# changelog

author: Andreas Schneider <asn@redhat.com> - 3.6.23-21
changelog:
  - resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
  - resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails


author: Andreas Schneider <asn@redhat.com> - 3.6.23-22
changelog:
  - resolves: #1290706 - CVE-2015-5299
  - related: #1290706 - CVE-2015-5296
  - related: #1290706 - CVE-2015-5252
  - related: #1290706 - CVE-2015-5330


author: Andreas Schneider <asn@redhat.com> - 3.6.23-26
changelog:
  - resolves: #1322686 - Fix CVE-2015-5370
  - resolves: #1322686 - Fix CVE-2016-2110
  - resolves: #1322686 - Fix CVE-2016-2111
  - resolves: #1322686 - Fix CVE-2016-2112
  - resolves: #1322686 - Fix CVE-2016-2115
  - resolves: #1322686 - Fix CVE-2016-2118 (Known as Badlock)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-29
changelog:
  - resolves: #1322687 - Fix CVE-2015-5370
  - resolves: #1322687 - Fix CVE-2016-2110
  - resolves: #1322687 - Fix CVE-2016-2111
  - resolves: #1322687 - Fix CVE-2016-2112
  - resolves: #1322687 - Fix CVE-2016-2115
  - resolves: #1322687 - Fix CVE-2016-2118 (Known as Badlock)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1329967 - Fix netlogon credential checks
  - resolves: #1329975 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1327697 - Fix netlogon credential checks
  - resolves: #1327746 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-37
changelog:
  - resolves: #1380151 - Fix memory leak in idmap_ad module
  - resolves: #1333561 - Fix smbclient connection issues to DFS shares
  - resolves: #1372611 - Allow ntlmsssp session key setup without signing
                         (Workaround for broken NetApp and EMC NAS)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-38
changelog:
  - resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                         empty list


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1428835 - Performance issues with vfs_dirsort and extended
                         attributes


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1391256 - Performance issues with vfs_dirsort and extended
                         attributes


author: Andreas Schneider <asn@redhat.com> - 3.6.24-44
changelog:
  - resolves: #1451105 - Fix trusted domain handling in winbind
  - resolves: #1431000 - Fix crash while trying to authenticate with a disabled
                         account
  - resolves: #1467395 - Add 'winbind request timeout' option


author: - Andreas Schneider <asn@redhat.com> - 4.0.0-61.rc4
changelog:
  - resolves: #1073356 - Fix CVE-2012-6150.
  - resolves: #1073356 - Fix CVE-2013-4496.
  - resolves: #1073356 - Fix CVE-2013-6442.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.0.0-62.rc4
changelog:
  - resolves: #1105502 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108843 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105572 - CVE-2014-0178: Uninitialized memory exposure.


author: Andreas Schneider <asn@redhat.com> - 4.0.0-67.rc4
changelog:
  - resolves: #1290708 - CVE-2015-7540
  - related: #1290708 - CVE-2015-5299
  - related: #1290708 - CVE-2015-5296
  - related: #1290708 - CVE-2015-5252
  - related: #1290708 - CVE-2015-5330


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-8
changelog:
  - Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
  - Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z


author: Andreas Schneider <asn@redhat.com> - 4.0.0-67.rc4
changelog:
  - resolves: #1290709 - CVE-2015-7540
  - related: #1290709 - CVE-2015-5299
  - related: #1290709 - CVE-2015-5296
  - related: #1290709 - CVE-2015-5252
  - related: #1290709 - CVE-2015-5330


author: Nils Philippsen <nils@redhat.com> - 1.0.21-1
changelog:
  - version 1.0.21
  - remove obsolete rpath, hal, genesys-gl841-registers patches
  - update pkgconfig, udev, man-utf8->man-encoding, epson-expression800,
    docs-utf8 patches
  - remove hal conditional
  - package man pages


author: Nils Philippsen <nils@redhat.com> - 1.0.21-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because SANE-enabled software is likely to deal with data coming
    from untrusted sources (client <-> saned via network)


author: Nils Philippsen <nils@redhat.com> - 1.0.21-4
changelog:
  - update udev rules for Fujitsu fi-6110 device (#987890)
  - fix bogus changelog dates
  - fix source URLs


author: <kwenning@redhat.com> - 1.2.1-30
changelog:
  - init-patch updated
  - Rebuild against RHEL-6.9
    Resolves: rhbz#1375244

  -* Mon Apr 4 2016 <kwenning@redhat.com> - 1.2.1-9
  - use SBD_OPTS when calling sbd
    Resolves: rhbz#1313246


author: <kwenning@redhat.com> - 1.2.1-31
changelog:
  - init-patch updated
  - added CONFDIR & INITDIR for distro indep init
  - added stripped down manpage
    Resolves: rhbz#1375244


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix incorrect max cpu frequency
    Resolves: #971053
  - Fix wrong UserModeTime and KernelModeTime
    Resolves: #974071
  - Fix restart of scfbd service in provider-register script
    Resolves: #1179878


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-1
changelog:
  - Update to sblim-sfcb-1.3.11
    Resolves: #633580
  - Compile with --enable-uds, i. e. enable unix domain socket local connect functionality
    Resolves: #620303
  - Create sfcb system group (used by basic authentication with PAM) in pre install scriptlet,
    remove it in post uninstall scriptlet
    Resolves: #618081
  - Fix default location where sfcbrepos is looking for schema files
    and simplify sfcbrepos command in post install sciptlet
    Resolves: #618080


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-2
changelog:
  - Checks for valid pointer before calling free() in providerDrv.c,
    result.c and support.c (backported from upstream)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-4
changelog:
  - Fix memory leak in sblim-sfcb
    Resolves: #1114798
  - Fix a zombie process of openwsmand (defunct) is left behind
    Resolves: #1110106


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.11-5
changelog:
  - Fix SIGSEGV in tool_mm_flush()
    Resolves: #907204
  - Fix minor init script inconsistencies
    Resolves: #805588


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-2
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)
    Resolves: #868905
  - Remove tog-pegasus requires
    Resolves: #745264


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-3
changelog:
  - Backport (slightly modified) configurable SSL version feature from upstream,
    update man page accordingly
    Resolves: #1239117


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-20
changelog:
  - register and deregister: if there is an error registering or deregistering
    one or more collection, skip it but return non-zero return code
  - fix the problem with metapackage dependencies when BuildArch is specified


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-21
changelog:
  - fix an obscure segfault when listing collections on i386
  - fix registration to work with slash-ended paths
  - add the %scl_dependency_generators macro
  - drop recursive ownership of /usr/lib within SCL root


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-22
changelog:
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add capability to make collection nfs mountable using macro nfsmountable.
  - removed the dependency generators and all related changes
    (maintainers' demands)


author: Lubos Kardos <lkardos@redhat.com - 20120927-23
changelog:
  - Modified paths of state and conf files
  - Add owning and creating of state and conf files if nfsmountable is defined
  - Add printing file names in error messages


author: Lubos Kardos <lkardos@redhat.com> - 20120927-25
changelog:
  - Creating filelist in build subdirectory instead of build directory.
  - Removing filelist before build.


