# changelog

author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.2
changelog:
  - Add patch to fix dmidecode detection of Hitachi Virtage
    (thanks Satoru Moriya, Masaki Kimura)
    resolves: rhbz#829427


author: Michal Novotny <minovotn@redhat.com> - vgabios-0.6b-3.7.el6
changelog:
  - vgabios-Fix-get-video-mode-vgabios-call.patch [bz#840087]
  - Resolves: bz#840087
    (Unable to boot rhev-hypervisor6.iso in virtual machine for testing.)


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31.el6
changelog:
  - Avoid calling volume status when collecting gluster statedumps
    Resolves: bz849546
  - Use a default report name if --name is empty
    Resolves: bz822113
  - Quote tilde characters passed to shell in RPM module
    Resolves: bz821005
  - Collect KDC and named configuration in ipa module
    Resolves: bz825149
  - Sanitize hostname characters before using as report path
    Resolves: bz822174
  - Collect /etc/multipath in device-mapper module
    Resolves: bz817093
  - New plug-in for PostgreSQL
    Resolves: bz852049
  - Add OpenStack module
    Resolves: bz840057
  - Avoid deprecated sysctls in /proc/sys/net
    Resolves: bz834594
  - Fix error logging when calling external programs
    Resolves: bz824378
  - Use ip instead of ifconfig to generate network interface lists
    Resolves: bz833170


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32.el6
changelog:
  - Collect /proc/pagetypeinfo in memory module
    Resolves: bz809727
  - Strip trailing newline from command output
    Resolves: bz850433
  - Add sanlock module
    Resolves: bz850779
  - Do not collect archived accounting files in psacct module
    Resolves: bz850542
  - Call spacewalk-debug from rhn module to collect satellite data
    Resolves: bz859142


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33.el6
changelog:
  - Add Red Hat Update Infrastructure module
    Resolves: bz821323
  - Collect /proc/iomem in hardware module
    Resolves: bz840975
  - Collect subscription-manager output in general module
    Resolves: bz825968
  - Collect rhsm log files in general module
    Resolves: bz826312
  - Fix exception in gluster module on non-gluster systems
    Resolves: bz849546
  - Fix exception in psql module when dbname is not given
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35.el6
changelog:
  - Report --name and --ticket values as defaults
    Resolves: bz822113
  - Fix device-mapper command execution logging
    Resolves: bz824378
  - Fix data collection and rename PostreSQL module to pgsql
    Resolves: bz852049


author: Andy Grover <agrover@redhat.com> - 2.1.fb20-1
changelog:
  - Update to new upstream version
  - Remove patches
    * fix nodeacl-dump.patch
    * retry-target-creation.patch


author: David Knox <dknox@redhat.com> 0:6.0.24-46
changelog:
  - Resolves: rhbz 847288 classloader deadlock compiler JSPs
  - Resolves: rhbz 785954 HTML filtering needed
  - Resolves: rhbz 798617 init gives incorrect status


author: David Knox <dknox@redhat.com> 0:6.0.24-48
changelog:
  - Resolves: rhbz 576540 - regression init script in the 
  - wrong place. Changed _initrddir definition herein to point to the 
  - right place.


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-8
changelog:
  - mkfs.xfs: better handle misaligned 4k devices (#836433)
  - mkfs.xfs: default to physical sectorsize (#836433)
  - mkfs.xfs: clarify errors when specified AG size is too large (#730433)


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-12
changelog:
  - Additional filechooser patch to make sure the size column is shown
    when switching from Recent Files to Search
  Resolves: #889172


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-10
changelog:
  - backport upstream patch to make sure that file matching is done before file
    file-name transformation (#875727)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-11
changelog:
  - avoid crash by backporting upstream patch for internal construction of
    file-name hash table (#877769).


