Fix a crash in smartcard support (#680926)


author: Soren Sandmann <ssp@redhat.com> 1.7.1-1
changelog:
  - Rebase to 1.7.1 (#852890, #902912, #914279)
  - Add patches from 
      http://sourceforge.net/p/rdesktop/patches/214/
    to rework redirect PDU handling (#701246)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-41
changelog:
  - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
  - core: fix use-after-free in unserialize CVE-2015-2787
  - exif: fix free on unitialized pointer CVE-2015-0232
  - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
  - date: fix use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.3.3-43
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4026, #1213407
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: more fix type confusion through unserialize #1222538


author: Remi Collet <rcollet@redhat.com> - 5.3.3-47
changelog:
  - fix wrong warning in openssl_encrypt() for missing IV
    when IV is not required #1260315
  - fix segfault's when you try and allocate an SplFixedArray
    with size >= 9999 #1071344
  - segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
  - add options to enable TLS in curl #1255920
  - fix segfault in gc_collect_cycles #1122681


author: Remi Collet <rcollet@redhat.com> - 5.3.3-49
changelog:
  - fix php-soap fails to connect to HTTPS web service sporadically
    as stream_socket_enable_crypto() uses NONBLOCK #1283153


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-34
changelog:
  - Add dist tag, fix buildroot, defattr, obsoletes, provides and summary,
    comment patches and sources


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd to directory without execution permission can't fail silently (#1160923)
  - current directory could differ from PWD (#1168611)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1173668)
  - exporting fixed with variable corrupted its data (#1188377)
  - fixes memmory leak on unset of associative array (#1189294)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - fix segfault when handling a trap (#1117404)
  - closing a file descriptor in a command substitution caused loss of the output (#1116072)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.0.20091127-1
changelog:
  - Update to 1.2.0.20091127
  - Fix bug 520989 - ibus-anthy icon enhancement
  - Fix bug 531696 - ibus-anthy KeyError is still reported by abrt
  - Fix bug 536716 - ibus-anthy: Symbol type change support in ibus-anthy


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.1-3
changelog:
  - Fixed Bug 661597 - the latest page_size for ibus.LookupTable.
  - Added -fno-strict-aliasing option in CFLAGS for rpmdiff


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-7
changelog:
  - Resolves: rhbz#736074 - dhash can corrupt memory if initial table size is
                            large


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-8
changelog:
  - Fix bad patch
  - Related:  rhbz#736074 - dhash can corrupt memory if initial table size is
                            large


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.0-11
changelog:
  - Do not package built objects in dhash-devel
  - Fix NVR in the previous changelog entry
  - Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6


author: Aristeu S. Rozanski F. <arozansk@redhat.com> 0.10-2
changelog:
  - Fixing the problems found by Jarod Wilson:
  - Fixing make install target
  - Fixing Makefile so it honors the provided CFLAGS
  - not using makeinstall macro
  - installing is_uinput.sh as 755 instead of changing later with attr


author: Aristeu S. Rozanski F. <arozansk@redhat.com> 0.10-3
changelog:
  - More problems found by Jarod Wilson fixed:
  - Removing exclusive architectures, it used to be in sync with linuxwacom
    package
  - marking udev rules as non-replaceable config files
  - using install on makefile


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.4-51
changelog:
  - check malloc success (#473488)
  - fix few compiler warnings, free malloc memory before exit
  - new URL


author: Jens Petersen <petersen@redhat.com> - 1.2.7-2
changelog:
  - add new gnome-icon-theme style icons by Lapo Calamandrei and Jakub Steiner
    (mizmo, #587712)
  - add scriptlets for icon cache


author: Akira TAGOH <tagoh@redhat.com> - 1.3.1-1
changelog:
  - New upstream release.
    - Fallback to the themed icon if no icons are installed
      on the specified path. (#604482)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-14
changelog:
  - handle different usb scheme needed to support ReinerSCT Cyberjack
    readers. Patch was supplied by customer.


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-15
changelog:
  - unlock mutex on failure
  - clean up socket files after start at init time (allows restart after
    crash or hard fail of pcscd)


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-91
changelog:
  - Fix side navigation panel displayed unexpectedly when accessing index page
    without prior logging in after luci start
    Resolves: rhbz#853462
  - Rectify suboptimal logrotate arrangement imposing server restarts
    Resolves: rhbz#887340


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-92
changelog:
  - Further fixes for rhbz#853462, rhbz#877999 and rhbz#885028
    Resolves: rhbz#853462, rhbz#877999, rhbz#885028


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-1
changelog:
  - Update to sblim-gather-2.2.3
    Resolves: #633991
  - Move init script to the correct place
    Resolves: #626769
  - Fix return codes from init script
    Resolves: #627919
  - Register Linux_MetricRegisteredProfile class under the root/interop namespace
    Resolves: #713174
  - Enable System Z specific providers for s390 and s390x architecture
    Resolves: #712043


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
  - Resolves: rhbz#1350039


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350039


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Require at least the build-time version of NSS at run-time due to static linking.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.1
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Remove unneeded AArch64 environment variable setting.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Resolves: rhbz#1410612


author: Ian Kent <ikent@redhat.com> - 5.0.5-31
changelog:
  - bz700691 - autofs sometimes stops expiring mounts
    - fix next task list update race.
    - fix stale map read.
  - bz700697 - autofs with null maps specified in auto.master segfaults on reload
    - fix null cache clean.
  - Resolves: rhbz#700691 rhbz#700697


author: Ian Kent <ikent@redhat.com> - 5.0.5-32
changelog:
  - bz704940 - autofs-5.0.1-0.rc2.131.el5_4.1 is missing man 8 auto.master
    - automount(8) man page correction.
  - bz704929 - automount hangs with nested mounts using YP lookups
    - don't hold lock for simple mounts.
  - bz703332 - autofs fails to find duplicate key after key removal
    - fix prune cache valid check.
    - fix map source check in file lookup.
  - bz704933 - [RHEL 5.4] automounter dies with pthreads error
    - wait for master source mutex.
  - bz704927 - autofs should support paged results from ldap server
    - auto adjust ldap page size.
    - fix paged ldap map read.
  - bz704932 - [RFE] Support for encrypted secret in /etc/autofs_ldap_auth.conf
    - add base64 password encode.
  - bz704416 - RFE: automounter to dump maps
    - add dump maps option.
  - bz704935 - [RFE] resolve negative cache invalidation on signal to automount
    - reset negative status on cache prune.
  - bz704937 - Segmentation fault when looking up '*.'
    - fix wildcard map entry match.
  - bz704228 - AD/LDAP connection using GSSAPI auth fails with Error: An invalid
    name was supplied (Hostname cannot be canonicalized)
    - fix sasl bind host name selection.
  - bz692816 - automount does not perform a sanity check of server name in
    configuration
    - fix sanity checks for brackets in server name.
  - bz704939 - automount segfaults in lookup_mount
    - mapent becomes negative during lookup.
  - Resolves: rhbz#704940 rhbz#704929 rhbz#703332 rhbz#704933 rhbz#704927
  - Resolves: rhbz#704932 rhbz#704416 rhbz#704935 rhbz#704937 rhbz#704228
  - Resolves: rhbz#692816 rhbz#704939


author: Ian Kent <ikent@redhat.com> - 5.0.5-33
changelog:
  - bz704228 - AD/LDAP connection using GSSAPI auth fails with Error: An invalid
    name was supplied (Hostname cannot be canonicalized)
    - check each dc server.
  - Related: rhbz#704228


author: Ian Kent <ikent@redhat.com> - 5.0.5-34
changelog:
  - bz718927 - Lock ordering problem on re-load of direct maps
    - fix null cache deadlock.
  - Resolves: rhbz#718927


author: Ian Kent <ikent@redhat.com> - 5.0.5-35
changelog:
  - bz725931 - Fix GPL v3 dependency in autofs.
    - replace GPLv3 with GPLv2 code for SRV record handling.
  - Resolves: rhbz#725931


author: Ian Kent <ikent@redhat.com> - 5.0.5-36
changelog:
  - bz704928 - autofs should support paged results from ldap server on
    ppc64 and s390x
    - fix paged query more results check.
  - Resolves: rhbz#704928


author: Ian Kent <ikent@redhat.com> - 5.0.5-37
changelog:
  - bz704416 - RFE: automounter to dump maps
    - fix dumpmaps not reading maps.
  - Related: rhbz#704416


author: Ian Kent <ikent@redhat.com> - 5.0.5-38
changelog:
  - bz700136 - autofs/automount 5.0.5 error in mounting expanded entry
    - improve mount location error reporting 
  - Resolves: rhbz#700136


author: Ian Kent <ikent@redhat.com> - 5.0.5-39
changelog:
  - bz732667 - Defects added by downstream patches
    - code analysis defect fixes, installment 1.
  - Resolves: rhbz#732667


author: Ian Kent <ikent@redhat.com> - 5.0.5-39.el6_2.1
changelog:
  - bz787122 - autofs-5.0.5-39.el6.x86_64 fails to load some LDAP maps
    - fix improve mount location error reporting.
  - Resolves: rhbz#787122


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-19
changelog:
  - fix #1047899 - add support for "maxsize" directive
  - fix #1125769 - add support for "createolddir" directive


author: Kamil Dudka <kdudka@redhat.com> - 3.7.8-28
changelog:
  - fix #1285481 - make 'createolddir' preserve sticky bit
  - fix #1369242 - heap buffer overflow when using long date format


author: Doug Ledford <dledford@redhat.com> - 1.4-2.el6
changelog:
  - Update to tarball from URL instead of from OFED
  - Minor tweaks for pkgwrangler import
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Don't include mtcr.h as we don't really expect anything to need Mellanox
    card register definitions except this program, and we already have the
    file.
  - Change to ExcludeArch instead of ExclusiveArch so we build in all the right
    places.
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-6
changelog:
  - Turns out that the previous tarball was full of cruft that upstream should
    have never let make its way into the tarball.  I had to clean the tarball
    out in order to get the package to build properly.
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to newer tarball that resolves licensing issues with the last
    tarball
  - Related: bz818183


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Adam Tkac <atkac redhat com> - 0.99.15-8
changelog:
  - fix CVE-2011-3323
  - fix CVE-2011-3324
  - fix CVE-2011-3325
  - fix CVE-2011-3326
  - fix CVE-2011-3327
  - fix CVE-2012-0255
  - fix CVE-2012-0249 and CVE-2012-0250
  - fix CVE-2012-1820


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-10
changelog:
  - add watchquagga initscript (#862826, #1208617)
  - remove pidfile when service is stopped (#842308)
  - use QCONFDIR correctly in initscripts (#839620)
  - include watchquagga and ospfclient manpages (#674862)


author: Michal Sekletar <msekleta@redhat.com> - 0.99.15-11
changelog:
  - fix for CVE-2013-2236 (#1391918)
  - fix for CVE-2016-1245 (#1391914)
  - fix for CVE-2016-2342 (#1391916)
  - fix for CVE-2016-4049 (#1391919)


author: Michal Ruprich <mruprich@redhat.com> - 0.99.15-14
changelog:
  - Resolves: #1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-1
changelog:
  - Update to snapshot
  - Fix text subtitles causing hangs on startup
  - Fix missing plugins installation requiring a restart
  - Queue2 element moved to gstreamer core


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-2
changelog:
  - Fix theoradec bug with timestamps for Empathy video calls (#537170)
  - Fix text subtitle display regression (#537559)


author: Jirka Hladky <jhladky@redhat.com> - 20160814-1
changelog:
  - Update to new upstream version 20160814
  - It includes new tool cpuinfo2cpuid which enables to process /proc/cpuinfo
  - Rebuilt for RHEL6 (rhbz#1316998)


author: Jan Synáček <jsynacek@redhat.com> - 20071127-20
changelog:
  - Resolves: #1149574 - Ping produces "WARNING: kernel is not very fresh, upgrade is recommended."
  - Resolves: #829998 - The arping command may have return value of 0.
  - Resolves: #1099426 - Count of "back" is not correct in tracepath
  - Resolves: #1113082 - ping returns odd results with options inet6 in resolv.conf


author: Jan Synáček <jsynacek@redhat.com> - 20071127-22
changelog:
  - Resolves: #1351720 - documentation inconsistency on arping
  - Resolves: #1334775 - backport upstream ping change unmasking signals
  - Resolves: #1298344 - Ping assumes EACCESS errors are due to broadcast addresses


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-18
changelog:
  - Don't leave symlinks in /tmp after adding a printer (bug #556548).
  - Fixed probe-printer-typo.patch (bug #579864).
  - Fixed stack overflow in pycups (bug #584991).
  - Moved COPYING file from main package to libs subpackage (bug #613708).
  - Fixed gtk_label_autowrap.py by updating it to latest version (bug #633595).
  - Set D-Bus timeout when calling asynchronously (bug #634252).
  - More translatable strings marked as such (bug #634436).
  - Backport translations from upstream (bug #634436).
  - Don't rename when names differ only in size of characters (bug #636523).
  - Stub out getJockeyDriver_thread() (bug #639624).
  - Applet could cause high cupsd CPU usage (bug #645426).
  - Don't crash when DISPLAY is unset (bug #676339, bug #676343).
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (bug #708519).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-23
changelog:
  - Use thread-local storage for password callback function (bug #744519).
  - Don't handle tooltips during mainloop recursion (bug #739745).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-24
changelog:
  - Fixed pycups documentation (bug #854937).
  - Prevent pycups segmentation fault when handling UTF-8 input (bug #1063224).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.1.16-26
changelog:
  - 1333633 - [ALL_LANG][RHEL6.8 RC][system-config-printer] - Translation incomplete
  - 784817 - Segfault when moving / removing printer from class


author: Adam Jackson <ajax@redhat.com> 1:7.2-3
changelog:
  - Move bdftruncate (and its perl dependency) to a subpackage.
  - %doc for the non-empty READMEs and non-stub COPYINGs.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-20.1
changelog:
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method


author: Honza Horak <hhorak@redhat.com> - 0.17-60
changelog:
  - fixed .include patch which had not been aplicable
  - fixed rusersd and rstatd initscripts
    Resolves: #697862
  - fixed rpmlint errors and warnings
    Resolves: #634922


author: Karel Klic <kklic@redhat.com> 1:23.1-21
changelog:
  - Added jis2004 patch to prefer non-JIS X 0213:2004 compliant fonts
    for Japanese texts (IPA fonts are counted as JIS X 0213:2004
    compliant)
    Resolves: #612385
  - Removed dependency on aspell and hunspell
    Resolves: #613759


author: Adam Tkac <atkac redhat com> 1.0.9-5
changelog:
  - run ck-xinit-session for all sessions where the xdg cookie isn't already
    set (#452156, patch from Patrice Dumas)
  - add which Requires (#413041, patch from Patrice Dumas)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.9-8
changelog:
  - have ck-xinit-session tell the session bus to set
    XDG_SESSION_COOKIE for services which it autostarts (#502258)
  - add direct build dependency on dbus-devel, since we call it
    directly now


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-9
changelog:
  - consider scripts in /etc/X11/xinit/Xclients.d/ as well
  - add back scripts in Release -7 and -8 from F11 branch.


author: Petr Oros <poros@redhat.com> - 1:1.17-21
changelog:
  - Update microcode data file to 20151106 revision.
  - Resolves: #1244968
  - Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
  - Resolves: #1201276


author: Petr Oros <poros@redhat.com> - 1:1.17-24
changelog:
  - Update microcode data file to 20161104 revision.
  - Add workaround for E5-26xxv4
  - Resolves: #1346045


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-75
changelog:
  - fenced: Delay killing a node if there's a stateful merge after a short outage
    Resolves: rhbz#1077890
  - cman_tool: Don't segfault if /dev/zero doesn't exist
    Resolves: rhbz#1171241
  - cman: Improve node-name matching algorithm
    Resolves: rhbz#1193169
  - cman: Delete temp file if ccs_validation fails
    Resolves: rhbz#1206188
  - dlm_controld: reconnect uevent socket on error
    Resolves: rhbz#1221815
  - gfs_controld: reconnect uevent socket on error
    Resolves: rhbz#1225583
  - groupd: Show more than 128 mount groups or lockspaces
    Resolves: rhbz#1243944
  - qdiskd: fix memory leak in unaligned write path
    Resolves: rhbz#1245232
  - qdiskd: fix memory copy in unaligned write path
    Resolves: rhbz#1245232
  - qdiskd: Watch for other nodes leaving during a master re-election
    Resolves: rhbz#1257732


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-75
changelog:
  - libfence: Remove fencedevice params from fence_node -S so that asking for
    status does not shut down a node if action= is set
    Resolves: rhbz#1252991
  - schema: add RRP attributes for <token> section
    Resolves: rhbz#1221728


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-80
changelog:
  - cman_tool: prevent segv in cman_tool nodes -F addr crash of qdisk is present
    Resolves: rhbz#1384968


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301
changelog:
  - update to patch 20080301
  - provide libtermcap.so (#428898)
  - move all headers to /usr/include
  - move libncursesw out of /usr
  - make examples in documentation compilable (#436355)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628
changelog:
  - update to patch 20080628
  - move mlterm and screen.* entries to -base
  - change kbs to ^? in rxvt and screen entries


author: Peter Jones <pjones@redhat.com> - 0.97-74
changelog:
  - Fix error on invocation of "grub-install /dev/cciss/c0d0" (patch from jnevill)
    Resolves: rhbz#736833


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-1
changelog:
  - Update to gcc 4.4.1 20090818 svn 150873.
  - Patches taken from native Fedora gcc-4.4.1-6.
  - Replaced %define with %global and updated %defattr.
  - Changed license to match native Fedora gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-2
changelog:
  - Update to gcc 4.4.1 20090902 svn 151328.
  - Patches taken from native Fedora gcc-4.4.1-8.
  - Another license update to keep it in sync with native gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.2-1
changelog:
  - Update to gcc 4.4.2 20091114 svn 154179, which includes
    VTA backport from 4.5 branch.
  - Patches taken from native Fedora gcc-4.4.2-10.