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Andy Grover <agrover@redhat.com> - 1.0.24-9
changelog:
  - Redo patches to use 'git format-patch' naming
  - Add more backported patches:
    * 0014-iser-Don-t-wait-until-iser_ib_init-to-init-list_head.patch
    * 0015-iser-cleaning-iser-ib-objects-on-lld-exit.patch
    * 0016-iser-Don-t-release-IB-resources-if-were-not-allocate.patch
    * 0017-Fix-possible-segfault-on-logicalunit-update.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-14
changelog:
  - Add patches for write and verify support, rhbz #1094084
    * 0021-DPO-Add-emulation-of-DPO-bit-for-READ-WRITE-VERIFY10.patch
    * 0022-Add-support-for-WRITEVERIFY10-12-16.patch
    * 0023-sbc-Add-residual-handling-for-WRITE6-10-12-16-and-WR.patch


author: Andy Grover <agrover@redhat.com> - 1.0.24-17
changelog:
  - Add patches to fix #1186090, #852532, #1136405.
    * 0026-iscsi-fix-leak-of-task-for-delayed-management-reques.patch
    * 0027-Set-ExpCmdSn-and-MaxCmdSn-in-ISCSI_OP_R2T.patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - dropped patches (fixed upstream): exitpanic, certcnnul


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-5
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-9
changelog:
  - fixed MAXHOSTNAMELEN for FQDN
    resolves: rhbz#640234
  - fixed assertion if server connection is lost while making LDAP query
    resolves: rhbz#837007
  - fixed milterfdleaks patch to check socket before using fcntl on it
    resolves: rhbz#845821
  - fixed ldap_routing macro
    resolves: rhbz#890227
  - properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    resolves: rhbz#1106852


author: <dwalsh@redhat.com> - 3.0.47-3
changelog:
  - Sedispatch is not handling audit messages correctly, 
    this fix allows setroubleshoot to process alerts.
  Resolves: #575686


author: Miroslav Grepl <mgrepl@redhat.com> - 3.0.47-4
changelog:
  - Make sealert working if description contains parenthesis
  - Remove -H from man page
  Resolves:#788196


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.47-13.1
changelog:
  - setroubleshootd is set to be run as setroubleshoot user instead of root user
  Resolves: rhbz#1349435


author: Dan Horák <dan@danny.cz> - 1.28-2
changelog:
  - include rescan-scsi-bus script 1.35
  - rebase patches and add fix for issue mentioned in #538787
  - Related: #538787


author: David Sommerseth <davids@redhat.com> - 1.28-9
changelog:
  - Added packaging of COPYING (#974147)
  - Removed packaging of INSTALL (info not needed for binary installs)


author: David Sommerseth <davids@redhat.com> - 1.28-11
changelog:
  - Avoid deletion of /dev/null (#1245302)
  - Fix sg_persist returns "Host_status=0x11 is invalid", backport of DID_TRANSPORT_*/DID_TARGET_/DID_NEXUS_FAILURE flags (#886611)


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-16
changelog:
  - document that parent of a new user's home directory must exist
  - avoid skipping 2nd consecutive failures in pwconv grpconv (#787742)
  - avoid segfault when merging group entries in useradd
  - properly report that userdel found process with user's uid
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - mention that PAM is not configured with login.defs in the man page
  - create new shadow entry if missing in usermod (#1016516)
  - report error if usermod asked for moving homedir and it does not
    exist (#1089666)
  - fix various typos and mistakes in useradd manpage (#907837)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-20
changelog:
  - allow removal of expiration or last password change dates
    by using -1 as chage date argument again (#1183638)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-2
changelog:
  - usermod: make password unlocking compatible with passwd (#951743)
  - usermod: disallow ':' in raw password setting


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-2
changelog:
  - add explicit build-time and install-time dependencies on 389-ds-base 1.2.10,
    so that we know we build with transaction support (#829502)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-3
changelog:
  - backport fix for a slow memory leak (#840926)
  - tweak configure to disable explicit (wrong) transaction support (#829502)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-4
changelog:
  - backport fix for request argument memory leaks in NIS server (#967468)
  - backport fix for dispatching for multiple connected clients in the NIS
    plugin (#923336)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-6
changelog:
  - backport fix to not ignore modifications that affect whether or not an
    entry shows up in a compat map (#1056648)
  - backport fix to avoid potential crashes on domain or map removal (#1043639)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.40-7
changelog:
  - Add '!!' in front of encrypted password in NIS maps 
    if account in question is locked (#1298478)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.39.1-3
changelog:
  - extended smartctl man pages with examples how to use cciss
  - fix crash when starting selftest on megaraid controller


author: Michal Hlavinka <mhlavink@redhat.com> - 1:5.42-1
changelog:
  - updated to 5.42 (#698317)
  - improve 3ware raid controller support (#697235)
  - fix SCSI log page sanity check (#784925)


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-2
changelog:
  - Add -Wl,-z,relro to the linker flags in order to fix a rpmdiff
    error. These flags used to be provided indirectly by openssl, and after
    openssl stopped exporting them, they were added by
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch
    which was dropped during the rebase
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-3
changelog:
  - Add -Wl,-z,now as well to the link flags.  This flag was present in
    1002-gtk-Makefile.am-add-PIE-flags-to-libspice-client-gli.patch, and
    pkgwrangler still complains about:
    File /usr/lib/libspice-client-glib-2.0.so.8.5.0 lost GNU_RELRO security
    protection on i686
    Related: rhbz#1185434


author: Christophe Fergeau <cfergeau@redhat.com> 0.26-4
changelog:
  - Fix smartcard issues after VM restart (virsh destroy/virsh start)
    Resolves: rhbz#1205171
  - Remove obsolete patches
    Related: rhbz#1185434


author: Fabiano Fidêncio <fidencio@redhat.com> 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242605
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247920
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1265361
  - Add Client capability for windows monitor_config messsage
    Resolves: rhbz#1265359
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1247749
  - Drop isoc packages on low bandwith
    Resolves: rhbz#1276707


author: Pavel Grunt <pgrunt@redhat.com> 0.26-8
changelog:
  - Make grab session related
    Resolves: rhbz#1330652
  - Improve messages in usb redirection dialog
    Resolves: rhbz#1298772
  - Use proxy only when needed
    Resolves: rhbz#1306311


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-2
changelog:
  - Silence session agent error logging when not running in a vm
    Resolves: rhbz#999804
  - Release guest clipboard ownership on client disconnect
    Resolves: rhbz#1003977


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-5
changelog:
  - Add support for TIMESTAMP/STRING selection types, this fixes copy and paste
    issues with some applications (vncviewer for example).
    Resolves: rhbz#1117764


author: Fabiano Fidêncio <fidencio@redhat.com> 0.14.0-6
changelog:
  - randr: Make resolution changing more robust
    Resolves: rhbz#1206117, rhbz#1130080 and rhbz#1209550


author: Fabiano Fidêncio <fidencio@redhat.com> 0.14.0-8
changelog:
  - Cannot get same result enablng second monitor after it was disabled using
    Guest's "Display Preference"
    Resolves: rhbz#1086657


author: Victor Toso <victortoso@redhat.com> 0.14.0-12
changelog:
  - Do not allow file-transfer on locked session
    Resolves: rhbz#1323630
  - Do not allow file-transfer on login screen
    Resolves: rhbz#1323640


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-11
changelog:
  - Resolves: #1248855 - After updating to squid-3.1.23-9.el6,
    service squid {reload,restart} fails with "Operation not permitted"


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-13
changelog:
  - Resolves: #1230753 - insufficient check for running service in condrestart
    and try-restart actions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-14
changelog:
  - Related: #1248855 - After updating to squid-3.1.23-9.el6,
    service squid {reload,restart} fails with "Operation not permitted"
  - Related: #1230753 - insufficient check for running service in condrestart 
    and try-restart actions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-16.1
changelog:
  - Resolves: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-16.2
changelog:
  - Related: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-16.3
changelog:
  - Resolved: #1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws
  - Related: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-17
changelog:
  - Resolves: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-18
changelog:
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-19
changelog:
  - Resolved: #1334490 - CVE-2016-4554 CVE-2016-4556 squid: various flaws
  - Related: #1330573 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.1.23-24
changelog:
  - Resolves: #1235114 - Squid crashes with 'assertion failed: disk.cc:377:
    "fd >= 0"' after reloading the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-10
changelog:
  - Resolves: #1330575 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-11
changelog:
  - Related: #1330575 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 
    squid34: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-12
changelog:
  - Resolves: #1334500 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556
    squid34: various flaws
  - Resolves: #1334507 - CVE-2016-4553 squid34: squid: Cache poisoning 
    issue in HTTP Request handling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-13
changelog:
  - Resolves: #1303053 - Squid crashes with 'assertion failed: disk.cc:377:
    "fd >= 0"' after reloading the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.4.14-15
changelog:
  - Resolves: #1415874 - squid34 does not fallback protocol from IPv6 to IPv4
    in HTTPS connection even if the fix in bz1303067 is applied


author: Doug Ledford <dledford@redhat.com> - 0.0.4-11.el6
changelog:
  - Add the init script even though it isn't enabled by default
  - Fix the init script's usage of srp_daemon.conf
  - Resolves: bz815215, bz815234


author: Doug Ledford <dledford@redhat.com> - 0.0.4-12.el6
changelog:
  - Can't use %{name} macro in the %post and %preun as the service
    name is srpd while the package name is srptools
  - Related: bz815215


author: Doug Ledford <dledford@redhat.com> - 0.0.4-13.el6
changelog:
  - Need to background the srp_daemon.sh script in our init script, as
    srp_daemon.sh doesn't return until killed
  - Resolves: bz816087


author: Honggang Li <honli@redhat.com> - 1.0.3-2
changelog:
  - Adjust startup/shutdown priority to start srpd before netfs service
  - connect remote srp targets before start srpd
  - clean up status actions
  - Resolves: bz1233016


