# changelog

author: Hal Rosenstock <halr@voltaire.com> - 1.1.0-rc1
changelog:
  - OpenFabrics 1.1-rc1 release
  - Added man pages
  - Made diag command/script options more consistent
  - saquery tool added
  - dump_lft.sh script added
  - Renamed discover.pl to ibdiscover.pl


author: Jacob Wang <jacob.wang@oracle.com> - 3.2.8-33.0.1
changelog:
  - vmstat: fix invalid CPU utilization stats after vCPU hot-plug/unplug (Konrad Rzeszutek Wilk) [bug 18011019]


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-31
changelog:
  - #993072 - Make the "free" command a little more human friendly
  - #1172059 - ps coredump in stat2proc()
  - #1120580 - [RFE] Have sysctl -p read info from /etc/sysctl.d
  - #1123311 - RFE: "w" should have "-n" flag to suppress reverse name resolution of IP addresses
  - #1163404 - [procps] find_elf_note invalid read if setenv has been called before libproc init
  - Resolves: rhbz#993072 rhbz#1172059 rhbz#1120580 rhbz#1123311 rhbz#1163404


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-28
changelog:
  - #1105125 - Locale dependent float delay in top and watch utilities
  - #1039013 - Include an API in RHEL to return the number of opened file descriptors for a process
  - Resolves: rhbz#1105125
  - Related: rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-27
changelog:
  - #1060681 - ps -p cycles over all PIDs instead of just one
  - #963799 - Should shared memory be accounted in cached in free output?
  - Resolves: rhbz#1060681 rhbz#963799


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-26
changelog:
  - #1089817 - Return value of pgrep is incorrect
  - #950748 - /lib64/libproc.so package both in procps and procps-devel
  - #1011216 - Backport man page fix of top utility - RES = CODE + DATA
  - #1082877 - top/man: RES - physical memory a task 'has used'->'is using'
  - #1034337 - Include man pages for openproc(), readproc() and readproctab()
  - Resolves: rhbz#1089817 rhbz#950748 rhbz#1011216 rhbz#1082877 rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-24
changelog:
  - fix for #851664 - vmstat -S M 1' and 'vmstat -S m 1' erronously
  - ... output constant 'si' and 'so' value of 0
  - Resolves: rhbz#851664


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-23
changelog:
  - fix for #757734 - top: Sorting by memory usage is not documented
  - additionally introduces other missing switches in the top man-page
  - Resolves: rhbz#746997


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-22
changelog:
  - fix #751475 - top displays incorrect CPU summary the first time with CPULOOP=1
  -   Patch15: procps-3.2.7-top-env-cpuloop.patch altered
  - fix #746997 - top utility can't sort by memory usage in batch mode
  - fix #766792 - No devel headers for procps
  - Resolves: rhbz#751475 rhbz#746997 rhbz#766792


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-21
changelog:
  - fix #736023 - Common realloc mistake: 'screen' nulled but not freed upon failure
  - Resolves: rhbz#736023


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-20
changelog:
  - fix #701710 - vmstat does not print out correct free page count on 8TB SGI system
  - Resolves: rhbz#701710


author: Jan Görig <jgorig@redhat.com> 3.2.8-18
changelog:
  - fix #692397 - wrong formatting of ps man page
  - fix #709684 - procps/top SWAP statistics makes no sense
    patch by KOSAKI Motohiro
  - fix #690078 - replace dlopen with build time linking
    - dropped procps-3.2.7-libselinux.patch and procps-3.2.7-ps-libselinux.patch
  - fix #690078 - nullifying variables in procps-3.2.8-pmap-smaps.patch


author: Jan Görig <jgorig@redhat.com> 3.2.8-17
changelog:
  - fixed bugs in procps-3.2.7-ps-cgroup.patch and procps-3.2.8-pmap-smaps.patch
  - fixed memory leaks in vmstat
  - Resolves: rhbz#684031


author: Jan Görig <jgorig@redhat.com> 3.2.8-15
changelog:
  - fix #622389 - The sysctl command's man page doesn't describe the option -A correctly
  - minor changelog fix


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-9
changelog:
  - fix #581547 - add vmstat -w option for wider output
  - fix #583629 - pmap does not display RSS values for a pid
  - fix #583625 - document that usernames exceeding column width are substituted with user ID


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-5
changelog:
  - fix #564371 -  Enhance top to display in MB vs KB
  - fix #565971 -  double free or corruption in ps


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-4
changelog:
  - fix #554674 -  vmstat command with -n and -m does not display header even once
  - fix #554721 -  procps states a bug is hit when receiving a signal
  - fix #479703 -  [RFE] Additional option for 'top'


author: Daniel Novotny <dnovotny@redhat.com> 3.2.7-24
changelog:
  - slabtop -o should display the info once and then exit (RHEL bug #475963)
  - added timestamp to vmstat with new option -t (#476134)


author: Daniel Novotny <dnovotny@redhat.com> 3.2.7-22
changelog:
  - fix #472783 vmstat -p <partition name> not working
  - extended diskstat parameters to unsigned long to avoid overflow


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-21
changelog:
  - rebase patches
  - clear screen in top when switching windows
  - fix #435453 - errors with man -t formatting of ps man page


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-18
changelog:
  - fix displaying the CPU column as integer (related #354001)
  - don't install slabtop -- there's no /proc/slabinfo


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-17
changelog:
  - fix #185994 - top "Cpu0" line never updates when using
    "Single Cpu = Off" option on single processor machine


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-12
changelog:
  - fix #183029 - watch ignores multibyte characters
  - fix #222251 - STIME column can jitter
  - fix array overflow in sysctl


author: Karel Zak <kzak@redhat.com> 3.2.7-11
changelog:
  - fix #234546 - 'w' doesn't give correct information about what's being run.
  - fix #228870 - process `sysctl' is using deprecated sysctl
  - cleanup spec file


author: Karel Zak <kzak@redhat.com> 3.2.7-10
changelog:
  - fix #212637 - sysctl using deprecated syscall
  - fix #140975 - top corrupts screen when sorting on first column


author: Karel Zak <kzak@redhat.com> 3.2.7-8
changelog:
  - remove zombie patch (needs more investigation)
  - fix #208100 - top command with '-c' option become not to display list of tasks
  - fix #199174 - top returns with exit code 1 even if no error occurs


author: Karel Zak <kzak@redhat.com> 3.2.6-4
changelog:
  - fix #191493 - watch -n doesn't handle large integers properly
  - fix #186017 - top "Cpu0" line never updates on single processor machine
                  (bugfix added to the 'remcpu' patch)
  - fix #168444 - memory usage conflicts with /proc/meminfo
  - fix #174619 - top reports wrong values for CPU(s) in batch mode
  - fix #185299 - cpu steal time support


author: Karel Zak <kzak@redhat.com> 3.2.5-7
changelog:
  - improve procps-3.2.5-sysctl-writeonly.patch
  - fix #161449 - "top" ignores user and system toprc
  - fix #161559 - top segfaults when resizing console
  - fix #160796 - vmstat crashes when accessing LVM partition
  - fix #161303 - 'top' failed when remove cpus


author: Karel Zak <kzak@redhat.com> 3.2.5-4
changelog:
  - fix #144459 - sysctl reports error: unknown error <...> reading key '<key>'
    (now sysctl doesn't read data from write-only /proc/sys files)


author: Karel Zak <kzak@redhat.com> 3.2.5-1
changelog:
  - update to new upstream 3.2.5
  - recreate selinux patch
  - remove errno, slabinfo21 and fullpath patches -- all fixed by upstream


author: Karel Zak <kzak@redhat.com> 3.2.3-6
changelog:
  - update FAQ
  - update spec description
  - fix text in .noproc patch
  - fix segv fault if cpu number exceeding 38 (#137159)


author: Alan Cox <alan@redhat.com> 3.2.1-6
changelog:
  - Removed broken SELinux patch to w
  - Added a better alternative whereby we get less data but don't fall for
    vanished processes when SELinux is running


author: Colin Walters <walters@redhat.com> 3.2.1-4
changelog:
  - Add little patch to make w/who work when getattr access
    to /proc/<pid> for the user's login process is denied


author: Alexander Larsson <alexl@redhat.com> 2.0.7-24
changelog:
  - Fix saving of sort, fixes #32757
  - Fix printing size, fixes #48224
  - Fix float decimal point input #58163


author: Alexander Larsson <alexl@redhat.com> 2.0.7-23
changelog:
  - Fix unsigned/signed bug. Closes #60998.
  - Update threadbadhack to correctly propagate process time to the main thread.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - procps-2.0.7
  - integrated all patches except for signames patch, which is broken
    and unnecessary
  - See NEWS for changes between 2.0.6 and 2.0.7
  - Added patch to correctly install desktop file.  Oops.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - don't try to load System.map (and spit error messages if it does not
    exist) if ps or top are not going to use it, both to speed things up
    and remove the ugly messages when they don't make sense.
  - in top, print the possible error messages using standard top SHOWMESSAGE
    (because it will be now printed out when already in terminal mode).


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.14-8
changelog:
  - fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
  - add missing initialization of libgcrypt in gpgv
  - properly encode s2k iteration count in gpg-agent (#638635)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Karsten Hopp <karsten@redhat.com> 2.0.10-1
changelog:
  - don't require pcsc-lite-libs and libusb on mainframe where
    we don't have those packages as there's no hardware for that


author: Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-2
changelog:
  - gnupg-2.0.5
  - gpg-agent not restarted after kde session crash/killed (#196327)
  - BR: libassuan-devel > 1.0.2, libksba-devel > 1.0.2


author: Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-8
changelog:
  - include gpg-agent-(startup|shutdown) scripts (#136533)
  - BR: libksba-devel >= 1.9.12 
  - %check: be permissive about failures (for now)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.9.17-1
changelog:
  - 1.9.17, signal info patch applied upstream (#162264).
  - Patch to fix lvalue build error with gcc4 (upstream #485).
  - Patch scdaemon and pcsc-wrapper to load the versioned (non-devel)
    pcsc-lite lib by default.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-1
changelog:
  - Merge changes from Rex's 1.9.16-1 (Thu Apr 21):
  -   opensc support unconditional
  -   remove hard-coded .gz from %post/%postun
  -   add %check section
  -   add pth patch
  - Put back patch modified from 1.9.15-4 to make tests verbose
    and change signal.c to describe received signals better.


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 0.4.9-2.0.2
changelog:
  - qperf: Bump release number for rebuild against new headers (Mukesh Kacker)  
  - qperf: add support for Oracle Linux 7 (OL7) builds (Mukesh Kacker)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 3.0-0.0.2
changelog:
  - perftest: Bump release number to rebuild with new headers (Mukesh Kacker)  
  - perftest: add support for Oracle Linux 7 (OL7) builds (Mukesh Kacker)  
  - perftest: Fix Changelog date problems inherited from upstream (Mukesh Kacker)


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-5
changelog:
  - Correctly mark the LDAP default password value as encrypted (CVE-2011-0002)
    Resolves: #668021
  - Default LDAP cn to username if gecos is empty
    Resolves: #670151
  - Preserve setuid and setgid bits when copying files from /etc/skel
    Resolves: #724987
  - Fix segfault when reading database files with certain sizes
    Resolves: #788521


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.7-1
changelog:
  - Add support for SHA256 and SHA512 in password hashes
    Related: #173583
  - Fix file locking on some architectures
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #426584
  - Address issues from a review by Jason Tibbitts:
    - Remove default.-c, moving the provided functions to libuser proper
    - Remove the WITH_SELINUX build option
    - Move Python library test to %check
    Resolves: #226054


author: Miloslav Trmač <mitr@redhat.com> - 0.56.6-1
changelog:
  - Set SELinux file contexts when creating home directories, preserve them when
    moving home directories
    Resolves: #351201


author: Miloslav Trmač <mitr@redhat.com> - 0.56.5-1
changelog:
  - Work around spurious error messages when run against the Fedora Directory
    server
  - Fix error reporting when creating home directories and creating/removing mail
    spool files
    Resolves: #318121


author: Miloslav Trmač <mitr@redhat.com> - 0.56.4-2
changelog:
  - Split the Python module to a separate subpackage (original patch by Yanko
    Kaneti)
  - Update the License: tag


author: Miloslav Trmac <mitr@redhat.com> - 0.56.1-1
changelog:
  - When changing passwords, only silently ignore know shadow markers, not all
    invalid hashes
    Resolves: #225495


author: Miloslav Trmac <mitr@redhat.com> - 0.56-1
changelog:
  - Tighten the API and implementation to avoid corrupting number-like strings;
    the module interface ABI has changed
    Resolves: #226976


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmac <mitr@redhat.com> - 0.54.1-1
changelog:
  - Support importing of configuration from shadow-utils (/etc/login.defs and
    /etc/default/useradd)
  - Add libuser.conf(5) man page


author: Miloslav Trmac <mitr@redhat.com> - 0.54-1
changelog:
  - Make sure attributes with no values can never appear
  - Fix crash in the "files" module when an attribute is missing
  - Use hidden visibility for internal functions, remove them from
    libuser/user_private.h; this changes module interface ABI


author: Miloslav Trmac <mitr@redhat.com> - 0.53.8-1
changelog:
  - Permit "portable" user and group names as defined by SUSv3, plus trailing $
    (#159452)
  - Don't build static libraries


author: Miloslav Trmac <mitr@redhat.com> - 0.53.5-1
changelog:
  - Ignore nss_compat lines in the "files" module (#154651)
  - Autodetect Python version (#154096)
  - Add BuildRequires: libselinux-devel, s/BuildPrereq/BuildRequires/


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-2
changelog:
  - Add Requires: glib2-devel to libuser-devel (#152501)
  - Run ldconfig using %post{,un} -p to let RPM play tricks


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-1
changelog:
  - Don't silently ignore some I/O errors
  - Don't include a Cyrus SASL v1 header file when libldap links to v2 (#150046)
  - Rebuild with gcc 4


author: Miloslav Trmac <mitr@redhat.com> - 0.53.2-1
changelog:
  - Important bug fixes in lchage, lgroupmod, lnewusers and lusermod
  - Minor bug fixes in lpasswd and luseradd
  - Add man pages for the utilities (#61673)


author: Miloslav Trmac <mitr@redhat.com> - 0.53-1
changelog:
  - Support UID and GID values larger than LONG_MAX (#124967)
  - Fix updating of groups after user renaming in lusermod
  - Allow setting a shadow password even if the current shadow password is
    invalid (#131180)
  - Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has 
    changed
  - Miscellaneous bug and memory leak fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.6-1
changelog:
  - Make error reporting more consistent, more verbose and always on stderr
    (partly #133861, original patch by Pawel Salek)
  - Mark strings previously blocked by string freeze for translation


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.51.12-1
changelog:
  - Don't claim success and exception at the same time (#133479)
  - LDAP fixes, second round
  - Various other bugfixes


author: Miloslav Trmac <mitr@redhat.com> - 0.51.11-1
changelog:
  - Allow documented optional arguments in Python
    ADMIN.{addUser,modifyUser,deleteUser} (#119812)
  - Add man pages for lchfn and lchsh
  - LDAP fixes, first round
  - Avoid file conflict on multilib systems
  - Call ldconfig correctly


author: Miloslav Trmac <mitr@redhat.com> - 0.51.10-1
changelog:
  - Don't attempt to lookup using original entity name after entity
    modification (rename in particular) (#78376, #121252)
  - Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
  - Make --enable-quota work, and fix the quota code to at least compile (#89114)
  - Fix several bugs (#120168, original patch from Steve Grubb)
  - Don't hardcode python version in spec file (#130952, from Robert Scheck)
  - Properly integrate the SELinux patch, it should actually be used now, even
    though it was "enabled" since 0.51.7-6


author: Miloslav Trmac <mitr@redhat.com> - 0.51.8-1
changelog:
  - Update to build with latest autotools and gtk-doc
  - Update ALL_LINGUAS and POTFILES.in
  - Rebuild to depend on newer openldap


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.7-1
changelog:
  - ldap: set error codes correctly when we encounter failures initializing
  - don't double-close modules which fail initialization
  - ldap: don't set an error in cases where one is already set


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.6-1
changelog:
  - use a crypt salt consistent with the defaults/crypt_style setting when
    setting new passwords (#79337)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.5-1
changelog:
  - expose lu_get_first_unused_id() as a package-private function
  - provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
    in python


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - files: ignore blank lines in files
  - libuser: disallow creation of accounts with names containing whitespace,
    control characters, or non-ASCII characters


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.101-1
changelog:
  - fix python bindings of enumerateFull functions
  - adjust prompter wrapping to not error out on successful returns


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.100-1
changelog:
  - be more careful about printing error messages
  - fix refreshing after adding of accounts
  - ldap: try to use a search to convert names to DNs, and only fall back to
    guessing if it turns up nothing
  - files: fix an off-by-one in removal of entries


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.98-1
changelog:
  - automatically refresh entities after add, modify, setpass, removepass,
    lock, and unlock operations
  - remove debug spewage when creating and removing mail spools
  - files: fix saving of multi-valued attributes
  - rename MEMBERUID attribute for groups to MEMBERNAME


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.97-1
changelog:
  - files: fix bug in removals
  - ldap: revert attempts at being smart at startup time, because it makes UIs
    very messy (up the three whole dialogs just to start the ldap stuff!)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.93-1
changelog:
  - move shadow initialization for groups to the proper callback
  - rework locking in the files module to not require that files be writable


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.91-1
changelog:
  - ldap: finish port to new API
  - sasl: finish port to new API (needs test)
  - libuser: don't commit object changes before passing data to service
    functions which might need differing data sets to figure out what to
    change (for example, ldap)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - renamed the python module
  - revamped internals to use gobject's gvalues and gvaluearrays instead of
    glists of cached strings
  - add enumeration-with-data functions to the C library


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - link the python module against libpam
  - attempt to import the python modules at build-time to verify dependencies


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - quotaq: fix argument order when reading quota information
  - user_quota: set quota grace periods correctly
  - luseradd: never create home directories for system accounts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - HUP nscd on modifications
  - userutil.c: mmap files we're reading for probable speed gain
  - userutil.c: be conservative with the amount of random data we read
  - docs fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - apps: print usage on errors
  - lnewusers.c: initialize groups as groups, not users
  - lnewusers.c: set passwords for new accounts
  - luseradd.c: accept group names in addition to IDs for the -g flag
  - luseradd.c: allow the primary GID to be a preexisting group


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - add ko translation files
  - files.c: fix a heap corruption bug in lock/unlock (#51750)
  - files.c: close a memory leak in reading of files


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - lusermod: change user name in groups the user is a member of during renames
  - lgroupmod: change primary GID for users who are in the group during renumbers
  - ldap.c: handle new attributes more gracefully if possible
  - add ru translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.25.1-1
changelog:
  - rename the quota source files to match the library, which clears up a
    file conflict with older quota packages
  - add ja translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - close up some memory leaks
  - add the ability to include resident versions of modules in the library


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - stop leaking descriptors in the files module
  - speed up user creation by reordering some checks for IDs being in use
  - update the shadowLastChanged attribute when we set a password
  - adjust usage of getXXXXX_r where needed
  - fix assorted bugs in python binding which break prompting


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - install sv translation
  - make lpasswd prompt for passwords when none are given on the command line
  - make sure all user-visible strings are marked for translation
  - clean up some user-visible strings
  - require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - print uids and gids of users and names in lid app
  - fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
  - implement enumerate_by_group and enumerate_by_user in ldap module
  - fix id-based lookups in the ldap module
  - implement islocked() method in ldap module
  - implement setpass() method in ldap module
  - add lchfn and lchsh apps
  - add %d substitution to libuser.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - finish adding a sasldb module which manipulates a sasldb file
  - add users_enumerate_by_group and groups_enumerate_by_users


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - luserdel: remove the user's primary group if it has the same name as
    the user and has no members configured (-G disables)
  - fixup some configure stuff to make libuser.conf get generated correctly
    even when execprefix isn't specified


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - only call the auth module when setting passwords (oops)
  - use GTrees instead of GHashTables for most internal tables
  - files: complain properly about unset attributes
  - files: group passwords are single-valued, not multiple-valued
  - add lpasswd app, make sure all apps start up popt with the right names


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - actually make the new optional arguments optional
  - fix lu_error_new() to actually report errors right
  - fix part of the python bindings
  - include tools in the binary package again
  - fixup modules so that password-changing works right again
  - add a "key" field to prompt structures for use by apps which like to
    cache these things
  - add an optional "mvhomedir" argument to userModify (python)


author: Nalin Dahyabhai <nalin@redhat.com> 0.16.1-1
changelog:
  - finish home directory population
  - implement home directory moving
  - change entity get semantics in the python bindings to allow default values for .get()
  - add lu_ent_has(), and a python has_key() method to Entity types
  - don't include tools in the binary package
  - add translated strings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - lib/user.c: catch and ignore errors when running stacks
  - lusermod: fix slightly bogus help messages
  - luseradd: when adding a user and group, use the gid of the group
    instead of the user's uid as the primary group
  - properly set the password field in user accounts created using
    auth-only auth modules (shadow needs "x" instead of "!!")
  - implement home directory removal, start on population


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix group password setting in the files module
  - setpass affects both auth and info, so run both stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix errors due to uninitialized fields in the python bindings
  - add kwargs support to all python wrappers
  - add a mechanism for passing arguments to python callbacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't bail when writing empty fields to colon-delimited files
  - use permissions of the original file when making backup files instead of 0600


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish implementing is_locked methods in files/shadow module
  - finish cleanup of the python bindings
  - allow conditional builds of modules so that we can build without
    all of the prereqs for all of the modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clean up quota bindings some more
  - finish most of the ldap bindings
  - fix a subtle bug in the files module that would show up when renaming accounts
  - fix mapping methods for entity structures in python


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - get bindings for prompts to work correctly
  - clean up some of the add/remove semantics (set source on add)
  - ldap: implement enumeration
  - samples/enum: fix the argument order


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add functions for enumerating users and groups, optionally per-module
  - lusermod.c: -s should specify the shell, not the home directory


author: Nalin Dahyabhai <nalin@redhat.com> 0.8
changelog:
  - add a "quiet" prompter
  - add --interactive flag to sample apps and default to using quiet prompter
  - ldap: attempt a "self" bind if other attempts fail
  - krb5: connect to the password-changing service if the user principal has
    the NULL instance


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the great adding-of-the-copyright-statements
  - take more care when creating backup files in the files module


author: Nalin Dahyabhai <nalin@redhat.com> 0.7
changelog:
  - add openldap-devel as a buildprereq
  - krb5: use a continuous connection
  - krb5: add "realm" config directive
  - ldap: use a continuous connection
  - ldap: add "server", "basedn", "binddn", "user", "authuser" config directives
  - ldap: actually finish the account deletion function
  - ldap: don't send cleartext passwords to the directory
  - fix naming attribute for users (should be uid, not gid)
  - refine the search-by-id,convert-to-name,search-by-name logic
  - fix handling of defaults when the config file is read in but contains no value
  - implement an LDAP information store
  - try to clean up module naming with libtool
  - luseradd: pass plaintext passwords along
  - luseradd: use symbolic attribute names instead of hard-coded
  - lusermod: pass plaintext passwords along
  - lgroupadd: pass plaintext passwords along
  - lgroupmod: pass plaintext passwords along
  - add libuser as a dependency of libuser-devel


author: Marek Skalicky <mskalick@redhat.com> - 1.8.0-39
changelog:
  - dbm_* calls should call the underlying gdbm_* calls using then
    GDBM_NOLOCK flag
    Resolves: #668702


author: Dan Duval <dan.duval@oracle.com> - 20140911-0.1.git365e80c.0.6
changelog:
  - update ql2400-firmware to 8.02.00-1.0.1 [orabug 22003659]
  - update ql2500-firmware to 8.02.00-1.0.1 [orabug 22003659]


author: Chuck Anderson <chuck.anderson@oracle.com> - 20140911-0.1.git365e80c.0.5
changelog:
  - add "Provides" for the ql* packages required by ovs-release.
  - remove amd-ucode firmware packages.
  - remove iwl* firmware packages [orabug 21879683]


author: Dan Duval <dan.duval@oracle.com> - 20140911-0.1.git365e80c.0.2
changelog:
  - Update ql2400 fw to 8.07.00-18.39.0K [orabug 21241070] (Dan Duval)
  - update ql2500 fw to 8.07.00-18.39.0K [orabug 21241070] (Dan Duval)


author: Jacob Wang <jacob.wang@oracle.com> - 20140911-0.1.git365e80c.0.1
changelog:
  - Update ql2400 fw to 7.04.00 [orabug 19884253] (Guangyu Sun)
  - Update ql2500 fw to 7.05.00 [orabug 19884253] (Guangyu Sun)
  - Update ql2400 and ql2500 fw to 7.03.00 [orabug 18640045] (Jerry Snitselaar)
  - Allow amd-ucode to load. Let's find out what bug 1007411 is. [orabug: 18520524] (Vaughan Cao)


author: Jarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Adds Intel Quick Assist Technology firmware (rhbz 1127338)
  - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403)
  - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702)
  - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595)


author: Jarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8
changelog:
  - Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426)
  - Fix up Obsoletes to all use <= comparisons


author: Jarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caef
changelog:
  - Put in proper URL and URL-less Source0 location, and a note about how
    we generate the tarball by hand from a git tree


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959)
  - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)


author: Josh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954
changelog:
  - Fix location of BuildRequires so git is inclued in the buildroot
  - Create iwlXXXX-firmware subpackages (rhbz 828050)


author: Ben Skeggs <bskeggs@redhat.com> 20090106-2
changelog:
  - Add firmware needed for nouveau to operate correctly (this is Fedora
    only - do not upstream yet - we just moved it here from Fedora kernel)


author: Anton Arapov <anton@redhat.com> - 1:2.11-7
changelog:
  - Add "PXE" to HP OEM Type 209 record output
  - Properly print the hexadecimal value of invalid string characters


author: Anton Arapov <anton@redhat.com> - 1:2.11-5
changelog:
  - Fix the wrong call of the dmi_chassis_type function call. Thus fix
    an issue on the systems with the chassis lock available, application
    doesn't fall out with the out of spec error anymore.


author: Dave Jones <davej@redhat.com>
changelog:
  - Don't try to modify areas mmap'd read-only.
  - Don't build on ia64 any more.
    (It breaks on some boxes very badly, and works on very few).


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.7-3
changelog:
  - track shlib sonames closer, to highlight future abi/soname changes
  - _with_gpg macro, to potentially conditionalize gnupg vs gnupg2 defaults
    for various os/releases (ie, fedora vs rhel)


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0:1.0.2-1
changelog:
  - LGPL used here, and made summary more explicit.
  - Remove dirmngr dependency (gpgsm interfaces with it).
  - Obsolete cryptplug as gpgme >= 0.4.5 provides what we used cryptplug for.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.1-11
changelog:
  - Explicitly added '-g' option into CFLAGS to correctly build .debug_info for i386
    Resolves: #729039


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.3.1-10
changelog:
  - Backported assembler routines from recent gmp-6:
    gmp-s390x-optimization.patch, gmp-s390-31bit-optimization.patch
  - Resolves: #1149237


author: Ivana Varekova <varekova@redhat.com> 4.2.1-1
changelog:
  - update to 4.2.1
  - do some spec cleanups
  - fix 238794 - gmp-devel depends on {version} but not on 
    {version}-{release}
  - remove mpfr (moved to separate package)


author: Karsten Hopp <karsten@redhat.com> 4.1.4-12
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/... requirements
  - use make install DESTDIR=...
  - replace tabs with spaces
  - convert changelog to utf-8


author: Jakub Jelinek <jakub@redhat.com> 4.1.4-11
changelog:
  - make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371)
  - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable mpfr  #104395
  - enable cxx  #80195
  - add COPYING.LIB
  - add fixes from gmp web-site
  - remove some cruft patches for older libtool releases


author: Trond Eivind Glomsrød <teg@redhat.com> 4.1-3
changelog:
  - Redefine the configure macro, the included configure 
    script isn't happy about the rpm default one (#68190). Also, make
    sure the included libtool isn't replaced,


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not
  correctly identified as a 64 bit platform.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to the configure and makeinstall macros
  - FHS-compliance fixing
  - move docs to non-devel package


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - merge in some debian gmp fixes
  - Ulrich Drepper's __gmp_scale2 fix
  - my mpf_set_q fix
  - sparc64 fixes


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - include the private header file gmp-mparam.h because several
    apps seem to assume that they are building against the gmp
    source tree and require it.  Sigh.


author: Marc Ewing <marc@redhat.com>
changelog:
  - started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu>
  - cleaned up file list
  - fixed up install-info support


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Tomas Smetana <tsmetana@redhat.com> 22.6-5
changelog:
  - fix configure.ac to include all the required headers for peekfd
  - remove kernel-headers again -- not needed in rawhide


author: Karel Zak <kzak@redhat.com> 22.1.03072006cvs-1
changelog:
  - update to new upstream CVS version 
  - enable new fuser version
  - fix fuser return code 
  - fix #183897 - "pstree -a" call results in segmentation fault


author: Karel Zak <kzak@redhat.com> 21.6-1
changelog:
  - sync with upstream release 21.6
  - cleanup selinux patch
  - fix #165167 - buffer overflow detected in fuser


author: Karel Zak <kzak@redhat.com> 21.5-1
changelog:
  - Updated to new upstream version 21.5
  - Ported SELinux patch forward as psmisc-21.5-selinux.patch
  - Added psmisc-21.5-term.patch that fix termcap.h and term.h conflicts


author: Mike A. Harris <mharris@redhat.com> 21.4-1
changelog:
  - Updated to new upstream version 21.4
  - Ported SELinux patch forward as psmisc-21.4-redhat-selinux-psmisc.patch,
    but disabled SELINUX support temporarily until other build problems are
    resolved
  - Remove MKINSTALLDIRS-./mkinstalldirs from "make install" as that causes the
    build to fail when "./" changes.  If this option is ever added back, make
    it relative to $RPM_BUILD_DIR instead of ./ so that things do not break
  - Added pstree.x11 to file list after rpm reported it present in buildroot but
    not packaged


author: Mike A. Harris <mharris@redhat.com> 21.3-1
changelog:
  - Updated to new upstream version 21.3
  - Removed dead script gensig.sh
  - Disabled psmisc-21.2-gcc33.patch as it is included in 21.3


author: Mike A. Harris <mharris@redhat.com> 21.2-2
changelog:
  - Updated to new upstream version 21.2
  - Updated Source: URL to sourceforge's current ftp area
  - Fixes fuser largefile bug (#66340)
  - Disable prep time sh %{SOURCE1} >src/signames.h as the 21.2 release
    fixes this already now.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-4
changelog:
  - Autogenerate the signal list from _includedir/bits/signum.h
    to make sure it works on all arches and doesn't break again.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-1
changelog:
  - 20.2
  - Add patch from bug report #56186; the problem is not reproducable,
    but the patch can't hurt.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.1-2
changelog:
  - Add BuildRequires (#49562)
  - s/Copyright/License/
  - Fix license (it's actually dual-licensed BSD/GPL, not just "distributable")


author: William Roche <william.roche@oracle.com> - 1.2.9-43.el6.11
changelog:
  - 27403228 - Implement rescan physical disks API change for optional forced LIP use on Sparc
    Signed-off-by: William Roche <william.roche@oracle.com>
    Signed-off-by: Vasu Srinivasan <vasu.srinivasan@oracle.com>
    Signed-off-by: Luong Nguyen-Duy <luong.nguyenduy@oracle.com> [bug 27403228]


author: Firas Azar <firas.azar@oracle.com> - 1.2.9-43.el6.10
changelog:
  - Signed-off by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Ke-chiang Chen <ke-chiang.chen@oracle.com>
    This patch makes the use of LIP (Loop Initialization Protocol) reset optional in the storage plugin REFRESH function. By default, the "issue_lip" flag passed on from OVM manager is set to False. Applies to Fibre Channel SAN storage only. [bug 19144767]


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 1.2.9-43.el6.9
changelog:
  - Current unable to resize error message is misleading for refresh lun
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Firas Azar <firas.azar@oracle.com> [bug 26174547]


author: Vasu Srinivasan <vasu.srinivasan@oracle.com> - 1.2.9-43.el6.8
changelog:
  - 26542557 - fail to create repository using Entire NVMe disk on Sparc server
    Signed-off-by: William Roche <william.roche@oracle.com>
    Signed-off-by: Vasu Srinivasan <vasu.srinivasan@oracle.com> [bug 26542557]