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-3
changelog:
  - fixed init script to be lsb conform
    Resolves: rhbz#536828
  - fixed download link according to package review
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-5
changelog:
  - added -fno-strict-aliasing to the compiler flags (rhbz#596158)
  - cleaned up description (rhbz#596158)
  - fixed install of /etc/ethertypes in running system (rhbz#596778)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Martin Stransky <stransky@redhat.com> - 17.0.9-2
changelog:
  - Added patch for rhbz#983488 - Resizing window changes window
    size to 0 with third party window manager.


author: Steve Grubb <sgrubb@redhat.com> 2.0.6-1
changelog:
  resolves: #584981 - ausearch/report performance improvement needed
  resolves: #640948 - inodes display incorrectly when listing rules
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #647131 - Man page for audit_encode_nv_string() is incorrect
  resolves: #670938 - searching on auid = -1 results in all events


author: Steve Grubb <sgrubb@redhat.com> 2.1-1
changelog:
  resolves: #688664 - Logging does not resume from SYSLOG on full disk action
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #584981 - ausearch/report performance improvement needed


author: Steve Grubb <sgrubb@redhat.com> 2.1-4
changelog:
  resolves: #584981 - Improvements needed for Common Criteria
  resolves: #697463 - Broken autrace -r on s390x


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-1
changelog:
  resolves: #709345 auditctl -l returns 0 even if it fails on dropped capabilities
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #715315 remote client gets disk_error event instead of disk_full
  resolves: #728475 remove krb5 related options from audisp-remote.conf


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-2
changelog:
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #748124 Auditctl doesn't recognize accept4 syscall


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#757411, add missing qnetwork-deleteResource
  - Resolves: bz#821061, add missing qmenubar-cornerWidget


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-29
changelog:
  - Use correct signal and callback names to catch cpu-threads property changes (rhbz#1190641)
  - Fix crash caused by closing an unowned fd (rhbz#1174464)


author: Pavel Hrdina <phrdina@redhat.com> - 0.9.0-32
changelog:
  - console: add support to forget password (rhbz#1301841)
  - create: report an error if storage doesn't exist for import installation (rhbz#1305209)
  - uihelpers: fix detection of networks (rhbz#1333290)


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Simo Sorce <simo@redhat.com> 0.7.0-4
changelog:
  - Backport of useful patches from upstream
    - Better handling of IDP reported errors
    - Better handling of session data storage size


author: Simo Sorce <simo@redhat.com> 0.8.0-1
changelog:
  - New upstream realease version 0.8.0
  - Upstream moved to github
  - Drops patches as they have been all included upstream


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-5
changelog:
  - Add *.xz, *.lzma (both for compressed man pages as well), *.jar and *.nbm
    read support to lesspipe.sh
    Resolves: #718498


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix wrong `man' program option (incompatibility between man and man-db packages)
    by using `groff' program instead for parsing troff files (#718498)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Put the udev rules file in the right place
    Resolves: rhbz866732
  - include a patch from upstream to fix undefined references
    Resolves: rhbz887730


author: Michal Schmidt <mschmidt@redhat.com> - 3.3-1.7.git05f6f14_open
changelog:
  - Update to latest upstream tarball
  - Replace no-exec-stack patch with one cherry-picked from upstream.
  - Resolves: bz1247994


author: Thomas Graf <tgraf at, redhat.com> 0.4-4
changelog:
  - Fixed initscript according to SysVInitScript guidelines:
      - Corrected usage text
      - Added force-reload, condrestart and try-restart actions
      - Fixed return code of status action
      - Only start/stop daemon if not already running/stopped


author: Thomas Graf <tgraf at, redhat.com> 0.4-5
changelog:
  - Fix CVE-2010-2522 and CVE-2010-2523 by including the patches:
    - Additional sanity checks for ND options length
    - Security fix: Check origin of netlink messages in netlink helpers.


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
changelog:
  - New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
  - Dropped patch for newer glibc (merged upstream)


author: Daniel Veillard <veillard@redhat.com> - 2.48-5
changelog:
  - suppress the no address DHCP warning from logs (rhbz#704073)
  - fixes various small problems in the initscript (rhbz#584009)


author: Doug Ledford <dledford@redhat.com> - 1.3.2-1
changelog:
  - Update to latest upstream version
  - Remove requirement on libibcommon since that library is no longer needed
  - Fix a problem with man page listing


author: Petr Šabata <contyk@redhat.com> - 1.0.22-2
changelog:
  - Reverting a part of d789267 upstream patch.  Initscript shouldn't return code 2 on
    status query when the daemon is running. (#804936)


author: Petr Šabata <contyk@redhat.com> - 1.0.28-1
changelog:
  - Update to 1.0.28 (#829793)
  - Include a fix for #903099, destroying vports first to avoid a hang
  - Fix an old bogus date in the changelog


author: Petr Šabata <contyk@redhat.com> - 1.0.28-2
changelog:
  - Don't build on s390x (#693443)
  - Add a note to README about EL6 service already implementing the
    suggested function (#981062)
  - Use rtgenmsg when requesting RTM_GETLINK (#882139)


author: Thomas Woerner <twoerner@redhat.com> - 1.2-10
changelog:
  - Added support for brctl show <bridge> (rhbz#690529)
  - Added multicast option documentation to man page (rhbz#676355)


author: Tomas Hozza <thozza@redhat.com> - 2.48-10
changelog:
  - Fixed dnsmasq-2.48-add-bind-dynamic-option.patch
   - the option --bind-dynamic was not set correctly when used


author: Tomas Hozza <thozza@redhat.com> - 2.48-11
changelog:
  - Revert previous changes because of many problems with --bind-dynamic option backport.
  - Dropping dnsmasq-2.48-add-bind-dynamic-option.patch
  - Set SO_BINDTODEVICE socket option when using --bind-interfaces (rhbz#884957)


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.1
changelog:
  - Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
  - Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.2
changelog:
  - Resolves: rhbz#1289498 keyingtries=0 is broken
  - Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
  - Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
  - Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1345959 openswan - libreswan migration issues
  - Resolves: rhbz#1360134 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1313709 ipsec pluto returns zero even if it fails [doc change only]
  - Resolves: rhbz#1315415 ipsec.conf manpage does not contain any mention about crl-strict option


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.1
changelog:
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort when ' auto --up --asynchronous' is used
  - Resolves: rhbz#1335896 ipsec initnss/checknss custom directory not recognized


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.2
changelog:
  - Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort [extended patch]
  - Resolves: rhbz#1369990 Libreswan connection sometimes does not get re-established after one side restarts


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.3
changelog:
  - Resolves: rhbz#1403201 pluto uses up available memory and fails with 'unable to popen'
  - Resolves: rhbz#1311360 When IKE rekeys [...] (updated for IKEv1 responder side)


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-33
changelog:
  - wacom: add support for NV-CONTROL extension (#805038)
  - wacom: fix button mapping (#805045)
  - wacom: add LED support from upstream (#805069)
    Resolves: #805038 #805045 #805069


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-37
changelog:
  - wacom: Make the calibrator window stay above other windows and
    cancel calibration if/when the calibrator loses input focus.
    Resolves: #818692


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-38
changelog:
  - wacom: Re-sync sources from gnome-settings-daemon-2.28.2-26 with
    LED support (#805069)
    Resolves: #805069


author: Carlos Garnacho <cgarnach@redhat.com> 2.28.1-41
changelog:
  - Check ~/.config/gnome-settings-daemon/no-per-machine-config for wacom settings
    Resolves: #966658


author: Kevin Fenzi <kevin@tummy.com> - 20090224-2
changelog:
  - Apply patch for python modules loading (fixes #489109)
  - use install -p to fix multiarch issue (fixes #480685)


author: Andrew Beekhof <andrew@beekhof.net> - 1.6.5-0.1.git833ca18
changelog:
  - Incorporate review feedback
    + Add calls to ldconfig
    + Fix package group
    + Resolve rpmlint warnings
    + Added LICENSE, NOTICE and AUTHORS to the doc list
    + Document how the tarball was generated
    + Update version number to be a .5 pre-release snapshot


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-25
changelog:
  - Fix bz733084 (Cleared options are not saved correctly in Virtual Machine services)
  - Additional fixes for bz522005


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-28
changelog:
  - Make sure cluster permission database objects are created properly
    after a cluster is destroyed, then recreated.


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-29
changelog:
  - Add a note about the implications of creating, deleting, and editing
    service groups on the admin page.


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-30
changelog:
  - Additional fix for bz639121 (Lightbox dialog state is not reset when the dialog is closed)
  - Additional fix for bz718355 (Logging feature in Luci not working as expected)
  - Additional fix for bz599074 ("Use same password for all nodes" doesn't work.)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-31
changelog:
  - Additional fix for bz705884 (luci chokes on working cluster.conf line)
  - Fix to mitigate SELinux issues (bz737635)


author: Petr Spacek <pspacek redhat com> - 2.3-4
changelog:
  - update-policy with match type 'zonesub' lead to crash (#921167)
  - zones without idnsUpdatePolicy attribute produced error messages (#908780)


author: Petr Spacek <pspacek@redhat.com> - 2.3-7
changelog:
  - fix crash caused by race condition during resolver cache flushing (#1126841)
  - fix ticket expiration check (#1142176)
  - fix idnsAllowTransfer and idnsAllowQuery attributes documentation (#1183805)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-10
changelog:
  - Add patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #906341 (Cannot create book/calendar)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-11
changelog:
  - Update patch for RH bug #621941 (Created events not shown in OWA)
  - Add patch for RH bug #1017108 (Shorten delay of calendar open)


author: Milan Crha <mcrha@redhat.com> - 0.32.2-13
changelog:
  - Add patch for RH bug #1026797 (Coverity scan issue - uninitialized variable)
  - Add patch for RH bug #1141662 (Crash when receiving message without body)


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-2
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Complied with Fedora JNI packaging logic


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-3
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Removed LICENSE logic from installation section
  - Take ownership of library directory


author: Matthew Harmsen <mharmsen@redhat.com> 2.0.1-1
changelog:
  - Removed version information from NSPR and NSS build/runtime requires
  - Bugzilla Bug #638377 - Generate PKI UI components which exclude
    a GUI interface
  - Bugzilla Bug #643206 - New CMake based build system for Dogtag
  - Bugzilla Bug #644056 - CS build contains warnings
  - Bugzilla Bug #667556 - Consolidate 'osutil' SVN source code with
    'osutil' GIT source code


author: Nalin Dahyabhai <nalin@redhat.com> 0.44-1
changelog:
  - check specifically for cases where a specified token that we need to
    use just isn't present for whatever reason (#697058)


author: Nalin Dahyabhai <nalin@redhat.com> 0.46-1
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766, really this time)


author: Nalin Dahyabhai <nalin@redhat.com> 0.47-1
changelog:
  - getcert: distinguish between {stat() succeeds but isn't a directory} and
    {stat() failed} when printing an error message (#739903)
  - getcert resubmit/start-tracking: when we're looking for an existing request
    by ID, and we don't find one, note that specifically (#741262)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-1
changelog:
  - when using an NSS database, skip loading the module database (#743042)
  - when using an NSS database, skip loading root certs
  - generate SPKAC values when generating CSRs, though we don't do anything
    with SPKAC values yet
  - internally maintain and use challenge passwords, if we have them
  - behave better when certificates have shorter lifetimes
  - add/recognize/handle notification type "none"
  - getcert: error out when "list -c" finds no matching CA (#743488)
  - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-1
changelog:
  - really fix these this time:
   - getcert: error out when "list -c" finds no matching CA (#743488)
   - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-2
changelog:
  - incorporate patch from Rob Crittenden to start supplying Referer:
    headers when we submit XML-RPC requests (#750617)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-3
changelog:
  - tweak the patch for #750617 to handle the case where xmlrpc-c doesn't
    offer dont_advertise as an option (Rob Crittenden)


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 2.9-19
changelog:
  - Update to 2.9.
  - Removed fakechroot-2.8-initsocketlen.patch (upstream now).
  - Removed int->ssize_t readlink type change (upstream testing for type
    now).
  - Removed permission fix for scripts/ldd.fake scripts/restoremode.sh
    scripts/savemode.sh (fixed upstream).


author: Richard W.M. Jones <rjones@redhat.com> - 2.9-24.5.el6.1
changelog:
  - Properly fix multilib issue in shell script /usr/bin/fakechroot
    and remove ExclusiveArch.
    resolves: rhbz#730647


author: Michal Hlavinka <mhlavink@redhat.com> - 82-6.1
changelog:
  - security fixes:
  - privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
  - race condition when checking source during mount (CVE-2011-1833)
  - mtab corruption via improper handling (CVE-2011-1834)
  - key poisoning via insecure temp directory handling (CVE-2011-1835)
  - arbitrary file overwrite via lock counter race (CVE-2011-1837)


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-12
changelog:
  - Update sources for latest tarballs, some changes got lost before the commit
  - require gettext-devel for AM_ICONV (now required by xwininfo)


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.5.4.7-3
changelog:
  - Update to version 6.5.4-7
  - Use lzma-compressed source tarball as sugested by Ville Skyttä (BZ#515319)


author: Olivier Fourdan <ofourdan@redhat.com> - 6.5.4.7-6
changelog:
  - Add fix for CVE-2010-4167
  - Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186
  - Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-6
changelog:
  - Do not remove Python multiprocessing sockets.  Patch by Chris St. Pierre
    <chris.a.st.pierre@gmail.com>.
    Resolves: #1058310


author: Brian C. Lane <bcl@redhat.com> 2.1-21
changelog:
  - Raise size limit on loop devices
    Resolves: #869743
  - Remove dm device when last partition is removed
    Resolves: #851705


author: Brian C. Lane <bcl@redhat.com> 2.1-22
changelog:
  - Add PreP GUID support
    Resolves: rhbz#1054283
  - Fix busy partition detection on devices witout sequential minor device numbers
    Resolves: rhbz#1018075
  - Fix align-check in interactive mode
    Resolves: rhbz#975478


author: Brian C. Lane <bcl@redhat.com> 2.1-23
changelog:
  - Drop the warning about greater than 512-byte sector sizes being experimental
    Resolves: rhbz#929319


author: Brian C. Lane <bcl@redhat.com> 2.1-26
changelog:
  - libparted: device mapper uses 512b sectors
    Resolves: rhbz#1189328
  - tests: Add a test for device-mapper partition sizes
    Related: rhbz#1189328
  - tests: Turn on testing of other blocksizes
    Related: rhbz#1189328


author: Brian C. Lane <bcl@redhat.com> 2.1-27
changelog:
  - libparted: fix gpt end of disk handling
    Resolves: rhbz#1180683
  - tests: Add tests for gpt end of disk handling
    Related: rhbz#1180683


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Jiri Skala <jskala@redhat.com> 1.0.9-12
changelog:
  - Resolves: #593599 - corrected man page
  - Resolves: #590683 - replaced symlink devkit-disks by udisks binary
  - Resolvse: #595811 - bltk_plot fails in initialization


author: Jiri Skala <jskala@redhat.com> 1.0.9-13
changelog:
  - Resolves: #598538 - bltk_report_compress fails in initialization
  - extended modification due to unsupported workloads


