# changelog

author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-19
changelog:
  - release 1.3.4.0-19
  - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192)
  - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-20
changelog:
  - release 1.3.4.0-20
  - Resolves: bug 1278729 - Share nsslapd-threadnumber in the case nunc-stans is enabled (DS 48339)
  - Resolves: bug 1278730 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)
  - Resolves: bug 1279572 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325)
  - Resolves: bug 1279573 - nunc-stans: Attempt to release connection that is not acquired (DS 48311)
  - Resolves: bug 1280210 - deadlock in mep delete post op (DS 47976)
  - Resolves: bug 1281522 - acl - regression - trailing ', (comma)' in macro matched value is not removed (DS 48344)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-21
changelog:
  - release 1.3.4.0-21
  - Resolves: bug 1278730 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.3.4.0-20 (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-27
changelog:
  - release 1.3.4.0-27
  - Resolves: bug 1309963 - keep alive entries can break replication (DS 48445)
  - Resolves: bug 1309964 - Crash in slapi_get_object_extension (DS 48536)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-28
changelog:
  - release 1.3.4.0-28
  - Resolves: bug 1315181 - change severity of some messages related to "keep alive" entries (DS 48420)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-29
changelog:
  - release 1.3.4.0-29
  - Resolves: bug 1316552 - License tag does not match actual license of code (DS 48757)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-30
changelog:
  - release 1.3.4.0-30
  - Resolves: bug 1321891 - DES to AES password conversion fails if a backend is empty (DS 48777)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-31
changelog:
  - release 1.3.4.0-31
  - Resolves: bug 1335423 - heap corruption at schema replication. (DS 48492)
  - Resolves: bug 1335107 - Paged results search returns the blank list of entries (DS 48808)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-32
changelog:
  - release 1.3.4.0-32
  - Resolves: bug 1344293 - At startup DES to AES password conversion causes timeout in start script (DS 48862)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-33
changelog:
  - release 1.3.4.0-33
  - Resolves: bug 1351323 - Improve MMR replication convergence (DS 48636)
  - Resolves: bug 1351447 - Supplier can skip a failing update, although it should retry. (DS 47788)
  - Resolves: bug 1350707 - Replication changelog can incorrectly skip over updates (DS 48766)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.61-5
changelog:
  - chkconfig: don't create symlinks if they already exist
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.130-5.el7_2.1
changelog:
  - Fix possible data loss caused by lost buffered writes during thin pool
    resize after reaching its capacity.


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-6
changelog:
  - Resolves: rhbz#1170347
  - Resolves: rhbz#1225441
  - Resolves: rhbz#1226842
  - Resolves: rhbz#1229194
  - Resolves: rhbz#1234261
  - Resolves: rhbz#1234266
  - Resolves: rhbz#682771
  - Resolves: rhbz#773464

  - config: Make sure user doesn't mix IPv6 and IPv4 (rhbz#773464)
  - merge upstream commit 6c028d4d9c53decaa9469c792ac68fd2a886e7d9 (rhbz#773464)
  - config: Process broadcast option consistently (rhbz#773464)
  - merge upstream commit 70bd35fc06e68a010d780dfa39bd68d4bd2f7da7 (rhbz#773464)
  - config: Ensure mcast address/port differs for rrp (rhbz#773464)
  - merge upstream commit 6449bea835c90045baa23e3e041fed1df2abf070 (rhbz#773464)
  - Reset timer_problem_decrementer on fault (rhbz#1234261)
  - merge upstream commit 8f284b26b3331e1ab252969ba65543e6d9217ab1 (rhbz#1234261)
  - automake: Check minimum automake version (rhbz#773464)
  - merge upstream commit 114b826c67126fe1f690ad976b5217a8487994a4 (rhbz#773464)
  - Set RR priority by default (rhbz#1170347)
  - merge upstream commit 177ef0e5240b4060ff5b14eab6f2eefee3aa777d (rhbz#1170347)
  - Log auto-recovery of ring only once (rhbz#773464)
  - merge upstream commit e0ac861efdc32831366a2b5f5cc1d61e2ffa5504 (rhbz#773464)
  - totem: Ignore duplicated commit tokens in recovery (rhbz#1234261)
  - merge upstream commit 4ee84c51fa73c4ec7cbee922111a140a3aaf75df (rhbz#1234261)
  - corosync_ring_id_store: Use safer permissions (rhbz#1234266)
  - merge upstream commit 252b38ab8a62ff083e83b1d6f514109f7b7cbb42 (rhbz#1234266)
  - totemsrp: Format member list log as unsigned int (rhbz#773464)
  - merge upstream commit 5d9acc5604eb4e8a739cb37a4ad46bcc5ad8deb6 (rhbz#773464)
  - cpg: Add support for messages larger than 1Mb (rhbz#682771)
  - merge upstream commit 8cc8e513633a1a8b12c416e32fb5362fcf4d65dd (rhbz#682771)
  - Really add cpghum (rhbz#682771)
  - merge upstream commit 3842ba6080e00fd9484a2a875d982e149f67bc44 (rhbz#682771)
  - quorum: don't allow quorum_trackstart to be called twice (rhbz#1229194)
  - merge upstream commit 82526d2fe9137e8b604f1bbae6d6e39ba41377f9 (rhbz#1229194)
  - totemconfig: Check for duplicate nodeids (rhbz#773464)
  - merge upstream commit 997074cc3e1ea425ca63e453b7e2181741bdcef0 (rhbz#773464)
  - totem: Log a message if JOIN or LEAVE message is ignored (rhbz#773464)
  - merge upstream commit 53f67a2a7914228f1a406aad61ea6768525e11b0 (rhbz#773464)
  - totemsrp: Improve logging of left/down nodes (rhbz#773464)
  - merge upstream commit ab8942f6260fde93824ed2a18e09e572b59ceb25 (rhbz#773464)
  - votequorum: Fix auto_tie_breaker behaviour in odd-sized clusters (rhbz#1229194)
  - merge upstream commit b9f5c290b7dedd0a677cdfc25db7dd111245a745 (rhbz#1229194)
  - Add note about rrp active beeing unsupported (rhbz#1226842)
  - merge upstream commit 219965f4fe694eaaf2eb4ea05cdc7e35f5146114 (rhbz#1226842)
  - Log: Add logrotate configuration file (rhbz#1225441)
  - merge upstream commit aabbace625b3c68332b4356887378fca81f8f387 (rhbz#1225441)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7
changelog:
  - Related: rhbz#682771