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.6-1
changelog:
  - update to 1.6
  - add suggested summary, buildrequires, and modify install call as suggested
    by package review (#226021)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-3
changelog:
  - give gpg-error-config libdir=@exec_prefix@/lib instead of @libdir@, so that
    it agrees on 32- and 64-bit arches (it suppresses the -L argument if @libdir@
    is /usr/lib, so this should be cleaner than adding a non-standard .pc file
    which upstream developers might inadvertently think they can depend to be on
    every system which provides this library)


author: Jan Kaluza <jkaluza@redhat.com> 5.04-27
changelog:
  - fix CVE-2014-3587 (incomplete fix for CVE-2012-1571)
  - fix CVE-2014-3710 (out-of-bounds read in elf note headers)
  - fix CVE-2014-8116 (multiple DoS issues (resource consumption))
  - fix CVE-2014-8117 (denial of service issue (resource consumption))
  - fix CVE-2014-9620 (limit the number of ELF notes processed)
  - fix CVE-2014-9653 (malformed elf file causes access to uninitialized memory)


author: Jan Kaluza <jkaluza@redhat.com> 5.04-22
changelog:
  - fix #1169509 - add support for Java 1.7 and 1.8
  - fix #1243650 - comment out too-sensitive Pascal magic
  - fix #1080453 - remove .orig files from magic directory
  - fix #1161058 - add support for EPUB
  - fix #1162149 - remove parts of patches patching .orig files
  - fix #1154802 - fix detection of zip files containing file named "mime"
  - fix #1246073 - fix detection UTF8 and UTF16 encoded XML files
  - fix #1263987 - add new "execfn" to coredump output to show the real name of
    executable which generated the coredump
  - fix #809898 - add support for detection of Python 3.2-3.5 byte-compiled files
  - fix #966953 - backport support for MSOOXML


author: Jan Kaluza <jkaluza@redhat.com> 5.04-17
changelog:
  - fix CVE-2014-3479 (cdf_check_stream_offset boundary check)
  - fix CVE-2014-3480 (cdf_count_chain insufficient boundary check)
  - fix CVE-2014-0237 (cdf_unpack_summary_info() excessive looping DoS)
  - fix CVE-2014-0238 (CDF property info parsing nelements infinite loop)
  - fix CVE-2014-2270 (out-of-bounds access in search rules with offsets)
  - fix CVE-2014-1943 (unrestricted recursion in handling of indirect type rules)
  - fix CVE-2012-1571 (out of bounds read in CDF parser)


author: Jan Kaluza <jkaluza@redhat.com> 5.04-16
changelog:
  - fix #873997 - improve Minix detection pattern to fix false positives
  - fix #884396 - improve PBM pattern to fix misdetection with x86 boot sector
  - fix #980941 - improve Bio-Rad pattern to fix false positives
  - fix #849621 - tweak strength of XML, Latex and Python patterns to execute
    them in the proper order
  - fix #1067771 - detect qcow version 3 images
  - fix #1064463 - treat RRDTool files as binary files


author: Jan Kaluza <jkaluza@redhat.com> 5.04-14
changelog:
  - fix #795425 - detect vdi images
  - fix #795761 - detect qed images
  - fix #801711 - uncompress bzip2 archives using -z parameter
  - fix #797784 - read patterns from ~/.magic.mgc


author: Jan Kaluza <jkaluza@redhat.com> 5.04-13
changelog:
  - fix #688136 - fixed the patch from previous commit
  - fix #719583 - support for local magic file in /etc/magic


author: Jan Kaluza <jkaluza@redhat.com> 5.04-12
changelog:
  - fix #758109 - detect ia64 swap
  - fix #760083 - print RPM packages names
  - fix #709846 - detect BIOS headers
  - fix #688136 - remove weak msdos patterns
  - fix #747999 - improve lzma detection
  - fix #733229 - magic pattern for python function detection


author: Jan Kaluza <jkaluza@redhat.com> 5.04-8
changelog:
  - fix #676045 - detect all RPM architectures
  - fix #712992 - detect noarch RPM packages
  - fix #688700 - detect s390 kernel
  - fix #692098 - do not try to get coredump informations from normal binary
  - fix #712988 - do not handle Python scripts as binary files
  - fix #690801 - fixed grammar mistakes in man page
  - fix #675691 - improve TeX recognition


author: Jan Kaluza <jkaluza@redhat.com> 5.04-6
changelog:
  - fix #637782 - identify the zip64 format correctly
  - fix #643046 - recognize volume_key escrow packets
  - fix #594083 - improve Python recognition
  - fix #608686 - mention return code in manpage
  - fix #610795 - recognize webm content
  - fix #670125 - don't identify GFS2 filesystems as GFS1 filesystems


author: Daniel Novotny <dnovotny@redhat.com> 5.03-6
changelog:
  - fix #510429 -  file is confused by string "/* (if any) */" 
         in C header and claims it "Lisp/Scheme program text"


author: Daniel Novotny <dnovotny@redhat.com> 5.00-5
changelog:
  - added two font definitions (#491594, #491595)
    and a fix for file descriptor leak when MAGIC_COMPRESS used (#491596)


author: Daniel Novotny <dnovotny@redhat.com> 4.26-2
changelog:
  - fix #463809: rpmbuild rpmfcClassify: Assertion fails on some binary files
    (false positive test on "DOS device driver" crashed file(1)
     and rpmbuild(8) failed)


author: Tomas Smetana <tsmetana@redhat.com> - 4.24-4
changelog:
  - add GFS2 filesystem magic; thanks to Eric Sandeen
  - add LVM snapshots magic (#449755); thanks to Jason Farrell


author: Tomas Smetana <tsmetana@redhat.com> - 4.24-3
changelog:
  - drop patches that do nothing in recent build system
  - create the text magic file during installation


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.21-3
changelog:
  - resolves: #172015: no longer reports filename of crashed app when run on core files.
  - resolves: #249578: Weird output from "file -i"
  - resolves: #234817: file reports wrong filetype for microsoft word file


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.21-2
changelog:
  - resolves: #246700: RPM description isn't related to product
  - resolves: #238789: file-devel depends on %{version}
    but not on %{version}-%{release}
  - resolves: #235267: for core files, file doesn't display the executable name


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.19-2
changelog:
  - Resolves: #223297 - file does not recognize OpenOffice "native" formats
  - Resolves: #224344 - Magic rules should be in file-libs


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.19-1
changelog:
  - Resolves: #208880 - Pointless file(1) error message while detecting ELF 64-bit file
      thanks to <jakub@redhat.com> for patch
  - Resolves: #214992 - file-devel should own %_includedir/* %_libdir/lib*.so
  - Resolves: #203548 - a -devel package should be split out for libmagic
  - upgrade to new upstream 4.19
  - patch revision and cleaning
  - split package to file, file-devel and file-libs


author: Radek Vokal <rvokal@redhat.com> - 4.12-3
changelog:
  - core64 patch fixing output on core files (#145354) <kzak@redhat.com>
  - minor change in magic patch


author: Radek Vokal <rvokal@redhat.com>
changelog:
  - zlib patch deleted, note patch deleted, rh patch updated, debian patch updated
  - upgrade to file-4.10


author: Jeff Johnson <jbj@jbj.org> 4.07-1
changelog:
  - upgrade to 4.07.
  - deal gracefully with unreadable files (#113207).
  - detect PO files (from Debian).


author: Jeff Johnson <jbj@jbj.org> 4.02-3
changelog:
  - use zlib rather than exec'ing gzip.

  -* Thu Aug 28 2003 Dan Walsh <dwalsh@redhat.com>
  -- Add Selinux support.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.37-1
changelog:
  - 3.37
  - s/Copyright/License/
  - build with --enable-fsect-man5, drop patch
  - disable two old patches


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix off-by-1 error when creating filename for use with -i.
  - include a copy of GNOME /etc/mime-types in %{_datadir}/magic.mime (#14741).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - identify ELF stripped files correctly (#4665).
  - use SPARC (not sparc) consistently throughout (#4665).
  - add entries for MS Office files (#4665).


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output 
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing 
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Ivana Varekova <varekova@redhat.com> 1.3.5-8
changelog:
  - fix bug 204676 (patches by Tavis Ormandy)
    - cve-2006-4334 - null dereference problem
    - cve-2006-4335 - buffer overflow problem
    - cve-2006-4336 - buffer underflow problem
    - cve-2006-4338 - infinite loop problem
    - cve-2006-4337 - buffer overflow problem


author: Tomas Mraz <tmraz@redhat.com> 1.3.5-3
changelog:
  - don't use the asm code again as it's slower than the gcc compiled one
  - convert the .spec to UTF-8


author: Tomas Mraz <tmraz@redhat.com> 1.3.5-2
changelog:
  - upstream 1.3.5
  - dropped long ago obsolete dirinfo patch
  - escape file names in zgrep (#123012)
  - make stack in match.S nonexecutable


author: Jeff Johnson <jbj@redhat.com> 1.3.3-9
changelog:
  - enlarge window buffer to avoid accessing beyond end-of-buffer (#78413,#83095).
  - re-enable rsync ready patch.


author: Trond Eivind Glomsrød <teg@redhat.com> 1.3.0-16
changelog:
  - replace tempfile patches with improved ones solar@openwall.com
  - Add less to the dependency chain - zless needs it


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed buzilla bug #26680. Wrong skip value after mktemp patch and forced
    overwrite for output file during decompression.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add HAVE_LSTAT define, to avoid it doing weird things to symlinks
    instead of ignoring them as the docs say it should (#22045)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Build system handles stripping
  - Don't do thing the system does, like creating directories
  - use --bindir /bin
  - Added URL
  - skip unnecesarry sed step
  - Include THANKS, AUTHORS, ChangeLog, TODO


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - adopt patch from Paul Eggert to fix detection of the improper tables in
    inflate.c(huft_build)
  - the latest released version 1.2.4a, which provides documentation updates
    only. But it lets us use small revision numbers again
  - add an dirinfo entry for gzip.info so we can get rid of the ugly --entry
    args to install-info


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added /usr/bin/gzip and /usr/bin/gunzip symlinks as some programs are too
    brain dead to figure out they should be at least trying to use $PATH
  - added BuildRoot


author: Michal Minar <miminar@redhat.com> - 3.1.1-17
changelog:
  - Related: #768365
  - Related: #623587
  - Solves spitting of "uninitialized values" messages occuring on ppc64
    architectures.
  - Added generic detection of Intel CPUs for coretemp module to sensors-detect.


author: Michal Minar <miminar@redhat.com> - 3.1.1-16
changelog:
  - Related: #610000
  - fixed requirements among packages
  - spelling corrections of summaries and description


author: Michal Minar <miminar@redhat.com> - 3.1.1-11
changelog:
  - Resolves: #623587 - lm_sensors doesn't find/ load coretemp module automatically
  - Resolves: #768365 - sensors-detect reports error when run without user input
  - coretemp_detect function in sensors-detect updated


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.1.1-10
changelog:
  - Resolves: #616760 - lm_sensors init script missing - regression from beta 1
  - revert "remove one of init scripts from /etc/init.d"


author: Nikola Pajkovsky <npajkovs@redhta.com> - 3.1.1-8
changelog:
  - Resolves: #575757 - Init script: missing force-reload action, script exits with wrong exit code
  - remove one of init scripts from /etc/init.d


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.0.3-1
changelog:
  - New upstream release 3.0.3
  - Add a patch to support drivers with an ACPI "bus" (new Asus atk0110 drv)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.0.2-1
changelog:
  - New upstream release 3.0.2
  - This release contains various important fixes to sensors-detect, which made
    it unsafe to run sensors-detect on certain systems
  - Drop all patches (all upstreamed)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.0.1-5
changelog:
  - Make libsensors work with hwmon class entries without a device link
    such as the acpi thermal_zone driver (bz 437637)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.0.1-1
changelog:
  - New upstream release 3.0.1
  - Drop several patches which are included in the new upstream release
  - Add a patch to make the initscript returncodes LSB compliant (bug 431884)


author: Hans de Goede <j.w.r.degoede@hhs.nl> - 3.0.0-0.1.rc3
changelog:
  - New upstream release 3.0.0-rc3
  - Remove eeprommer sub-package as eeprommer (and the other i2c-tools)
    have moved to the new i2c-tools package


author: Hans de Goede <j.w.r.degoede@hhs.nl> - 2.10.4-2
changelog:
  - Update License tag for new Licensing Guidelines compliance
  - Disable service by default (no use without any sensors being configured),
    enable it automatically on a successfull sensors-detect run (bz 253750)


author: Hans de Goede <j.w.r.degoede@hhs.nl> - 2.10.4-1
changelog:
  - New upstream release 2.10.4
  - Drop upstreamed patches 4, 5, 7 and 8
  - Drop no longer need patch 3
  - Move libsensors.3 manpage to -devel sub-package
  - Move sensord.8 manpage to -sensord sub-package
  - Switch from ExclusiveArch: alph ix86 x86_64, to ExcludeArch: s390 s390x,
    so that we get build on ppc, arm, etc. too. (bz 181037 amongst others)


author: Hans de Goede <j.w.r.degoede@hhs.nl> - 2.10.3-3
changelog:
  - Remove no longer needed patches 1, 2 & 6
  - Various specfile cleanups to match the Fedora packaging guidelines
    this fixes bz 238787 amongst other things
  - Use lm_sensors provided initscript instead of our own private one, this
    stops the sometimes unnecessary loading of i2c-dev
  - No longer ship a static version of the library in -devel
  - Compile sensord and eepromer extra programs and put each in its own
    subpackage (bz 236904)


author: Phil Knirsch <pknirsch@redhat.com> 2.10.0-1
changelog:
  - Update to lm_sensors-2.10.0
  - Added missing buildprereq on sysfsutils-devel (#189196)
  - Added missing prereq on chkconfig (#182838)
  - Some fiddling to make it build on latest kernels


author: Phil Knirsch <pknirsch@redhat.com> 2.9.2-1
changelog:
  - Update to lm_sensors-2.9.2
  - Fixed wrong subsys locking (#176965)
  - Removed lm_sensors pwmconfig, has been fixed upstream now


author: Phil Knirsch <pknirsch@redhat.com> 2.9.1-4
changelog:
  - Fixed CAN-2005-2672 lm_sensors pwmconfig insecure temporary file usage
    (#166673)
  - Fixed missing optflags during build (#166910)


author: Phil Knirsch <pknirsch@redhat.com> 2.9.1-3
changelog:
  - Update to lm_sensors-2.9.1
  - Fixed wrong/missing location variables for make user
  - Fixed missing check for /etc/modprobe.conf in sensors-detect (#139245)


author: Dave Jones <davej@redhat.com> 2.8.8-4
changelog:
  - Add dependancy on dmidecode rather than the obsolete kernel-utils.
  - Don't delete dmidecode from the buildroot.


author: Harald Hoyer <harald@redhat.com> 2.8.7-2
changelog:
  - added initial /etc/sysconfig/lm_sensors
  - added initscript
  - MAKEDEV the initial i2c devices in initscript and sensors-detect


author: Phil Knirsch <pknirsch@redhat.com> 2.8.3-5
changelog:
  - Fixed initscript to work with 2.6 kernel and made it more quiet (#112286).
  - Changed proposed location of sensors (#116496).
  - Fixed rpath issue.


author: Phil Knirsch <pknirsch@redhat.com> 2.8.2-1
changelog:
  - Update to latest upstream version 2.8.2
  - Fixed wrong & usage in if expression.
  - Included several new perl tools.


author: Phil Knirsch <pknirsch@redhat.com> 2.6.5-6
changelog:
  - Included prog/init scripts and README (#90606).
  - Require kernel-utils for dmidecode (#88367, #65057).


author: Matt Wilson <msw@redhat.com>
changelog:
  - added patch to not include sys/perm.h, as it's gone now.
  - added alpha to ExclusiveArch
  - use make "LINUX_HEADERS=/usr/include" to get kernel headers


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 2.5.5 which includes the Serverworks drivers. Kernel modules are
    not included though es they have to go into the kernel package
  - Had to remove all references to I2C_SMBUS_I2C_BLOCK_DATA from
    kernel/busses/i2c-i801.c and prog/dump/i2cdump.c as this is not defined in
    our current kernel package


author: Greg Bailey <gbailey@lxpro.com> - 1.3-1
changelog:
  - Update to 1.3
  - Update URL to new location
  - Rename cpuid to msr-cpuid to avoid conflict with existing Fedora package


author: Kamil Dudka <kdudka@redhat.com> - 8.4-44
changelog:
  - fix the functionality of 'sort -h -k ...' in multi-byte locales (#1357979)
  - use correct path to grep(1) in colorls.sh (#1376892)
  - make colorls.sh compatible with ksh (#1321643)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-41
changelog:
  - colorls.sh,colorls.csh - call utilities with complete path (#1222140)
  - mkdir, mkfifo, mknod - respect default umask/acls when 
    COREUTILS_CHILD_DEFAULT_ACLS envvar is set (to match rhel 7 behaviour,


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-40
changelog:
  - ls: improve efficiency on filesystems without support for ACLs,
    xattrs or SELinux (#1248141)
  - su: suppress PAM info messages for -c or non-login sessions (#1267588)
  - tail, stat: recognize several new filesystems - up2date by Jan 1st 2016 (#1280333)


author: Ondrej Oprala <ooprala@redhat.com> - 8.4-39
changelog:
  - du: improve du error message of coreutils commands in a chrooted environment
    (patch by Boris Ranto) (#1086916)


author: Jacob Wang <jacob.wang@oracle.com> - 1.23-13.0.1
changelog:
  - revert patch tar-1.23-optimize-packing-entirely-sparse-files.patch
    the patch did not think of the case of inline data support [Orabug: 19145598]


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-12
changelog:
  - better auto-recognize xz compressed archives (#1056672)
  - fix --verify option (#923359)
  - fnmatch fixes (#1034360)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-11
changelog:
  - avoid crash by backporting upstream patch for internal construction of
    file-name hash table (#877769).


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-10
changelog:
  - backport upstream patch to make sure that file matching is done before file
    file-name transformation (#875727)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-9
changelog:
  - backport also --listed-incremental crash fix, this patch is in upstream and in
    fedora from f14 (related to #841308)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-8
changelog:
  - fix for bad file matching during extracting concrete files from an archive
    (backported fix from fedora 14) (#841308)
  - typo - better separate comments in spec file


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-7
changelog:
  - disable tests/remfiles01.at for running as a privileged user (#687972)
  - fix undesired error exit on receiving SIGPIPE during performing --list
    operation (#807728) and related fix for test suite -- skip SIGPIPE-dependent
    tests in environments ignoring SIGPIPE


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-6
changelog:
  - fix for uninit defect (revealed by Coverity) added with %patch11.
  - recovered traditional behaviour of '--keep-old-files' option and added new
    option '--skip-old-files' (#799252)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-4
changelog:
  - fix crash when the --listed-incremental option is used and archive includes
    root directory (#653433)
  - fix for long name corruption when --posix and --sparse options are used,
    testcase included (#656834)
  - using --remove-files caused data lost when symlinks were contained.  Testcase
    is included (#698212)
  - endless loop fix, problem occurred when the `-k' option was used and extracted
    archive contained symlink that already existed in file system (#726723).
  - improve sparse file support performance for entirely sparse files (#760665).
  - use gnulib's fnmatch rather then glibc's (in RHEL-6) (#768724)
  - the --remove-files option did not remove archived files in combination with
    append option (-r) (#782628).


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-15
changelog:
  - CVE-2010-0624 tar, cpio: Heap-based buffer overflow
    by expanding a specially-crafted archive (#571842)
  - realloc within check_exclusion_tags() caused invalid write
    (#571523)
  - not closing file descriptors for excluded files/dirs with
    exlude-tag... options could cause descriptor exhaustion
    (#571523)
  - support for "lustre.*" extended attributes (#572442)
  - allow build without SELinux support


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-13
changelog:
  - do not fail with POSIX 2008 glibc futimens()
  - temporarily disable fix for #531441, causing stack smashing
    with newer glibc


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-11
changelog:
  - fix segfault with corrupted metadata in code_ns_fraction
    (#531441)
  - commented patches and sources


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-10
changelog:
  - store xattrs for symlinks (#525992) - by Kamil Dudka
  - update tar(1) manpage (#539787)
  - fix memory leak in xheader (#518079)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-4
changelog:
  - Report record size only if the archive refers to a device
    (#487760)
  - Do not sigabrt with new gcc/glibc because of writing to
    struct members of gnutar header at once via strcpy


author: Ondrej Vasik <ovasik@redhat.com> 2:1.21-1
changelog:
  - New upstream release 1.21, removed applied patches
  - add support for -I option, fix testsuite failure


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-3
changelog:
  - Fixed wrong documentation for xattrs options (#466517)
  - fixed bug with null file terminator and change dirs
    (upstream)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-1
changelog:
  - new upstream release 1.20 (lzma support, few new options
    and bugfixes)
  - heavily modified xattrs patches(as tar-1.20 now uses automake
    1.10.1)


author: Radek Brich <rbrich@redhat.com> 2:1.19-3
changelog:
  - do not print getfilecon/setfilecon warnings when SELinux is disabled
    or SELinux data are not available (bz#431879)
  - fix for GCC 4.3


author: Radek Brich <rbrich@redhat.com> 2:1.19-2
changelog:
  - fix errors in man page
    * fix definition of --occurrence (bz#416661, patch by Jonathan Wakely)
    * update meaning of -l: it has changed from --one-filesystem
      to --check-links (bz#426717)
  - update license tag, tar 1.19 is GPLv3+


author: Radek Brich <rbrich@redhat.com> 2:1.17-5
changelog:
  - fix (non)detection of xattrs
  - move configure stuff from -xattrs patch to -xattrs-conf,
    so the original patch could be easily read
  - fix -xattrs patch to work with zero length files and show
    warnings when xattrs not available (fixes by James Antill)
  - possible corruption (#408621) - add warning to man page
    for now, may be actually fixed later, depending on upstream


author: Radek Brich <rbrich@redhat.com> 2:1.17-1
changelog:
  - new upstream version
  - patch for wildcards (#206841), restoring old behavior
  - patch for testsuite
  - update -xattrs patch
  - drop 13 obsolete patches


author: Peter Vrabec <pvrabec@redhat.com> 1.15.90-4
changelog:
  - fix problem with unpacking archives in a directory for which 
    one has write permission but does not own (such as /tmp) (#149686)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-12
changelog:
  - fix extracting sparse files to a filesystem like vfat,
    when ftruncate may fail to grow the size of a file.(#179507)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-5
changelog:
  - extract sparse files even if the output fd is not seekable.(#154882)
  - (sparse_scan_file): Bugfix. offset had incorrect type.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.13.19-5
changelog:
  - Fix build with current autoconf (stricter checking on AC_DEFINE)
  - Fix segfault when tarring directories without having read permissions
    (#40802)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix hang on tar tvzf - <something.tar.gz, introduced by
    exit code fix (Bug #15448), Patch from Tim Waugh <twaugh@redhat.com>


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - 1.13.14
  - Update man page to know about -I / --bzip
  - Remove dependancy on rmt - tar can be used for anything local
    without it.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to tar-1.12.64013.
  - subtract (and reopen #2415) bzip2 support using -y.
  - move gtar to /bin.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump.
  - Turn on nls.


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Adam Jackson <ajax@redhat.com> 1.2.3-2.fc7
changelog:
  - libXfont-1.2.3-namespace-pollution.patch: Hide some symbols from the dynamic
    linker to avoid colliding with other libs.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Natalya Naumova <natalya.naumova@oracle.com> - 1.2.13-2.0.1
changelog:
  - fixed linux family check for Oracle in cpe oval configuration file
  - created cumulative patch for Oracle cpe changes [orabug 25426466]


author: Martin Preisler <mpreisle@redhat.com> - 1.2.12-1
changelog:
  - Upgrade to the latest upstream release
  - improved HTML report by referencing links
  - fixed validity errors in ARF files
  - fixed CVE parsing
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (#1387248)
  - fixed oscap-docker man page (#1387166)


author: Watson Sato <wsato@redhat.com> - 1.2.11-1
changelog:
  - Upgrade to the latest upstream release
  - NIST certified OpenSCAP (#1364207)
  - Huge speed-up of generating HTML reports and guides
  - Support remote datastream components
  - Support tailoring of external datastreams
  - New option generating OVAL results without system characteristics
  - Support for extracting Ansible playbooks
  - Enabled fetching remote resources in OVAL module
  - Support --benchmark-id when running `oscap xccdf generate guide`
  - Enabled offline scanning in many probes
  - Added and updated various CPEs
  - Fixed manual page for oscap-ssh (#1299969)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.3.8.1.el6uek]
changelog:
  - Bluetooth: Properly check L2CAP config option output buffer length (Ben Seri)  [Orabug: 26796363]  {CVE-2017-1000251}


author: Karsten Hopp <karsten@redhat.de> 1.10-24
changelog:
  - added development manpages
  - as there are no manpages for the executables available, added at least
    a FAQ (#172324)


author: Mike A. Harris <mharris@redhat.com> 1.10-13
changelog:
  - Removed %name macro sillyness from package Summary, description text, etc.
  - Removed archaic Prefix: tag
  - lib64 fixes everywhere to use _lib, _libdir, etc
  - Removed deletion of RPM_BUILD_DIR from %clean section
  - Added -q flag to setup macro
  - Severely cleaned up spec file, and removed usage of perl


author: Jakub Jelinek <jakub@redhat.com> 1.10-12
changelog:
  - CFLAGS was using COPTFLAG variable, not COPTFLAGS
  - build with -fpic
  - apply the IA-64 patch everywhere, use capget/capset from glibc,
    not directly as _syscall (as it is broken on IA-32 with -fpic)
  - reenable alpha


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.10-6
changelog:
  - Fix sys/capabilities.h header (#55727)
  - Move to /lib, some applications seem to be using this rather early
    (#55733)


author: Mike A. Harris <mharris@redhat.com> 0.3-5
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel >= 7.0-10, libXfixes-devel to devel
    subpackage needed by xcomposite.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.2.2.1-1
changelog:
  - Updated libXcomposite to version 0.2.2.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.2.2-1
changelog:
  - Updated libXcomposite to version 0.2.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.1-16.20090824bzr68
changelog:
  - Rebase to new upstream snapshot
  - Patches merged upstream
  - Fixes deprecation warnings on py2.6/py3.0
  - Remove py2.3 patch -- only needed for EPEL-4


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 0.1-3
changelog:
  - Add a patch to work under Python 2.3.
  - Stop shipping the tests as they are useless to the end user.


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.3-3
changelog:
  - Fix 0001-Handle-unknown-device-classes.patch: missing prototype change for
    copy_classes in XIQueryDevice caused parameter corruption (#744960)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.3-2
changelog:
  - 0001-Handle-unknown-device-classes.patch: don't corrupt memory when a
    server sends unknown device classes.


author: parag <paragn@fedoraproject.org> 1.1.3-2
changelog:
  - Merge-review #226076
  - Removed BR:pkgconfig
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length AUTHORS README file


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package for xi.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192721)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXi to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as build fails without it, but does
    not check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXi to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-5.2
changelog:
  - 1724045 - fix CVE-2019-12735 the :source! command allows arbitrary command execution via the modeline
  - fix spec warnings about expanding macros


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193509)
  - Use "make install DESTDIR=..." instead of makeinstall macro, to fix (#192731)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXxf86vm to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXxf86vm to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Tomas Hozza <thozza@redhat.com> - 2.48-11
changelog:
  - Revert previous changes because of many problems with --bind-dynamic option backport.
  - Dropping dnsmasq-2.48-add-bind-dynamic-option.patch
  - Set SO_BINDTODEVICE socket option when using --bind-interfaces (rhbz#884957)


author: Tomas Hozza <thozza@redhat.com> - 2.48-10
changelog:
  - Fixed dnsmasq-2.48-add-bind-dynamic-option.patch
   - the option --bind-dynamic was not set correctly when used


author: Jiri Denemark <jdenemar@redhat.com> - 2.48-7
changelog:
  - Fix lease-change script (rhbz#815819)
  - Check tftp-root exists and is accessible at startup (rhbz#824214)


author: Daniel Veillard <veillard@redhat.com> - 2.48-5
changelog:
  - suppress the no address DHCP warning from logs (rhbz#704073)
  - fixes various small problems in the initscript (rhbz#584009)


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
changelog:
  - New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
  - Dropped patch for newer glibc (merged upstream)


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.2.test20
changelog:
  - New upstream test release
  - Moving dnsmasq.leases to /var/lib/dnsmasq/ as per BZ#407901
  - Ignoring dangerous-command-in-%post rpmlint warning (as per above fix)
  - Patch consolidation/cleanup
  - Removed conditionals for Fedora <= 3 and Aurora 2.0


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-1
changelog:
  - Finalized upstream release
  - Removing URLs from patch lines (CVS is the authoritative source)
  - Added more magic to make spinning rc/test packages more seamless


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-1
changelog:
  - Update to 2.35
  - Removed UPGRADING_to_2.0 from %doc as per upstream change
  - Enabled conf-dir in default config as per RFE BZ#214220 (thanks Chris!)
  - Added %dir /etc/dnsmasq.d to %files as per above RFE


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-2
changelog:
  - Fixed BZ#212005
  - Moved %postun scriptlet to %post, where it made more sense
  - Render scriptlets safer
  - Minor cleanup for consistency


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.31-1
changelog:
  - Removed dbus config patch (now provided upstream)
  - Patched in init script (no longer provided upstream)
  - Added DBus-interface to docs


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4.2
changelog:
  - More upstream-recommended cleanups :)
  - Killed sysconfig file (provides unneeded functionality)
  - Tweaked init script a little more


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4
changelog:
  - Moved options out of init script and into /etc/sysconfig/dnsmasq
  - Disabled DHCP_LEASE in sysconfig file, fixing bug #190379
  - Simon Kelley provided dbus/dnsmasq.conf, soon to be part of the tarball


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-3
changelog:
  - Un-enabled HAVE_ISC_READER, a hack to enable a deprecated feature (request)
  - Split initscript & enable-dbus patches, conditionalized dbus for FC3
  - Tweaked name field in changelog entries (trying to be consistent)


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-2
changelog:
  - Disabled stripping of binary while installing (oops)
  - Enabled HAVE_ISC_READER/HAVE_DBUS via patch
  - Added BuildReq for dbus-devel


author: Guido Tijskens <guido.tijskens@oracle.com> - 1.0.0-17.el6.2.2
changelog:
  - Mmake all debug keys optional
    Signed-Off by: Philippe Vanhaesendonck
    Signed-Off by: Olif Cahpman
    Signed-Off by: Guido Tijskens [bug 27243763]


author: Guido Tijskens <guido.tijskens@oracle.com> - 1.0.0-17.el6.2.1
changelog:
  - backport 26947226: Don't run D/e debug keys unless ovm3.all_debug_keys flag is specified
    Signed-Off by: Philippe Vanhaesendonck
    Signed-Off by: Guido Tijskens
    Signed-Off by: Geert Noynaert [bug 27036934]


author: Guido Tijskens <guido.tijskens@oracle.com> - 1.0.0-17.el6.2
changelog:
  - Add xen debug-keys output and support for xl toolstack
    Signed-Off by: Philippe Vanhaesendonck
    Signed-Off by: Guido Tijskens
    Signed-Off by: Olif Chapman [bug 26116097]


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-2
changelog:
  * Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.35-1
  - Upgrade to latest from NSA
          * Fix alias field in module format, caused by boundary format change
            from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Upgrade to latest from NSA
    * Add bounds support from KaiGai Kohei.
    * Fix invalid aliases bug from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 2.0.32-1
changelog:
  - Upgrade to latest from NSA
    * Allow require then declare in the source policy from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_semantic_level_expand() to handle a user require w/o MLS information from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.30-1
changelog:
  - Upgrade to latest from NSA
    * Fix endianness bug in the handling of network node addresses from Stephen Smalley.
      Only affects big endian platforms.
      Bug reported by John Weeks of Sun upon policy mismatch between x86 and sparc.


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_level_convert() to gracefully handle an empty user declaration/require from Stephen Smalley.
    * Belatedly merge test for policy downgrade from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Upgrade to latest from NSA
    * Drop unused ->buffer field from struct policy_file.
    * Add policy_file_init() initalizer for struct policy_file and use it, from Todd C. Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.23-1
changelog:
  - Upgrade to latest from NSA
    * Accept "Flask" as an alternate identifier string in kernel policies from Stephen Smalley.
    * Add support for open_perms policy capability from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.21-1
changelog:
  - Upgrade to latest from NSA
    * Fix invalid memory allocation in policydb_index_others() from Jason Tang.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Upgrade to latest from NSA
    * Port of Yuichi Nakamura's tune avtab to reduce memory usage patch from the kernel avtab to libsepol from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.19-1
changelog:
  - Upgrade to latest from NSA
    * Add support for consuming avrule_blocks during expansion to reduce
      peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.18-1
changelog:
  - Upgrade to latest from NSA
    * Added support for policy capabilities from Todd Miller.
    * Prevent generation of policy.18 with MLS enabled from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Upgrade to latest from NSA
    * clarify and reduce neverallow error reporting from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Reject self aliasing at link time from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
    * Fixed bug in require checking from Stephen Smalley.
    * Added user hierarchy checking from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for the handle_unknown policydb flag from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Moved next_entry and put_entry out-of-line to reduce code size from Ulrich Drepper.
    * Fixed module_package_read_offsets bug introduced by the prior patch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Upgrade to latest from NSA
    * Eliminate unaligned accesses from policy reading code from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.5-1
changelog:
  - Upgrade to latest from NSA
       * Fix sepol_context_clone to handle a NULL context correctly.
            This happens for e.g. semanage_fcontext_set_con(sh, fcontext, NULL)
      to set the file context entry to "<<none>>".
  - Apply patch from Joshua Brindle to disable dontaudit rules


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged add boolmap argument to expand_module_avrules() from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl to remap booleans at expand time to 
      avoid holes in the symbol table.


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol segfault fix from Stephen Smalley for when
      sensitivities are required but not present in the base.
    * Merged patch to add errcodes.h to libsepol by Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.15.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.15.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl MacMillan for a segfault when linking
      non-MLS modules with users in them.