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20120814_2-0.14
changelog:
  - add /etc/logrotate.d/mcelog file [849252]
  - add chkconfig levels to mcelogd initscript [1006293]
  - fix IvyBridge detection (commits b29cc4d and 2577aeb) [1079360]
  - cleanup .orig and .rej patch files [1059227]
  - add Haswell CPUID 0x3f [1079501]
  - Modify --daemon logic to allow syslog-only output [872387]


author: Prarit Bhargava <prarit@redhat.com> 2:101.0
changelog:
  - Decode MISC register when IO MCA occurs
  - add and fix leaky bucket logging
  - exit with EXIT_SUCCESS (aka 0) when stopped by signal
  - Fix missing handling for flag MCE_GETCLEAR_FLAGS
  - Decode new simple error code number 6
  - introduce new NVR scheme to sync with upstream


author: Prarit Bhargava <prarit@redhat.com> 2:109.1
changelog:
  - updated to upstream 109, brought in previous Haswell and additional fixes
  - add Broadwell support, currently unsupported in kernel


author: Prarit Bhargava <prarit@redhat.com> 2:128.1
changelog:
  - updated to upstream 128
  - a little better documentation to /etc/mcelog/mcelog.conf [1136920]
  - Atom cpuids [1206320]
  - Broadwell-DE cpuid [1206320]
  - Skylake (0x4e and 0x5e) cpuids [1255561]
  - fix cpu buffer overflow warning [1136920]


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-7
changelog:
  - doublequote LS_COLORS in colorls.*sh scripts to speedup
    shell start(#586949)
  - update /etc/DIR_COLORS* files
  - move readlink from /usr/bin to bin, keep symlink in
    /usr/bin(#586948)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-10
changelog:
  - compile coreutils su with RELRO and PIE again(#630017)
  - document rare usefulness of tail options --sleep-interval
    and --max-unchanged-stats with inotify support(#662900)
  - fix double free error in tac for input line longer
    than 16KiB(#628212)
  - fix segfault in sort if LC_TIME differs from the rest
    of locales(#649224)
  - fix support for DTR/DSR control flow in stty(#598631)
  - clarify mkdir --mode behaviour in info documentation
    (#609262)
  - inform about dropped ninth bit of 3-digit octal values in byte
    representations in info documentation(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-11
changelog:
  - adjust the wording in the octal value byte representation
    documentation to match with upstream(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-12
changelog:
  - document that dd's iflag=fulblock prevents dd's oflag=direct
   automatic turn off when reading via pipe(#614605)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-14
changelog:
  - tweak documentation of tail --sleep-interval (#725618)
  - prevent build failure on system with mock>=1.1.9 (#691292)
  - su: fix shell suspend in tcsh (#703712)
  - ls: use acl_extended_file_nofollow() to prevent unnecessary
    autofs mounts(#720325)
  - fix cp -Z functionality if the destination exists(#715557)


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-1
changelog:
  - initial import of rsyslog7
    changes since rsyslog-5.8.10-8:
    - rebase to 7.4.10
    - drop patches merged upstream
    - regenerate patches for rhbz820311, rhbz886117
    - add a patch to remove dependency on liblogging-stdlog
    - add a patch to fix compilation of omelasticsearch
      on platforms without atomic instructions
    - mark package as conlicting with rsyslog
    - update specification of dependencies
    - add the rsyslog-recover-qi.pl script
    - add new plugins
      imdiag, mmanon, mmjsonparse, mmsnmptrapd, omelasticsearch,
      pmaixforwardedfrom, pmcisconames, pmsnare
    - add new subpackage rsyslog-elasticsearch
    - make the build more verbose by adding 'V=1' to make
    - update conf file for new omusrmsg syntax
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - drop default compatibility mode from SYSLOGD_OPTIONS
      for details, see http://www.rsyslog.com/doc/v6compatibility.html
    - fix typos in the spec file
    resolves: #869600


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-2
changelog:
  - amend rsyslog.conf man page with information on omitting file sync
    resolves: #994127
  - add a patch to support TCP KEEPALIVE in imrelp
    resolves: #1009048
  - add a patch to fix missing note about message repetition in imuxsock
    resolves: #1020431
  - add a patch to prevent division-by-zero errors
    resolves: #996862
  - add a patch to fix the name of the PID file in man page
    resolves: #1009882
  - add a patch to remove references to Google ads from the html docs
    resolves: #1030040
  - add missing image files referenced from the html docs
    resolves: #1031673
  - add a patch to backport the mmcount module
    resolves: #1030206
  - add a patch to support arbitrary number of listeners in imuxsock
    resolves: #1096732
  - remove clean section
    resolves: #869600
  - add a list of bugs fixed by rebasing to 7.4.10
    resolves: #996857, #1007409, #1029910, #1061614, #1070689


author: Tomas Heinrich <theinric@redhat.com> 7.4.10-4
changelog:
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202455
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224335
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1184722
  - add a patch to remove a limit on number of sources in imfile
    resolves: rhbz#1122802
  - add an explicit, versioned requirement on librelp to work
    around an incorrect soname
    resolves: rhbz#1191680
  - make logrotate tolerate missing log files
    resolves: rhbz#1252909
  - replace bundled docs with updated upstream documentation
    remove reference to queue.spoolDirectory
    drop empty NEWS file
    resolves: rhbz#1238451
    resolves: rhbz#1243293


author: Radovan Sroka <rsroka@redhat.com> 7.4.10-7
changelog:
  - fix warning in net.c in debug mode
  - added rsyslog-7.4.10-fix-net-warning.patch
    resolves: rhbz#1388420


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.14-8
changelog:
  - fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
  - add missing initialization of libgcrypt in gpgv
  - properly encode s2k iteration count in gpg-agent (#638635)


author: Ade Lee <alee@redhat.com> 9.0.3-12
changelog:
  - Resolves #689909 - Dogtag installation under IPA takes too much
    time - remove the inefficient sleeps, r2097


author: Ade Lee <alee@redhat.com> 9.0.3-13
changelog:
  - Resolves #698796: Race conditions during IPA installation, r2103 (alee)
  - Resolves #708075 - Clone installation does not work over NAT, r2104 (alee)
  - Resolves #726785 - If replication fails while setting up a clone it 
    will wait forever, r2106 (alee)
  - Resolves #691076 - pkiremove removes the registry entry for all instances
    on a machine, r2112 (mharmsen)
  - Resolves #693835 - /var/log/tomcat6/catalina.out owned by pkiuser, r2118
    (mharmsen)
  - Resolves #729126 - Increase default validity from 6mo to 2yrs in IPA
    profile, r2125 (awnuk)
  - Resolves #728651 - CS8 64 bit pkicreate script uses wrong library name
    for, r2126 (mharmsen)
  - Resolves #700522 - pki tomcat6 instances currently running unconfined,
    r2128 (alee)


author: Ade Lee <alee@redhat.com> 9.0.3-14
changelog:
  - Resolves #700522 - pki tomcat6 instances currently running unconfined, 
    allow server to come up when selinux disabled, r2149


author: Ade Lee <alee@redhat.com> 9.0.3-21
changelog:
  - Resolves #771790 - sslget does not work after FEDORA-2011-17400 update,
    breaking FreeIPA install (fixed in Git repo)


author: John Dennis <jdennis@redhat.com> - 0.10-1
changelog:
  - Resolves: #619743, Update to latest upstream, changes include:
  - The following classes were added:
      InitParameters
      InitContext

  -The following module functions were added:
      nss.nss.nss_initialize()
      nss.nss.nss_init_context()
      nss.nss.nss_shutdown_context()
      nss.nss.nss_init_flags()

  - add nss_is_initialized()

  - Remove nss_init_nodb() when nss modules loads from previous version
    apparently this prevents subsequent calls to nss_init with a
    database to silently fail.
  - Clean up some cruft in doc/examples/verify_server.py

  - Invoke nss_init_nodb() when nss modules loads, this prevents segfaults
    in NSS if Python programmer forgot to call one of the NSS
    initialization routines.

  - Rename the classes X500Name, X500RDN, X500AVA to DN, RDN, AVA
    respectively.

  - DN and RDN objects now return a list of their contents when indexed by
    type, this is to support multi-valued items.

  - Fix bug where AVA object's string representation did not include it's
    type.

  - Enhance test/test_cert_components.py unit test to test for above
    changes.

  - Add CertificateRequest object

  - Fix incomplete read bug (due to read ahead buffer bookkeeping).
  - Remove python-nss specific httplib.py, no longer needed
    python-nss now compatible with standard library
  - Rewrite httplib_example.py to use standard library and illustrate
    ssl, non-ssl, connection class, http class usage

  - add nss.cert_usage_flags(), use it in ssl_example.py

  - Add format_lines() & format() methods to the new certificate extension objects.
  - Add printing of certificate extensions.
  - Add BasicContstraints certificate extension.
  - Fix several reference counting and memory problems discovered with valgrind.

  - fold in more ref counting patches from Miloslav Trmač <mitr@redhat.com>
    into upstream.
    Did not bump upstream version, just bumped release ver in this spec file.

  - Unicode objects now accepted as well as str objects for
    interfaces expecting a string.

  - Sockets were enhanced thusly:
      - Threads will now yield during blocking IO.
      - Socket.makefile() reimplemented
            file object methods that had been missing (readlines(), sendall(),
            and iteration) were implemented, makefile now just returns the same
            Socket object but increments an "open" ref count. Thus a Socket
            object behaves like a file object and must be closed once for each
            makefile() call before it's actually closed.
      - Sockets now support the iter protocol
      - Add Socket.readlines(), Socket.sendall()

  - The following classes were added:
      AuthKeyID
      BasicConstraints
      CRLDistributionPoint
      CRLDistributionPts
      CertificateExtension
      GeneralName
      SignedCRL
      X500AVA
      X500Name
      X500RDN

  - The following module functions were added:
      nss.nss.cert_crl_reason_from_name()
      nss.nss.cert_crl_reason_name()
      nss.nss.cert_general_name_type_from_name()
      nss.nss.cert_general_name_type_name()
      nss.nss.cert_usage_flags()
      nss.nss.decode_der_crl()
      nss.nss.der_universal_secitem_fmt_lines()
      nss.nss.import_crl()
      nss.nss.make_line_pairs()
      nss.nss.oid_dotted_decimal()
      nss.nss.oid_str()
      nss.nss.oid_tag()
      nss.nss.oid_tag_name()
      nss.nss.read_der_from_file()
      nss.nss.x509_alt_name()
      nss.nss.x509_ext_key_usage()
      nss.nss.x509_key_usage()

  - The following class methods and properties were added:
    Note: it's a method if the name is suffixed with (), a propety otherwise
      Socket.next()
      Socket.readlines()
      Socket.sendall()
      SSLSocket.next()
      SSLSocket.readlines()
      SSLSocket.sendall()
      AuthKeyID.key_id
      AuthKeyID.serial_number
      AuthKeyID.get_general_names()
      CRLDistributionPoint.issuer
      CRLDistributionPoint.get_general_names()
      CRLDistributionPoint.get_reasons()
      CertDB.find_crl_by_cert()
      CertDB.find_crl_by_name()
      Certificate.extensions
      CertificateExtension.critical
      CertificateExtension.name
      CertificateExtension.oid
      CertificateExtension.oid_tag
      CertificateExtension.value
      GeneralName.type_enum
      GeneralName.type_name
      GeneralName.type_string
      SecItem.der_to_hex()
      SecItem.get_oid_sequence()
      SecItem.to_hex()
      SignedCRL.delete_permanently()
      X500AVA.oid
      X500AVA.oid_tag
      X500AVA.value
      X500AVA.value_str
      X500Name.cert_uid
      X500Name.common_name
      X500Name.country_name
      X500Name.dc_name
      X500Name.email_address
      X500Name.locality_name
      X500Name.org_name
      X500Name.org_unit_name
      X500Name.state_name
      X500Name.add_rdn()
      X500Name.has_key()
      X500RDN.has_key()

  - The following module functions were removed:
    Note: use nss.nss.oid_tag() instead
      nss.nss.sec_oid_tag_from_name()
      nss.nss.sec_oid_tag_name()
      nss.nss.sec_oid_tag_str()

  - The following files were added:
      doc/examples/cert_dump.py
      test/test_cert_components.py

  - Apply patches from  Miloslav Trmač <mitr@redhat.com>
    for ref counting and threading support. Thanks Miloslav!

  - Review all ref counting, numerous ref counting fixes

  - Implement cyclic garbage collection support by
    adding object traversal and clear methods

  - Identify static variables, move to thread local storage


author: John Dennis <jdennis@redhat.com> - 0.10-2
changelog:
  - Related: #619743
  - split documentation out into separate doc sub-package
    and make building api documentation optional


author: John Dennis <jdennis@redhat.com> - 0.10-3
changelog:
  - Related: #619743
  - Fix all rpmlint warnings
  - doc for license, changelog etc. now in main package,
    doc subpackage now only contains api doc, examples, test, etc.
  - Filter provides for .so files
  - Remove execute permission on everything in docdir
  - Capitalize description


author: John Dennis <jdennis@redhat.com> - 0.11-1
changelog:
  - Resolves: #670951
  - Resolves: #674014

    * Better support for IPv6

    * Add AddrInfo class to support IPv6 address resolution. Supports
      iteration over it's set of NetworkAddress objects and provides
      hostname, canonical_name object properties.

    * Add PR_AI_* constants.

    * NetworkAddress constructor and NetworkAddress.set_from_string() added
      optional family parameter. This is necessary for utilizing
      PR_GetAddrInfoByName().

    * NetworkAddress initialized via a string paramter are now initalized via
      PR_GetAddrInfoByName using family.

    * Add NetworkAddress.address property to return the address sans the
      port as a string. NetworkAddress.str() includes the port. For IPv6 the
      a hex string must be enclosed in brackets if a port is appended to it,
      the bracketed hex address with appended with a port is unappropriate
      in some circumstances, hence the new address property to permit either
      the address string with a port or without a port.

    * Fix the implementation of the NetworkAddress.family property, it was
      returning bogus data due to wrong native data size.

    * HostEntry objects now support iteration and indexing of their
      NetworkAddress members.

    * Add io.addr_family_name() function to return string representation of
      PR_AF_* constants.

    * Modify example and test code to utilize AddrInfo instead of deprecated
      NetworkAddress functionality. Add address family command argument to
      ssl_example.

    * Fix pty import statement in test/setup_certs.py

      Deprecated Functionality:
      -------------------------

    * NetworkAddress initialized via a string paramter is now
      deprecated. AddrInfo should be used instead.

    * NetworkAddress.set_from_string is now deprecated. AddrInfo should be
      used instead.

    * NetworkAddress.hostentry is deprecated. It was a bad idea,
      NetworkAddress objects can support both IPv4 and IPv6, but a HostEntry
      object can only support IPv4. Plus the implementation depdended on
      being able to perform a reverse DNS lookup which is not always
      possible.

    * HostEntry.get_network_addresses() and HostEntry.get_network_address()
      are now deprecated. In addition their port parameter is now no longer
      respected. HostEntry objects now support iteration and
      indexing of their NetworkAddress and that should be used to access
      their NetworkAddress objects instead.


author: John Dennis <jdennis@redhat.com> - 0.11-2
changelog:
  - Resolves: #670951
  - Resolves: #674014
    Rebuild enabling api doc generation, it had been disabled because
    the buildroots on 6.1 contained a verion of epydoc that crashed,
    release engineering has updated epydoc in the buildroots.
    There are NO changes in the package source.


author: John Dennis <jdennis@redhat.com> - 0.11-3
changelog:
  - Resolves: #689807
    Add family parameter to Socket constructors in examples and doc.
    Mark implicit family parameter as deprecated.
    Raise exception if Socket family does not match NetworkAddress family.
    Add --server-subject to setup_certs.py (made testing IPv6 easier without DNS)


author: John Dennis <jdennis@redhat.com> - 0.13-0
changelog:
  - Resolves: #827616
  - Resolves: #642795
  - Resolves: #698663
  - Resolves: #796295

    Introduced in 0.13:

    * Fix NSS SECITEM_CompareItem bug via workaround.

    * Fix incorrect format strings in PyArg_ParseTuple* for:
      - GeneralName
      - BasicConstraints
      - cert_x509_key_usage

    * Fix bug when decoding certificate BasicConstraints extension

    * Fix hang in setup_certs.