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-46
changelog:
  - Resolves: rhbz#1227860 - Provide a way to disable the cleanup task
  - Resolves: rhbz#1227863 - ignore_group_members doesn't work for subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47
changelog:
  - Resolves: rhbz#1232738 - Cache is not updated after user is deleted from
                             ldap server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.1
changelog:
  - Resolves: rhbz#1258398 - sysdb sudo search doesn't escape special
                             characters


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.6
changelog:
  - Resolves: rhbz#1291158 - Group members are not turned into ghost entries
                             when the user is purged from the SSSD cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.7
changelog:
  - Resolves: rhbz#1298252 - 'filter_users' in conjunction with
                             'default_domain_suffix'


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.8
changelog:
  - Resolves: rhbz#1305447 - sssd_nss memory usage keeps growing on
                             sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when
                             trying to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1259687 - sssd_nss memory usage keeps growing on
                              sssd-1.12.4-47.el6.x86_64 (RHEL6.7) when
                              trying to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-14
changelog:
  - Resolves: rhbz#1264705 - Allow SSSD to notify user of denial due to AD
                             account lockout


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-15
changelog:
  - Require a newer selinux-policy to avoid issues when prompting for SC PIN
  - Related: rhbz#1299066 - smartcard login does not prompt for pin when
                            ocsp checking is enabled (default config)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-16
changelog:
  - Resolves: rhbz#1308939 - After removing certificate from user in IPA
                             and even after sss_cache, FindByCertificate
                             still finds the user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-17
changelog:
  - Backport of a more minimal dependency patch to avoid changes to AD
    provider behaviour
  - Related: rhbz#1264705 - Allow SSSD to notify user of denial due to AD
                            account lockout


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-18
changelog:
  - Resolves: rhbz#1209600 - Getting ERROR (getpwnam() failed): Broken pipe
                             with 1.11.6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-20
changelog:
  - Actually apply patches from previous build
  - Resolves: rhbz#1313940 - sudorule not working with ipa sudo_provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-21
changelog:
  - Resolves: rhbz#1313940 - SSSD PAM module does not support multiple
                             password prompts (e.g. Password + Token) with sudo


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-22.2
changelog:
  - Resolves: rhbz#1342058 - In IPA-AD trust environment access is granted
                             to AD user even if the user is disabled on AD.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-22.6
changelog:
  - Explicitly Require the matching version of ding-libs
  - Related: rhbz#1379580 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-49
changelog:
  - Require the matching version of ding-libs
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-50
changelog:
  - Related: rhbz#1369921 - Members of nested netgroups configured in IdM
                            cannot be seen by getent on clients


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-51
changelog:
  - Revert the ding-libs requirement
  - Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-54
changelog:
  - Apply several more smartcard-related patches.
  - Related: rhbz#1300421 - Screen locks and smart card is removed - must
                            show a message to insert the correct smartcard


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-55
changelog:
  - Resolves: rhbz#1415785 - ldap_child does not remove temporary files
                             when it's killed with  SIGTERM


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-56
changelog:
  - Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present
  - Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-57
changelog:
  - Resolves: rhbz#1473005 - The originalMemberOf attribute disappears from
                             the cache, causing intermittent HBAC issues


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-58
changelog:
  - Resolves: rhbz#1534618 - ABRT crash - /usr/libexec/sssd/sssd_nss
                             [rhel-6.9.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-57
changelog:
  - Resolves: rhbz#1438360 - The originalMemberOf attribute disappears from
                             the cache, causing intermittent HBAC issues


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-58
changelog:
  - Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                             function is provided by the client app
  - Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                             failed user logins
  - Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
  - Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                             Global scope


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-59
changelog:
  - Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
  - Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
  - Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
  - Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.13.3-60
changelog:
  - Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
  - Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Avesh Agrwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-5
changelog:
  - Fix first connection failure when configuration pulled from stdin (#927928)
  - Log the negotiated protocol version to the logs (#1275611)


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-6
changelog:
  - Add support for TLSv1.1 and TLSv1.2, change the default for client from
    SSLv3 to all version support
  - Add support for DH and ECDH ciphersuites on server


author: William Poteat <wpoteat@redhat.com> 1.14.6-1
changelog:
  - 1149095: Fix error when yum updates subman modules (alikins@redhat.com)
  - 1159163: Fix prod id del because of --disablerepo (alikins@redhat.com)
  - 1180273: Migrate from RHN Classic without credentials (awood@redhat.com)
  - 1213418: Message agreement between GUI and CLI in disconnected system
    (wpoteat@redhat.com)
  - 1199597: Fix UnicodeError from repolib's report (alikins@redhat.com)
  - 1209519: Removed excerpt from man page listing --auto as a requirement
    (crog@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.7-1
changelog:
  - 1220287: Proxy Save accel fix with latest strings. (alikins@redhat.com)
  - 1212515: Print error message for missing systemid file. (awood@redhat.com)
  - Added missing option to the migration manual page (crog@redhat.com)
  - Specified error codes on system_exit in rhn-migrate-classic-to-rhsm
    (crog@redhat.com)
  - Updated the manual pages for the attach command (crog@redhat.com)
  - Remove locale based DatePicker tests. (alikins@redhat.com)
  - Make rhsm-debug test cases clean up better. (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.8-1
changelog:
  - 1223860: Revert to default value on remove command (wpoteat@redhat.com)
  - translation sync from zanata (alikins@redhat.com)
  - 1223852: fix 'Deletedfd' string in repo report (alikins@redhat.com)
  - Remove gnome-python2-canvas,gnome-python2 deps (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.9-1
changelog:
  - 1223038: Fix API used by openshift clients. (alikins@redhat.com)
  - 1195824: Latest strings from zanata (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.10-1
changelog:
  - 1225435: Use LC_ALL instead of LANG for lscpu. (alikins@redhat.com)
  - 1228807: Make disabling proxy via gui apply (alikins@redhat.com)
  - 1224806: Prevent yum blocking on rhsm locks (alikins@redhat.com)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-19
changelog:
  - RHEL-6.7 erratum
    - modified the authlogicfix patch to fix #1144448
    - fixed a bug in the ldapusermatchfix patch
    Resolves: rhbz#1144448
    Resolves: rhbz#1142122


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - removed defaults option requiretty from /etc/sudoers
    - backported pam_service and pam_login_service defaults options
    - implemented a new defaults option for changing netgroup processing
      semantics
    - fixed visudo's quiet cli option
    Resolves: rhbz#1248695
    Resolves: rhbz#1247231
    Resolves: rhbz#1241896
    Resolves: rhbz#1197885
    Resolves: rhbz#1233205


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - fixed ldap's and sssd's sudoOption value and remove quotes
    - fixed ldap's and sssd's sudoOption whitespaces parse problem
    Resolves: rhbz#1144422
    Resolves: rhbz#1279447


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - search also by user id when fetching rules from LDAP
    Resolves: rhbz#1135531


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-22
changelog:
  - RHEL-6.8 erratum
    - fixed potential getcwd failure, resulting in Null pointer exception 
    Resolves: rhbz#1284886


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-23
changelog:
  - RHEL-6.8 erratum
    - fixed handling of closefrom_override defaults option
    Resolves: rhbz#1309976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-24
changelog:
  - RHEL-6.8 erratum
    - fixed a bug causing that non-root users can list privileges of
      other users
    Resolves: rhbz#1312481


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-25
changelog:
  - RHEL-6.9 erratum
    - Fix "sudo -l command" in the LDAP and SSS backends when the command
      is not allowed.
    Resolves: rhbz#1374410
    - Fix sudo log file wrong group ownership
    Resolves: rhbz#1330001
    - Fix sudo parsing sudoers with user's locale
    Resolves: rhbz#1318374