  - Don't link with libz when not needed (rhbz#682771)
  - merge upstream commit 145f9279d12cf0b981494bbd4dabbc9c3641378e (rhbz#682771)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7.1
changelog:
  - Resolves: rhbz#1283067

  - totemudp: Move udp bind() so that multicast works with IPv6 (rhbz#1283067)
  - merge upstream commit 165561df9ba1e0be2a11ff550b70da94990eb2f5 (rhbz#1283067)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7.2
changelog:
  - Resolves: rhbz#1333397

  - totemconfig: Explicitly pass IP version (rhbz#1333397)
  - merge upstream commit 60565b7da7d271651c30cd7fdca6e3f3eb5327ac (rhbz#1333397)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7.3
changelog:
  - Resolves: rhbz#1338667

  - cmapctl: Handle corosync errors in print_key func (rhbz#1338667)
  - merge upstream commit 8ab7743068cc6cd5bf235d1ccae65de1d91784f0 (rhbz#1338667)


author: Dave Anderson <anderson@redhat.com> - 7.1.2-2
changelog:
  - Fix "kmem -s <address>", "bt -F[F]", and "rd -S[S]" options in kernels 
    configured with CONFIG_SLUB having multiple-page slabs.
    Resolves: rhbz#1244003
  - Fix for SIGSEGV generated by "bt -[f|F]" in ARM64 kernels.
    Resolves: rhbz#1248859


author: Dave Anderson <anderson@redhat.com> - 7.1.2-3
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1282997


author: Dave Anderson <anderson@redhat.com> - 7.1.2-1
changelog:
  - Rebase to upstream version 7.1.2
    Resolves: rhbz#1207696
  - Fix several ppc64 backtrace issues
    Resolves: rhbz#1235447


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - mergerepo: merge package versions from multiple repos.
  - Related: bug#1178763
  - Close lock file before unlink().
  - Related: bug#1256216


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-6.1
changelog:
  - Fix issues caused by security tightening for Badlock:
    - Only validate MIC when "map to guest" is set
    - NetApp SMB servers don't negotiate NTLMSSP_SIGN
    - Anonymous connections don't work anymore
    - wbinfo -u or 'net ads search' don't work anymore
    - Handle empty session in client code
  - resolves: #1333794


author: Andreas Schneider <asn@redhat.com> - 4.2.10-6.2
changelog:
  - related: #1333794 - Fix issues caused by security tightening for Badlock
    o ntlm_auth issues and segfault
    o rpcclient doesn't respect "client ipc *" options
    o fix anonymous authentication if signing is mandatory


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-84
changelog:
  - 0131-UPBZ-1259831-lock-retry.patch
    * retry locking when creating multipath devices
  - Resolves: bz# 1259831


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.1
changelog:
  - Add 0132-RHBZ-1296979-fix-define.patch
    * look for the correct libudev function to set define
  - Resolves: bz #1303623


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.2
changelog:
  - Add 0133-RHBZ-1321019-wait-for-map-add.patch
    * wait for the device to finish being added before reloading it.
  - Resolves: bz #1321019


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.3
changelog:
  - Add 0134-UPBZ-1328515-dont-fail-discovery.patch
    * don't fail discovery because individual paths failed.
  - Resolves: bz #1328515


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.4
changelog:
  - Add 0135-RHBZ-1330480-kpartx-sync.patch
    * default to using udev sync mode
  - Resolves: bz #1330480


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.5
changelog:
  - Add 0136-RHBZ-1335746-clear-chkr-msg.patch
    * clear old checker message for offline paths.
  - Resolves: bz #1335746


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.6
changelog:
  - Add 0137-RHBZ-1364905-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Resolves: bz #1364905


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.4-1
changelog:
  - Fix cache_check with --clear-needs-check-flag option to
    make sure metadata device is not open already by the tool
    when open with O_EXCL mode is requested.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.5-1
changelog:
  - Support thin_delta's --metadata_snap option without specifying snap location.
  - Update man pages to make it clearer that tools shoulnd't be run on live metadata.
  - Fix bugs in the metadata reference counting for thin_check.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-1
changelog:
  - New thin_ls command.
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.


author: Peter Rajnoha <prajnoha@redhat.com> - 1.0.0.rc16-26.el7_2.1
changelog:
  - Do not compile testing support which caused scanning of device-mapper devices.
  - Fix missing cleanup of dmraid-activation.service symlink on package removal.


