# changelog

author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.3beta1-2PGDG
changelog:
  - Support separated xlog directory at initdb. Per suggestion from
    Magnus Hagander. Fixes #90.
  - Remove hardcoded script names in init script. Fixes #102.
  - Add support for pg_ctl promote. Per suggestion from Magnus Hagander.
    Fixes #93.
  - Set log_line_prefix in default config file to %m. Per suggestion
    from Magnus. Fixes #91.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.3.1-1PGDG
changelog:
  - Update to 9.3.1, per changes described at:
    http://www.postgresql.org/docs/9.3/static/release-9-3-1.html
  - Fix issues with init script, per http://wiki.pgrpms.org/ticket/136.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.3.2-1PGDG
changelog:
  - Update to 9.3.2, per changes described at:
    http://www.postgresql.org/docs/9.3/static/release-9-3-2.html


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.3.2-2PGDG
changelog:
  - Fix builds when uuid support is disabled, by adding missing conditional.
  - Add process name to the status() call in init script.
    Patch from Darrin Smart


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.3.3-1PGDG
changelog:
  - Update to 9.3.3, per changes described at:
    http://www.postgresql.org/docs/9.3/static/release-9-3-3.html


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 2.1.0-2
changelog:
  - Remove ruby bindings, per
    http://lists.osgeo.org/pipermail/postgis-devel/2013-August/023690.html
  - Move extension related files under main package,
    per report from Daryl Herzmann


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 2.1.0-3
changelog:
  - Rebuild against gdal 1.9.3, to fix extension related issues.
  - Enable raster support in EL-6
  - Let main package depend on client package. Per pgrpms #141
    and per PostgreSQL bug #8463.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 2.1.0-4
changelog:
  - Install postgis-2.0.so file, by compiling it from 2.0 sources.
    Per lots of complaints to maintainers and pgsql-bugs lists.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.3.4-1PGDG
changelog:
  - Update to 9.3.4, per changes described at:
    http://www.postgresql.org/docs/9.3/static/release-9-3-4.html


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 3.1.5-1
changelog:
  - Update to 3.1.5, per changes described at
    http://pgfoundry.org/frs/shownotes.php?release_id=2045


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 2.1.0beta3-1
changelog:
  - Update to 2.1.0 beta3
  - Support multiple version installation 
  - Split "client" tools into a separate subpackage, per
    http://wiki.pgrpms.org/ticket/108
  - Bump up alternatives version.
  - Add dependency for mysql-devel, since Fedora / EPEL gdal packages
    are built with MySQL support, too. (for now). This is needed for
    raster support.
  - Push raster support into conditionals, so that we can use similar 
    spec files for RHEL and Fedora.
  - Add a patch to get rid of dependency hell from gdal. Per 
    http://lists.osgeo.org/pipermail/postgis-devel/2013-June/023605.html
    and a tweet from Mike Toews.


author: Devrim GUNDUZ <devrim@gunduz.org> - 3.0.1
changelog:
  - Update to 3.0.1
  - Apply many 9.0+ specific changes, and use alternatives method.
  - Apply some changes to init script.


author: Devrim GUNDUZ <devrim@gunduz.org> - 3.1.2-1
changelog:
  - Update to 3.1.2, per changes described at:
    http://www.pgpool.net/docs/pgpool-II-3.1.2/doc/NEWS.txt


author: Devrim GUNDUZ <devrim@gunduz.org> - 3.1.3-1
changelog:
  - Update to 3.1.3, per changes described at:
    http://www.pgpool.net/docs/pgpool-II-3.1.3/doc/NEWS.txt
  - Update patch1
  - Update alternatives version to 930


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.3.4-1PGDG
changelog:
  - Update to 9.3.4, per changes described at:
    http://www.postgresql.org/docs/9.3/static/release-9-3-4.html
  - Fix permissions of postgresql-93-libs.conf, per Christoph Berg.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.3.5-1PGDG
changelog:
  - Update to 9.3.5, per changes described at:
    http://www.postgresql.org/docs/9.3/static/release-9-3-5.html


author: Devrim GUNDUZ <devrim@gunduz.org> 2.4.6-1
changelog:
  - Update to 2.4.6, per changes described at:
    http://www.psycopg.org/psycopg/articles/2012/12/12/psycopg-246-released/


author: Devrim GUNDUZ <devrim@gunduz.org> 2.5-1
changelog:
  - Update to 2.5, per changes described at:
    http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/
  - Remove zope support from RHEL 6.


author: Devrim GUNDUZ <devrim@gunduz.org> 2.5.1-1
changelog:
  - Update to 2.5.1, per changes described at:
    http://www.psycopg.org/psycopg/articles/2013/06/23/psycopg-251-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.2-1
changelog:
  - Update to 2.5.2, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/01/07/psycopg-252-released


author: Devrim Gündüz <devrim@gunduz.org> 2.5.3-1
changelog:
  - Update to 2.5.3, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/05/13/psycopg-253-released


author: Devrim GUNDUZ <devrim@gunduz.org> - 3.3.1-1
changelog:
  - Update to 3.3.1
  - Add pgpool-recovery and pgpool-regclass extensions. Per 
    pgrpms #127 and #134 .
  - Compile pgpool with memcache support, per pgrpms #135.


author: Tom Callaway <spot@fedoraproject.org> - 1:3.13.7.5-1
changelog:
  - update to 3.13.7.5 (needed for chromium 23)
  - Resolves multiple security issues (CVE-2012-5120, CVE-2012-5128)
  - d8 is now using a static libv8, resolves bz 881973)


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:3.14.5.8-1
changelog:
  - new upstream release 3.14.5.8
  - backport security fix for remote DoS via crafted javascript (RHBZ#924495; CVE-2013-2632)


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:3.14.5.10-2
changelog:
  - backport fix for remote DoS or unspecified other impact via type confusion
    (RHBZ#991116; CVE-2013-2882)


author: - Devrim GÜNDÜZ <devrim@gunduz.org> 5.0-1
changelog:
  - Update to 5.0, per changes described at
    http://www.postgresql.org/message-id/2c9e60c9f80fe68276178abe45311d09@dalibo.com


author: Devrim Gunduz <devrim@gunduz.org> 2.1.3-2
changelog:
  - Various fixes for multiple postmaster feature:
   - Install slony config files in separate directories.
   - Update init scripts.
   - Install pid and log files into separate directories.
   - Properly filter dependency to /etc/slon_tools.conf
   - Use default sysconfig file, to be used by init script.


author: Xavier Bergade <XavierB@benon.com> 2.1.4-2
changelog:
  - Set --sysconfdir during configure to fix the require list & the CONFIG_FILE path in the Perl scripts
  - Set the correct path for LOGDIR in the slon_tools.conf file


author: Devrim GÜNDÜZ <devrim@gunduz.org> 4.0.1-1
changelog:
  - Update to 4.0.1, per changes described at:
    http://pqxx.org/development/libpqxx/browser/tags/4.0.1/NEWS


author: - Devrim GUNDUZ <devrim@gunduz.org> 1.0-1
changelog:
  - Update to 1.0, (#68), per changes described in
    http://pgfoundry.org/frs/shownotes.php?release_id=1872


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 8.3.0.13-2
changelog:
  - Add a patch for plr extension to be installed on PostgreSQL 9.2. Per report
    from Jose Pedro Oliveira


author: - Devrim GUNDUZ <devrim@gunduz.org> 2.13.0-1
changelog:
  - Update to 2.13.0
  - Refactor spec file:
    * Use tarball, instead of .pl file directly.
    * Add man page


author: - Devrim GUNDUZ <devrim@gunduz.org> 2.14.2-1
changelog:
  - Update to 2.14.2
  - Add -p options to install, per bz review #543917, comment #3.
  - Remove postgresql-server requirement, since this plugin can be used to
    control remote PostgreSQL servers.


author: - Devrim GUNDUZ <devrim@gunduz.org> 2.18.0-1
changelog:
  - Update to 2.18.0, per changes described at
    https://mail.endcrypt.com/pipermail/check_postgres-announce/2011-October/000027.html


author: - Devrim GUNDUZ <devrim@gunduz.org> 2.19.0-1
changelog:
  - Update to 2.19.0, per changes described at
    https://mail.endcrypt.com/pipermail/check_postgres-announce/2012-January/000028.html


author: - Devrim GUNDUZ <devrim@gunduz.org> 1.1.0-2
changelog:
  - Spec file fixes by Satoshi Nagayasu
  - Updated patch0 and renamed it for better convenience.
  - Replaced postgresql-devel dependency with postgresql, since
    pg_config is now in main package.


author: Devrim GUNDUZ <devrim@gunduz.org> 08.04.0200-1PGDG
changelog:
  - Update to 08.04.0200
  - Use new parameter --with-libpq in order to support multiple version
    installation of PostgreSQL.
  - Remove --with-odbcinst parameter.
  - Add new global variable to support multiple version installation 
    of PostgreSQL.
  - Update URL.
  - Update license
  - Add new BRs, per Fedora spec.
  - Use build system's libtool.m4, not the one in the package.
  - Since it looks like upstream has decided to stick with psqlodbcw.so
    permanently, allow the library to have that name.  But continue to
    provide psqlodbc.so as a symlink.
  - Add -disable-dependency-tracking, per Fedora spec.
  - Trim changelog (see svn repo for history)


author: - Devrim Gunduz <devrim@gunduz.org> 1.1.7-1
changelog:
  - Initial packaging for PostgreSQL RPM Repository, based on the
    NTT spec, simplified and modified for PostgreSQL RPM compatibility.
  - Cleaned up various rpmlint errors and warnings.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.5-1
changelog:
  - Update to 1.5, for the changes described here:
    http://pgfoundry.org/frs/shownotes.php?release_id=1920
  - Trim changelog


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.5.4-2
changelog:
  - Update init script, per #138, which fixes the following.
    Contributed by Peter:
   - various legacy code of unknown purpose
   - no LSB header
   - used the script name as NAME, making it impossible to copy
     the script and run two pgbouncers
   - didn't use provided functions like daemon and killproc
   - incorrect exit codes when starting already started service and
     stopping already stopped service (nonstandard condstop action
     was a partial workaround?)
   - restart didn't make use of pgbouncer -R option


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.5.4-3
changelog:
  - Add logrotate file. It was already available in svn, but
    apparently I forgot to add it to spec file. Per an email from
    Jens Wilke.
  - Change ownership of /etc/pgbouncer directory, to pgbouncer user.
    Per Jens Wilke.


author: Devrim GUNDUZ <devrim@gunduz.org> - 3.3.8-1
changelog:
  - Update to 3.3.8, per changes described at:
    http://trac.osgeo.org/geos/browser/tags/3.3.8/NEWS
  - Add new subpackage: ruby


author: Devrim GUNDUZ <devrim@gunduz.org> - 3.4.2-1
changelog:
  - Update to 3.4.2, per changes described at:
    http://trac.osgeo.org/geos/browser/tags/3.4.2/NEWS
  - Remove Ruby bindings, per suggestion from Kashif Rasul.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.2-4
changelog:
  - Change the package name, and add PostgreSQL major version number.
    This will let us install the repo RPMs easier. Also, rename RPM key,
    so that --import won't throw any errors.
  - Own %{_sysconfdir}/pki/rpm-gpg
  - Trim changelog


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.4.2-1
changelog:
  - Update to 1.4.2, for the changes described here:
    http://pgfoundry.org/frs/shownotes.php?release_id=1863


author: Pavel Lisy <pavel.lisy@gmail.com> 1.1a-1
changelog:
  - based on libevent-1.1a-3.2.1
  - name changed to compat-libevent11 for use with new libevent from PGDG84 repository
  - Fix some rpmlint warnings (Devrim)


author: Devrim GÜNDÜZ <devrim@gunduz.org> 1.0.3-5
changelog:
  - Initial import to PostgreSQL RPM repository, with very little cosmetic 
    changes Thanks Peter	for sending spec to me.


author: Devrim GÜNDÜZ <devrim@gunduz.org> 1.0.5-2
changelog:
  - Add the following features, sponsored by "Norsk institutt for skog og landskap":
   -- Add Traveling Salesperson functionality
   -- Add Driving Distance functionality
  - Fix packaging issues, sponsored again by "Norsk institutt for skog og landskap".
  - Update URL
  - Add a new patch so that pgrouting can find PostgreSQL libs.
  - Remove obsoleted patch (pgrouting-pg84.patch) -- already in upstream.
  - Add a patch for 9.2, that removes quotes around LANGUAGE 'C'.


author: Volker Fröhlich <volker27@gmx.at> - 1.2.5-8
changelog:
  - Add isa macro
  - Harmonize buildroot/RPM_BUILD_ROOT
  - Replace install macro, use name macro where suitable
  - Improve devel sub-package description
  - Remove defattr
  - Rebuild for libtiff 4


author: Devrim GUNDUZ <devrim@gunduz.org> 9.2-1
changelog:
  - Update to 9.2
  - Update URL, License, Group tags
  - Fix spec per rpmlint warnings
  - Apply some changes from upstream spec


author: Devrim GUNDUZ <devrim@gunduz.org> 12.0-1
changelog:
  - Update to 12.0, per changes described at:
    http://www.postgresql.org/message-id/52664854.30200@dalibo.com


author: Devrim Gündüz <devrim@gunduz.org> 1.4.1-1
changelog:
  - Initial spec file, per RH #1036130, after doing modifications
    to suit community RPM layout. Original work is by David
    Wheeler and Mikko Tiihonen


author: Devrim Gunduz <devrim@gunduz.org> 5.0.3-1
changelog:
  - Update to 5.0.3, per changes described at:
     http://sourceforge.net/mailarchive/forum.php?thread_name=4E897F6C.90905%40free.fr&forum_name=phppgadmin-news
  - Update license


author: Devrim Gunduz <devrim@gunduz.org> 5.1-1
changelog:
  - Update to 5.1, per changes described at
    http://sourceforge.net/mailarchive/message.php?msg_id=30730170

  "* Sun Mar 25 2012 Devrim Gunduz <devrim@gunduz.org> 5.0.4-1
  - Update to 5.0.4, per changes described at
    http://archives.postgresql.org/pgsql-announce/2012-03/msg00016.php


author: José Matos <jamatos@fedoraproject.org> - 4.000.0-1
changelog:
  - update to 4.000.0
  - dropped boost dependency and added arpack
  - remove reference to boost in the comments


author: José Matos <jamatos@fedoraproject.org> - 4.000.0-2
changelog:
  - add mex_interface to documentation (demonstration of how to connect
    Armadillo with MATLAB/Octave mex functions)


author: Devrim Gunduz <devrim@gunduz.org> 2.0.3-1
changelog:
  - Update to 2.0.3
  - Updated doc patch
  - Rename log directory to slony, to match upstream default
  - Apply many fixes to support multiple postmaster installation.


author: Devrim Gunduz <devrim@gunduz.org> 2.0.4-1
changelog:
  - Update to 2.0.4, and perform a major cleanup and bugfix.
  - Apply changes for 9.0+
  - Update source2, to supress weird dependency for slon_tools.conf.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.3.4-1
changelog:
  - Update to 1.3.4, for the changes described here:
    http://pgfoundry.org/frs/shownotes.php?prelease_id=1698


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - 1.4.2-1
changelog:
  - Update to 1.4.2
  - Document how to get source tarball via HTTP POST
  - Use Fedora's system shapelib instead of gpsbabel's bundled shapelib parts
  - Use new mktemp based BuildRoot
  - Build and view gpsbabel.html without network access
  - Avoid rpm macros for scriptlet commands
  - Remove x bit also from src files in subdirectories
  - Add Additional Category to .desktop file: Geography


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - 1.4.2-4
changelog:
  - Have this spec file build on f12,f13,f14,f15,el6. (el6 without GUI).
  - Rename local copy of style3.css
  - Ship translations for the GUI
  - Enforce network less doc build with xsltproc --nonet


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.4.4-1
changelog:
  - Upstream update.
  - Rebase patches.
  - Use upstream gpsbabel.desktop.
  - Address RHBZ 668865.
  - Fix gzFile pointer abuse.
  - Install gmapbase.html to /usr/share/gpsbabel.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.1.1-1
changelog:
  - Update to 1.1.1, per changes described in this page:
     http://sourceforge.net/projects/pgbarman/files/1.1.1/


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.1.2-1
changelog:
  - Update to 1.1.2, per changes described in this page:
     http://sourceforge.net/projects/pgbarman/files/1.1.2/


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.2.0-1
changelog:
  - Update to 1.2.0, per changes described in this page:
     http://sourceforge.net/projects/pgbarman/files/1.2.0/


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.2.1-1
changelog:
  - Update to 1.2.1, per changes described in this page:
     http://sourceforge.net/projects/pgbarman/files/1.2.1/


author: Jeff Frost <jeff@pgexperts.com> - 1.2.2-1
changelog:
  - Update to 1.2.2, per changes described in this page:
     http://sourceforge.net/projects/pgbarman/files/1.2.2/


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.2.3-1
changelog:
  - Update to 1.2.3, per changes described in this page:
     http://sourceforge.net/projects/pgbarman/files/1.2.3/


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.3.0-1
changelog:
  - Update to 1.3.0, per changes described in this page:
     http://sourceforge.net/projects/pgbarman/files/1.3.0/


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.3.2-1
changelog:
  - Update to 1.3.2, per changes described in these pages:
     http://sourceforge.net/projects/pgbarman/files/1.3.1/
     http://sourceforge.net/projects/pgbarman/files/1.3.2/


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 1.3.3-1
changelog:
  - Update to 1.3.3, per changes described in:           
     http://sourceforge.net/projects/pgbarman/files/1.3.3


author: - Devrim GUNDUZ <devrim@gunduz.org> 3.6.2-3
changelog:
  - Port a few fixes from EPEL:
   * Fix display of cumulative statistics (BZ#525763)
   * include %{optflags} during compilation.
   * include DOC files, including license file
   * fix %defattr


author: Laurent Rineau <Laurent.Rineau__fedora@normalesup.org> - 4.0-0.1.alpha4
changelog:
  - New upstream version.
    The beta release will be published 2012/02/10, and the official release
    is planned for 2012/03/10.


author: Laurent Rineau <Laurent.Rineau__fedora@normalesup.org> - 4.0.2-1
changelog:
  - New upstream release: bug-fix release CGAL-4.0.2
  - Remove the patch CGAL-4.0-gcc47.patch (upstreamed)


author: Lawrence Lim <llim@redhat.com> - 4.0-3
changelog:
  - apply redhat-lsb.spec.diff-stewb <Stew Benedict - stewb@linuxfoundation.org>
  - Resolved: Bug 585947


author: Ondrej Vasik <ovasik@redhat.com> - 4.0-6
changelog:
  - fix the split-core stuff to allow benefits from it, use
    versioned/arched requirements for the subpackages
  - file /etc/lsb-release should be present on the system
  - Resolves: Bug 833058


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-15
changelog:
  - Enhance e2fsck detection of invalid extent trees (#922847)
  - Several filefrag fixes (#927541)
  - Clear errors stored in superblock by newer kernels (#895679)
  - Fix journal superblock error handling (#885083)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-18
changelog:
  - Fix e2fsck false positive when blocks exist past EOF (#994615)
  - Fix resize2fs shrink corruption when moving files with many extents (#873201)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-19
changelog:
  - Fix for some resize2fs corruptions (#1036122)
  - Allow tune2fs to remove a dirty journal with -ff (#1040122)
  - Add enable_periodic_fsck to mke2fs.conf (#1052409)
  - Disallow too-high revision during mke2fs (#1093446)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-22
changelog:
  - e2fsck: fix last mount time and last write time in preen mode (#1218262)
  - e2fsck: don't prompt for time fixes with accept_time_fudge (#1218262)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-23
changelog:
  - e2image: check return value from check_if_mounted() (#1139936)
  - e2fsck: do not process impossibly large dir blocks (#1297694)
  - resize2fs: fix off-line resize of file systems (#1285227)


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-298
changelog:
  - Allow isnsd_t to accept tcp connections
  Resolves:rhbz#1365501
  - Add label for alsa_var_lib_t dirs and files.
  Resolves: rhbz#1340150


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-300
changelog:
  - Allow sblim_reposd_t domain to read cert_f files
  Resolves:rhbz#1392382
  - Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs.
  Resolves: rhbz#1392406


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-301
changelog:
  - Allow hald_t to read nvme devices.
  Resolves: rhbz#1389982
  - Allow ftpdctl_t domain to manage own sockets
  Resolves: rhbz#1392525


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-302
changelog:
  - Label /var/lock/kdump as kdump_lock_t.
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-303
changelog:
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565
  - Allow guest-set-user-passwd to set users password
  Resolves: rhbz#1369699


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-304
changelog:
  - Allow _java_t domain to read systemd state.
  Resolves:rhbz#1393938
  - Allow kdumpgui to read/write to nvme filesystem.
  Resolves:rhbz#1323293


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-305
changelog:
  - Fix typo bug sepgsql_contexts file
  Resolves: rhbz#1397703
  - Allow sssd_t domain to manage samba files and dirs.
  Resolves: rhbz#1395403
  - Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
  Resolves: rhbz#1397117
  - Allow consolekit_t domain to manage consolekit_log_t dirs
  Resolves: rhbz#1397802


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-306
changelog:
  - Allow hostname_t domain to manage cluster_tmp_t files
  Resolves: rhbz#1400234
  - Allow ipsec_mgmt_t domain use nsswitch
  Resolves:rhbz#1401611
  - Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
  Resolves:rhbz#1397117


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307
changelog:
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1404152
  - Label /usr/bin/puppet* binaries as puppet_exec_t
  Resolves: rhbz#1386181


author: Tomas Mraz <tmraz@redhat.com> 0.75-1
changelog:
  - fix disabling SELinux and audit in spec (#433284)
  - remove obsolete no.po (#332121)
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> 0.77-6
changelog:
  - add -e option to expire the password for user
  - compile the binary with PIE and full RELRO options


author: Akira TAGOH <tagoh@redhat.com> - 20081203-1
changelog:
  - update to 20081203 release.
  - clean up spec file.
  - changed the priority prefix for fontconfig to 66 according to Fontconfig packaging tips.


author: Akira TAGOH <tagoh@redhat.com> - 20090204-1
changelog:
  - New upstream release.
  - Update spec file for new packaging policy.
    - Renamed VLGothic-fonts to vlgothic-fonts.
    - Renamed VLGothic-fonts-proportional to vlgothic-p-fonts.
    - Added vlgothic-fonts-common.


author: Akira TAGOH <tagoh@redhat.com> - 20091202-1
changelog:
  - New upstream release.
  - Set the priority to 65 for vlgothic-p-fonts to override the rule in
    vlgothic-fonts for sans-serif.
  - Set the priority to 66 and contains both rules for sans-serif and monospace
    to avoid picking up the unrelated fonts in Live. where doesn't have
    vlgothic-p-fonts installed. (#544957)


author: Akira TAGOH <tagoh@redhat.com> - 20091202-2
changelog:
  - Improve fontconfig file to get rid of binding="same" and to
     match with "ja" as well. (#586848)
  - Set the priority to 65-0 for vlgothic-p-fonts to avoid the effects
    of 65-nonlatin.conf and similarly 65-1 to vlgothic-fonts. (#572929)


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1035941


author: Colin Walters <walters@redhat.com> - 2.26.1-8
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1036097


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.8-3
changelog:
  - Revert deprecations picked up through rebases to avoid further bugs
    like rhbz#1136304 (devhelp).


author: Colin Walters <walters@redhat.com> - 2.28.8-6
changelog:
  - Backport patch to avoid integer overflow on reuse of GMainContext
    source ids, which qemu hits.
    Resolves: #1212722


author: Colin Walters <walters@verbum.org> - 2.28.8-8
changelog:
  - Revert use of FAM on NFS - introduces perf regressions for deployments
    which are not using NFS for home directories; this is better handled
    in RHEL7.
    Resolves: #1399726
    Reverts: #725178


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Kai Engert <kaie@redhat.com> - 2014.1.98-65.2
changelog:
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate (rhbz#1138230).
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key.


author: Kai Engert <kaie@redhat.com> - 2015.2.3-65.1
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090630-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090630.
  - Reconverted from original TTF with better procedures of data conservation.