    * For NSS >= 3.13 support CERTDB_TERMINAL_RECORD

    * You can now query for a specific certificate extension
      Certficate.get_extension()

    * The following classes were added:
      - RSAGenParams

    * The following class methods were added:
      - nss.nss.Certificate.get_extension
      - nss.nss.PK11Slot.generate_key_pair
      - nss.nss.DSAPublicKey.format
      - nss.nss.DSAPublicKey.format_lines

    * The following module functions were added:
      - nss.nss.pub_wrap_sym_key

    * The following internal utilities were added:
      - PyString_UTF8
      - SecItem_new_alloc()

    * The following class constructors were modified to accept
      intialization parameters

      - KEYPQGParams (DSA generation parameters)

    * The PublicKey formatting (i.e. format_lines) was augmented
      to format DSA keys (formerly it only recognized RSA keys).

    * Allow lables and values to be justified when printing objects

    * The following were deprecated:
      - nss.nss.make_line_pairs (replaced by nss.nss.make_line_fmt_tuples)

      Deprecated Functionality:
      -------------------------
      - make_line_pairs() has been replaced by make_line_fmt_tuples()
        because 2-valued tuples were not sufficently general. It is
        expected very few programs will have used this function, it's mostly
        used internally but provided as a support utility.

    Introduced in 0.12:

    * Major new enhancement is additon of PKCS12 support and
      AlgorithmID's.

    * setup.py build enhancements
      - Now searches for the NSS and NSPR header files rather
        than hardcoding their location. This makes building friendlier
        on other systems (i.e. debian)
      - Now takes optional command line arguments, -d or --debug
        will turn on debug options during the build.

    * Fix reference counting bug in PK11_password_callback() which
      contributed to NSS not being able to shutdown due to
      resources still in use.

    * Add UTF-8 support to ssl.config_server_session_id_cache()

    * Added unit tests for cipher, digest, client_server.

    * All unittests now run, added test/run_tests to invoke
      full test suite.

    * Fix bug in test/setup_certs.py, hardcoded full path to
      libnssckbi.so was causing failures on 64-bit systems,
      just use the libnssckbi.so basename, modutil will find
      it on the standard search path.

    * doc/examples/cert_dump.py uses new AlgorithmID class to
      dump Signature Algorithm

    * doc/examples/ssl_example.py now can cleanly shutdown NSS.

    * Exception error messages now include PR error text if available.

    * The following classes were replaced:
      - SignatureAlgorithm replaced by new class AlgorithmID

    * The following classes were added:
      - AlgorithmID
      - PKCS12DecodeItem
      - PKCS12Decoder

    * The following class methods were added:
      - PK11Slot.authenticate()
      - PK11Slot.get_disabled_reason()
      - PK11Slot.has_protected_authentication_path()
      - PK11Slot.has_root_certs()
      - PK11Slot.is_disabled()
      - PK11Slot.is_friendly()
      - PK11Slot.is_internal()
      - PK11Slot.is_logged_in()
      - PK11Slot.is_removable()
      - PK11Slot.logout()
      - PK11Slot.need_login()
      - PK11Slot.need_user_init()
      - PK11Slot.user_disable()
      - PK11Slot.user_enable()
      - PKCS12DecodeItem.format()
      - PKCS12DecodeItem.format_lines()
      - PKCS12Decoder.database_import()
      - PKCS12Decoder.format()
      - PKCS12Decoder.format_lines()

    * The following class properties were added:
      - AlgorithmID.id_oid
      - AlgorithmID.id_str
      - AlgorithmID.id_tag
      - AlgorithmID.parameters
      - PKCS12DecodeItem.certificate
      - PKCS12DecodeItem.friendly_name
      - PKCS12DecodeItem.has_key
      - PKCS12DecodeItem.shroud_algorithm_id
      - PKCS12DecodeItem.signed_cert_der
      - PKCS12DecodeItem.type
      - SignedData.data
      - SignedData.der

    * The following module functions were added:
      - nss.nss.dump_certificate_cache_info()
      - nss.nss.find_slot_by_name()
      - nss.nss.fingerprint_format_lines()
      - nss.nss.get_internal_slot()
      - nss.nss.is_fips()
      - nss.nss.need_pw_init()
      - nss.nss.nss_init_read_write()
      - nss.nss.pk11_disabled_reason_name()
      - nss.nss.pk11_disabled_reason_str()
      - nss.nss.pk11_logout_all()
      - nss.nss.pkcs12_cipher_from_name()
      - nss.nss.pkcs12_cipher_name()
      - nss.nss.pkcs12_enable_all_ciphers()
      - nss.nss.pkcs12_enable_cipher()
      - nss.nss.pkcs12_export()
      - nss.nss.pkcs12_map_cipher()
      - nss.nss.pkcs12_set_nickname_collision_callback()
      - nss.nss.pkcs12_set_preferred_cipher()
      - nss.nss.token_exists()
      - nss.ssl.config_mp_server_sid_cache()
      - nss.ssl.config_server_session_id_cache_with_opt()
      - nss.ssl.get_max_server_cache_locks()
      - nss.ssl.set_max_server_cache_locks()
      - nss.ssl.shutdown_server_session_id_cache()

    * The following constants were added:
      - nss.nss.int.PK11_DIS_COULD_NOT_INIT_TOKEN
      - nss.nss.int.PK11_DIS_NONE
      - nss.nss.int.PK11_DIS_TOKEN_NOT_PRESENT
      - nss.nss.int.PK11_DIS_TOKEN_VERIFY_FAILED
      - nss.nss.int.PK11_DIS_USER_SELECTED
      - nss.nss.int.PKCS12_DES_56
      - nss.nss.int.PKCS12_DES_EDE3_168
      - nss.nss.int.PKCS12_RC2_CBC_128
      - nss.nss.int.PKCS12_RC2_CBC_40
      - nss.nss.int.PKCS12_RC4_128
      - nss.nss.int.PKCS12_RC4_40

    * The following files were added:
      - test/run_tests
      - test/test_cipher.py (replaces cipher_test.py)
      - test/test_client_server.py
      - test/test_digest.py (replaces digest_test.py)
      - test/test_pkcs12.py

    * The following were deprecated:
      - SignatureAlgorithm


author: John Dennis <jdennis@redhat.com> - 0.13-1
changelog:
  - Resolves: #642795
    add python-nss-size_t.patch, some types involved with ssize_t were
    improperly defined causing a segfault on the s390x and ppc64 arches.


author: John Dennis <jdennis@redhat.com> - 0.16-1
changelog:
  - Resolves: #1154776  Add API call for SSL_VersionRangeSet (rebase)
  - See doc/Changelog for details concerning changes in versions
    0.14, 0.15, and 0.16 which this rebase encompasses.


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-14
changelog:
  - Resolves: #637705
    'sar -u ALL' doesn't report an correct value
  - Resolves: #631841
    fix the tickless kernel output of sar command
  - Resolves: #592283
    add CIFS support to iostat


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-16
changelog:
  - Related: #592283
    improved support of cifs mount points (mounting and unmounting during
    cifsiostat run)


author: John Dennis <jdennis@redhat.com> - 2.1.8-1
changelog:
  - update to latest upstream
    Feature improvements
    * Print more descriptive error message for too many EAP sessions.
      This gives hints on what to do when "failed to store handler"
    * Commands received from radmin are now printed on stdout when
      in debugging mode.
    * Allow accounting packets to be written to a detail file, even
      if they were read from a different detail file.
    * Added OpenSSL license exception (src/LICENSE.openssl)

    Bug fixes
    * DHCP sockets can now set the broadcast flag before binding to a
      socket.  You need to set "broadcast = yes" in the DHCP listener.
    * Be more restrictive on string parsing in the config files
    * Fix password length in scripts/create-users.pl
    * Be more flexible about parsing the detail file.  This allows
      it to read files where the attributes have been edited.
    * Ensure that requests read from the detail file are cleaned up
      (i.e. don't leak) if they are proxied without a response.
    * Write the PID file after opening sockets, not before
      (closes bug #29)
    * Proxying large numbers of packets no longer gives error
      "unable to open proxy socket".
    * Avoid mutex locks in libc after fork
    * Retry packet from detail file if there was no response.
    * Allow old-style dictionary formats, where the vendor name is the
      last field in an ATTRIBUTE definition.
    * Removed all recursive use of mutexes.  Some systems just don't
      support this.
    * Allow !* to work as documented.
    * make templates work (see templates.conf)
    * Enabled "allow_core_dumps" to work again
    * Print better errors when reading invalid dictionaries
    * Sign client certificates with CA, rather than server certs.
    * Fix potential crash in rlm_passwd when file was closed
    * Fixed corner cases in conditional dynamic expansion.
    * Use InnoDB for MySQL IP Pools, to gain transactional support
    * Apply patch to libltdl for CVE-2009-3736.
    * Fixed a few issues found by LLVM's static checker
    * Keep track of "bad authenticators" for accounting packets
    * Keep track of "dropped packets" for auth/acct packets
    * Synced the "debian" directory with upstream
    * Made "unlang" use unsigned 32-bit integers, to match the
      dictionaries.


author: John Dennis <jdennis@redhat.com> - 2.1.8-2
changelog:
  - bug #526559 initial install should run bootstrap to create certificates
    running radiusd in debug mode to generate inital temporary certificates
    is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial
    rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file
  - bug #528493 use sha1 algorithm instead of md5 during cert generation
    the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files
    were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months


author: John Dennis <jdennis@redhat.com> - 2.1.9-1
changelog:
  - update to latest upstream, mainly bug fix release
  - Resolves: bug #584101
    Feature improvements
    * Add radmin command "stats detail <file>" to see what
      is going on inside of a detail file reader.
    * Added documentation for CoA.  See raddb/sites-available/coa
    * Add sub-option support for Option 82.  See dictionary.dhcp
    * Add "server" field to default SQL NAS table, and documented it.

    Bug fixes
    * Reset "received ping" counter for Status-Server checks.  In some
      corner cases it was not getting reset.
    * Handle large VMPS attributes.
    * Count accounting responses from a home server in SNMP / statistics
      code.
    * Set EAP-Session-Resumed = Yes, not "No" when session is resumed.
    * radmin packet counter statistics are now unsigned, for numbers
      2^31..2^32.  After that they roll over to zero.
    * Be more careful about expanding data in PAP and MS-CHAP modules.
      This prevents login failures when passwords contain '{'.
    * Clean up zombie children if there were many "exec" modules being
      run for one packet, all with "wait = no".
    * re-open log file after HUP.  Closes bug #63.
    * Fix "no response to proxied packet" complaint for Coa / Disconnect
      packets.  It shouldn't ignore replies to packets it sent.
    * Calculate IPv6 netmasks correctly.  Closes bug #69.
    * Fix SQL module to re-open sockets if they unexpectedly close.
    * Track scope for IPv6 addresses.  This lets us use link-local
      addresses properly.  Closes bug #70.
    * Updated Makefiles to no longer use the shell for recursing into
      subdirs.  "make -j 2" should now work.
    * Updated raddb/sql/mysql/ippool.conf to use "= NULL".  Closes
      bug #75.
    * Updated Makefiles so that "make reconfig" no longer uses the shell
      for recursing into subdirs, and re-builds all "configure" files.
    * Used above method to regenerate all configure scripts.
      Closes bug #34.
    * Updated SQL module to allow "server" field of "nas" table
      to be blank: "".  This means the same as it being NULL.
    * Fixed regex realm example.  Create Realm attribute with value
      of realm from User-Name, not from regex.  Closes bug #40.
    * If processing a DHCP Discover returns "fail / reject", ignore
      the packet rather than sending a NAK.
    * Allow '%' to be escaped in sqlcounter module.
    * Fix typo internal hash table.
    * For PEAP and TTLS, the tunneled reply is added to the reply,
      rather than integrated via the operators.  This allows multiple
      VSAs to be added, where they would previously be discarded.
    * Make request number unsigned.  This changes nothing other than
      the debug output when the server receives more than 2^31 packets.
    * Don't block when reading child output in 'exec wait'.  This means
      that blocked children get killed, instead of blocking the server.
    * Enabled building without any proxy functionality
    * radclient now prefers IPv4, to match the default server config.
    * Print useful error when a realm regex is invalid
    * relaxed rules for preprocess module "with_cisco_vsa_hack".  The
      attributes can now be integer, ipaddr, etc.  (i.e. non-string)
    * Allow rlm_ldap to build if ldap_set_rebind_proc() has only
      2 arguments.
    * Update configure script for rlm_python to avoid dynamic linking
      problems on some platforms.
    * Work-around for bug #35
    * Do suid to "user" when running in debug mode as root
    * Make "allow_core_dumps" work in more situations.
    * In detail file reader, treat bad records as EOF.
      This allows it to continue working when the disk is full.
    * Fix Oracle default accounting queries to work when there are no
      gigawords attributes.  Other databases already had the fix.
    * Fix rlm_sql to show when it opens and closes sockets.  It already
      says when it cannot connect, so it should say when it can connect.
    * "chmod -x" for a few C source files.
    * Pull update spec files, etc. from RedHat into the redhat/ directory.
    * Allow spaces when parsing integer values.  This helps people who
      put "too much" into an SQL value field.


author: Nalin Dahyabhai <nalin@redhat.com> - 2.1.9-3
changelog:
  - Resolves: bug #629951
    override LINK_MODE at compile-time to add -pie to linker flags, so that
    radiusd will be built as a PIE


author: John Dennis <jdennis@redhat.com> - 2.1.10-1
changelog:
  - Upgrade to latest upstream release
    Feature improvements
    * Install the "radcrypt" program.
    * Enable radclient to send requests containing MS-CHAPv1
      Send packets with: MS-CHAP-Password = "password".  It will
      be automatically converted to the correct MS-CHAP attributes.
    * Added "-t" command-line option to radtest.  You can use "-t pap",
     "-t chap", "-t mschap", or "-t eap-md5".  The default is "-t pap"
    * Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120
      This change and the previous one makes PEAP testing much easier.
    * Added more documentation and examples for the "passwd" module.
    * Added dictionaries for RFC 5607 and RFC 5904.
    * Added note in proxy.conf that we recommend setting
      "require_message_authenticator = yes" for all home servers.
    * Added example of second "files" configuration, with documentation.
      This shows how and where to use two instances of a module.
    * Updated radsniff to have it write pcap files, too.  See '-w'.
    * Print out large WARNING message if we send an Access-Challenge
      for EAP, and receive no follow-up messages from the client.
    * Added Cached-Session-Policy for EAP session resumption.  See
      raddb/eap.conf.
    * Added support for TLS-Cert-* attributes. For details, see
      raddb/sites-available/default, "post-auth" section.
    * Added sample raddb/modules/{opendirectory,dynamic_clients}
    * Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
    * Added RFCs 5607, 5904, and 5997.
    * For EAP-TLS, client certificates can now be validated using an
      external command.  See eap.conf, "validate" subsection of "tls".
    * Made rlm_pap aware of {nthash} prefix, for compatibility with
      legacy RADIUS systems.
    * Add Module-Failure-Message for mschap module (ntlm_auth)
    * made rlm_sql_sqlite database configurable.  Use "filename"
      in sql{} section.
    * Added %{tolower: ...string ... }, which returns the lowercase
      version of the string.  Also added %{toupper: ... } for uppercase.