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-26
changelog:
  - RHEL-6.9 erratum
    - Fix race condition when creating /var/log/sudo-io direcotry
    Resolves: rhbz#1365156


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-22
changelog:
  - resolves: #996134
    fixed umask command in sa1 script
  - resolves: #967386
    documented and partialy fixed regression caused by sysstat-9.0.4-diskstats.patch


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-23
changelog:
  - resolves: #1088998
    count with xz compressed files as well in sa2 script
  - resolves: #1012575
    fix file mode of sysstat cron file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-24
changelog:
  - resolves: #921612
    fix issues when sa data files weren't correctly overwritten in some cases.
    Part of this fix is lowering the line when the sa data files are kept
    in subfolders (from 28 to 25 days), and because of this, the default history
    value was also lowered from 28 to 25 days.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-25
changelog:
  - related: #921612
    reverted the boundary when the sa data files are stored in directories
    and default history value back to 28. Without the revert, backward
    compatibility could be broken in some cases.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-26
changelog:
  - resolves: #1110851
    added sysstat(5) man page describing /etc/sysconfig/sysstat file
  - resolves: #1102603
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-27
changelog:
  - resolves: #1124180
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-28
changelog:
  - resolves: #1224878
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #887231
    fixed segfaults on bogus localtime input
  - resolves: #1185057
    added two new columns to iostat: r_await and w_await
  - resolves: #1188612
    fixed description of %util field in sar(1) and iostat(1) man pages


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-31
changelog:
  - related: #1224878
    in some corner cases, pidstat could still output values for % CPU bigger
    than 100; this commit fixes the issue


author: Michal Sekletar <msekleta@redhat.com> - 9.0.4-32
changelog:
  - cifsiostat: report correct number of open/closed files (#1346844)
  - sar: output timestamps when running with ko_KR.UTF-8 locale (#1363947)


author: Jiri Popelka <jpopelka@redhat.com> 1.1.16-18
changelog:
  - Don't leave symlinks in /tmp after adding a printer (bug #556548).
  - Fixed probe-printer-typo.patch (bug #579864).
  - Fixed stack overflow in pycups (bug #584991).
  - Moved COPYING file from main package to libs subpackage (bug #613708).
  - Fixed gtk_label_autowrap.py by updating it to latest version (bug #633595).
  - Set D-Bus timeout when calling asynchronously (bug #634252).
  - More translatable strings marked as such (bug #634436).
  - Backport translations from upstream (bug #634436).
  - Don't rename when names differ only in size of characters (bug #636523).
  - Stub out getJockeyDriver_thread() (bug #639624).
  - Applet could cause high cupsd CPU usage (bug #645426).
  - Don't crash when DISPLAY is unset (bug #676339, bug #676343).
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (bug #708519).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-23
changelog:
  - Use thread-local storage for password callback function (bug #744519).
  - Don't handle tooltips during mainloop recursion (bug #739745).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-24
changelog:
  - Fixed pycups documentation (bug #854937).
  - Prevent pycups segmentation fault when handling UTF-8 input (bug #1063224).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.1.16-26
changelog:
  - 1333633 - [ALL_LANG][RHEL6.8 RC][system-config-printer] - Translation incomplete
  - 784817 - Segfault when moving / removing printer from class


author: Frank Ch. Eigler <fche@redhat.com> - 2.5-4
changelog:
  - added BZ1099133.patch: at_var_cu test
  - added BZ1099472.patch: cast-scope.exp test
  - added BZ1099555.patch: gtod.exp test 
  - added BZ1099757.patch: vars.exp test
  - added BZ1099791.patch: vma_vdso test
  - added BZ1099825.patch: probe_by_pid test
  - added BZ1100813.patch: buildok tests
  - added BZ1109084.patch: initscript name sensitivity


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-6
changelog:
  - fix for uninit defect (revealed by Coverity) added with %patch11.
  - recovered traditional behaviour of '--keep-old-files' option and added new
    option '--skip-old-files' (#799252)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-7
changelog:
  - disable tests/remfiles01.at for running as a privileged user (#687972)
  - fix undesired error exit on receiving SIGPIPE during performing --list
    operation (#807728) and related fix for test suite -- skip SIGPIPE-dependent
    tests in environments ignoring SIGPIPE


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-8
changelog:
  - fix for bad file matching during extracting concrete files from an archive
    (backported fix from fedora 14) (#841308)
  - typo - better separate comments in spec file


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-9
changelog:
  - backport also --listed-incremental crash fix, this patch is in upstream and in
    fedora from f14 (related to #841308)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-10
changelog:
  - backport upstream patch to make sure that file matching is done before file
    file-name transformation (#875727)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-11
changelog:
  - avoid crash by backporting upstream patch for internal construction of
    file-name hash table (#877769).


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-12
changelog:
  - better auto-recognize xz compressed archives (#1056672)
  - fix --verify option (#923359)
  - fnmatch fixes (#1034360)


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-14
changelog:
  - fix error while storing UID > 2^21 into posix format archive (rhbz#1247788)
  - don't mistakenly set default ACLs (#1220891)


author: Petr Kubat <pkubat@redhat.com> - 1.23-15
changelog:
  - fix error when compressing/listing large sparse files (#1334559)
  - improve sparse mode in genfile for build-time-testsuite purposes


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-4.20090921gitdf3cb4.2
changelog:
  - add support for pcap_setdirection, -P commandline flag (#1099701)
  - add support for nano second timestamps, -J flag and --timestamp-preciosion (#1045601)
  - fix cdp dissector, allow zero-length data frames (#1130111)
  - allow specifying NIC names which start with number (#972396)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-5.20090921gitdf3cb4.2
changelog:
  - regenerate patch for pcap_setdirection support. Added detection of the needed
    libpcap functionality to configure script


author: Michal Ruprich - 14:4.0.0-10.20090921gitdf3cb4.2
changelog:
  - Resolves: #1339662 -  Race condition between SIGALARM handler function verbose_stats_dump() and main()->pcap_close()


author: Michal Ruprich - 14:4.0.0-11.20090921gitdf3cb4.2
changelog:
  - Related: #1339662 - Race condition between SIGALARM handler function verbose_stats_dump() and main()->pcap_close()
                      - Previous patch changed to upstream fix


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.17-35.el6_8.1
changelog:
  - fix regression with 'jobs' builtin output not going to stdout (bug #1357127)
  - fix several regressions in tcsh-6.17.00-quote-backslashes-properly.patch (bug #1357126)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.17-36
changelog:
  - fix regression with 'jobs' builtin output not going to stdout (#1338986)
  - fix several regressions in tcsh-6.17.00-quote-backslashes-properly.patch (#1334751)


author: Adam Tkac <atkac redhat com> 1:0.17-46
changelog:
  - changes related package review (#226484)
  - remove unused patches
    - telnet-0.17-linemode.patch
    - telnet-0.17-env-5x.patch


author: Michal Sekletar <msekleta@redhat.com> 1:0.17-48
changelog:
  - reuse utmp entries correctly
  - break out from infinite loop if we tried to bind to non-existing address (#772912)
  - mitigate possibility of self-deadlock while updating utmp or wtmp (#832059)


author: Jiri Skala <jskala@redhat.com> - 0.49-6
changelog:
  - Resolves: #655830 - transferring small files using -v returns strange values
  - Resolves: #714240 - utimeout option parsing buffer overflow


author: Tim Waugh <twaugh@redhat.com> 1.1.0-9
changelog:
  - Init script fixes:
    - Attempt to start all configured servers (bug #562669, bug #768405).
    - Avoid problems when user's configured shell is not bash (bug #949522).
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #958988, bug #920373).
  - Avoid initializing the vnc extension twice (bug #1004093).
  - Use exceptions instead of asserts for ZRLE decoding boundary checks
    (bug #1078508).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-13
changelog:
  - Added versioned pixman and libX11 dependencies (bug #917717,
    bug #991285).
  - Link against system-wide libjpeg-turbo (bug #956779).
  - Describe -SecurityTypes option in man pages (bug #882952).
  - Fixed kbase URL in sysconfig file (bug #728981).