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090706-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090706.
  - Reconverted from original TTF with traditional kern table. (rh#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090713-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090713.
  - Generate TTFs with traditional kern table via fontforge scripts. (rh#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090713-2.fc12
changelog:
  - Required fontforge ver 20090408 which supports generation with traditional
    kern table. (rhbz#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090721-1.fc12
changelog:
  - Fixed fontforge scripting of sfd -> ttf generation.
  - Checked existance of traditionat kern table in Sans and Serif.


author: Miloslav Trmač <mitr@redhat.com> - 1.99-2
changelog:
  - Fix problems pointed out in merge review:
    - Drop Conflicts: SysVinit < very-old
    - Remove very old version requirements from Requires and BuildRequires
    - Make /etc/security/console.apps/* %config(noreplace)
    - Update BuildRoot


author: Miloslav Trmač <mitr@redhat.com> - 1.102-2
changelog:
  - Use %{?_smp_mflags}
  - Use the four-parameter version of %defattr
  - Be more paranoid about dropping privileges
  - Set PAM_TTY


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-9
changelog:
  - make sure conversion between aggregates with different
    sizes is never considered useless (#1113878)
  - fix gfortran ICE on old-style initialization of derived type
    components (#1113793)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-10
changelog:
  - backport two further OpenMP 4.0 libgomp tasking fixes (#1099549)
  - fix scheduler wrong-code with DEBUG_INSNs containing volatile ASM_OPERANDS
    (#1127118, PR rtl-optimization/61801)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-12
changelog:
  - only use PCH in toplevel inclusions (#1177458, PR pch/38987, PR pch/52518)
  - don't vectorize bitfield and boolean types (#1150606,
    PR tree-optimization/43390)
  - fix up a Cray pointer handling bug (#1134560, PR fortran/62174)
  - fix up stdarg optimization when address of a va_list variable escapes
    in a phi node (#1190640, PR target/64979)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-17
changelog:
  - change libgomp default spincount if OMP_WAIT_POLICY is not specified
    (#1229852, PR libgomp/43706)
  - remove -Wl,-z,nodlopen from Ada libraries, which no longer contain
    trampolines (#1241495)
  - guard __gcov_flush body in libgcov.a with a mutex (#1251488,
    PR gcov/49484, PR gcov-profile/52627)
  - add missing s390.exp hunk from -mhotpatch= support (#1233260)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-18
changelog:
  - fix up std::rethrow_exception (PR libstdc++/62258, #1380760)
  - fix fortran ICE in resolve_ordinary_assign (PR fortran/43362, #1356346)


author: Nicolas Mailhot <nim at fedoraproject dot org>
changelog:
  - 1.31-2
  — add yum-utils to deps
  - 1.31-1
  — Rework repo-font-audit messages based on packager feedback


author: Nicolas Mailhot <nim at fedoraproject dot org>
changelog:
  - 1.33-1
  — repo-font-audit: add ancilliary script to compare the results of two
    different runs
  - 1.32-1
  — repo-font-audit: add test for core fonts direct use
  — repo-font-audit: replace font naming tests by a more comprehensive one
    (in a separate utility)
  — repo-font-audit: add fedora packager detection
  — repo-font-audit: parallelize (at the cost of more filesystem space use)
  — repo-font-audit: misc output and reliability fixes


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282144


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-29
changelog:
  - Change reporting workflow to enhance the quality of opened customer cases
  - Limit the description section for ABRT reported cases
  - Resolves: #1258474, #1261398


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-31
changelog:
  - Add pkg_vendor, reproducer and reproducible to description
  - Attach all dump dir's element to a new case
  - Change libreport-version to 2.0.9.1
  - Resolves: #1261398


author: kwizart < kwizart at gmail.com > - 1.18-0.1.beta2
changelog:
  - Update to 1.18beta2
   fix bug #487508: CVE-2009-0723 LittleCms integer overflow
   fix bug #487512: CVE-2009-0733 LittleCms lack of upper-bounds check on sizes
   fix bug #487509: CVE-2009-0581 LittleCms memory leak


author: kwizart < kwizart at gmail.com > - 1.18-1
changelog:
  - Update to 1.18 (final)
  - Remove upstreamed patches
  - Disable autoreconf - patch libtool to prevent rpath issue


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-53
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1301758)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-55
changelog:
  - Resolves: #1372315 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-56
changelog:
  - Resolves: #1310582 - when ProxyErrorOverride is On, modcluster return
    503 status code on subsequent requests


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-58
changelog:
  - Resolves: #1349546 - comments no longer allowed at the end of Allow
    from statements and maybe other statements from mod_authz*


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.92
changelog:
  - Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * fix PAD and PRINT macros
  - Resolves: bz #1145442


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.93
changelog:
  - Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
    * make multipathd use uint64_t for tracking the interactive command
      fingerprint.
  - Resolves: bz #1316165


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.94
changelog:
  - Add 0251-RHBZ-1349376-fix-makefile.patch
    * make multipath use correct version of libdevmapper
  - Add 0252-RHBZ-1333334-huawei-config.patch
  - Add 0253-RHBZ-1305589-check-multipathd.patch
    * warn if multipath devices exist and mutipathd is not running
  - Add 0254-RHBZ-1310320-no-kpartx.patch
    * add skip_kpartx option to skip kpartx device creation
  - Add 0255-UPBZ-1322532-disable-reinstate.patch
    * do not reinstate unusable Implicit ALUA ghost paths
  - Add 0256-RHBZ-1324764-man-page-typo.patch
  - Add 0257-UPBZ-1328077-resize-map.patch
    * reset size if resizer operation fails
  - Add 0259-UPBZ-1343747-dont-fail-discovery.patch
    * keep multipath from failing if it fails to get information on any device
  - Add 0260-RHBZ-1364879-check-mpath-prefix.patch
    * ignore all devices that don't have a uuid starting with "mpath-"
  - Add 0261-RHBZ-1377532-disable-changed-paths.patch
    * do not use path devices that change their wwid
  - Resolves: bz #1299644, #1305589, #1310320, #1322532, #1324764, #1328077
  - Resovles: bz #1333334, #1343747, #1349376, #1364879, #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.95
changelog:
  - Modify 0254-RHBZ-1310320-no-kpartx.patch
    * fix small bug with unitialized data
  - Refresh 0261-RHBZ-1377532-disable-changed-paths.patch
  - Add 0262-RH-free-vector.patch
    * Fix coverity discovered bug in error path
  - Resolves: bz #1310320


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.96
changelog:
  - Add 0258-UPBZ-1300414-PURE_config.patch
  - Add 0264-RHBZ-1365710-no-use-after-free.patch
    * Fix two segfaults, and NULL out some structures after free
  - Add 0265-RHBZ-1390472-dont-exit.patch
    * don't exit if multipath hits recoverable errors during startup
  - Resolves: bz #1300414, #1365710, #1390472


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.97
changelog:
  - Add 0265-RHBZ-1355669-max-sectors-kb.patch
    * add "max_sectors_kb" config option to set this value on all paths
  - Change devicemapper Requires to >= 1.02.117-9.el6 (bz #1344381)
    * forces multipath to use latest version of blk-availability
  - Resolves: bz #1344381, #1355669


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.98
changelog:
  - Add 0266-RHBZ-1401391-fix-prio-put.patch
    * don't try to drop a nonexistant prio handler
  - Add 0267-RHBZ-1401769-orphan-status.patch
    * don't print out checker and device status for orphan paths
  - Resolves: bz #1401391, #1401769


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100
changelog:
  - Modify 0261-RHBZ-1377532-disable-changed-paths.patch
    * add man page information
  - Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
  - Related: #1377532


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.17-36
changelog:
  - fix regression with 'jobs' builtin output not going to stdout (#1338986)
  - fix several regressions in tcsh-6.17.00-quote-backslashes-properly.patch (#1334751)


author: Steve Grubb <sgrubb@redhat.com> - 0.14-2
changelog:
  resolves: #585919 - aide: Libgcrypt warning: missing initialization
  resolves: #587086 - [abrt] crash in aide-0.14-1


author: Steve Grubb <sgrubb@redhat.com> - 0.14-3
changelog:
  resolves: #590561 aide does not detect the change of SElinux context
  resolves: #590566 aide reports a changed file when it has not been changed


author: Tomas Sykora <tosykora@redhat.com> - 0.14-9
changelog:
  - RHEL-6.9 erratum
     - Fix aide logs with remote rsyslog causing unexpected results
     Resolves: rhbz#1305046


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1190302 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1190303 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #1167470 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-2
changelog:
  - Revert the version not to be rebased.
  - Fix bug 608988 - Cannot de-select Hanja lock in applet menu
    Resolves: #608988


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-4
changelog:
  - Resolves: #651915 Wrong window position with ibus-x11
    Added ibus-651915-x11-position.patch
  - Resolves: #633330 Fixed kn.po
  - Resolves: #635541 Fixed gu.po
    Added ibus-1.3.4-po-2010-11-17.tar.bz2


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-6
changelog:
  - Fixed Bug 667031 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Jindrich Novy <jnovy@redhat.com> 4.999.9-0.3.20091007.beta
changelog:
  - move xz man pages to main package, leave lzma ones where they belong
  - remove URL from Source0, it is a git snapshot


author: Pavel Raiskup <praiskup@redhat.com> - 4.999.9-0.4.beta.20091007git
changelog:
  - fix 'xzgrep -h' to behave as expected (#850898)
  - fix 'xzgrep -l' to behave as expected (#863024)
  - fix 'xzfgrep -F' to behave as expected (#988703)


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-36
changelog:
  - #1201024 - [RFE] Increase sysctl -p line size limit
  - #1246573 - typo in ps man page
  - #1251101 - Fixing human readable patch (removing trailing spaces)
  - #1284076 - [RFE] Support for thread cgroups
  - #1288208 - use of /proc/self/auxv breaks ps when running as a different euid
  - #1288497 - pmap - no sums computed for RSS and Dirty column
  - Resolves: #1201024 #1246573 #1251101 #1284076 #1288208 #1288497


author: Jan Rybar <jrybar@redhat.com> - 3.2.8-43
changelog:
  - Rework of patch 91 from 3.2.8-37, stripping removed permanently, no new option
  - Resolves: rhbz#1322111


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-138
changelog:
  - Fix backslash interpolation in Locale::Maketext (bug #1025906)
  - Do not ignore single-letter-named packages by Module::Plugable (bug #1086215)
  - Run-require exact version of perl-libs by perl-suidperl (bug #1161170)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.10.1-143
changelog:
  - Fix typo in name of the signal PIPE in IPC::Cmd (bug #1315053)
  - Fix crash in httpd mod_perl Perl_sv_pvn_force_flags (bug #1364206)


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Mark Wielaard <mjw@redhat.com> - 0.158-3.2
changelog:
  - Add elfutils-0.158-unstrip.patch (#806474)
  - Add elfutils-0.158-readelf-nostrings.patch (#1101440)


author: Mark Wielaard <mjw@redhat.com> - 0.161-3
changelog:
  - Update to 0.161. (#1167724)
  - Add elfutils-0.161-ar-long-name.patch (#1181525 CVE-2014-9447)
  - Add elfutils-0.161-formref-type.patch


author: Mark Wielaard <mjw@redhat.com> - 0.164-1
changelog:
  - Update to elfutils-0.164 (#1254647)
  - Drop old compat stuff
  - Drop upstreamed patches
    - elfutils-0.161-ar-long-name.patch
    - elfutils-0.161-formref-type.patch
  - Include elfutils/known-dwarf.h


author: Karel Zak <kzak@redhat.com> 2.17.2-12.19
changelog:
  - fix #1088411 - lsblk does not list dm-multipath and partitioned devices
  - fix #1215840 - slogins segfault and failure to allocate memory
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty
  - fix #1168390 - lscpu doesn't show all nodes on a discontinuous NUMA setup
  - fix #1191236 - 'umount -f' calls readlink on dead NFS mounts and hangs
  - fix #1172297 - umount --fake fails to edit mtab for NFS mounts which are already gone
  - fix #961148  - RHEL6: swapon: add "discard" support
  - fix #1150302 - ionice support class names
  - fix #1085062 - fdisk -l fails to fully process /proc/partitions when multipath device
  - fix #1122839 - fallocate and findmnt have wrong options according to man pages
  - fix #1089663 - Not all xfs mount options are described in mount(8)
  - fix #1295737 - man page for hwclock doesn't include --compare option
  - fix #1140594 - mount --move badly documented
  - fix #1296894 - RHEL6: update audit event in hwclock
  - fix #1266191 - fdisk does not handle >2TB disks correctly


author: Karel Zak <kzak@redhat.com> 2.17.2-12.26
changelog:
  - fix #1320360 - lscpu shows wrong "Virtualization type" on Xen paravirtualization guest (PV)
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1310035 - Hostname not being displayed besides the telnet login prompt
  - fix #1310317 - fdisk -l fdisk double open fd
  - fix #1337478 - wrong error handler and/or error message on fdisk call as not root user


author: Karel Zak <kzak@redhat.com> 2.17.2-12.27
changelog:
  - fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty


author: Peter Hutterer <peter.hutterer@redhat.com> 0.7-1
changelog:
  - Rename to system-setup-keyboard, update the URL and Source0 accordingly.
    Obsoletes fedora-setup-keyboard.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.7-4
changelog:
  - system-setup-keyboard-0.7-all-keyboards.patch: apply keyboard layout to
    all key devices, not just those with input.keyboard capabilities (#595654).


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Martin Stransky <stransky@redhat.com> - 17.0.9-2
changelog:
  - Added patch for rhbz#983488 - Resizing window changes window
    size to 0 with third party window manager.


author: Jens Petersen <petersen@redhat.com> - 1.0.2-0.9.080608
changelog:
  - update to new fonts packaging and naming (#477474)
  - moved bold (and light) weights into main subpackages (#468618)
  - add obsoletes for renaming and former bold subpackages (#468618)


author: Daiki Ueno <dueno@redhat.com> - 1.0.2-0.13.080608
changelog:
  - assign higher priority (65- -> 65-0-) to .conf files to avoid the
    effects of 65-nonlatin.conf
  - remove binding="same" from .conf files


author: Daiki Ueno <dueno@redhat.com> - 1.0.2-0.14.080608
changelog:
  - add "ko" as well as "ko-kr" to the lang test of .conf files to avoid
    some glyphs to be rendered with wqy-zenhei-fonts


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Matthias Clasen <mclasen@redhat.com> - 1:0.23-6
changelog:
  - Remove a patch that is no longer necessary and causes more
    problems than it solves (#224148)
  - Include Requires.private in --print-requires (#426106)


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-23
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Petr Lautrbach <plautrba@redhat.com> 2.0.43-5.1
changelog:
  - Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions
  Resolves: rhbz#872700
  - Fix sources to pass all tests
  Rsolves: rhbz#591451


author: Akira TAGOH <tagoh@redhat.com> - 0.108.0-2
changelog:
  - Fix issue the invocation of IM always fails in the internal status. (#582448)
  - Add imsettings-lxde subpackage.


author: Jens Petersen <petersen@redhat.com> - 0.108.0-3.5
changelog:
  - only enable XIM for X locale compose for necessary locales (#616061)
    (for pt_BR, fi_FI, am_ET, el_GR, and ru_RU):
  - drop imsettings-none.conf-gtk-xim-default.patch
  - add imsettings-xinput-xcompose.patch


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Jan Kaluza <jkaluza@redhat.com> 5.04-22
changelog:
  - fix #1169509 - add support for Java 1.7 and 1.8
  - fix #1243650 - comment out too-sensitive Pascal magic
  - fix #1080453 - remove .orig files from magic directory
  - fix #1161058 - add support for EPUB
  - fix #1162149 - remove parts of patches patching .orig files
  - fix #1154802 - fix detection of zip files containing file named "mime"
  - fix #1246073 - fix detection UTF8 and UTF16 encoded XML files
  - fix #1263987 - add new "execfn" to coredump output to show the real name of
    executable which generated the coredump
  - fix #809898 - add support for detection of Python 3.2-3.5 byte-compiled files
  - fix #966953 - backport support for MSOOXML


author: Jan Kaluza <jkaluza@redhat.com> 5.04-27
changelog:
  - fix CVE-2014-3587 (incomplete fix for CVE-2012-1571)
  - fix CVE-2014-3710 (out-of-bounds read in elf note headers)
  - fix CVE-2014-8116 (multiple DoS issues (resource consumption))
  - fix CVE-2014-8117 (denial of service issue (resource consumption))
  - fix CVE-2014-9620 (limit the number of ELF notes processed)
  - fix CVE-2014-9653 (malformed elf file causes access to uninitialized memory)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Ray Strode <rstrode@redhat.com> 0.8.3-19
changelog:
  - Add explicit, versioned dep on core-libs subpackage to various
    parts of the spec file to silence rpmdiff
    Related: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-21
changelog:
  - Update lock icon dimensions to match dimensions of old
    icon to silence rpmdiff
    Related: #612665


author: Ray Strode <rstrode@redhat.com> 0.8.3-28
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1120904


author: Tomas Mraz - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-5
changelog:
  - move library to /lib so the binaries needed when /usr might
    not be mounted can link to it (#669077)


author: Miroslav Suchý <msuchy@redhat.com> 0.5.0-4
changelog:
  - 612998 - remove binaries. Just in case
  - 612998 - filter provide PAMmodule.so()(64bit)
  - 612998 - do not use INSTALLED_FILES feature, and enumerate files manualy
  - 612998 - use %{__python} in %build section
  - 612998 - fix buildrequires for PyPAM
  - 612998 - add macros for rhel5


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1065067 - Audit package rebase
  resolves: #810749 - audit allows tcp_max_per_addr + 1 connections
  resolves: #869555 - ausearch -i does not interpret execve arguments always
  resolves: #888348 - auditd won't start when some actions send mail
  resolves: #922508 - confusing aulast records for bad logins
  resolves: #950158 - man page unclear wrt num_logs affecting keep_logs setting
  resolves: #967238 - Audit rules are built from a directory of rule files
  resolves: #967240 - ausearch to checkpoint so only reports new events
  resolves: #970675 - auparse is truncating path context after first category
  resolves: #1011052 - Missing text in auditd.conf man page
  resolves: #1022035 - Case values for actions unclear in auditd.conf man page
  resolves: #1029981 - ausearch help typo for "-x" option
  resolves: #1049916 - ausearch issues found by ausearch-test
  resolves: #1053424 - Error in auparse-defs.h
  resolves: #1071580 - audispd config file parser fails on long input
  resolves: #1089713 - limit of 30 for system call in audit.rules


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-4
changelog:
  resolves: #1049916 - Handle i386 session ID's better
  resolves: #1120286 - ausearch -i does not display commas between categories


author: Steve Grubb <sgrubb@redhat.com> 2.4.5-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1129076 - auvirt --help shows an incorrect option "--show--uuid"
  resolves: #1138674 - auditd may fail to start if configured to send mail
  resolves: #1144252 - Auditctl should not send warnings to console during boot
  resolves: #1197235 - ausearch can't parse time in non-US locale/UTF-8 encoding
  resolves: #1235457 - Line buffer is too short for plugin config files
  resolves: #1257650 - Rebase audit package


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.4.1567-2
changelog:
  - updated to 1.16.4
  - rediffed/updated patches
  - splitted some subpackages (c++, client) out of main package as they
    introduce additional dependencies (c++, curl)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.24-1200.1840
changelog:
  - updated to 1.16.24
  - rediffed patches
  - added patch fix handling of wrong certificates (Nikola Pajkovsky)
  - added support for $XMLRPC_TRACE_CURL env (John Dennis)
  - fixed 'xmlrpc-c-config --help' output (#531910)
  - build xmlrpc_pstream tool


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.2
changelog:
  - backported GSSAPI delegation from upstream version 1.27.04 with strong attention
    to libxmlrpc++ client ABI backward compatibility (#719945)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.3
changelog:
  - Fix memory leak in libxmlrpc_client.so (#741641)
  - Remove autoconf variables from pkgconfig files that are not used (#653702)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1209.1840
changelog:
  - fixed various RpmDiff warning messages about missing sub-packages requires
  - added Requires libcurl to the client/apps packages (.so libraries needed)
  - specified BuildRequires curl-devel version for CURLOPT_GSSAPI_DELEGATION option
  - fix & increase release number (svnrev should be after N-V-R)


author: Harald Hoyer <harald@redhat.com> 004-399
changelog:
  - add hyper kernel modules
  Resolves: rhbz#1298445 rhbz#1223315
  - fix ifcfg generation
  Resolves: rhbz#1261893
  - support multiple vlan definitions
  Resolves: rhbz#1111358
  - support setting of MTU via ip=..:ibft:<mtu>
  Resolves: rhbz#1076465
  - use cpio -R root:root rather than cpio -R 0:0
  Resolves: rhbz#1049763
  - fail hard if final image could not be written
  Resolves: rhbz#1252449
  - create correct bonding interface
  Resolves: rhbz#1263013


author: Harald Hoyer <harald@redhat.com> - 004-403
changelog:
  - network/ifup: use the correct interface name for the vlan parent
  - iscsiroot: for iscsi_firmware retry, if iscsistart -N fails
  Resolves: rhbz#1111358


author: Harald Hoyer <harald@redhat.com> - 004-408
changelog:
  - add more kernel modules for crypt
  Resolves: rhbz#1322893
  - trigger acpi subsystem before running plymouth
  Resolves: rhbz#1218130


author: Harald Hoyer <harald@redhat.com> - 004-409
changelog:
  - don't handle "iscsistart -N" exit value
    start iscsistart -b more reliably in the background
  Resolves: rhbz#1324340


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Jens Petersen <petersen@redhat.com> - 0.17-9
changelog:
  - add buildjava switch to allow turning off the java bits completely
  - add buildcheck to allow turning off make check
  - drop cvs requires for autopoint (Karl Lattimer, #469555)
  - add upstream gettext-xgettext-python-unicode-surrogate-473946.patch by
    Bruno Haible to fix xgettext handling of utf16 surrogates in python (#473946)


author: Jens Petersen <petersen@redhat.com> - 0.17-15
changelog:
  - bring back autopoint requires cvs (#517361)
  - requires info rather than /sbin/install-info
  - drop install_info and remove_install_info macros


author: Jens Petersen <petersen@redhat.com> - 0.17-16
changelog:
  - fix FTBFS by removing openmp.m4 which conflicts with recent autoconf (#539211)
  - cleanup gettext-0.17-rpathFix.patch
    - separate gl_AC_TYPE_LONG_LONG replacement to another patch
    - use trailing ':' for tests LD_LIBRARY_PATH
  - run autogen.sh with --quick and --skip-gnulib


author: Daiki Ueno <dueno@redhat.com> - 0.17-18
changelog:
  - drop BR: java-1.6.0-openjdk-devel, because:
    - it was only needed for javadoc, but the regeneration of javadoc
      files is not necessary
    - the s390/s390x buildroots are lacking the package for el6


author: Thomas Haller <thaller@redhat.com> - 1:0.8.1-104
changelog:
  - core: ignore slave devices when deciding global state (rh #951399)
  - dns: don't override DHCP-supplied search order with domain (rh #1202539)
  - build: fix building source package on recent Fedora (rh #1286742)
  - ibft: add settings plugin (rh #1198325)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:0.8.1-105
changelog:
  - ifcfg-rh: delay handling of deletion events (rh #1272617)
  - ifcfg-rh: load connections during GetIfcfgDetails avoiding ifup race (rh #1292753)
  - ifcfg-rh: leave bridge/bond/vlan to initscripts when support disabled (rh #1292753)
  - bond: avoid assuming connections on bond masters that are not up (rh #1292502)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:0.8.1-108
changelog:
  - dns: added new dns=none option to disable updating of resolv.conf (rh #1308730)
  - core: downgrade message level for unknown device driver (rh #1331314)
  - infiniband: compare only last 8 octects for MAC address (rh #1353033)
  - po: update translation (rh #1321723)


author: Thomas Woerner <twoerner@redhat.com> 1.3.1-3
changelog:
  - dropped
      ar-azerty, ar-azerty-digits, ar-digits, ar-qwerty, ar-qwerty-digits,
      ben, ben-probhat, dev, guj, gur, ie, ro-cedilla, ro-std, ro-std-cedilla,
      tj, tml-inscript and tml-uni
    from keyboard layouts because of missing kbd maps (rhbz#606820)


author: Thomas Woerner <twoerner@redhat.com> 1.3.1-4
changelog:
  - split out base components into base sub package (rhbz#771389)
  - added missing requirement for dbus-python to base package


author: Adam Jackson <ajax@redhat.com> 1.17.4-7
changelog:
  - Add bug-compatibility for exposure event generation for backing store's
    Always mode, and re-enable the feature