    Bug fixes
    * Fix endless loop when there are multiple sub-options for
      DHCP option 82.
    * More debug output when sending / receiving DHCP packets.
    * EAP-MSCHAPv2 should return the MPPE keys when used outside
      of a TLS tunnel.  This is needed for IKE.
    * Added SSL "no ticket" option to prevent SSL from creating sessions
      without IDs.  We need the IDs, so this option should be set.
    * Fix proxying of packets from inside a TTLS/PEAP tunnel.
      Closes bug #25.
    * Allow IPv6 address attributes to be created from domain names
      Closes bug #82.
    * Set the string length to the correct value when parsing double
      quotes.  Closes bug #88.
    * No longer look users up in /etc/passwd in the default configuration.
      This can be reverted by enabling "unix" in the "authorize" section.
    * More #ifdef's to enable building on systems without certain
      features.
    * Fixed SQL-Group comparison to register only if the group
      query is defined.
    * Fixed SQL-Group comparison to register <instance>-SQL-Group,
      just like rlm_ldap.  This lets you have multiple SQL group checks.
    * Fix scanning of octal numbers in "unlang".  Closes bug #89.
    * Be less aggressive about freeing "stuck" requests.  Closes bug #35.
    * Fix example in "originate-coa" to refer to the correct packet.
    * Change default timeout for dynamic clients to 1 hour, not 1 day.
    * Allow passwd module to map IP addresses, too.
    * Allow passwd module to be used for CoA packets
    * Put boot filename into DHCP header when DHCP-Boot-Filename
      is specified.
    * raddb/certs/Makefile no longer has certs depend on index.txt and
       serial.  Closes bug #64.
    * Ignore NULL errorcode in PostgreSQL client.  Closes bug #39
    * Made Exec-Program and Exec-Program-Wait work in accounting
      section again.  See sites-available/default.
    * Fix long-standing memory leak in esoteric conditions.  Found
      by Jerry Nichols.
    * Added "Password-With-Header == userPassword" to raddb/ldap.attrmap
      This will automatically convert more passwords.
    * Updated rlm_pap to decode Password-With-Header, if it was base64
      encoded, and to treat the contents as potentially binary data.
    * Fix Novell eDir code to use the right function parameters.
      Closes bug #86.
    * Allow spaces to be escaped when executing external programs.
      Closes bug #93.
    * Be less restrictive about checking permissions on control socket.
      If we're root, allow connecting to a non-root socket.
    * Remove control socket on normal server exit.  If the server isn't
      running, the control socket should not exist.
    * Use MS-CHAP-User-Name as Name field from EAP-MSCHAPv2 for MS-CHAP
      calculations.  It *MAY* be different (upper / lower case) from
      the User-Name attribute.  Closes bug #17.
    * If the EAP-TLS methods have problems, more SSL errors are now
      available in the Module-Failure-Message attribute.
    * Update Oracle configure scripts.  Closes bug #57.
    * Added text to DESC fields of doc/examples/openldap.schema
    * Updated more documentation to use "Restructured Text" format.
      Thanks to James Lockie.
    * Fixed typos in raddb/sql/mssql/dialup.conf.  Closes bug #11.
    * Return error for potential proxy loops when using "-XC"
    * Produce better error messages when slow databases block
      the server.
    * Added notes on DHCP broadcast packets for FreeBSD.
    * Fixed crash when parsing some date strings.  Closes bug #98
    * Improperly formatted Attributes are now printed as "Attr-##".
      If they are not correct, they should not use the dictionary name.
    * Fix rlm_digest to be check the format of the Digest attributes,
      and return "noop" rather than "fail" if they're not right.
    * Enable "digest" in raddb/sites-available/default.  This change
      enables digest authentication to work "out of the box".
    * Be less aggressive about marking home servers as zombie.
      If they are responding to some packets, they are still alive.
    * Added Packet-Transmit-Counter, to track detail file retransmits.
      Closes bug #13.
    * Added configure check for lt_dladvise_init().  If it exists, then
      using it solves some issues related to libraries loading libraries.
    * Added indexes to the MySQL IP Pool schema.
    * Print WARNING message if too many attributes are put into a packet.
    * Include dhcp test client (not built by default)
    * Added checks for LDAP constraint violation.  Closes bug #18.
    * Change default raddebug timeout to 60 seconds.
    * Made error / warning messages more consistent.
    * Correct back-slash handling in variable expansion.  Closes bug #46.
      You SHOULD check your configuration for backslash expansion!
    * Fix typo in "configure" script (--enable-libltdl-install)
    * Use local libltdl in more situations.  This helps to avoid
      compile issues complaining about lt__PROGRAM__LTX_preloaded_symbols.
    * Fix hang on startup when multiple home servers were defined
      with "src_ipaddr" field.
    * Fix 32/64 bit issue in rlm_ldap.  Closes bug #105.
    * If the first "listen" section defines 127.0.0.1, don't use that
      as a source IP for proxying.  It won't work.
    * When Proxy-To-Realm is set to a non-existent realm, the EAP module
      should handle the request, rather than expecting it to be proxied.
    * Fix IPv4 issues with udpfromto.  Closes bug #110.
    * Clean up child processes of raddebug.  Closes bugs #108 and #109
    * retry OTP if the OTP daemon fails.  Closes bug #58.
    * Multiple calls to ber_printf seem to work better.  Closes #106.
    * Fix "unlang" so that "attribute not found" is treated as a "false"
      comparison, rather than a syntax error in the configuration.
    * Fix issue with "Group" attribute.


author: John Dennis <jdennis@redhat.com> - 2.1.10-3
changelog:
  - Resolves: #644100, Rebase to current release
  - Fix 666589 - removing freeradius from system does not delete the user "radiusd"
    fix scriptlet argument testing, simplify always exiting with zero


author: John Dennis <jdennis@redhat.com> - 2.1.10-5
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: Tomas Hozza <thozza@redhat.com> - 0-0.8
changelog:
  - Bumping release to 0.8 to avoid update path from RHEL5
  - changing the way how Netlink source address is validated (#872593)
  - fix for long names from readdir (#872566)
  - applied reasonable Debian/Ubuntu patches (#872584)


author: Tomas Hozza <thozza@redhat.com> - 0-0.9
changelog:
  - Fix a typo in hv_set_ifconfig.sh script
  - Fix creation process of ifcfg-* files when doing IP injection
  - Use CLOEXEC when opening pool files to prevent FD leaking
  - Changes in SPEC file:
   - remove/create %{_sharedstatedir}/hyperv if removing/installing package
   - install scripts without ".sh" extension


author: Tomas Hozza <thozza@redhat.com> - 0-0.10
changelog:
  - Fix segfault when cgred is running (#920032)
  - Fix errors found by static analysis of code (#965944)
  - Start hypervkvpd only if Hyper-V drivers are loaded (#962565)


author: Tomas Hozza <thozza@redhat.com> - 0-0.11
changelog:
  - Fix initscript test if Hyper-V drivers are loaded (#978300)
  - Build the daemon with full RELRO and PIE (#977861)


author: Ade Lee <alee@redhat.com> 1.0.0-14
changelog:
  - Resolves: #643546 - [RFE] Add nuxwdog to RHEL.
  - Remove old encryption scheme
  - Store passwords in kernel keyring


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-80
changelog:
  - Release 1.2.11.15-80
  - Resolves: #1316869 - ns-slapd general protection ip:7f570c56afd5 sp:7f56dc7edce0 error:0 in libc-2.12.so (DS 48944)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-82
changelog:
  - Release 1.2.11.15-82
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-83
changelog:
  - Release 1.2.11.15-83
  - Resolves: #1327065 - After updating server, component nss-3.21.0-0.3.el6_7.x86_64, some client applications cannot connect to server (DS 48798)
  - Resolves: #1266920 - invalid message about write_changelog_and_ruv on consumers (DS 47801)
  - Resolves: #1330758 - add a nsTLS1.0 on or off new configuration parameter to cn=encryption,cn=config in RHEL 6 389-ds-base (DS 48816)
  - Resolves: #1369572 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: #1371706 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: #1371678 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)
  - Resolves: #1370145 - cannot reindex retrochangelog (DS 47619)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-84
changelog:
  - Release 1.2.11.15-84
  - Resolves: #1352109 - Replication stops working only when fips mode is set to true  (DS 48909)
  - Resolves: #1372420 - DES to AES backport issues (DS 47462)
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)
  - Resolves: #1382386 - Directory Server accepts a wrong userdn macro ACI (DS 449)
  - Resolves: #1382519 - 1.2.11 only -- coverity fixes (DS 49004)
  - Resolves: #1387022 - specific search with sizelimit=1 sometimes returns no entry (DS 47703)
  - Resolves: #1387772 - trace args debug logging must be more restrictive (DS 49009)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-85
changelog:
  - Release 1.2.11.15-85
  - Resolves: #1372420 - DES to AES backport issues (DS 47462)
  - Resolves: #1391324 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-86
changelog:
  - Release 1.2.11.15-86
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 49049)
  - Resolves: #1400997 - ldif2db.pl script shows wrong usage for -n as instance, instead of database (DS 49070)
  - Resolves: #1403754 - ns-slapd crashes during tickets/ticket48665_test.py (DS 48665)
  - Resolves: #1410645 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
  - Resolves: #1399600 - ns-slapd segfaults during execution of tickets/ticket47966_test.py (DS 47966, DS 48987)
  - Resolves: #1402012 - Importing big ldif file with duplicate DNs throwing "unable to flush" error
  - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-87
changelog:
  - Release 1.2.11.15-87
  - Resolves: #1391701 - do not treat missing csn as fatal (DS 49020)
  - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-88
changelog:
  - Release 1.2.11.15-88
  - Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973)
  - Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-89
changelog:
  - Release 1.2.11.15-89
  - Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3.0-4
changelog:
  - User global instead of define as per Packaging Guidelines.
  - Fix indentation for Version and Release.


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.1
changelog:
  - Added flag so that debuginfo is built into classfiles (rhbz# 796400)
  - Updated rhino.patch to build scripting support (rhbz# 796398)


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.2
changelog:
  - Resolved rhbz#740762: java.library.path is missing some paths
  - Unified spec file for x86, x86_64, ARM and s390
    - Integrated changes from Dan Horák <dhorak@redhat.com> for Zero/s390
    - Integrated changes from Chris Phillips <chphilli@redhat.com> for Zero/ARM


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6
changelog:
  - Imported from Fedora into RHEL 6.3 branch
  - Removed unused macros
  - Removed rh740762 patch (removed from Fedora now too)
  - Disabled system lcms (not available in RHEL6)
  - Updated virtual provides to provide "7" specific items
  - Made exclusive arch for i686 and x86_64


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.1
changelog:
  - Synched with 7.0 branch
  - Removed unnecessary unsetting of USE_SYSTEM_LCMS
  - Added SystemTap fixes from Mark Wielaard


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.3
changelog:
  - Added ALT_STRIP_POLICY="no_strip" flag so that binaries are not stripped
  - Collapsed if cases for x86
  - Decreased priority
  - Removed xalan and xerces reqs in favor of libxslt which is what we use


author: Sumit Bose <sbose@redhat.com> - 1.0.108-1
changelog:
  - Update to ctdb version 1.0.108
   - added fix for bz537223
   - added tdb-tools to Requires, fixes bz526479


author: Sumit Bose <sbose@redhat.com> - 1.0.108-2
changelog:
  - substituted $RPM_BUILD_ROOT by %{buildroot}
   - fix permissions on event scripts
   - Updated to ctdb version 1.0.108 maintenance release 3,
     git commit f24338e68c462e5cdee3194bb8f3ba18c3ca4672


author: Sumit Bose <sbose@redhat.com> - 1.0.112-1
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 14,
     git commit f5ac659e4df9ba6ee4652aeb9b4f5a01b532fd99
   - resolves: #583771


author: Tim Jackson <rpm@timj.co.uk> - 3.0.19-1
changelog:
  - Update to 3.0.19
  - Fix PHP Zend API/ABI dependencies to work on EL-4/5
  - Fix "License" tag
  - Fix encoding of "NOTICE" file
  - Add registration via PECL


author: Remi Collet <Fedora@FamilleCollet.com> - 3.1.3p1-1
changelog:
  - update to 3.1.3 patch1 (beta, for PHP 5.3 support)
  - add test suite (disabled for http://pecl.php.net/bugs/bug.php?id=16793)
  - add use_request_time, lazy_classes, lazy_functions options (apc.ini)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.9-1
changelog:
  - update to 3.1.9 (bugfix, stable) (#662655)
  - create -devel subpackage with header files
  - ship apc.php for easier referral in the config files


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-6
changelog:
  - fix for uninit defect (revealed by Coverity) added with %patch11.
  - recovered traditional behaviour of '--keep-old-files' option and added new
    option '--skip-old-files' (#799252)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-7
changelog:
  - disable tests/remfiles01.at for running as a privileged user (#687972)
  - fix undesired error exit on receiving SIGPIPE during performing --list
    operation (#807728) and related fix for test suite -- skip SIGPIPE-dependent
    tests in environments ignoring SIGPIPE


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-8
changelog:
  - fix for bad file matching during extracting concrete files from an archive
    (backported fix from fedora 14) (#841308)
  - typo - better separate comments in spec file


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-9
changelog:
  - backport also --listed-incremental crash fix, this patch is in upstream and in
    fedora from f14 (related to #841308)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-10
changelog:
  - backport upstream patch to make sure that file matching is done before file
    file-name transformation (#875727)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-11
changelog:
  - avoid crash by backporting upstream patch for internal construction of
    file-name hash table (#877769).


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-12
changelog:
  - better auto-recognize xz compressed archives (#1056672)
  - fix --verify option (#923359)
  - fnmatch fixes (#1034360)


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-14
changelog:
  - fix error while storing UID > 2^21 into posix format archive (rhbz#1247788)
  - don't mistakenly set default ACLs (#1220891)


author: Petr Kubat <pkubat@redhat.com> - 1.23-15
changelog:
  - fix error when compressing/listing large sparse files (#1334559)
  - improve sparse mode in genfile for build-time-testsuite purposes


author: Honza Horak <hhorak@redhat.com> - 7.1-6
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16,
    even in case of DAO writing
    Resolves: #807474


author: Nalin Dahyabhai <nalin@redhat.com> - 1.6-1
changelog:
  - update to 1.6
  - add suggested summary, buildrequires, and modify install call as suggested
    by package review (#226021)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Adam Tkac <atkac redhat com> 32:9.7.3-6.P3
changelog:
  - load/unload dyndb plugins on appropriate places to avoid crashes (#725577)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)
  - nsupdate returned zero when target zone didn't exist (#700097)
  - readd configtest target to initscript
  - print "the working directory is not writable" as debug message
  - fix some Coverity warnings


author: Adam Tkac <atkac redhat com> 32:9.7.3-8.P3.1
changelog:
  - fix race condition in resolver.c:validated()
  - improve error handling in zone.c:zone_refreshkeys() to avoid
    hang during shutdown


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-7
changelog:
  - fix package License: field, there *are* sources with BSD header
  - distribute README files and COPYING in package


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-10
changelog:
  - removed OpenIPMI-gui subpackage, because TCL is compile without
    multithreading support and the gui relies on it (#588332)


author: Miloslav Trmač <mitr@redhat.com> - 0.3.1-4
changelog:
  - Clarify documentation about which block device to use as an argument
    Resolves: #636541
  - Report readable error messages instead of random characters in some cases
    Resolves: #638732
  - Make passphrase prompts interruptable, report incorrect passphrases
    Resolves: #641111
  - Ask for passphrases only after checking for easily detectable problems
    Resolves: #643897


author: Doug Ledford <dledford@redhat.com> - 0.5-3
changelog:
  - Upstream has updated the libnes tarball without changing the version.  Pick
    up the libnes-0.5.tar.gz tarball that's dated 13-Jun-2008
  - Resolves: bz451470


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033502


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-1
changelog:
  - Update to Ruby 1.8.7-p374.
    * Remove Patch41: ruby-ppc64-segv-fix.patch; subsumed
    * Remove Patch45: ruby-1.8.7-CVE-2011-0188.patch; subsumed
    * Remove Patch46: ruby-1.8.7-FIPS.patch; subsumed
    * Remove Patch47: ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch; subsumed
    * Remove Patch48: ruby-1.8.7-p352-CVE-2011-4815.patch; subsumed
    * Remove Patch49: ruby-1.8.7-p358-marshal-load-segv-fix.patch; subsumed
    * Remove Patch50: ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch; subsumed
    * Remove Patch51: ruby-2.0.0-add-missing-rexml-require.patch; subsumed
    * Remove Patch52: ruby-1.8.7-p371-CVE-2012-4481.patch; subsumed
    * Remove Patch53: ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch; subsumed
    Resolves: rhbz#830098
  - Enable ECC support, provided by OpenSSL, in Ruby
    * ruby-1.9.3-p482-Fix-build-against-OpenSSL-with-enabled-ECC-curves.patch
    Resolves: rhbz#1033864
  - Exclude test that fails when issuing a certificate with RSA signature and
    DSS1 digest for earlier OpenSSL versions when used in conjunction with
    OpenSSL 1.0.1.
    * ruby-1.9.3-p172-Exclude-failing-tests-written-for-earlier-OpenSSL.patch
    Resolves: rhbz#1034351
  - Rename Tracer.fire to SystemTap.fire to avoid conflict with Ruby's tracer.
    Resolves: rhbz#784766


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-2
changelog:
  - Replace hardcoded MD5 by sha256 to prevent SSL server failure in FIPS mode.
    * ruby-1.8.7-p374-Replace-md5-by-sha256-to-fix-SSL-server-FIPS-compatibility.patch
  - Resolves: rhbz#802946