author: Tim Waugh <twaugh@redhat.com> 1.1.0-16
changelog:
  - Unknown pseudo-encodings (those with negative values) would cause
    vncviewer to crash (bug #1121041).
  - Set source as well as target when building java as some JDKs require
    this (bug #1078427).


author: Jan Grulich <jgrulich@redhat.com> 1.1.0-17
changelog:
  - Rebuild against xorg-x11-server-1.17
    Resolves: bz#1248637
  - Added Requires: libXfont
    Resolves: bz#1011315
  - Remove lock file after stopping vncserver service
    Resolves: bz#1236559


author: Jan Grulich <jgrulich@redhat.com> 1.1.0-20
changelog:
  - Rebuild against fixed xorg-x11-server to avoid automatical disconnects
    when initiazed from xinetd
    Resolves: bz#1390458


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-6
changelog:
  - Do not remove Python multiprocessing sockets.  Patch by Chris St. Pierre
    <chris.a.st.pierre@gmail.com>.
    Resolves: #1058310


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-1
changelog:
  - Update to upstream version 2.11.0
    Resolves: #633577
  - Improve package to comply multilib policy
    Resolves: #607722
  - Don't strip debug information
    Resolves: #693389
  - Change build options
    Resolves: #694513


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-2
changelog:
  - Add -libs requirement with explicit version to the main package
  - Build with -fno-strict-aliasing
  - Use correct init script
  - Add OpenSLP support
    Resolves: #712525


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.0-3
changelog:
  - Backport upstream patch which enables the embedded instanaces to have
    correct empty string values
    Resolves: #796191
  - Add "cim-server" to provides
    Resolves: #799040


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-1
changelog:
  - Update to upstream version 2.12.0
    Resolves: #825471, #739118, #716474
  - Change post created symlinks group owner to 'pegasus'
    Resolves: #759064
  - Fix invocation of useradd without specifying a UID
    Resolves: #800319
  - Fix initscript is not world readable
    Resolves: #824297


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-2
changelog:
  - Fix local-or-remote-auth patch to work with IPv6 and with enabled
    privilege separation
    Resolves: #869664


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-4
changelog:
  - Backported and slightly modified sslBackwardCompatibility option for disabling
    unsafe SSLv3 protocol
    Resolves: #1238329


author: David Knox <dknox@redhat.com> 0:6.0.24-84
changelog:
  - Resolves: rhbz#1022061 Tomcat init script needs to be adjusted to kill tomcat
  - if stop is unsuccessful


author: David Knox <dknox@redhat.com> 0:6.0.24-88
changelog:
  - Related: rhbz#1022061 changed in init file. Remove test
  - in function stop for result after initial command to
  - stop.


author: John Kacur <jkacur@redhat.com>
changelog:
  - Rebasing to trace-cmd-1.0.2
  - Added parse-events-Do-not-fail-on-FORMAT-TOO-BIG-event-err.patch
  - Added trace-cmd-Prevent-latency-tracer-plugins-from-doing-.patch
  - Added trace-cmd-Prevent-print_graph_duration-buffer-overfl.patch


author: John Kacur <jkacur@redhat.com> - 1.0.5-8
changelog:
  - trace-cmd: Use splice to filter out rest of buffer {746656}
  - trace-cmd: Do not use threads for extract {746656}
  Resolves:bz746656


author: John Kacur <jkacur@redhat.com> - 1.0.5-11
changelog:
  - Rework spec to use apply patches separate from upstream
  - trace-cmd-Add-checks-for-invalid-pointers-to-fix-seg.patch (879814)
  Resolves:bz879814


author: John Kacur <jkacur@redhat.com> - 2.2.4-3
changelog:
  - trace-cmd-don-t-call-free-on-tracing-and-path-more-t.patch
  - trace-cmd-trace-cmd.c-Don-t-deref-re-if-it-is-NULL.patch
  - trace-cmd-trace-recorder.c-Prevent-free-of-unitializ.patch
  - trace-cmd-trace-util.c-Prevent-resource-leak-by-clos.patch
  Resolves: rhbz#1288579


author: Harald Hoyer <harald@redhat.com> 147-2.65
changelog:
  - 80-drivers.rules: only make an exception for ipmi for
                      modprobe with DRIVER set
  Resolves: rhbz#1268251


author: Michal Sekletar <msekleta@redhat.com> - 147-2.66
changelog:
  - prevent creation of duplicate udev rules by write_net_rules helper (#652499)
  - fix memory leak in scsi_id (#891669)
  - introduce SECLABEL{selinux} for setting explicit SELinux labels on device nodes (#1015300)
  - for ATA disks udev will now also create by-id/wwn-* symlinks when appropriate (#1220617)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.0.1-8.vl6
changelog:
  - Allow extra mount options from udev rules (#673102, #681875)
  - Do not force-unmount devices marked as DM_SUSPENDED (#1121742)


author: Tomas Smetana <tsmetana@redhat.com> - 1.0.1-11.vl6
changelog:
  - Fix LUKS errors on re-inserting the encrypted disk
  - Plug a memory leak
  - Related: rhbz#1183131
  - Related: rhbz#965206


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-20
changelog:
  - Install tmpfiles configuration into /usr/lib/tmpfiles.d (#1180995)
  - Fix root key management to comply to RFC5011 (#1180267)


author: Petr Menšík <pemensik@redhat.com> - 1.4.20-23.4
changelog:
  - Update trust anchors (#1458345)
  - Update managed keys from trigger
  - Fix periodic updates of root.key


author: Anna Khaitovich <akhaitov@redhat.com> - 1.4.20-27.1
changelog:
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.4.20-28.1
changelog:
  - Fix unbound-1.4.20-amplifying-an-incoming-query.patch patch so it won't produce compiler warnings
  - Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.4.20-29.1
changelog:
  - Fix segfault in unbound-1.4.20-amplifying-an-incoming-query.patch
  - Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch,
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-2
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196133 #1196121 #1196125 #1196129


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-3
changelog:
  - Fix problem with symlink errors in archive with many files
  - add support of non-latin and non-unicode encodings for filenames
    Resolves: rhbz#740012 rhbz#885540


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-4
changelog:
  - Added patch for build option "-Werror=format-security"
  - Fix print of non-ascii filenames
    Resolves: rhbz#1284896


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 0.6.5-15
changelog:
  - fix issue with multiple nih_error_raise calls in previous patch
  - reset console only for console owners (#1046190)


author: Hans de Goede <hdegoede@redhat.com> - 0.4.3-1
changelog:
  - Update to upstream 0.4.3 release
  - Don't crash on devices in unconfigured state
  - Resolves: rhbz#808758
  - Significantly speed up reset handling
  - Resolves: rhbz#808730


author: Hans de Goede <hdegoede@redhat.com> - 0.5.1-1
changelog:
  - Update to upstream 0.5.1 release
  - Resolves: rhbz#842356
  - Remove bulk packets time out, this fixes various devices not working
  - Resolves: rhbz#834560
  - Add support to libusbredirparser for state serialization
  - Resolves: rhbz#842316
  - Drop isochronous packets when the network is too slow to keep up
  - Resolves: rhbz#855737


author: Hans de Goede <hdegoede@redhat.com> - 0.5.1-2
changelog:
  - Add upstream patch to fix usbredirparser headerlen bug when talking to
    the standalone usbredirserver
  - Resolves: rhbz#1085318
  - Add upstream patch with do-not-reset-device-blacklist
  - Extend blacklist with 2798:0001
  - Resolves: rhbz#1115917


author: Victor Toso <victortoso@redhat.com> - 0.5.1-3
changelog:
  - Add downstream patch which includes a new callback for usbredir
    clients in order to drop isoc packets if client buffer is too big
  - Add downstream patch defining USBREDIR_VERSION so applications can
    test against which version they are building
  - Resolves: rhbz#1290749


author: Karsten Hopp <karsten@redhat.com> 0.82-5
changelog:
  - drop ExcludeArch: s390 s390x as we need this package on s390x to be able to build
    p.e. udev without any hacks


author: Lukáš Nykrýn <lnykryn@redhat.com> - 003-5
changelog:
  - add support in lsusb to dump hardware hierarchy tree
  - fix coverity defects
  - add additional whitespace to lsusb.py for higher USB3 transfer rates
  - typo in man page for usb-devices
  - Resolves: #1033091, #735042, #746054, #1011232