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-21
changelog:
  - fixfiles verify: do not relabel /tmp and /var/tmp dirs
  Resolves: rhbz#1113083
  - Fix semanage -S <store> -o <output>
  Resolves: rhbz#1122850


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-23
changelog:
  - Move python scripts in /usr/share/system-config-selinux to policycoreutils-python
  Resolves: rhbz#995778


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-26
changelog:
  - restorecond: treat root as a regular user
  Resolves: rhbz#1281877
  - semanage: don't skip reserver_port_t
  Resolves: rhbz#1225806
  - semanage: check if a store exists
  Resolves: rhbz#1208801
  - fixfiles: check the SELinux status
  Resolves: rhbz#1240788


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-27
changelog:
  - sandbox: Improve comments in sysconfig file
  Resolves: rhbz#1159336
  - secon, newrole: fix inconsistence between --help and man page
  Resolves: rhbz#1278811, rhbz#1278913


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.1.0-5
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1229871)
  - document some options of the speed command (#1197095)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-49
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
  - fix CVE-2016-0799 - memory issues in BIO_printf


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-50
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength
  - replace expired testing certificates


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - disallow DH keys with less than 1024 bits in TLS client
  - remove support for weak and export ciphersuites
  - use correct digest when exporting keying material in TLS1.2 (#1376741)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.40-1
changelog:
  - Version bump to 0.40. (Red Hat Bugzilla #466359)
  - Add patch from upstream to fix crash in icalvalue.c.
  - Update makefile patch, remove the test part (already applied).
  - Package libical.pc, add Requires: pkgconfig to -devel.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.41-2
changelog:
  - Switched off ICAL_ERRORS_ARE_FATAL for all distributions, except Fedora 11.
    (Red Hat Bugzilla #478331)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-1
changelog:
  - Version bump to 0.43.
  - Added patch to fix implicit pointer conversion from Debian. (Debian BTS
    - Upstream has switched off ICAL_ERRORS_ARE_FATAL by default. This behaviour
    is being retained across all distributions, including Fedora 11.
  - Added 'Requires: tzdata'.
  - Enabled backtrace dumps in the syslog.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-4
changelog:
  - Updated patch to fix #includes in the headers to work with
    'pkg-config --cflags libical'. (Red Hat Bugzilla #484091)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.6.1-5
changelog:
  - Replace expensive %{_libdir}/pkgconfig dependency in uuid-devel
    with pkgconfig%{_isa} for Fedora >= 11 (#484849).


author: Remi Collet <Fedora@FamilleCollet.com> - 1.6.1-7
changelog:
  - rebuild for new PHP 5.3.0 ABI (20090626)
  - add PHP ABI check
  - use php_extdir
  - add php configuration file (/etc/php.d/uuid.ini)


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-4
changelog:
  - Remove ucm and topology files from the /usr/share/alsa tree
  - Coverity fixes
  - Resolves: rhbz#838948


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-5
changelog:
  - Patch pth-config.
    This shall fix the multiarch conflict in pth-devel (#342961).
    It must not return -I/usr/include and -L/usr/{lib,lib64} either,
    since these are default search paths already.
  - Replace the config.status CFLAGS sed expr with a patch.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.9-1
changelog:
  - handle component destruction (patch by Richard W.M. Jones)
  - fix newtWinEntry definition
  - don't use uninitialized values in newtWinMenu
  - remove workarounds for old bug in SLsmg_write_nstring
  - improve SIGWINCH handling in form
  - don't abort from whiptail gauge on SIGWINCH
  - redisplay also last line
  - update Polish translation (Piotr Drąg)
  - update URL and Source tag


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-1
changelog:
  - improve --noitem description (#456305)
  - add setHeight to Textbox class
  - fix fixedheight forms
  - free keymap in newtFinished()
  - fix memory leak in textbox
  - fix valgrind error in checkboxtree
  - don't crash when running empty form
  - don't crash or hang when form has no focusable elements
  - before checkboxtree drawing return first item in GetCurrent()
  - redraw textbox in SetText()
  - add setColor description to SnackScreen docstring (Greg Swift)
  - make sure Widget isn't used directly (Greg Swift) (#452920)
  - add Serbian translations (Miloš Komarčević)
  - add Balochi translation (Mostafa Daneshvar)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-1
changelog:
  - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)
  - use full textbox width when reflowing and allow minimal width 1
  - fix writing lines longer than width in textbox
  - don't use va_list in newtvwindow more than once (#523696)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - terminate string after reading file in whiptail
  - add newtRadioSetCurrent function (Thomas Jarosch)
  - add pkgconfig support (Thomas Jarosch)
  - add Malay, Malayalam, Assamese, Gujarati, Bengali India, Kannada, Telugu
    translations
  - include tutorial in txt format
  - include debian patches
    - fix crash in textbox SetText when topLines != 0
    - don't link modules with libraries already linked with libnewt
    - add Asturian and Marathi translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-3
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets (#707704)


author: Tim Waugh <twaugh@redhat.com> 4.0-2.20090702
changelog:
  - Move foomatic-db-ppds symlink to ppds sub-package.
  - Use sed instead of perl in raster PPDs (bug #512739).
  - Removed code to convert old-style printer IDs (there are none).
  - Ship README file.


author: Tim Waugh <twaugh@redhat.com> 4.0-3.20090702
changelog:
  - License for ppds sub-package should include GPLv2+.
  - Ship COPYING file in main package.
  - Added filesystem sub-package for directory ownership.


author: Tim Waugh <twaugh@redhat.com> 4.0-5.20090819
changelog:
  - Updated to foomatic-db-4.0-20090819.
  - Removed deprecated foomatic-db-hpijs tarball.
  - Use buildroot macro throughout.


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-1
changelog:
  - update to 2.8.15
  - update cracklib-words to the current version (2008-05-07)
  - fixup URLs for various dictionary sources that we use
  - fix freeing-an-uninitialized-pointer in the python module (SF#2907102)
  - add a disttag


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-3
changelog:
  - Detect and warn about mismatch between devices used and assumed for an LV.
  - If available, use /proc/self/mountinfo to detect mounted volume in fsadm.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-4
changelog:
  - Remove spurious error about no value in /sys/dev/block/major:minor/dm/uuid.
  - Fix device mismatch detection for LV if persistent .cache file is used.
  - Fix holder device not being found in /dev while sysfs has it during dev scan.
  - Document that lvmlockd and lvmpolld features are available only if compiled in
    (RHEL6 lvm2 doesn't have lvmlockd and lvmpolld compiled in).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-7
changelog:
  - Workaround for raid leg allocation failure after not-in-sync raid leg failure.
  - Fix flushing of outstanding IO for mirror target (2.02.133).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-8
changelog:
  - Prevent non-synced raid1 repair unless --force
  - Fix automatic updates of PV extension headers to newest version.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-9
changelog:
  - Fix lvchange --discard|--zero for active thin-pool.
  - Fix lock-holder device for thin pool with inactive thin volumes.
  - Use any inherited tags when wiping metadata sub LVs to ensure activation.
  - Do not issue "Failed to create directory" message for dm_create_dir failure.
  - Add Conflicts: lvm2-libs < 2.02.111 to device-mapper-event to prevent
    incorrect package setup if old and new device-mapper/lvm2 packages combined.
  - Move blkdeactivate/blk-availability script from lvm2 to device-mapper package.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-10
changelog:
  - Disable queueing on mpath devs in blk-availability initscript.
  - Add new -m|--mpathoption disablequeueing to blkdeactivate.
  - Prevent only repair for non-synced raid1 unless --force, not other raid types.


author: Milan Broz <mbroz@redhat.com> - 1.2.0-2
changelog:
  - Require libgcrypt and device-mapper versions supporting FIPS extensions.
  - Request buffer wipe for dm-ioctl when sending key data.
    Resolves: #674825


author: Milan Broz <mbroz@redhat.com> - 1.2.0-3
changelog:
  - Require updated device mapper library (secure flag).
  - Use FIPS RNG for keyslot salt in FIPS mode.
    Resolves: #692512 #693371


author: Milan Broz <mbroz@redhat.com> - 1.2.0-7
changelog:
  - Fix device lookup function.
  - Fix duplicate directories displayed in status output.
    Resolves: #755478 #746648


author: Orion Poplawski <orion@cora.nwra.com> - 0:1.7.5-3.8
changelog:
  - Add Requires: coreutils because we provide scripts that are being executed
    in rpm %post scriptlets that require it.


author: Dodji Seketeli <dodji@redhat.org> - 0.15-0.6.gitad322
changelog:
  - Remove the cloog.info that is in the tarball
    That forces the regeneration of a new cloog.info with
    suitable INFO_DIR_SECTION, so that install-info doesn't cry
    at install time.
  - Slightly changed the patch to make install-info actually
    install the cloog information in the info directory file.
  - Run install-info --delete in %preun, not in %postun,
    otherwise the info file is long gone with we try to
    run install-info --delete on it.


author: Dodji Seketeli <dodji@redhat.com> - 0.15-0.8.git1334c
changelog:
  - Update to new upstream git snapshot
  - Drop the cloog.info patch as now upstreamed
  - No need to add an argument to the --with-ppl
    configure switch anymore as new upstream fixed this


author: Dodji Seketeli <dodji@redhat.com> - 0.15.7-1
changelog:
  - Update to new upstream version (0.15.7)
  - Do not build from git snapshot anymore. Rather, got the tarball from
    ftp://gcc.gnu.org/pub/gcc/infrastructure/cloog-ppl-0.15.7.tar.gz
  - The upstream tarball is named cloog-ppl, not cloog. Adjusted thusly.
  - Use system libtool to disable standard rpath
  - Do not try to touch the info file if it's not present. Closes #515929.


author: Bastien Nocera <bnocera@redhat.com> 2.28.6-7
changelog:
  - Add killswitch clean up patches
  - Fix status of the applet icon when bringing back from hard
    killswitch
  Resolves: #609291


author: Bastien Nocera <bnocera@redhat.com> 2.28.6-8
changelog:
  - Add more killswitch patches, handle the case where the
    only killswitch disappears with the adapter
  Resolves: #609291


author: Adam Jackson <ajax@redhat.com> 1:7.2-3
changelog:
  - Move bdftruncate (and its perl dependency) to a subpackage.
  - %doc for the non-empty READMEs and non-stub COPYINGs.


author: Dan Winship <danw@redhat.com> - 0.3.0-6
changelog:
  - Fix build with xulrunner 17 (#916973)
  - Fix to not look for proxy.conf in current directory (#802765)
  - Fix a crash with webkit and invalid PAC file (#874492)
  - Fix a crash with URLs containing a username but no password (#979356)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.25-17
changelog:
  - produce better error message when client reaches maximum number of dbus objects (#1292862)
  - don't print backtrace if avahi-discover can't connect to avahi-daemon (#1110349)
  - introduce new subpackage with python bindings (#753905)
  - avahi-daemon initscript improvements (#584766)
  - avahi-dnsconfd initscript improvements (#584761)


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-1
changelog:
  - updated translations: bn_IN, de, fi, fr, gu, hi, it, ja, kn, ko, ml, mr, or,
                          pt_BR, ru, ta, te, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985, rhbz#719871)
  - stop D-BUS firewall mechanism on update


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-6
changelog:
  - Added missing dependency for newt-python (RHBZ#756048)
  - Latest translations from transifex (RHBZ#819809)
  - Allow user to select and add trust and masq interfaces (RHBZ#720831)
  - New D-Bus methods to read an write service settings, use in s-c-fw (RHBZ#711231)
  - Drop eth from std device names list (rhbz#682391)


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-7
changelog:
  - Fixed screen corruption introduced with (RHBZ#720831)
  - Replaced pickle by json introduced with (RHBZ#711231)


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-7.2
changelog:
  - moved fw_nm into the base sub package to fix a bug introduced with the
    RHBZ#720831 fix (RHBZ#1164223)


author: Michal Sekletar <msekleta@redhat.com> - 0.4.1-4
changelog:
  - identify X session launched on currently used VT as active (#1058647)
  - upstart-0.6.0 and higher doesn't use /etc/event.d anymore, move ck-log-system-restart and friends to /etc/init (#681696)
  - fix CVE-2010-4664 (#585952)
  - added logrotate config file (#634935)
  - bump maximum device name length. Fix issue with certain devices where device name is longer than 16 characters (#1070249)


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-4
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639860


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032488 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269361 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45


author: Chris Lumens <clumens@redhat.com> - 0.7-1
changelog:
  - Add a test case framework.
  - Move src -> meh for ease of test case writing.
  - Another attempt at making the attrSkipList work (#532612, #532737).


author: Chris Lumens <clumens@redhat.com> - 0.8-1
changelog:
  - And add a requirement for report as well. (clumens)
  - filer.py is now completely taken over by meh. (clumens)
  - Everything from savers.py has moved into report. (clumens)
  - Remove unused UI code now that report handles all this for me. (clumens)
  - Switch ExceptionHandler to use report (#562656). (clumens)
  - Don't allow an exception when writing out an attribute stop the whole dump. (clumens)
  - Credit where credit is due. (clumens)


author: Chris Lumens <clumens@redhat.com> - 0.9-1
changelog:
  - Remove the requirement on python-bugzilla (#602794). (clumens)
  - Rename ba.po -> bs.po (#583055). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.11-1
changelog:
  - Update the spec file URL to something valid (#670601). (clumens)
  - Don't use _D for Debug, since that's already used by the expander (#640929). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> 0.11-2
changelog:
  - Change dependency to libreport-* (mtoman)
    Resolves: rhbz#730924
  - Add abrt-like information to bug reports (vpodzime).
    Resolves: rhbz#728871


author: Vratislav Podzimek <vpodzime@redhat.com> 0.12.1-1
changelog:
  - Adapt to new libreport API (vpodzime).
    Resolves: rhbz#769821
  - Add info about environment variables (vpodzime).
    Resolves: rhbz#788577


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-3
changelog:
  - prevent setfacl --restore from SIGSEGV on malformed restore file (#576512)
  - run the test-suite if possible


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-5
changelog:
  - clarify that removing a non-existent acl entry is not an error (#674883)
  - update project URL in package specification (#702638)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-6
changelog:
  - add function acl_extended_file_nofollow() (#720318)
  - build with partial RELRO support as a security enhancement (#723998)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-7
changelog:
  - fix SIGSEGV of getfacl -e on overly long group name (#1025246)
  - fix test-suite failure on a repeated run (#743847)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.1-16.20090824bzr68
changelog:
  - Rebase to new upstream snapshot
  - Patches merged upstream
  - Fixes deprecation warnings on py2.6/py3.0
  - Remove py2.3 patch -- only needed for EPEL-4


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: Ondrej Vasik <ovasik@redhat.com> - 1.0.44
changelog:
  - fix ISO entities for 4.5 SGML, use XML at the end of
    public identificators of XML 4.1.2 ISO entities


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10.el6_6
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1172165
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-14
changelog:
  - release the GSSAPI server credential handle immediately after the
    GSSAPI security context is established (#825863)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-15
changelog:
  - don't use " for saslauth user's description (#1081445)
  - backport the ad_compat option (#994242)
  - fixed a memory leak in the client side DIGEST-MD5 code (#838628)


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-30
changelog:
  - Add missing manpages.
  - Related: bug#981773
  - needs-restarting: catch IOError.
  - Related: bug#1078724


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-32
changelog:
  - post-transaction-actions: allow colons in command part.
  - Resolves: bug#1134973
  - ovl plugin: new plugin for overlayfs issue workaround.
  - Resolves: bug#1260977


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-33
changelog:
  - Fix yum-security manpage.
  - Resolves: bug#865694
  - Resolves: bug#1208155
  - Add libxml2-python to Requires for repo-rss.
  - Resolves: bug#1155093
  - yumdownloader: fix description of --archlist in the manpage.
  - Resolves: bug#1165661
  - Add missing options to reposync manpage.
  - Resolves: bug#1189033
  - Exclude dups from the list of security updates.
  - Resolves: bug#1209212
  - yum-config-manager: update config file specified using -c option.
  - Resolves: bug#1225753
  - yum-config-manager: require \* syntax to disable all repos.
  - Resolves: bug#1225754
  - Remove -v from repoquery man page.
  - Resolves: bug#1285748


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-34
changelog:
  - Fix 'updateinfo list available' logic and make 'updates' the default.
  - Resolves: bug#1144887
  - Fix updateinfo to exclude wrong arch updates.
  - Resolves: bug#1191313


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-36
changelog:
  - Fix performance issue when excluding dups from the list of security updates.
  - Related: bug#1209212


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-38
changelog:
  - Fix count of applicable security updates.
  - Resolves: bug#1347813
  - auto-update-debuginfo: fix check for repos in opts.
  - Resolves: bug#1293982
  - yum-plugin-verify: set exit status to 1 in case of problems.
  - Resolves: bug#1313574
  - repoquery: fix --pkgnarrow=installed.
  - Resolves: bug#1280453


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> -1.1.30-39
changelog:
  - Filter duplicates when counting security updates.
  - Resolves: bug#1272025
  - Update yum-verify man page.
  - Related: bug#1347813


author: Tim Waugh <twaugh@redhat.com> 0.0.4-7
changelog:
  - Fix small memory leak and move malloc() check close to call (bug #718176).
  - Requires chkconfig (bug #712362).


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Adam Jackson <ajax@redhat.com> 1.6.0-18
changelog:
  - Silence amazing amounts of log spam in the i2c code (#888607)
  - Fix a crash in DDC fetch (#888607)


author: Martin Sivak <msivak@redhat.com> - 3.9-18
changelog:
  - Fix a segfault when overrides line was incomplete
    Resolves: rhbz#673100
  - Added backports directory to depmod search path
    Resolves: rhbz#761511


author: Tony Camuso <tcamuso@redhat.com>
changelog:
  - weak-modules: when adding a module, should collect the symbols from
    external modules of destination kernel
    Resolves: rhbz#1284935

  - weak-modules: Updating kernel was issuing warnings upon removal of
    old kernel.
    Resolves: rhbz#1343376

  - weak-modules: weak-modules does not handle periods in symbol names
    Resolves: rhbz#1389067


author: Rex Dieter <rdieter@fedoraproject.org> - 4.0-2
changelog:
  - %files: track files closer, esp lib sonames
  - %build: drop --disable-doxygen, add --disable-static, add %{?_smp_mflags}


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-1
changelog:
  - New version
    Resolves: rhbz#1064668
    Resolves: rhbz#982215
    Resolves: rhbz#1126757
    Resolves: rhbz#1167766
    Resolves: rhbz#1171806
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#799863
  - Documented --fixed-regexp option
    Resolves: rhbz#1103270


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1193030
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed bogus date in the changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1256756


author: Adam Jackson <ajax@redhat.com> 0.3.6-5
changelog:
  - Add <xcb/xcb_util.h> and xcb-util.pc for source compat with >= 0.3.8
  - Backport pkgconfig fix from upstream
  - Don't install -{icccm,image,keysyms}, they live in their own srpms now


author: Jens Petersen <petersen@redhat.com> - 1.2.7-2
changelog:
  - add new gnome-icon-theme style icons by Lapo Calamandrei and Jakub Steiner
    (mizmo, #587712)
  - add scriptlets for icon cache


author: Akira TAGOH <tagoh@redhat.com> - 1.3.1-1
changelog:
  - New upstream release.
    - Fallback to the themed icon if no icons are installed
      on the specified path. (#604482)


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-22
changelog:
  - pam_tally2: added no_lockf_timeout option, do not use it
  - pam_tally2: added debug option
  - pam_tally2: do not create the log file as executable (#1186361)
  - add manpage symlink for environment(5) (#1110258)
  - pam_group: add support for Development/Debug syntax (#1114220)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-23
changelog:
  - pam_succeed_if: properly work with large uids
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - pam_access: check for (group) match first (#1359303)


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-16
changelog:
  - Fix memory leak
    Resolves: rhbz#1192154
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1151559


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1199355
  - Remove enable-resizable-surface0.patch. It's causing more troubles than
    it solves, and QEMU now has the needed ram/vram support to make it
    unnecessary
    Resolves: rhbz#1140765


author: Frediano Ziglio <fziglio@redhat.com> 0.1.1-19
changelog:
  - Remove RHEL 7 hack
    Resolves: rhbz#1226723
  - Fix memory leak caused by image cache
    Resolves: rhbz#1221010


author: Steve Dickson <steved@redhat.com> 1.4.12-1
changelog:
  - Updated to latest stable upstream version: 1.4.12
  - API documentation is now installed (bz 487977)
  - libevent-devel multilib conflict (bz 477685)
  - epoll backend allocates too much memory (bz 517918)


author: Adam Jackson <ajax@redhat.com> 10.2-3
changelog:
  - cdparanoia-10.2-endian.patch: Backport a crash fix for host/drive
    endianness mismatch. (#466659)


author: Bill Nottingham <notting@redhat.com> 1.3.49.1-1
changelog:
  - backport LSB fixes from head
  - fixes: #693202/#771455, #649227/#771452, #750446/#771454, #701573/#771741, #696305 (<jbastian@redhat.com>)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.49.4-1
changelog:
  - chkconfig: don't create symlinks if they already exist
  - chkconfig: resetpriorities should work on all runlevels
  - leveldb: fix segfault when selinux policy is not present
  - alternatives: always recreate symlinks when the alternative is updated


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.6-1
changelog:
  - update to 2.6.6 (#588781)
  - move sasl config to /etc/sasl2 (#574439)
  - drop sasl v1 support
  - require Date::Calc for pflogsumm (#588726)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-7
changelog:
  - Backported patch to use long integers for message_size_limit,
    mailbox_size_limit and virtual_mailbox_limit
    Resolves: rhbz#907387


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-8
changelog:
  - Backported support for TLS 1.1, TLS 1.2
    Resolves: rhbz#1287192
  - Preserve timestamps for configuration files
    Resolves: rhbz#1307066


author: Radek Brich <rbrich@redhat.com> - 3.4-2
changelog:
  - applied patch for #239000 (pax fails creation of ustar
    if an absolute name is exactly 100 characters long)


author: Ondrej Vasik <ovasik@redhat.com> - 3.4-7
changelog:
  - Merge review #226235: do ship doc files,
    do comment patches, use better buildroot and
    defaults for attributes, allow parallel builds


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.11-1
changelog:
  - Update to m4-1.4.11 (removed vasnprintf patch, it's included in
    upstream source)
    Resolves: #443589