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163994
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163994


author: Tomas Bzatek <tbzatek@redhat.com> - 0.17-4
changelog:
  - Require gnome-terminal to have at least one terminal installed (#716398)
  - Update japanese translation (#630236)
  - Fix terminal invocation parameters (#640496)


author: Jack Magne <jmagne@redhat.com>= 1.1.0-22
changelog:
  - Resolves: 729027 - Debuginfo package issues in esc
  - Resolves: 253077 - ESC windows should keep the same size if the user resized them
  - Resolves: 682216 - [abrt] esc-1.1.1.0-21.el6 __strcmp_ssse3: Process /usr/lib/esc-1.1.1.0/escd 
  -    was killed by singnal 11 (SIGSEGV)
  - Resolves: 702683 - esc-prefs.js file has a typo


author: Jack Magne <jmagne@redhat.com>= 1.1.0-26
changelog:
  - Resolve bugs #981156 and #961582. One minor permissions issue, the other fix to malformed desktop file.


author: Jan Pokorny <jpokorny@redhat.com> - 0.16.2-28
changelog:
  - Fix cluster-snmp module causes net-snmp to SEGV when told to reload
    Resolves: rhbz#888543
  - Fix modclusterd crashes with segfault in IPv4 only environment
    Resolves: rhbz#951470


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-31
changelog:
  - modcluster: Overload stop_service so that it can fulfill its nominal promise
    Resolves: rhbz#1114622


author: Jan Pokorný <jpokorny@redhat.com> - 0.16.2-35
changelog:
  - modcluster: Manage cmirrord along with other services. Original patch
                provided by Curtis Taylor of IBM, heavily reworked later.
  - Resolves: rhbz#1219617


author: Doug Ledford <dledford@redhat.com> - 3.3.5-1
changelog:
  - Update to latest upstream release.  We need various defines in ib_types.h
    for the latest ibutils package to build properly, and the latest ibutils
    package is needed because we found licensing problems in the older
    tarballs during review.


author: Doug Ledford <dledford@redhat.com> - 3.3.9-1
changelog:
  - Update to latest upstream version (3.3.5 -> 3.3.9)
  - Add /etc/sysconfig/opensm for use by opensm init script
  - Enable the ability to start more than one instance of opensm for multiple
    fabric support
  - Enable the ability to start opensm with a priority other than default for
    support of backup opensm instances
  - Related: bz725016
  - Resolves: bz633392


author: Doug Ledford <dledford@redhat.com> - 3.3.12-1
changelog:
  - Generate the opensm.conf file instead of shipping a static one as a source
  - Update to latest upstream release (FDR link speed support)
  - Resolves: bz750609


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream release
  - Add patch to support specifying subnet_prefix on command lien
  - Update init script to pass unique subnet_prefix's when using the GUID
    method of starting multiple instances
  - Fix up LSB init script headers
  - Resolves: bz754196


author: Doug Ledford <dledford@redhat.com> - 3.3.15-1
changelog:
  - Update to latest upstream source (adds more SRIOV support)
  - Fix init script when no config files are present
  - Related: bz756396


author: Matthias Saou <http://freshrpms.net/> 1.70-1
changelog:
  - Update to 1.7.0, as 1.70 to avoid introducing an epoch for now...
  - Remove no longer provided perlconnect parts.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.70-8
changelog:
  - Reformat spec with tabs.
  - By report of Thomas Sondergaard (BZ#511162) Add -DXP_UNIX=1 -DJS_THREADSAFE=1 flags and nspr requires into libjs.pc


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.1
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.2
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.3
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.6
changelog:
  - Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
    overflows in JPEG, PNG and BMP reader implementations


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.7
changelog:
  - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
    processing invalid Escher graphics records length in the Powerpoint
    documents


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.26.0-1
changelog:
  - Updated to latest release
  - Removed patches that have been applied upstream
  - Fixed man page paths (mann -> man3)
  - Disabled mono and ocaml for ARM (Jitesh Shah, BZ#532047)
  - Disabled regression tests on sparc64 as well as ppc/ppc64 (Dennis Gilmore)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-5
changelog:
  - Fixed broken links in index.html (doc-index-fix patch)
    Resolves: rhbz#624658
  - Enabled and fixed testsuite (testsuite-sigsegv-fix, rtest-errout-fix patches)
    Resolves: rhbz#624690
  - Fixed rpmlint warnings on spec file
  - Rebuilt with updated swig
    Resolves: rhbz#679715
  - Fixed gtk plugin program-name (gtk-progname patch)
    Resolves: rhbz#640247
  - Added urw-fonts to BuildRequires
  - Compiled with -fno-strict-aliasing


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-8
changelog:
  - All docs are now installed into /usr/share/doc/graphviz-%{version}
  - Demos packaged as docs not to automatically bring in unnecessary deps
    Resolves: rhbz#821920
  - Removed -ffast-math, added -ffloat-store (on i386) to fix arithmetic on i386
    Resolves: rhbz#772637
  - Fixed build failure due to change in php_zend_api macro type


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-7
changelog:
  - fixes memory corruption on git shortlog
  - add -f option for "git submodule add" to add files even when
    these are included in .gitignore
  - improve performance of extremly slow http(s)
  - fix cloning using http(s) protocol when redirection is requested
    Resolves: #874659 #1207253 #1237395 #1289984


author: Petr Stodulka <pstodulk@redhat.com> - 1.7.1-8
changelog:
  - fixes previous patch which add -f option for "git submodule add"
    which incorectly used unsupported option --ignore-missing for
    "git add --dry-run"
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1207253 #1368384


author: Laine Stump <laine@redhat.com> - 0.1.7-1
changelog:
  - rebase to netcf-0.1.7
    - Resolves: rhbz#651032
    - remove all iptables manipulation
    - Resolves: rhbz#633346
    - Resolves: rhbz#629206


author: Laine Stump <laine@redhat.com> - 0.1.8-1
changelog:
  - rebase to netcf-0.1.8
    - resolves rhbz#616060
    - show ifup output in relevant error message
    - resolves rhbz#662057
    - pkgconfig file should not list augeas, libxml or libxslt
    - resolves rhbz#681078
    - Need to input 'quit' twice to quit ncftool after an erroneous command
    - resolves rhbz#703318
    - %desc field in specfile has a typo
    - resolves rhbz#705061
    - rebase netcf for RHEL6.2
    - resolves rhbz#708476
    - RFE: transaction-oriented API for handling host interfaces


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - rebase to netcf-0.1.9
    - resolves rhbz#616060
    - always add <bridge> element to bridge, even if there is no physdev present
    - resolves rhbz#713180
    - don't log error if interface isn't found in kernel during status report
    - resolves rhbz#713286
    - update gnulib


author: Laine Stump <laine@redhat.com> - 0.1.9-2
changelog:
  - resolves rhbz#728184
    - eliminate potential use of uninitialized index/pointer in add_bridge_info
    - resolves rhbz#736920
    - resolves rhbz#739505
    - fix missing vlan/bond/ethernet info in dumpxml --live


author: Laine Stump <laine@redhat.com> - 0.1.9-3
changelog:
  - resolves rhbz#886862
    - libnl addr and link caches are not thread-safe, leading to
      libvirtd crashes


author: Laine Stump <laine@redhat.com> - 0.1.9-4
changelog:
  - resolves rhbz#844578
    - check IFF_RUNNING before considering and interface "active"
    - resolves rhbz#848722
    - fix ipcalc_netmask


author: Laine Stump <laine@redhat.com> - 0.2.4-1
changelog:
  - rebase to netcf-0.2.4
   - resolves rhbz#851748
   - avoid use of uninitialized data when getting mac address
     resolves rhbz#1052156
   - eliminate duplicate quotes in bonding options
   - resolves rhbz#879055
   - wait for IFF_UP and IFF_RUNNING after calling ifup
   - don't require IFF_RUNNING for bridge devices
   - avoid memory leak in debian when listing interfaces
   - limit interface names to IFNAMSIZ-1 characters in length
   - support systemd for netcf-transaction


author: Laine Stump <laine@redhat.com> - 0.2.4-2
changelog:
  - resolves rhbz#1113978
   - Fix name of DHCPV6C variable in ifcfg files
   - resolves rhbz#1116314
   - Fix netmask for prefix == 32
   - apply patches to source with git rather than patch


author: Laine Stump <laine@redhat.com> - 0.2.4-3
changelog:
  - resolves rhbz#1208894
   - Remove extraneous single quotes from IPV6ADDR_SECONDARIES
   - resolves rhbz#1208897
   - Bad parsing of network-scripts/ifcfg-xxxx files
   - resolves rhbz#1165966
   - resolves CVE-2014-8119
   - augeas path expression injection via interface name


author: Martin Osvald <mosvald@rehat.com> - 2.2.2-15
changelog:
  - Resolves: #816486 - Timestamp problem
  - Resolves: #849993 - deny_file, hide_file
  - Resolves: #863061 - "service vsftpd stop" not stopping all vsftpd processes
  - Resolves: #894340 - The vsftpd doesn't remove failed upload when the delete_failed_uploads
    is enabled and the network cable is unplagged
  - Resolves: #1058695 - [RFE] vsftpd does not support DHE cipher suites
  - Resolves: #1058710 - [RFE] vsftpd does not support ECDHE cipher suites
  - Resolves: #1065361 - closing a non-opened file when connection fails with a message "Security: Bad IP connecting." 
  - Resolves: #1103754 - ssl_request_cert paragraph in the vsftpd.conf man page gets rendered incorrectly
  - Resolves: #1182928 - [RFE] vsftpd should permit specified TLS versions only.


author: Ville Skyttä <ville.skytta at iki.fi> - 1:3.2.5-7
changelog:
  - Get rid of csh dependency, add missing one on bc (#435993).
  - Build with $RPM_OPT_FLAGS (#329831).
  - Convert specfile to UTF-8.
  - Add URL, fix source URL.
  - Escape macros in changelog.
  - Improve summary.


author: Steven Pritchard <steve@kspei.com> 1:0.4304-1
changelog:
  - Update to DateTime 0.4304.
  - Update to DateTime::TimeZone 0.78.
  - Update to DateTime::Locale 0.41.


author: Steven Pritchard <steve@kspei.com> 1:0.4401-1
changelog:
  - Update to DateTime 0.4401.
  - Update to DateTime::Locale 0.42.
  - Update to DateTime::TimeZone 0.8301.


author: Stepan Kasal <skasal@redhat.com> - 1:0.5300-1
changelog:
  - new upstream version
  - use Build.PL as Makefile.PL no longer exists
  - use iconv to recode to utf-8, not a patch
  - update BuildRequires
  - drop Provides: perl(DateTime::TimeZoneCatalog), it is no longer there
  - use filtering macros


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Marek Grac <mgrac@redhat.com> 0.8.4-15
changelog:
  - Resolves: #522230 - 'service pulse stop' does not kill nanny process
  - Resolves: #533113 - piranha-0.8.4-13.el5 breaks LVS


author: Marek Grac <mgrac@redhat.com> 0.8.5-6
changelog:
  - Resolves: #604741 - piranha does not work with SELinux
  - Resolves: #593730 - LVS rebooted simultaneously cause problems


author: Marek Grac <mgrac@redhat.com> 0.8.5-8
changelog:
  - "service pulse reload" is resulting in lvsd segfaulting
    Resolves: rhbz#703146
  - a failure to start a single nanny kills off *all* running nannys
    Resolves: rhbz#593728


author: Ryan O'Hara <rohara@redhat.com> 0.8.5-9
changelog:
  - Resolves: #628872 - init script searches cwd which can cause SELinux denials
  - Resolves: #706881 - killing nanny/lvsd process should cause pulse to exit
  - Resolves: #708036 - too many VIPs can causes HTTP 414 error
  - Resolves: #729828 - add CIDR /23 netmask to drop-down menus


author: Petr Machata <pmachata@redhat.com> - 1.41.0-21
changelog:
  - Fix building of Python module for Boost-MPI and ship it
    (boost-1.41.0-mpi-python.patch, __init__.py)


author: Jonathan Wakely <jwakely@redhat.com> - 1.41.0-22
changelog:
  - Fix shared_ptr to work with recent GCC and C++11.
    (boost-1.41.0-shared_ptr-deleted-copy.patch)
  - Resolves: #1108268


author: Petr Machata <pmachata@redhat.com> - 1.41.0-23
changelog:
  - Fix conformance problems in Boost.Interprocess, Boost.Intrusive and
    Boost.Graph
    (boost-1.41.0-graph-conformance.patch,
    boost-1.41.0-interprocess-conformance.patch,
    boost-1.41.0-interprocess-conformance-maxval.patch,
    boost-1.41.0-intrusive-conformance.patch)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-24
changelog:
  - Fix conformance problems in Boost.Numeric (uBLAS) and
    Boost.CircularBuffer (boost-1.41.0-numeric-conformance.patch,
    boost-1.41.0-circular_buffer-adl.patch)


author: Michal Schmidt <mschmidt@redhat.com> - 1.41.0-25
changelog:
  - mpich obsoleted mpich2. Build against mpich and rename subpackages
    accordingly. Obsolete mpich2 subpackages.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-26
changelog:
  - Change Requires: and other package references to use %{?_isa}, so
    that dependencies are arch-aware.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-27
changelog:
  - Fix the way MPI_VERSION is compared with (>=2 rather than ==2) so
    that an arg-less boost::mpi::environment ctor is exposed for MPI
    libraries with MPI_VERSION of 3.
    (boost-1.41.0-mpi-NOARG_INIT.patch)
  - Fix boost::interprocess::move (boost-1.41.0-interprocess-move.patch)
  - Fix copy construction of boost::weak_ptr
    (boost-1.41.0-weak_ptr-copy.patch)
  - Undo the change of non-Requires: package references to not use
    %{?_isa} again.


author: Peter Lemenkov <lemenkov@gmail.com> - 2.2.14-4
changelog:
  - Properly install *.desktop files
  - No need to ship INSTALL in docs
  - Use macros instead of hardcoded /usr/share and /usr/include
  - fixed permissions on some doc- and src-files
  - Almost all rpmlint messages are gone now


author: Tom Lane <tgl@redhat.com> 2.2.14-6
changelog:
  - Switch to building against qt4, not qt3.  This means the DataManager,
    DataManagerII, and odbctest applications are gone.
  Resolves: #514064
  - Use Driver64/Setup64 to eliminate need for hand-adjustment of odbcinst.ini
  Resolves: #514688
  - Fix misdeclaration of SQLBIGINT and SQLUBIGINT in generated header files
  Resolves: #518623


author: Tom Lane <tgl@redhat.com> 2.2.14-9
changelog:
  - Sync with Fedora head
  - Fix bug preventing drivers from being selected in ODBCConfig
  Resolves: #554501
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparcv9 isn't a possible uname -i output


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix incorrect max cpu frequency
    Resolves: #971053
  - Fix wrong UserModeTime and KernelModeTime
    Resolves: #974071
  - Fix restart of scfbd service in provider-register script
    Resolves: #1179878


author: Pavel Šimerda <psimerda@redhat.com> - 1.0.1-3
changelog:
  - Resolves: #738244 - provide libnetfilter_queue package for RHEL 6.6
  - use a modified EPEL6 spec file


author: Michal Sekletar <msekleta@redhat.com> - 0.6.25-17
changelog:
  - produce better error message when client reaches maximum number of dbus objects (#1292862)
  - don't print backtrace if avahi-discover can't connect to avahi-daemon (#1110349)
  - introduce new subpackage with python bindings (#753905)
  - avahi-daemon initscript improvements (#584766)
  - avahi-dnsconfd initscript improvements (#584761)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-10
changelog:
  - Resolves: #1330575 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-11
changelog:
  - Related: #1330575 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-12
changelog:
  - Resolves: #1334500 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556
    squid34: various flaws
  - Resolves: #1334507 - CVE-2016-4553 squid34: squid: Cache poisoning 
    issue in HTTP Request handling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-13
changelog:
  - Resolves: #1303053 - Squid crashes with 'assertion failed: disk.cc:377:
    "fd >= 0"' after reloading the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-15
changelog:
  - Resolves: #1415874 - squid34 does not fallback protocol from IPv6 to IPv4
    in HTTPS connection even if the fix in bz1303067 is applied


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.31-3
changelog:
  - Added "makefile_libjack" patch to link to libjack
  - Added BuildRequires: jack-audio-connection-kit-devel