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for version comparison that was preventing range
      transition rules from being written for a version 5 base policy
      from Darrel Goeddel.


author: Dan Walsh <dwalsh@redhat.com> 1.12.27-1
changelog:
  - Upgrade to latest from NSA
    * Merged mls user and range_transition support in modules
      from Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged range transition enhancements and user format changes
      Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditionally expand neverallows patch from Jeremy Mowery.
    * Merged refactor expander patch from Jeremy Mowery.


author: Dan Walsh <dwalsh@redhat.com> 1.12.24-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol unit tests from Joshua Brindle.
    * Merged symtab datum patch from Karl MacMillan.
    * Merged netfilter contexts support from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.12.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged helpful hierarchy check errors patch from Joshua Brindle.
    * Merged semodule_deps patch from Karl MacMillan.
      This adds source module names to the avrule decls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.19-1
changelog:
  - Upgrade to latest from NSA
    * Lindent.
    * Merged optionals in base take 2 patch set from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.12.17-1
changelog:
  - Upgrade to latest from NSA
    * Revert 1.12.16.
    * Merged cleaner fix for bool_ids overflow from Karl MacMillan,
      replacing the prior patch.
    * Merged fixes for several memory leaks in the error paths during
      policy read from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.14-1
changelog:
  - Upgrade to latest from NSA
    * Fixed bool_ids overflow bug in cond_node_find and cond_copy_list,
      based on bug report and suggested fix by Cedric Roux.
    * Merged sens_copy_callback, check_role_hierarchy_callback,
      and node_from_record fixes from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.12-1
changelog:
  - Upgrade to latest from NSA
    * Added sepol_policydb_compat_net() interface for testing whether
      a policy requires the compatibility support for network checks
      to be enabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 1.12.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to initialize sym_val_to_name arrays from Kevin Carr.
      Reworked to use calloc in the first place, and converted some other
      malloc/memset pairs to calloc calls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.9-1
changelog:
  - Upgrade to latest from NSA
    * Dropped tests from all Makefile target.
    * Merged fix warnings patch from Karl MacMillan.
    * Merged libsepol test framework patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.12.6-1
changelog:
  - Upgrade to latest from NSA
    * Fixed cond_normalize to traverse the entire cond list at link time.


author: Dan Walsh <dwalsh@redhat.com> 1.12.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for leak of optional package sections from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12.3-1
changelog:
  - Upgrade to latest from NSA
    * Fixed attr_convert_callback and expand_convert_type_set
      typemap bug.


author: Dan Walsh <dwalsh@redhat.com> 1.12-2
changelog:
  - Upgrade to latest from NSA
    * Updated version for release.
    * Merged cond_evaluate_expr fix from Serge Hallyn (IBM).
    * Fixed bug in copy_avrule_list reported by Ivan Gyurdiev.
    * Merged sepol_policydb_mls_enabled interface and error handling
      changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged node_expand_addr bugfix and node_compare* change from
      Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged nodes, ports: always prepend patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Added a defined flag to level_datum_t for use by checkpolicy.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.13-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged fix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged assertion copying bugfix from Joshua Brindle.
    * Merged sepol_av_to_string patch from Joshua Brindle.
    * Merged clone record on set_con patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged cond_expr mapping and package section count bug fixes
      from Joshua Brindle.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.  
    * Merged fixes for overflow bugs on 64-bit from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.7-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Fixed hierarchy checker to only check allow rules.


author: Dan Walsh <dwalsh@redhat.com> 1.11.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged further fixes from Russell Coker, specifically:
      - av_to_string overflow checking
      - sepol_context_to_string error handling
      - hierarchy checking memory leak fixes and optimizations
      - avrule_block_read variable initialization
    * Marked deprecated code in genbools and genusers.


author: Dan Walsh <dwalsh@redhat.com> 1.11.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged bugfix for sepol_port_modify from Russell Coker.
    * Fixed bug in sepol_iface_modify error path noted by Ivan Gyurdiev.
    * Merged port ordering patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.2-2
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - support ordering of records in compare function
      - enable port interfaces
      - add interfaces for context validity and range checks
      - add include guards


author: Dan Walsh <dwalsh@redhat.com> 1.9.40-1
changelog:
  - Upgrade to latest from NSA
    * Merged module function and map file cleanup from Ivan Gyurdiev.
    * Merged MLS and genusers cleanups from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.39-1
changelog:
  - Upgrade to latest from NSA
    Prepare for removal of booleans* and *.users files.
    * Cleaned up sepol_genbools to not regenerate the image if
      there were no changes in the boolean values, including the
      degenerate case where there are no booleans or booleans.local
      files.
    * Cleaned up sepol_genusers to not warn on missing local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.9.38-1
changelog:
  - Upgrade to latest from NSA
    * Removed sepol_port_* from libsepol.map, as the port interfaces
      are not yet stable.


author: Dan Walsh <dwalsh@redhat.com> 1.9.36-1
changelog:
  - Upgrade to latest from NSA
    * Merged context_to_string interface change patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.35-1
changelog:
  - Upgrade to latest from NSA
    * Added src/dso.h and src/*_internal.h.
      Added hidden_def for exported symbols used within libsepol.
      Added hidden for symbols that should not be exported by
      the wildcards in libsepol.map.


author: Dan Walsh <dwalsh@redhat.com> 1.9.34-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, record bugfix, and set_roles patches 
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.32-1
changelog:
  - Upgrade to latest from NSA
    * Added further checking and error reporting to 
      sepol_module_package_read and _info.
    * Merged sepol handle passing, DEBUG conversion, and memory leak
      fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.30-1
changelog:
  - Upgrade to latest from NSA
    * Removed processing of system.users from sepol_genusers and
      dropped delusers logic.
    * Removed policydb_destroy from error path of policydb_read,
      since create/init/destroy/free of policydb is handled by the
      caller now.
    * Fixed sepol_module_package_read to handle a failed policydb_read
      properly.
    * Merged query/exists and count patches from Ivan Gyurdiev.
    * Merged fix for pruned types in expand code from Joshua Brindle.
    * Merged new module package format code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged context interface cleanup, record conversion code, 
      key passing, and bug fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged users cleanup patch from Ivan Gyurdiev.
    * Merged user record memory leak fix from Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.

  - Need to check for /sbin/telinit


author: Dan Walsh <dwalsh@redhat.com> 1.9.23-1
changelog:
  - Upgrade to latest from NSA
    * Added check flag to expand_module() to control assertion
      and hierarchy checking on expansion.
    * Reworked check_assertions() and hierarchy_check_constraints()
      to take handles and use callback-based error reporting.
    * Changed expand_module() to call check_assertions() and 
      hierarchy_check_constraints() prior to returning the expanded
      policy.


author: Dan Walsh <dwalsh@redhat.com> 1.9.21-1
changelog:
  - Upgrade to latest from NSA
    * Changed sepol_module_package_set_file_contexts to copy the
      file contexts data since it is internally managed.
    * Added sepol_policy_file_set_handle interface to associate
      a handle with a policy file.
    * Added handle argument to policydb_from_image/to_image.
    * Added sepol_module_package_set_file_contexts interface.
    * Dropped sepol_module_package_create_file interface.
    * Reworked policydb_read/write, policydb_from_image/to_image, 
      and sepol_module_package_read/write to use callback-based error
      reporting system rather than DEBUG.


author: Dan Walsh <dwalsh@redhat.com> 1.9.19-1
changelog:
  - Upgrade to latest from NSA
    * Reworked link_packages, link_modules, and expand_module to use
    callback-based error reporting system rather than error buffering.


author: Dan Walsh <dwalsh@redhat.com> 1.9.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditional expression mapping fix in the module linking
    code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.17-1
changelog:
  - Upgrade to latest from NSA
    * Hid sepol_module_package type definition, and added get interfaces.
    * Merged new callback-based error reporting system from Ivan
    Gyurdiev.
    * Merged support for require blocks inside conditionals from
    Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.14.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed use of policydb_from_image/to_image to ensure proper
    init of policydb.
    * Isolated policydb internal headers under <sepol/policydb/*.h>.
    These headers should only be used by users of the static libsepol.
    Created new <sepol/policydb.h> with new public types and interfaces
    for shared libsepol.
    Created new <sepol/module.h> with public types and interfaces moved
    or wrapped from old module.h, link.h, and expand.h, adjusted for
    new public types for policydb and policy_file.
    Added public interfaces to libsepol.map.
    Some implementation changes visible to users of the static libsepol:
    1) policydb_read no longer calls policydb_init.
    Caller must do so first.
    2) policydb_init no longer takes policy_type argument.
    Caller must set policy_type separately.
    3) expand_module automatically enables the global branch.  
    Caller no longer needs to do so.
    4) policydb_write uses the policy_type and policyvers from the 
    policydb itself, and sepol_set_policyvers() has been removed.


author: Dan Walsh <dwalsh@redhat.com> 1.9.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for check_assertions handling of no assertions
    from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged iterate patch from Ivan Gyurdiev.
    * Merged MLS in modules patch from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.8-1
changelog:
  - Upgrade to latest from NSA
    * Merged pointer typedef elimination patch from Ivan Gyurdiev.
    * Merged user list function, new mls functions, and bugfix patch
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged boolean record and memory leak fix patches from Ivan
    Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged stddef.h patch and debug conversion patch from 
    Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed expand_avtab and expand_cond_av_list to keep separate
    entries with identical keys but different enabled flags.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.7.24-1
changelog:
  - Upgrade to latest from NSA
    * Fixed symtab_insert return value for duplicate declarations.
    * Merged fix for memory error in policy_module_destroy from
    Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.22-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for memory leak in sepol_context_to_sid from
    Jason Tang (Tresys).
    * Merged fixes for resource leaks on error paths and
      change to scope_destroy from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.20-1
changelog:
  - Upgrade to latest from NSA
    * Merged more fixes for resource leaks on error paths 
      from Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.19-1
changelog:
  - Upgrade to latest from NSA
    * Changed to treat all type conflicts as fatal errors.
    * Merged several error handling fixes from 
      Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.15-1
changelog:
  - Upgrade to latest from NSA
    * Fixed empty list test in cond_write_av_list.  Bug found by
      Coverity, reported by Serge Hallyn (IBM).
    * Merged patch to policydb_write to check errors 
      when writing the type->attribute reverse map from
      Serge Hallyn (IBM).  Bug found by Coverity.
    * Fixed policydb_destroy to properly handle NULL type_attr_map
      or attr_type_map.


author: Dan Walsh <dwalsh@redhat.com> 1.7.13-1
changelog:
  - Upgrade to latest from NSA
    * Improved memory use by SELinux by both reducing the avtab 
      node size and reducing the number of avtab nodes (by not
      expanding attributes in TE rules when possible).  Added
      expand_avtab and expand_cond_av_list functions for use by
      assertion checker, hierarchy checker, compatibility code,
      and dispol.  Added new inline ebitmap operators and converted
      existing users of ebitmaps to the new operators for greater 
      efficiency.
      Note:  The binary policy format version has been incremented to 
      version 20 as a result of these changes.


author: Dan Walsh <dwalsh@redhat.com> 1.7.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.9-1
changelog:
  - Upgrade to latest from NSA
    * Enabled further compiler warning flags and fixed them.
    * Merged user, context, port records patch from Ivan Gyurdiev.
    * Merged key extract function patch from Ivan Gyurdiev.
    * Merged mls_context_to_sid bugfix from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.7.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged context reorganization, memory leak fixes, 
      port and interface loading, replacements for genusers and
      genbools, debug traceback, and bugfix patches from Ivan Gyurdiev.
    * Merged uninitialized variable bugfix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.7.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged debug support, policydb conversion functions from Ivan Gyurdiev (Red Hat).
    * Removed genpolbools and genpolusers utilities.
    * Merged hierarchy check fix from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged header file cleanup and memory leak fix from Ivan Gyurdiev (Red Hat).
    * Merged genbools debugging message cleanup from Red Hat.


author: Dan Walsh <dwalsh@redhat.com> 1.5.10-1
changelog:
  - Fix reset booleans warning message
  - Upgrade to latest from NSA
    * License changed to LGPL v2.1, see COPYING.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-2
changelog:
  - Upgrade to latest from NSA
    * Added sepol_genbools_policydb and sepol_genusers_policydb for
      audit2why.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Added sepol_ prefix to Flask types to avoid 
      namespace collision with libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.5.2-1
changelog:
  - Update to latest from NSA
    * Added man page for sepol_check_context.
    * Added man page for sepol_genusers function.
    * Merged man pages for genpolusers and chkcon from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-1
changelog:
  - Update to latest from NSA
          * Cleaned up error handling in sepol_genusers and sepol_genbools.


author: Dan Walsh <dwalsh@redhat.com> 1.3.6-1
changelog:
  - Update to latest from NSA
    * Changed sepol_genusers to also use getline and correctly handle
      EOL.


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update to latest from NSA
    * Merged endianness and compute_av patches from Darrel Goeddel (TCS).
    * Merged range_transition support from Darrel Goeddel (TCS).
    * Added sepol_genusers function.


author: Matthias Clasen <mclasen@redhat.com> - 1:0.23-6
changelog:
  - Remove a patch that is no longer necessary and causes more
    problems than it solves (#224148)
  - Include Requires.private in --print-requires (#426106)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - suppress /usr/lib64 (instead of /usr/lib) from LIBS by default on multilib
    arches where the default is to use lib64


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.31.1.1.el6uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} {CVE-2019-14821}


author: Aron Silverton <aron.silverton@oracle.com> - 2.0.7-1.19
changelog:
  - BUILDINFO: commit=651d78a7de12b555042c2a0dccebc92693a3991d
  - rds-tools: This release adds support for IPv6 (Aron Silverton)  
  - rds-tools: rds-stress should work with IPv6 address (Ka-Cheong Poon)  
  - rds-tools: rds-info updated to report information about IPv6 address (Ka-Cheong Poon)  
  - rds-tools: rds.h updated to include IPv6 related changes (Ka-Cheong Poon)  
  - rds-tools: rds.h updated (Ka-Cheong Poon)  
  - rds-tools: rds-ping should work with IPv6 address (Ka-Cheong Poon)


author: Adam Jackson <ajax@redhat.com> 1.1.4-3
changelog:
  - libX11-1.1.4-xcb-xreply-leak.patch: Fix a leak when the client has a
    non-fatal error handler. (mclasen, fdo #17616)


author: Adam Jackson <ajax@redhat.com> 1.1.3-2
changelog:
  - libX11-1.1.3-xkb-lock-fix.patch: Don't LockDisplay() recursively.  Fixes
    Gnome hang at logout. (#326461)


author: Adam Jackson <ajax@redhat.com> 1.1.2-3
changelog:
  - libX11-1.1.2-GetMotionEvents.patch: Fix the definition of XGetMotionEvents
    to match the argument order in the headers. (#274671)


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2.fc6
changelog:
  - Added libX11-nls-indic-locales-bug185376.patch to add support for various
    indic locales which have now been committed upstream (#185376)


author: Mike A. Harris <mharris@redhat.com> 1.0.3-1.fc6
changelog:
  - Updated libX11 to version 1.0.3
  - Remove libX11-1.0.1-setuid.diff as it is included in the 1.0.3 release.
  - Added 'dist' tag to "Release:"


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libX11 to version 1.0.2
  - Bump BuildRequires and Requires to "xorg-x11-proto-devel >= 7.1-2" to meet
    new "xproto >= 7.0.6" dependency.
  - Disable libX11-0.99.3-datadir-locale-dir-fix.patch as it is now included
    upstream.
  - Remove autoconf dependency as we no longer need it.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added libX11-1.0.1-setuid.diff to fix potential security issue (#196094)
  - Change dependency on "filesystem" package to "xorg-x11-filesystem" package,
    so we can control this dep centrally.
  - Added NEWS to doc list.


author: Mike A. Harris <mharris@redhat.com> 0.99.4-1
changelog:
  - Updated libX11 to version 0.99.4 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-4
changelog:
  - Added libX11-0.99.3-datadir-locale-dir-fix.patch, to fix build to install
    the locale data files into datadir instead of libdir. (#173282)


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libX11 to version 0.99.3 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated to libX11-0.99.2 from the X11R7 RC1 release.
  - Added en_GR.UTF-8 locale to file manifest.
  - Forcibly remove Xcms.txt


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.0-1
changelog:
  - Update to new upstream stable release
  - Various logging tweaks (#928914, #928750)
  - Make the 'p11-kit extract-trust' explicitly reject
    additional arguments


author: Stef Walter <stefw@redhat.com> - 0.17.5-1
changelog:
  - Make 'p11-kit extract-trust' call update-ca-trust
  - Work around 32-bit oveflow of certificate dates
  - Build fixes


author: Stef Walter <stefw@redhat.com> - 0.16.3-1
changelog:
  - Update to upstream version 0.16.3
  - Split out system trust module into its own package.
  - p11-kit-trust provides an alternative to an nss module


author: Stef Walter <stefw@redhat.com> - 0.16.1-1
changelog:
  - Update to upstream version 0.16.1
  - Setup source directories as appropriate for Shared System Certificates feature


author: Stepan Kasal <skasal@redhat.com> - 1.18.1.14-15
changelog:
  - Replace groff-1.18-nohtml.patch by a code in spec file
  - fix groff-1.18-gzip.patch to apply cleanly
  - simplify the code for symlinking in %install


author: Jesse Keating <jkeating@redhat.com> - 1.18.1.1-9.2
changelog:
  - bump again for double-long bug on ppc(64)
  - bump again for double-long bug on ppc(64)
  - bump again for double-long bug on ppc(64)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.18.1.1-9
changelog:
  - remove gxditview from groff package (#179684)
  - remove obsolete "--enable-japanese" configure option


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.18.1.1-8
changelog:
  - fix segfault in grotty on 64-bit big endian machines (#176904)
  - fix assertion failure on abort message (#141912)
  - attempt to fix a space problem with several european languages (#137728)


author: Jindrich Novy <jnovy@redhat.com> - 1.18.1.1-6
changelog:
  - add BuildRequires imake and update dependencies for modular X
  - spec cleanup
  - fix compilation with gcc-4.1.0


author: Thomas Woerner <twoerner@redhat.com> 1.18.1.1-2
changelog:
  - fixed DoCharacter calls in xditview (#110812)
  - fixed fclose called once too often (#132690): thanks to Ulrich Drepper for
    the bug hunting


author: Thomas Woerner <twoerner@redhat.com> 1.18.1-34
changelog:
  - new debian groff patch: groff_1.18.1-15.diff
  - new fix for debian patch: groff-1.18.1-fix15.patch
  - fixed width in devutf8 font M: groff-1.18.1-devutf8.patch
  - removed iconv patch


author: Thomas Woerner <twoerner@redhat.com> 1.18.1-28.2
changelog:
  - new devutf8 font description
  - use -Tutf8 for ru_*.UTF-8 in nroff.sh
  - fixes #88618 (ru_RU man pages in cambridge are using UTF-8, now)


author: Thomas Woerner <twoerner@redhat.com> 1.18.1-27
changelog:
  - going back to 1.18.1-4 from debian (the newer versions did not work properly)
  - fixed nroff.sh for ru_RU.(!UTF-8)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove automatic conversion for ru_* and cz_*
  - add 8bit patch
  - update to 1.18.1-4 debian patch
  - disable Patch8: groff-1.18.1-multichar.patch for now
  - add ugly patch within the iconv patch to partly fix display of russian
    man-pages with "-Tnippon"


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.18.1
  - apply groff_1.18-7 from debian
  - remove some not-packaged files
  - rm old printfilters completely


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install tmac.mse (FWIW tmac.se looks broken) to fix dangling symlink (#10757).
  - add README.A4, how to set up for A4 paper (#8276).
  - add other documents to package.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.1-4
changelog:
  - Fix cheetah enough that it will pass its unittests on python-2.6.  This has
    actually been broken since py-2.5 and this fix is only a workaround.


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.02-0.2
  - rebuilt for new gcc4.1 snapshot and glibc changes
  - build with lzop 1 since lzop 2 hasn't been merged yet


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-16
changelog:
  - Fixed ressource leak in libiptc found by coverity (rhbz#1088361)
  - Copy custom plugins also for releases up to 14 (rhbz#1088400)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-15
changelog:
  - Add message for init script error returns (rhbz#1081191)
  - Fix rule deletion of ipset matches (rhbz#1081422)
  - Add space after dccp types (rhbz#1084974)
  - Add -C option to check for existing rules (rhbz#1088361)
  - Copy custom plugins for updates from iptables < 1.4.7-10 (rhbz#1088400)
  - Enable the IPv6 set target (rhbz#1161330)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-12
changelog:
  - added ip6t_set (rhbz#1033270)
  - do not block uninstall on a failing alternatives --remove call in preun
    (rhbz#1059214) (rhbz#1070123)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-11
changelog:
  - fixed shutdown hang if root filesystem is network based (rhbz#1007632)
    Thanks to Rodrigo A B Freire for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-10
changelog:
  - New reload action for ip*tables services (rhbz#928812)
    It tries to reload the firewall rules from /etc/sysconfig/ip*tables. If this
    failes, it does not load the fallbacks and the old firewall rules are still
    there.
  - Use /lib*/xtables without version and not linked by alternatives again for 
    compatibility to older versions (rhbz#924362)
    The symlink for /lib*/xtables with the previous version will be cleaned up
    in a pre script.
  - Backport of --queue-bypass (rhbz#845435)
    Thanks to Florian Westphal and kay
  - Make ip*tables-save consistent to man page (rhbz#983198)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-9
changelog:
  - make alternatives names arch dependant for multilib (rhbz#860148)
  - added virtual provides for base libraries to be able to resolve library file requires


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-7
changelog:
  - Use alternatives to support other iptables versions for MRG kernels
    (rhbz#747068)
  - Restore sysctl values on service restart (rhbz#800208)
  - Added fallback support in case of error in service start (rhbz#808272)
  - Added AUDIT targets to to man pages (rhbz#809108)
  - Fixed maximum chain name length (rhbz#821441)
  - Added missing dependency for poliycoreutils package (rhbz#836286)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-6
changelog:
  - reverted upstream patches, because they are breaking the ABI
  - created new patch based on upstream but without ABI break (rhbz#725879)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-5
changelog:
  - fixed option parser problem (mark matches with mark options) (rhbz#725879)
    based on upstream commits:
      600f38db82548a683775fd89b6e136673e924097
      59e8114c6792242e80785f4461d5e663fb9a3d64
      d3b2e391e3b944581e20e216af76339cc87d0590
      2d68ae7ce6e40e3977ee11a57296cf76801ae320
      1dc27393b7ba401e6228a5ee2472a6eb72836c43
      1e128bd804b676ee91beca48312de9b251845d09
      fa503ad59f73d20d85f4cdf53324a01d2ad8591e


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-4
changelog:
  - added IPv6 transparent proxy support (rhbz#590186)
  - added auditing support (rhbz#642393)
    Thanks to Thomas Graf for the patch
  - init: restore context for save and use /etc/sysconfig for temps (rhbz#644273)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - fixed initscript to be LSB compliant (rhbz#593228)
    - added euid 0 check
    - reload returns 3 (unimplemented feature)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - rebase to version 1.4.7:
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-3
changelog:
  - fixes according to review:
  - fixed license
  - moved /bin/iptables-xml to iptables main package fixes dangling symlink in
    ipv6 sub-package
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
changelog:
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-3
changelog:
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-1
changelog:
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)


author: Thomas Woerner <twoerner@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
changelog:
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-3
changelog:
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-1
changelog:
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-6
changelog:
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-5
changelog:
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
changelog:
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4
changelog:
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-3
changelog:
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-2
changelog:
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)


author: Thomas Woerner <twoerner@redhat.com> 1.3.7-1
changelog:
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-5
changelog:
  - move library to /lib so the binaries needed when /usr might
    not be mounted can link to it (#669077)


author: Tomas Mraz - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-115.0.12.el6
changelog:
  - BUILDINFO: xen commit=74b662e79bc874fe8ad8a93d2891e6569c380004
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: __gnttab_unmap_common_complete() is all-or-nothing (Jan Beulich)  [Orabug: 26288614] 
  - gnttab: correct logic to get page references during map requests (George Dunlap)  [Orabug: 26288614] 
  - gnttab: never create host mapping unless asked to (Jan Beulich)  [Orabug: 26288614] 
  - gnttab: Fix handling of dev_bus_addr during unmap (George Dunlap)  [Orabug: 26288614] 
  - x86/shadow: Hold references for the duration of emulated writes (Andrew Cooper)  [Orabug: 26288568] 
  - x86/mm: disallow page stealing from HVM domains (Jan Beulich)  [Orabug: 26288534] 
  - guest_physmap_remove_page() needs its return value checked (Jan Beulich)  [Orabug: 26288602] 
  - xen/memory: Fix return value handing of guest_remove_page() (Andrew Cooper)  [Orabug: 26288602] 
  - evtchn: avoid NULL derefs (Jan Beulich)  [Orabug: 26288583] 
  - gnttab: correct maptrack table accesses (Jan Beulich)  [Orabug: 26288557] 
  - gnttab: Avoid potential double-put of maptrack entry (George Dunlap)  [Orabug: 26288557] 
  - gnttab: fix unmap pin accounting race (Jan Beulich)  [Orabug: 26288557] 
  - IOMMU: handle IOMMU mapping and unmapping failures (Quan Xu)  [Orabug: 26288557] 
  - xen/disk: don't leak stack data via response ring (Jan Beulich)  [Orabug: 26198945]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-115.0.11.el6
changelog:
  - BUILDINFO: xen commit=7b45c3eb48a884f56f072a97a9a8da4d0b1077ed
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - livepatch: Wrong usage of spinlock on debug console. (Konrad Rzeszutek Wilk)  [Orabug: 26248311]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-115.0.10.el6
changelog:
  - BUILDINFO: xen commit=40e21e7aea2b8bbc991346c3f516dfac4f94affe
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/do_invalid_op() should use is_active_kernel_text() rather than having its (Konrad Rzeszutek Wilk)  [Orabug: 26129273]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-115.0.9.el6
changelog:
  - BUILDINFO: xen commit=0eadc919cf32139e5565e0d869ed09f35c0a3212
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - kexec: Add spinlock for the whole hypercall. (Konrad Rzeszutek Wilk)  [Orabug: 25861742] 
  - kexec: clear kexec_image slot when unloading kexec image (Bhavesh Davda)  [Orabug: 25861742]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-115.0.8.el6
changelog:
  - BUILDINFO: xen commit=8b90d66cd941599d50ee80e14fd144e337814bf6
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: correct create_bounce_frame (tagged with CVE number) (Boris Ostrovsky)  [Orabug: 25927739]  {CVE-2017-8905}
  - x86: discard type information when stealing pages (tagged with CVE number) (Boris Ostrovsky)  [Orabug: 25927669]  {CVE-2017-8904}
  - multicall: deal with early exit conditions (tagged with CVE number) (Boris Ostrovsky)  [Orabug: 25927592]  {CVE-2017-8903}


author: Joe Jin <joe.jin@oracle.com> - 4.4.4-115.0.7.el6
changelog:
  - BUILDINFO: xen commit=583dedab5ceddbae4d0384de0ade8feeee75f78c
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - tools/libxc: Set max_elem to zero in xc_lockprof_query_number() (Boris Ostrovsky)  [Orabug: 26020611]


author: Nalin Dahyabhai <nalin@redhat.com> 185-10
changelog:
  - don't overwrite an explicitly-configured search base when we're using DNS
    to locate the server (#735375)


author: Nalin Dahyabhai <nalin@redhat.com> 185-9
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#688747, upstream #431)


author: Nalin Dahyabhai <nalin@redhat.com> 185-6
changelog:
  - add a proposed patch to avoid losing password expiration warnings relayed
    via policy controls when expiration is less than a day away (based on
    patch from Masahiro Matsuya, #637190, upstream #407)


author: Nalin Dahyabhai <nalin@redhat.com> 185-5
changelog:
  - require the pam package explicitly, so that /%{_lib}/security won't be
    an orphaned directory (part of #553857)


author: Nalin Dahyabhai <nalin@redhat.com> 185-3
changelog:
  - make mentions of pam_ldap.conf and %{name}.conf more consistent (rcritten)
  - drop no-longer-used .versions file


author: Nalin Dahyabhai <nalin@redhat.com> 185-1
changelog:
  - split out pam_ldap as a separate source package, update URL, change
    %{version} to reflect pam_ldap's versioning rather than nss_ldap's
  - set config file to /etc/pam_ldap.conf, rootbindpw file /etc/pam_ldap.secret
  - drop %post bits that care about upgrades from RHL 7.2
  - drop %post/%postun calls to ldconfig
  - drop buildrequires on openssl-devel, krb5-devel, cyrus-sasl-devel
  - update to version 185
    - drop now-obsolete patches to the rebind callback
  - add %pre logic for the upgrading-from-a-non-split-nss_ldap case


author: Nalin Dahyabhai <nalin@redhat.com> 264-8
changelog:
  - add "rtkit" and "pulse" to the list of users whom we default to ignoring
    for looking up supplemental groups (Gordon Messmer, part of #186527)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add but don't apply proposed patch for upstream #399: depending on the
    server to enforce the expected case-sensitivity opens up corner cases


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - revert most of the previous round of changes: splitting pam_ldap off
    won't be helpful in the long term if it, too, is eventually going to conflict
    with the nss-ldapd package


author: Nalin Dahyabhai <nalin@redhat.com> - 264/184-100
changelog:
  - split pam_ldap off into a separate binary package
  - require /%{_lib}/security/pam_ldap.so to pull in pam_ldap on upgrades
  - require our configuration file to come from somewhere
  - remove some cruft
  - move the %postun that fixes up pam configs to the pam_ldap package


author: Nalin Dahyabhai <nalin@redhat.com> - 264-1
changelog:
  - update to 264, pulling in Luke's patch for #248, among others
  - add optional checking of nsRole to pam_ldap (#202135, upstream #382)


author: Nalin Dahyabhai <nalin@redhat.com> - 263-1
changelog:
  - update to 263, pulling in Luke's patch for #374 (#445972) which doesn't
    leak the result message, and the fix for #376 (#466794)


author: Nalin Dahyabhai <nalin@redhat.com> - 261-5
changelog:
  - pam_ldap: don't crash when we have to follow a referral while looking up
    information about the authenticating user and we're using SASL, which
    affected 259-1 and later (patch from Paul P Komkoff Jr, #469061)


author: Nalin Dahyabhai <nalin@redhat.com> - 261-4
changelog:
  - add missing local-to-network conversion on port numbers when looking up
    services, which affected 259-1 and later (#450634)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - return 0 (fail) instead of 1 (success) when setnetgrent() is called for
    a netgroup which doesn't actually exist or which has no members (#445972,
    upstream #374)


author: Nalin Dahyabhai <nalin@redhat.com> - 261-2
changelog:
  - add libssl and libcrypto to the list of libraries against which we link
    statically to avoid running into symbol collisions at run-time (#446860)


author: Nalin Dahyabhai <nalin@redhat.com> - 259-3
changelog:
  - try to work around not having had a populated resolver configuration earlier,
    but needing to use its data when we're asked to look up something (#442272)


author: Nalin Dahyabhai <nalin@redhat.com> - 259-2
changelog:
  - apply updated logic for finding libresolv to pam_ldap's build setup
  - add gdm,polkituser to default nss_initgroups_ignoreusers list


author: Nalin Dahyabhai <nalin@redhat.com> - 259-1
changelog:
  - update to nss_ldap 259
  - nss_ldap: update to revised proposed patch for #248
  - pam_ldap: replace two patches to handle password changing against replicas
    with Ralf Haferkamp's revision, which also sends the policy control with the
    initial password change request
  - pam_ldap: enable patch to stop also trying to change password using
    ldap_modify after trying to change it with an exop when the configuration
    is "pam_password exop_send_old"


author: Nalin Dahyabhai <nalin@redhat.com> - 257-5
changelog:
  - nss_ldap: go back to linking with static libldap and liblber so that we
    don't get unresolved references which may be resolved by a different libldap
    used by the calling application


author: Nalin Dahyabhai <nalin@redhat.com> - 257-1
changelog:
  - update to nss_ldap 257
  - look harder when we're looking for symbols provided by the resolver library
    (upstream #337)
  - clarify license (both under LGPLv2 or later)


author: Nalin Dahyabhai <nalin@redhat.com> - 254-2
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #232713)


author: Nalin Dahyabhai <nalin@redhat.com> - 254-1
changelog:
  - update to nss_ldap 254
  - use the upstream version scripts
  - stop trying to isolate us from the apps by building with static libraries,
    though that means we're tied to /usr now
  - move the nsswitch module to %{_libdir}; its deps aren't available without
    a mounted /usr anyway
  - make rpmlint happier


author: Nalin Dahyabhai <nalin@redhat.com> - 253-1
changelog:
  - update to 253
    - closes a crasher when glibc's initgroups backend passes in a zero-length,
      NULL buffer to start
    - includes lookup_nssldap updates for autofs


author: Nalin Dahyabhai <nalin@redhat.com> - 251-2
changelog:
  - configure with --enable-configurable-krb5-ccname-gssapi instead of
    --enable-configurable-krb5-ccname, the latter of which doesn't actually
    do anything (Howard Wilkinson)


author: Nalin Dahyabhai <nalin@redhat.com> - 250-5
changelog:
  - adjust nss_ldap's makefile rule to more correctly deduce the right soversion
    for nsswitch modules (#191927)


author: Nalin Dahyabhai <nalin@redhat.com> - 248-2
changelog:
  - set "nss_initgroups_ignoreusers root,ldap" in the default configuration
    file, so that nss_ldap will assume that there are no supplemental groups
    for this user to be found in the directory server (#180657)


author: Nalin Dahyabhai <nalin@redhat.com> 245-1
changelog:
  - update to nss_ldap 245
  - add patch from upcoming 246 release to change the placeholder used when
    userPassword is unreadable from "x" to "*" (upstream #240)


author: Nalin Dahyabhai <nalin@redhat.com> 239-1
changelog:
  - update to nss_ldap 239
  - provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc
    does for the modules it provides


author: Nalin Dahyabhai <nalin@redhat.com> 234-5
changelog:
  - update to pam_ldap 180 to get fix for vulnerability from parsing password
    policy controls which don't contain error numbers (#166164, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 234-4
changelog:
  - override glibc version detection so that mismatches between the versions of
    32- and 64-bit glibc don't result in our %install installing the module
    with a different name than the 'make install' target uses


author: Nalin Dahyabhai <nalin@redhat.com> 234-3
changelog:
  - fix type mismatch bug in patch for using non-blocking start_tls in
    preference to the blocking version when it's available (#156582)


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in %{_libdir}/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 227-1
changelog:
  - update to version 227
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 212-1
changelog:
  - update to 212, pam_ldap 167
  - link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
    mech, at least for now, and we pick up its unresolved symbols at link-time
  - fix out-of-bounds error at initialization-time (part of #101269)
  - include pam_ldap's authorization schema files for slapd as a doc file


author: Nalin Dahyabhai <nalin@redhat.com> 207-5
changelog:
  - fix objectclass and attribute mapping, which failed due to uninitialized
    fields in mapping index structures, fixed upstream in 210 (#110547)