author: Karel Zak <kzak@redhat.com> 2.17.2-12.19
changelog:
  - fix #1088411 - lsblk does not list dm-multipath and partitioned devices
  - fix #1215840 - slogins segfault and failure to allocate memory
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty
  - fix #1168390 - lscpu doesn't show all nodes on a discontinuous NUMA setup
  - fix #1191236 - 'umount -f' calls readlink on dead NFS mounts and hangs
  - fix #1172297 - umount --fake fails to edit mtab for NFS mounts which are already gone
  - fix #961148  - RHEL6: swapon: add "discard" support
  - fix #1150302 - ionice support class names
  - fix #1085062 - fdisk -l fails to fully process /proc/partitions when multipath device
  - fix #1122839 - fallocate and findmnt have wrong options according to man pages
  - fix #1089663 - Not all xfs mount options are described in mount(8)
  - fix #1295737 - man page for hwclock doesn't include --compare option
  - fix #1140594 - mount --move badly documented
  - fix #1296894 - RHEL6: update audit event in hwclock
  - fix #1266191 - fdisk does not handle >2TB disks correctly


author: Karel Zak <kzak@redhat.com> 2.17.2-12.16
changelog:
  - fix #1033309 - man rename references mmv command which is not available
  - fix #1039187 - taskset man page PERMISSIONS section is incorrect
  - fix #999625 - mount does not appear to be correctly documented for default mount options
  - fix #1004021 - document blkid -w behaviour
  - fix #1011590 - fdisk: Floating point exception on multipath mapped device
  - fix #1031641 - findmnt should handle better trailing "/" in /proc/mounts entries
  - fix #1104575 - kill(1) doesn't check errno after calling strtol()
  - fix #1049055 - backport PID ns support to unshare(1) in util-linux-ng
  - fix #957906 - backport 'nsenter' utility to util-linux
  - fix #619521 - requesting to add logins(1m) command to distribution of Red Hat


author: Karel Zak <kzak@redhat.com> 2.17.2-12.26
changelog:
  - fix #1320360 - lscpu shows wrong "Virtualization type" on Xen paravirtualization guest (PV)
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1310035 - Hostname not being displayed besides the telnet login prompt
  - fix #1310317 - fdisk -l fdisk double open fd
  - fix #1337478 - wrong error handler and/or error message on fdisk call as not root user


author: Karel Zak <kzak@redhat.com> 2.17.2-12.27
changelog:
  - fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-5.2
changelog:
  - 1724045 - fix CVE-2019-12735 the :source! command allows arbitrary command execution via the modeline
  - fix spec warnings about expanding macros


author: Marek Kasik <mkasik@redhat.com> 2.28.1-2
changelog:
  - Don't crash when the history file is empty (#552076)
  - Fix mixed use of spaces and tabs in spec file
  - Set %defattr for devel subpackage
  - Add ChangeLog to docs of devel subpackage
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> 2.28.1-8
changelog:
  - Backport RDP support
  - Backport scaling of RDP sessions
  - Backport Minimize button
  - Backport storing of credential to keyring
  - Backport translations for new strings
  - Resolves: #1215093


author: Marek Kasik <mkasik@redhat.com> 2.28.1-10
changelog:
  - Don't capture key events of other tabs
  - Allow different logins to the same host
  - Ignore active-plugins GConf key
  - Related: #1215093


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add vino-2.8.1-sanity-check-fb-update.patch
    Fix for CVE-2011-0904 and CVE-2011-0904
    - Bugs #694456, #694455


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add reachability.patch
    Remove UI about whether the is only reachable locally or not.
    Fix for CVE-2011-1164
    - Bug #553477


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-22
changelog:
  - Fix alignment of Preferences/VM Details (rhbz#1094083)
  - Fix description of "Source Name" in create-pool (rhbz#1094005)
  - Handle ipv6 addresses (rhbz#870383)
  - virt-manager: escape host string (rhbz#1094600)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-29
changelog:
  - Use correct signal and callback names to catch cpu-threads property changes (rhbz#1190641)
  - Fix crash caused by closing an unowned fd (rhbz#1174464)


author: Pavel Hrdina <phrdina@redhat.com> - 0.9.0-32
changelog:
  - console: add support to forget password (rhbz#1301841)
  - create: report an error if storage doesn't exist for import installation (rhbz#1305209)
  - uihelpers: fix detection of networks (rhbz#1333290)


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-5
changelog:
  - Clean up on connection's errors treatment
    Related: rhbz#1085216
  - Zooming out changes display resolution of spice guest
    Resolves: rhbz#1206460
  - Virtual desktops, mouse actions goes to wrong display
    Resolves: rhbz#1206216
  - virt-viewer --wait option should require a domain name
    Resolves: rhbz#1209398
  - virt-viewer set hotkeys for release-cursor doesn't work
    Resolves: rhbz#1206106


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-7
changelog:
  - Allow any zoom level for VNC connections
    Resolves: rhbz#1211216
  - Make sure that minimum zoom level is lower than NORMAL_ZOOM_LEVEL
    Related: rhbz#1206460


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-8
changelog:
  - Set initial zoom only once
    Related: rhbz#1221501
  - Add 'admin' key to [ovirt] .vv file section
    Resolves: rhbz#1289969
  - Shortcuts missing from "Send key" menu  when started using plugin
    Resolves: rhbz#1230603
  - Set keepAlive on libvirt connection
    Resolves: rhbz#1289971
  - Allow resize windows to any size
    Resolves: rhbz#1289972 and rhbz#1221501
  - Update virt-viewer-events.c to match libvirt-glib's event file
    Resolves: rhbz#1246395
  - Error message continuously popping out when stopping libvirtd
    Resolves: rhbz#1285163
  - Fix choose VM dialog alt-tab in gnome2
    Resolves: rhbz#1223285
  - Disable extra displays in fullscreen mode
    Resolves: rhbz#1212802
  - Fix virt-viewer --reconnect crash with SPICE VMs
    Resolves: rhbz#1287462


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-9
changelog:
  - Update translations
    Resolves: rhbz#1194474
  - Add support for proxy-uri libgovirt property
    Resolves: rhbz#1292765


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-10
changelog:
  - Set guest name/uuid when using VNC
    Resolves: rhbz#1293878
  - Fix crash when disabling last enabled display
    Resolves: rhbz#1294937


author: Jonathon Jongsma <jjongsma@redhat.com> - 2.0-12
changelog:
  - The last change was incomplete. We need to define the OSID for the build in
    order for the minum version check to work properly.
    Resolves: rhbz#1295944


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-13
changelog:
  - Use --with-buildid for RHEL6 builds
    Resolves: rhbz#1300639
  - Set useful values for MIM_DISPLAY_{WIDTH,HEIGHT} and use them for
    desktop-{width,height} properties.
    Resolves: rhbz#1296878


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.0-14
changelog:
  - Monitor mapping doesn't properly adjust resolutions
    Resolves: rhbz#1309234
  - Return early on empty monitor mapping
    Resolves: rhbz#1304648
  - Update translations
    Resolves: rhbz#1194474


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.0-15
changelog:
  - Only use active ISO domains for foreign menu
    Resolves: rhbz#1313376
  - Allow to cancel authentication without showing error dialog
    Resolves: rhbz#1318575
  - Set display menu not sensitive when needed
    Resolves: rhbz#1360253
  - Set toolbar buttons not sensitive when needed
    Resolves: rhbz#1360253
  - Do not show usbredir button without session
    Resolves: rhbz#1360253
  - GtkRecentChooserWidget is not suitable for mnemonic activation
    Related: rhbz#1351562
  - Use a different mnemonic for Connection Address widget
    Related: rhbz#1351562
  - Add some missing mnemonics to menu items
    Resolves: rhbz#1351890
  - Add mnemonics for each display item
    Resolves: rhbz#1351890
  - Avoid crashing when using invalid video config
    Resolves: rhbz#1310974
  - Do not crash on NULL display
    Resolves: rhbz#1310974
  - Do not ignore usb-filter in vv-file
    Resolves: rhbz#1327525
  - Add parameter for client monitors in monitor-mapping
    Resolves: rhbz#1351881
  - Use debug to inform about smartcard shortcuts state
    Related: rhbz#1351876
  - Check validity of hotkey
    Resolves: rhbz#1351876


author: Pavel Grunt <pgrunt@redhat.com> - 2.0-16
changelog:
  - Inform about unix socket connection failure
    Resolves: rhbz#1377214
  - Fix format of displayed string for it_IT
    Resolves: rhbz#1325127