author: Tomas Hozza <thozza@redhat.com> - 0-0.8
changelog:
  - Bumping release to 0.8 to avoid update path from RHEL5
  - changing the way how Netlink source address is validated (#872593)
  - fix for long names from readdir (#872566)
  - applied reasonable Debian/Ubuntu patches (#872584)


author: Tomas Hozza <thozza@redhat.com> - 0-0.9
changelog:
  - Fix a typo in hv_set_ifconfig.sh script
  - Fix creation process of ifcfg-* files when doing IP injection
  - Use CLOEXEC when opening pool files to prevent FD leaking
  - Changes in SPEC file:
   - remove/create %{_sharedstatedir}/hyperv if removing/installing package
   - install scripts without ".sh" extension


author: Laine Stump <laine@redhat.com> - 0.1.9-3
changelog:
  - resolves rhbz#886862
    - libnl addr and link caches are not thread-safe, leading to
      libvirtd crashes


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-11.1
changelog:
  - fix: tuned incorrectly sets readahead values when new device is inserted
    resolves: rhbz#907856
  - fix: there is a race when multiple devices are inserted
    resolves: rhbz#907768


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.356.el6
changelog:
  - kvm-Revert-e1000-no-need-auto-negotiation-if-link-was-do.patch [bz#907397]
  - Resolves: bz#907397
    (Patch "e1000: no need auto-negotiation if link was down" may break e1000 guest)


author: Marek Grac <mgrac@redhat.com> - 3.0.15-25.2
changelog:
  - fence_drac5: fix regression due to invalid EOL
    Resolves: rhbz#908401
  - fence_vmware_soap: traceback when hostname cannot be resolved
    Resolves: rhbz#908409


author: Peter Schiffer <pschiffe@redhat.com> 0.37-7.1
changelog:
  - resolves: #913282
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.0.1.el6]
changelog:
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-50:.1
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27.2
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Don't dim the screen by default on battery power -- it was never a
    good default, and we're doing this a different way in GNOME 3.
  - Resolves: #912270


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el6.2
changelog:
  - Added nss support (see 831733)
    -added  enable_nss variable, set to true - 1 as default
    -added and applied if enable_nss true patch108 java-1.7.0-openjdk-aes-buffering.patch
    -added and applied if enable_nss true patch109 java-1.7.0-openjdk-nss-config-1.patch
    -added and applied if enable_nss true patch111 java-1.7.0-openjdk-nss-config-2.patch
    -added and applied if enable_nss true patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - openjdk-nss-config-2.patch, is dynamically modified after build time and is
    changing build dependence (nss last) to runtime depndecne (nss first)
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#871771


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Disabled nss - enable_nss set to 0
  - Resolves: rhbz#895034


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.2.el6
changelog:
  - Unapplied but kept (for 2.3revert) patch110,  java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch
  - Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch
  - Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch
  - NSS enabled by default - enable_nss set to 1
  - rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch
  - rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch
  - Resolves: rhbz#831734


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el6
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Access gnome bridge jar is forced to have 644 permissions
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911525


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-26.el6_4
changelog:
  - Significant decrease in migration performance. (#908308)
  - ipa-client-install failed to fall over to replica with master down (#909161)
  - During Migration - If Schema is unavailable migration fails (#908400)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.2
changelog:
  - Missing LDAP schema attributeType and objectClass after upgrade (#916535)
  - ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
    correctly and crash (#917065)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-0.12.1.2-2.355.el6_4.2
changelog:
  - kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910841]
  - kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910841]
  - Resolves: bz#910841
    (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-6.4.z])


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768833


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915379


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915379


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195.el6_4.2
changelog:
  - Allow cgred to use notify
  Resolves:#917966
  - Allow mount to transition to gluster
  Resolves:#917972


author: David Knox <dknox@redhat.com> 0:6.0.24-50
changelog:
  - Resolves: rhbz 882010 CVE-2012-3439 CVE-2012-5885 CVE-2012-5886 CVE-2012-5887
  - three DIGEST authentication issues
  - Resolves: rhbz 883692 CVE-2012-4534 Denial of service when using
  - SSL NIO sendfile
  - Resolves: rhbz 883705 CVE-2012-3546 Bypass of Realm security constraints