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/%{_lib} (which
    we assume means that it's in /%{_lib})


author: Nalin Dahyabhai <nalin@redhat.com> 207-1
changelog:
  - update to build with newer OpenLDAP
  - add README.TLS to remind people that in order for TLS support to be usable,
    the server's certificate has to pass validation checks made by the client


author: Nalin Dahyabhai <nalin@redhat.com> 202-4
changelog:
  - rework static link order to account for libssl requiring libkrb5
  - force assembly locking on %ix86 systems
  - link with libz, which libssl also requires


author: Nalin Dahyabhai <nalin@redhat.com> 202-2
changelog:
  - apply DB patches from sleepycat.com
  - correctly point nss_ldap at the bundled DB library
  - create /%{_lib} instead of /lib to install into


author: Nalin Dahyabhai <nalin@redhat.com> 202-1
changelog:
  - update to nss_ldap 202, pam_ldap 153
  - update DB from 4.0.14 to 4.1.24.NC
  - try to address multilib path changes


author: Nalin Dahyabhai <nalin@redhat.com> 188-0.6
changelog:
  - rebuild for RHL 6.2
  - change dependency on pam-devel to /usr/include/security/pam_modules.h
  - drop build deps on cyrus-sasl-devel and openldap >= 2.x
  - modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
  - update to nss_ldap 188
  - update to pam_ldap 144


author: Nalin Dahyabhai <nalin@redhat.com> 184-1
changelog:
  - update to pam_ldap 138
  - enable rfc2307bis schema support
  - version the pam_ldap module
  - add the proper soname to the nss_ldap module and remove the symlink
  - add a trigger to run ldconfig again when an upgrade removes the symlink,
    which used to be in this package (doh!)
  - fix the symlink from %{_libdir} to the module (for linking directly to it)


author: Nalin Dahyabhai <nalin@redhat.com> 173-1
changelog:
  - update to nss_ldap 173, which includes doc updates
  - update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - link statically with libldap again, because libldap is linked with other
    shared libraries now (keeping us from having files in /usr open when we
    go to shut the system down)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 172, fixing schema mapping code
  - update to pam_ldap 124, incorporating TLS default option and doc fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 164, fixing the timeout problem correctly
  - update to pam_ldap 122, fixing escaping of user name in filters


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 163, fixing the timeout problem
  - update to pam_ldap 120
  - add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
  - add db3-devel as a buildprereq (#48999)
  - add pam-devel as a buildprereq (#48999)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make nss_ldap fail when attempting to startup TLS fails, because that's what
    we do when LDAPS doesn't work (and what pam_ldap does already)
  - add DNS autoconfiguration to pam_ldap


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 149, minor fixes for compile glitches
  - update to pam_ldap 105, minor fixes (as above) and handles shadow expiration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 138, which folds in our patch for initgroups
  - change the default search base in ldap.conf to dc=example,dc=com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - version the NSS module so that it works properly with programs which have
    been linked statically to a different version of an LDAP library, like
    Netscape Communicator


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - BuildPrereq gdbm-devel
  - pass RPM_OPT_FLAGS as CFLAGS to %configure
  - if protocol version is 2, explicitly set protocol version to 3 before trying
    to start TLS
  - add STARTTLS support to nss_ldap
  - work around a build-time problem on ia64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 122
  - link statically with libsasl, require the first devel package that supplied it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to pam_ldap 67 to fix a bug in template user code
  - convert symlink in /usr/lib to a relative one (#16132)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - use the ldap.conf file as an external source
  - don't forcibly build the support for version 3
  - imported the default spec file from the tarball and fixed it up for RH 6.1


author: Pierre Lecomte <pierre.lecomte@oracle.com> - 3.4.6-29
changelog:
  - Use raw file size instead of vmdk size for capacity.
    Signed-off-by: Pierre Lecomte <pierre.lecomte@oracle.com>
    Reviewed-by: Jingjie Jiang <jingjie.jiang@oracle.com> [bug 30257004]


author: Sergei Garbuzov <sergei.garbuzov@oracle.com> - 3.4.6-28
changelog:
  - Changes in 'ovs-network-bridge' shell script to fix following issues:
    - When creating a Bridge with attached "VLAN over Bond" interface
    the VID and NAME parameters are lost in the 'ifcfg' file that was
    regenerated for the attached interface.
    - When creating a Bridge with attached "VLAN over Bond" interface
    the HWADDR parameter is added to the 'ifcfg' file that was
    regenerated for the attached interface.
    Signed-off-by: Sergei Garbuzov <sergei.garbuzov@oracle.com>
    Reviewed-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 30339780]


author: Srini Naravaram <srini.naravaram@oracle.com> - 3.4.6-27
changelog:
  - Added a new optional configurable parameter tls1_1 in file
    /etc/ovs-agent/agent.ini
    Default code behavior is to enable TLSv1.1 for backward compatibility with
    older Managers. It can be disabled by adding line "tls1_1=disable" as shown
    below if customer wishes.
      [security]
    ;enable ssl support in xmlrpc transport?(enable/disable)
    ssl=enable
    tls1_1=disable
    Signed-off-by: Srinivasa Naravaram <srini.naravaram@oracle.com>
    Reviewed-by: Sergei Garbuzov <sergei.garbuzov@oracle.com> [bug 30057269] [bug -] [bug Disabling] [bug TLSv1.1] [bug on] [bug ovs-agent] [bug port] [bug 8899] [bug for] [bug Oracle] [bug VM] [bug Server]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-26
changelog:
  - Do not write the HWADDR to the ifcfg file when configuring a static IP on a
    VLAN if the underlying device is a VXLAN
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Sergei Garbuzov <sergei.garbuzov@oracle.com> [bug 29688921]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-25
changelog:
  - Fixed a a conditinal that cause a unary operator error.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Sergei Garbuzov <sergei.garbuzov@oracle.com> [bug 29726269]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-24
changelog:
  - Change network discovery to accommodate the VXLAN pre-fix interface name from vxlan to vx
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Sergei Garbuzov <sergei.garbuzov@oracle.com> [bug 29726269]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-23
changelog:
  - Change pre-fix of VXLAN interface name from vxlan to vx to shorten the
    name especially when you have a vlan over vxlan + alias configuration.
    Write DEVICETYPE directive to the vxlan config file so that the correct
    ifup is called.
    Bring down the interface before removing it.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Sergei Garbuzov <sergei.garbuzov@oracle.com> [bug 29726269]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-22
changelog:
  - Do not write the HWADDR to the interface config file when add it to a bridge,
    if the interface or the underlying interface is a vxlan. (e.g vlan over a vxlan)
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Firas Azar <firas.azar@oracle.com> [bug 29688921]


author: Firas Azar <firas.azar@oracle.com> - 3.4.6-21
changelog:
  - Detect CX5 cards when calculating dom0_mem. If a CX5 card is present, add 7GB.
    Signed-off-by: Firas Azar <firas.azar@oracle.com>
    Reviewed-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Ke-chiang Chen <ke-chiang.chen@oracle.com> [bug 29460705]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-20
changelog:
  - When adding an IP address to a VXLAN interface do not write the HWADDR to
    the config file because the HWADDR changes every time you remove and add
    the VXALN. (ifdown/ifup)
    write the PHYSICAL device directive when creating a VLAN for PCA.
    Preserver the PHYSICAL device directive on ip config, and bridge config.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Sergei Garbuzov <sergei.garbuzov@oracle.com> [bug 29541286]


author: Sergei Garbuzov <sergei.garbuzov@oracle.com> - 3.4.6-19
changelog:
  - Get information for a VLAN device from the kernel space,
    device name itself is not a right source for this kind of
    information.
    Signed-off-by: Sergei Garbuzov <sergei.garbuzov@oracle.com>
    Reviewed-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 29540528]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-18
changelog:
  - The VXLAN MTU is set automatically by the system at the time of the VXLAN creation.
    It value is equal to the MTU of the underlying interface - 50. (e.g 1500 --> 1450, 9000-->1850).
    In the case of a VLAN over a VXLAN there is a 4 bytes VLAN header that the kernel is not counting for,
    which is causing packets fragmentation. This fragmentation is causing performance degradation.
    TO work around this we just reduce the VXLAN MTU by four bytes.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Sergei Garbuzov <sergei.garbuzov@oracle.com> [bug 29443986]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-17
changelog:
  - Keep the VXLAN directives in the interface configuration files when add IP to
    a VXLAN interface or adding the interface to a bridge
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Firas Azar <firas.azar@oracle.com> [bug 29444043]


author: Firas Azar <firas.azar@oracle.com> - 3.4.6-16
changelog:
  - Allocate at least 16 GB in dom0 to accomodate CX-5 card memory requirements.
    Signed-off-by: Firas Azar <firas.azar@oracle.com>
    Reviewed-by: Ke-Chiang Chen <ke-chiang.chen@oracle.com>
    Reviewed-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 29460705]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-15
changelog:
  - Remove mtu configuration from vxlan config script, it is not needed at this point.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Firas Azar <firas.azar@oracle.com> [bug 29357301]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-14
changelog:
  - Do not allow the removal of a bond or a vlan if they have upper interfaces
    configured on them.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Sergei Garbuzov <sergei.garbuzov@oracle.com> [bug 29343890]


author: Sergei Garbuzov <sergei.garbuzov@oracle.com> - 3.4.6-13
changelog:
  - Get VID information for a VLAN device from the kernel space.
    VID as a suffix for the name of VLAN device is not a must rule.
    Signed-off-by: Sergei Garbuzov <sergei.garbuzov@oracle.com>
    Reviewed-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 29325411]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-12
changelog:
  - Added  XMLRPC command (ovs_pcavlan_config) that add/removes a VLAN with a given name and mtu size
    Fixed ovs-ip-config to preserve VID, MTU and name when assigning IP address to this type of VLAN.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Sergei Garbuzov (sergei.garbuzov@oracle.com) [bug 29261184]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-11
changelog:
  - Added a parameter to ovs_vxlan_config to pass a ttl value (0-255), this parameter is
    optional, if you do not pass it, 32 will be use as a default. ttl is also
    preserved across reboots and network restart.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 29274033]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.4.6-10
changelog:
  - Persist the following VXLAN configuration during server reboot and network restart.
    VXLAN over a bond, VXLAN over a VLAN, and VLAN over a VXLAN
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Reviewed-by: Firas Azar <firas.azar@oracle.com> [bug 29260819]


author: Nikola Forró <nforro@redhat.com> - 3.9.4-19
changelog:
  - Add patches for CVEs:
  - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
  - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
  - CVE-2016-5652
  - Resolves: #1412078


author: Nikola Forró <nforro@redhat.com> - 3.9.4-16
changelog:
  - Add patches for CVEs:
  - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
  - CVE-2016-3991 CVE-2016-5320
  - Related: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-14
changelog:
  - Merge previously released fixes for CVEs:
  - CVE-2013-1960 CVE-2013-1961 CVE-2013-4231
  - CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
  - Resolves: #1335099


author: Petr Hracek <phracek@redhat.com> - 3.9.4-10
changelog:
  - This resolves several CVEs
  - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
  - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
  - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
  - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668
  - Resolves: #1299919


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885311


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
changelog:
  * Set errno=EINVAL for invalid contexts from Dan Walsh.
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.
  Resolves: #593788


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
changelog:
  - Update to upstream 
  	* Add exception handling in libselinux from Dan Walsh. This uses a
  	  shell script called exception.sh to generate a swig interface file.
  	* make swigify
  	* Make matchpathcon print <<none>> if path not found in fcontext file.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
changelog:
  - Update to upstream 
  	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
  	pthread dependency.
  	* Removed fini_context_translations() altogether.
  	* Merged lazy init patch from Stephen Smalley based on original patch
  	by Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
changelog:
  - Update to upstream 
  	* Add per-service seuser support from Dan Walsh.
  	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
  	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
  	Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
changelog:
  - Update to upstream 
  	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
  	* Label substitution support from Dan Walsh.
  	* Support for labeling virtual machine images from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
changelog:
  - Update to upstream 
  	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
  	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
  	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
  	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
changelog:
  - Update to upstream 
  	* deny_unknown wrapper function from KaiGai Kohei.
  	* security_compute_av_flags API from KaiGai Kohei.
  	* Netlink socket management and callbacks from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
changelog:
  - Update to upstream 
  	* Netlink socket handoff patch from Adam Jackson.
  	* AVC caching of compute_create results by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
changelog:
  - Add new function getseuser which will take username and service and return
  - seuser and level.  ipa will populate file in future.
  - Change selinuxdefcon to return just the context by default


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
changelog:
  - Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
  - Add Restorecon/Install python functions from Luke Macken


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
changelog:
  - Update to Upstream
  	* Correct message types in AVC log messages.
  	* Make matchpathcon -V pass mode from Dan Walsh.
  	* Add man page for selinux_file_context_cmp from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
changelog:
  - Update to Upstream
  	* New man pages from Dan Walsh.
  	* Update flask headers from refpolicy trunk from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
changelog:
  - Update to Upstream
  	* Add group support to seusers using %groupname syntax from Dan Walsh.
  	* Mark setrans socket close-on-exec from Stephen Smalley.
  	* Only apply nodups checking to base file contexts from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
changelog:
  - Update to Upstream
  	* Merge ruby bindings from Dan Walsh.
  - Add support for Linux groups to getseuserbyname


author: Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
changelog:
  - Update to Upstream
  	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
  	  This prevents adding them via semanage.
  	* Fix audit2why shadowed variables from Stephen Smalley.
  	* Note that freecon NULL is legal in man page from Karel Zak.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
changelog:
  - Update to Upstream
  	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
  	* Add swig python bindings for avc interfaces from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
changelog:
  - Update to Upstream
  	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
  	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
changelog:
  - Update to Upstream
  	* Fixed selinux_set_callback man page.
  	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
  	* Fix memory leaks in matchpathcon from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
changelog:
  - Update to Upstream
  	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
changelog:
  - Update to Upstream
  	* Merged compute_member AVC function and manpages from Eamon Walsh.
  	* Provide more error reporting on load policy failures from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
changelog:
  - Update to Upstream
  	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
  	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
changelog:
  - Fix memory references in audit2why and change to use tuples
  - Update to Upstream
  	* Fix for the avc:  granted null message bug from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Upgrade to upstream
  	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
  	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
  	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
changelog:
  - Upgrade to upstream
  	* AVC enforcing mode override patch from Eamon Walsh.
  	* Aligned attributes in AVC netlink code from Eamon Walsh.
  - Move libselinux.so back into devel package, procps has been fixed


author: Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
changelog:
  - Upgrade to upstream
  	* Merged refactored AVC netlink code from Eamon Walsh.
  	* Merged new X label namespaces from Eamon Walsh.
  	* Bux fix and minor refactoring in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Upgrade to upstream
  	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Upgrade to upstream
  	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
  	* Pass CFLAGS when using gcc for linking from Dennis Gilmore.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
changelog:
  - Upgrade to latest from NSA
  	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
  	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
  	* Fix swig binding for rpm_execcon from James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
changelog:
  - Move libselinux.so into devel package
  - Upgrade to upstream
  	* Fix segfault resulting from uninitialized print-callback pointer.
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
changelog:
  - Upgrade to upstream
  	* Updated version for stable branch.	
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.
  	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
  	* Added swigify to top-level Makefile from Dan Walsh.
  	* Fix for string_to_security_class segfault on x86_64 from Stephen
  	  Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Upgrade to upstream
  	* Class and permission mapping support patches from Eamon Walsh.
  	* Object class discovery support patches from Chris PeBenito.
  	* Refactoring and errno support in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Upgrade to upstream
  	* Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
  	  This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.

  2.0.17 2007-05-31
  	* Updated Lindent script and reindented two header files.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Upgrade to upstream
  	* Merged additional swig python bindings from Dan Walsh.
  	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Upgrade to upstream
  	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to upstream
  	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
  	* Merged sidput(NULL) patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to upstream
  	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
changelog:
  * Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
  	* Merged patch to drop support for old /etc/sysconfig/selinux and
  	  /etc/security policy file layout from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
changelog:
  - Upgrade to upstream
  	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to upstream
  	* Removed sending of setrans init message.
  	* Merged matchpathcon memory leak fix from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  * Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
  	  of the use of the non-standard format (original patch changed
  	  for style).
  	* Merged patch from Todd Miller to fix memory leak in matchpathcon.c.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	* Added selinux_getpolicytype() function.
  	* Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.3-1
changelog:
  * Merged context translation patch, originally by TCS,
  	  with modifications by Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Srinivas Eeda <srinivas.eeda@oracle.com> - 0.9-21
changelog:
  - osmd up version (Srinivas Eeda)  
  - reverting the o_direct strict checking (Manjunath Patil)  
  - Library returns unrelated error message in case of pread error (Manjunath Patil)  
  - README changes and osml config changes (Manjunath Patil)  
  - Mark unwritten extent as read (Manjunath Patil)  
  - test only change: remove duplicate lib calls in library (Manjunath Patil)


author: Manjunath Patil <manjunath.b.patil@oracle.com> - 0.9-19_Bug21613871_debug01
changelog:
  - Memory leak fixes in library code. (Manjunath Patil)  
  - Enable osml logging (Manjunath Patil)  
  - pread fails with -EIO which leads slm to hung (Manjunath Patil)  
  - O_DIRECT changes02 (Manjunath Patil)  
  - Double start of daemon invalidates unix socket (Manjunath Patil)  
  - remove_older_code_in_testscript (Manjunath Patil)  
  - socket_status_change_at_recv_send (Manjunath Patil)  
  - ssh/scp with no host key check (Manjunath Patil)  
  - osmd mark extent as read when parsing unwritten extent (Srinivas Eeda)


author: Srinivas Eeda <srinivas.eeda@oracle.com> - 0.9-12
changelog:
  - osmd bump version (Srinivas Eeda)  
  - osmd stop msg by osmd.ini (Srinivas Eeda)  
  - osmd cmd_args_to_retain_snapshot (Srinivas Eeda)  
  - osmd kill_copy_pid_in_hot_migs (Srinivas Eeda)  
  - osmd fix maintainer file (Srinivas Eeda)


author: Srinivas Eeda <srinivas.eeda@oracle.com> - 0.9-11
changelog:
  - osmd bump version (Srinivas Eeda)  
  - osmd remove generic kill from hotmigs (Srinivas Eeda)  
  - osmltest_changes_custom_sock_path (Srinivas Eeda)  
  - osmd add new test file (Srinivas Eeda)  
  - osmd allow configure values (Srinivas Eeda)  
  - osmd set default values in sysconfig osmd (Srinivas Eeda)  
  - osmd-disable default lib logging (Srinivas Eeda)


author: Srinivas Eeda <srinivas.eeda@oracle.com> - 0.9-10
changelog:
  - osmd bump build ersion (Srinivas Eeda)  
  - osmd BOUNCE_REMOTE_OUT_to_REMOTE_OUT (Srinivas Eeda)  
  - osmd check_osmd_config_file_test_cases (Srinivas Eeda)  
  - osmd fix_bounce_with_nodaemon (Srinivas Eeda)  
  - osmd fix default log file name (Srinivas Eeda)  
  - Signed-off-by: Srinivas Eeda <srinivas.eeda@oracle.com> (Srinivas Eeda)  
  - osmd fix_missing_config_daemon_fail   * check the exitence of file before trying to parse (Srinivas Eeda)  
  - osmd add missing test files (Srinivas Eeda)  
  - osmd loglevel_to_log_level  * change config file entry of LOGLEVEL to LOG_LEVEL  * change config file entry of LOGFILE to LOG_FILE  * osmltest.c errors to stderr (Srinivas Eeda)  
  - osmd daemon_config_validations   * null values are valid and imply default values   * range validation for values   * network buf size and disk buf size variable addition   * osm_get_net_buf_sz() osm_get_dsk_buf_sz() APIs   * stick config struct(ocf) to main ctxt   * addition of osmdaemon start and stop messages irrespective of loglevel (Srinivas Eeda)  
  - osmd include vdbench test suite (Srinivas Eeda)  
  - osmd fix_long_regress_renaming (Srinivas Eeda)


author: Srinivas Eeda <srinivas.eeda@oracle.com> - 0.9-9.el6
changelog:
  - osmd bump version   osmd-0.9-9   osmd-test-0.9-6 Signed-off-by: Srinivas Eeda <srinivas.eeda@oracle.com> (Srinivas Eeda)  
  - osmd ssh error check as string  * check the output of ssh as string rather than integer  * guilt rm utils/parse.sh  * guilt rm test/utils/scp_to.exp  * guilt rm test/utils/scp_from.exp  * guilt rm test/utils/ssh.exp (Srinivas Eeda)  
  - osmd replace ssh.exp to ssh   * since passwd is not required for ssh now, we dont need expect script   * remove scp_to.exp and scp_from.exp similarly (Srinivas Eeda)  
  - osmd remove local ssh  * Remove the unnecessary local ssh in test scripts  * minor typo correction for bidir_all_remote.sh  * removal of extra call to remote script in hotbounce.sh (Srinivas Eeda)  
  - osmd log migration begin and end (Srinivas Eeda)  
  - osmd test cases should ask for passwds (Srinivas Eeda)  
  - osmd default SRC_TEST_HOME to /opt/osmd-test (Srinivas Eeda)  
  - osmd daemonize option through command line arg (Srinivas Eeda)  
  - osmd minimal logging by default (Srinivas Eeda)  
  - osmd fix osmd logging (Srinivas Eeda)  
  - osmd fix daemon hang when end followed abort (Srinivas Eeda)  
  - patch osmd-fix-gpl-tag.patch (Srinivas Eeda)  
  - osmd fix oftest test case (Srinivas Eeda)  
  - osmd create bin directory for test code   - add prep.sh (Srinivas Eeda)  
  - osmd fix test scripts (Srinivas Eeda)  
  - osmd fix ret variable type (Srinivas Eeda)


author: Srinivas Eeda <srinivas.eeda@oracle.com> - 0.9-8.el6
changelog:
  - osmd fix requries glib2-devel (Srinivas Eeda)  
  - osmd fix test suite   - removed hardcoded ip address   - fixed osmd-test rpm name (Srinivas Eeda)  
  - osmd fix build rpm (Srinivas Eeda)  
  - osmd fix Vendor name Signed-off-by: Srinivas Eeda <srinivas.eeda@oracle.com> (Srinivas Eeda)  
  - Signed-off-by: Srinivas Eeda <srinivas.eeda@oracle.com> (Srinivas Eeda)  
  - osmd bump module version (Srinivas Eeda)  
  - osmd create osmd test rpm (Srinivas Eeda)  
  - osmd add GPL v2 license (Srinivas Eeda)  
  - osmd fix osmd test suite (Srinivas Eeda)  
  - osmd-fix-daemonize (Srinivas Eeda)  
  - osmd bug fixes patch (Srinivas Eeda)  
  - osml library doesnt need to validate file (Srinivas Eeda)  
  - osmd free temp buffer on release (Srinivas Eeda)


author: Srinivas Eeda <srinivas.eeda@oracle.com> 0.9-5
changelog:
  - memory leaks in omsdfile
  - close to fclose in osmconfig
  - mig_task not found bug (seqno:0)
  - update master thread list by listener when master exits
  - enable pthread_joins to avoid memory leaks


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-222.0.15.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=31259324879f918053c796b012a82f44050551fc
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - mm: introduce userspace utility to use XEN_SYSCTL_scrub_op (Dongli Zhang)  [Orabug: 30964933] 
  - mm: introduce 'scrub_config' to control idle memory scrubbing (Dongli Zhang)  [Orabug: 30964933] 
  - mm: to track domains in progress of domain_relinquish_resources() (Dongli Zhang)  [Orabug: 30964933]


author: Carson Hovey <carson.hovey@oracle.com> - 3.4.1-143
changelog:
  - certificate.pem - create with -sha256 (not sha1)
    Bug-fixed-by: Carson Hovey <carson.hovey@oracle.com>
    Signed-off-by: Jingjie Jiang <jingjie.jiang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com> [bug 22343821] [bug -] [bug Oracle] [bug VM] [bug Server] [bug SSL] [bug key] [bug vulnerability]


author: Carson Hovey <carson.hovey@oracle.com> - 3.4.1-142
changelog:
  - Fix syntax error.
    Bug-fixed-by: Carson Hovey <carson.hovey@oracle.com>
    Signed-off-by: Jingjie Jiang <jingjie.jiang@oracle.com> [bug 22674816] [bug -] [bug ovs-vlan-config]


author: Carson Hovey <carson.hovey@oracle.com> - 3.4.1-110
changelog:
  - copy_file will now unlink the dst file when the copy fails or the process is terminated (Aborted).
    Signed-off-by: Carson Hovey <carson.hovey@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 22011754] [bug -] [bug THE] [bug DD] [bug PROCESS] [bug IS] [bug STILL] [bug RUNNING] [bug AFTER] [bug ABORT] [bug A] [bug CLONE] [bug JOB] [bug 22011817] [bug -] [bug OVS-Agent] [bug 3.4.1.1059] [bug FAILED] [bug JOB] [bug DOES] [bug NOT] [bug CLEAN] [bug UP] [bug AFTER] [bug ITSELF.]


author: Carson Hovey <carson.hovey@oracle.com> - 3.4.1-105
changelog:
  - Fix: Edit Bond Port permission denied on UEK4
    Signed-off-by: Carson Hovey <carson.hovey@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 21846092] [bug -] [bug Edit] [bug Bond] [bug Port] [bug Failed] [bug with] [bug Permission] [bug Denied] [bug Exception]


author: Carson Hovey <carson.hovey@oracle.com> - 3.4.1-73
changelog:
  - stop_vm now cleans xc_restore process from failed migration
    Signed-off-by: Carson Hovey <carson.hovey@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 13939895] [bug -] [bug FAIL] [bug MIGRATION-] [bug RESET] [bug SOURCE] [bug SVR] [bug >] [bug XC_RESTORE] [bug IS] [bug HANGING]


author: Carson Hovey <carson.hovey@oracle.com> - 3.3.1-75
changelog:
  - Fix import_assembly(), deploy_assembly() clean up when disk full.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 17188207] [bug -] [bug IMAGE] [bug FILE] [bug IS] [bug NOT] [bug CLEARD] [bug FOR] [bug FAILURE] [bug OF] [bug VM] [bug TEMPLATE] [bug CREATION]


author: Carson Hovey <carson.hovey@oracle.com> - 3.3.1-60
changelog:
  - Clean up compiler warnings: agent_discover.c, config_network.c
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 17198473] [bug -] [bug MAKE] [bug RPM] [bug -] [bug COMPILER] [bug WARNINGS.]


author: Petr Kubat <pkubat@redhat.com> - 1.23-15
changelog:
  - fix error when compressing/listing large sparse files (#1334559)
  - improve sparse mode in genfile for build-time-testsuite purposes


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-14
changelog:
  - fix error while storing UID > 2^21 into posix format archive (rhbz#1247788)
  - don't mistakenly set default ACLs (#1220891)


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Updated to latest upstream release: libnfsidmap-0.24-rc1 (bz 650970)
  - Reset default values in /etc/idmap.conf (bz 650997)
  - Remove some warnings in the RPMdiff run (bz 594279)


author: Steve Dickson <steved@redhat.com> 1.1.1-4
changelog:
  - In idmapd.conf, commented out 'Domain' so DNS will be
    used to define the domainname. (bz 447237)


author: Steve Dickson <steved@redhat.com> 1.1.1-2
changelog:
  - Changed the file mode on documentation files (bz 427827)
  - Chagned how the doc directories are created so they
    are owned by the package. (bz 211001)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.53.el6
changelog:
  - BUILDINFO: xen commit=18ec2b68e519646188fd26a05b2cd26ebd829035
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Revert "xend: fix memory leak of XendConfig.XendConfig object" (Konrad Rzeszutek Wilk)  [Orabug: 28506675]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-105.0.52.el6
changelog:
  - BUILDINFO: xen commit=7023729bcb7dd5c156bc8ee31a7971f036e43f66
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - l1tf: Utility to offline/online SMT siblings. (Ross Philipson)  [Orabug: 28487029]  {CVE-2018-3646}
  - x86/spec-ctrl: Introduce an option to control L1D_FLUSH for HVM guests (Andrew Cooper)  [Orabug: 28487029]  {CVE-2018-3620} {CVE-2018-3646}
  - x86/msr: Virtualise MSR_FLUSH_CMD for guests (Andrew Cooper)  [Orabug: 28487029]  {CVE-2018-3646} {CVE-2018-3646}
  - x86/spec-ctrl: CPUID/MSR definitions for L1D_FLUSH (Andrew Cooper)  [Orabug: 28487029]  {CVE-2018-3646} {CVE-2018-3646}
  - x86/spec-ctrl: Calculate safe PTE addresses for L1TF mitigations (Andrew Cooper)  [Orabug: 28487029]  {CVE-2018-3620} {CVE-2018-3646}
  - x86: command line option to avoid use of secondary hyper-threads (Jan Beulich)  [Orabug: 28487029]  {CVE-2018-3646}
  - cpupools: fix state when downing a CPU failed (Jan Beulich)  [Orabug: 28487029]  {CVE-2018-3646}


author: Manjunath Patil <manjunath.b.patil@oracle.com> - 4.4.4-105.0.51.el6
changelog:
  - BUILDINFO: xen commit=63c397f89da7c720208e599696ada989121f3698
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix memory leak of XendConfig.XendConfig object (Manjunath Patil)  [Orabug: 28223470]


author: Robert Scheck <robert@fedoraproject.org> 1.13-1
changelog:
  - Upgrade to 1.13 (#290531, #332201, #425803)
  - Solved multilib problems at doxygen generated files (#342921)


author: Robert Scheck <robert@fedoraproject.org> 1.12-3
changelog:
  - Added buildrequirement to graphviz (#249352)
  - Backported bugfixes from CVS (#102254, #135428 and #178413)


author: Robert Scheck <robert@fedoraproject.org> 1.12-2
changelog:
  - Move libpopt to /lib[64] (#249814)
  - Generate API documentation, added buildrequirement to doxygen


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-10
changelog:
  - Escape paths returned from aug_match (RHBZ#1186318)
  - Krb5: parse braces in values (RHBZ#1203597)
  - Properties: handle empty line in multi-line value (RHBZ#1209885)


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-8
changelog:
  - Cgconfig: parse other valid controllers (RHBZ#1112388)
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144652)
  - Services: permit colons in service name (RHBZ#1121263)
  - Shadow: add lens (RHBZ#1160261)
  - Syslog: parse TCP loghosts (RHBZ#1129508)


author: Dominic Cleal <dcleal@redhat.com> - 1.0.0-6
changelog:
  - Fix CVE-2013-6412, incorrect permissions under strict umask (RHBZ#1036080)
  - Grub: support 'setkey' and 'lock' directives (RHBZ#1001635)
  - ActiveMQ: add ActiveMQ lens (RHBZ#1016899)
  - Splunk: add Splunk lens (RHBZ#1016900)
  - Sudoers: user aliases fail to parse (RHBZ#1016904)
  - Tests: testPermsError during compilation (RHBZ#1024275)
  - Shellvars: multi-variable export lines (RHBZ#1033795)
  - Shellvars: case statements with same-line ;; tokens (RHBZ#1033799)
  - Sysconfig: permit empty comments (RHBZ#1043636)
  - Grub: support 'foreground' directive (RHBZ#1059383)
  - Yum: permit space after equals sign (RHBZ#1062091)
  - IniFile: add generic INI lenses (RHBZ#1073072)
  - Automounter: permit hostnames with hyphens (RHBZ#1075112)
  - Rsyslog: parse property filters and templates (RHBZ#1083016)
  - Ldso: parse hwcap lines (RHBZ#1083021)
  - Sudoers: permit underscores in group names (RHBZ#1093711)
  - augtool: remove dump-xml filename arg (RHBZ#1100182)
  - augtool: add commands to autocomplete (RHBZ#1100184)
  - docs: update command and arg lists (RHBZ#1100186)
  - Nrpe: parse unknown config options (RHBZ#1100237)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-4
changelog:
  - Rebase to Augeas 1.0.0
    resolves: rhbz#817753
  - Add dependency on libxml2-devel.
  - Remove all patches (all upstream and included in 1.0.0).
  - Print tests/test-suite.log when the tests fail.
  - Add fix for regression added in 1.0.0 (RHBZ#920609).
  - Fix tests/test-run.


author: David Lutterkort <lutter@redhat.com> - 0.9.0-2
changelog:
  - Fix BZ 781690 "Grub password --encrypted argument not parsed correctly"
  - Fix BZ 628507 "It's better to support fadot --help or fadot -h"
  - Fix BZ 759311 "augtool --autosave does not save changes"


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.42-1
changelog:
  - updated to 5.42 (#698317)
  - improve 3ware raid controller support (#697235)
  - fix SCSI log page sanity check (#784925)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.39.1-3
changelog:
  - extended smartctl man pages with examples how to use cciss
  - fix crash when starting selftest on megaraid controller


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-6
changelog:
  - fix #271741 - smartd-conf.py should allow customization of parameters
  - fix #253753 - service starting by default, perhaps shouldn't
  - update initscript (related #247058 - initscript review)


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-5
changelog:
  - add support for 24 disks on 3ware RAID controllers (related #252055)
  - fix #245442 - add %{arm} to smartmontools's set of build archs
  - update license tag


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-4
changelog:
  - fix #241389 - smartd-conf.py pulls in a big dependency chain, so
    build a separate config package


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-3
changelog:
  - fix #241385 - smartmontools missing dependency on mailx
  - fix #241388 - unneeded smartd-conf.py[co] installed in /usr/sbin


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-5
changelog:
  - set cloexec on device descriptor so it doesn't leak to sendmail (#214182)
  - fixed minor bug in initscript (#213683)
  - backported SATA disk detection from upstream


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-2
changelog:
  - kudzu is deprecated, replace it with HAL (#195752)
  - moved later in the boot process so haldaemon is already running
    when drives are being detected


author: Tomas Mraz <tmraz@redhat.com> - 1:5.33-5
changelog:
  - add default /etc/sysconfig/smartmontools file
  - ignore errors on startup (#186130)
  - test drive for SMART support before adding it to smartd.conf