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.1
changelog:
  - Add support for IBM PowerVM Lx86 Linux/x86 emulator (RHBZ#668857).
  - Move configure into build (not prep).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.2
changelog:
  - Add support for Microsoft HyperV (RHBZ#670272).
  - Add support for Hitachi Virtage (RHBZ#670530).
  - Add support for EC2 (Xen) instances (RHBZ#671126).  This includes
    backporting the test framework and enabling tests.
  - Add support for IBM Systemz z/VM, LPAR (RHBZ#671132).


author: Richard W.M. Jones <rjones@redhat.com> - 1.3-4.4
changelog:
  - Various improvements to the wording in the manual page.
    resolves: rhbz#672285
  - Confirm support for Microsoft HyperV and add a regression test.
    resolves: rhbz#670272


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.1
changelog:
  - Rebase to virt-what 1.11.
    resolves: rhbz#672211
  - Add patch "IA64 Xen HVM should print 'xen-hvm' not 'xen-domU'" from upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-1.2
changelog:
  - Add patch to fix dmidecode detection of Hitachi Virtage
    (thanks Satoru Moriya, Masaki Kimura)
    resolves: rhbz#829427


author: Jiri Skala <jskala@rehat.com> - 2.2.2-9
changelog:
  - Resolves: #785084 - vsftpd can not handle square brackets in ls
  - Resolves: #785061 - vsftpd child terminates when listing files with UID/GID larger than signed in
  - Resolves: #717411 - Connection failures during upload using PORT not handled cleanly
  - Resolves: #752954 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #745133 - vsftpd: documentation for 'max_per_ip' default setting is wrong
  - Resolves: #765757 - SITE HELP offers CHMOD even when it is disabled/unavailable
  - Resolves: #701300 - vsftpd.conf lists incorrect default value for xferlog_file
  - Resolvse: #785642 - Invalid error recovery in vsf_privop_pasv_listen()


author: Martin Osvald <mosvald@rehat.com> - 2.2.2-14
changelog:
  - Resolves: #1092877 - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d configuration


author: Martin Osvald <mosvald@rehat.com> - 2.2.2-15
changelog:
  - Resolves: #816486 - Timestamp problem
  - Resolves: #849993 - deny_file, hide_file
  - Resolves: #863061 - "service vsftpd stop" not stopping all vsftpd processes
  - Resolves: #894340 - The vsftpd doesn't remove failed upload when the delete_failed_uploads
    is enabled and the network cable is unplagged
  - Resolves: #1058695 - [RFE] vsftpd does not support DHE cipher suites
  - Resolves: #1058710 - [RFE] vsftpd does not support ECDHE cipher suites
  - Resolves: #1065361 - closing a non-opened file when connection fails with a message "Security: Bad IP connecting." 
  - Resolves: #1103754 - ssl_request_cert paragraph in the vsftpd.conf man page gets rendered incorrectly
  - Resolves: #1182928 - [RFE] vsftpd should permit specified TLS versions only.


author: Tomas Hozza <thozza@redhat.com> 1.12-5
changelog:
  - Fix the parsing of weblink when doing recursive retrieving (#960137)
  - Fix errors found by static analysis of source code (#873216)


author: Tomas Hozza <thozza@redhat.com> - 1.12-8
changelog:
  - Added build dependency needed to run HTTP unit tests (Related #1295847)
  - Explicitly disabled IDN/IRI support during build due to QA TPS test failures (Related #1295847)


author: Peter Hatina <phatina@redhat.com> - 1.8.10-16
changelog:
  - security patches
  - Resolves: CVE-2014-8710
              CVE-2014-8711
              CVE-2014-8712
              CVE-2014-8713
              CVE-2014-8714
              CVE-2015-0562
              CVE-2015-0564


author: Martin Sehnoutka <msehnout@redhat.com> - 1.8.10-21
changelog:
  - Resolves: #1222902 - Encrypt-then-MAC TLS extension unrecognised
  - Patch also include master secret extension decoding in TLS


author: Martin Sehnoutka <msehnout@redhat.com> - 1.8.10-24
changelog:
  - Related: #1245887
  - segfault with CVE-2013-4075 capture
  - valgrind error with CVE-2015-3812 capture


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-1
changelog:
  - Update to 0.7.3 - for nl80211 and background scanning (rh #713280)
  - Drop upstreamed and backported patches


author: Dan Williams <dcbw@redhat.com> - 1:0.7.3-4
changelog:
  - Fix issues with Opportunistic/Proactive Key Caching (OKC) (rh #813579)
  - Be less aggressive when choosing to roam (rh #837402)
  - Don't install manpage for wpa_gui (rh #672976)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.7.3-5
changelog:
  - Add domain_match config option from upstream (rh #1186806) (rh #1178263)
  - Include peer certificate in EAP events for use by clients
  - Add dbus signal for information about server certification
  - eapol_test: Add option for writing server certificate chain to a file


author: Lubomir Rintel <lrintel@redhat.com> - 1:0.7.3-8
changelog:
  - Enable syslog logging support (rh #822128)
  - Support run-time rotation the debug log file (rh #908306)
  - Fix scriptlet dependencies (rh #712848)
  - Enable timestampes in logs (rh #1150004)


author: Davide Caratti <dcaratti@redhat.com> - 1:0.7.3-9.1
changelog:
  - avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
    CVE-2017-13080, CVE-2017-13081, CVE-2017-13082)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.1.0-5
changelog:
  - Use tarball from upstream
  - Add COPYING, README and AUTHORS to sources (previously placed in the, probably modified, tarball)


author: Samantha N. Bueno <sbueno@redhat.com> 3.3.15-1
changelog:
  - rebase to 3.3.15 version
  - drop obsolete ncurses, pfkeys, resize, and script patches
  - modify a few other patches to apply cleanly to new version
  - Resolves: rhbz#1171849
  - add patch to fix some typos in man pages
  - change location of manpages to section 5
  - Resolves: rhbz#893912


author: Adam Jackson <ajax@redhat.com> 0.3.6-5
changelog:
  - Add <xcb/xcb_util.h> and xcb-util.pc for source compat with >= 0.3.8
  - Backport pkgconfig fix from upstream
  - Don't install -{icccm,image,keysyms}, they live in their own srpms now


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Kalev Lember <kalev@smartlink.ee> 3.0.1-16
changelog:
  - Reintroduce a patch for CVE-2009-1885
  - Don't build static library
  - Use parallel make
  - Spec file clean up


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-11
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#961501)
  - xfs_io: Update  man page to include chproj, lsproj (#962394)
  - xfs_io: Remove broken setfl command (#962394)
  - xfs_logprint: Handle multiply-logged fields (#962397)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#964216)
  - xfs_repair: avoid segfault with ag_stride (#93904)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-15
changelog:
  - libxfs: restrict platform_test_xfs_fd to regular files (#1018751)
  - xfs_repair: avoid segfault if reporting progress early in repair (#1020438)
  - xfs_fsr: fix SWAPEXT failures under selinux (#1024702)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-16
changelog:
  - xfs_copy: do not exit with error code if we succeed (#1100107)
  - xfs_copy: fix corruption when source fs sector size is > 512 bytes (#1104956)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-17
changelog:
  - xfs_quota: Allow user project starting with digits (#1167413)
  - xfs_repair: Don't validate symlink component lengths (#1171267)
  - xfs_repair: Handle log in allocation group zero (#1215616)
  - xfs_io: deprecate -F flag (#1136742)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-20
changelog:
  - xfs_logprint: Fix some inode logging corner cases (#1027075)
  - xfs_fsr: Fix more selinux-related failures (#1225651)
  - xfs_repair: Detect reserved attribute names (#1304285)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-34
changelog:
  - Avoid possible hang while logging an unexpected signal (#694820)
  - Fix Rpmdiff build warning about "dereferencing type-punned pointer" (#697783)
  - Let RPC services bind to a specific port (#697788)
  - Prevent memory corruption error while using large number of services (#711787)
  - Fix coverity defects in poll patch (#715303)