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-48
changelog:
  - Fixed race condition in rpm file deployment when updating an existing file
    (#1264052)
  - Fixed problems with perl.req script (#1268021)
  - Document option "--obsoletes" (#1203714)
  - Remove _isa from all BuildRequires (#1287557)
  - Turn removal failure debug messages into warning messages (#1142386)
  - Move bdb warnings from stdin to stdout (#1296212)
  - Improved error message (#1250006)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.50-1
changelog:
  - functions: improve killing loops
  - netfs: tweak nfs umount
  - sysctl.conf: mention sysctl -a
  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
  - spec: require plymouth
  - fix mangled sysconfig/init.s390
  - rc.sysinit: don't perform fsck twice with /.autorelabel
  - ifdown-eth: fix comparison
  - ifup-eth: if arping fails, output responding MAC
  - network-functions: fix change_resolv_conf after grep update
  - spec: add sysctl.d dir
  - rc.sysinit: fix typo in fs
  - rename_devices: comments need to have a blank before them
  - rename_device: remove comments and trailing whitespaces
  - bonding: warn if the ifup for slave device failed
  - clarify daemon() usage message
  - ifdown: clean ipv4 localhost addresses
  - ifup-post: check resolve.conf also with DNS2
  - ifup: add missing quotes
  - ifup-eth: some bridge options are applied later
  - init.d/halt: give init some time to reexecute
  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
  - ifup-wireless: fix calling of phy_wireless_device
  - rc.sysinit: apply quotas after system is relabeled


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.54-1
changelog:
  - specfile: require newer lvm
  - ifdown-eth: add timeout for when flushing global scope
  - functions: support boolean values in is_true() & is_false()
  - ifup-aliases: do not return with error when arping fails
  - netconsole: resolve domain name via 'getent' instead of 'hosts'


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.55-1
changelog:
  - ipcalc: detect invalid mask
  - ifup-aliases: send gratuitous ARPs when adding addresses
  - network: treat other tunnel interfaces (fixes ifdown stage)
  - kexec-disable.conf: release kexec memory properly
  - network-functions: do not send hostname via dhclient everytime
  - sysconfig/network: NO_DHCP_HOSTNAME option introduced
  - ipv6_add_addr_on_device: replace the existing address on NIC


author: Ray Strode <rstrode@redhat.com> - 2.28.1-7
changelog:
  - Add patch from Noriki Mizumoto <noriko@redhat.com> to
    increase translation coverage
    Resolves: #673749


author: Tim Waugh <twaugh@redhat.com> 5.50-16
changelog:
  - Fixed URL again (bug #225794).
  - Fixed requires tags (bug #225794).
  - Preserve timestamps on installed files (bug #225794).
  - Added empty %build section (bug #225794).
  - Use FHS macros for file manifest (bug #225794).
  - Fixed summary (bug #225794).
  - Fixed description (bug #225794).
  - Fixed license (bug #225794).


author: Tim Waugh <twaugh@redhat.com> 5.50-21
changelog:
  - Changes from package review (bug #225794):
    - Requires xorg-x11-font-utils, not mkfontscale/mkfontdir.
    - Use macro for /etc.
    - Don't own catalogue directory.


author: Tim Waugh <twaugh@redhat.com> 5.50-22
changelog:
  - Further changes from package review (bug #225794):
    - Don't use umask in scriptlet.
    - Don't use 'which' in scriptlet.


author: Adam Jackson <ajax@redhat.com> 1.8.6-3
changelog:
  - cairo-1.8.6-repeat-modes.patch: Enable the repeat and pad blend modes in
    the xlib backend to make firefox performance slightly less dire.


author: David Lutterkort <lutter@redhat.com> - 0.9.0-2
changelog:
  - Fix BZ 781690 "Grub password --encrypted argument not parsed correctly"
  - Fix BZ 628507 "It's better to support fadot --help or fadot -h"
  - Fix BZ 759311 "augtool --autosave does not save changes"


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-4
changelog:
  - Rebase to Augeas 1.0.0
    resolves: rhbz#817753
  - Add dependency on libxml2-devel.
  - Remove all patches (all upstream and included in 1.0.0).
  - Print tests/test-suite.log when the tests fail.
  - Add fix for regression added in 1.0.0 (RHBZ#920609).
  - Fix tests/test-run.


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-6
changelog:
  - Fix CVE-2013-6412, incorrect permissions under strict umask (RHBZ#1036080)
  - Grub: support 'setkey' and 'lock' directives (RHBZ#1001635)
  - ActiveMQ: add ActiveMQ lens (RHBZ#1016899)
  - Splunk: add Splunk lens (RHBZ#1016900)
  - Sudoers: user aliases fail to parse (RHBZ#1016904)
  - Tests: testPermsError during compilation (RHBZ#1024275)
  - Shellvars: multi-variable export lines (RHBZ#1033795)
  - Shellvars: case statements with same-line ;; tokens (RHBZ#1033799)
  - Sysconfig: permit empty comments (RHBZ#1043636)
  - Grub: support 'foreground' directive (RHBZ#1059383)
  - Yum: permit space after equals sign (RHBZ#1062091)
  - IniFile: add generic INI lenses (RHBZ#1073072)
  - Automounter: permit hostnames with hyphens (RHBZ#1075112)
  - Rsyslog: parse property filters and templates (RHBZ#1083016)
  - Ldso: parse hwcap lines (RHBZ#1083021)
  - Sudoers: permit underscores in group names (RHBZ#1093711)
  - augtool: remove dump-xml filename arg (RHBZ#1100182)
  - augtool: add commands to autocomplete (RHBZ#1100184)
  - docs: update command and arg lists (RHBZ#1100186)
  - Nrpe: parse unknown config options (RHBZ#1100237)


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-8
changelog:
  - Cgconfig: parse other valid controllers (RHBZ#1112388)
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144652)
  - Services: permit colons in service name (RHBZ#1121263)
  - Shadow: add lens (RHBZ#1160261)
  - Syslog: parse TCP loghosts (RHBZ#1129508)


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-10
changelog:
  - Escape paths returned from aug_match (RHBZ#1186318)
  - Krb5: parse braces in values (RHBZ#1203597)
  - Properties: handle empty line in multi-line value (RHBZ#1209885)


author: Dan Winship <danw@redhat.com> - 2.28.6.1-2.1
changelog:
  - Disable GNOME proxy support since RHEL6 doesn't have gsettings-desktop-schemas
  - Allow building with libproxy 0.3.0


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.0.20091127-1
changelog:
  - Update to 1.2.0.20091127
  - Fix bug 520989 - ibus-anthy icon enhancement
  - Fix bug 531696 - ibus-anthy KeyError is still reported by abrt
  - Fix bug 536716 - ibus-anthy: Symbol type change support in ibus-anthy


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.1-3
changelog:
  - Fixed Bug 661597 - the latest page_size for ibus.LookupTable.
  - Added -fno-strict-aliasing option in CFLAGS for rpmdiff


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15-4
changelog:
  - Merge review (drop Provides/Obsoletes, change Prereq to Requires,
    add URL, convert ChangeLog to utf-8, replace locale destination
    with macro, add COPYING and add dvorak documentation)
    Resolves: #225958


author: David Howells <dhowells@redhat.com> - 1.3-1
changelog:
  - Fix compiler warnings in request-key.
  - Expose the kernel function to get a key's security context.
  - Expose the kernel function to set a processes keyring onto its parent.
  - Move libkeyutils library version to 1.3.


author: David Howells <dhowells@redhat.com> - 1.4-5
changelog:
  - Make keyctl show handle deeply nested keyrings [BZ 1075652].
  - The key serial ID field displayed by keyctl show may be up to 10 digits [BZ 1075652].
  - Make keyctl padd & co. handle binary data containing NUL chars [BZ 1075652].
  - The input buffer for keyctl padd & co. should be 1MB-1 in size [BZ 1075652].


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.1
changelog:
  - Pull in 2.6.33pre1 from rawhide
    Resolves: bz#520481 - [Emulex 6.0 feat] be2net request_firmware() support in
    Ethtool-cmd-with-flash-for-RH6


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.3
changelog:
  - Fix source0 line to match the actual download filename.
  - Get rid of the no-longer-needed predash macro.
    Related: bz#555835


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - Include a pair of small patches from upstream to improve
    handling of lro options
    Resolves: bz#1010843
  - Include a pair of small patches to improve dumping of
    registers on ixgbe devices
    Resolves: bz#1018367


author: Jay Fenlason <fenlason@redhat.com> 3.5-4
changelog:
  - Include the backported -kr patch from upstream to close
    Resolves: bz#1003891
    the rest of the way.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-68
changelog:
  - Apply upstream patch to fix PageLogFormat reference in documentation
    (bug #951553, STR #3969).
  - Only enable multi-part support for selected user agents
    (bug #1178370, STR #3455).
  - Fix for segfault in send_document (bug #1170002).
  - New SSLOptions directive to enable SSL3 and/or RC4, now disabled by
    default (bug #1161171).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-69
changelog:
  - Document ErrorPolicy in cupsd.conf manpage (bug #1120587, STR #4457).
  - Prevent cups-polld busy loop when access is restricted (bug #1164854).
  - Apply upstream patch to prevent crash in cupsdContinueJob() (bug #1187840).
  - Added failover backend to support priority-based failover (bug #1115219).
  - Apply patch to fix sanitize_title documentation (bug #988062, STR #4569).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-70
changelog:
  - Fixed SetEnv patch (bug #1198394).
  - Validate ErrorPolicy directory when reading configuration (bug #1196217,
    STR #4591).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-73
changelog:
  - Fix failover backend options parsing (bug #1231322).
  - The socket backend could go into an infinite loop with certain printers
    (bug #1276772, STR #3622)
  - dnssd backend: don't crash if avahi gives a callback with no TXT record
    (bug #1269305)
  - Don't unload jobs that couldn't be saved (bug #1283003, STR #4742).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-76
changelog:
  - 1344782 - Banner pages do not show time-at-creation or time-at-processing
  - 1219571 - Invalid memory accesses lead to crash when configured class has implicit class as first member


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-77
changelog:
  - 1099617 - Using "lp -o orientation-requested=6" with a PDF file has no effect.
  - 1268131 - Printing PDF with fit-to-page doesn't take printer HW margins into account


author: - Bastien Nocera <bnocera@redhat.com> - 0.60-3
changelog:
  - Remove Totem as handling Blu-ray and HD-DVD
  - Use brasero-ncb.desktop instead of nautilus-cd-burner for blank devices
  - Update media mime-types for Rhythmbox/Totem


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1-3.20071028
changelog:
  - update to 1.1-20071028
  - fix multilib conflicts (#341001)
  - use shared library, drop static
  - merge review fixes (#225693)


author: Peng Wu <pwu@redhat.com> - 0.9.45-2
changelog:
  - get rid of binding="same", fixes [rhbz#578051] New: lang-specific overrides rule doesn't work as expected.


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-3
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - add nanosecond support to SHM refclock (#1117704)
  - allow creating all SHM segments with owner-only access (#1122015)
  - allow symmetric keys up to 32 bytes again (#1053551)
  - fix calculation of root dispersion (#1045376)
  - fix crash in ntpq mreadvar command (#1165141)
  - don't step clock for leap second with -x option (#1190619)
  - don't drop packets with source port below 123 (#1171630)
  - use larger RSA exponent in ntp-keygen (#1184421)
  - refresh peers on routing updates (#1193850)
  - increase memlock limit again (#1053568)
  - warn when monitor can't be disabled due to limited restrict (#1166596)
  - improve documentation of restrict command (#1069019)
  - update logconfig documentation for patched default (#1193849)
  - don't build ntpsnmpd (#995134)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack
    (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems
    (CVE-2015-3405)
  - log when stepping clock for leap second or ignoring it with -x (#1204625)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-9
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - add option to set Differentiated Services Code Point (DSCP) (#1228314)
  - extend rawstats log (#1242895)
  - fix resetting of leap status (#1243034)
  - report clock state changes related to leap seconds (#1242937)
  - allow -4/-6 on restrict lines with mask (#1232146)
  - retry joining multicast groups (#1288534)
  - explain synchronised state in ntpstat man page (#1286969)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10
changelog:
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.1
changelog:
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.2
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.2-3
changelog:
  - Drop xorg-x11-util-macros build requires, not needed anymore
  - Don't build on s390 (or ppc, if on RHEL)
  - Force autoreconf to avoid libtool errors


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.7-7
changelog:
  - Fix double free in free_wstr (#648906)
  - Prevent overflows by increasing YYMAXDEPTH and YYSTACKSIZE
    byacc/bison parameters (#743343)
  - Preserve argv by copying the strings (#740673)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 3.1.7-10.el6_7.2
changelog:
  - Man & info pages fixed to describe the '--posix' usage correctly,
    as discussed in #1271443 (comments #1 and #2)


author: Ondrej Vasik <ovasik@redhat.com> 2.10-7
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#571843)
  - comment patches


author: Petr Lautrbach <plautrba@redhat.com> 2.87-3.dsf
changelog:
  - Add -w option to last command for wide output (#585907)
  - Changed IPv4 vs IPv6 heuristic in last command (#585880)


author: Robert Kuska <rkuska@redhat.com> - 2.6.6-59
changelog:
  - Let ConfigParse handle options without values
  - Add check phase to specfile, fix and skip relevant failing tests
  Resolves: rhbz#1031709


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-63
changelog:
  - Since -libs now provide python-ordered dict, added ordereddict
    dist-info to site-packages
  Resolves: rhbz#1199997


author: Tomas Orsava <torsava@redhat.com> - 2.6.6-65
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346354


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1263477)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - fix: slapd crash in do_search (#1257543)
  - Fix: Cannot build the package after libtool rebase (#1296129)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-9
changelog:
  - fix: Bad log levels in check_password module (#1255046)
  - [rfe] add informational message about database backup when openldap is updated (#1261651)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1288545)
  - fix: We can't search expected entries from LDAP server (#1212283)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: update description in slapd.conf for NSS database related options (#1131094)
  - fix: check_password minPoints parameter useless (#1255063)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-11
changelog:
  - fix: OpenLDAP doesn't use sane (or default) cipher order (#1300701)
    + Add support for TLSv1.2, and SHA256 and SHA384 ciphers
    + Use what NSS considers default for DEFAULT cipher string.
    + Drop unnecessary hardcoded cipher suites' default flags
    + Update with TLSv1.2 ciphers
  - revert: check_password minPoints parameter useless (#1255063)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - NSS: fix setting olcTLSProtocolMin (#1249092)
  - fix slapd crash in do_search (sc_writewait) (#1340861)
  - NSS: fix parsing code (#1372349)
    + refactor ciphers-related patches
    + fix cipherstring parsing
  - NSS: fix cipher suites' definitions (#1372357)
    + fix some ciphers' flags
    + add new ciphers to match the current NSS
    + add PSK and CHACHA20POLY1305 cipher strings


author: Matus Honek <mhonek@redhat.com> - 2.4.40-14
changelog:
  - NSS: use a hex number for some ciphersuite definitions (#1372357)
  - NSS: fix OpenLDAP crash in NSS shutdown handling (#1373222)
  - fix: rpm -V openldap-servers complains after a clean install (#1263220)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-15
changelog:
  - ITS#8337 fix missing olcDbChecksum config attr (#1397961)
  - ITS#8003 fix off-by-one in LDIF length (#1397949)


author: Olivier Fourdan <ofourdan@redhat.com> 0.3-8
changelog:
  - Update udev rule automatically from the libwacom database entries
  - Update database for Bamboo Pen and Touch styli


author: Dennis Gilmore <dennis@ausil.us> - 4.18-1
changelog:
  - update to 4.18
  - spec contents pulled from RHEL5 srpm 
  - fedora spec changelog
  - update buildroot
  - use jss from fedora for building


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-6
changelog:
  - Resolves: bug 684028 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream mozilla id=640750


author: Patrice Dumas <pertusus@free.fr> - 0.15-5
changelog:
  - remove requires for python-abi (automatic now) and python directory
  - remove package name from summary
  - change tabs to spaces


author: Caius 'kaio' Chance <k at kaio.me> - 0.2.20080216.1-27.fc12
changelog:
  - Merged from F-11 tree.
  - Obsoleted cjkuni-fonts-common.
  - Resolves: rhbz#507637 (using font.{dir,scale} from upstream source)


author: Caius 'kaio' Chance <cchance at redhat.com> - 0.2.20080216.1-31.el6
changelog:
  - Resolves: rhbz#556694
  - Removes contents of -compat in spec file.
  - Removes conflicts tag in -ghostscript.


author: Caius 'kaio' Chance <cchance at redhat.com> - 0.2.20080216.1-33.el6
changelog:
  - Resolves: rhbz#559452
  - Obsolete older version of cjkuni-fonts-common should be done in cjkuni-fonts-common subpackage rather than 
    cjkuni-fonts-ghostscript subpackage.


author: Caius 'kaio' Chance <cchance at redhat.com> - 0.2.20080216.1-34.el6
changelog:
  - Resolves: rhbz#559452
  - Fix cjkuni-fonts-common shouls obsoletes cjkunifonts-common instead of itself.


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.2.4-1
changelog:
  - Release 0.2.4:
  -   Updated to work with Python-2.6 (Python-2.4 and 2.5 are still supported)
  -   Support for files opened in unicode mode
  -   Fixed Python-3.0 compatibility warnings
  -   Minor API cleanup


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.3.0-1
changelog:
  - Release 0.3.0
  -  Fix handling of continuation lines
  -  Fix DEFAULT handling
  -  Fix picking/unpickling


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-13
changelog:
  - Fix crash in in tooltip on_style_set() (rhbz 546509)
  - Fix Crash in SmcSetProperties() on exit (rhbz 539905, gnome 604867)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-14
changelog:
  - Fix crash in _IceTransClose (rhbz 551994)
    The previous patch for rhbz 539905 didn't actually fix the
    problem; the ICE connection was still being closed twice.


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-16
changelog:
  - Add a patch to fix confusion between windows
    Resolves: rhbz 588926
  - Add translation updates
    Resolves: rhbz 589227


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-17
changelog:
  - Add patch to allow breaking out from maximization during mouse resize
    Resolves: rhbz 523520
  - Add patches that tweak behaviors of RHEL 5.5 added GConf preferences
     - apply new_windows_always_on_top to windows that are raised
       or activated but denied focus as well.
     - exclude the current application from the effect of no_focus_windows
       preference
    Resolves: rhbz 607390


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-19
changelog:
  - Fix breaking out from maximization in reduced resources mode; bug
    discovered in testing resulted in mis-positioning in that case.
    Resolves: rhbz 523520


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-20
changelog:
  - Fix cases where unmaximized size wouldn't be honored when unmaximizing
    in reduced resources mode.
    Resolves: rhbz 523520


author: Richard Hughes <rhughes@redhat.com> - 20090330-2
changelog:
  - A key labelled "Music" on a Dell USB keyboard shows up in X as "XF86Tools"
    which is wrong. Reassigns the key to be "Media".


author: Richard Hughes <rhughes@redhat.com> - 20090716-1
changelog:
  - New upstream release to fix some more music players, resume problems and
    keymaps. See http://lists.freedesktop.org/archives/hal/2009-July/013481.html
    for full list.


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.5.95-1
changelog:
  - New version 1.5.95
  - Fixed hostname test according to latest rfc. (rhbz#473919)
  - Don't write empty options to config file
  - Fixed s-control-network crash when run as non-root (rhbz#470203)
  - DSL: Fixed overwritting synchrounous mode to 'yes' (rhbz#475155)
  - Fixed typo in NCIPsec.py. (rhbz#474988)
  - Added gnome-python2-gnome to Requirements (rhbz#472154)
  - Improved compatibility with NetworkManager
  - Resolves: #472154, #475155, #473919, #474988, #470203


author: Harald Hoyer <harald@redhat.com> 1.5.96-1
changelog:
  - translation update (harald)
  - added DNS1 and DNS2 to the device specific config (harald)
  - do not raise NotImplementedError for getDialog (harald)
  - DSN -> DNS typo (harald)
  - NotImplemented -> NotImplementedError (harald)


author: Harald Hoyer <harald@redhat.com> 1.6.0.el6.2-1
changelog:
  - only build tui subpackage
  - fixed moduled.conf handling
  Resolves: rhbz#606794
  - fixed crypto/hash 
  Resolves: rhbz#606796


author: Harald Hoyer <harald@redhat.com> 1.6.0.el6.3-1
changelog:
  - updated translations
  Resolves: rhbz#819812
  - added activate/deactivate buttons for interfaces
  Resolves: rhbz#626825


author: Jan Synáček <jsynacek@redhat.com> - 1.6.0.el6.3-2
changelog:
  - replace new hostname in /etc/hosts (#1086282)
  - correctly finish the screen before displaying additional information (#1204064)
  - add option for ONBOOT=yes/no (#1202836)
  - add option for PEERDNS=yes/no (#1214729)
  - allow suppressing DNS on interfaces (#1038430)
  - add option for NM_CONTROLLED=yes/no (#835479)
  - remove confusing error message (#847434)
  - allow trailing dot in hostnames (#773099)
  - recognize PREFIX if present (#699954)


author: Akira TAGOH <tagoh@redhat.com> - 1.28.1-10
changelog:
  - Avoid the error message at %postun on upgrading to rhel7. (#1086690)
  - Use correct rpm macro for man page (#885846)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-33
changelog:
  - wacom: add support for NV-CONTROL extension (#805038)
  - wacom: fix button mapping (#805045)
  - wacom: add LED support from upstream (#805069)
    Resolves: #805038 #805045 #805069


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-37
changelog:
  - wacom: Make the calibrator window stay above other windows and
    cancel calibration if/when the calibrator loses input focus.
    Resolves: #818692


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.1-38
changelog:
  - wacom: Re-sync sources from gnome-settings-daemon-2.28.2-26 with
    LED support (#805069)
    Resolves: #805069


author: Carlos Garnacho <cgarnach@redhat.com> 2.28.1-41
changelog:
  - Check ~/.config/gnome-settings-daemon/no-per-machine-config for wacom settings
    Resolves: #966658


author: Ian Kent <ikent@redhat.com> - 5.0.5-123
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - always set direct mounts catatonic at exit.
    - fix error handing in do_mount_indirect().
    - check negative cache much earlier.
    - log pipe read errors.
    - fix handle_mounts() termination condition check.
  - Resolves: rhbz#1277033


author: Ian Kent <ikent@redhat.com> - 5.0.5-124
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - wait for master map available at start.
    - add master read wait option.
  - Resolves: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-125
changelog:
  - bz703846 - Incorrect autofs.schema
    - update and add README for old autofs schema
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-126
changelog:
  - bz1384404 - Automounter does not fetch maps from AD
    - work around sss startup delay.
    - add sss master map wait config option.
  - Resolves: rhbz#1384404


author: Ian Kent <ikent@redhat.com> - 5.0.5-127
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - fix included master map not found return.
    - dont exit on master map read fail timeout.
    - set sane default master read wait timeout.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-128
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - don't return until after master map retry read.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-129
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - make lookup_nss_read_master() return nss status.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-130
changelog:
  - bz703846 - Incorrect autofs.schema
    - fix autofs.schema.new not copied to package.
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-131
changelog:
  - bz1396403 - Trying to access a non-existent directory using automount
                results in 4 minute hang with nfs-utils-1.2.3-73.el6
    - fix inconsistent signed usage for __rpc_ping().
    - check NFS server availability on local mount fallback
  - Resolves: rhbz#1396403


author: Ian Kent <ikent@redhat.com> - 5.0.5-132
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - make set_direct_mount_catatonic() more general.
    - set autofs mounts catatonic at exit
  - Related: rhbz#1277033


author: Petr Machata <pmachata@redhat.com> - 1:3.81-20
changelog:
  - Add a patch for use-after-free when eval in variable assignments
    reassigns the same variable
  - Resolves: #699911


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-22
changelog:
  - When the exit status is 2, clean_jobserver() would incorrectly write an
    extra jobserver token to the pipe leading to an internal error message
    complaining that an extra jobserver token is available.
    Resolves: #861189


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-23
changelog:
  - Get rid of any avoidable limit on stack size for processes spawned
    via $(shell). 
  - In eval_buffer() don't assume reading_file != NULL. This is not the
    case during the secondexpansion phase.
    Resolves: #835483


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-9
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters.
  - Resolves: #576048


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-10
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters. This fixes the patch from -9.
  - Resolves: #576048


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-13
changelog:
  - Initialize DBus errors correctly to resolve crashes when the probers are run
    directly.
  - Resolves: #755209


author: Ondrej Vasik <ovasik@redhat.com> 2.4.28-1
changelog:
  - Provide/obsolete pm-utils-filesystem, own dirs for pm-utils
    hooks(#515362)
  - Do own man sections for /usr/share/man/<locale> dirs (#220265)
  - Do own /usr/share/sounds (#515485)


author: Ondrej Vasik <ovasik@redhat.com> 2.4.29-1
changelog:
  - iso_codes package no longer provides tab files, do generate
    them on fly with sed (thanks D. Tardon)


author: Matthias Clasen <mclasen@redhat.com> 2.26.1-3
changelog:
  - Fix multilib parallel-installability (#477672)
  - Remove some old optimizations that are now no-ops


author: Adam Jackson <ajax@redhat.com> 3.1-13
changelog:
  - Forked spec for RHEL7 Mesa's private use
    - no ocaml support
    - no doxygen build
    - no clang support
    - no static archives
    - no libraries, binaries, or manpages not needed by Mesa


author: Adam Jackson <ajax@redhat.com> 3.3-0.1.rc1
changelog:
  - Update to 3.3 rc1
  - Move library to %{_libdir} to avoid rpath headaches
  - Link with -Bsymbolic and --default-symver
  - --disable-libffi
  - Misc spec cleanup


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-91
changelog:
  - Suppress failure message on EFI systems when loading splashscreen
    Resolves: rhbz#1129436
  - Return proper disk operation status
    Resolves: rhbz#1130209
  - Stick with default GOP mode unless resolution is absurdly small
    Resolves: rhbz#1130313


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-94
changelog:
  - Properly expand IPv6 address
    Resolves: bz#1177321
  - Support various types of DHCP IPv6 packet for MAC address extraction
    Resolves: bz#1206542


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-95
changelog:
  - Fix the ineffectiveness when loading fragmented initramfs from Ext4 filesystem
    Resolves: #1006373


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-97
changelog:
  - Patch from previous commit c445aac0ee30f has been removed, because it did not
    fix the issues with some SGI hardware. Bumping up the release number, so the
    building of grub package is not affected in the future. For more info see:

    Related: #1325860 (https://bugzilla.redhat.com/show_bug.cgi?id=1325860)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.97-98
changelog:
  - Workaround for SGI UV100/1000 hardware (TFTP transfers in UEFI mode) added
    Resolves: #1124862
  - Allow more than 1 letter in device name when using the grub-install script
    Resolves: #1349389


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-2
changelog:
  - New upstream version 0.2.8 introducing cache_{check,dump,repair,restore}; missing patch
    Resolves: #1019217


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.6-1
changelog:
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.
  - Update man pages to make it clearer that most tools shouldn't
    be run on live metadata.
  - Fixed bugs in the metadata reference counting for thin_check.
  - New thin_delta and thin_trim commands.
  - New --clear-needs-check option for cache_check.
  - Space map checking for thin check.
  - All tools switch to using libaio. This gives a large performance
    boost, especially to the write focused tools like thin_restore.
  - Added progress monitor to thin_restore, cache_restore and era_restore.
  - Added --quiet/-q option to *_restore to turn off the progress bar.
  - Removed variable hint size support from cache tools.
  - Tools are now rolled into a single executable to save space.
  - Fixed bugs when walking bitsets (possibly effecting cache_dump
    and cache_check).