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-3
changelog:
  - add libata disks with -d ata if the libata version
    is new enough otherwise do not add them (#145859, #174095)


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-2
changelog:
  - Spec file cleanup by Robert Scheck <redhat@linuxnetz.de> (#170959)
  - manual release numbering
  - remove bogus patch of non-installed file
  - only non-removable drives should be added to smartd.conf
  - smartd.conf should be owned (#171498)


author: Marek Kasik <mkasik@redhat.com> - 2.24.1-2
changelog:
  - Import gdk-pixbuf2 package from F16
  - Disable introspection
  - Add update-gdk-pixbuf-loaders
  - Resolves: #1103734


author: EL Errata <el-errata_ww@oracle.com> - 1.2.3-75.0.6
changelog:
  - nfsiostat: avoid parsing "no device mounted ..." line (orabug: 26767280)
  - gssd: Close descriptor when return value is POLLERR (orabug: 25714110)
  - gssd: update gssd/krb5_poll_index when file reopened (orabug 26517431)
  - fix PATH in start-statd (orabug 25059557)
  - chkconfig --add rpcidmapd: it was deleted in 1.2.3-38 in favor of nfsidmapd (orabug 21805203)
  - Prevent multiple instances of rpc.statd processes (orabug 22998602)


author: Steve Dickson <steved@redhat.com> 1.2.3-73
changelog:
  - mountd: fix is_subdirectory to understand '/' (bz 1331207)
  - mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
  - mount.nfs: Removed supported flag from usage string (bz 1000990)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037926)
  - exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)


author: Steve Dickson <steved@redhat.com> 1.2.3-71
changelog:
  - rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
  - nfsidmap: Clean up other exit status cases (bz 1313603)
  - gssd: Fix inner-loop variable reuse (bz 1313090)
  - mount.nfs manpage: Add nfsmount.conf (bz 1302981)
  - nfs.init: Set exit code on restarts (bz 1205055)


author: Steve Dickson <steved@redhat.com> 1.2.3-67
changelog:
  - mount.nfs: Fix fallback from tcp to udp (bz 1287894)
  - exportfs: escape path for function test_export (bz 735696)
  - nfs-utils.spec: No verification on runtime configuration files (bz 1118176)
  - idmapd: added usage statement (bz 1001439)
  - mountd: fix netgroup lookup for short hostnames (bz 1231998)
  - mountd: fix bug affecting exports of dirs with 64bit inode number (bz 994564)


author: Steve Dickson <steved@redhat.com> 1.2.3-66
changelog:
  - svc_create: Make sure errors are logged (bz 1156647)
  - gssd: suppress error message if rpc_pipefs dir disappears (bz 1220156)
  - gssd: set $HOME to prevent recursion (bz 1223661)
  - statd: Update existing record if we receive SM_MON... (bz 1280024)
  - mountstats.man: fixed typo in man page (bz 1263968)


author: Steve Dickson <steved@redhat.com> 1.2.3-65
changelog:
  - nfsidmap: make sure give arguments are valid (bz 1230600)
  - nfsidmap: Display the effective NFSv4 domain name (bz 948680)
  - gssd: allow gssd and svcgssd to set the libtirpc debug level (bz 1273161)
  - gssd: select non-conventional principal (bz 1268031)
  - gssd:  Don't assume the machine account will be in uppercase (bz 1273166)
  - sm-notify: delete files in sm.bak after a NOTIFY reply (bz 1278921)


author: John Haxby <john.haxby@oracle.com> - 2.0.19-6.0.1
changelog:
  - Bump to OL7 version for UEK4 support (John Haxby) [orabug 22370566]
  - Don't ignore OL6-style files in /etc/acpi/events (John Haxby) [orabug 22370566]


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.0.8-1
changelog:
  - Updated to version 1.0.8
  - power.sh works with ConsoleKit >= 0.3.0 (#470752)
  - Fixed conditions in power.sh, which look for power-managers (#470752)
  - Added check to init script


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.0.6-5.fc9
changelog:
  - Fixed managing of power button (#361501)
  - Fixed power script to check for KDE power manager (#419331)


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.0.6-4.fc9
changelog:
  - Removed old logrotate file
  - Fixed socket leak (#394431)
  - Fixed dumping useless info to log (#389581)


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-4
changelog:
  - Made a better fix for the powerdown button which checks if g-p-m is running
  - Don't install sample.conf anymore, not needed


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-3
changelog:
  - Disable the automatic shutdown -h via powerdown button by default due to
    conflicts with gnome-power-manager


author: Miloslav Trmac <mitr@redhat.com> - 1.0.3-2
changelog:
  - Update to 1.0.3 (fixes #128834)
  - s/Copyright/License/
  - Add logrotate config file (#110677, from Michal Jaegermann)
  - Don't verify contents of /var/log/acpid (#125862)
  - Use $RPM_OPT_FLAGS
  - Fix and cleanup acpid-1.0.1-pm1.patch
  - Add condrestart to %postun


author: Tim Hockin <thockin@sun.com>
changelog:
  - Updated RPM spec with patch from sun for chkconfig on/off
    - Add Changelog, make 'make rpm' use it.


author: Tim Hockin <thockin@sun.com>
changelog:
  - Fixed logging bug - not appending to log (O_APPEND needed)
    - Fix 'make install' to not need root access
    - Fix RPM spec to not need root


author: Keshav Sharma <keshav.sharmaluo@oracle.com> 0.80.9.0.0.5.el6
changelog:
  - split python-ceph into multipls packages fixing OL7 install [oraBug 20805507]
  - Added additional missing functions used by rbdmap init scripts [oraBug 21090610]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.4.4-75.0.2.el6
changelog:
  - BUILDINFO: commit=a83239e012959a65503ebb44ee9c54620a9d78f5
  - evtchn-fifo: prevent use after free (Boris Ostrovsky)   {CVE-2016-7154}
  - x86/segment: Bounds check accesses to emulation ctxt->seg_reg[] (Andrew Cooper)   {CVE-2016-7094}
  - x86/shadow: Avoid overflowing sh_ctxt->seg_reg[] (Andrew Cooper)   {CVE-2016-7094}
  - x86/32on64: don't allow recursive page tables from L3 (Jan Beulich)   {CVE-2016-7092}


author: Adam Jackson <ajax@redhat.com> 10.2-3
changelog:
  - cdparanoia-10.2-endian.patch: Backport a crash fix for host/drive
    endianness mismatch. (#466659)


author: Adam Jackson <ajax@redhat.com> alpha9.8-30
changelog:
  - Add -Werror-implicit-function-declarations.
  - cdparanoia-III-alpha9.8-headers.patch: Fix the resulting errors.


author: Adam Jackson <ajax@redhat.com> alpha9.8-29
changelog:
  - cdparanoia-III-alpha9.8.scsi-setspeed.patch: Allow setting the speed of
    SCSI CD drives. (#431178)


author: Peter Jones <pjones@redhat.com> alpha9.8-23
changelog:
  - "This time, with a meaningful changelog" release.  Just like -22.
  - new SG_IO code in rawhide.  This means ripping will no longer use the 
    "cooked ioctl" mode that it has since we moved to 2.6, instead utilizing
    the real scsi-based command set to talk to most drives.  This should
    result in better error correction handling, and usage of much more
    commonly used kernel features.
  - environment variable "CDDA_TRANSPORT" added.  If you set this to "cooked",
    cdparanoia will try to use the "cooked ioctl" mode instead of SCSI/SG_IO
    based modes first, and then fall back to SG_IO.
  - It'd be good if this got some testing.  A prior version of the SG_IO code
    was known to fail on some USB drives.  This version should mitigate that
    quite a bit, but I lack the hardware to test it for sure.


author: Peter Jones <pjones@redhat.com> alpha9.8-5
changelog:
  - make a -libs package which contains the .so files
  - make the cdparanoia dependancy towards that, not -devel


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Switched spec file from the one used in Red Hat Linux 6.2, which
    also changes the name
  - gzip man page


author: Peter Jones <pjones@redhat.com>
changelog:
  - update package to provide cdparanoia-alpha9.7-2.*.rpm and 
    cdparanoia-devel-alpha9.7-2.*.rpm.  Also, URLs point at xiph.org
    like they should.


author: Peter Jones <pjones@redhat.com>
changelog:
  - updated package for alpha9.7, based on input from:
    Monty <xiphmont@xiph.org> 
    David Philippi <david@torangan.saar.de>


author: Anton Arapov <anton@redhat.com> - 2.0.7-7
changelog:
  - numastat.c: fix bug preventing correct static huge page quantities
  - numastat.c: update version number
  - numastat.8: remove redundant "interleave hit" description
  - numastat.8: remove extraneous leading spaces and blank lines
  - numastat.8: enhance explanation of correct placement for "-s" option
  - Resolves: rhbz#987507


author: Petr Holasek <pholasek@redhat.com> - 2.0.7-4
changelog:
  - Symbol numa_num_possible_cpus exported (bz804827)
  - miscalculating of numa_num_configured_cpus was fixed (bz804480)


author: Firas Azar <firas.azar@oracle.com> - 3.4.1-5.el6.2.3
changelog:
  - Signed-off by: Firas Azar <firas.azar@oracle.com>
    Signed-off by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 24464484]


author: Firas Azar <firas.azar@oracle.com> - 3.4.1-5.el6.2.1
changelog:
  - Signed-off-by: Firas Azar <firas.azar@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Disable multi-queue in XEN blkback by setting xen_blkback.max_queues to 1. [bug 24464484]


author: Petr Šabata <contyk@redhat.com> - 1.0.28-2
changelog:
  - Don't build on s390x (#693443)
  - Add a note to README about EL6 service already implementing the
    suggested function (#981062)
  - Use rtgenmsg when requesting RTM_GETLINK (#882139)


author: Petr Šabata <contyk@redhat.com> - 1.0.28-1
changelog:
  - Update to 1.0.28 (#829793)
  - Include a fix for #903099, destroying vports first to avoid a hang
  - Fix an old bogus date in the changelog


author: Petr Šabata <contyk@redhat.com> - 1.0.22-2
changelog:
  - Reverting a part of d789267 upstream patch.  Initscript shouldn't return code 2 on
    status query when the daemon is running. (#804936)


author: Petr Šabata <contyk@redhat.com> - 1.0.22-1
changelog:
  - Update to 1.0.22 with 7d3c9d1, "Add date and ps output to fcoedump.sh"
  - Require libhbalinux-1.0.13 or newer


author: Petr Sabata <psabata@redhat.com> - 1.0.17-2
changelog:
  - Changing fcoemon.c includes temporarily to address open-lldp header changes
  - Related: rhbz#672453


author: Petr Sabata <psabata@redhat.com> - 1.0.14-17
changelog:
  - netdev-wait.patch -- POSIX compliance fix; based on suggestion from Petr Pisar
  - Related: rhbz#658076


author: Petr Sabata <psabata@redhat.com> - 1.0.14-16
changelog:
  - remove-vconfig-dep.patch, contrib/fcoe-setup.sh
  - removed vconfig requirement
  - Resolves: rhbz#645796


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.14-2
changelog:
  - updated init script to support force-reload option
    (alias to "restart force" as packaging guidelines suggest)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-6
changelog:
  - renamed init script to fcoe, changed lock filename to fcoe
    (#497604)
  - init script modified to do condrestart properly
  - some modifications in spec file to apply previous change
    to older versions od init script during update
  - fixed issue with accepting long options (#498551)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-2
changelog:
  - minor corrections in spec file
  - moved init script to correct location
  - correction in the init script (chkconfig directives)


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: Casey Dahlin <cdahlin@redhat.com> - 0.3.9-22
changelog:
  - Re-add 'telinit u' support along with patch to fix it (#450488). Patch due to
    <pspencer@fields.utoronto.ca>


author: Bill Nottingham <notting@redhat.com> - 0.3.9-13
changelog:
  - Ignore rpm temporary files of the foo;<somehex> format
  - Make ignores of .rpm{new,orig,save} match only at the end of the name


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.3.8b-8
changelog:
  - prepare for rename to qt3 on Fedora >= 9 (not enabled yet)
  - add Provides and Obsoletes everywhere
  - update summaries and descriptions
  - remove dots at end of Summary tags
  - fix non-UTF-8 characters


author: Than Ngo <than@redhat.com> 3.3.8b-2
changelog:
  - License: GPLv2 or GPLv3
  - merged in 3.3.8b -> drop following patches:
      * qt-3.3.6-fontrendering-punjabi-209970.patch
      * qt-3.3.6-fontrendering-or_IN-209098.patch
      * qt-3.3.6-fontrendering-gu-228451.patch
      * qt-font-default-subst.diff
      * 0076-fix-qprocess.diff
      * 0082-fix-qdatetime-fromstring.diff
      * qt-x11-free-3.3.8-bz#243722-mysql.patch
      * qt3-CVE-2007-3388.patch
      * utf8-bug-qt3-CVE-2007-0242.diff
      * qt-3.3.6-bz#292941-CVE-2007-4137.patch


author: Than Ngo <than@redhat.com> - 3.3.8-9
changelog:
  - rh#309091, qt should provide %{qtdir}/plugins/styles
  - rh#276521, qt-copy patches 0079, 0080, 0082 and 0084


author: Than Ngo <than@redhat.com> - 1:3.3.8-7
changelog:
  - CVE-2007-3388 qt3 format string flaw
  - backport to fix #bz243722, bz#244148, Applications using qt-mysql crash if database is
    removed before QApplication is destroyed
  - cleanup desktop files


author: Than Ngo <than@redhat.com> - 1:3.3.8-4.fc7
changelog:
  - adjust qt-3.3.8-fontrendering-as_IN-209972.patch and
    qt-3.3.8-fontrendering-#214570.patch for qt-3.3.8


author: Than Ngo <than@redhat.com> - 1:3.3.8-3.fc7
changelog:
  - apply patches to fix
     Qt UTF-8 overlong sequence decoding vulnerability
     QPopupMenu aware of Xinerama
     a regression in QProgress::writeToStdin()


author: Than Ngo <than@redhat.com> - 1:3.3.7-2.fc7
changelog:
  - Resolves: bz#214371, bn_IN font rendering
  - Resolves: bz#217657, ml_IN issue with cursor position
  - Resolves: bz#217638, regression bug in qt
  - Resolves: bz#209974, Vowel position set properly
  - Resolves: bz#214570, Rendering is not fine for 'RA' 09B0


author: Than Ngo <than@redhat.com> 1:3.3.7-1.fc6
changelog:
  - update to 3.3.7
  - fix #209097, ml_IN font rendering
  - fix #209970, pa font rendering
  - fix #209098, or_IN font rendering
  - fix #209972, as_IN font rendering
  - fix #209975, bn_IN font rendering
  - fix #211259, te_IN font rendering
  - fix #211436, as_IN font rendering
    thanks Sachin Tawniya, LingNing Zhang for the fixes
  - move html files to devel
  - add sqlite plugin
  - fix #189012, qt settings should be readable for other


author: Than Ngo <than@redhat.com> 1:3.3.6-11
changelog:
  - apply upstream patches, fix arabic fonts issue, and
    problems with missing minimum size when richtext
    labels are used


author: Than Ngo <than@redhat.com> 1:3.3.6-7
changelog:
  - fix utf8 issue in changelog
  - fix #195410, don't strip binaries/libraries
  - fix #156572, keyReleaseEvent issue


author: Than Ngo <than@redhat.com> 1:3.3.6-1
changelog:
  - update to 3.3.6
  - adapt qt-x11-immodule-unified-qt3.3.5-20060318 to qt-3.3.6
  - remove set of fixes for the immodule patch, included in qt-x11-immodule-unified-qt3.3.5-20060318
  - remove 0051-qtoolbar_77047.patch, qt-x11-free-3.3.4-assistant_de.patch,
    qt-x11-free-3.3.5-warning.patch, included in new upstream


author: Than Ngo <than@redhat.com> 1:3.3.5-6
changelog:
  - update qt-x11-immodule-unified-qt3.3.5-20051018.diff
  - remove unneeded qt-x11-immodule-unified-qt3.3.5-20051012-build.patch


author: Than Ngo <than@redhat.com> 1:3.3.5-5
changelog:
  - update qt-x11-immodule-unified-qt3.3.5-20051012
  - disable some debug messages
  - apply patch to fix build problem with the new immodule patch


author: Than Ngo <than@redhat.com> 1:3.3.4-15
changelog:
  - add better fix for #156977, thanks to trolltech
  - apply patch to fix keyReleaseEvent problem #156572


author: Than Ngo <than@redhat.com> 1:3.3.4-5
changelog:
  - fix application crash when input methode not available (bug #140658)
  - remove .moc/.obj
  - add qt-copy patch to fix KDE #80072


author: Than Ngo <than@redhat.com> 1:3.3.4-2
changelog:
  - remove useless doc files #143949
  - fix build problem if installman is disable #146311
  - add missing html/examples/tutorial symlinks


author: Than Ngo <than@redhat.com> 1:3.3.4-1
changelog:
  - update to 3.3.4
  - adapt many patches to qt-3.3.4
  - drop qt-x11-free-3.3.0-freetype, qt-x11-free-3.3.3-qmake, qt-x11-free-3.3.1-lib64
    qt-x11-free-3.3.3-qimage, which are included in new upstream


author: Than Ngo <than@redhat.com> 1:3.3.3-9
changelog:
  - remove unused patch
  - set XIMInputStyle=On The Spot
  - require xorg-x11-devel instead XFree86-devel


author: Than Ngo <than@redhat.com> 1:3.3.2-8
changelog:
  - add fontconfig fix for qfontdatabase, #123868
  - fix some buildrequires problem, #125289
  - fix dangling symlink, #125351
  - get rid of backup files


author: Than Ngo <than@redhat.com> 1:3.3.2-5
changelog:
  - add missing qembed tool #124052, #124052
  - get rid of unused trigger
  - add qt.conf in ld.so.conf.d -> don't change ld.so.conf #124080


author: Than Ngo <than@redhat.com> 3.3.1-1
changelog:
  - add cvs backport
  - fix lib64 issue, #121052
  - fix CJK font display, bug #121017, #120542, thanks to Leon Ho
  - compress tutorial/examples


author: Than Ngo <than@redhat.com> 3.3.1-0.6
changelog:
  - add 0034-qclipboard_recursion_fix.patch from CVS, #118368
  - add better qt-x11-free-3.3.1-fontdatabase.patch


author: Than Ngo <than@redhat.com> 3.3.0-0.3
changelog:
  - enable IPv6 support
  - use dlopen, instead of linking with OpenGL libraries directly
  - don't install backup files


author: Than Ngo <than@redhat.com> 1:3.2.3-0.2
changelog:
  - Added missing prl files, (report from trolltech)
  - Fixed description
  - include requires XFree86-devel on qt-devel


author: Than Ngo <than@redhat.com> 1:3.2.2-0.2
changelog:
  - add font alias patch file, thanks to Leon Ho
  - clean up monospace.patch from Leon Ho
  - remove some unneeded patch files


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - Change qmlined.h to not include an attic header that is also not shipped
    with Red Hat Linux. This also fixes building unixODBC, that includes this
    header (apparently also without needing it).


author: Than Ngo <than@redhat.com> 3.1.1-3
changelog:
  - add monospace patch file from Leon Ho (bug #79949)
  - add small patch file from Sysoltsev Slawa (bug #79731)


author: Than Ngo <than@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0
  - adjust some patch files for 3.1.0
  - clean up specfile
  - remove some Xft2 patch files, which are now in 3.1.0
  - add qwidget_x11.cpp.diff from Trolltech
  - install qt in %{_libdir}/qt-3.1 (bug #77706)
  - don't use rpath
  - enable large file support
  - use system Xinerama
  - remove unneeded cups patch file
  - fix to build against new XFree86


author: Than Ngo <than@redhat.com> 3.0.5-19
changelog:
  - examples misconfigured (bug #76083)
  - don't include pkg-config (bug #74621)
  - fix build problem with new XFree86


author: Than Ngo <than@redhat.com> 3.0.5-17
changelog:
  - Fixed rpath issue (bug #69692, #69575)
  - Removed dlopen patch
  - Added monospace alias patch from Leon Ho (bug #72811)
  - Added man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.5-14
changelog:
  - Don't link to libstdc++, it isn't used
  - Work around s390 compiler bug (fpic/fPIC coexistance)
  - Do away with the "Feature Bluecurve already defined" warning message
  - Remove qmake cache files from the package


author: Than Ngo <than@redhat.com> 3.0.5-13
changelog:
  - Added fix to use VT100 graphic characters (bug #71364)
  - Added fontdatabase fix from llch@redhat.com (bug #68353)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.5-11
changelog:
  - Move qtconfig from qt-devel to qt, it's generally useful
  - Use -fno-use-cxa-atexit
  - Some tweaks to allow building Qt/Embedded with the same spec file
  - Apply the GB18030 patch even if xft2 isn't set


author: Than Ngo <than@redhat.com> 3.0.4-10
changelog:
  - add missing Buildprequires desktop-file-utils
  - add patches for GB18030 (llch@redhat.com) bug #68430


author: Jakub Jelinek <jakub@redhat.com> 3.0.4-8
changelog:
  - compile libXinerama.a with -fpic in Qt until XFree86 is fixed
  - make %xft2 work even if old Xft headers aren't installed


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.4-6
changelog:
  - Re-enable Xft2 now that fontconfig is fixed
  - Require a version of fontconfig that works
  - Use -fPIC rather than -fpic on alpha


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-10
changelog:
  - Tweaks to allow parallel installations of Qt 3.x (gcc 2.96) and Qt 3.x
    (gcc 3.1)
  - Fix up debug spewage at Qt designer startup


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-8
changelog:
  - Get rid of non-threaded version, dlopen()'ing threaded code
    (like plugins) from non-threaded code is dangerous
  - Add some fixes from qt-copy, fixing the ksplash crash some people
    have noticed on a first login
  - Add translation fixes from CVS
  - Patch example .pro files to build outside the Qt source tree (#63023)
  - Fix various bugs


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-0.cvs20020314.1
changelog:
  - Update to 3.0.3-pre, required for KDE3
  - force -fPIC usage
  - Remove conflict with qt2 < 2.3.2-1, the new qt2 2.3.1 is fixed and qt 2.3.2
    is broken
  - Ship the qmake config files (so qmake works for building any 3rd party stuff,
    e.g. aethera)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.2-0.cvs20020114.1
changelog:
  - Build styles directly into the main library for now, there's too much broken
    code out there depending on this ATM.


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.1-2
changelog:
  - Fix up settings search path
  - Add default qtrc allowing to use KDE 3.x Qt plugins
  - Make sure QLibrary uses RTLD_GLOBAL when dlopen()ing libraries


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.1-0.cvs20011210.1
changelog:
  - Update to current (needed by KDE 3.x)
  - Rebuild with current libstdc++
  - Temporarily disable building on alpha
  - Fix build with PostgreSQL 7.2


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-4
changelog:
  - Give designer, uic, moc, etc. their real names - the qt2 versions
    have been renamed in qt2-2.3.2-1.
    Conflict with qt2 < 2.3.2-1.


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-3
changelog:
  - Add symlink /usr/lib/qt-3.0.0 -> /usr/lib/qt3 and set QTDIR to the
    symlink, allowing to update to 3.0.1 without breaking rpath'ed binaries


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-1
changelog:
  - 3.0.0 final
  - fix some minor specfile bugs
  - Modularize some more (image format plugins)
  - Build codecs


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.beta4.1
changelog:
  - beta4
  - build the Motif style directly into Qt rather than as a plugin - Qt should
    always have at least one style...
  - replace the designer3 symlink with a shell script that sets QTDIR correctly
    before launching designer
  - Add desktop file for designer


author: Tim Powers <timp@redhat.com> 3.0.0-0.beta3.4
changelog:
  - explicitly include qm2ts, qmake, qtconfig in the devel package file list to avoid dangling symlinks


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add another ugly workaround for build system problems, this should finally
    get rid of the dangling symlinks


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.beta1.2
changelog:
  - Fix up QSQL Postgres classes for Postgres 7.1.x
  - Fix various bugs:
    - QtMultilineEdit and QtTableView should actually compile
    - Link libqsqlpsql with libpq
    - Don't link the base library with libmysqlclient, linking the MySQL
      module with it is sufficient
  - Add missing const qualifier
  - move the SQL drivers to separate packages to avoid dependencies
  - build and install designer plugins - converting glade files to Qt is fun. ;)
  - handle RPM_OPT_FLAGS


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.3.0-5
changelog:
  - Make sure uic and designer use the libqui from the source tree, not
    a previously installed one.
    Linking uic-x11 against libqui-embedded is definitely not a feature. ;)
  - The qclipboard fix is needed for qt-x11 only, don't apply it if we're
    building qt-embedded


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't segfault when running Qt/Embedded applications as root
  - Improve the Qt/Embedded sparc patch so we don't need the specfile hacks
    anymore
  - Fix a bug in QPrintDialog (causing KDE Bug #18608)


author: Than Ngo <than@redhat.com>
changelog:
  - call ldconfig for updating (Bug #19687)
  - added patch from Trolltech, thanks to Rainer <rms@trolltech.com>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add missing msg2qm, msgmerge, qconfig tools (Bug #18997), introduced
    by broken Makefiles in base
  - fix up %install so it works both with old-style and new-style fileutils
    (fileutils <= 4.0z don't know about -L)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix -devel
  - update to the new version of 2.2.1 on trolltech.com; the initial tarball
    contained broken docs


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move Qt designer to a different source RPM to get rid of a
    circular dependency (kdelibs2->qt, qt->kdelibs2)
  - Enable MNG support
  - Don't compile (just include) examples and tutorials
  - move the static libraries to a separate package (qt-static).
    They're HUGE, and most people won't ever need them.
  - clean up spec file
  - fix up dependencies (-devel requires base, -static requires devel,
    Xt requires base)
  - add BuildRequires line


author: Than Ngo <than@redhat.com>
changelog:
  - update release 2.2.0
  - changed copyright to GPL
  - added missing static libraries
  - made symbolic link for designer to load the help files correct
  - made designer and designer-kde2 as sub packages
  - added missing templates for designer
  - remove jakub patch, since the release 2.2.0 already 
    contains this patch.
  - fixed qt again to compile with gcc-2.96
  - use make -j for building


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - move man pages to a more reasonable place (this fixes Bug #14126)
  - exclude ia64 for now (compiler problems!!!)


author: Harald Hoyer <harald@redhat.de>
changelog:
  - made patch smaller and binary compatible when recompiled with 6.2
  - modified connect and moc to cope with the new g++ class layout


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - beta1
  - get rid of qt-ImageIO, the functionality is now in the main Qt library
  - remove qt-Network, the functionality is now in the main Qt library
  - add changes-2.1.0 to %doc


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - -GL requires libGL.so.1 instead of Mesa (might as well be glxMesa
    or some commercial OpenGL)
  - -GL BuildPrereqs /usr/X11R6/include/GL/gl.h instead of Mesa-devel
    (might as well be glxMesa or some commercial OpenGL)


author: Bernhard Rosenkraenzer <bero@redhat.de>
changelog:
  - current CVS snapshot
  - fix compilation with gcc 2.95.x
  - use install -c rather than just install to make BSD install happy


author: Preston Brown <pbrown@redhat.com>
changelog:
  - substitution in tutorial and examples so that dependencies are correct and
    they can be successfully rebuilt.
  - switched to completely using QTDIR.  trying to coexist with links into
    /usr/{include,lib} and still compile with qt 1.x is very hard for
    configure scripts to cope with.


author: Venu Busireddy <venu.busireddy@oracle.com> - 4.4.4-105.0.9.el6
changelog:
  - BUILDINFO: xen commit=17b0cd2109c42553e9c8c34d3a2b8252abead104
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xm: Fix the error message displayed by 'xm create ...' (Venu Busireddy)  [Orabug: 25721696] 
  - xm: expand pci hidden devices tools (Venu Busireddy)  [Orabug: 25721624]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-105.0.7.el6
changelog:
  - BUILDINFO: xen commit=68930e8bbd9311ebd12fdb251362a2e1f9987fba
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=d9ba4c53b14ebf9a0613b5638f90d95489622f0c
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix waitForSuspend (Zhigang Wang)  [Orabug: 25638583] [Orabug: 25653480] 
  - IOMMU: always call teardown callback (Oleksandr Tyshchenko)  [Orabug: 25485193]


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 1.0-1.el6.2
changelog:
  - Use multipath API (instead of SG_IO ioctl) for "PERSISTENT RESERVE OUT" SCSI command. [bug 24436025]


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-15.el6_6.1
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197737


author: Marek Kasik <mkasik@redhat.com> 2.3.11-13
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806269


author: Marek Kasik <mkasik@redhat.com> 2.3.11-8
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723468


author: Marek Kasik <mkasik@redhat.com> 2.3.11-7
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651762


author: Marek Kasik <mkasik@redhat.com> 2.3.11-6
changelog:
  - Add freetype-2.3.11-CVE-2010-2805.patch
      (Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.3.11-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Add freetype-2.3.11-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Resolves: #638839


author: Marek Kasik <mkasik@redhat.com> 2.3.11-5
changelog:
  - Add freetype-2.3.11-CVE-2010-1797.patch
      (Check stack after execution of operations too.
       Skip the evaluations of the values in decoder, if
       cff_decoder_parse_charstrings() returns any error.)
  - Resolves: #621624


author: Marek Kasik <mkasik@redhat.com> 2.3.11-4
changelog:
  - Add freetype-2.3.11-CVE-2010-2498.patch
      (Assure that `end_point' is not larger than `glyph->num_points')
  - Add freetype-2.3.11-CVE-2010-2499.patch
      (Check the buffer size during gathering PFB fragments)
  - Add freetype-2.3.11-CVE-2010-2500.patch
      (Use smaller threshold values for `width' and `height')
  - Add freetype-2.3.11-CVE-2010-2519.patch
      (Check `rlen' the length of fragment declared in the POST fragment header)
  - Add freetype-2.3.11-CVE-2010-2520.patch
      (Fix bounds check)
  - Add freetype-2.3.11-CVE-2010-2527.patch
      (Use precision for `%s' where appropriate to avoid buffer overflows)
  - Add freetype-2.3.11-axis-name-overflow.patch
      (Avoid overflow when dealing with names of axes)
  - Resolves: #613298


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-2
changelog:
  - Add Provides: freetype-bytecode and freetype-subpixel if built
    with those options.
  - Resolves: #155210


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-3
changelog:
  - Add full source URL to Source lines.
  - Add docs to main and devel package.
  - rpmlint is happy now.
  - Resolves: #225770


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-2
changelog:
  - Change spec file to permit enabling bytecode-interpreter and
    subpixel-rendering without editing spec file.
  - Resolves: 249986


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-1
changelog:
  - Update to 2.3.0.
  - Drop upstream patches.
  - Drop -fno-strict-aliasing, it should just work.
  - Fix typo in ftconfig.h generation.


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16
changelog:
  - Backport binary-search fixes from HEAD
  - Add freetype-2.2.1-ttcmap.patch
  - Resolves: #208734

  - Fix rendering issue with some Asian fonts.
  - Add freetype-2.2.1-fix-get-orientation.patch
  - Resolves: #207261

  - Copy non-X demos even if not compiling with_xfree86.