author: David Knox <dknox@redhat.com> 0:6.0.24-52
changelog:
  - Related: rhbz 882010 rhbz 883692 rhbz 883705
  - Javadoc generation did not work. Using targetrhel-6.4.Z-noarch-candidate
  - to avoid building on ppc64, ppc, and x390x.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-12
changelog:
  - Resolves: Bug 910994 - PamConfig schema not updated during upgrade
  - Resolves: Bug 910995 - Valgrind reports memleak in modify_update_last_modified_attr
  - Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
  - Resolves: Bug 911467 - DNA: use event queue for config update only at the start up
  - Resolves: Bug 911468 - Error messages encountered when using POSIX winsync
  - Resolves: Bug 911469 - dse.ldif is 0 length after server kill or machine kill
  - Resolves: Bug 911474 - Invalid chaining config triggers a disk full error and shutdown
  - Resolves: Bug 914305 - ns-slapd segfaults while trying to delete a tombstone entry
  - Resolves: Bug 913228 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.1.1.el6]
changelog:
  - [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
  - [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
  - [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
  - [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
  - [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
  - [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
  - [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
  - [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
  - [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
  - [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
  - [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
  - [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
  - [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
  - [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
  - [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
  - [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
  - [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
  - [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
  - [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
  - [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
  - [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
  - [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
  - [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
  - [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.1
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917909, CVE-2012-1016)


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts at
    the same time
    - use numeric protocol ids instead of protoent structs.
  - Resolves: rhbz#921147


author: Ian Kent <ikent@redhat.com> - 5.0.5-74.el6_4
changelog:
  - bz921147 - autofs mount failures when mounting multiple nfs mounts
    at the same time
    - correct patch name in spec file.
  - Related: rhbz#921147


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.22.1.el6]
changelog:
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862903 862904] {CVE-2012-4461}
  - [fs] fuse: optimize __fuse_direct_io() (Brian Foster) [865305 858850]
  - [fs] fuse: optimize fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] fuse: use get_user_pages_fast() (Brian Foster) [865305 858850]
  - [fs] fuse: pass iov[] to fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] mm: minor cleanup of iov_iter_single_seg_count() (Brian Foster) [865305 858850]
  - [fs] fuse: use req->page_descs[] for argpages cases (Brian Foster) [865305 858850]
  - [fs] fuse: add per-page descriptor <offset, length> to fuse_req (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_do_ioctl() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_perform_write() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_readpages() (Brian Foster) [865305 858850]
  - [fs] fuse: categorize fuse_get_req() (Brian Foster) [865305 858850]
  - [fs] fuse: general infrastructure for pages[] of variable size (Brian Foster) [865305 858850]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [scsi] have scsi_internal_device_unblock take new state (Frantisek Hrbata) [878774 854140]
  - [scsi] add new SDEV_TRANSPORT_OFFLINE state (Chris Leech) [878774 854140]
  - [kernel] cpu: fix cpu_chain section mismatch (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: Don't modify cpusets during suspend/resume (Frederic Weisbecker) [876090 852148]
  - [kernel] sched, cpuset: Drop __cpuexit from cpu hotplug callbacks (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: adjust when cpu_active and cpuset configurations are updated during cpu on/offlining (Frantisek Hrbata) [876090 852148]
  - [kernel] cpu: return better errno on cpu hotplug failure (Frederic Weisbecker) [876090 852148]
  - [kernel] cpu: introduce cpu_notify(), __cpu_notify(), cpu_notify_nofail() (Frederic Weisbecker) [876090 852148]
  - [fs] nfs: Properly handle the case where the delegation is revoked (Steve Dickson) [846840 842435]
  - [fs] nfs: Move cl_delegations to the nfs_server struct (Frantisek Hrbata) [846840 842435]
  - [fs] nfs: Introduce nfs_detach_delegations() (Steve Dickson) [846840 842435]
  - [fs] nfs: Fix a number of RCU issues in the NFSv4 delegation code (Steve Dickson) [846840 842435]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.23.1.el6]
changelog:
  - [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916956 915135]
  - [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915582 876600]
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [913074 912074] {CVE-2013-0871}
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909158 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908735 905126]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.2
changelog:
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos
  - Fix the NVR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.3
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.4
changelog:
  - Resolves: rhbz#911298 - sssd: simple access provider flaw prevents intended
                             ACL use when client to an AD provider