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.40.02-1
changelog:
  - Update to version 1.40.02
  - Added patch to compile with GCC and not to link to libstdc++ (not needed)
  - Added manpage (thanks goes to Luke Yelavich from Ubuntu for writing it)


author: Ray Strode <rstrode@redhat.com> 2.28.3-22
changelog:
  - Don't show unlock dialog immediately after user locks
    screen in some multimonitor scanarios
    Resolves: #744763


author: Ray Strode <rstrode@redhat.com> 2.28.3-25
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #905935


author: Ray Strode <rstrode@redhat.com> 2.28.3-26
changelog:
  - Fix up fix-fade-on-nvidia patch from -19 to properly
    handle X servers that don't support setting gamma ramp.
    Resolves: #947671


author: Harald Hoyer <harald@redhat.com> 1.5.1-1
changelog:
  - readahead-1.5.1
  - add syslog() to collector
  - translation update
  - let upstart set console owner for collector


author: Harald Hoyer <harald@redhat.com> 1.5.3-1
changelog:
  - fix readhead for new libaudit (bug #523400)
  - don't leak file descriptors (bug #525893)
  - also collect openat() calls
  - ignore files > 10MB


author: Harald Hoyer <harald@redhat.com> 1.5.5-1
changelog:
  - version 1.5.5
  - exit readahead-collector correctly, if audit is not enabled
  - make delay of services configurable
  - make minimum memory requirement configurable
  - log to /dev/kmsg in upstart scripts
  - upstart scripts updated for upstart 0.6 (#546077, #575114)
  - Resolves: rhbz#575119, rhbz#561486


author: Harald Hoyer <harald@redhat.com> 1.5.6-1
changelog:
  - version 1.5.6
  - various bugfixes by Raphael Geissert 
    (#527498, #527505, #527508, #527509, #528781, #528785)
  - Related: rhbz#543948


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-43
changelog:
  - fix manpage typos found using aspell (#1011101)
  - fix comments about loading CA certs with NSS in man pages (#1011083)
  - fix handling of DNS cache timeout while a transfer is in progress (#835898)
  - eliminate unnecessary inotify events on upload via file protocol (#883002)
  - use correct socket type in the examples (#997185)
  - do not crash if MD5 fingerprint is not provided by libssh2 (#1008178)
  - fix SIGSEGV of curl --retry when network is down (#1009455)
  - allow to use TLS 1.1 and TLS 1.2 (#1012136)
  - docs: update the links to cipher-suites supported by NSS (#1104160)
  - allow to use ECC ciphers if NSS implements them (#1058767)
  - make curl --trace-time print correct time (#1120196)
  - let tool call PR_Cleanup() on exit if NSPR is used (#1146528)
  - ignore CURLOPT_FORBID_REUSE during NTLM HTTP auth (#1154747)
  - allow to enable/disable new AES cipher-suites (#1156422)
  - include response headers added by proxy in CURLINFO_HEADER_SIZE (#1161163)
  - disable libcurl-level downgrade to SSLv3 (#1154059)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-44
changelog:
  - use only full matches for hosts used as IP address in cookies (CVE-2014-3613)
  - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-46
changelog:
  - require credentials to match for NTLM re-use (CVE-2015-3143)
  - close Negotiate connections when done (CVE-2015-3148)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-49
changelog:
  - prevent NSS from incorrectly re-using a session (#1269660)
  - prevent test46 from failing due to expired cookie (#1277551)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12
changelog:
  - Fix spicevmc-related crash which could be triggered with older clients
    Resolves: rhbz#1163480
  - Fix crash when using VNC + QXL + rhel-6.0.0 machine type
    Resolves: rhbz#1135372


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12.1
changelog:
  - Avoid race conditions reading monitor configs from guest. This race could
    trigger memory corruption host-side
    Resolves: rhbz#1239124


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-13
changelog:
  - Fix " qemu-kvm: spicevmc.c:324: spicevmc_red_channel_alloc_msg_rcv_buf:
    Assertion `!state->recv_from_client_buf' failed." assertion during migration
    Resolves: rhbz#1264113


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-14
changelog:
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Victor Toso <victortoso@redhat.com> - 0.12.4-15
changelog:
  - Avoid spice assertion when changing sized stream
    Resolves: rhbz#1274575
  - Make red_client_{ref,unref} thread safe to avoid crash
    Resolves: rhbz#1361946


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-16
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Jaromir Capik <jcapik@redhat.com> - 6.3.2-66
changelog:
  - Resolves: rhbz#837621
  - Fixing 'sa -u' SIGSEGVs & wrong UIDs
  - Fixing the ChengeLog version typos ... 6.2.3 -> 6.3.2


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-7
changelog:
  - Fix xfs_metadump hang (#730886)
  - mkfs.xfs: don't increase agblocks past maximum (#738279)
  - Fix double reporting of quota values (#749435)
  - xfs_quota: handle malformed entries in mtab (749434)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-8
changelog:
  - mkfs.xfs: better handle misaligned 4k devices (#836433)
  - mkfs.xfs: default to physical sectorsize (#836433)
  - mkfs.xfs: clarify errors when specified AG size is too large (#730433)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-11
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#961501)
  - xfs_io: Update  man page to include chproj, lsproj (#962394)
  - xfs_io: Remove broken setfl command (#962394)
  - xfs_logprint: Handle multiply-logged fields (#962397)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#964216)
  - xfs_repair: avoid segfault with ag_stride (#93904)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-15
changelog:
  - libxfs: restrict platform_test_xfs_fd to regular files (#1018751)
  - xfs_repair: avoid segfault if reporting progress early in repair (#1020438)
  - xfs_fsr: fix SWAPEXT failures under selinux (#1024702)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-16
changelog:
  - xfs_copy: do not exit with error code if we succeed (#1100107)
  - xfs_copy: fix corruption when source fs sector size is > 512 bytes (#1104956)


author: PLD Team <feedback@pld-linux.org>
changelog:
  All persons listed below can be reached at <cvs_login>@pld-linux.org

  $Log: php-pecl-uploadprogress.spec,v $
  Revision 1.11  2009/06/21 08:24:52  adamg
  - updated to 1.0.1

  Revision 1.10  2009/04/26 17:17:17  adamg
  - license fixes Andrzej Mateja <amateja () pimpek.one.pl>

  Revision 1.9  2009/03/16 09:43:57  duddits
  - up to 1.0.0

  Revision 1.8  2009/02/01 18:39:49  adamg
  - package examples; release 2

  Revision 1.7  2009/01/23 18:32:21  adamg
  - updated to 0.9.2

  Revision 1.6  2008/08/31 10:32:30  adamg
  - updated to 0.9.1

  Revision 1.5  2008/07/19 09:26:20  adamg
  - updated to 0.9.0

  Revision 1.4  2008-02-12 15:43:10  glen
  - package .ini file; rel 1

  Revision 1.3  2007-05-24 22:48:19  qboosh
  - added md5, fixed URL

  Revision 1.2  2007/05/24 22:46:34  qboosh
  - pl

  Revision 1.1  2007/05/17 13:40:48  spider
  - init


author: Doug Ledford <dledford@redhat.com> - 1.1.4-3
changelog:
  - Bump version to something later than base libibverbs package
  - Enable valgrind support on most arches
  - Use versioned provides for our pseudo provides of libibverbs base
    packages
  - Related: bz603804


author: Doug Ledford <dledford@redhat.com> - 1.1.5-1
changelog:
  - Update to latest upstream version (1.1.4 to 1.1.5)
  - Drop libibverbs cow.patch as it is in 1.1.5 already
  - Drop ifnarch ia64 from valgrind usage as we don't build on ia64 any more
  - Make sure RPATH entries are removed from programs
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.1.6-1
changelog:
  - Update to latest upstream version (now includes native rocee support
    and FDR support)
  - Related: bz758498, bz750609


author: Phil Sutter - 2.6.32-46
changelog:
  - Resolves: #974693 - lnstat manpage insufficient
  - Resolves: #1042799 - Inconsistent detailed link information between "ip link" and "ip monitor link"
  - Resolves: #684691 - can't change the remote/local address of tunnel interface to "any" in ipip mode
  - Resolves: #1094676 - iproute2 route table querying broken for table numbers >= 2147483648
  - Resolves: #1261115 - tc does not allow to attach pfifo_fast qdisc
  - Resolves: #1229355 - ss -an shows only tcp sockets
  - Resolves: #1199867 - iproute could not show correct hoplimit info with value -1


author: Phil Sutter - 2.6.32-47
changelog:
  - Resolves: #1277102 - ip neighbour segfaults if bad mac address is used
  - Resolves: #1243413 - ip rule help output contains action reject, but this action does not work
  - Resolves: #1268058 - backport additional tcp_info dump support in ss tool
  - Resolves: #1045032 - iproute2: "ip -o link" doesn't show devices entries in a single line when reporting SR-IOV devs.
  - Resolves: #1093726 - manpage for tc needs info on filters
  - Resolves: #1265240 - ss returns zero (ok) when invalid option is added


author: Phil Sutter - 2.6.32-48
changelog:
  - Resolves: #1269814 - [6wind 6.8 Feat]: implement support for basic bridge IFA_INFO_DATA
  - Resolves: #1276591 - iproute: 'ip addr flush' failed to send flush request: Cannot assign requested address


author: Phil Sutter - 2.6.32-54
changelog:
  - Resolves: #1086512 - "ip link show" commands display Message Truncated
  - Resolves: #1301148 - [RFE] Monitoring per connection TCP retransmission


author: Karsten Hopp <karsten@redhat.com> 0.82-5
changelog:
  - drop ExcludeArch: s390 s390x as we need this package on s390x to be able to build
    p.e. udev without any hacks


author: Lukáš Nykrýn <lnykryn@redhat.com> - 003-5
changelog:
  - add support in lsusb to dump hardware hierarchy tree
  - fix coverity defects
  - add additional whitespace to lsusb.py for higher USB3 transfer rates
  - typo in man page for usb-devices
  - Resolves: #1033091, #735042, #746054, #1011232


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-1.1
changelog:
  * Also include 1.5.3 libraries so users of RHEL-6.5+ can run
    programs compiled on RHEL-6.2-
    Resolves: rhbz876315


author: Jay Fenlason <fenlason@redhat.com> 1.4.3-1.2
changelog:
  - Don't bother passing in options that the 1.4.3 configure doesn't
    understand.
  - set XFLAGS on all archs, not just x86_64.
  - Copy requires/provides filtering from openmpi so this will stop
    providing libotf.so.0
    Resolves: rhbz1097290


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-2
changelog:
  - Split into subpackages per OpenMPI version (compat-openmpi14,
    compat-openmpi15)
  - Add compat-openmpi18.
  - Resolves: rhbz1158864, rhbz1142157


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-5
changelog:
  - Rename compat-openmpiXY to openmpi-X.Y. Package names, directories,
    modulefiles.
  - Ship multiple openmpi versions:
    - openmpi-1.4   (compat with RHEL 6.0, 6.1)
    - openmpi-1.5.3 (compat with RHEL 6.2)
    - openmpi-1.5.4 (compat with RHEL 6.3, 6.4, 6.5)
    - openmpi-1.8   (compat with RHEL 6.6, 6.7)
  - Avoid breakage in transition from the compat-openmpi package from RHEL 6.7
    (was versioned as 1.4.3, but was in fact a chimera of 1.4.3 and 1.5.3,
     where really only 1.5.3 had any chance of working) by keeping the
    "compat-openmpi", "compat-openmpi-$arch" directory and module names
    for openmpi-1.5.3.
  - openmpi-1.8 keeps the module and directory unversioned names "openmpi",
    "openmpi-$arch" it had in RHEL 6.7.
  - Related: rhbz1158864


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.92
changelog:
  - Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * fix PAD and PRINT macros
  - Resolves: bz #1145442


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.93
changelog:
  - Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
    * make multipathd use uint64_t for tracking the interactive command
      fingerprint.
  - Resolves: bz #1316165


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.94
changelog:
  - Add 0251-RHBZ-1349376-fix-makefile.patch
    * make multipath use correct version of libdevmapper
  - Add 0252-RHBZ-1333334-huawei-config.patch
  - Add 0253-RHBZ-1305589-check-multipathd.patch
    * warn if multipath devices exist and mutipathd is not running
  - Add 0254-RHBZ-1310320-no-kpartx.patch
    * add skip_kpartx option to skip kpartx device creation
  - Add 0255-UPBZ-1322532-disable-reinstate.patch
    * do not reinstate unusable Implicit ALUA ghost paths
  - Add 0256-RHBZ-1324764-man-page-typo.patch
  - Add 0257-UPBZ-1328077-resize-map.patch
    * reset size if resizer operation fails
  - Add 0259-UPBZ-1343747-dont-fail-discovery.patch
    * keep multipath from failing if it fails to get information on any device
  - Add 0260-RHBZ-1364879-check-mpath-prefix.patch
    * ignore all devices that don't have a uuid starting with "mpath-"
  - Add 0261-RHBZ-1377532-disable-changed-paths.patch
    * do not use path devices that change their wwid
  - Resolves: bz #1299644, #1305589, #1310320, #1322532, #1324764, #1328077
  - Resovles: bz #1333334, #1343747, #1349376, #1364879, #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.95
changelog:
  - Modify 0254-RHBZ-1310320-no-kpartx.patch
    * fix small bug with unitialized data
  - Refresh 0261-RHBZ-1377532-disable-changed-paths.patch
  - Add 0262-RH-free-vector.patch
    * Fix coverity discovered bug in error path
  - Resolves: bz #1310320


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.96
changelog:
  - Add 0258-UPBZ-1300414-PURE_config.patch
  - Add 0264-RHBZ-1365710-no-use-after-free.patch
    * Fix two segfaults, and NULL out some structures after free
  - Add 0265-RHBZ-1390472-dont-exit.patch
    * don't exit if multipath hits recoverable errors during startup
  - Resolves: bz #1300414, #1365710, #1390472


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.97
changelog:
  - Add 0265-RHBZ-1355669-max-sectors-kb.patch
    * add "max_sectors_kb" config option to set this value on all paths
  - Change devicemapper Requires to >= 1.02.117-9.el6 (bz #1344381)
    * forces multipath to use latest version of blk-availability
  - Resolves: bz #1344381, #1355669


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.98
changelog:
  - Add 0266-RHBZ-1401391-fix-prio-put.patch
    * don't try to drop a nonexistant prio handler
  - Add 0267-RHBZ-1401769-orphan-status.patch
    * don't print out checker and device status for orphan paths
  - Resolves: bz #1401391, #1401769


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100
changelog:
  - Modify 0261-RHBZ-1377532-disable-changed-paths.patch
    * add man page information
  - Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
  - Related: #1377532


author: Jeff Layton <jlayton@redhat.com> 4.8.1-11
changelog:
  - add cifs.idmap, binaries and autoconf goop (bz 843617)
  - add getcifsacl and setcifsacl tools (bz 843612)
  - add more missing mount.cifs options to manpage (bz 843596)
  - enable PIE and RELRO (bz 838606)
  - mount.cifs: handle usernames differently for sec=krb5 (bz 826825)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-15
changelog:
  - fix several issues in cifs.idmap (bz 843617)
  - fix several issues in getcifsacl/setcifsacl (bz 843612)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-16
changelog:
  - fix even more issues in cifs.idmap (bz 843617)
  - fix even more issues in getcifsacl/setcifsacl (bz 843612)
  - fixes for problems in setcifsacl found by coverity (bz 873683)


author: David Zeuthen <davidz@redhat.com> - 2.29.90-1.el6
changelog:
  - Update to new release for LVM2/Multipath support
  - Don't include support for connecting to remote udisks instances
  - Related: rhbz#548874
  - Related: rhbz#548870


author: Stepan Kasal <skasal@redhat.com> - 0.9.7-4
changelog:
  - repack the tarball, there are .jar files without any source
  - do not BR findutils, they are guaranteed in Fedora mock
  - fix obsolete, so that it covers only packages created before this
    spec was added to Fedora


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7
changelog:
  - Revert CVE-2011-0904 and CVE-2011-0905 patch because libvncserver is not
    vulnerable (bug #696767)


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7.1
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157668)
  - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
    (bug #1157668)
  - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
    handling) (bug #1157668)
  - Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
    (bug #1157668)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1157668)


author: Angus Salkeld <asalkeld@redhat.com> - 0.9.0-2
changelog:
  - Disable loop and ipc tests as they use features not availble on brew.
  - Get the tests to print out (disable parallel-tests).
  - Call autogen.sh to get the no parallel-tests
  - Disable ppc arch as the "make check" fails.


author: David Vossel <dvossel@redhat.com> - 0.14.2-2
changelog:
  - Fixes issue with qb_ipcc_recv() that resulted in nearly 100%
    cpu usage during certain situations. (#869446)


author: David Vossel <dvossel@redhat.com> - 0.14.2-3
changelog:
  - Additional upstream work to address 100% cpu usage bug in
    realtime environment.
    cpu usage during certain situations. (#869446)


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2
changelog:
  - Increase size of the buffer where we make the socket name to allow for longer PIDs 
    Resolves: rhbz#1276345