  - Add freetype-2.2.1-zero-item-size.patch, to fix crasher.
  - Resolves #214048

  - Add X11_PATH=/usr to "make"s, to find modern X.
  - Resolves #212199


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10
changelog:
  - Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841
  - Add freetype-2.2.1-memcpy-fix.patch


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1
changelog:
  - Update to 2.2.1
  - Remove FreeType 1, to move to extras
  - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid
  - Enable modules gxvalid and otvalid


author: Owen Taylor <otaylor@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to 2.1.9
  - Since we are just using automake for aclocal, use it unversioned,
    instead of specifying 1.4.


author: Owen Taylor <otaylor@redhat.com> 2.1.7-4
changelog:
  - Add patch from freetype CVS to fix problem with eexec (#117743)
  - Add freetype-devel to buildrequires and -devel requires
    (Maxim Dzumanenko, #111108)


author: Mike A. Harris <mharris@redhat.com> 2.1.7-3
changelog:
  - Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and
    SIGILL crashes in mkfontscale which have been traced into freetype and seem
    to be caused by aliasing issues in freetype macros (#118021)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow compiling without the demos as that requires XFree86
    (this allows bootstrapping XFree86 on new archs)


author: Owen Taylor <otaylor@redhat.com> 2.1.4-1
changelog:
  - Version 2.1.4
  - Relibtoolize to get deplibs right for x86_64
  - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781)
  - Relativize absolute symlinks to fix the -debuginfo package 
    (#83521, Mike Harris)


author: Elliot Lee <sopwith@redhat.com> 2.1.3-7
changelog:
  - Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries 
    on ppc64.
  - Use _smp_mflags (for freetype 2.x only)


author: Owen Taylor <otaylor@redhat.com> 2.1.3-4
changelog:
  - Make FreeType robust against corrupt fonts with recursive composite 
    glyphs (#74782, James Antill)


author: Mike A. Harris <mharris@redhat.com> 2.1.3-2
changelog:
  - Update to freetype 2.1.3
  - Removed ttmkfdir sources and patches, as they have been moved from the
    freetype packaging to XFree86 packaging, and now to the ttmkfdir package
  - Removed patches that are now included in 2.1.3:
    freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch,
    freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch,
    freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch,
    freetype-2.1.2-leftright.patch
  - Conditionalized inclusion of freetype 1.4 library.


author: Mike A. Harris <mharris@redhat.com> 2.1.2-10
changelog:
  - Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS
  - Cleaned up various _foodir macros throughtout specfile
  - Removed with_ttmkfdir build option as it is way obsolete


author: Mike A. Harris <mharris@redhat.com> 2.0.8-2
changelog:
  - Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7
    on the freetype website.  Munged specfile to deal with the problem by using
    {oldversion} instead of version where appropriate.  <sigh>


author: Tim Powers <timp@redhat.com> 2.0.6-3
changelog:
  - bumping release so that we don't collide with another build of
    freetype, make sure to change the release requirement in the XFree86
    package


author: Mike A. Harris <mharris@redhat.com> 2.0.6-2
changelog:
  - Made ttmkfdir inclusion conditional, and set up a define to include
    ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new
    XFree86-font-utils package.


author: Elliot Lee <sopwith@redhat.com> 2.0.5-3
changelog:
  - Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating
    font list). (ttmkfdir-iso10646.patch)
  - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch)
  - Undo fix for #24253, assume compiler was fixed.


author: Mike A. Harris <mharris@redhat.com> 2.0.4-2
changelog:
  - Added new subpackage freetype-demos, added demos to build
  - Disabled ftdump, ftlint in utils package favoring the newer utils in
    demos package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4
changelog:
  - Add ft2build.h to -devel package, since it's included by all other
    freetype headers, the package is useless without it


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3
changelog:
  - Change "Requires: freetype = name/ver" to "freetype = version/release",
    and move the requirements to the subpackages.


author: Mike A. Harris <mharris@redhat.com> 2.0.3-1
changelog:
  - Updated to Freetype 2.0.3, minor specfile tweaks.
  - Freetype2 docs are is in a separate tarball now. Integrated it.
  - Built in new environment.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - libtool is used to build libttf, so use libtool to link ttmkfdir with it
  - fixup a paths for a couple of missing docs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin
  - freetype utilities moved to subpkg, X dependency removed from main pkg
  - libttf.so symlink moved to devel pkg


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - call libtoolize to sanitize config.sub and get ARM support
  - dispoze of the patch (not necessary anymore)


author: Seth Vidal <skvidal at fedoraproject.org> - 1.1.2-14
changelog:
  - apply latest patches from upstream - consolidate into one big patch
  - test before a 1.1.3 from upstream


author: Keshav Sharma <keshav.sharma@oracle.com> - 1:1.17-25.4.0.2
changelog:
  - Revert:  early microcode load to allow updating Broadwell model 79
  - Revert: Make sure "modprobe microcode" is not executed on Broadwell model 79
  - Revert: Run dracut upon microcode update
  - Revert updated Intel 20180108 microcode for CPUIDs: {CVE-2017-5715}
    306c3 (06-3c-03 rev 0x23, Haswell);
    306d4 (06-3d-04 rev 0x28, Broadwell);
    306f2 (06-3f-02 rev 0x3b, Haswell);
    306f4 (06-3f-04 rev 0x10, Haswell);
    306e4 (06-3e-04 rev 0x42a, Ivy Bridge);
    40651 (06-45-01 rev 0x21, Haswell);
    40661 (06-46-01 rev 0x18, Haswell);
    40671 (06-47-01 rev 0x1b, Broadwell);
    406e3 (06-4e-03 rev 0xc2, Skylake);
    406f1 (06-4f-01 rev 0xb000025, Broadwell);
    50654 (06-55-04 rev 0x200003c, Skylake);
    50662 (06-56-02 rev 0x14, Broadwell);
    50663 (06-56-03 rev 0x7000011, Broadwell);
    506e3 (06-5e-03 rev 0xc2, Skylake);
    706a1 (06-7a-01 rev 0x22);
    806e9 (06-8e-09 rev 0x80, Kaby Lake);
    806ea (06-8e-0a rev 0x80);
    906e9 (06-9e-09 rev 0x80, Kaby Lake)
    906ea (06-9e-0a rev 0x80);
    906eb (06-9e-0b rev 0x80)


author: Todd Vierling <todd.vierling@oracle.com> - 1:1.17-25.4.0.1
changelog:
  - Enable early microcode load to allow updating Broadwell model 79
  - Make sure "modprobe microcode" is not executed on Broadwell model 79
  - Run dracut upon microcode update
  - Add updated Intel 20180108 microcode for CPUIDs: {CVE-2017-5715}
    306c3 (06-3c-03 rev 0x23, Haswell);
    306d4 (06-3d-04 rev 0x28, Broadwell);
    306f2 (06-3f-02 rev 0x3b, Haswell);
    306f4 (06-3f-04 rev 0x10, Haswell);
    306e4 (06-3e-04 rev 0x42a, Ivy Bridge);
    40651 (06-45-01 rev 0x21, Haswell);
    40661 (06-46-01 rev 0x18, Haswell);
    40671 (06-47-01 rev 0x1b, Broadwell);
    406e3 (06-4e-03 rev 0xc2, Skylake);
    406f1 (06-4f-01 rev 0xb000025, Broadwell);
    50654 (06-55-04 rev 0x200003c, Skylake);
    50662 (06-56-02 rev 0x14, Broadwell);
    50663 (06-56-03 rev 0x7000011, Broadwell);
    506e3 (06-5e-03 rev 0xc2, Skylake);
    706a1 (06-7a-01 rev 0x22);
    806e9 (06-8e-09 rev 0x80, Kaby Lake);
    806ea (06-8e-0a rev 0x80);
    906e9 (06-9e-09 rev 0x80, Kaby Lake)
    906ea (06-9e-0a rev 0x80);
    906eb (06-9e-0b rev 0x80)


author: Petr Oros <poros@redhat.com> - 1:1.17-25.2
changelog:
  - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
  - Add amd microcode_amd_fam17h.bin data file
  - Resolves: #1527357


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-16
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197738


author: David Sommerseth <davids@redhat.com> - 1.28-11
changelog:
  - Avoid deletion of /dev/null (#1245302)
  - Fix sg_persist returns "Host_status=0x11 is invalid", backport of DID_TRANSPORT_*/DID_TARGET_/DID_NEXUS_FAILURE flags (#886611)


author: David Sommerseth <davids@redhat.com> - 1.28-9
changelog:
  - Added packaging of COPYING (#974147)
  - Removed packaging of INSTALL (info not needed for binary installs)


author: Dan Horák <dan@danny.cz> - 1.28-2
changelog:
  - include rescan-scsi-bus script 1.35
  - rebase patches and add fix for issue mentioned in #538787
  - Related: #538787


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Phil Knirsch <pknirsch@redhat.com> - 1.25-4
changelog:
  - Dropped really unnecessary Provides of sg_utils (#226414)
  - Use --disable-static in configure (#226414)


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Ivana Varekova <varekova@redhat.com> - 1.6f-8
changelog:
  - Resolves: #449272 
    Latest man behaves very strange for non-existing man pages
  - Resolves: #449275
    Unowned directories where man package provides content for


author: Ivana Varekova <varekova@redhat.com> 1.5p-5
changelog:
  - fix bug 146849 - makewhatis from cron produce error message
    "zcat: stdout: Broken pipe" (patch 18)
  - fix makewhatis problem with sections (patch 19)
  - delete strips


author: Ivana Varekova <varekova@redhat.com> 1.5p-2
changelog:
  - fix bug 140178 - correct one typo 
  - fix bug 140202 - problem with makewhatis exit (patch 13)
  - fix bug 140207 - problem with makewhatis -u  (patch 14)
    the fixed version update information about man-pages which 
    are less then one day old (it is used in day update)
    (man-pages may be fixed)
  - fix bug 140729 - makewhatis removed to /usr/sbin  
  - fix bug 146631 - two-part locale dir-name is support (patch 15)
  - changed makewhatis version


author: Adrian Havill <havill@redhat.com> 1.5m2-9
changelog:
  - make sure we touch Makefile timestamp so make doesn't get
    confused and think we haven't run configure
  - replace russian messages (#134387) Thanks to Leonid Kanter


author: Adrian Havill <havill@redhat.com> 1.5m2-6
changelog:
  - reorder MANSECT so that normal pages (with translations) take
    precedence over the English-only POSIX pages (#119554)


author: Adrian Havill <havill@redhat.com> 1.5m2-5
changelog:
  - force use of /usr/bin/gunzip and not /bin/gunzip for compatibility
    with rescue environments (#118087)
  - add POSIX sections to MANSECT in man.config, giving preference to the
    POSIX pages over the non-POSIX


author: Adrian Havill <havill@redhat.com> 1.5m2-4
changelog:
  - direct nroff stderr to /dev/null so no broken pipe err msgs appear
    when the user quits an error page prior to the full display (#117463)
  - removed bogus whatis search-n-destroy trigger (#117961)
  - don't complain about no lang resource when lang is C/POSIX (#108934)


author: Adrian Havill <havill@redhat.com> 1.5m2-2
changelog:
  - add all locale man pages
  - convert all msgs and manpages to utf-8
  - downconvert via transliteration C locale man pages just in case
  - patch #3, #8, #10, #17, #29, #31 no longer needed-- made it upstream
  - patch #9, #14 and #19 now superfluous-- strs already termed and len checked
  - disable patch #22: defer cat creation to existence of dir, not conf directive
  - patch #32 mostly merged upstream. Keep the "-a" in grep though so all
    locales' grep see man pages as text not binary (patch 37)
  - iconv patch no longer needed now that utf-8-to-legacy conversion is not
    needed
  - patch #52 and #53 not needed: CJK all point to nroff instead of groff, let
    the nroff script decide, based on the charset of the environment and/or the
    charset of the man page, as to what parameters to pass to groff (and
    whether iconv preprocessing is necessary)
  - the string "NROFF_OLD_CHARSET", if present in the man.config for the NROFF
    path, will now be replaced by the old character set so that nroff can figure
    out what the character set/encoding is
  - fix man to reflect status codes returned by forked child processes (#115204)
  - lots of makewhatis changes: re-add custom rh client stuff (/usr/bin vs
    /usr/sbin), -o option, /var/cache/man, utf-8 verification, convert the
    encoding spaghetti in the makewhatis awk script to UTF-8, identify languages
    in comments


author: Adrian Havill <havill@redhat.com> 1.5k-12
changelog:
  - restore russian locale (#81929)
  - force utf locale with jnroff (#105764)
  - don't let awk in makewhatis scan files that aren't man pages (#105594)


author: Adrian Havill <havill@redhat.com> 1.5k-11
changelog:
  - Use UTF-8 in makewhatis when searching for non-English versions of the
    phrase "NAME" in man pages
  - add "-o" option to makeis to specify an alternate whatis db location
  - move makewhatis from /sbin to /usr/bin, chmod o+x it as the whatis db is
    writable only by root anyway


author: Adrian Havill <havill@redhat.com> 1.5k-10
changelog:
  - added auto-detect for utf8 and conversion to allow gripes() and others
    to correctly output to some charsets (#88605)


author: Adrian Havill <havill@redhat.com> 1.5k-9
changelog:
  - cleaned up apropos script bugs (#97006)
  - merged all apropos changes into one cleaner patch
  - fix the search/replace for man.conf


author: Adrian Havill <havill@redhat.com> 1.5k-5
changelog:
  - marked man.config as noreplace config (#82088)
  - moved man.config from /usr/share to /etc even though +fhs (#81964)
  - removed bad argcat patch which made bogus grep queries (#82684)


author: Adrian Havill <havill@redhat.com> 1.5j-16
changelog:
  - require groff 1.18 because prev vers don't have -c getopt (#77847)
  - added /usr/local/share/man to MANPATH (#65467)


author: Adrian Havill <havill@redhat.com> 1.5j-14
changelog:
  - don't run trojan sh cmd that have unsafe chars munged (#79289)
  - made apropos command more robust (#62606)


author: Trond Eivind Glomsrød <teg@redhat.com> 1.5i2-6
changelog:
  - set LC_CTYPE, not just LC_MESSAGES. That way, the messages 
    requested can also be displayed (#52978)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.5i2-3
changelog:
  - Restore /var/cache/man directories even if we've built without usecache.
    This allows users to enable catman caching manually (#48762) and shuts
    up tmpwatch (#47784 and its 1000 duplicates)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.5i2-2
changelog:
  - Fix makewhatis interoperability with gawk 3.1.x (#46405)
  - Fix initial creation of whatis database if makewhatis is run with "-u"
    even then (e.g. by cron) (#45646)
  - Fix #45827
  - Require current mktemp (#43134)
  - Fix #42915
  - Fix paths on old distributions (#42031)


author: Harald Hoyer <harald@redhat.de> 1.5i-9
changelog:
  - Some fixes for secure pathnames
  - remove cache directories
  - remove sgid
  - fixed man.1 to refer to man.config(5)
  - fixed makewhatis


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.5i-7
changelog:
  - Fix up another buffer overrun (#42450)
  - Add "`" and "$(" to the list of illegal filename parts in makewhatis (#42450)
  - Add a define toggle to build 5.x and 6.x errata correctly (#42031, #42192)
  -


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.5i-2
changelog:
  - break the configure script. We want man to use less even though it
    can't be found at build time.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.5i-1
changelog:
  - 1.5i (Fixes #23258, #31805, #33276)
  - Fix apropos and whatis for pages that contain non-ascii characters (#21619)
  - Look for legacy whatis databases in $manpath (#33897)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix trailing garbage when a man page doesn't end with a newline (Bug #9026)
  - Look for files in other man directories if the first match isn't
    accessible (Bug #10254)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move whatis database to {cache}/whatis to allow read-only /usr
    filesystems (Bug #18383)
  - Don't use predictable filenames in makewhatis (not reported, spotted while
    fixing 18383)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - gzip the man pages manually - since file doesn't recognize them as
    man pages, the build root policy doesn't do it (Bug #12015)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - default man path is now {_mandir}.  /usr/man maintained for compat.
  - remove +sgid option to allow builds as a normal user.  SPEC file maintains
    proper permissions.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.5h1 - this has a better fix for the security problems.
  - remove manpath patch (now in base)
  - remove loop patch (now in base)


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to man-1.4j, which fixes some security problems; release 1 is
    for RH 4.2, release 2 is for glibc


author: Kyle McMartin <kmcmarti@redhat.com> - 3.2.21.1-1
changelog:
  - update to 3.2.21.1, linked to 3.2.1.0 based on Brocade's submission
    for 3.11 ( http://marc.info/?l=linux-scsi&m=136843872927453&w=2 )
    Resolves: rhbz#928990


author: Kyle McMartin <kmcmarti@redhat.com> 3.1.2.1-1
changelog:
  - update to 3.1.2.1
  - add some shell functions to make life easier for multi-versioned firmware
    filenames that are now upstream


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.67.rc1
changelog:
  - Change EDNS flags only after successful query (#1416035)
  - Fix crash in ldap driver at bind-sdb stop (#1426626)


author: Ville Skyttä <ville.skytta@iki.fi> - 7.4-1
changelog:
  - Update to 7.4, fixes #215927 and #466353.
  - Patch spectool to make -s and -p to work as documented (Todd Zullinger).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add rpmdev-packager - script for getting rpm packager info.
  - Use rpmdev-packager in rpmdev-bumpspec and rpmdev-init.el.
  - Fix rpmdev-extract MIME type comparisons with file(1) output containing
    parameters.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Improve newspec/newinit when only "-o foo" argument is given (#498588,
    thanks to Edwin ten Brink).
  - Try to get packager mail address for *Emacs rpm-spec-mode from ~/.fedora.cert
    if rpm-spec-user-mail-address is not set.
  - Add xz support to rpmdev-extract.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add rpmdev-newinit for easier access to the init script template, move the
    template to %{_sysconfdir}/rpmdevtools, improve reload action example.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Use %global instead of %define in spec templates.
  - Handle %global in addition to %define in rpmdev-bumpspec.


author: Ville Skyttä <ville.skytta@iki.fi> - 7.0-1
changelog:
  - 7.0.
  - Drop fonts spec template, adapt to new ones from Fedora fonts SIG (#477055).
  - Add man page for rpmdev-newspec.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add vamp-plugin-sdk to internal list of non-devel packages in rmdevelrpms
    (#472641, Michael Schwendt).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add -r/--rightmost option to rpmdev-bumpspec (ticket #1, Thorsten Leemhuis).
  - Add %packager from rpm config to the set of defaults for rpmdev-bumpspec's
    user string.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Remove duplicate "reload" from case block in init script template.
  - Fix exit status of "reload" in case service is not running in init
    script template (#442993).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Remove libgcj-devel and zlib-devel from rmdevelrpms' internal exclusion
    list, they're not essential on non-devel systems any more.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add fonts spec template from the Fedora Fonts SIG (#407781).
  - Add option to use macro style instead of shell style variables to newspec.
  - Prefer ~/.config/rpmdevtools/rmdevelrpms.conf over ~/.rmdevelrpmsrc in
    rmdevelrpms.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Fix Epoch handling in the 2-arg form of rpmdev-vercmp with yum < 3.1.2.
  - The long form of the list option in rmdevelrpms is --list-only, not --list.


author: Ville Skyttä <ville.skytta@iki.fi> - 6.0-1
changelog:
  - Remove check-{buildroot,rpaths*}, now included in rpm-build >= 4.4.2.1.
  - Drop explicit dependency on patch, pulled in by recent rpm-build.
  - Add cmake and scons to default devel package list in rpmdev-rmdevelrpms.
  - Add LSB comment block to init script template.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add 2-argument form for comparing EVR strings to rpmdev-vercmp
    (available only if rpmUtils.miscutils is available).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Include rpmsodiff and dependencies (rpmargs, rpmelfsym, rpmfile, rpmpeek,
    rpmsoname) from ALT Linux's qa-robot package.
  - Include rpmls (#213778).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - BR perl(ExtUtils::MakeMaker) by default in perl spec template.
  - Drop deprecated backwards compatibility with fedora-rpmdevtools.
  - Update URL.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Arch-qualify output of matched packages in rmdevelrpms and allow
    arch-qualified packages in the config file.


author: Ville Skyttä <ville.skytta@iki.fi> - 5.2-1
changelog:
  - Skip *.jar.so.debug in check-buildroot (#208903).
  - Treat yasm and *-static as devel packages in rmdevelrpms.


author: Ville Skyttä <ville.skytta@iki.fi> - 5.1-1
changelog:
  - Re-add PHP PEAR spec template, more improvements to it (#198706,
    Christopher Stone, Remi Collet).


author: Ville Skyttä <ville.skytta@iki.fi> - 5.0-1
changelog:
  - Re-rename almost everything to rpmdev-*, with backwards compat symlinks.
  - Don't encourage %ghost'ing *.pyo in Python spec template, add some comments.
  - Drop PHP PEAR spec template, it's not ready yet.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Treat *-sdk as devel packages in rmdevelrpms (#199909).
  - Don't assume compface is a devel package in rmdevelrpms.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Move option arguments to "find" before non-option ones in Perl spec template.
  - Drop python-abi dependency from Python spec template (#189947).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Drop fedora- prefix everywhere, add backcompat symlinks for execubtables.
  - Move %{_sysconfdir}/fedora to %{_sysconfdir}/rpmdevtools and
    %{_datadir}/fedora to %{_datadir}/rpmdevtools.
  - Move spec templates to %{_sysconfdir}/rpmdevtools, mark as config.
  - Bump version to 5.0.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Drop fedora-kmodhelper.
  - Drop fedora-installdevkeys and GPG keys, modify rpmchecksig to use
    the system rpmdb.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add manual pages for rmdevelrpms, diffarchive and extract.
  - Trim pre-2005 changelog entries.
  - Autotoolize source tree.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3-1
changelog:
  - check-rpaths-worker: detect when RPATH references the parent directory
    of an absolute path (#169298, Enrico Scholz).
  - Add regression test for check-rpaths* (#169298, Enrico Scholz).
  - Honor user's indent-tabs-mode setting in fedora-init.el (#170902).


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2-1
changelog:
  - check-buildroot: grep for buildroot as a fixed string, not a regexp.
  - Update FSF's address in copyright notices.
  - check-rpaths-worker: allow multiple $ORIGIN paths in an RPATH and allow
    RPATHs which are relative to $ORIGIN (#169298, Enrico Scholz).
  - check-rpaths-worker: give out an hint about usage and the detected issues
    at the first detected error (Enrico Scholz).
  - Remove some redundancy from the Perl spec template.
  - Teach fedora-newrpmspec to detect and use different specfile variants.
  - Use fedora-newrpmspec in fedora-init.el.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.1-1
changelog:
  - Drop more pre-FC2 compat stuff from Perl spec template.
  - Treat gcc-gfortran as a devel package in rmdevelrpms.
  - Drop fedora.us GPG key.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0-1
changelog:
  - Make fedora-diffarchive work better with archives containing dirs without
    read/execute permissions.
  - Sync "Epoch: 0" drops with Fedora Extras CVS.
  - Include Nils Philippsen's spectool.
  - Own (%ghost'd) more dirs from the site-lisp dir hierarchies.
  - Drop trigger support pre-FC2 Emacs and XEmacs packages.
  - Drop rpm-spec-mode.el patch, no longer needed for FC2 Emacs and later.
  - Update URLs.
  - Drop developer GPG keys from the package, add Fedora Extras key.
  - Drop fedora-pkgannfmt, it's no longer relevant.
  - Remove pre-FC2 compatibility stuff from Perl spec template.
  - Don't try to remove gcc-java and related packages by default in rmdevelrpms.
  - Remove "full featured" spec template, convert newrpmspec to use -minimal.


author: Ville Skyttä <ville.skytta@iki.fi> - 0:0.3.1-1
changelog:
  - Make buildrpmtree and wipebuildtree less dependent on a specific
    configuration (#147014, Ignacio Vazquez-Abrams).


author: Ville Skyttä <ville.skytta@iki.fi> - 0:0.3.0-1
changelog:
  - Remove 0.fdr. prefixes and epoch 0's from all spec templates.
  - Add try-restart action to init script template.
  - Remove deprecated fedora-diffrpm and fedora-unrpm.
  - Install check-* to %{_prefix}/lib/rpm instead of %{_libdir}/rpm (bug 2351).
  - Check both %{_prefix}/lib and %{_prefix}/lib64 in the xemacs trigger.
  - Update rpminfo to 2004-07-07-01 and include it in the tarball.


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-23
changelog:
  - pam_succeed_if: properly work with large uids
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - pam_access: check for (group) match first (#1359303)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-22
changelog:
  - pam_tally2: added no_lockf_timeout option, do not use it
  - pam_tally2: added debug option
  - pam_tally2: do not create the log file as executable (#1186361)
  - add manpage symlink for environment(5) (#1110258)
  - pam_group: add support for Development/Debug syntax (#1114220)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix wrong `man' program option (incompatibility between man and man-db packages)
    by using `groff' program instead for parsing troff files (#718498)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-5
changelog:
  - Add *.xz, *.lzma (both for compressed man pages as well), *.jar and *.nbm
    read support to lesspipe.sh
    Resolves: #718498


author: Jindrich Novy <jnovy@redhat.com> 394-2
changelog:
  - apply better fix for #120916 from Avi Kivity (#177819)
    to avoid flickering when '>' is pressed multiple times


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix korean #79977
  - add new less.sh from #89780, s/ko/korean/ and write .csh script
  - add patch from #91661: /japanses/japanese-euc/


author: Karsten Hopp <karsten@redhat.de> 378-5
changelog:
  - removed older, unused patches
  - add patch from Yukihiro Nakai to fix display of japanese text
    (#79977)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - less-378
  - added some debian patches
  - show image info instead of binary garbage when viewing images


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - update URLs
  - Copyright -> License
  - fix #43348 (crashes when searching for /<)
  - fix #39849 (
    _ ignores LESSCHARDEF in displaying characters,
    _ prefaces sequences of one or "high" characters with a capital "A")


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up messed output if a user outputs anything in ~/.bashrc or the
    likes (Bug #9443)
  - handle RPM_OPT_FLAGS


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to v346
  - Update download URL
  - use the configure marcro
  - strip binary
  - fix up lesspipe stuff (Bug #8750 and a couple of non-reported bugs)
    (Karsten, did I mention I'll kill you when you return from SAP? ;) )


author: Jacob Wang <jacob.wang@oracle.com> - 3.2.29-69.0.1
changelog:
  - Bug13869 Fix the CVE duplicate entries problem. (leon.w.wang@oracle.com)
  - Revert bug tracker URL to http://yum.baseurl.org/report by
    disable BZ-528738-bugtracker.patch that changed the URL to the redhat specific one.
    [bug 11713265] (john.haxby@oracle.com)
  - Add kernel-uek packages to install only list (john.haxby@oracle.com)
  - Add uln.patch to fix repository not found [bug 12614512] (leon.w.wang@oracle.com)
  - Add kernel-uek-firmware package to install only list [orabug 13535055]


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-108
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).
    (#725348)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-106
changelog:
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#680837)
  - plipconfig man page and usage output fixes (#694766)
  - Add -A,--all-fqdns and -I,--all-ip-addresses options to hostname (#705110)
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (#708538)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-105
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since RHEL-6.1 network devices can have arbitrary names (#682368)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-103
changelog:
  - improved statistics-doubleword.patch (Bug #580054)
  - improved netstat(8) man page (#614931)
  - HFI support (#633506)
  - fixed memory leak in netstat when run with -c option (#634539)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-102
changelog:
  - fixed statistics.c to use unsigned long long (instead of int) to handle 64 bit integers (Bug #580054)
  - fixed typo in statistics.c
  - interface slip: cast keepalive/outfill to unsigned long to fix warnings on 64bit hosts
  - interface: fix IPv6 parsing of interfaces with large indexes (> 255)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-99
changelog:
  - return defining of BuildRoot even it's no longer necessary
    (https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRoot_tag)
    to silent rpmlint false warning


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-97
changelog:
  - Make "hostname -s" display host name cut at the first dot (no
    matter if the host name resolves or not) (bug #531702)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-96
changelog:
  - netplug moved to separate package
  - #319981 and #322901 - minor man pages changes
  - applied changes from berlios cvs, which fix: Berlios #16232, Gentoo #283759 and polish Makefile and slattach


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-95
changelog:
  - netstat - avoid name resolution for listening or established sockets (-l) by return fast. 
  - netstat - --continuous should flush stdout
  - added missing man pages (iptunnel, ipmaddr, netplug, netplug.d, netplugd.conf)
  - added note about obsolete commands to existing man pages 
  - let the user know that ifconfig can correctly show only first 8 bytes of Infiniband hw address


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-93
changelog:
  - scanf format length fix (non exploitable?) from Fabian Hugelshofer <hugelshofer2006@gmx.ch>
  - URL tag changed to http://net-tools.berlios.de/


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.60-89
changelog:
  - fixed man pages for arp (#446195)
  - fixed netstat --interfaces option (#446187)
  - fixed clearing flags in ifconfig (#450252)


author: Radek Vokal <rvokal@redhat.com> 1.60-57
changelog:
  - add note to hostname man page about gethostbyname() (#166581)
  - don't ship any rarp man page (#170537)


author: Radek Vokal <rvokal@redhat.com> 1.60-52
changelog:
  - don't show "duplicate line" warning (#143933)
  - netstat has new statistcs (#133032)
  - /etc/neplug is owned by net-tools (#130621)


author: Radek Vokal <rvokal@redhat.com> 1.60-50
changelog:
  - added mii-diag tool
  - added newer ether-wake
  - remove useless -i option from ifconfig
  - stop trimming interface names (#152457)


author: Radek Vokal <rvokal@redhat.com> 1.60-48
changelog:
  - behaviour of netstat -i option changed (#115987)
  - netstat -i shows all interface, -I<Iface> only one


author: Radek Vokal <rvokal@redhat.com> 1.60-44
changelog:
  - net-plug-1.2.9 - no changes, upstream included Red Hat patches
  - ether-wake-1.08 - few changes in implementation (#145718)


author: Radek Vokal <rvokal@redhat.com> 1.60-43
changelog:
  - don't report statistics for virtual devices (#143981) <kzak@redhat.com>
  - fixing translation headers - content type format
  - kill bitkeeper warning messages


author: Radek Vokal <rvokal@redhat.com> 1.60-40
changelog:
  - mii-tool(8) fixed, labeled as obsolete, added info (#138687)
  - netstat crashing on i64 fixed (#138804) Patch by <Andreas.Hirstius@cern.ch>


author: Radek Vokal <rvokal@redhat.com> 1.60-39
changelog:
  - IBM patch for netstat -s returning negative values on 64bit arch (#144064)
  - broadcast calulated if only netmask provided (#60509)


author: Radek Vokal <rvokal@redhat.com> 1.60-38
changelog:
  - fixed fail to assign the specified netmask before adress is assigned
  - patch by Malita, Florin <florin.malita@glenayre.com>


author: Phil Knirsch <pknirsch@redhat.com> 1.60-27
changelog:
  - Fixed compiler warning/error in netplug.
  - Updated to netplug-1.2.6 for security update and fixes.


author: Phil Knirsch <pknirsch@redhat.com> 1.60-19
changelog:
  - Fixed trailing blank bug in hostname output (#101263).
  - Remove -O2 fir alpha (#78955).
  - Updated netstat statistic output, was still broken.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added inet6-lookup patch from John van Krieken (#84108).
  - Fixed outdated link in ifconfig manpage (#91287).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed incorrect address display for ipx (#46434).
  - Fixed wrongly installed manpage dirs (#50664).


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix nstrcmp() to be correct in the case where there are many devices 
    of the same type, eg, "eth10" > "eth1"  (#61436)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.57.
  - MTU (and other) option(s) not parsed correctly (#9215).
  - allow more granularity iwth --numeric (#9129).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.50.
  - added slattach/plipconfig/ipmaddr/iptunnel commands.
  - enabled translated man pages.


author: Tim Waugh <twaugh@redhat.com> 2.8.1-25
changelog:
  - Only try to install the info file if it exists so that package
    installation does not fail with --excludedocs (bug #515919).


author: Tim Waugh <twaugh@redhat.com> 2.8.1-20
changelog:
  - Converted spec file to UTF-8 (bug #225696).
  - Fixed summary (bug #225696).
  - Fixed PreReq (bug #225696).
  - Removed Prefix (bug #225696).
  - Fixed build root (bug #225696).
  - Avoid %makeinstall (bug #225696).
  - Fixed license tag (bug #225696).