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-40
changelog:
  - Fix: xinetd attempts to bind to IPv6 sockets even on systems with IPv6 disabled (#1285091)
  - Fix: modify the xinetd man page to make it more clear on what happens to services on xinetd reload (#1119317)


author: Lyude Paul <cpaul@redhat.com> 7.6.1-2
changelog:
  - Fix annoying trailing whitespace after %description
  - Update firmware license
  - Added missing firmware file TAHITI_vce.bin (#1310823)


author: Lyude Paul <lyude@redhat.com> 7.6.1-4
changelog:
  - Add missing firmware file OLAND_pfp.bin (#1361525)
  - While we're at it since this is the last time we'll have a chance to do this,
    also go through and add missing firmware files for all of the generations
    that should have been included when this tarball was made so we don't have
    to deal with problems like this in the future. This includes RS780, RV610,
    RV620, RV630, RV635, RV670, RV710, RV730, and RV770


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.3-2
changelog:
  - Merge evdev 2.7.3 from F18 (#835225)
  - Restore RHEL6.x middle mouse button emulation default (auto)
  - Restore RHEL6.x lid patch to re-scan xrandr outputs
  - Disable smooth scrolling, no client stack support


author: Peter Hutterer <peter.hutterer@redhat.com> 2.8.2-3
changelog:
  - Drop undef for HAVE_SMOOTH_SCROLLING. Nothing client-side can make use of
    this anyway so enabling has no drawbacks but aligns the code with the
    other products.
  - Don't crash when exceeding MAXDEVICES


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3.0-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix indentation of Version and Release.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3.0-4
changelog:
  - User global instead of define as per Packaging Guidelines.
  - Fix indentation for Version and Release.


author: Adam Jackson <ajax@redhat.com> 1.6.1-10
changelog:
  - mga-1.6.1-char-cell-modes.patch: Filter out modes whose horizontal timings
    aren't character-cell aligned on G200SE and friends (#894959)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-5
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix indentation for Version and Release.


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-16
changelog:
  - Fix memory leak
    Resolves: rhbz#1192154
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1151559


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1199355
  - Remove enable-resizable-surface0.patch. It's causing more troubles than
    it solves, and QEMU now has the needed ram/vram support to make it
    unnecessary
    Resolves: rhbz#1140765


author: Frediano Ziglio <fziglio@redhat.com> 0.1.1-19
changelog:
  - Remove RHEL 7 hack
    Resolves: rhbz#1226723
  - Fix memory leak caused by image cache
    Resolves: rhbz#1221010


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.5.901-1
changelog:
  - synaptics 1.7.5.901 (#1077486)
  - set secondary top buttons on INPUT_PROP_TOPBUTTONPAD (#1026577)
  - fix bogus changelog date


author: Peter Hutterer <peter.hutterer@redhat.com> 0.16.1-2
changelog:
  - Fix crash for xorg.conf devices with same device node (#862939)
  - Fix spurious cursor jump when using I5 express keys (#859851)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Don't fail on invalid action properties, just ignore them. g-s-d can't
    handle that, see #1095019. (#1077478)
  - Drop all now unused patches


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-3
changelog:
  - Merge RHEL7 extra patches, add RHEL6 compat patch to enable INPUT_PROP
    checking
  - Grab the event device by default for backwards-compat (#1077478)


author: Adam Jackson <ajax@redhat.com> 1.6.0-18
changelog:
  - Silence amazing amounts of log spam in the i2c code (#888607)
  - Fix a crash in DDC fetch (#888607)


author: Adam Jackson <ajax@redhat.com> 1.17.4-7
changelog:
  - Add bug-compatibility for exposure event generation for backing store's
    Always mode, and re-enable the feature


author: Michel Dänzer <mdaenzer@redhat.com> - 1.17.4-18
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872388), CVE-2020-14346 (#1872392),
    CVE-2020-14361 (#1872399), CVE-2020-14362 (#1872406)


author: Olivier Fourdan <ofourdan@redhat.com> 1.17.4-3
changelog:
  - Add missing hw/xfree86/Xorg.sh.in to xorg-x11-server-source package.
    This is needed to build packages depending on xorg-x11-server-source
    (e.g. tigervnc), otherwise the build will fail.


author: Adam Jackson <ajax@redhat.com> 7.7-1
changelog:
  - rgb 1.0.5
  - xsessreg 1.0.8
  - xgamma 1.0.5
  - xhost 1.0.5
  - xmodmap 1.0.7
  - xsetroot 1.1.1
  - xstdcmap 1.0.3


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-12
changelog:
  - Update sources for latest tarballs, some changes got lost before the commit
  - require gettext-devel for AM_ICONV (now required by xwininfo)


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-25
changelog:
  - Moved /sbin/ypbind to /usr/sbin/ypbind, as the package
    depends on several utilities from /usr (selinuxenabled,
    rpcinfo, ypwhich), and /usr/lib/libdbus-glib-1.so
    Resolves: #593271
  - Fixed previous ChangeLog entry header


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-26
changelog:
  - Fix "dereferencing type-punned pointer will break strict-aliasing rules"
    GCC warning
    Resolves #596221


author: Honza Horak <hhorak@redhat.com> - 3:1.20.4-30
changelog:
  - Modified the chkconfig priorities from 27/73 to 24/76, to move ypbind
    before netfs. This is useful for hosts that mount NFS file systems
    that reside on a server which is resolvable through NIS.
    Resolves: #647495


author: Honza Horak <hhorak@redhat.com> - 3:1.20.4-31
changelog:
  - ypbind init script should check for ypbind in /etc/rpc
    Resolves: #888778
  - ypbind does not bind to ypserv on localhost (same machine) if NetworkManager
    thinks that the network is off.
    Resolves: #829487
  - ypbind does not take NISTIMEOUT into account during service start if
    rpcinfo doesn't work
    Resolves: #846080
  - add SIGPIPE into signal set
    Resolves: #842228
  - Fix differencies between man page and program --help
    Resolves: #627492
  - Fix nis.sh run by dhclient to not create files with wrong context
    Resolves: #681134
  - Add rebind option to ypbind
    Resolves: #918276


author: Matej Muzila <mmuzila@redhat.com> - 3:1.20.4-32
changelog:
  - Do not resstart ypbind on dhcp renew if nis domain or nis servers
    haven't changed
    Resolves: #1238771


author: Honza Horak <hhorak@redhat.com> - 2.19-22
changelog:
  - hide passwords in syslog when using external script
    to update user's data using yppasswdd
    Resolves: #734494


author: Honza Horak <hhorak@redhat.com> - 2.19-23
changelog:
  - fix memory leak when malformed request is received
    Resolves: #845283
  - Fixed returned value when all entries requested and no such
    map exists
    Resolves: #790812


author: Matej Muzila <mmuzila@redhat.com> - 2.19-29
changelog:
  - Make mknetid to handle properly files with either
    empty lines or unexpected format
    Resolves: #1071962


author: Matej Muzila <mmuzila@redhat.com> - 2.19-30
changelog:
  - Make server return YP_NOMAP when NIS client asks for non-existing map
    using yp_first/yp_next RPC calls
    Resolves: #988203


author: Matej Muzila <mmuzila@redhat.com> - 2.19-31
changelog:
  - Return failure if yppassw cannot write to /etc/shadow or /etc/passwd.adjunct
    because of wrong SELinux context
  - Move domainname check from ypserv to yppasswdd
  - Resolves: #747334, #456249


author: Kamil Dudka <kdudka@redhat.com> - 4.3.11-7
changelog:
  - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
  - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)


author: Kamil Dudka <kdudka@redhat.com> - 4.3.10-12
changelog:
  - avoid using uninitialised memory after lexer realloc (#1146119)
  - replace an incorrect comment in /etc/zshenv (#1103697)
  - optimize matching of multiple * in wildcards (#1131172)
  - use heap rather than stack allocation for variable length arrays (#567215)
  - prevent jobs -Z from destroying environment variables (#878324)
  - shell emulation doc addition (#1104021)