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.1-1
changelog:
  - Install pdata_tools and all its symlinks for various tools to
    /sbin and also provide symlinks for all tools in /usr/sbin
    for backward compatibility.
  - Link with libstdc++ statically.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-0.1.rc7
changelog:
  - Fixes for thin_repair.
  - Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.3-2
changelog:
  - Merge evdev 2.7.3 from F18 (#835225)
  - Restore RHEL6.x middle mouse button emulation default (auto)
  - Restore RHEL6.x lid patch to re-scan xrandr outputs
  - Disable smooth scrolling, no client stack support


author: Peter Hutterer <peter.hutterer@redhat.com> 2.8.2-3
changelog:
  - Drop undef for HAVE_SMOOTH_SCROLLING. Nothing client-side can make use of
    this anyway so enabling has no drawbacks but aligns the code with the
    other products.
  - Don't crash when exceeding MAXDEVICES


author: Dan Williams <dcbw@redhat.com> - 1.20090707-1
changelog:
  - Update to latest upstream release including:
  - T-Mobile USA
  - Brazil
  - Bangladesh
  - Sweden
  - Spain
  - Moldova


author: Dan Williams <dcbw@redhat.com> - 1.20090918-1
changelog:
  - Update to latest upstream release including:
  - Algeria, Australia, Belarus, Belgium, Brazil
  - Brunei, Bulgaria, Egypt, Finland, Ghana, Greece
  - India, Italy, Kazakhstan, Korean CDMA operators
  - Kuwait, Mali, Netherlands, Paraguay, Serbia
  - Spain, Sweden, UK


author: Dan Williams <dcbw@redhat.com> - 1.20100122-1
changelog:
  - Update to latest upstream release including:
  - Cyprus, Austria, Ireland, Ukraine, Romainia, Cambodia (rh #530981), 
  - Iraq, India, Sri Lanka, UK, Australia, Singapore,
  - South Korea, Italy, United States, China (rh #517253), Nigeria,
  - Tanzania, Germany, Qatar, Russia, and Finland (rh #528988)


author: Matthias Clasen <mclasen@redhat.com> - 0.4.1-1.20090923.3
changelog:
  - Fix issues with the multi-monitor support
  - Make screensaver check work
  - Use gvfs-open instead of gnome-open


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: - Bastien Nocera <bnocera@redhat.com> - 1.2.0-3
changelog:
  - Make a few functions hidden, to try and avoid textrels
  - Disable optimisations on x86 for the same reason
    (#285961)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-2
changelog:
  - fix building with gcc-4.3 
  - reenable some assembly optimizations
  - hide private libFLAC symbols (#285961)
  - update license tag
  - add %check
  - remove -maltivec from CFLAGS


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-7
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: Nils Philippsen <nils@redhat.com> - 1.2.106-1
changelog:
  - fix startup if max uid/gid is allocated
  - attempt to mkdir home directory instead of using os.access()
  - cope better with deleting auto-mounted home directories
  - restore context of home directories after creating, also use umask of 0700
    (u=rwx,go=)
  - make most password problems warnings, not errors (#656356)
  - ask if non-ASCII password should be used (#646876)
  - add forced password change on next login (#656219)
  - pick up translation updates


author: Nils Philippsen <nils@redhat.com> - 1.2.106-6
changelog:
  - fix account expiration if inactive default is set (#841886)
  - apply fix to Japanese translation (by Naomi Nakakita, #801652)


author: Seth Vidal <skvidal at fedoraproject.org> - 1.1.2-14
changelog:
  - apply latest patches from upstream - consolidate into one big patch
  - test before a 1.1.3 from upstream


author: Zdenek Prikryl <zprikryl@redhat.com> 1.20.6-6
changelog:
  - Don't complain if installing with --excludedocs (#515927)
  - Drop unnecessary capabilities in gpm (#517659)


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.20.6-11
changelog:
  - add manpages
  - add Requires: gpm-libs = 1.20.6-12.el6
  - Resolves: #605053 - RPMdiff run failed for package gpm-1.20.6-10.el6
  [snip from email]
   npajkovs@redhat.com: I'd like to ask you what kind of license did you use for inputattach?
   steve@sk2.org: I didn't mention it in debian/copyright, but
   all the packaging (including the manpages) are licensed under the same
   terms as the packaged source, ie. GPL-2 or later.


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Karel Klic <kklic@redhat.com> - 7.19.0-6
changelog:
  - Added do_curl_reset-refcount.patch: Fixed reference counting of
    Py_None in reset function
    Resolves: rhbz#624559
  - Added do_curl_reset-reinitialize-handle.patch: Proper
    re-initialization of internal settings in reset function
    Resolves: rhbz#565654


author: Mike A. Harris <mharris@redhat.com> 1:1.0.1-3
changelog:
  - Bump and rebuild with minor specfile cleanups.
  - Add documentation to doc list, even though half of it is 0 bytes. Ah well.


author: Jeff Garzik <jgarzik@redhat.com> - 0.3-5.2
changelog:
  - Import man page patch from Fedora BZ# 638475
  - Fix description spelling errors found by rpmlint.
  - Fixes BZ# 605535


author: David Malcolm <dmalcolm@redhat.com> - 0.6-1
changelog:
  - cherrypick fixes for Py_None reference leak, and for some error-handling bugs
  Resolves: rhbz#680269


author: David Malcolm <dmalcolm@redhat.com> - 0.6-2
changelog:
  - fix typo in pethtool --help
  Resolves: rhbz#692028
  - fix memory leaks
  Resolves: rhbz#698125
  - add IPv6 information to pifconfig
  Resolves: rhbz#698192
  - respect interface arguments to pifconfig
  Resolves: rhbz#714753
  - add a get_ipv4_addresses() method to ethtool.etherinfo to support devices
  with multiple IPv4 addresses
  Resolves: rhbz#759150


author: David Malcolm <dmalcolm@redhat.com> - 0.6-3
changelog:
  - update python-ethtool-0.6-add-get_ipv4_addresses-method.patch, addressing
  bug 886644, memory leaks, and a crasher when the broadcast address is NULL
  Resolves: rhbz#886644


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.6-4
changelog:
  - make get_active_devices() return IPv6-only devices, too
  Resolves: rhbz#855920
  - make pifconfig output all IPv4 addresses for all devices
  Resolves: rhbz#876211


author: Jiri Skala <jskala@redhat.com> - 0.49-6
changelog:
  - Resolves: #655830 - transferring small files using -v returns strange values
  - Resolves: #714240 - utimeout option parsing buffer overflow


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3.0-4
changelog:
  - User global instead of define as per Packaging Guidelines.
  - Fix indentation for Version and Release.


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-5
changelog:
  - Correctly mark the LDAP default password value as encrypted (CVE-2011-0002)
    Resolves: #668021
  - Default LDAP cn to username if gecos is empty
    Resolves: #670151
  - Preserve setuid and setgid bits when copying files from /etc/skel
    Resolves: #724987
  - Fix segfault when reading database files with certain sizes
    Resolves: #788521


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20100111-3
changelog:
  - Resolves: rhbz#559799.
  - Split devel file into devel package.
  - Fix non-executable-script of tabcreatedb.py.


author: Akira TAGOH <tagoh@redhat.com> - 003.02-4.1
changelog:
  - Backport from Fedora.
  - Improve the fontconfig config file further more to match ja as well. (#586837)


author: Ondrej Oprala <ooprala@redhat.com> - 8.4-39
changelog:
  - du: improve du error message of coreutils commands in a chrooted environment
    (patch by Boris Ranto) (#1086916)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-40
changelog:
  - ls: improve efficiency on filesystems without support for ACLs,
    xattrs or SELinux (#1248141)
  - su: suppress PAM info messages for -c or non-login sessions (#1267588)
  - tail, stat: recognize several new filesystems - up2date by Jan 1st 2016 (#1280333)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-41
changelog:
  - colorls.sh,colorls.csh - call utilities with complete path (#1222140)
  - mkdir, mkfifo, mknod - respect default umask/acls when 
    COREUTILS_CHILD_DEFAULT_ACLS envvar is set (to match rhel 7 behaviour,


author: Kamil Dudka <kdudka@redhat.com> - 8.4-44
changelog:
  - fix the functionality of 'sort -h -k ...' in multi-byte locales (#1357979)
  - use correct path to grep(1) in colorls.sh (#1376892)
  - make colorls.sh compatible with ksh (#1321643)


author: John Dennis <jdennis@redhat.com> - 0.1.1-1
changelog:
  - upgrade to current upstream
  - no longer remove package config file (notify-python.pc), resolves bug #427001


author: John Dennis <jdennis@redhat.com> - 0.1.1-10
changelog:
  - spec file clean-ups reported during RHEL-6 import review
    Related: #555835
    replace define with global
    remove URL tag, there is no project URL, it had been pointing to a page with package specification
    remove unnecessary use of CFLAGS
    export PYTHON environment variable pointing to interpreter
    install COPYING AUTHORS NEWS README ChangeLog into docdir


author: Johnny Hughes <johnny@centos.org> - 6.6.el6.centos.12
changelog:
  - Build for CentOS-6.6
  - Add in Vault info for 6.5
  - Add in CentOS-fastrack.repo
  - change CentOS-Debuginfo so it works with debug-install


author: Roman Rakus <rrakus@redhat.com> - 0.8.4-19
changelog:
  - better to use symlink to python's pyexpat library
    Resolves: #614911
  - Fixes acording to merge review (#226350)
  - Added check routine


author: Ray Strode <rstrode@redhat.com> 2.30.2-7
changelog:
  - Drop panel names from default config so they don't override
    translated fallback names
    Resolves: #633853


author: Ray Strode <rstrode@redhat.com> 2.30.2-10
changelog:
  - Fix monitor naming problem noticed by QE when testing fix
    that went in 2.30.2-8
    Related: #585312


author: Ray Strode <rstrode@redhat.com> 2.30.2-11
changelog:
  - Fix size negotiation problem noticed by QE and GSS when
    testing fix that went in 2.30.2-9
    Resolves: #671088
    Related: #607665


author: Ray Strode <rstrode@redhat.com> 2.30.2-12
changelog:
  - Fix positioning negotiation problem noticed by QE when
    testing fix that went in 2.30.2-11
    Resolves: #671088
  - Improve monitor labeling heuristics
    Related: #585312


author: Ray Strode <rstrode@redhat.com> - 2.30.2-16
changelog:
  - Add patch from Noriki Mizumoto <noriko@redhat.com> to
    increase translation coverage
    Resolves: #819798


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-7
changelog:
  - Translation updates for Red Hat Supported Languages (RH bug #575674).
  - This also includes the fix for the or_IN crasher (RH bug #578094).


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-15
changelog:
  - save backups of password files when toggling shadow support (#852997)
  - read and overwrite only the general ldap base (#912851)
  - use sss for automount
  - more robust initialization of SSSDConfig (#1016404)
  - output error message from write error
  - properly set IPAV2DOMAINJOINED and call ipa client uninstall
    when appropriate (#1023286)
  - add umask=0077 to initial pam_mkhomedir args (#1025065)
  - fix broken --help output (#1066811)
  - check whether ldap URI is valid (#707590)
  - restart only services affected by configuration changes (#1023293, #975203)
  - report error from winbind and ipa domain joins


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  Resolves: #547808
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-16
changelog:
  - document that parent of a new user's home directory must exist
  - avoid skipping 2nd consecutive failures in pwconv grpconv (#787742)
  - avoid segfault when merging group entries in useradd
  - properly report that userdel found process with user's uid
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - mention that PAM is not configured with login.defs in the man page
  - create new shadow entry if missing in usermod (#1016516)
  - report error if usermod asked for moving homedir and it does not
    exist (#1089666)
  - fix various typos and mistakes in useradd manpage (#907837)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-20
changelog:
  - allow removal of expiration or last password change dates
    by using -1 as chage date argument again (#1183638)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-2
changelog:
  - usermod: make password unlocking compatible with passwd (#951743)
  - usermod: disallow ':' in raw password setting


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-24
changelog:
  - mark catalog files as (not md5 size mtime) for verify to
    prevent info about changed files (#453271)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-25
changelog:
  - mark xmlcatalog config(noreplace) to prevent overwriting
    of the content, move it to sysconfdir and make symlink for
    it to silence rpmlint


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-28
changelog:
  - do not provide explicit url for xml-common subpackage,
    fix trailing spaces
  - add Requires: /bin/basename (#501360)


author: Marek Kasik <mkasik@redhat.com> - 2.24.1-2
changelog:
  - Import gdk-pixbuf2 package from F16
  - Disable introspection
  - Add update-gdk-pixbuf-loaders
  - Resolves: #1103734


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-7
changelog:
  - switch off --enable-pie, because it's overloaded with flags in spec
  - added RPM_OPT_FLAGS into CFLAGS
  - Related: rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-9
changelog:
  - during spring DST change are jobs executed 61 times if they are set
    for 2:00 or 3:00 am.
  - 995089 - incorrectly running jobs when time difference is negative
  - cronie doesn't drop privileges before popen
  - adoptions at the crontab orphanage needed
  - config file permissions are world readable
  - 733697 - Service restart needlessly reports failure
  - 743473 - Confusing comments in /etc/cron.hourly/0anacron
  - 887859 - Incorrect example in anacrontab manpage
  - 990710 - cron disallows setting PATH via PAM
  - 985893 - do not use putenv
  - 985888 - cronie drops $LANG and never passes it on to jobs run
  - 829910 - random prefix in crontables for running jobs
  - 922829 - crond generating invalid emails 
  - 919440 - prevent new crond process when already running 
  - Resolves: rhbz#821046, rhbz#697485, rhbz#738232, rhbz#706979, rhbz#733697
  - Resolves: rhbz#743473, rhbz#887859, rhbz#990710, rhbz#985893, rhbz#985888
  - Resolves: rhbz#829910, rhbz#922829, rhbz#995089, rhbz#919440


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.4-14
changelog:
  - fix segfault on null dereference in anacron (#1031383)
  - do not remove daemon pid file in the child process
  - add log message about crond shutdown (#1108384)
  - add log message when getpwnam fails


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Caius 'kaio' Chance <k at kaio.me> - 1.2.0.20090715-2.fc12
changelog:
  - Removed unneccessary BuildRequires.
  - Removed unneccessary owned directories.
  - Changed autogen.sh into configure.


author: Caius 'kaio' Chance - 1.2.0.20090715-4.el6
changelog:
  - Resolves: rhbz#554946
  - Add translations for supported non-English languages to summary and descriptions.


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20090715-8.el6
changelog:
  - Resolves: rhbz#567750
  - Fixes build error with BuildRequires from ibus-table to ibus-table-devel.
  - Removes ibus from Requires as ibus-table should have request that.


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Adam Jackson <ajax@redhat.com> 7.7-1
changelog:
  - rgb 1.0.5
  - xsessreg 1.0.8
  - xgamma 1.0.5
  - xhost 1.0.5
  - xmodmap 1.0.7
  - xsetroot 1.1.1
  - xstdcmap 1.0.3


author: Peter Jones <pjones@redhat.com> - 7.0.13-1
changelog:
  - Strip boot partition prefix from initrd path if present during --update.
  - add host only support for local kernel compiles (airlied)


author: Peter Jones <pjones@redhat.com> - 7.0.15-3
changelog:
  - Ensure that all stanzas are fixed with --update-kernel=ALL (patch from bcl)
    Resolves: rhbz#696960


author: Stepan Kasal <skasal@redhat.com> - 1.8.0-31
changelog:
  - drop *-cflags.patch, move all makefile fixes to *-fhs.patch
  - propagate libdir to Makefile; no need to set it on cmdline


author: Karel Klic <kklic@redhat.com> - 1.8.0-34
changelog:
  - -jbj patch replaced with -zeroheaders, which extends the header zeroing
    and also zeroes the buckets (#572601)
  - Fixed a memory leak in gdbm_reorganize(gdb) (rhbz#572598)
  - Handle read() returning less data than it was asked for (rhbz#572900)
  - Remove static builds from the devel package (#556050)
  - Moved autotools reinitialization from %build to %prep section


author: Marek Skalicky <mskalick@redhat.com> - 1.8.0-39
changelog:
  - dbm_* calls should call the underlying gdbm_* calls using then
    GDBM_NOLOCK flag
    Resolves: #668702


author: Nalin Dahyabhai <nalin@redhat.com> - 1.6-1
changelog:
  - update to 1.6
  - add suggested summary, buildrequires, and modify install call as suggested
    by package review (#226021)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-12
changelog:
  - call aclocal directly, because autoreconf didn't see the magic comment in
    the distributed version of aclocal.m4 which made it look like it was safe
    to generate a new one (#449550)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Andrew Overholt <overholt@redhat.com> 1:3.4.1-1
changelog:
  - 3.4.1
  - Don't conditionalize building of gcj AOT bits (we're only building
    this for gcj and IcedTea bootstrapping).


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-1
changelog:
  - Update to upstream 4.5.2 release.
  - Add eclipse-gcj-compat-4.2.1.patch and eclipse-gcj-nodummysymbol.patch
    from rhel-7.3 branch.
  - Add ecj-convertto1.5.patch.
  - Remove ClasspathJsr199.java for 1.5 compatibility.
  - Add man page.
  - Resolves: rhbz#1336481


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-3
changelog:
  - Update to a newer GCCMain.
  - Add a timestamp qualifier to ecj-gcj.tar.bz2.
  - Remove eclipse-gcj-compat-4.2.1.patch, no longer necessary. 
  - Restore versioned jar.
  - Resolves: rhbz#1336481


author: Tom "spot" Callaway <tcallawa@redhat.com> - 7.2-5
changelog:
  - Remove bh-ttf and bh-type1 (Luxi fonts) and truetype subpackage, due to 
    licensing issues (#317641)
  - Correct license tag


author: Tom "spot" Callaway <tcallawa@redhat.com> - 7.2-6
changelog:
  - IBM refused to relicense ibm-type1 fonts with permission to modify,
    so they were dropped (bugzilla 317641)
  - Meltho Syrian fonts (misc-meltho) have a bad license, upstream did not
    respond to request for relicensing, so they were dropped. This also
    means that the -syriac subpackage has been removed. (bugzilla 317641)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-10
changelog:
  - Fix pkgconfig variable usage, it's fontrootdir, not fontdir. Same applies
    to the patches.
  - Move generation of encodings.dir back to post, over time they moved to
    install despite the files being ghosted (#1089118)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-11
changelog:
  - Revert previous commit, pkg-config gives us /usr/share/fonts/X11, not
    /usr/share/X11/fonts which breaks the build on RHEL6 (#1089118)
  - Replace pkgconfig call with hardcoded path to _x11fontdir, same in the
    patches
  - Run autoreconf for encodings to pick up the changed path


author: Ray Strode <rstrode@redhat.com> 2.28.2-7
changelog:
  - Hide randr events from "Detect Displays" button from g-s-d's
    autoconfiguration logic
    Resolves: #582564


author: Phil Sutter - 2.6.32-46
changelog:
  - Resolves: #974693 - lnstat manpage insufficient
  - Resolves: #1042799 - Inconsistent detailed link information between "ip link" and "ip monitor link"
  - Resolves: #684691 - can't change the remote/local address of tunnel interface to "any" in ipip mode
  - Resolves: #1094676 - iproute2 route table querying broken for table numbers >= 2147483648
  - Resolves: #1261115 - tc does not allow to attach pfifo_fast qdisc
  - Resolves: #1229355 - ss -an shows only tcp sockets
  - Resolves: #1199867 - iproute could not show correct hoplimit info with value -1


author: Phil Sutter - 2.6.32-47
changelog:
  - Resolves: #1277102 - ip neighbour segfaults if bad mac address is used
  - Resolves: #1243413 - ip rule help output contains action reject, but this action does not work
  - Resolves: #1268058 - backport additional tcp_info dump support in ss tool
  - Resolves: #1045032 - iproute2: "ip -o link" doesn't show devices entries in a single line when reporting SR-IOV devs.
  - Resolves: #1093726 - manpage for tc needs info on filters
  - Resolves: #1265240 - ss returns zero (ok) when invalid option is added


author: Phil Sutter - 2.6.32-48
changelog:
  - Resolves: #1269814 - [6wind 6.8 Feat]: implement support for basic bridge IFA_INFO_DATA
  - Resolves: #1276591 - iproute: 'ip addr flush' failed to send flush request: Cannot assign requested address


author: Phil Sutter - 2.6.32-54
changelog:
  - Resolves: #1086512 - "ip link show" commands display Message Truncated
  - Resolves: #1301148 - [RFE] Monitoring per connection TCP retransmission


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-50.P1
changelog:
  - Lease table overflow crash. (#1133917)
  - Add ignore-client-uids option. (#1196768)
  - dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
  - VLAN ID is only bottom 12-bits of TCI. (#1259552)
  - dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
  - dhclient-script: make_resolv_conf(): Keep old nameservers
    if server sends domain-name/search, but no nameservers. (#1269595)


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721306


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-105
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since RHEL-6.1 network devices can have arbitrary names (#682368)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-106
changelog:
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#680837)
  - plipconfig man page and usage output fixes (#694766)
  - Add -A,--all-fqdns and -I,--all-ip-addresses options to hostname (#705110)
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (#708538)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-108
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).
    (#725348)


author: Owen Taylor <otaylor@redhat.com> - 2.20.0-4.el6
changelog:
  - Build without gobject-introspection support, the form of support
    in 2.20 was subsequently removed upstream.
    Resolves: rhbz 555583


author: Kiyoshi Matsui <kmatsui@t3.rim.or.jp> 2.7.1-1
changelog:
  - Upstream new release.
  - Change to library build.
  - Devide to 4 packages: mcpp, libmcpp, libmcpp-devel and mcpp-doc.
  - Thanks to Mary Ellen Foster for correcting this spec file.