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Add the modprobe.d/mlx4.conf for user set module options that we
    don't replace on upgrade
  - Rename the dracut module to just mlx4 instead of -libmlx4 (dracut
    takes a dash between the number and the name literally)
  - Add obsoletes tag to make us replace libmlx4-rocee
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Actually use the right %source macro when installing the new
    mlx4.conf file this time
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-7
changelog:
  - Add compiler warnings patch
  - Rebuild against latest libibverbs and valgrind-devel
  - Move module init code to rdma package and require rdma package
  - Resolves: bz1142161, bz1163527


author: Petr Holasek <pholasek@redhat.com> - 2.0.7-4
changelog:
  - Symbol numa_num_possible_cpus exported (bz804827)
  - miscalculating of numa_num_configured_cpus was fixed (bz804480)


author: Anton Arapov <anton@redhat.com> - 2.0.7-7
changelog:
  - numastat.c: fix bug preventing correct static huge page quantities
  - numastat.c: update version number
  - numastat.8: remove redundant "interleave hit" description
  - numastat.8: remove extraneous leading spaces and blank lines
  - numastat.8: enhance explanation of correct placement for "-s" option
  - Resolves: rhbz#987507


author: Milan Crha <mcrha@redhat.com> - 2.32.3-14.el6
changelog:
  - Add patch for RH bug #1009470 (evolution-ews crash when GAL not marked for offline sync)
  - Add patch for RH bug #1005888 (evolution-ews add 'no-alarm-after-start' calendar capability)


author: Ray Strode <rstrode@redhat.com> - 2.28.2-39
changelog:
  - Another smartcard update to support drivers that don't
    announce already inserted smartcards at startup
    Related: #1299992


author: Honza Horak <hhorak@redhat.com> - 2.19-22
changelog:
  - hide passwords in syslog when using external script
    to update user's data using yppasswdd
    Resolves: #734494


author: Honza Horak <hhorak@redhat.com> - 2.19-23
changelog:
  - fix memory leak when malformed request is received
    Resolves: #845283
  - Fixed returned value when all entries requested and no such
    map exists
    Resolves: #790812


author: Matej Muzila <mmuzila@redhat.com> - 2.19-29
changelog:
  - Make mknetid to handle properly files with either
    empty lines or unexpected format
    Resolves: #1071962


author: Matej Muzila <mmuzila@redhat.com> - 2.19-30
changelog:
  - Make server return YP_NOMAP when NIS client asks for non-existing map
    using yp_first/yp_next RPC calls
    Resolves: #988203


author: Matej Muzila <mmuzila@redhat.com> - 2.19-31
changelog:
  - Return failure if yppassw cannot write to /etc/shadow or /etc/passwd.adjunct
    because of wrong SELinux context
  - Move domainname check from ypserv to yppasswdd
  - Resolves: #747334, #456249


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 2.12.23-21
changelog:
  - Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
    (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
  - Modified gnutls-serv to accept --sni-hostname (#1333521)
  - Modified gnutls-serv to always reply with an alert message (#1327656)
  - Removed support for DSA2 as it causes interoperability issues (#1321112)
  - Allow sending and receiving certificates which were not in the
    signature algorithms extension (#1328205)
  - Removed support for EXPORT ciphersuites (#1337460)
  - Raised the minimum acceptable DH size to 1024 (#1335924)
  - Restricted the number of alert that can be received during handshake (#1388730)
  - Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
  - The exposed (but internal) crypto back-end registration API is deprecated and no
    longer functional. The ABI is kept compatible (#1415682)


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-4
changelog:
  - Remove ucm and topology files from the /usr/share/alsa tree
  - Coverity fixes
  - Resolves: rhbz#838948


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-3
changelog:
  - Resolves: rhbz#524662 Implement new Gnome XDG Config Folders for planner
      + gnome#596171 change recently used to use new recently used backend
      + gnome#XXXXXX split config/data setting into xdg dirs


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-4
changelog:
  - Resolves: rhbz#526295 automatically go to edit mode on insert task
  - Resolves: rhbz#537854 fix zoom to fit


author: Matthew Barnes <mbarnes@redhat.com> - 0.14.4-10
changelog:
  - Resolves: rhbz#973289 rebuild against newer evolution-data-server
  - Also add planner-0.14.4-edsapi.patch from Fedora 14 package.


author: Rich Megginson <rmeggins@redhat.com> - 1.5.2-6.2
changelog:
  - fixes for RHEL-6 pkgwrangler review
  - Makefile.PL.rpm is not an upstream source
  - Source URL was pointing to the wrong location
  - change Release so dist tag is last


author: Rich Megginson <rmeggins@redhat.com> - 1.5.3-1
changelog:
  - new version 1.5.3 with openldap support
  - Resolves: bug 610902 - Modify perl-Mozilla-LDAP to use open ldap library


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.55.0-3
changelog:
  - auto-generate SEE ALSO sections for the man pages
  - utilize test suite in the check phase of the build process
  - bump upstream package (intentional jump on upstream front),
    see https://github.com/jnpkrn/clufter/releases/tag/v0.55.0


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.56.0-1
changelog:
  - general spec file refresh (pagure.io as a default project base, etc.)
  - bump upstream package, see
    https://github.com/jnpkrn/clufter/releases/tag/v0.56.0


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.56.2-1
changelog:
  - move entry_points.txt to clufter-cli sub-package
  - bump upstream package, see
    https://github.com/jnpkrn/clufter/releases/tag/v0.56.2


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.59.6-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
    (v0.56.3, v0.57.0, v0.58.0, v0.59.0 ... v0.59.6)
  - make Python interpreter execution sane


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-6
changelog:
  - Enable deprecated GLib/GTK+ symbols since Devhelp uses some of them
    since the GLib rebase. Apps should not be shipping with these build
    flags anyway.
  - Resolves: rhbz#1136304


author: Lawrence Lim <llim@redhat.com> - 4.0-3
changelog:
  - apply redhat-lsb.spec.diff-stewb <Stew Benedict - stewb@linuxfoundation.org>
  - Resolved: Bug 585947


author: Ondrej Vasik <ovasik@redhat.com> - 4.0-6
changelog:
  - fix the split-core stuff to allow benefits from it, use
    versioned/arched requirements for the subpackages
  - file /etc/lsb-release should be present on the system
  - Resolves: Bug 833058


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.59.rc1
changelog:
  - Use /lib or /lib64 only if directory in chroot already exists
  - Tighten NSS library pattern, escape chroot mount path


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.61.rc1
changelog:
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.7.6-1
changelog:
  - Update to 2.7.6
  - Updated the configure arguments so that the native Win32 thread API
    will be used instead of pthreads


author: Kai Tietz <ktietz@redhat.com>
changelog:
  - Change release number to 4.
  - Added patch libxml2-Fix-an-off-by-one-pointer-access.patch
  - Added patch libxml2-Fix-a-segfault-on-XSD-validation-on-pattern-error.patch
  - Added patch libxml2-Fix-entities-local-buffers-size-problems.patch
  - Added patch libxml2-gnome-bug-561340-fix.patch
  - Added patch for CVE-2012-0841
  - Added patch for CVE-2011-0216
  - Added patch for CVE-2011-2834
  - Added patch for CVE-2011-3919
  - Added patch for CVE-2011-1944
  - Added patch for CVE-2011-3905
    Related: rhbz#891477


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-4
changelog:
  - Two important fixes from 3.1.2 release (#590773)
  - Fix up attribute handling in xfs_fsr
  - Make sure xfs_admin writes both sb fields when changing lazy_count


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to 1.1.4 to match OFED 1.3
  - Add a modprobe conf file in /etc/modprobe.d so that the iw_cxgb3 module
    will always be loaded after the cxgb3 net module
  - Related: bz428197


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10.el6_6
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1172165
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-1
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Fix the required nspr version to be 4.10.6
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.26.0
  - Remove upstreamed patch for CVE-2016-1950
  - Remove p-disable-md5-590364-reversed.patch for bug 1335915


author: Dave Anderson <anderson@redhat.com> - 6.1.0-4.el6
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1006622
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1017930
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1019483


author: Dave Anderson <anderson@redhat.com> - 7.1.0-2.el6
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1195596


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6
changelog:
  - Fortify the error handling of task gathering from the pid_hash[]
    chains during session initialization to prevent an endless loop if
    data structures have been corrupted.
    Resolves: rhbz#1208557


author: Dave Anderson <anderson@redhat.com> - 7.1.0-4.el6
changelog:
  - Fixes for the handling of truncated/incomplete flat-format vmcores, which
    may cause the session to hang during initialization.
    Resolves: rhbz#1231976
  - Fix for the "timer" command, which may fail with the error message
    "timer: cannot allocate any more memory!" when run on a kernel with
    an extremely large number of cpus.
    Resolves: rhbz#1238403


author: Dave Anderson <anderson@redhat.com> - 7.1.0-5.el6
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1283000


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: William Cohen <wcohen@redhat.com> - 0.9.9-12
changelog:
  - Add support for Intel Xeon D. rhbz1231399
  - Add support for Intel Skylake Mobile/Desktop processors. rhbz1254764
  - Fix coverity warnings. rhbz1206242


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.7-7
changelog:
  - Fix double free in free_wstr (#648906)
  - Prevent overflows by increasing YYMAXDEPTH and YYSTACKSIZE
    byacc/bison parameters (#743343)
  - Preserve argv by copying the strings (#740673)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 3.1.7-10.el6_7.2
changelog:
  - Man & info pages fixed to describe the '--posix' usage correctly,
    as discussed in #1271443 (comments #1 and #2)


author: Honza Horak <hhorak@redhat.com> 5.1.70-1
changelog:
  - Update to MySQL 5.1.70, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
    Resolves: #990796, #842052
  - Fix mysqldump failure against MySQL 5.0.x server due missing tables
    Resolves: #877557
  - Add logrotate script
    Resolves: #904061
  - Fix init script to not show failed on start even when server started
    Resolves: #884651


author: Honza Horak <hhorak@redhat.com> 5.1.71-1
changelog:
  - Update to MySQL 5.1.71, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-71.html
    Resolves: #990796


author: Jakub Dorňák <jdornak@redhat.com> - 5.1.73-1
changelog:
  - Update to MySQL 5.1.73, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html
    (CVE-2014-0412, CVE-2014-0437, CVE-2013-5908, CVE-2014-0393,
    CVE-2014-0386, CVE-2014-0401, CVE-2014-0402)
    Resolves: #1055882


author: Honza Horak <hhorak@redhat.com> 5.1.73-2
changelog:
  - Make mysqld init script more robust and ignore existing but
    non-being-used unix socket file
    Resolves: #1037650


author: Bill Nottingham <notting@redhat.com> 1.3.44-1
changelog:
  - alternatives: update symlinks if they exist on installation (#104940)
  - alternatives: clarify error messages with more context (#441443)
  - alternatives: fix removal of manual links (#525021, <dtardon@redhat.com>)
  - translation updates: ml, mr, pl, ta, uk


author: Bill Nottingham <notting@redhat.com> 1.3.45-1
changelog:
  - add support for Should-Start, Should-Stop (#98470, <iarnell@gmail.com>)
  - ntsysv: don't drop initscripts with '.' in the name (#556751)
  - translation updates: el, id


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-36
changelog:
  - SAPDatabase: fix process count for SUSER
  - oracle: use monprofile parameter
  - send_arp: fix buffer overflow on infiniband devices
  - mysql: use replication_port variable
  - oracle: inform user that monprofile monuser must start with C##
    for container databases

    Resolves: rhbz#1260710
    Resolves: rhbz#1358892
    Resolves: rhbz#1351717
    Resolves: rhbz#1337146
    Resolves: rhbz#1374655


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-37
changelog:
  - lvm.sh: fix status clustered to check specific volume
  - netfs.sh: move defaults to metadata
  - nfsserver: use rpcpipefs_dir variable

    Resolves: rhbz#1320520
    Resolves: rhbz#1286291
    Resolves: rhbz#1382036


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-40
changelog:
  - SAPHana/SAPHanaTopology: update to version 0.152.17
  - Add netstat dependency

    Resolves: rhbz#1381891
    Resolves: rhbz#1395594


author: David Knox <dknox@redhat.com> 0:6.0.24-84
changelog:
  - Resolves: rhbz#1022061 Tomcat init script needs to be adjusted to kill tomcat
  - if stop is unsuccessful


author: David Knox <dknox@redhat.com> 0:6.0.24-88
changelog:
  - Related: rhbz#1022061 changed in init file. Remove test
  - in function stop for result after initial command to
  - stop.


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
    fix small sound file playback. (#505610)


author: Adam Jackson <ajax@redhat.com> 1.1.1-3
changelog:
  - REVERT-libXdmcp-1.1.1-xalloc.patch: Restore definitions (but not
    declarations) of Xalloc and friends for RHEL6 ABI compat.


author: Felipe Borges <feborges@redhat.com> - 0.2.4-2
changelog:
  - Allocate at least 1 page if there are no Pages: or Page: comments in the PS file
  - Resolves: #667717


author: Ivan Devat <idevat@redhat.com> - 0.9.148-2
changelog:
  - Moved DISABLED_GUI option to /etc/sysconfig/pcsd
  - Added backend support for new cluster properties form in web UI
  - Fixed multilib .pyc/.pyo issue
  - Resolves: rhbz#1297782 rhbz#1298163


author: Ivan Devat <idevat@redhat.com> - 0.9.148-3
changelog:
  - Fixed updating cluster properties from older version of web UI
  - Fixed syntax error in utilization attributes functions
  - Resolves: rhbz#1298163
  - Related: rhbz#1260021


author: Ivan Devat <idevat@redhat.com> - 0.9.154-1
changelog:
  - Rebased to latest upstream packages
  - Keep a cluster qauorate as long as possible when shutting it down
  - Fixed disabling TLSv1.1 in pcsd
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed adding a node when fencing configuration has been manually changed in cluster.conf
  - Make pcsd init script wait for pcsd to fully start
  - Gracefully handle errors when reading cluster properties definition
  - Resolves: rhbz#1373874 rhbz#1353738 rhbz#1344928 rhbz#1369029 rhbz#1319070 rhbz#1328870 rhbz#1325459


author: Ivan Devat <idevat@redhat.com> - 0.9.155-1
changelog:
  - Rebased to latest upstream packages
  - When stopping a cluster with some of the nodes unreachable, stop the cluster completely on all reachable nodes
  - Fixed occasional crashes / failures when using locale other than en_US.UTF8
  - Added SBD support for cman clusters
  - Added alerts management in web UI
  - Resolves: rhbz#1373874 rhbz#1315748 rhbz#1380372 rhbz#1387106 rhbz#1380352 rhbz#1376480


author: Ivan Devat <idevat@redhat.com> - 0.9.155-2
changelog:
  - Fixed upgrading CIB to the latest schema version
  - Adding a node in a cluster does not cause the new node to be fenced immediately
  - Fixed handling of HTTP communication failure
  - Added dependency on cman
  - Resolves: rhbz#1397408 rhbz#1394846 rhbz#1394273 rhbz#1394857


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-34
changelog:
  - Avoid possible hang while logging an unexpected signal (#694820)
  - Fix Rpmdiff build warning about "dereferencing type-punned pointer" (#697783)
  - Let RPC services bind to a specific port (#697788)
  - Prevent memory corruption error while using large number of services (#711787)
  - Fix coverity defects in poll patch (#715303)


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-40
changelog:
  - Fix: xinetd attempts to bind to IPv6 sockets even on systems with IPv6 disabled (#1285091)
  - Fix: modify the xinetd man page to make it more clear on what happens to services on xinetd reload (#1119317)


author: Jeff Garzik <jgarzik@redhat.com> - 2-6
changelog:
  - Resolves: bz#576678
  - increase version number of rng-utils that we obsolete
  - use global rather than define, for sbindir (Fedora pkg review)
  - improve BuildRoot (Fedora pkg review)


author: David Howells <dhowells@rehdat.com> - 2-7
changelog:
  - Resolves: bz#597221
  - Fix some compiler warnings thus dealing with the SEGV
  - Make do_loop() correctly interpret the result of iter->xread()


author: Jay Fenlason <fenlason@redhat.com> - 2-9
changelog:
  - Add patch from James M. Leddy <james.leddy@redhat.com> to add
    an option to ignore FIPS failures.
    Resolves: bz#733452


author: Jeff Garzik <jgarzik@redhat.com> - 2-13
changelog:
  - Resolves: bz#751374
  - Add post/preun calls to chkconfig, during rpm install/removal
  - Remove unused rotate, resume steps from init script