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.3.0-1
changelog:
  - Release 0.3.0
  -  Fix handling of continuation lines
  -  Fix DEFAULT handling
  -  Fix picking/unpickling


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.2.4-1
changelog:
  - Release 0.2.4:
  -   Updated to work with Python-2.6 (Python-2.4 and 2.5 are still supported)
  -   Support for files opened in unicode mode
  -   Fixed Python-3.0 compatibility warnings
  -   Minor API cleanup


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.2.2-1
changelog:
  - Updated to release 0.2.2
  - removed patch to to fix problems with out commented lines, included in upstream source


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.2.1-4
changelog:
  - Added some logic to get the right python-setuptools buildrequeres
  - based on the fedora version, to make the same spec file useful in
  - all fedora releases.


author: Brian Maly <brian.maly@oracle.com> [4.1.12-37.6.3.el6uek]
changelog:
  - tcp: make challenge acks less predictable (Eric Dumazet)  [Orabug: 24010103] [Orabug: 2401010]  {CVE-2016-5696}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-37.6.2.el6uek]
changelog:
  - KEYS: potential uninitialized variable (Dan Carpenter)  [Orabug: 24393865]  {CVE-2016-4470} 
  - ovl: fix permission checking for setattr (Miklos Szeredi)  [Orabug: 24393742]  {CVE-2015-8660}


author: Laine Stump <laine@redhat.com> - 0.2.4-3
changelog:
  - resolves rhbz#1208894
   - Remove extraneous single quotes from IPV6ADDR_SECONDARIES
   - resolves rhbz#1208897
   - Bad parsing of network-scripts/ifcfg-xxxx files
   - resolves rhbz#1165966
   - resolves CVE-2014-8119
   - augeas path expression injection via interface name


author: Laine Stump <laine@redhat.com> - 0.2.4-2
changelog:
  - resolves rhbz#1113978
   - Fix name of DHCPV6C variable in ifcfg files
   - resolves rhbz#1116314
   - Fix netmask for prefix == 32
   - apply patches to source with git rather than patch


author: Laine Stump <laine@redhat.com> - 0.2.4-1
changelog:
  - rebase to netcf-0.2.4
   - resolves rhbz#851748
   - avoid use of uninitialized data when getting mac address
     resolves rhbz#1052156
   - eliminate duplicate quotes in bonding options
   - resolves rhbz#879055
   - wait for IFF_UP and IFF_RUNNING after calling ifup
   - don't require IFF_RUNNING for bridge devices
   - avoid memory leak in debian when listing interfaces
   - limit interface names to IFNAMSIZ-1 characters in length
   - support systemd for netcf-transaction


author: Laine Stump <laine@redhat.com> - 0.1.9-4
changelog:
  - resolves rhbz#844578
    - check IFF_RUNNING before considering and interface "active"
    - resolves rhbz#848722
    - fix ipcalc_netmask


author: Laine Stump <laine@redhat.com> - 0.1.9-3
changelog:
  - resolves rhbz#886862
    - libnl addr and link caches are not thread-safe, leading to
      libvirtd crashes


author: Laine Stump <laine@redhat.com> - 0.1.9-2
changelog:
  - resolves rhbz#728184
    - eliminate potential use of uninitialized index/pointer in add_bridge_info
    - resolves rhbz#736920
    - resolves rhbz#739505
    - fix missing vlan/bond/ethernet info in dumpxml --live


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - rebase to netcf-0.1.9
    - resolves rhbz#616060
    - always add <bridge> element to bridge, even if there is no physdev present
    - resolves rhbz#713180
    - don't log error if interface isn't found in kernel during status report
    - resolves rhbz#713286
    - update gnulib


author: Laine Stump <laine@redhat.com> - 0.1.8-1
changelog:
  - rebase to netcf-0.1.8
    - resolves rhbz#616060
    - show ifup output in relevant error message
    - resolves rhbz#662057
    - pkgconfig file should not list augeas, libxml or libxslt
    - resolves rhbz#681078
    - Need to input 'quit' twice to quit ncftool after an erroneous command
    - resolves rhbz#703318
    - %desc field in specfile has a typo
    - resolves rhbz#705061
    - rebase netcf for RHEL6.2
    - resolves rhbz#708476
    - RFE: transaction-oriented API for handling host interfaces


author: Laine Stump <laine@redhat.com> - 0.1.7-1
changelog:
  - rebase to netcf-0.1.7
    - Resolves: rhbz#651032
    - remove all iptables manipulation
    - Resolves: rhbz#633346
    - Resolves: rhbz#629206


author: Laine Stump <laine@redhat.com> - 0.1.6-4
changelog:
  - install missing sysconfig.aug file
  - Resolves: rhbz#613886
  - Don't delete the physical interface config when defining a vlan
  - Resolves: rhbz#585112


author: Laine Stump <laine@redhat.com> - 0.1.6-2
changelog:
  - make miimon/arpmon in bond definitions optional
  - Resolves: rhbz#585108
  - properly deal with initializing a 0 length /etc/sysconfig/iptables file
  - Resolves: rhbz#582905


author: Thorsten Leemhuis <fedora[AT]leemhuis.info> - 2.0.1-6
changelog:
  - Remove dist
  - rebuild, because the older version was much bigger, as it was build when
    distutils was doing static links of libpython


author: Thorsten Leemhuis <fedora at leemhuis dot info> - 0:2.0.1-1
changelog:
  - Update to 2.0.1
  - Use Dist
  - Drop python-crypto-64bit-unclean.patch, similar patch was applied 
    upstream


author: Panu Matilainen <pmatilai@welho.com> 0.3.2-0.fdr.2.a6
changelog:
  - generate .pyo files during install
  - require exact version of python used to build the package
  - include more docs + demos
  - fix dependency on /usr/local/bin/python
  - use fedora.us style buildroot
  - buildrequires gmp-devel
  - use description from README


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-1
changelog:
  - update to 2.8.15
  - update cracklib-words to the current version (2008-05-07)
  - fixup URLs for various dictionary sources that we use
  - fix freeing-an-uninitialized-pointer in the python module (SF#2907102)
  - add a disttag


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.13-1
changelog:
  - update to 2.8.13, which overhauls the python bindings and revises
    FascistCheck()'s behavior:
    2.8.12 success: returns None, fail: returns error text, other: exceptions
    2.8.13 success: returns candidate, fail: throws ValueError, other: exceptions


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.12-1
changelog:
  - update to 2.8.12, which was relicensed to GPLv2
  - package the now-bundled cracklib-small dictionary in cracklib-dicts


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-11
changelog:
  - improve reports of out-of-memory exceptions so that they don't include a
    bogus filename
  - improve reports of file-missing exceptions from the python module so that
    they give the right filename (#225858)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-10
changelog:
  - explicitly include required headers from <packer.h> (#228698)
  - attempt to provide doc strings in the python module


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-9
changelog:
  - drop final "." from summaries (Jef Spaleta, #225659)
  - drop static library from -devel subpackage (Jef Spaleta, #225659)
  - note that the most recently-added wordlist came from bugzilla (#225659)
  - remove explicit dependency on gzip, as it's implicit (Jef Spaleta, #225659)
  - convert %triggerpostun to not use a shell as an interpreter (#225659)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-7
changelog:
  - fix check for the existence of dictionaries when the caller specifies a
    location (#224347, upstream #1644628)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-2
changelog:
  - update to 2.8.9
  - only create compat symlinks for the dictionaries if we aren't installing
    them into the old locations


author: Nalin Dahyabhai <nalin@redhat.com> 2.8.1-1
changelog:
  - update to 2.8.1
    - moves dictionary to new default location under %{_datadir} -- the
      dictionary format is the same across all architectures
    - renames "packer" to "cracklib-packer"
  - conflict with cracklib-dicts < 2.8, where the on-disk format was not
    compatible on 64-bit arches due to now-fixed cleanliness bugs
  - move binaries for manipulating and checking words against dictionaries
    from -dicts into the main package


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-29
changelog:
  - correctly build on 64-bit systems (part of #143417)
  - patch so that 32- and 64-bit libcrack can read dictionaries which were
    incorrectly generated on 64-bit systems of the same endianness (more #143417)
  - include a sample cracklib magic file
  - stop using /usr/dict/* when building the dictionary
  - list words as a build requirement, which it is, instead of a run-time
    requirement
  - provide a virtual arch-specific dep in cracklib-dicts, require it in
    cracklib (part of #143417)


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-25
changelog:
  - fix ldconfig invocation in trigger for older versions which included the
    soname symlink (#114620)


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-24
changelog:
  - include packer.h for reading dictionaries directly, since we already include
    packer in the -dicts subpackage (#68339)
  - don't include the soname symlink in the package, let ldconfig do its job


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-12
changelog:
  - remove cruft that ldconfig already knows how to manage
  - don't explicitly strip anything -- the brp setup decides that
  - tweak the header so that it can be used in C++ (#46685)
  - buildprereq the words package


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 3.9-25.0.1
changelog:
  - Treat builtin modules as already loaded (John Haxby) [orabug 13851649]
    And don't create modules.builtin.bin if there is no modules.builtin