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-1
changelog:
  - Update to 0.7.3 - for nl80211 and background scanning (rh #713280)
  - Drop upstreamed and backported patches


author: Dan Williams <dcbw@redhat.com> - 1:0.7.3-4
changelog:
  - Fix issues with Opportunistic/Proactive Key Caching (OKC) (rh #813579)
  - Be less aggressive when choosing to roam (rh #837402)
  - Don't install manpage for wpa_gui (rh #672976)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-5
changelog:
  - Add domain_match config option from upstream (rh #1186806) (rh #1178263)
  - Include peer certificate in EAP events for use by clients
  - Add dbus signal for information about server certification
  - eapol_test: Add option for writing server certificate chain to a file


author: Lubomir Rintel <lrintel@redhat.com> - 1:0.7.3-8
changelog:
  - Enable syslog logging support (rh #822128)
  - Support run-time rotation the debug log file (rh #908306)
  - Fix scriptlet dependencies (rh #712848)
  - Enable timestampes in logs (rh #1150004)


author: Adam Tkac <atkac redhat com> 1.0.9-5
changelog:
  - run ck-xinit-session for all sessions where the xdg cookie isn't already
    set (#452156, patch from Patrice Dumas)
  - add which Requires (#413041, patch from Patrice Dumas)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.9-8
changelog:
  - have ck-xinit-session tell the session bus to set
    XDG_SESSION_COOKIE for services which it autostarts (#502258)
  - add direct build dependency on dbus-devel, since we call it
    directly now


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-9
changelog:
  - consider scripts in /etc/X11/xinit/Xclients.d/ as well
  - add back scripts in Release -7 and -8 from F11 branch.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-1
changelog:
  - Update to 5.44.1.15 from upstream CVS
  - Remove config.sub (no longer needed), remove unused patches (few are
    upstream now, few are pointless with new version), comment patches
  - Fix unbuffer to return exit code of ubuffered program
  - Fix Tk initialization


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-3
changelog:
  - Use full path to su in passmass
    Resolves: #735962
  - Fix segfault in characters matching
    Resolves: #742911
  - Fix minor man page formatting issue
    Resolves: #674866


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Dan Williams <dcbw@redhat.com> - 0.3-11.git20100502
changelog:
  - core: ignore some failures on disconnect (rh #578280)
  - core: add support for platform serial devices
  - gsm: better Blackberry DUN support
  - gsm: periodically poll access technology
  - cdma: prevent crash on modem removal (rh #571921)
  - mbm: add support for Sony Ericsson MD400, Dell 5541, and Dell 5542 modems
  - novatel: better signal strength reporting on CDMA cards
  - novatel: add access technology and mode preference support on GSM cards
  - zte: fix mode preference retrieval
  - longcheer: add support for Zoom modems (4595, 4596, etc)
  - longcheer: add access technology and mode preference support


author: Dan Williams <dcbw@redhat.com> - 0.3-13.git20100507
changelog:
  - core: fix crash when plugging in some Sierra and Option NV devices (rh #589798)
  - gsm: better compatibility with various Sony Ericsson phones
  - longcheer: better support for Alcatel X060s modems


author: Dan Williams <dcbw@redhat.com> - 0.4.0-0.1
changelog:
  - core: rebuild to fix D-Bus property access (for dbus-glib CVE-2010-1172)
  - mbm: catch E2NAP error codes
  - simtech: plugin for Simtech-based modems (ie Airlink 3GU)
  - sierra: fix CDMA roaming detection


author: Dan Williams <dcbw@redhat.com> - 0.4-1.git20100622
changelog:
  - core: fix occasional crash when device is unplugged (rh #591728)
  - core: ensure errors are correctly returned when device is unplugged
  - core: ensure claimed ports don't fall back to Generic (rh #597296)
  - gsm: better compatibility with various phones
  - mbm: better detection of connection errors
  - simtech: add plugin for Simtech devices (like Airlink 3GU)
  - sierra: fix CDMA roaming detection


author: Dan Williams <dcbw@redhat.com> - 0.4-2.git20100628
changelog:
  - core: fix crash during probing when a plugin doesn't support all ports (rh #603294)
  - gsm: better registration state checking when devices don't support AT+CREG (Blackberries)
  - gsm: add support for getting remaining unlock retry counts


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.4-10
changelog:
  - Minor source hardening (bz 878001)
  - Migrating algorithm fix (bz 1031230)
  - Introducing deepestcache option (bz 1052166)
  - Debug option behavior fix (bz 1096392)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - Unused variable removed (bz 1119404)
  - Warning when started as non-root (bz 749651)
  - More robust signal handling (bz 1158932)
  - Fixed manpage hostname (bz 1162247)
  - Fixed memleak (bz 1178247)
  - Fixed help message typo (bz 1178903)


author: Chris Lumens <clumens@redhat.com> 3.23-4
changelog:
  - Change license to GPLv2 only.
  - minor cleanups for merge review (Todd Zullinger <tmz@pobox.com>):
    - rpmlint warnings fixed:
      - buildprereq and prereq use
      - quoted macros in %changelog
      - summary-ended-with-dot
    - create vcsa user and floppy group according to packaging guidelines
      (Packaging/UsersAndGroups)
    - note that we are upstream for MAKEDEV above the source tag
    - bring BuildRoot tag in line with the packaging guidelines
    - remove grep and mktemp from Require


author: Akira TAGOH <tagoh@redhat.com> - 9100h-7
changelog:
  - Stop updating corpus at the build time to avoid creating different dictionary
    among arch. (#816563)


author: Stepan Kasal <skasal@redhat.com> - 1.2.3-21
changelog:
  - consolidate the autoconfiscation patches into one and clean it up
  - consequently, clean up the %build and %install sections
  - zconf.h includes unistd.h again (#479133)


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.3-28
changelog:
  - resolves: #823007
    optimized deflate function on s390(x)
  - resolves: #754694
    added zlib.map file to provide better version information


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 2.12.23-21
changelog:
  - Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
    (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
  - Modified gnutls-serv to accept --sni-hostname (#1333521)
  - Modified gnutls-serv to always reply with an alert message (#1327656)
  - Removed support for DSA2 as it causes interoperability issues (#1321112)
  - Allow sending and receiving certificates which were not in the
    signature algorithms extension (#1328205)
  - Removed support for EXPORT ciphersuites (#1337460)
  - Raised the minimum acceptable DH size to 1024 (#1335924)
  - Restricted the number of alert that can be received during handshake (#1388730)
  - Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
  - The exposed (but internal) crypto back-end registration API is deprecated and no
    longer functional. The ABI is kept compatible (#1415682)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-3
changelog:
  - include patch 004
  - suppress install-info errors (#515910)
  - remove dir* in infodir after install (#492097)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.14-8
changelog:
  - fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
  - add missing initialization of libgcrypt in gpgv
  - properly encode s2k iteration count in gpg-agent (#638635)


author: Stepan Kasal <skasal@redhat.com> - 1.18.1.14-15
changelog:
  - Replace groff-1.18-nohtml.patch by a code in spec file
  - fix groff-1.18-gzip.patch to apply cleanly
  - simplify the code for symlinking in %install


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix indentation for Version and Release.


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20090901-5.el6
changelog:
  - Resolves: rhbz#567749
  - Fixes build error with BuildRequires from ibus-table to ibus-table-devel.
  - Removes ibus from Requires as ibus-table should have request that.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Florian La Roche <laroche@redhat.com> - 1.08-1
changelog:
  - change Source: tag
  - Bernardo Innocenti bernie at codewiz.org: add LDFLAGS to opt patch
    to enable cross building on 64bit host
  - release 1.08 with loginpause option from Bernardo Innocenti bernie at codewiz.org


author: Petr Pisar <ppisar@redhat.com> - 1.08-5
changelog:
  - Check chroot(), chdir(), and nice() (bug #640933)
  - Limit TTY name length to prevent buffer overflow (bug #640940)
  - Allow login name up to LOGIN_NAME_MAX length (bug #651955)


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 0.6.5-15
changelog:
  - fix issue with multiple nih_error_raise calls in previous patch
  - reset console only for console owners (#1046190)


author: Ville Skyttä <ville.skytta@iki.fi> - 2.1.30-1
changelog:
  - Update to 2.1.30, see NEWS for details.
  - Improve summary and description.
  - Add MIT to License: for mailcap.4 man page.
  - Specfile cleanup.


author: Michal Hlavinka <mhlavink@redhat.com> - 3.1.10-4
changelog:
  - close directory after processing pci.ids.d directory (#684000)
  - sysfs: do not warn on incomplete slot addresses (#1032827)


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Jan Rybar <jrybar@redhat.com> - 22.6-20
changelog:
  - fuser manpage: note about handling not-owned processes moved from BUGS to RESTRICTIONS
  - Resolves: rhbz#1211743


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Lubomir Rintel <lkundrak@v3.sk> - 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author: Petr Pisar <ppisar@redhat.com> - 7.8-4
changelog:
  - Add license files to static subpackage (Resolves: #613690)
  - Fix typos in pcretest(1) manual page (Resolves: #676636)
  - Fix typos in pcregrep(1) manual page (Resolves: #676643)


author: Petr Pisar <ppisar@redhat.com> - 7.8-5
changelog:
  - Reintroduce RE::Init(const char*) to restore ABI with pcre-6
    (Resolves: #842000)
  - Fix spelling formfeed, runtime, whitespace in manual pages
    (Resolves: #799003)


author: Petr Pisar <ppisar@redhat.com> - 7.8-6
changelog:
  - Fix repeated forward reference needing a character (Resolves: #756105)
  - Fix caseless match if cases differ in encoding length (Resolves: #759475)


author: Petr Pisar <ppisar@redhat.com> - 7.8-7
changelog:
  - Check starting offest for pointing into a subject string
    (Resolves: #1193524)
  - Pass back detailed error when UTF-8 check fails at runtime
    (Resolves: #1193524)


author: Steve Dickson <steved@redhat.com> 1.2.3-66
changelog:
  - svc_create: Make sure errors are logged (bz 1156647)
  - gssd: suppress error message if rpc_pipefs dir disappears (bz 1220156)
  - gssd: set $HOME to prevent recursion (bz 1223661)
  - statd: Update existing record if we receive SM_MON... (bz 1280024)
  - mountstats.man: fixed typo in man page (bz 1263968)


author: Steve Dickson <steved@redhat.com> 1.2.3-67
changelog:
  - mount.nfs: Fix fallback from tcp to udp (bz 1287894)
  - exportfs: escape path for function test_export (bz 735696)
  - nfs-utils.spec: No verification on runtime configuration files (bz 1118176)
  - idmapd: added usage statement (bz 1001439)
  - mountd: fix netgroup lookup for short hostnames (bz 1231998)
  - mountd: fix bug affecting exports of dirs with 64bit inode number (bz 994564)


author: Steve Dickson <steved@redhat.com> 1.2.3-71
changelog:
  - rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
  - nfsidmap: Clean up other exit status cases (bz 1313603)
  - gssd: Fix inner-loop variable reuse (bz 1313090)
  - mount.nfs manpage: Add nfsmount.conf (bz 1302981)
  - nfs.init: Set exit code on restarts (bz 1205055)


author: Steve Dickson <steved@redhat.com> 1.2.3-73
changelog:
  - mountd: fix is_subdirectory to understand '/' (bz 1331207)
  - mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
  - mount.nfs: Removed supported flag from usage string (bz 1000990)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037926)
  - exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20100119-8
changelog:
  - Resolves: rhbz#559807
  - Change BuildRequires from ibus-table to ibus-table-devel, as .pc is moved.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.3-1
changelog:
  - xkeyboard-config 2.3 (#713863)
  - Revert 2.3 Sinhala (lk) changes, they require newer x11proto/libX11
    updates
  - update Source0 line to ftp.x.org


author: Robert Scheck <robert@fedoraproject.org> 1.12-2
changelog:
  - Move libpopt to /lib[64] (#249814)
  - Generate API documentation, added buildrequirement to doxygen


author: Robert Scheck <robert@fedoraproject.org> 1.12-3
changelog:
  - Added buildrequirement to graphviz (#249352)
  - Backported bugfixes from CVS (#102254, #135428 and #178413)


author: Robert Scheck <robert@fedoraproject.org> 1.13-1
changelog:
  - Upgrade to 1.13 (#290531, #332201, #425803)
  - Solved multilib problems at doxygen generated files (#342921)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-6
changelog:
  - fix for uninit defect (revealed by Coverity) added with %patch11.
  - recovered traditional behaviour of '--keep-old-files' option and added new
    option '--skip-old-files' (#799252)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-7
changelog:
  - disable tests/remfiles01.at for running as a privileged user (#687972)
  - fix undesired error exit on receiving SIGPIPE during performing --list
    operation (#807728) and related fix for test suite -- skip SIGPIPE-dependent
    tests in environments ignoring SIGPIPE


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-8
changelog:
  - fix for bad file matching during extracting concrete files from an archive
    (backported fix from fedora 14) (#841308)
  - typo - better separate comments in spec file


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-9
changelog:
  - backport also --listed-incremental crash fix, this patch is in upstream and in
    fedora from f14 (related to #841308)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-10
changelog:
  - backport upstream patch to make sure that file matching is done before file
    file-name transformation (#875727)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-11
changelog:
  - avoid crash by backporting upstream patch for internal construction of
    file-name hash table (#877769).


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-12
changelog:
  - better auto-recognize xz compressed archives (#1056672)
  - fix --verify option (#923359)
  - fnmatch fixes (#1034360)


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-14
changelog:
  - fix error while storing UID > 2^21 into posix format archive (rhbz#1247788)
  - don't mistakenly set default ACLs (#1220891)


author: Petr Kubat <pkubat@redhat.com> - 1.23-15
changelog:
  - fix error when compressing/listing large sparse files (#1334559)
  - improve sparse mode in genfile for build-time-testsuite purposes


author: Till Maas <opensource@till.name> - 1.2.5-6
changelog:
  - filesystem subpackage contents are now provided by filesystem (Red Hat
    Bugzilla 515362) filesystem-2.4.28-1.fc12


author: Adam Jackson <ajax@redhat.com> 1.2.5-6.2
changelog:
  - Drop vbetool, should not be needed.  Video resume is supported through
    KMS or not at all. (#545808)
  - Drop radeontool, same logic.


author: Roberto Bagnara <bagnara@cs.unipr.it> 0.10.2-3
changelog:
  - The `gprolog' and `yap' packages are not available on the sparc64 and
    sparcv9 architectures: so do `ppl-gprolog', `ppl-gprolog-static' and
    `ppl-yap'.


author: Caolán McNamara <caolanm@redhat.com> - 0.10.2-10
changelog:
  - Resolves: rhbz#521588 stick pl include before Yap include to stop 
    configure-time misdetection to resolve FTBFS


author: Ray Strode <rstrode@redhat.com> - 2.28.2-39
changelog:
  - Another smartcard update to support drivers that don't
    announce already inserted smartcards at startup
    Related: #1299992


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 0.5.2-11
changelog:
  - Add BR: lynx which provides "text-www-browser" virtual Provides
    to avoid BR dependency loop between gtk2-devel and w3m (shorter name wins
    the game with yum)
    Proposed by drago01 <drago01@gmail.com> rh#455734


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> 3.9.1-10
changelog:
  - Fix parsing of FTP 213 responses.
  - Resolves: bug#970262
  - Set proper errcode when raising URLGRabError.
  - Resolves: bug#1271242


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-3
changelog:
  - own $libdir/lua/5.1 and $datadir/lua/5.1. These are the standard package
    search path for Lua. Packaging them properly allows for easy creation of
    Lua addon packages.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.3-4
changelog:
  - Not only own $libdir/lua/5.1 and $datadir/lua/5.1 but also $libdir/lua
    and $datadir/lua for proper removal of these dirs upon lua removal


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-5
changelog:
  - Provide lua = 5.1, this way add-on packages can easily depend on the Lua
    base version and expect certain paths for packages


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-13
changelog:
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)
  - reserve 175:175 for rhevagent (#709599)
  - reserve 176:176 for apache traffic server - ats(#715266)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703052)
  - do not override already set PROMPT_COMMAND envvar(#691425)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-14
changelog:
  - comment out bad spr-itunes entry from /etc/services(#710185)
  - reserve 177:177 for dhcpd (#738177)
  - reserve 179:179 for sanlock (#738294)
  - reserve 181:181 for wallaby (#772746)
  - reserve 134:134 for cimsrvr (#760178)
  - add ext4 to /etc/filesystems (#771388)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-15
changelog:
  - reserve 180:180 for aeolus (#804203)
  - reserve 182:182 for katello (#804204)
  - reserve 183:183 for elasticsearch (#804205)
  - drop root's supplementary groups (#724007)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-21
changelog:
  - reserve uid 189 for hacluster (#872208)
  - reserve gid 189 for haclient (#872208)
  - reserve 160:160 for swift (openstack-swift) (#991502)
  - reserve 161:161 for glance (openstack-glance) (#991502)
  - reserve 162:162 for nova (openstack-nova) (#991502)
  - reserve 163:163 for keystone (openstack-keystone) (#991502)
  - reserve 164:164 for quantum (openstack-quantum) (#991502)
  - reserve 165:165 uidgid pair for cinder (#991502)
  - reserve 166:166 uidgid pair for ceilometer (#991502)
  - reserve 187:187 for heat (openstack-heat) (#991502)
  - reserve 185:185 for jboss-as (#991502)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-22
changelog:
  - reserve 142:142 for activemq (#1086921)
  - reserve 167:167 for ceph (ceph-common) (#1221042)
  - change reservation for 185:185 from jboss-as to jboss (#1192412)


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100216-1
changelog:
  - Fixed when typing English immediately after incomplete Chinese character.
  - Add zh_TW summary.
  - Revised description and write its zh_TW translation.


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100317-1
changelog:
  - Fix google 796: English input for dvorak
  - Fix google 797: Zhuyin input for dvorak
  - Fix google 807: ibus-chewing shows the over-the-spot panel
    even when not necessary


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100605-1
changelog:
  - Fix Issue 942: Fix unsunk references in ibus-chewing
    Applied the patch provided by zork@chromium.org.
  - Rename CVS_DIST_TAGS to FEDORA_DIST_TAGS, and move its
    definition to cmake_modules/
  - Gob2 generated file is now removed, because
    Bug 519108 is fixed from Fedora 11.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100608-1
changelog:
  - ibus-chewing can now use mouse to click on mouse. Thus
    Fix Issue 951: Chewing does not support selection of candidates via mouseclick
    Thanks zork@chromium.org for the patch.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.5.20100706-1
changelog:
  - Fixed google issue 965:
    Candidate missing if both "Plain Zhuyin" and "Space As selection" are enabled.
  - Revised Basic.macro
  - Resolved: #608991


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-7
changelog:
  - Use alternatives to support other iptables versions for MRG kernels
    (rhbz#747068)
  - Restore sysctl values on service restart (rhbz#800208)
  - Added fallback support in case of error in service start (rhbz#808272)
  - Added AUDIT targets to to man pages (rhbz#809108)
  - Fixed maximum chain name length (rhbz#821441)
  - Added missing dependency for poliycoreutils package (rhbz#836286)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-9
changelog:
  - make alternatives names arch dependant for multilib (rhbz#860148)
  - added virtual provides for base libraries to be able to resolve library file requires


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-10
changelog:
  - New reload action for ip*tables services (rhbz#928812)
    It tries to reload the firewall rules from /etc/sysconfig/ip*tables. If this
    failes, it does not load the fallbacks and the old firewall rules are still
    there.
  - Use /lib*/xtables without version and not linked by alternatives again for 
    compatibility to older versions (rhbz#924362)
    The symlink for /lib*/xtables with the previous version will be cleaned up
    in a pre script.
  - Backport of --queue-bypass (rhbz#845435)
    Thanks to Florian Westphal and kay
  - Make ip*tables-save consistent to man page (rhbz#983198)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-11
changelog:
  - fixed shutdown hang if root filesystem is network based (rhbz#1007632)
    Thanks to Rodrigo A B Freire for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-12
changelog:
  - added ip6t_set (rhbz#1033270)
  - do not block uninstall on a failing alternatives --remove call in preun
    (rhbz#1059214) (rhbz#1070123)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-15
changelog:
  - Add message for init script error returns (rhbz#1081191)
  - Fix rule deletion of ipset matches (rhbz#1081422)
  - Add space after dccp types (rhbz#1084974)
  - Add -C option to check for existing rules (rhbz#1088361)
  - Copy custom plugins for updates from iptables < 1.4.7-10 (rhbz#1088400)
  - Enable the IPv6 set target (rhbz#1161330)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-16
changelog:
  - Fixed ressource leak in libiptc found by coverity (rhbz#1088361)
  - Copy custom plugins also for releases up to 14 (rhbz#1088400)


author: Akira TAGOH <tagoh@redhat.com> - 2.3-4
changelog:
  - Remove .desktop file since it's accessible from scim-panel and it's not
    necessarily used for every users, particularly on Live. (#439173)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-34
changelog:
  - Avoid possible hang while logging an unexpected signal (#694820)
  - Fix Rpmdiff build warning about "dereferencing type-punned pointer" (#697783)
  - Let RPC services bind to a specific port (#697788)
  - Prevent memory corruption error while using large number of services (#711787)
  - Fix coverity defects in poll patch (#715303)


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-40
changelog:
  - Fix: xinetd attempts to bind to IPv6 sockets even on systems with IPv6 disabled (#1285091)
  - Fix: modify the xinetd man page to make it more clear on what happens to services on xinetd reload (#1119317)


author: Lyude Paul <cpaul@redhat.com> 7.6.1-2
changelog:
  - Fix annoying trailing whitespace after %description
  - Update firmware license
  - Added missing firmware file TAHITI_vce.bin (#1310823)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.7-3
changelog:
  - track shlib sonames closer, to highlight future abi/soname changes
  - _with_gpg macro, to potentially conditionalize gnupg vs gnupg2 defaults
    for various os/releases (ie, fedora vs rhel)


author: Adam Jackson <ajax@redhat.com> 1.1.1-3
changelog:
  - REVERT-libXdmcp-1.1.1-xalloc.patch: Restore definitions (but not
    declarations) of Xalloc and friends for RHEL6 ABI compat.


author: Nils Philippsen <nils@redhat.com>
changelog:
  - use better ugettext to allow anaconda to use the time zone widget even with
    encodings other than UTF-8


author: Nils Philippsen <nils@redhat.com> - 1.9.59-1
changelog:
  - require docs in enterprise builds
  - configure iburst mode instead of ntpdate upon boot (original patch by Radek
    Nováček)
  - fix configuring ntp.conf template


author: Jan Synáček <jsynacek@redhat.com> - 1.9.60-3
changelog:
  - replace spaces with underscores when writing ZONE variable into /etc/sysconfig/clock (#956284)
  - set time zone before date/time (#622494)
  - catch unavailable display (#676336)
  - update translations (#814582)


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-72
changelog:
  - Add ftp_disable_epsv config option.
  - Resolves: bug#1293363
  - Honor proxy=_none_ set in yum.conf.
  - Resolves: bug#1293385


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-76
changelog:
  - Remove "username" and "password" options from yum.conf man page.
  - Resolves: bug#1367861
  - Fix reget problems with simple md filenames.
  - Resolves: bug#1155687


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.2.29-77
changelog:
  - Filter duplicate packages from different repos in doPackageLists(pkgnarrow='obsoletes').
  - Resolves: bug#1272828


author: Michal Sekletar <msekleta@redhat.com> - 147-2.66
changelog:
  - prevent creation of duplicate udev rules by write_net_rules helper (#652499)
  - fix memory leak in scsi_id (#891669)
  - introduce SECLABEL{selinux} for setting explicit SELinux labels on device nodes (#1015300)
  - for ATA disks udev will now also create by-id/wwn-* symlinks when appropriate (#1220617)


author: Tim Waugh <twaugh@redhat.com> - 4.0.3-10
changelog:
  - Removed old explicit provides for perl(Foomatic::GrovePath).
  - Fixed macro in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING files.
  - Added comments for sources.
  - Use Requires not PreReq (bug #225768).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-1
changelog:
  - Updated to 4.0.4 (bug #570234).  No longer buildrequires
    ghostscript-devel (but requires ghostscript) or
    foomatic-filters-int-options patch.