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.1
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#908836)
  - schema: Make the cpuset type reusable across schema files (rhbz#908836)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
  - capabilities: Add additional data to the NUMA topology info (rhbz#908836)
  - test: Add support for thread and core information for the test driver (rhbz#908836)
  - xen: Initialize variable before using (rhbz#908836)
  - xen: Actually fix the uninitialized variable (rhbz#908836)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913624)
  - qemu_agent: Ignore expected EOFs (rhbz#915344)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
  - qemu: Destroy domain on decompression binary error (rhbz#915347)
  - qemu: Run lzop with '--ignore-warn' (rhbz#915347)
  - Don't ignore return value of qemuProcessKill (rhbz#915353)
  - Fix race condition when destroying guests (rhbz#915353)
  - Log warning if storage magic matches, but version does not (rhbz#915354)
  - Add lots of debugging to storage file probing code (rhbz#915354)
  - Fix probing of QED file format (rhbz#915354)
  - util: Add virendian.h macros (rhbz#915354)
  - util: Use new virendian.h macros (rhbz#915354)
  - storage: Rearrange functions (rhbz#915354)
  - storage: Prepare for refactoring (rhbz#915354)
  - storage: Refactor metadata lookup (rhbz#915354)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
  - storage: Test backing chain traversal (rhbz#915354)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
  - qemu: Add checking in helpers for sgio setting (rhbz#919504)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
  - qemu: Fix the memory leak (rhbz#919504)
  - Fix crash changing CDROM media (rhbz#919504)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
  - qemu: Fix QMP detection of QXL graphics (rhbz#915352)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
  - conf: Add optional attribte primary to video <model> element (rhbz#915352)
  - qemu: Use newer -device video device in qemu commandline (rhbz#915352)
  - tests: Add one -device video device testcase (rhbz#915352)
  - qemu: Detect VGA_QXL capability correctly (rhbz#915352)
  - qemu: Support ram bar size for qxl devices (rhbz#915352)
  - conf: Don't leak 'primary' video property on error (rhbz#915352)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
  - storage: Cleanup logical volume creation code (rhbz#918754)
  - docs: Clarify semantics of sparse storage volumes (rhbz#918754)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
  - locking: Resolve resource leaks on non error path (rhbz#922095)
  - selinux: Resolve resource leak using the default disk label (rhbz#922095)
  - storage: Resolve resource leaks with cmd processing (rhbz#922095)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
  - storage: Need to add virCommandFree() (rhbz#922095)


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-32.1
changelog:
  - Resolves: rhbz#840089 -  sssd incorrectly sets shadowLastChange in seconds
                             not days


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-32.2
changelog:
  - Resolves: rhbz#867012 - SSSD does not auto renew kerberos credentials
                            when auth_provider is 'ipa'


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-32.3
changelog:
  - Resolves: rhbz#881460 - SSSD cannot cope with empty naming context coming
                            from Novell eDirectory


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915692 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915692 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915692 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-16
changelog:
  - Fix a GCC warning for looser throw specifier in
    boost::exception_ptr::~exception_ptr.
    (boost-1.41.0-exception_ptr.patch)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-19.1
changelog:
  - revert to polling for unknown filesystems, update
    known fs for tail and stat based on coreutils-8.21 (#924711)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.3
changelog:
  - util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
  - security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
  - security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
  - libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
  - security_manager.c: Append seclabel iff generated (rhbz#928879)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-7.2
changelog:
  - Resolves: rhbz#929100

  - Put handle to hdb in dispatch on unknown message (rhbz#929100)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#929100)
  - Properly check result of coroipcc_dispatch_put (rhbz#929100)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#929100)
  - coroipcs: Ensure rb data are not overwritten (rhbz#929100)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#929100)
  - Properly lock pending_semops (rhbz#929100)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#929100)