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.7.el6]
changelog:
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.6.el6]
changelog:
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.5.el6]
changelog:
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.1.el6]
changelog:
  - [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
  - [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
  - [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
  - [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
  - [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
  - [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
  - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.17.1.el6]
changelog:
  - [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.16.1.el6]
changelog:
  - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
  - [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
  - [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
  - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
  - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.15.1.el6]
changelog:
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.14.1.el6]
changelog:
  - [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.13.1.el6]
changelog:
  - [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
  - [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.12.1.el6]
changelog:
  - [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.10.1.el6]
changelog:
  - [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
  - Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
  - [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
  - [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
  - [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
  - [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
  - [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
  - [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
  - [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.9.1.el6]
changelog:
  - [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.8.1.el6]
changelog:
  - [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
  - [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.7.1.el6]
changelog:
  - [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.6.1.el6]
changelog:
  - [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
  - [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
  - [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
  - [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
  - [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.5.1.el6]
changelog:
  - [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
  - [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.4.1.el6]
changelog:
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.3.1.el6]
changelog:
  - [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
  - [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
  - [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
  - [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
  - [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
  - [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.2.1.el6]
changelog:
  - [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
  - [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
  - [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
  - [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.1.1.el6]
changelog:
  - [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
  - [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
  - [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
  - [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-696.el6]
changelog:
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-694.el6]
changelog:
  - [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
  - [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
  - [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
  - [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
  - [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
  - [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
  - [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
  - [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
  - [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
  - [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
  - [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
  - [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
  - [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
  - [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
  - [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
  - [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
  - [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
  - [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
  - [block] ensure request->part is valid (Jeff Moyer) [1416341]
  - [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-693.el6]
changelog:
  - [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
  - [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
  - [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
  - [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
  - [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
  - [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
  - [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
  - [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
  - [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-692.el6]
changelog:
  - [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
  - [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-691.el6]
changelog:
  - [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
  - [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
  - [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
  - [net] ipv6: stop sending PTB packets for MTU < 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
  - [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-690.el6]
changelog:
  - [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
  - [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-687.el6]
changelog:
  - [netdrv] sfc: reduce severity of PIO buffer alloc failures (Jarod Wilson) [1410750]
  - [netdrv] sfc: avoid division by zero (Jarod Wilson) [1410750]
  - [netdrv] sfc: Insert multicast filters as well as mismatch filters in promiscuous mode (Jarod Wilson) [1410750]
  - [netdrv] sfc: get timer configuration from adapter (Jarod Wilson) [1410750]
  - [netdrv] sfc: warn if other functions have been reset by MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: add output flag decoding to efx_mcdi_set_workaround (Jarod Wilson) [1410750]
  - [netdrv] sfc: get PIO buffer size from the NIC (Jarod Wilson) [1410750]
  - [netdrv] sfc: set interrupt moderation via MCDI (Jarod Wilson) [1410750]
  - [netdrv] sfc: allow asynchronous MCDI without completion function (Jarod Wilson) [1410750]
  - [netdrv] sfc: on MC reset, clear PIO buffer linkage in TXQs (Jarod Wilson) [1410750]
  - [netdrv] sfc: Downgrade EPERM messages from MCDI to debug (Jarod Wilson) [1410750]
  - [netdrv] sfc: cope with ENOSYS from efx_mcdi_get_workarounds() (Jarod Wilson) [1410750]
  - [netdrv] sfc: enable cascaded multicast filters in MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: work around TRIGGER_INTERRUPT command not working on SFC9140 (Jarod Wilson) [1410750]
  - [dm] raid: fix transient device failure processing (Mike Snitzer) [1404425]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-686.el6]
changelog:
  - [scsi] Add intermediate STARGET_REMOVE state to scsi_target_state (Ewan Milne) [1349623]
  - [scsi] restart list search after unlock in scsi_remove_target (Ewan Milne) [1349623]
  - [powerpc] pci: Support per-aperture memory offset (Laurent Vivier) [1413448]
  - [powerpc] pci: Don't add bogus empty resources to PHBs (Laurent Vivier) [1413448]
  - [mm] mmap.c: fix arithmetic overflow in __vm_enough_memory() (Jerome Marchand) [1413500]
  - [net] ping: check minimum size on ICMP header length (Mateusz Guzik) [1414202] {CVE-2016-8399}
  - [scsi] sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Ewan Milne) [1414823] {CVE-2016-10088 CVE-2016-9576}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-685.el6]
changelog:
  - [kernel] ftrace: Do not function trace inlined functions (Pratyush Anand) [1413456]
  - [x86] paravirt: Do not trace _paravirt_ident_*() functions (Pratyush Anand) [1413456]
  - [netdrv] i40e: Fix for long link down notification time (Stefan Assmann) [1414274]
  - [scsi] megaraid_sas: fix done in queue_command (Tomas Henzl) [1415192]
  - [scsi] megaraid: fixes (Tomas Henzl) [1415192]
  - [netdrv] ixgbe: Add support for new X557 device (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add KR backplane support for x550em_a (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for SGMII backplane interface (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for SFPs with retimer (Ken Cox) [1408509]
  - [netdrv] ixgbe: Introduce function to control MDIO speed (Ken Cox) [1408509]
  - [netdrv] ixgbe: Read and set instance id (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for x550em_a 10G MAC type (Ken Cox) [1408509]
  - [netdrv] ixgbe: Use method pointer to access IOSF devices (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for single-port X550 device (Ken Cox) [1408509]
  - [netdrv] ixgbe: Clean up interface for firmware commands (Ken Cox) [1408509]
  - [netdrv] ixgbe: Change the lan_id and func fields to a u8 to avoid casts (Ken Cox) [1408509]
  - [netdrv] ixgbe: Fix flow control for Xeon D KR backplane (Ken Cox) [1408509]
  - [netdrv] ixgbe: Make all unchanging ops structures const (Ken Cox) [1408509]
  - [netdrv] ixgbe: Update PTP to support X550EM_x devices (Ken Cox) [1408509]
  - [netdrv] ixgbe: convert to CYCLECOUNTER_MASK macro (Ken Cox) [1408509]
  - [netdrv] ixgbevf: add VF support for new hardware (Ken Cox) [1408507]
  - [netdrv] ixgbevf: Support Windows hosts (Hyper-V) (Ken Cox) [1408507]
  - [netdrv] ixgbevf: Add the device ID's presented while running on Hyper-V (Ken Cox) [1408507]
  - [netdrv] ixgbevf: Move API negotiation function into mac_ops (Ken Cox) [1408507]
  - [x86] tsc: Reset cycle_last after resume from S3/S4 (Lenny Szubowicz) [1406468]
  - [kernel] hung_task: allow hung_task_panic when hung_task_warnings is 0 (Waiman Long) [1410297]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-684.el6]
changelog:
  - [s390] kernel/ap: Fix hang condition on crypto card config-off (Hendrik Brueckner) [1413552]
  - [s390] zcrypt: Improved invalid domain response handling (Hendrik Brueckner) [1406389]
  - [infiniband] ucm: Fix bitmap wrap when devnum > IB_UCM_MAX_DEVICES (Slava Shwartsman) [1413476]
  - [netdrv] mlx5e: Copy all L2 headers into inline segment (Kamal Heib) [1408937]
  - [netdrv] be2net: fix MAC addr setting on privileged BE3 VFs (Ivan Vecera) [1406659]
  - [netdrv] be2net: don't delete MAC on close on unprivileged BE3 VFs (Ivan Vecera) [1406659]
  - [netdrv] be2net: fix status check in be_cmd_pmac_add() (Ivan Vecera) [1406659]
  - [acpi] acpica: Tables: Update FADT handling (Lenny Szubowicz) [1408401]
  - [acpi] acpica: ACPI 6.0: Add changes for FADT table (Lenny Szubowicz) [1408401]
  - [acpi] acpica: Basic support for FADT version 5 (Lenny Szubowicz) [1408401]
  - [acpi] acpica: Remove use of unreliable FADT revision field (Lenny Szubowicz) [1408401]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-683.el6]
changelog:
  - [netdrv] sfc: include size-binned TX stats on sfn8542q (Jarod Wilson) [1411279]
  - [netdrv] sfc: retrieve second word of datapath capabilities (Jarod Wilson) [1411279]
  - [netdrv] sfc: update MCDI protocol headers (Jarod Wilson) [1411279]
  - [netdrv] sfc: Update MCDI protocol definitions (Jarod Wilson) [1411279]
  - [net] mlx4_en: Fix type mismatch for 32-bit systems (Slava Shwartsman) [1399239]
  - [net] mlx4_en: Resolve dividing by zero in 32-bit system (Slava Shwartsman) [1399239]
  - [netdrv] e1000e: Initial support for KabeLake (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Clear ULP configuration register on ULP exit (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Set HW FIFO minimum pointer gap for non-gig speeds (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Increase PHY PLL clock gate timing (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Increase ULP timer (Jarod Wilson) [1406917]
  - [netdrv] e1000e: initial support for i219-LM (3) (Jarod Wilson) [1406917]
  - [netdrv] be2net: fix unicast list filling (Ivan Vecera) [1408247]
  - [netdrv] be2net: fix accesses to unicast list (Ivan Vecera) [1408247]
  - [netdrv] sfc: Downgrade or remove some error messages (Jarod Wilson) [1410750]
  - [netdrv] be2net: call be_set_uc_list() unconditionally (Ivan Vecera) [1402679]
  - [netdrv] mlx5e: Use hw_features through netdev_extended macro (Kamal Heib) [1385318]
  - [block] nvme: Don't stop kthread while clearing queues (David Milburn) [1399431]
  - [fs] dlm: Fix saving of NULL callbacks (Robert S Peterson) [1264492]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-682.el6]
changelog:
  - [x86] kdump: Fix several bound checking error of crashkernel reserving (Baoquan He) [1349069]
  - [x86] kdump: Crashkernel auto reservation failed on large system (Baoquan He) [1349069]
  - [kdump] Fix wrong dmi_present argument in case efi_smbios_addr being used (Dave Young) [1404984]
  - [kdump] Add error check in case dmi_get_system_info return null (Dave Young) [1404984]
  - [netdrv] bnxt_en: Improve the delay logic for firmware response (John Linville) [1406129]
  - [netdrv] bnxt_en: Implement proper firmware message padding (John Linville) [1406129]
  - [netdrv] bnxt_en: Refactor _hwrm_send_message() (John Linville) [1406129]
  - [netdrv] bnxt_en: Fix dmesg log firmware error messages (John Linville) [1406129]
  - [netdrv] bnxt_en: Use firmware provided message timeout value (John Linville) [1406129]
  - [fs] nfs: Allow getattr to also report readdirplus cache hits (Scott Mayhew) [1325766]
  - [fs] nfs: Be more targeted about readdirplus use when doing lookup/revalidation (Scott Mayhew) [1325766]
  - [fs] nfs: Fix a performance regression in readdir (Scott Mayhew) [1325766]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-681.el6]
changelog:
  - [net] udplite: fast-path computation of checksum coverage (Hangbin Liu) [1404127]
  - [ata] libata: fix sff host state machine locking while polling (Cathy Avery) [1390972]
  - [ata] libata-sff: use WARN instead of BUG on illegal host state machine state (Cathy Avery) [1390972]
  - [x86] hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic (Vitaly Kuznetsov) [1400428]
  - [fs] nfsd4: zero op arguments beyond the 8th compound op (J. Bruce Fields) [1409002]
  - [fs] nfsd: fix deadlock secinfo+readdir compound (J. Bruce Fields) [1314505]
  - [fs] nfsd4: fix recovery-dir leak on nfsd startup failure (J. Bruce Fields) [1266405]
  - [x86] Mark Skylake processors with Kaby Lake PCH as unsupported (David Arcari) [1405459]
  - [infiniband] ipoib: Remove can't use GFP_NOIO warning (Slava Shwartsman) [1321529]
  - [netdrv] veth: allow changing the mac address while interface is up (David Arcari) [1402696]
  - [kernel] tracing: Protect tracer flags with trace_types_lock (Steven Rostedt) [1397661]
  - [acpi] acpica: Prevent circular object list in acpi_ns_exec_module_code (Lenny Szubowicz) [1401776]
  - [acpi] acpica: Fix possible memory leak for module-level code execution (Lenny Szubowicz) [1401776]
  - [acpi] acpica: Add additional module-level code support (Lenny Szubowicz) [1401776]
  - [fs] xfs: growfs: use uncached buffers for new headers (Bill O'Donnell) [1134314]
  - [fs] xfs: catch invalid negative blknos in _xfs_buf_find() (Bill O'Donnell) [1134314]
  - [fs] xfs: fix _xfs_buf_find oops on blocks beyond the filesystem end (Bill O'Donnell) [1134314]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-679.el6]
changelog:
  - [mm] Revert "mm: Fix slab growing out of bound within a cpuset" (Larry Woodman) [1402713]
  - [netdrv] cxgb4: update latest firmware version supported (Sai Vemuri) [1381382]
  - [kernel] audit: correctly record file names with different path name types (Paul Moore) [1305103]
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Implement the PD Map support for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: ldio_outstanding variable is not decremented in completion path (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Enable or Disable Fast path based on the PCI Threshold Bandwidth (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Add the Support for SAS3.5 Generic Megaraid Controllers Capabilities (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Dynamic Raid Map Changes for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: SAS3.5 Generic Megaraid Controllers Fast Path for RAID 1/10 Writes (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: SAS3.5 Generic Megaraid Controllers Stream Detection and IO Coalescing (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: EEDP Escape Mode Support for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: 128 MSIX Support (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Add new pci device Ids for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-678.el6]
changelog:
  - [netdrv] RDMA/iw_cxgb4: Fix bar2 virt addr calculation for T4 chips (Sai Vemuri) [1381382]
  - [netdrv] cxgb4: Stop Rx Queues before freeing it up (Sai Vemuri) [1381382]
  - [netdrv] iw_cxgb4 : Added "Fail" column in debug iw_cxgb4 stats (Sai Vemuri) [1381382]
  - [netdrv] cxgb4: Add info print to display number of MSI-X vectors allocated (Sai Vemuri) [1381382]
  - [netdrv] iwpm: crash fix for large connections test (Sai Vemuri) [1381382]
  - [netdrv] cxgb4/cxgb4vf : Use vlan_gro_frags_gr() for VLANs (Sai Vemuri) [1381382]
  - [netdrv] cxgb4vf : Using RHEL6 provided napi_gro_frags_gr() API which returns (enum gro_result) values (Sai Vemuri) [1381382]
  - [serial] 8250_pci: Detach low-level driver during PCI error recovery (Gustavo Duarte) [1400508]
  - [drm] reservation: Remove shadowing local variable 'ret' (Rob Clark) [1398084]
  - [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399457] {CVE-2016-9555}
  - [net] ipv6: add mtu lock check in __ip6_rt_update_pmtu (Xin Long) [1397295]
  - [net] Reduce queue allocation to one in kdump kernel (Sai Vemuri) [1321315]
  - [netdrv] cxgb4: Force cxgb4 driver as MASTER in kdump kernel (Sai Vemuri) [1321315]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-677.el6]
changelog:
  - [netdrv] cxgb4 : Add cxgb4 T4/T5 firmware version 1.15.37.0 (Sai Vemuri) [1349112]
  - [netdrv] be2net: fix locking (Ivan Vecera) [1397915]
  - [perf] tools: Initialize reference counts in map__clone() (Jiri Olsa) [1359100]
  - [perf] tools: Replace map->referenced & maps->removed_maps with map->refcnt (Jiri Olsa) [1359100]
  - [md] raid10: add rcu protection to rdev access in raid10_sync_request (Xiao Ni) [1395048]
  - [md] raid10: add rcu protection in raid10_status (Xiao Ni) [1395048]
  - [md] raid10: fix refounct imbalance when resyncing an array with a replacement device (Xiao Ni) [1395048]
  - [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1342659]
  - [x86] ACPI: add dynamic_debug support (Prarit Bhargava) [1252674]
  - [mm] hugetlb: fix huge_pte_alloc BUG_ON (Dave Anderson) [1397250]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-676.el6]
changelog:
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: add in missing white spaces in error messages text (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Do not set MPI2_TYPE_CUDA for JBOD FP path for FW which does not support JBOD sequence map (Tomas Henzl) [1397873]
  - [scsi] megaraid_sas: Send SYNCHRONIZE_CACHE for VD to firmware (Tomas Henzl) [1392499]
  - [scsi] megaraid_sas: Do not fire DCMDs during PCI shutdown/detach (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Send correct PhysArm to FW for R1 VD downgrade (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: For SRIOV enabled firmware, ensure VF driver waits for 30secs before reset (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Fix data integrity failure for JBOD (passthrough) devices (Tomas Henzl) [1392499]
  - [scsi] megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression (Tomas Henzl) [1392499]
  - [scsi] megaraid_sas: clean function declarations in megaraid_sas_base.c up (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: add in missing white space in error message text (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Fix the search of first memory bar (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Use memdup_user() rather than duplicating its implementation (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Fix probing cards without io port (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Downgrade two success messages to info (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: task management code optimizations (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: call ISR function to clean up pending replies in OCR path (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: reduce memory footprints in kdump mode (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: add missing curly braces in ioctl handler (Tomas Henzl) [1396567]
  - [scsi] mpt3sas: Bump driver version as "14.101.00.00" (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix for Endianness issue (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Use the new MPI 2.6 32-bit Atomic Request Descriptors for SAS35 devices (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: set EEDP-escape-flags for SAS35 devices (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Increased/Additional MSIX support for SAS35 devices (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Added Device ID's for SAS35 devices and updated MPI header (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Don't spam logs if logging level is 0 (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix warnings exposed by W=1 (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Eliminate dead sleep_flag code (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Eliminate conditional locking in mpt3sas_scsih_issue_tm() (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Ensure the connector_name string is NUL-terminated (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Bump driver version as "14.100.00.00" (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Remove unused macro "MPT_DEVICE_TLR_ON" (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Implement device_remove_in_progress check in IOCTL path (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix for incorrect numbers for MSIX vectors enabled when non RDPQ card is enumerated first (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix for improper info displayed in var log, while blocking or unblocking the device (Tomas Henzl) [1306469]
  - [net] increase xmit RECURSION_LIMIT to 10 (Sabrina Dubroca) [1392660]
  - [net] add a recursion limit in xmit path (Sabrina Dubroca) [1392660]
  - [net] netfilter: ebtables: put module reference when an incorrect extension is found (Sabrina Dubroca) [1390061]
  - [net] netfilter: ebtables: Fix extension lookup with identical name (Sabrina Dubroca) [1390061]
  - [net] ipv6: ipv6_find_hdr restore prev functionality (Paolo Abeni) [1392975]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-675.el6]
changelog:
  - [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359304] {CVE-2016-6136}
  - [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1353844]
  - [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1353844]
  - [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1353844]
  - [fs] dlm: Don't save callbacks after accept (Robert S Peterson) [1264492]
  - [fs] dlm: Save and restore socket callbacks properly (Robert S Peterson) [1264492]
  - [fs] dlm: Replace nodeid_to_addr with kernel_getpeername (Robert S Peterson) [1264492]
  - [fs] dlm: print kernel message when we get an error from kernel_sendpage (Robert S Peterson) [1264492]
  - [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1397552]
  - [hv] storvsc: Payload buffer incorrectly sized for 32 bit kernels (Cathy Avery) [1394756]
  - [fs] xfs: fix unbalanced inode reclaim flush locking (Brian Foster) [1384564]
  - [scsi] hpsa: correct logical resets (Joseph Szczypek) [1083110]
  - [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1083110]
  - [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1083110]
  - [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1083110]
  - [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1083110]
  - [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1083110]
  - [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1083110]
  - [scsi] vmw_pvscsi: return SUCCESS for successful command aborts (Ewan Milne) [1372465]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-674.el6]
changelog:
  - [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1351798]
  - [x86] Mark Intel Purley supported (Steve Best) [1271866]
  - [pnp] Prevent attaching to ACPI IPMI device (Charles Rose) [857150]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-673.el6]
changelog:
  - [netdrv] ehea: fix operation state report (Gustavo Duarte) [1089134]
  - [block] nvme: Always use MSI/MSI-x interrupts (David Milburn) [1372023]
  - [fs] aio: aio_nr decrements don't need to be delayed (Jiri Olsa) [1386216]
  - [fs] aio: don't bother with async freeing on failure in ioctx_alloc() (Jiri Olsa) [1386216]
  - [fs] epoll: ep_unregister_pollwait() can use the freed pwq->whead (Lauro Ramos Venancio) [1392372]
  - [fs] epoll: introduce POLLFREE to flush ->signalfd_wqh before kfree() (Lauro Ramos Venancio) [1392372]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-672.el6]
changelog:
  - [sched] Fix rq->nr_uninterruptible update race (Aaron Tomlin) [1377292]
  - [security] keys: Fix short sprintf buffer in /proc/keys show function (Frantisek Hrbata) [1375208] {CVE-2016-7042}
  - [net] bridge: fix switched interval for MLD Query types (Hangbin Liu) [1392327]
  - [net] netfilter: ipv6: move POSTROUTING invocation before fragmentation (Eric Garver) [1391240]
  - [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390046] {CVE-2016-7117}
  - [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1381585]
  - [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379529] {CVE-2016-6828}
  - [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351422] {CVE-2016-4998}
  - [net] netfilter: x_tables: validate e->target_offset early (Mateusz Guzik) [1351422] {CVE-2016-4998}
  - [net] netfilter: x_tables: make sure e->next_offset covers remaining blob size (Mateusz Guzik) [1351422] {CVE-2016-4998}
  - [net] tcp: enable per-socket rate limiting of all 'challenge acks' (Florian Westphal) [1388287]
  - [net] tcp: uninline tcp_oow_rate_limited() (Florian Westphal) [1388287]
  - [net] tcp: mitigate ACK loops for connections as tcp_timewait_sock (Florian Westphal) [1388287]
  - [net] tcp: mitigate ACK loops for connections as tcp_sock (Florian Westphal) [1388287]
  - [net] tcp: mitigate ACK loops for connections as tcp_request_sock (Florian Westphal) [1388287]
  - [net] tcp: helpers to mitigate ACK loops by rate-limiting out-of-window dupacks (Florian Westphal) [1388287]
  - [net] ipv6: Don't change dst->flags using assignments (Marcelo Leitner) [1389478]
  - [scsi] megaraid-sas: request irqs later (Tomas Henzl) [1385088]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-671.el6]
changelog:
  - [perf] list: Fix rNNNN list output to appear only once (Jiri Olsa) [1291256 1374411]
  - [perf] symbols: Check kptr_restrict for root (Jiri Olsa) [1291256 1374411]
  - [fs] SUNRPC: Fix a regression when reconnecting (Benjamin Coddington) [1323801]
  - [fs] SUNRPC: Clear the request rq_bytes_sent field in xprt_release_write (Benjamin Coddington) [1323801]
  - [fs] SUNRPC: Lock the transport layer on shutdown (Benjamin Coddington) [1323801]
  - [virt] kvm: x86 emulator: implement IMUL REG, R/M (opcode 0F AF) (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: implement IMUL REG, R/M, IMM (opcode 69) (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: implement IMUL REG, R/M, imm8 (opcode 6B) (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: Use a register for ____emulate_2op() destination (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: pass destination type to ____emulate_2op() (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: add Src2Imm decoding (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: consolidate immediate decode into a function (Radim Krcmar) [1313468]
  - [hv] netvsc: fix incorrect receive checksum offloading (Vitaly Kuznetsov) [1388701]
  - [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1378614]
  - [hv] vmbus: Fix signaling logic in hv_need_to_signal_on_read() (Vitaly Kuznetsov) [1319054]
  - [hv] vmbus: Eliminate the spin lock on the read path (Vitaly Kuznetsov) [1319054]
  - [hv] ring_buffer: eliminate hv_ringbuffer_peek() (Vitaly Kuznetsov) [1319054]
  - [hv] remove code duplication between vmbus_recvpacket()/vmbus_recvpacket_raw() (Vitaly Kuznetsov) [1319054]
  - [hv] ring_buffer: remove code duplication from hv_ringbuffer_peek/read() (Vitaly Kuznetsov) [1319054]
  - [hv] ring_buffer.c: fix comment style (Vitaly Kuznetsov) [1319054]
  - [hv] netvsc: set nvdev link after populating chn_table (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: synchronize netvsc_change_mtu()/netvsc_set_channels() with netvsc_remove() (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: get rid of struct net_device pointer in struct netvsc_device (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: untangle the pointer mess (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: use start_remove flag to protect netvsc_link_change() (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: move start_remove flag to net_device_context (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Move subchannel waiting to rndis_filter_device_remove() (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Wait for sub-channels to be processed during probe (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Properly size the vrss queues (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Add close of RNDIS filter into change mtu call (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] hv_netvsc: Add support to set MTU reservation from guest side (Vitaly Kuznetsov) [1352105]
  - [perf] probe: Clear probe_trace_event when add_probe_trace_event() fails (Jiri Olsa) [1291510]
  - [perf] probe: Move ftrace probe-event operations to probe-file.c (Jiri Olsa) [1291510]
  - [block] loop: fix comment typo in loop_config_discard (Lukas Czerner) [818597]
  - [block] loop: Limit the number of requests in the bio list (Lukas Czerner) [818597]
  - [fs] ext4: optimize test_root() (Lukas Czerner) [1236047]
  - [fs] ext4: verify group number in verify_group_input() before using it (Lukas Czerner) [1236047]
  - [fs] nfsd: use short read as well as i_size to set eof (Benjamin Coddington) [1302415]
  - [fs] xfs: xfs_alloc_fix_minleft can underflow near ENOSPC (Carlos Maiolino) [1259493]
  - [fs] xfs: Fix rounding in xfs_alloc_fix_len() (Carlos Maiolino) [1259493]
  - [fs] jbd: don't BUG but return ENOSPC if a handle runs out of space (Lukas Czerner) [1291015]
  - [fs] jbd2: don't BUG but return ENOSPC if a handle runs out of space (Lukas Czerner) [1291015]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-670.el6]
changelog:
  - [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1387243]
  - [misc] hpilo: Changes to support new security states in iLO5 FW (Joseph Szczypek) [1376584]
  - [misc] hpilo: Change e-mail address from hp.com to hpe.com (Joseph Szczypek) [1376584]
  - [misc] hpilo: cleanup hpilo (Joseph Szczypek) [1376584]
  - [mm] memory_hotplug.c: change normal message to use pr_debug (Jeremy McNicoll) [1255272]
  - [acpi] mem_hotplug: set memory info correctly when problems forcing mem online (Jeremy McNicoll) [1255272]
  - [fs] bio: Need to free integrity payload if the split bio gets memory by itself (Xiao Ni) [1268434]
  - [md] add rdev reference for super write (Xiao Ni) [1365718]
  - [netdrv] rtlwifi: fix memory leak for USB device (Stanislaw Gruszka) [1364597]
  - [fs] NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk() (Benjamin Coddington) [1353272]
  - [drm] nouveau/kms: take mode_config mutex in connector hotplug path (Ben Skeggs) [1349978]
  - [kernel] clocksource: Defer override invalidation unless clock is unstable (Prarit Bhargava) [1356231]
  - [kernel] clocksource: Reselect clocksource when watchdog validated high-res capability (Prarit Bhargava) [1356231]
  - [fs] nfs4: clnt: respect noresvport when establishing connections to DSes (Benjamin Coddington) [1346041]
  - [fs] nfs: Add nfs_client behavior flags (Benjamin Coddington) [1346041]
  - [block] fix /proc/diskstats in-flight - kABI workaround (Jerome Marchand) [1273339 1306879]
  - [block] add internal hd part table references (Jerome Marchand) [1273339 1306879]
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [1273339 1306879]
  - [block] kref: add kref_test_and_get (Jerome Marchand) [1273339 1306879]
  - [block] Revert "block: fix accounting bug on cross partition merges" (Jerome Marchand) [1273339 1306879]
  - [perf] thread: Fix reference count initial state (Jiri Olsa) [1359100]
  - [perf] tools: Reference count struct map (Jiri Olsa) [1359100]
  - [perf] tools: Check if a map is still in use when deleting it (Jiri Olsa) [1359100]
  - [perf] tools: Protect accesses the map rbtrees with a rw lock (Jiri Olsa) [1359100]
  - [perf] tools: Introduce struct maps (Jiri Olsa) [1359100]
  - [perf] tools: Assign default value for some pointers (Jiri Olsa) [1359100]
  - [perf] tools: Use maps__first()/map__next() (Jiri Olsa) [1359100]
  - [perf] tools: Leave DSO destruction to the map destruction (Jiri Olsa) [1359100]
  - [perf] machine: Mark removed threads as such (Jiri Olsa) [1359100]
  - [perf] tools: Import rb_erase_init from block/ in the kernel sources (Jiri Olsa) [1359100]
  - [perf] tools: Nuke unused map_groups__flush() (Jiri Olsa) [1359100]
  - [perf] tools: Remove redundant initialization of thread linkage members (Jiri Olsa) [1359100]
  - [perf] tools: Rename maps__next (Jiri Olsa) [1359100]
  - [perf] machine: Do not call map_groups__delete(), drop refcnt instead (Jiri Olsa) [1359100]
  - [perf] hists: Rename add_hist_entry to hists__findnew_entry (Jiri Olsa) [1359100]
  - [perf] tools: Use atomic.h for the map_groups refcount (Jiri Olsa) [1359100]
  - [perf] tests: Fix map_groups refcount test (Jiri Olsa) [1359100]
  - [perf] machine: No need to keep a refcnt for last_match (Jiri Olsa) [1359100]
  - [perf] tests: Show refcounting broken expectations in thread-mg-share test (Jiri Olsa) [1359100]
  - [perf] machine: Protect the machine->threads with a rwlock (Jiri Olsa) [1359100]
  - [video] efifb: prevent null-deref when iterating dmi_list (Rob Clark) [1360982]
  - [video] configs: updates for fb backport (Rob Clark) [1360982]
  - [video] fbdev: efifb: bind to efi-framebuffer (Rob Clark) [1360982]
  - [video] fbdev: vesafb: bind to platform-framebuffer device (Rob Clark) [1360982]
  - [video] fbdev: simplefb: add common x86 RGB formats (Rob Clark) [1360982]
  - [video] x86: sysfb: move EFI quirks from efifb to sysfb (Rob Clark) [1360982]
  - [video] x86: provide platform-devices for boot-framebuffers (Rob Clark) [1360982]
  - [video] fbdev: simplefb: mark as fw and allocate apertures (Rob Clark) [1360982]
  - [video] fbdev: simplefb: add init through platform_data (Rob Clark) [1360982]
  - [video] drivers/video: implement a simple framebuffer driver (Rob Clark) [1360982]
  - [video] vesafb: fix memory leak (Rob Clark) [1360982]
  - [video] uvesafb,vesafb: create WC or WB PAT-entries (Rob Clark) [1360982]
  - [video] vesafb: fix comment a typo (Rob Clark) [1360982]
  - [video] vesafb: use platform_driver_probe() instead of platform_driver_register() (Rob Clark) [1360982]
  - [video] efifb: Fix call to wrong unregister function (Rob Clark) [1360982]
  - [video] efifb: Disallow manual bind and unbind (Rob Clark) [1360982]
  - [video] efifb: Fix mismatched request/release_mem_region (Rob Clark) [1360982]
  - [video] efifb: fix int to pointer cast warning (Rob Clark) [1360982]
  - [video] efifb: Add override for 11" Macbook Air 3,1 (Rob Clark) [1360982]
  - [video] efifb: Support overriding fields FW tells us with the DMI data (Rob Clark) [1360982]
  - [video] efifb: support AMD Radeon HD 6490 (Rob Clark) [1360982]
  - [video] efifb: support the EFI framebuffer on more Apple hardware (Rob Clark) [1360982]
  - [video] efifb: check that the base address is plausible on pci systems (Rob Clark) [1360982]
  - [video] drivers/video/efifb.c: support framebuffer for NVIDIA 9400M in MacBook Pro 5, 1 (Rob Clark) [1360982]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-669.el6]
changelog:
  - [netdrv] sfc: fix potential stack corruption from running past stat bitmask (Jarod Wilson) [1374067]
  - [netdrv] cxgb4: Enable SR-IOV configuration via PCI sysfs interface (Sai Vemuri) [1222751]
  - [netdrv] bnx2x: don't wait for Tx completion on recovery (Michal Schmidt) [1300681]
  - [pm] hibernate: Only crash if necessary in create/free_basic_memory_bitmaps() (Jerry Snitselaar) [1374378]
  - [netdrv] ixgbe: add WoL support for some 82599 subdevice IDs (Ken Cox) [1316845]
  - [kernel] cgroup: improve old cgroup handling in cgroup_attach_proc() (Lauro Ramos Venancio) [1372085]
  - [watchdog] hpwdt: add support for iLO5 (Linda Knippers) [1382496]
  - [watchdog] hpwdt: HP rebranding (Linda Knippers) [1388170]
  - [documentation] Fix hpwdt documentation to match RHEL6 (Linda Knippers) [1388170]
  - [acpi] acpica: Fix for a Store->ArgX when ArgX contains a reference to a field (Lenny Szubowicz) [1324697]
  - [acpi] acpica: Standardize all switch() blocks (Lenny Szubowicz) [1324697]
  - [acpi] acpica: Interpreter: Fix Store() when implicit conversion is not possible (Lenny Szubowicz) [1324697]
  - [fs] backing-dev: fix wakeup timer races with bdi_unregister() (Jeff Moyer) [1111683]
  - [fs] backing-dev: ensure wakeup_timer is deleted (Jeff Moyer) [1111683]
  - [fs] writeback: Fix lost wake-up shutting down writeback thread (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wakeup events when forking bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: fix bad _bh spinlock nesting (Jeff Moyer) [1111683]
  - [fs] writeback: cleanup bdi_register (Jeff Moyer) [1111683]
  - [fs] writeback: remove unnecessary init_timer call (Jeff Moyer) [1111683]
  - [fs] writeback: optimize periodic bdi thread wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: prevent unnecessary bdi threads wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: move bdi threads exiting logic to the forker thread (Jeff Moyer) [1111683]
  - [fs] writeback: restructure bdi forker loop a little (Jeff Moyer) [1111683]
  - [fs] writeback: move last_active to bdi (Jeff Moyer) [1111683]
  - [fs] writeback: do not remove bdi from bdi_list (Jeff Moyer) [1111683]
  - [fs] writeback: simplify bdi code a little (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 2 (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 1 (Jeff Moyer) [1111683]
  - [fs] writeback: fix possible race when creating bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: harmonize writeback threads naming (Jeff Moyer) [1111683]
  - [fs] writeback: merge bdi_writeback_task and bdi_start_fn (Jeff Moyer) [1111683]
  - [fs] writeback: bdi_writeback_task() must set task state before calling schedule() (Jeff Moyer) [1111683]
  - [fs] writeback: remove wb_list (Jeff Moyer) [1111683]
  - [s390] zfcp: close window with unblocked rport during rport gone (Hendrik Brueckner) [1383980]
  - [s390] zfcp: fix ELS/GS request&response length for hardware data router (Hendrik Brueckner) [1383981]
  - [s390] zfcp: fix fc_host port_type with NPIV (Hendrik Brueckner) [1383982]
  - [s390] zcrypt: toleration of new crypto adapter hardware with type 12 (Hendrik Brueckner) [1344041]
  - [s390] time: LPAR offset handling (Hendrik Brueckner) [1381564]
  - [s390] time: move PTFF definitions (Hendrik Brueckner) [1381564]
  - [scsi] libfc: Don't have fc_exch_find log errors on a new exchange (Chris Leech) [1368175]
  - [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1383078]
  - [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1368175]
  - [scsi] libfc: Do not login if the port is already started (Chris Leech) [1368175]
  - [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1368175]
  - [scsi] libfc: Do not take rdata->rp_mutex when processing a (Chris Leech) [1368175]
  - [scsi] libfc: Fixup disc_mutex handling (Chris Leech) [1368175]
  - [scsi] libfc: Revisit kref handling (Chris Leech) [1368175]
  - [scsi] fcoe: Stop fc_rport_priv structure leak (Chris Leech) [1368175]
  - [scsi] libfc: do not send ABTS when resetting exchanges (Chris Leech) [1368175]
  - [scsi] libfc: reset exchange manager during LOGO handling (Chris Leech) [1368175]
  - [scsi] libfc: send LOGO for PLOGI failure (Chris Leech) [1368175]
  - [scsi] libfc: Issue PRLI after a PRLO has been received (Chris Leech) [1368175]
  - [scsi] libfc: fix seconds_since_last_reset calculation (Chris Leech) [1368175]
  - [scsi] libfc: Update rport reference counting (Chris Leech) [1368175]
  - [scsi] libfc: XenServer fails to mount root filesystem (Chris Leech) [1368175]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-668.el6]
changelog:
  - [netdrv] mlx5e: Fix minimum MTU (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Device's mtu field is u16 and not int (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Fix endianness bug in IPV6 csum calculation (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Allow resetting VF admin mac to zero (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Correctly handle RSS indirection table when changing number of channels (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Fix ethtool RX hash func configuration change (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Fix LRO modify (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Remove wrong poll CQ optimization (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Do not BUG_ON during reset when PCI is offline (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Count HW buffer overrun only once (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: fix some error handling in mlx4_multi_func_init() (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Remove unused macro (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Initialize hop_limit when creating address handle (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5: Expose correct maximum number of CQE capacity (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Replace kfree with kvfree in mlx4_ib_destroy_srq (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: fix handling return value of mlx4_slave_convert_port (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Use vmalloc for WR buffers when needed (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Use correct order of variables in log message (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Expose correct max_sge_rd limit (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Avoid returning success in case of an error flow (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Replace VF zero mac with random mac in mlx4_core (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Fix resource tracker error flow in add_res_range (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Copy/set only sizeof struct mlx4_eqe bytes (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: really allow to change RSS key (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5: Fix incorrect wc pkey_index assignment for GSI messages (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Fix incorrect cq flushing in error state (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Use correct SL on AH query under RoCE (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Forbid using sysfs to change RoCE pkeys (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Demote mcg message from warning to debug (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Fix potential deadlock when sending mad to wire (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4, mlx5, mthca: Expose max_sge_rd correctly (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Add extra check for total vfs for SRIOV (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Remove BUG_ON assert when checking if ring is full (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Relieve cpu load average on the port sending flow (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Fix wrong index in propagating port change event to VFs (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Fix memory leak in do_slave_init (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Disable HA for SRIOV PF RoCE devices (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Release TX QP when destroying TX ring (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Disable Granular QoS per VF under IB/Eth VPI configuration (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: fix typo in mlx4_set_vf_mac (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: need to call close fw if alloc icm is called twice (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: double free of dev_vfs (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] bnx2x: don't reset chip on cleanup if PCI function is offline (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: allow adding VLANs while interface is down (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: avoid leaking memory on bnx2x_init_one() failures (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Prevent false warning for lack of FC NPIV (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: fix receive of VF->PF mailbox messages by the PF on big-endian (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: fix sending VF->PF messages on big-endian (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix 84833 phy command handler (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix led setting for 84858 phy (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Correct 84858 PHY fw version (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix 84833 RX CRC (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix link-forcing for KR2 (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Warn about grc timeouts in register dump (Michal Schmidt) [1386199]
  - [netdrv] be2net: Enable VF link state setting for BE3 (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix TX stats for TSO packets (Ivan Vecera) [1347812]
  - [netdrv] be2net: NCSI FW section should be properly updated with ethtool for BE3 (Ivan Vecera) [1347812]
  - [netdrv] be2net: Provide an alternate way to read pf_num for BEx chips (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix mac address collision in some configurations (Ivan Vecera) [1347812]
  - [netdrv] be2net: Avoid redundant addition of mac address in HW (Ivan Vecera) [1347812]
  - [netdrv] be2net: Add privilege level check for OPCODE_COMMON_GET_EXT_FAT_CAPABILITIES SLI cmd (Ivan Vecera) [1347812]
  - [netdrv] be2net: Issue COMMON_RESET_FUNCTION cmd during driver unload (Ivan Vecera) [1347812]
  - [netdrv] be2net: Support UE recovery in BEx/Skyhawk adapters (Ivan Vecera) [1347812]
  - [netdrv] be2net: replace polling with sleeping in the FW completion path (Ivan Vecera) [1347812]
  - [netdrv] be2net: do not remove vids from driver table if be_vid_config() fails (Ivan Vecera) [1347812]
  - [netdrv] be2net: clear vlan-promisc setting before programming the vlan list (Ivan Vecera) [1347812]
  - [netdrv] be2net: perform temperature query in adapter regardless of its interface state (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix broadcast echoes from EVB in BE3 (Ivan Vecera) [1347812]
  - [netdrv] be2net: fix definition of be_max_eqs() (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix provisioning of RSS for VFs in multi-partition configurations (Ivan Vecera) [1347812]
  - [netdrv] be2net: Enable Wake-On-LAN from shutdown for Skyhawk (Ivan Vecera) [1347812]
  - [netdrv] be2net: use max-TXQs limit too while provisioning VF queue pairs (Ivan Vecera) [1347812]
  - [netdrv] benet: be_resume needs to protect be_open with rtnl_lock (Ivan Vecera) [1347812]
  - [netdrv] be2net: Don't leak iomapped memory on removal (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix a UE caused by passing large frames to the ASIC (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix pcie error recovery in case of NIC+RoCE adapters (Ivan Vecera) [1347812]
  - [netdrv] be2net: Interpret and log new data that's added to the port misconfigure async event (Ivan Vecera) [1347812]
  - [netdrv] be2net: Request RSS capability of Rx interface depending on number of Rx rings (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix interval calculation in interrupt moderation (Ivan Vecera) [1347812]
  - [netdrv] be2net: Add retry in case of error recovery failure (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix Lancer error recovery (Ivan Vecera) [1347812]
  - [netdrv] be2net: Don't run ethtool self-tests for VFs (Ivan Vecera) [1347812]
  - [netdrv] be2net: SRIOV Queue distribution should factor in EQ-count of VFs (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix be_vlan_rem_vid() to check vlan id being removed (Ivan Vecera) [1347812]
  - [netdrv] be2net: check for INSUFFICIENT_PRIVILEGES error (Ivan Vecera) [1347812]
  - [netdrv] be2net: return error status from be_set_phys_id() (Ivan Vecera) [1347812]
  - [netdrv] be2net: fix port-res desc query of GET_PROFILE_CONFIG FW cmd (Ivan Vecera) [1347812]
  - [netdrv] be2net: fix VF link state transition from disabled to auto (Ivan Vecera) [1347812]
  - [netdrv] bnx2: fix locking when netconsole is used (Ivan Vecera) [1291369]
  - [netdrv] tg3: Avoid NULL pointer dereference in tg3_io_error_detected() (Ivan Vecera) [1347828]
  - [netdrv] tg3: Fix for disallow tx coalescing time to be 0 (Ivan Vecera) [1347828]
  - [netdrv] tg3: Report the correct number of RSS queues through tg3_get_rxnfc (Ivan Vecera) [1347828]
  - [netdrv] tg3: Fix for diasllow rx coalescing time to be 0 (Ivan Vecera) [1347828]
  - [netdrv] net: tg3: avoid uninitialized variable warning (Ivan Vecera) [1347828]
  - [net] ipv6: restrict hop_limit sysctl setting to range (1; 255) (Paolo Abeni) [1314305]
  - [net] ipv4: add limits to ip_default_ttl (Paolo Abeni) [1314305]
  - [net] route: enforce hoplimit max value (Paolo Abeni) [1313899]
  - [net] netfilter: Add missing #include <limits.h> for userland (Sabrina Dubroca) [1317697]
  - [net] sctp: use the same clock as if sock source timestamps were on (Xin Long) [1334561]
  - [net] sctp: update the netstamp_needed counter when copying sockets (Xin Long) [1334561]
  - [net] sctp: fix the transports round robin issue when init is retransmitted (Xin Long) [1312728]
  - [net] pppoe: fix memory corruption in padt work structure (Beniamino Galvani) [1317900]
  - [net] pppoe: drop pppoe device in pppoe_unbind_sock_work (Beniamino Galvani) [1317900]
  - [net] pppoe: Use workqueue to die properly when a PADT is received (Beniamino Galvani) [1317900]
  - [net] ipv6: Skip XFRM lookup if dst_entry in socket cache is valid (Jakub Sitnicki) [1327680]
  - [net] ipv6: Consolidate route lookup sequences (Jakub Sitnicki) [1327680]
  - [net] macvtap: Add support of packet capture on macvtap device (Sabrina Dubroca) [1373100]
  - [scsi] fnic: pci_dma_mapping_error() doesn't return an error code (Maurizio Lombardi) [1364593]
  - [scsi] fnic: Using rport->dd_data to check rport online instead of rport_lookup (Maurizio Lombardi) [1364593]
  - [scsi] fnic: Cleanup the I/O pending with fw and has timed out and is used to issue LUN reset (Maurizio Lombardi) [1364593]
  - [scsi] fnic: move printk()s outside of the critical code section (Maurizio Lombardi) [1364593]
  - [scsi] fnic: check pci_map_single() return value (Maurizio Lombardi) [1364593]
  - [scsi] be2iscsi: Driver version: 11.1.0.0 (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Replace _bh with _irqsave/irqrestore (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Remove redundant iscsi_wrb desc memset (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix bad WRB index error (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix async PDU handling path (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Add lock to protect WRB alloc and free (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: _bh for io_sgl_lock and mgmt_sgl_lock (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Reduce driver load/unload time (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix ExpStatSn in management tasks (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Update the driver version (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix WRB leak in login/logout path (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix async link event processing (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to process 25G link speed info from FW (Maurizio Lombardi) [1347815]
  - [scsi] scsi_transport_iscsi: Add 25G and 40G speed definition (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix IOPOLL implementation (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix return value for MCC completion (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Add FW config validation (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to handle misconfigured optics events (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix VLAN support for IPv6 network (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to remove shutdown entry point (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Added return value check for mgmt_get_all_if_id (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Set mbox timeout to 30s (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to synchronize tag allocation using spin_lock (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to use atomic bit operations for tag_state (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix mbox synchronization replacing spinlock with mutex (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix soft lockup in mgmt_get_all_if_id path using bmbx (Maurizio Lombardi) [1347815]
  - [scsi] scsi_debug: fix logical block provisioning support when unmap_alignment != 0 (Maurizio Lombardi) [1388096]
  - [scsi] scsi_debug: fix logical block provisioning support (Maurizio Lombardi) [1388096]
  - [scsi] mpt3sas: Fix resume on WarpDrive flash cards (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: avoid mpt3sas_transport_port_add NULL parent_dev (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: set num_phys after allocating phy space (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: add missing curly braces (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Used "synchronize_irq()"API to synchronize timed-out IO & TMs (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Set maximum transfer length per IO to 4MB for VDs (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Updating mpt3sas driver version to 13.100.00.00 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Handle active cable exception event (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Update MPI header to 2.00.42 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: remove unused fw_event_work elements (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Remove usage of 'struct timeval' (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Don't overreach ioc->reply_post during initialization (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Remove unnecessary synchronize_irq() before free_irq() (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Free memory pools before retrying to allocate with different value (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Remove cpumask_clear for zalloc_cpumask_var and don't free free_cpu_mask_var before reply_q (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Updating mpt3sas driver version to 12.100.00.00 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Fix for Asynchronous completion of timedout IO and task abort of timedout IO (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Updated MPI Header to 2.00.42 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Add support for configurable Chain Frame Size (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Added smp_affinity_enable module parameter (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Make use of additional HighPriority credit message frames for sending SCSI IOs (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Never block the Enclosure device (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Fix static analyzer(coverity) tool identified defects (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Used IEEE SGL instead of MPI SGL while framing a SMP Passthrough request message (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Added support for high port count HBA variants (Tomas Henzl) [1329353]
  - [scsi] bnx2fc: Update version number to 2.10.3 (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Check sc_cmd device and host pointer before returning the command to the mid-layer (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Print netdev device name when FCoE is successfully initialized (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Print when we send a fip keep alive (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: bnx2fc_eh_abort(): fix wrong return code (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Show information about log levels in 'modinfo' (Maurizio Lombardi) [1380385]
  - [scsi] hpsa: update driver revision to 3.4.10-0-RH2 (Joseph Szczypek) [1377892]
  - [scsi] hpsa: correct scsi 6byte lba calculation (Joseph Szczypek) [1377892]
  - [scsi] lpfc: remove unknown ELS message warnings for RDP (Maurizio Lombardi) [1347811]
  - [scsi] smartpqi: add to config-generic (Scott Benesh) [1343743]
  - [scsi] smartpqi: raid bypass lba calculation fix (Scott Benesh) [1343743]
  - [scsi] smartpqi: bump driver version (Scott Benesh) [1343743]
  - [scsi] smartpqi: add smartpqi.txt (Scott Benesh) [1343743]
  - [scsi] smartpqi: update Kconfig (Scott Benesh) [1343743]
  - [scsi] smartpqi: remove timeout for cache flush operations (Scott Benesh) [1343743]
  - [scsi] smartpqi: scsi queuecommand cleanup (Scott Benesh) [1343743]
  - [scsi] smartpqi: minor tweaks to update time support (Scott Benesh) [1343743]
  - [scsi] smartpqi: minor function reformating (Scott Benesh) [1343743]
  - [scsi] smartpqi: correct event acknowledgement timeout issue (Scott Benesh) [1343743]
  - [scsi] smartpqi: correct controller offline issue (Scott Benesh) [1343743]
  - [scsi] smartpqi: add kdump support (Scott Benesh) [1343743]
  - [scsi] smartpqi: enhance reset logic (Scott Benesh) [1343743]
  - [scsi] smartpqi: enhance drive offline informational message (Scott Benesh) [1343743]
  - [scsi] smartpqi: simplify spanning (Scott Benesh) [1343743]
  - [scsi] smartpqi: change tmf macro names (Scott Benesh) [1343743]
  - [scsi] smartpqi: change aio sg processing (Scott Benesh) [1343743]
  - [scsi] aacraid: remove wildcard for series 9 controllers (Scott Benesh) [1343743]
  - [scsi] smartpqi: initial commit of Microsemi smartpqi driver (Scott Benesh) [1343743]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-667.el6]
changelog:
  - [hv] get rid of id in struct vmbus_channel (Vitaly Kuznetsov) [1322802]
  - [hv] make VMBus bus ids persistent (Vitaly Kuznetsov) [1322802]
  - [hv] storvsc: Fix potential memory leak (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Filter out storvsc messages CD-ROM medium not present (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: fix SRB_STATUS_ABORTED handling (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: add logging for error/warning messages (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Fix a bug in the handling of SRB status flags (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Don't set the SRB_FLAGS_QUEUE_ACTION_ENABLE flag (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Set the tablesize based on the information given by the host (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Don't assume that the scatterlist is not chained (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Retrieve information about the capability of the target (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Always send on the selected outgoing channel (Cathy Avery) [1322928 1352824]
  - [hv] vmbus: Support a vmbus API for efficiently sending page arrays (Cathy Avery) [1322928 1352824]
  - [hv] balloon: replace ha_region_mutex with spinlock (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: account for gaps in hot add regions (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: keep track of where ha_region starts (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: reset host_specified_ha_region (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: don't crash when memory is added in non-sorted order (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: check if ha_region_mutex was acquired in MEM_CANCEL_ONLINE case (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] don't leak memory in vmbus_establish_gpadl() (Vitaly Kuznetsov) [1376860]
  - [hv] get rid of redundant messagecount in create_gpadl_header() (Vitaly Kuznetsov) [1376860]
  - [hv] vmbus: don't manipulate with clocksources on crash (Cathy Avery) [1365049]
  - [hv] correct tsc page sequence invalid value (Cathy Avery) [1365049]
  - [hv] vmbus: fix build warning (Cathy Avery) [1365049]
  - [hv] vmbus: Implement a clocksource based on the TSC page (Cathy Avery) [1365049]
  - [hv] kvp: cancel kvp_host_handshake_work on module unload (Vitaly Kuznetsov) [1321259]
  - [x86] mm/xen: Suppress hugetlbfs in PV guests (Vitaly Kuznetsov) [1312331]
  - [mm] hugetlb: allow hugepages_supported to be architecture specific (Vitaly Kuznetsov) [1312331]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-666.el6]
changelog:
  - [netdrv] i40e/i40evf : Bump driver version from 1.5.5 to 1.5.10 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: RSS Hash Option parameters (Stefan Assmann) [1360179]
  - [netdrv] i40e: Remove HMC AQ API implementation (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Add driver support for promiscuous mode (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Only offload VLAN tag if enabled (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add DeviceID for X722 QSFP+ (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add device capability which defines if update is available (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Allow PF driver to configure RSS (Stefan Assmann) [1360179]
  - [netdrv] i40e: Specify AQ event opcode to wait for (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Don't Panic (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Limit TSO to 7 descriptors for payload instead of 8 per packet (Stefan Assmann) [1360179]
  - [netdrv] i40evf: properly handle VLAN features (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.2 to 1.5.5 (Stefan Assmann) [1360179]
  - [netdrv] i40e: Input set mask constants for RSS, flow director, and flex bytes (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add RSS configuration to virtual channel (Stefan Assmann) [1360179]
  - [netdrv] i40e: Move NVM variable out of AQ struct (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Faster RX via avoiding FCoE (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Drop unused tx_ring argument (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.1 to 1.5.2 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Fix get_rss_aq (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Add longer wait after remove module (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add new device ID for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Fix VLAN features (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump patch from 1.4.25 to 1.5.1 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Add additional check for reset (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Fix handling of boolean logic in polling routines (Stefan Assmann) [1360179]
  - [netdrv] i40evf: remove dead code (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Allow up to 12K bytes of data per Tx descriptor instead of 8K (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.25 and i40evf to 1.4.15 (Stefan Assmann) [1360179]
  - [netdrv] i40e: implement and use Rx CTL helper functions (Stefan Assmann) [1360179]
  - [netdrv] i40e: add adminq commands for Rx CTL registers (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add functions to blink led on 10GBaseT PHY (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Rewrite logic for 8 descriptor per packet check (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Use u64 values instead of casting them in TSO function (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Drop outer checksum offload that was not requested (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.15 and i40evf to 1.4.11 (Stefan Assmann) [1360179]
  - [netdrv] i40e: When in promisc mode apply promisc mode to Tx Traffic as well (Stefan Assmann) [1360179]
  - [netdrv] i40e: clean event descriptor before use (Stefan Assmann) [1360179]
  - [netdrv] i40evf: set adapter state on reset failure (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: avoid atomics (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add a SW workaround for lost interrupts (Stefan Assmann) [1360179]
  - [netdrv] i40evf: support packet split receive (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump version (Stefan Assmann) [1360179]
  - [netdrv] i40e: properly show packet split status in debugfs (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: use logical operators, not bitwise (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: use __GFP_NOWARN (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: try again after failure (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: don't lose interrupts (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Change vf driver string to reflect all products i40evf supports (Stefan Assmann) [1360179]
  - [netdrv] i40e: Refactor force_wb and WB_ON_ITR functionality code (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: bump version to 1.4.12/1.4.8 (Stefan Assmann) [1360179]
  - [netdrv] i40e: do TSO only if CHECKSUM_PARTIAL is set (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.11 and i40evf to 1.4.7 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: enable bus master after reset (Stefan Assmann) [1360179]
  - [netdrv] i40e: fix write-back-on-itr to work with legacy itr (Stefan Assmann) [1360179]
  - [netdrv] i40e: Bump AQ minor version to 1.5 for new FW features (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ thermal sensor control struct (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add VXLAN-GPE tunnel type (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add set_switch_config (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Shared resource flags (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add external power class to get link status (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Geneve cloud tunnel type (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add Run PHY Activity struct (Stefan Assmann) [1360179]
  - [netdrv] i40e: add new proxy-wol bit for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Use private workqueue (Stefan Assmann) [1360179]
  - [netdrv] i40evf: add new write-back mode (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Fix for UDP/TCP RSS for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: null out ring pointers on free (Stefan Assmann) [1360179]
  - [netdrv] i40e: define function capabilities in only one place (Stefan Assmann) [1360179]
  - [netdrv] i40evf: allow channel bonding of VFs (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Fix RSS rx-flow-hash configuration through ethtool (Stefan Assmann) [1360179]
  - [netdrv] treewide: Fix typos in printk (Stefan Assmann) [1360179]
  - [netdrv] i40e: remove forever unused ID (Stefan Assmann) [1360179]
  - [netdrv] i40e: Fix Rx hash reported to the stack by our driver (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.8 and i40evf to 1.4.4 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: change version string generation (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Add a new offload for RSS PCTYPE V2 for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40e: Opcode and structures required by OEM Post Update AQ command and add new NVM arq message (Stefan Assmann) [1360179]
  - [netdrv] i40evf: check rings before freeing resources (Stefan Assmann) [1360179]
  - [netdrv] i40e: Fix errors resulted while turning off TSO (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: use configured RSS key and lookup table in i40e_vsi_config_rss (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix broken i40e_config_rss_aq function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: move i40e_vsi_config_rss below i40e_get_rss_aq (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove redundant memset (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: check for and deal with non-contiguous TCs (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf : Bump driver version from 1.5.5 to 1.5.10 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Update device ids for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Drop extra copy of function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Use consistent type for vf_id (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: PTP - avoid aggregate return warnings (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix uninitialized variable (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove HMC AQ API implementation (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40evf: Add driver support for promiscuous mode (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add VF promiscuous mode driver support (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add promiscuous on VLAN support (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Only offload VLAN tag if enabled (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove zero check (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add DeviceID for X722 QSFP+ (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add device capability which defines if update is available (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Specify AQ event opcode to wait for (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Code cleanup in i40e_add_fdir_ethtool (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Limit TSO to 7 descriptors for payload instead of 8 per packet (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix errant PCIe bandwidth message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.2 to 1.5.5 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Input set mask constants for RSS, flow director, and flex bytes (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Move NVM event wait check to NVM code (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add RSS configuration to virtual channel (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Move NVM variable out of AQ struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Restrict VF poll mode to only single function mode devices (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Faster RX via avoiding FCoE (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Drop unused tx_ring argument (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Move HW flush (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Leave debug_mask cleared at init (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Inserting a HW capability display info (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.1 to 1.5.2 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Request PHY media event at reset time (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Lower some message levels (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix for supported link modes in 10GBaseT PHY's (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Disable link polling (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Make VF resets more reliable (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add new device ID for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove unused variable (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: remove redundant check on vsi->active_vlans (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump patch from 1.4.25 to 1.5.1 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Change comment to reflect correct function name (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Change unknown event error msg to ignore message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Added code to prevent double resets (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Notify VFs of all resets (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove timer and task only if created (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Assure that adminq is alive in debug mode (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove MSIx only if created (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix up return code (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Save off VSI resource count when updating VSI (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Remove I40E_MAX_USER_PRIORITY define (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Fix handling of boolean logic in polling routines (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Allow up to 12K bytes of data per Tx descriptor instead of 8K (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: queue-specific settings for interrupt moderation (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.25 and i40evf to 1.4.15 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: let go of the past (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: suspend scheduling during driver unload (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Use the new rx ctl register helpers. Don't use AQ calls from clear_hw (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: implement and use Rx CTL helper functions (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add adminq commands for Rx CTL registers (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add check for null VSI (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Expose some registers to program parser, FD and RSS logic (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix for unexpected messaging (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Do not wait for Rx queue disable in DCB reconfig (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Increase timeout when checking GLGEN_RSTAT_DEVSTATE bit (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix led blink capability for 10GBaseT PHY (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add functions to blink led on 10GBaseT PHY (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Rewrite logic for 8 descriptor per packet check (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Clean-up Rx packet checksum handling (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Set skb->csum_level for encapsulated checksum (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Add exception handling for Tx checksum (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Use u64 values instead of casting them in TSO function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Drop outer checksum offload that was not requested (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.15 and i40evf to 1.4.11 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: When in promisc mode apply promisc mode to Tx Traffic as well (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: clean event descriptor before use (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: better error reporting for nvmupdate (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: expand comment (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Do not disable queues in the Legacy/MSI Interrupt handler (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: avoid atomics (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Removal of code which relies on BASE VEB SEID (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix PROMISC mode for Multi-function per port (MFP) devices (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add a SW workaround for lost interrupts (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: cleanup use of pf->hw (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: drop unused debugfs file "dump" (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: get rid of magic number (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump version (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: properly show packet split status in debugfs (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: use logical operators, not bitwise (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: use __GFP_NOWARN (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: dump descriptor indexes in hex (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: try again after failure (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: don't lose interrupts (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Refactor force_wb and WB_ON_ITR functionality code (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: use new add_veb calling with VEB stats control (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add VEB stat control and remove L2 cloud filter (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: set shared bit for multicast filters (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Make the DCB firmware checks for X710/XL710 only (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: move sync_vsi_filters up in service_task (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add priv flag for automatic rule eviction (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: bump version to 1.4.12/1.4.8 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: avoid large memcpy by assigning struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: count allocation errors (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: drop unused function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: negate PHY int mask bits (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: APIs to Add/remove port mirroring rules (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix: do not sleep in netdev_ops (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: allocate memory safer (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: do TSO only if CHECKSUM_PARTIAL is set (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: fix missing space (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: drop duplicate definition (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.11 and i40evf to 1.4.7 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: remove unnecessary local var (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: remove VF device IDs from PF (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add netdev info to VSI dump (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add a little more to an NVM update debug message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: refactor DCB function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add 20G speed for Tx bandwidth calculations (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add counter for arq overflows (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix write-back-on-itr to work with legacy itr (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Store lan_vsi_idx and lan_vsi_id in the right size (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Bump AQ minor version to 1.5 for new FW features (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ thermal sensor control struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Add VXLAN-GPE tunnel type (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Add set_switch_config (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Shared resource flags (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add 100Mb ethtool reporting (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Add Run PHY Activity struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Limit DCB FW version checks to X710/XL710 devices (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add new proxy-wol bit for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Use private workqueue (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40evf: add new write-back mode (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Fix for UDP/TCP RSS for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Extend ethtool RSS hooks for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add new device IDs for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: bump version to 1.4.10 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Cleanup the code with respect to restarting autoneg (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: define function capabilities in only one place (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Replace X722 mac check in ethtool get_settings (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Fix RSS rx-flow-hash configuration through ethtool (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add mac_filter_element at the end of the list instead of HEAD (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: remove forever unused ID (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix Rx hash reported to the stack by our driver (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: allow zero MAC address for VFs (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: change log messages and error returns (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.8 and i40evf to 1.4.4 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: clean whole mac filter list (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Add a new offload for RSS PCTYPE V2 for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: hush little warnings (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Opcode and structures required by OEM Post Update AQ command and add new NVM arq message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: use explicit cast from u16 to u8 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: don't add zero MAC filter (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: properly delete VF MAC filters (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: chomp the BIT(_ULL) (Stefan Assmann) [1249250 1310402 1346978]