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-2
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2964, bug #727016).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-3
changelog:
  - Too few arguments for format in a debugging string (bug #726385).
  - Fixed perl installation locations for build (bug #661770).


author: Jiri Popelka <jpopelka@redhat.com> - 4.0.4-5
changelog:
  - Also consider back tick and semicolon as illegal shell escape characters.
  - CVE-2015-8327, CVE-2015-8560


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-3
changelog:
  - Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
  -                         the size of its entries are very large


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.10-1
changelog:
  - Resolves: rhbz#766334 - Rebase libtdb to match the version required
                            by Samba4
  - Enable the Python bindings to satisfy samba4 BuildRequirements
  - Obsoletes tdb-1.2.9-limit-tdb_expand.patch


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.8-3.2
changelog:
  - Move _tdb_text.py to python-tdb subpackage
  - Resolves: rhbz#1329664 - tdb mispackaged tdb_text.py file


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-1
changelog:
  - Switch over to using the "distribute" project; rebase to 0.6.10 (rhbz:570350)
  - Remove svn patch as upstream has chosen to go with an easier change for now.
  - Move easy_install back into the main package as the needed files have been
    moved from python-devel to the main python package.


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-2
changelog:
  - delete stray ".orig" file
  - change %define to %global ; use %{buildroot} rather than env var
  - move %check lower down
  - explicitly list executables


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-3
changelog:
  - cherrypick upstream patch for easy_install (ignore locally installed
  packages: patch0)
  - provide "python-distribute"
  - add README.txt and other .txt documentation files to the payload
  Resolves: rhbz#613138


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301
changelog:
  - update to patch 20080301
  - provide libtermcap.so (#428898)
  - move all headers to /usr/include
  - move libncursesw out of /usr
  - make examples in documentation compilable (#436355)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628
changelog:
  - update to patch 20080628
  - move mlterm and screen.* entries to -base
  - change kbs to ^? in rxvt and screen entries


author: Tomas Hozza <thozza@redhat.com> - 2.48-10
changelog:
  - Fixed dnsmasq-2.48-add-bind-dynamic-option.patch
   - the option --bind-dynamic was not set correctly when used


author: Tomas Hozza <thozza@redhat.com> - 2.48-11
changelog:
  - Revert previous changes because of many problems with --bind-dynamic option backport.
  - Dropping dnsmasq-2.48-add-bind-dynamic-option.patch
  - Set SO_BINDTODEVICE socket option when using --bind-interfaces (rhbz#884957)


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20091031-1
changelog:
  - Update version to 1.2.0.20091031.
  - Drop ibus-hangul-1.1.0.20090328-right-ctrl-hanja.patch and
    ibus-hangul-1.1.0.20090328-hanja-arrow-keys.patch temporarily, because
    patches conflict with 1.2.0.20091031, and the key configure will available
    in next release.


author: Daiki Ueno <dueno@redhat.com> - 1.3.0.20100329-5
changelog:
  - Add workaround for the race of XIM client and IBUS_ENGINE_PREEDIT_COMMIT
  - Fix bug 965554 - ibus-hangul may not handle key event after focus change


author: Ivana Varekova <varekova@redhat.com> - 2.31-4
changelog:
  - fix "zip does not honor umask setting when creating archives"
  - fix "zip segfaults by attempt to archive big file"
  - spec file cleanup


author: Karel Klic <kklic@redhat.com> - 3.0-1
changelog:
  - New upstream version
  - Removed zip23.patch, because ZMEM is not used anyway
  - Removed zip-2.31-install.patch, problem solved in upstream
  - Removed zip23-umask.patch, upstream uses mkstemp which solves the problem
  - Removed zip-2.31-near-4GB.patch, because upstream version 
    handles large files well
  - Removed zip-2.31-configure.patch, configure is better in the current version
  - Removed zip-2.3-sf.patch, the error message doesn't exist in upstream anymore
  - Removed zip-2.31-umask_mode.patch, which fixes also removed near-4GB patch
  - Updated zip-2.31-time.patch for zip 3.0
  - Updated exec-shield.patch for zip 3.0
  - Updated zip-2.3-currdir.patch for zip 3.0


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-16
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name
    (Resolves: #671460)
  - Set PAM_TTY and PAM_RHOST on PAM authentication (Resolves: #684789)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.3.1-10
changelog:
  - Backported assembler routines from recent gmp-6:
    gmp-s390x-optimization.patch, gmp-s390-31bit-optimization.patch
  - Resolves: #1149237


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.1-11
changelog:
  - Explicitly added '-g' option into CFLAGS to correctly build .debug_info for i386
    Resolves: #729039


author: Adam Jackson <ajax@redhat.com> 2.15.2-4
changelog:
  - Drop the explicit Requires: numpy as per new packaging guidelines.  If
    your app calls gtk.gdk.get_pixels_array() you need to pull numpy in
    yourself.


author: Kamil Dudka <kdudka@redhat.com> 2.4.44-5
changelog:
  - encode NULs properly with getfattr --encoding=text (#651119)
  - return non-zero exit code on failure of getfattr (#665050)
  - document supported encodings of values (#674870)
  - update project URL in package specification (#702639)


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
    fix small sound file playback. (#505610)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Richard Hughes <rhughes@redhat.com> - 0.15-3
changelog:
  - Add desktop-mime-type.prov so that we can automatically
    generate mimetype provides for packages at build time.
    This lets us do some cool things with PackageKit in the future.


author: Richard Hughes <rhughes@redhat.com> - 0.15-4
changelog:
  - Rename desktop-mime-type.prov to desktop_mime_type.prov and add the tiny
    macros.desktop_mime_type file so that we can trivially patch rpm to enable
    this new functionality.


author: Richard Hughes <rhughes@redhat.com> - 0.15-5
changelog:
  - Panu merged the rpm bits for this feature, but we've got a new provides
    filename. Respin this package with the new name.


author: Richard Hughes <rhughes@redhat.com> - 0.15-6
changelog:
  - Panu seems to be shipping the prov file in rpmbuild. Remove it here until we
    work out where it belongs.


author: Colin Walters <walters@verbum.org> - 0.84-2
changelog:
  - Add patch to avoid assertions when setting a GError that
    includes a '-' in the enumeration value.  Should fix #528897


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.10-43
changelog:
  - 630019 set correct (f)pie build flags
  - 615104 fix double echo in initscript
  - 589099 Wrong file permissions for atd configuration
  - Resolves: rhbz#630019, rhbz#615104, rhbz#589099


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-47
changelog:
  - do not use perr() in running atd (#994201)
  - correct Requires/BuildRequires (#712079)
  - mention all options in the usage() (#784814)
  - do not leave zero-byte sized files when filesystem is full (#1166882)


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-49
changelog:
  - correct the DST correction when using UTC time specification (#1320322)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages (#1226958)


author: Dennis Gilmore <dennis@ausil.us> - 1.0.3-5
changelog:
  - set broken_fed_dbg_opts to 0 its the recomended option upstream
  - this works around sparc GCC problems
  - add smpflags and cflags to make check


author: Ville Skyttä <ville.skytta at iki.fi> - 2.11-2
changelog:
  - Sync with latest rpmdevtools perl spec template.
  - BuildRequire perl(ExtUtils::MakeMaker).
  - Convert docs to UTF-8.


author: parag <paragn@fedoraproject.org> - 1.0.4-4
changelog:
  - Merge-Review #226077
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length AUTHORS README file


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-1
changelog:
  - Update to snapshot
  - Fix text subtitles causing hangs on startup
  - Fix missing plugins installation requiring a restart
  - Queue2 element moved to gstreamer core


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-2
changelog:
  - Fix theoradec bug with timestamps for Empathy video calls (#537170)
  - Fix text subtitle display regression (#537559)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.2-14.20091016cvs
changelog:
  - prefer gvfs-open over gnome-open (#529287)
  - DE=gnome, if org.gnome.SessionManager exists on dbus (#529287)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.0.2-16.20091016cvs
changelog:
  - Fix e-mail attachements support with Thunderbird3 (#659782)
  - Fix xdg-email fails to supply To address for Thunderbird (#659786)


author: Joe Orton <jorton@redhat.com> - 1.3.9-4
changelog:
  - add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
  - add fix for CVE-2011-0419 (#703520)


author: Nikola Forró <nforro@redhat.com> - 3.9.4-14
changelog:
  - Merge previously released fixes for CVEs:
  - CVE-2013-1960 CVE-2013-1961 CVE-2013-4231
  - CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
  - Resolves: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-16
changelog:
  - Add patches for CVEs:
  - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
  - CVE-2016-3991 CVE-2016-5320
  - Related: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-19
changelog:
  - Add patches for CVEs:
  - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
  - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
  - CVE-2016-5652
  - Resolves: #1412078


author: Joe Orton <jorton@redhat.com> - 2.0.1-8
changelog:
  - add security fix for CVE-2009-3560 (#533174)
  - add security fix for CVE-2009-3720 (#531697)
  - run the test suite


author: Marek Kasik <mkasik@redhat.com> 2.3.11-8
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723468


author: Marek Kasik <mkasik@redhat.com> 2.3.11-13
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806269


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-16
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197738


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-6
changelog:
  - Do not remove Python multiprocessing sockets.  Patch by Chris St. Pierre
    <chris.a.st.pierre@gmail.com>.
    Resolves: #1058310


author: Matthew Barnes <mbarnes@redhat.com> - 1.30.0-1
changelog:
  - Rebase to 1.30.0 based on the Fedora 13 package.
  - Build with introspection disabled since glib-introspection is not
    avalable in rhel6.
  Resolves: #883027


author: Adam Jackson <ajax@redhat.com> 1.0.4-4
changelog:
  - xau-1.0.4-local.patch: When looking for an auth cookie on local transport,
    don't bother checking hostname, it can't possibly help.


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-6
changelog:
  - don't require logrotate (#922769)
  - move pppd database to /var/run/ppp to prevent SELinux AVCs (#968398)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-7
changelog:
  - ignore unrecognised radiusclient configuration directives (#906912)
  - add missing l2tp support (#815128)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-8
changelog:
  - prevent running into issues caused by undefined behavior (pointers of incompatible types aliasing the same object)


author: Tim Waugh <twaugh@redhat.com> 2.8.1-20
changelog:
  - Converted spec file to UTF-8 (bug #225696).
  - Fixed summary (bug #225696).
  - Fixed PreReq (bug #225696).
  - Removed Prefix (bug #225696).
  - Fixed build root (bug #225696).
  - Avoid %makeinstall (bug #225696).
  - Fixed license tag (bug #225696).


author: Tim Waugh <twaugh@redhat.com> 2.8.1-25
changelog:
  - Only try to install the info file if it exists so that package
    installation does not fail with --excludedocs (bug #515919).


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-26
changelog:
  - change /etc/crontab. All anacron jobs in cron.daily,weekly,...
   are check by anacron every hour. Anacron run them if they didn't
   run today.


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-30
changelog:
  - 491793 thanks Andrew Hecox for patch which allows set allow/deny jobs
  - comment change "empty crontab"


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-33
changelog:
  - add into example in crontab user-name
  - change name of crontab to crontab1 to be able add patch into cvs
  - Resolves: rhbz#609544


author: Peter Hutterer <peter.hutterer@redhat.com> 7.3-10
changelog:
  - s/synaptics/xorg-x11-drv-synaptics/.
  - Remove calcomp, citron, digitaledge, dmc, dynapro, jamstudio, magellan,
    microtouch, palmax, spaceorb, summa, tek4957, ur98. Nobody uses them.


author: Petr Holasek <pholasek@redhat.com> - 2.0.7-4
changelog:
  - Symbol numa_num_possible_cpus exported (bz804827)
  - miscalculating of numa_num_configured_cpus was fixed (bz804480)


author: Anton Arapov <anton@redhat.com> - 2.0.7-7
changelog:
  - numastat.c: fix bug preventing correct static huge page quantities
  - numastat.c: update version number
  - numastat.8: remove redundant "interleave hit" description
  - numastat.8: remove extraneous leading spaces and blank lines
  - numastat.8: enhance explanation of correct placement for "-s" option
  - Resolves: rhbz#987507


author: Martin Gracik <mgracik@redhat.com> 1.110.9-1
changelog:
  - Fix firstboot for s390 architecture (#463564)
  - Change how we check for user account (#659451)
  - Add a module for setting up root password (#658869)
  - Translation updates


author: Martin Kolman <mkolman@redhat.com> 1.110.15-2
changelog:
  - Check if firstboot is disabled even if firstboot is run directly (#1024176)
    Resolves: rhbz#1024176


author: Miloslav Trmač <mitr@redhat.com> - 0.96-6
changelog:
  - Use real --help text and error messages instead of showing a man page in
    pkaction and pkcheck.  Fix description of (pkaction --action-id) in the man 
    page.
    Resolves: #628862
  - Add support for Identity=default in .pkla files
    Resolves: #812684
  - Use a consistent order for .pkla files within a directory.  Based on a patch
    by Jared Jennings <jared.jennings.ctr@eglin.af.mil>.
    Resolves: #864613
  - Build using PIE and relro
    Resolves: #927406


author: Debarshi Ray <rishi@fedoraproject.org> 2.20.1.1-4
changelog:
  - Use 'Requires: libglade2 >= 2.6.3-2' to prevent unowned
    %{_libdir}/libglade and %{_libdir}/libglade/2.0.


author: Christopher Stone <chris.stone@gmail.com> 0.11.6-6
changelog:
  - Readd python-devel to BR
  - Add patch to build with python 2.5
  - Add versioned Obsoletes
  - python(abi) = 0:2.5 rebuild


author: Jiri Moskovcak <jmoskovc@redhat.com> - 4.2.1-1
changelog:
  - new version
  - obsoletes previous patches
  - added patch to maintain backwards compatibility for scripts using -c/--copy
  - Resolves: #502934


author: Jiri Moskovcak <jmoskovc@redhat.com> 4.2.1-4
changelog:
  - added libselinux-devel to buildrequires rhbz#514182
  - fixed problem with --excludedocs rhbz#515913


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.1-7
changelog:
  - improve man/usage documentation of the -i/--in-place option
    in the case of symlinks/hardlinks(#679921)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.2.1-8
changelog:
  - fix `--copy' option behaviour to unlink sedXXX temp files,
    clean-up the copy-option patch and merge it with the
    `-i/--in-place' docs/manpage patch (#709956)


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Tim Waugh <twaugh@redhat.com> 2.6-1
changelog:
  - 2.6.  No longer need stderr, suffix, stripcr, parse, allow-spaces,
    ifdef, program_name, or posix-backup patches.


author: Tim Waugh <twaugh@redhat.com> 2.6-2
changelog:
  - Applied upstream patch to prevent incorrect filename being chosen
    when adding a new file (bug #550319).


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-5
changelog:
  - Add *.xz, *.lzma (both for compressed man pages as well), *.jar and *.nbm
    read support to lesspipe.sh
    Resolves: #718498


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix wrong `man' program option (incompatibility between man and man-db packages)
    by using `groff' program instead for parsing troff files (#718498)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-18.el6
changelog:
  - CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149086)
  - Fix html serialization error and htmlSetMetaEncoding (rhbz#1004513)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-19.el6
changelog:
  - Stop parsing on entities boundaries errors
  - Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-20.1
changelog:
  - Fix a series of CVEs (rhbz#1286495)
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - Libxml violates the zlib interface and crashes


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-21.el6.8.1
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Ondrej Vasik <ovasik@redhat.com> 1.06-95-1
changelog:
  - update to upstream alpha 1.06.95 (in use in Gentoo, Slackware
    for quite a long time, marked stable there)
  - removed already applied patches, fix small memory leak
    (gentoo patch)
  - add missing BR for bison and texinfo


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-19
changelog:
  - fix #1047899 - add support for "maxsize" directive
  - fix #1125769 - add support for "createolddir" directive


author: Kamil Dudka <kdudka@redhat.com> - 3.7.8-28
changelog:
  - fix #1285481 - make 'createolddir' preserve sticky bit
  - fix #1369242 - heap buffer overflow when using long date format


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3.0-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix indentation of Version and Release.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Latest update from NSA
  	* Update checkpolicy for user and role mapping support from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Latest update from NSA
  	* Properly escape regex symbols in the lexer from Stephen Smalley.
  	* Add bounds support from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Latest update from NSA
  	* Fix alias field in module format, caused by boundary format change
  	  from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Latest update from NSA
  	* Add support for building Xen policies from Paul Nuzzi.
  	* Add long options to checkpolicy and checkmodule by Guido
  	  Trentalancia <guido@trentalancia.com>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Latest update from NSA
  	* Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
  - Allow policy version to be one number
  Resolves: #588260


author: Jan Synáček <jsynacek@redhat.com> - 20071127-20
changelog:
  - Resolves: #1149574 - Ping produces "WARNING: kernel is not very fresh, upgrade is recommended."
  - Resolves: #829998 - The arping command may have return value of 0.
  - Resolves: #1099426 - Count of "back" is not correct in tracepath
  - Resolves: #1113082 - ping returns odd results with options inet6 in resolv.conf


author: Jan Synáček <jsynacek@redhat.com> - 20071127-22
changelog:
  - Resolves: #1351720 - documentation inconsistency on arping
  - Resolves: #1334775 - backport upstream ping change unmasking signals
  - Resolves: #1298344 - Ping assumes EACCESS errors are due to broadcast addresses


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.5.901-1
changelog:
  - synaptics 1.7.5.901 (#1077486)
  - set secondary top buttons on INPUT_PROP_TOPBUTTONPAD (#1026577)
  - fix bogus changelog date


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-4
changelog:
  - make it possible to recognize an autofs filesystem by find
  - add a new find's option -xautofs to not descend directories on autofs
    filesystems


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-8
changelog:
  - fix quotation punctuation in find(1) man page (#659730)
  - fix file descriptor leak with --execdir option (#1223557)


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-15
changelog:
  - Fix [Bug 512108:issue 11] ibus-chewing crash the application
    by move cursor_orig to chewingio.c global.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-16
changelog:
  - Fix chewing Google issue 352: 
    zuin_count in chewing_zuin_String( ChewingContext *ctx, int *zuin_count ) 
    does not count correctly.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-17
changelog:
  - Add zh_TW summary and description
  - Split out python binding into a subpackage.
  - Fix for package wrangler.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-21
changelog:
  - Revised phrase choice from rear logic.
    Thus update phraseChoiceRearward.patch as phraseChoiceRearward.2.patch
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-23
changelog:
  - Fix Hsu and Dvorak Hsu input (ibus google issue 755, 
    chewing google issue 10)
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-27
changelog:
  - Fix Dvorak Hsu 4th tone key (ibus google issue 755 comment 12, 
    chewing google issue 10)
  - Resolves: #555192


author: Jakub Filak <jfilak@redhat.com> 0.10-1
changelog:
  - New upstream version
    - Fix a segmentation fault in sr_rpm_package_uniq()
    - Respect kernel flavor when parsing package name
    - Parse backtrace without Thread header
    - Fix koops json output if there are no modules
    - Add support for multiple koops stacks


author: Jakub Filak <jfilak@redhat.com> 0.11-1
changelog:
  - New upstream version
    - Make all python objects hashable
    - Improve memory management in rpm module
    - Extend the list of normalized functions
    - Add command for debugging duphashes to satyr utility


author: Martin Milata <mmilata@redhat.com> 0.12-1
changelog:
  - New upstream version
    - JVM frames normalization
    - Add C++ symbol demangling
    - Unsigned overflow bugfixes
    - Fix malformed uReports for Java


author: Martin Milata <mmilata@redhat.com> 0.14-1
changelog:
  - New upstream version
    - Ported to elfutils-0.158 unwinder API
    - Frame fingerprinting disabled
    - Bugfixes


author: Jakub Filak <jfilak@redhat.com> 0.15-1
changelog:
  - New upstream version
    - uReport enhancements (DESKTOP_SESSION, auth_data, missing values)
    - Enhance the backtrace quality algorithm to tackle MiniDebuginfo
    - Support unusual Python and Java exceptions
    - Deal with infinite recursion in backtraces
    - Bugfixes


author: Martin Milata <mmilata@redhat.com> 0.16-1
changelog:
  - New upstream version
    - Add support for unwinding from core dump hook
    - Add support for Ruby uReports
    - Bugfixes


author: parag <paragn@fedoraproject.org> 3.5.7-3
changelog:
  - Merge-Review #226081
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Bump release and correct changelog


author: Nils Philippsen <nils@redhat.com> - 0.2.12-1
changelog:
  - use os.path.abspath instead of .realpath (#615819)
  - use tempfile.mkstemp
  - don't use hardcoded file ext separator


author: Nils Philippsen <nils@redhat.com> - 0.2.17-1
changelog:
  - fix default timeouts of None in bus objects (#716620)
  - reduce proxy method calling overhead a bit more


author: Nils Philippsen <nils@redhat.com> - 0.2.19-1
changelog:
  - allow service object methods to be called locally
  - preserve signature, docstrings, etc. of decorated methods


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Colin Walters <walters@redhat.com> - 0.3.14-1
changelog:
  - New upstream version
  - Drop upstreamed liboil-0.3.13-better-altivec-detect.patch
  - Drop upstreamed clobber-ecx.patch


author: Akira TAGOH <tagoh@redhat.com> - 0.3.0-1
changelog:
  - New upstream release.
    - Have a workaround to avoid the race condition issue. (#452849)
    - Fix a freeze issue with ibus. (#465431)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.16.1-2
changelog:
  - Fix crash for xorg.conf devices with same device node (#862939)
  - Fix spurious cursor jump when using I5 express keys (#859851)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Don't fail on invalid action properties, just ignore them. g-s-d can't
    handle that, see #1095019. (#1077478)
  - Drop all now unused patches


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-3
changelog:
  - Merge RHEL7 extra patches, add RHEL6 compat patch to enable INPUT_PROP
    checking
  - Grab the event device by default for backwards-compat (#1077478)


author: Dmitry V. Levin <ldv@altlinux.org> 1.1.4-alt1
changelog:
  - Enabled almost all diagnostics supported by gcc and fixed all
    issues found by gcc-3.4.4-alt3.
  - Added FreeBSD support, based on patches from Gentoo/FreeBSD.
  - Makefile:
    + Fixed few portability issues reported by Gentoo developers.
  - libutempter: Linked with -Wl,-z,defs.
  - utempter:
    + Fixed struct utmp initialization on 64-bit architectures
      with 32-bit backwards compatibility enabled (like x86_64).
    + Linked with -Wl,-z,now, i.e., marked it to tell the dynamic
      linker to resolve all symbols when the program is started.
      Suggested by Gentoo developers.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-1.fc6
changelog:
  - Initial build of Dimitry's libutempter replacement for Fedora Core.
  - Reworked the upstream spec file for Fedora packaging compliance.
  - Removed static lib subpackage as we dont ship those.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Honza Horak <hhorak@redhat.com> 5.1.71-1
changelog:
  - Update to MySQL 5.1.71, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-71.html
    Resolves: #990796


author: Jakub Dorňák <jdornak@redhat.com> - 5.1.73-1
changelog:
  - Update to MySQL 5.1.73, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html
    (CVE-2014-0412, CVE-2014-0437, CVE-2013-5908, CVE-2014-0393,
    CVE-2014-0386, CVE-2014-0401, CVE-2014-0402)
    Resolves: #1055882


author: Honza Horak <hhorak@redhat.com> 5.1.73-2
changelog:
  - Make mysqld init script more robust and ignore existing but
    non-being-used unix socket file
    Resolves: #1037650


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-2
changelog:
  - Change RPM_OPT_FLAGS to optflags
  - Leave man page compression to rpmbuild
  - Correct date in previous changelog entry


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-3
changelog:
  - Correct license tag from BSD to ISC
  - Comment purpose of regulatory-rules-setregdomain.patch
  - Add copyright and license statement to setregdomain
  - Add comment for why /lib is hardcoded in files section
  - Reformat Dec 21 2009 changelog entry so rpmlint stops complaining


author: John W. Linville <linville@redhat.com> 1.1.3_2013.11.27-1
changelog:
  - Update for crda version 1.1.3
  - Update wireless-regdb to version 2013.11.27 
  - Correct version in previous changelog entry


author: Warren Togami <wtogami@redhat.com> - 2.11-8
changelog:
  - Bug #494157 rename elf binary so it doesn't accidentally copy the elf binary
    during livecd-creator
  - Put scripts into CVS


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.01-1
changelog:
  - New version
    Resolves: rhbz#1009083
  - Fixed bogus dates in the changelog (best effort)
  - Used global instead of define in macros definition


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.01-2
changelog:
  - Fixed memtest86+ binary (non-ELF) to run from floppy disk
    Resolves: rhbz#1302806
  - Fixed memtest-setup to support --help argument
    Resolves: rhbz#1302000
  - Added distribution specific README file
    Resolves: rhbz#1302005


author: Milan Crha <mcrha@redhat.com> - 2.20.1-4
changelog:
  - Add patch for RH bug #979049 (GtkTreeView: make tree expanding/collapsing more robust)
  Resolves: #979049


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-1
changelog:
  - Rebase to 2.24.23
  - Make immodule cache handling the same as in gtk3. The cache
    file is now in $libdir, no longer in /etc
  - Disable tracker explicitly
  - Initialize variable "key" in gtk_print_backend_cups_set_password()
  - Modify fresh-tooltips.patch so the "new-tooltip-style" property
    is still accepted
  - Revert deprecations added between 2.20 and 2.24 so that building
    of dependent packages don't fail
  - Update relevant patches so that they apply correctly
  - Resolves: #1100886


author: Ray Strode <rstrode@redhat.com> - 2.24.23-5
changelog:
  - Don't crash if enumeration finishes just as it gets cancelled
    in file selector. Fixes crash in libreoffice when saving to
    SFTP mounts.
    Resolves: #1129605


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-6
changelog:
  - Set "entry-text-column" property in constructor of GtkComboBoxText.
  - Fixes crash in evolution when creating new appointment.
  - Resolves: #1126916


author: David Walluck <dwalluck@redhat.com> 0:1.0-13.1
changelog:
  - add %{_javadir}/jaf.jar as %ghost
  - add %{_javadir}/activation.jar as alternative
  - remove jaf-%{jafver}.jar link
  - own %{_libdir}/gcj/%{name}
  - add generic javadoc directories as alternatives


author: Tomas Heinrich <theinric@redhat.com> - 0.11-9
changelog:
  - initial import
    - disable building of a debuginfo package - works around rhbz 903009
    - add a workaround for disabling rpath
    - disable paralel build
    - disable 'check' section for now
    resolves: #966964


author: Phillip Lougher <plougher@redhat.com> [2.6.32-696.el6]
changelog:
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.1.1.el6]
changelog:
  - [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
  - [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
  - [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
  - [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.2.1.el6]
changelog:
  - [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
  - [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
  - [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
  - [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.3.1.el6]
changelog:
  - [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
  - [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
  - [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
  - [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
  - [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
  - [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.4.1.el6]
changelog:
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.5.1.el6]
changelog:
  - [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
  - [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.6.1.el6]
changelog:
  - [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
  - [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
  - [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
  - [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
  - [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.6.2.el6]
changelog:
  - [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.6.3.el6]
changelog:
  - [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1327697 - Fix netlogon credential checks
  - resolves: #1327746 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-37
changelog:
  - resolves: #1380151 - Fix memory leak in idmap_ad module
  - resolves: #1333561 - Fix smbclient connection issues to DFS shares
  - resolves: #1372611 - Allow ntlmsssp session key setup without signing
                         (Workaround for broken NetApp and EMC NAS)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-38
changelog:
  - resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                         empty list


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1428835 - Performance issues with vfs_dirsort and extended
                         attributes


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.8.1.el6]
changelog:
  - [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
  - [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.10.1.el6]
changelog:
  - [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
  - Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
  - [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
  - [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
  - [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
  - [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
  - [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
  - [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
  - [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.12.1.el6]
changelog:
  - [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.13.1.el6]
changelog:
  - [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
  - [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.14.1.el6]
changelog:
  - [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.15.1.el6]
changelog:
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.16.1.el6]
changelog:
  - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
  - [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
  - [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
  - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
  - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-11
changelog:
  - Adjust the sslstress.txt filename so that it matches with the
    disableSSL2tests patch ported from RHEL 7
  - Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
  - Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-1
changelog:
  - Rebase to 3.28.3
  - Remove upstreamed moz-1282627-rh-1294606.patch,
    moz-1312141-rh-1387811.patch, moz-1315936.patch, and
    moz-1318561.patch
  - Remove no longer necessary nss-duplicate-ciphers.patch
  - Disable X25519 and exclude tests using it
  - Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)


author: Patsy Franklin <pfrankli@redhat.com> - 2016f-1
changelog:
  - Rebase to 2016f
    - Egypt cancelled DST.
    - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-1.prerelease
changelog:
  - Rebase to prerelease version of tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07. 
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-2
changelog:
  - Rebase to tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07.
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016i-1
changelog:
  - Rebase to tzdata-2016i:
    - Cyprus is now split into two time zones as of 2016-10-30
    - Tonga will reintroduce DST on 2016-11-06


author: Patsy Franklin <pfrankli@redhat.com> - 2016j-1
changelog:
  - Rebase to tzdata-2016ij
    - Saratov region of Russia is moving from +03 offset to +04 offset
      on 2016-12-04.


author: Patsy Franklin <pfrankli@redhat.com> - 2017a-1
changelog:
  - Rebase to tzdata-2017a
    - Mongolia no longer observes DST. (BZ #1425222)
    - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
  - Add zone1970.tab file to the install list. (BZ #1427694)


author: Steve Dickson <steved@redhat.com> 0.2.1-7
changelog:
  - Fixed some races in getnetconfig code (bz 1031498)
  - Remove the installation of libtirpc.a and libtirpc.la (bz 869397)


author: Steve Dickson <steved@redhat.com> 0.2.1-11
changelog:
  - Backported upstream debugging (bz 1273158)
  - Fixed memory leak in svc_vc_create (bz 1276687)
  - Fixed memory leak in svc_tli_create (bz 1276855)
  - Fixed memory leak in __svc_vc_dodestroy (bz 1276856)


author: Phillip Lougher <plougher@redhat.com> [2.6.32-748.el6]
changelog:
  - [mm] fold arch_randomize_brk into ARCH_HAS_ELF_RANDOMIZE (Bhupesh Sharma) [1494380]
  - [mm] brk: fix min_brk lower bound computation for COMPAT_BRK (Bhupesh Sharma) [1494380]
  - [mm] split ET_DYN ASLR from mmap ASLR (Bhupesh Sharma) [1494380]
  - [s390] redefine randomize_et_dyn for ELF_ET_DYN_BASE (Bhupesh Sharma) [1494380]
  - [mm] expose arch_mmap_rnd when available (Bhupesh Sharma) [1494380]
  - [s390] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [s390] mmap: randomize mmap base for bottom up direction (Bhupesh Sharma) [1494380]
  - [powerpc] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [x86] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: create Kconfig variable for PIE randomization (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: PIE: make PF_RANDOMIZE check comment more accurate (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: fix PIE execution with randomization disabled (Bhupesh Sharma) [1494380]
  - [acpi] acpica: Support calling _REG methods within ACPI interpreter (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI interpreter already entered (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI mutex held by this thread (Lenny Szubowicz) [1522849]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-749.el6]
changelog:
  - [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1561788]
  - [powerpc] Move default security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1561788]
  - [lib] seq: Add seq_buf_printf() (Mauricio Oliveira) [1561788]
  - [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1561786]
  - [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1562725]
  - [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1562725]
  - [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1562725]
  - [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1562725]
  - [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1562725]
  - [x86] entry: Remove extra argument in call instruction (Waiman Long) [1562552]
  - [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1557562 1562552]
  - [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1558845]
  - [x86] mm: Dump both kernel & user page tables at fault (Waiman Long) [1558845]
  - [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1558845]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-750.el6]
changelog:
  - [fs] fuse: fix punching hole with unaligned end (Miklos Szeredi) [1387473] {CVE-2017-15121}
  - [documentation] kdump: fix documentation about panic_on_warn to match rhel6 (Pingfan Liu) [1555196]
  - [fs] Provide sane values for nlink (Leif Sahlberg) [1554342]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-751.el6]
changelog:
  - [md] dm thin: fix regression that caused discards to be disabled if passdown was (Mike Snitzer) [1569377]
  - [s390] configs: enable auto expoline support (Hendrik Brueckner) [1554959]
  - [s390] correct nospec auto detection init order (Hendrik Brueckner) [1554959]
  - [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1554959]
  - [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1554959]
  - [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1554959]
  - [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1554959]
  - [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1554959]
  - [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1554959]
  - [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1554959]
  - [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1554959]
  - [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1554959]
  - [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1554959]
  - [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1554959]
  - [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1568241]
  - [net] sctp: verify size of a new chunk in _sctp_make_chunk() (Stefano Brivio) [1551908] {CVE-2018-5803}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-752.el6]
changelog:
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
  - [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
  - [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
  - [net] security: export security_sk_clone (Marcelo Leitner) [1571357]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-753.el6]
changelog:
  - [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
  - [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
  - [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.el6]
changelog:
  - [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
  - [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
  - [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
  - [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
  - [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
  - [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
  - [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.1.1.el6]
changelog:
  - [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
  - [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
  - [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
  - [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
  - [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
  - [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
  - [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change xstateregs_get()/set() to use ->xsave.i387 rather than ->fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] debug: Add KERN_<LEVEL> to bare printks, convert printks to pr_<level> (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Split up <asm/i387.h> into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.2.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
  - [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
  - [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
  - [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
  - [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
  - [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
  - [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-60.5
changelog:
  - Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
    authentication bypass
  - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
  - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
  - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
    in mod_auth_digest


author: Phillip Lougher <plougher@redhat.com> [2.6.32-691.el6]
changelog:
  - [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
  - [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
  - [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
  - [net] ipv6: stop sending PTB packets for MTU < 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
  - [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-692.el6]
changelog:
  - [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
  - [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-693.el6]
changelog:
  - [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
  - [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
  - [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
  - [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
  - [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
  - [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
  - [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
  - [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
  - [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-694.el6]
changelog:
  - [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
  - [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
  - [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
  - [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
  - [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
  - [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
  - [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
  - [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
  - [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
  - [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
  - [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
  - [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
  - [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
  - [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
  - [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
  - [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
  - [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
  - [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
  - [block] ensure request->part is valid (Jeff Moyer) [1416341]
  - [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.1.el6]
changelog:
  - [infiniband] ib/iser: Rewrite bounce buffer code path (Don Dutile) [1585312]
  - [sound] alsa: pcm: prevent UAF in snd_pcm_info (CVE-2017-0861) (Jaroslav Kysela) [1565188] {CVE-2017-0861}
  - [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550176] {CVE-2018-7566}
  - [sound] alsa: seq: Fix use-after-free at creating a port (Jaroslav Kysela) [1503383] {CVE-2017-15265}
  - [sound] alsa: seq: Make ioctls race-free (Jaroslav Kysela) [1537452] {CVE-2018-1000004}
  - [mm] reduce total RAM held in per-CPU pvecs by flushing them on compound/THP page arrival (Larry Woodman) [1575819]
  - [usb] acm: fix the computation of the number of data bits (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner, part 2 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] kvm/vmx: Remove barrier_nospec() in slot_largepage_idx() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kvm] Remove memory alias support (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] posix-timers: Protect posix clock array access against speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [ipc] sysvipc/sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [documentation] Document array_index_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Include <asm/barrier.h> dependency (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.2.el6]
changelog:
  - [kvm] VMX: Fix host GDT.LIMIT corruption (CVE-2018-10301) (Paolo Bonzini) [1601851] {CVE-2018-10901}
  - [x86] Initialize __max_smt_threads to 1 (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Add topology_max_smt_threads() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix incorrect error return code in vm_insert_pfn() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Don't flush L1D cache if VMENTER_L1D_FLUSH_NEVER (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Take out the unused nosmt module parameter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm/dump_pagetables: Add a check_l1tf debugfs file (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries aganst L1TF for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Make flush_l1d visible in /proc/cpuinfo (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [Documentation] Add section about CPU vulnerabilities (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Expose SMT control init function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add find_msr() helper function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush logic (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Make indirect call speculation safe (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Enable acknowledge interupt on vmexit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D MSR based flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush algorithm (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] x86: Introducing kvm_x86_ops VM init/destroy hooks (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpufeatures: Add detection of L1D cache flush support. (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Fix incorrect vulnerabilities files function prototypes (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Export the internal __cpu_bugs variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] intel-family.h: Add GEMINI_LAKE SOC (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Move swap offset/type up in PTE to work around erratum (Waiman Long) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.3.el6]
changelog:
  - [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.4.el6]
changelog:
  - [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.5.el6]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-690.el6]
changelog:
  - [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
  - [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.7.1.el6]
changelog:
  - [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.13.2.el6]
changelog:
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-9
changelog:
  - Update fix_multiple_open patch to fix regression in openldap client
  - Remove pk11_genobj_leak patch, which caused crash with Firefox
  - Add comment in the policy file to preserve the last empty line
  - Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not
    provided by softoken; this superseds check_hash_impl patch


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-10
changelog:
  - Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Add patch to remove duplicate ciphersuites entries in sslinfo.c
  - Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
  - Build with support for SSLKEYLOGFILE


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.17.1.el6]
changelog:
  - [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.1.el6]
changelog:
  - [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
  - [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
  - [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
  - [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
  - [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
  - [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
  - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.19.1.el6]
changelog:
  - [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.20.1.el6]
changelog:
  - [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Fix the required nspr version to be 4.10.6
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.26.0
  - Remove upstreamed patch for CVE-2016-1950
  - Remove p-disable-md5-590364-reversed.patch for bug 1335915


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.21.1.el6]
changelog:
  - [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.22.1.el6]
changelog:
  - [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
  - [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
  - [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
  - [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
  - [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
  - [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
  - [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
  - [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
  - [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
  - [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
  - [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.23.1.el6]
changelog:
  - [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
  - [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
  - [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
  - [x86] retpoline/efi: Convert stub indirect calls & jumps (Waiman Long) [1543022 1535645]
  - [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
  - [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
  - [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
  - [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
  - [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
  - [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
  - [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
  - [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
  - [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
  - [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
  - [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
  - [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
  - [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
  - [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
  - [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
  - [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
  - [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
  - [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
  - [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
  - [x86] alternative: Add header guards to <asm/alternative-asm.h> (Waiman Long) [1543022 1535645]
  - [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
  - [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
  - [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
  - [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
  - [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.24.1.el6]
changelog:
  - [kernel] sched/core: Rework rq->clock update skips (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
  - [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.25.1.el6]
changelog:
  - [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
  - [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
  - [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
  - [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
  - [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
  - [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
  - [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
  - [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
  - [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
  - [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
  - [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
  - [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
  - [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
  - [net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
  - [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.26.1.el6]
changelog:
  - [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
  - [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
  - [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Enable IBRS processing on kernel entries & exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.27.1.el6]
changelog:
  - [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
  - [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
  - [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
  - [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
  - [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
  - [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
  - [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
  - [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
  - [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
  - [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
  - [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
  - [x86] mm: Dump both kernel & user page tables at fault (Waiman Long) [1568535 1558845]
  - [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.28.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
  - [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12.el6_9.1
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-696.10.2.el6]
changelog:
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.59.rc1
changelog:
  - Use /lib or /lib64 only if directory in chroot already exists
  - Tighten NSS library pattern, escape chroot mount path


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.61.rc1
changelog:
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-7
changelog:
  - Add patch to check if hash algorithms are backed by a token
  - Add patch to disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256,
    which have never enabled in the past


author: Petr Šabata <contyk@redhat.com> - 0.9.45-4
changelog:
  - The devel subpackage now properly requires the base package to avoid
    multilib conflicts (#869633)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-44
changelog:
  - use only full matches for hosts used as IP address in cookies (CVE-2014-3613)
  - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-46
changelog:
  - require credentials to match for NTLM re-use (CVE-2015-3143)
  - close Negotiate connections when done (CVE-2015-3148)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-49
changelog:
  - prevent NSS from incorrectly re-using a session (#1269660)
  - prevent test46 from failing due to expired cookie (#1277551)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.900.1-13
changelog:
  - CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
  - CVE-2008-3522 jasper: possible buffer overflow in 
    jas_stream_printf() (#461478)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-17
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171209)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-18
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173567)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173567)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-19
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-20
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - search also by user id when fetching rules from LDAP
    Resolves: rhbz#1135531


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-22
changelog:
  - RHEL-6.8 erratum
    - fixed potential getcwd failure, resulting in Null pointer exception 
    Resolves: rhbz#1284886


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-23
changelog:
  - RHEL-6.8 erratum
    - fixed handling of closefrom_override defaults option
    Resolves: rhbz#1309976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-24
changelog:
  - RHEL-6.8 erratum
    - fixed a bug causing that non-root users can list privileges of
      other users
    Resolves: rhbz#1312481


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-25
changelog:
  - RHEL-6.9 erratum
    - Fix "sudo -l command" in the LDAP and SSS backends when the command
      is not allowed.
    Resolves: rhbz#1374410
    - Fix sudo log file wrong group ownership
    Resolves: rhbz#1330001
    - Fix sudo parsing sudoers with user's locale
    Resolves: rhbz#1318374


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-26
changelog:
  - RHEL-6.9 erratum
    - Fix race condition when creating /var/log/sudo-io direcotry
    Resolves: rhbz#1365156


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-53.P1.3
changelog:
  - Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

  <* Wed Feb 28 2018 Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-53.P1.2
  - Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.29.1.el6]
changelog:
  - [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]


author: Tim Waugh <twaugh@redhat.com> - 8.70-20
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105520).
  - Improved support for PDF/A from upstream (bug #1060026).
  - Back-ported patch to process embedded files as a portable collection
    only if there is a /Collection attribute (bug #1027534).
  - Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 8.70-22
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - fixed ldap's and sssd's sudoOption value and remove quotes
    - fixed ldap's and sssd's sudoOption whitespaces parse problem
    Resolves: rhbz#1144422
    Resolves: rhbz#1279447


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-95
changelog:
  - Related: rhbz#1084426 Reverting to prevent Satellite installation issues mentioned in rhbz-1302761


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-97
changelog:
  - Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
  - Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
  - Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
  - Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-98
changelog:
  - Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1368119


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-102
changelog:
  - Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
  - Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests


author: Coty Sutherland <csutherl@redhat.com> 0:6.0.24-105
changelog:
  - Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
  - Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816


author: Davide Caratti <dcaratti@redhat.com> - 1:0.7.3-9.1
changelog:
  - avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
    CVE-2017-13080, CVE-2017-13081, CVE-2017-13082)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038987 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Nikola Forró <nforro@redhat.com> - 1.3-16
changelog:
  - Revert previous changes in patch for CVE-2016-5159
  - Fix double free in patch for CVE-2016-5139
  - Fix memory leaks and invalid read in cio_bytein
    Related: #1419775


author: Weiping Pan <wpan@redhat.com> 2.0.8 4
changelog:
  - add  .clear_inode callback, fix bug 1157408.
  - rebuild oracleasm for RHEL6.6 in brew, update the version to 2.0.8-4


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-82
changelog:
  - Release 1.2.11.15-82
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-83
changelog:
  - Release 1.2.11.15-83
  - Resolves: #1327065 - After updating server, component nss-3.21.0-0.3.el6_7.x86_64, some client applications cannot connect to server (DS 48798)
  - Resolves: #1266920 - invalid message about write_changelog_and_ruv on consumers (DS 47801)
  - Resolves: #1330758 - add a nsTLS1.0 on or off new configuration parameter to cn=encryption,cn=config in RHEL 6 389-ds-base (DS 48816)
  - Resolves: #1369572 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: #1371706 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: #1371678 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)
  - Resolves: #1370145 - cannot reindex retrochangelog (DS 47619)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-84
changelog:
  - Release 1.2.11.15-84
  - Resolves: #1352109 - Replication stops working only when fips mode is set to true  (DS 48909)
  - Resolves: #1372420 - DES to AES backport issues (DS 47462)
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)
  - Resolves: #1382386 - Directory Server accepts a wrong userdn macro ACI (DS 449)
  - Resolves: #1382519 - 1.2.11 only -- coverity fixes (DS 49004)
  - Resolves: #1387022 - specific search with sizelimit=1 sometimes returns no entry (DS 47703)
  - Resolves: #1387772 - trace args debug logging must be more restrictive (DS 49009)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-85
changelog:
  - Release 1.2.11.15-85
  - Resolves: #1372420 - DES to AES backport issues (DS 47462)
  - Resolves: #1391324 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-86
changelog:
  - Release 1.2.11.15-86
  - Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 49049)
  - Resolves: #1400997 - ldif2db.pl script shows wrong usage for -n as instance, instead of database (DS 49070)
  - Resolves: #1403754 - ns-slapd crashes during tickets/ticket48665_test.py (DS 48665)
  - Resolves: #1410645 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
  - Resolves: #1399600 - ns-slapd segfaults during execution of tickets/ticket47966_test.py (DS 47966, DS 48987)
  - Resolves: #1402012 - Importing big ldif file with duplicate DNs throwing "unable to flush" error
  - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-87
changelog:
  - Release 1.2.11.15-87
  - Resolves: #1391701 - do not treat missing csn as fatal (DS 49020)
  - Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-88
changelog:
  - Release 1.2.11.15-88
  - Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973)
  - Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-89
changelog:
  - Release 1.2.11.15-89
  - Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-90
changelog:
  - Release 1.2.11.15-90
  - Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.1.11.15-91
changelog:
  - Release 1.2.11.15-91
  - Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.2
changelog:
  - fix integer overflows leading to heap overflow in file2strvec()
  - Resolves: CVE-2018-1124 CVE-2018-1126


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.3
changelog:
  - drop leftover assignment in fix for CVE-2018-1124 causing a severe regression
  - Resolves: CVE-2018-1124