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-359
changelog:
  - write-ifcfg: fix creating configuration for VLAN
  Resolves: rhbz#1267311
  - 90qemu: also add ibmvscsi on qemu
  Resolves: rhbz#1245959


author: Harald Hoyer <harald@redhat.com> 033-358
changelog:
  - fixed qemu detection
  Resolves: rhbz#1245959
  - fixed vlan ifcfg generation and nameserver handling
  Resolves: rhbz#1267311


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-27.7
changelog:
  - fence_compute: fix evacuation not working when instance was created
    by non-admin user
    Resolves: rhbz#1322702


author: Carlos O'Donell <carlos@redhat.com> - 2.17-106.5
changelog:
  - Fix memory leak in ftell for wide-oriented streams (#1323781).
  - Avoid race condition in _int_free involving fastbins (#1313308).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-106.6
changelog:
  - Fix NULL pointer dereference in stub resolver with unconnectable name
    server addresses (#1323839).


author: jchaloup <jchaloup@redhat.com> - 1-5
changelog:
  - Update the spec file for RHEL
  - Remove devel subpackage
  - Bundle github.com/russross/blackfriday and github.com/shurcooL/sanitized_anchor_name into tarball
  - Use bundled dependencies to build md2man
    resolves: #1211312


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: grub2-spec_use_our_keys.patch
  -->  Change the rpm to use the SL keys
  - Added Source: fnal-sl.cer
  -->  The FNAL SL signing certificate
  - Added Source: grub2.ini
  -->  Config file for automated patch script


author: Roland Mainz <rmainz@redhat.com> 0.4.1-6
changelog:
  - Remove extra whitespaces from #1208640/#1194299 patches
  - spec file cleanup
  related: #1208640 #1194299


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: httpd-sl_index.html.sl.patch
  -->  This patch removes TUV branding from the default index.html
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl7\2
  -->  Modify release string to note changes
  - Added Source: httpd-spec_sl_index.html.sl7.patch
  -->  The index.html file is outside of the source tarball, so we need to patch it in the install step
  - Added Source: httpd.ini
  -->  Config file for automated patch script


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.15
changelog:
  - Related: #1327197 Crash during IPA upgrade due to slapd
    - spec file: update minimum required version of slapi-nis


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: ipa-spec-debrand.patch
  -->  remove TUV's Artwork
  - Added Source: ipa.ini
  -->  Config file for automated patch script
  - Added Source: ipa-spec-not-rhn.patch
  -->  remove TUV's RHN hooks


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.16
changelog:
  - Resolves: #1337820 URI details missing and OCSP-URI details are incorrectly
    displayed when certificate generated using IPA on RHEL 7.2up2.
    - Prevent replica install from overwriting cert profiles
    - Detect and repair incorrect caIPAserviceCert config


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.17
changelog:
  - Resolves: #1339304 CA installed on replica is always marked as renewal master
    - replica install: do not set CA renewal master flag


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.5
changelog:
  - Resolves: #1298097 IPA server upgrade fails from RHEL 7.0 to RHEL 7.2 using
    "yum update ipa* sssd"
    - Set minimal required version for openssl


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.6
changelog:
  - Resolves: #1298103 ipa-server-upgrade fails if certmonger is not running
    - always start certmonger during IPA server configuration upgrade


author: Phil Sutter - 3.10.0-53
changelog:
  - Related: #1212026 - [6wind 7.2 Feat]: backport: ipxfrm: unable to configure
    SPD hash table - reverted this backport due to unmet dependencies


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-6.gitc4bce43.el7
changelog:
  - ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
  - ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
  - ipxe-redhat-delete-useless-editor-backup-of-spec.template.patch [bz#1084561]
  - ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
  - Resolves: bz#1084561
    (RFE: ship UEFI drivers for ipxe in RHEL-7.y)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-7.gitc4bce43.el7
changelog:
  - ipxe-Extract-timing-parameters-out-to-config-dhcp.h.patch [bz#1196352]
  - ipxe-Use-spec-compliant-timeouts.patch [bz#1196352]
  - Resolves: bz#1196352
    ([RFE] option to increase gpxe retry timeout)


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-32
changelog:
  - 1235684 apply safe_logout setting to flashnode sessions as well
    but only when logging out by session id, not by flashnode index


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-5.b15
changelog:
  - Update to aarch64-jdk8u101-b15.
  - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching.
  - Drop additional hunk for 8147771 which is now applied upstream.
  - Resolves: rhbz#1368440


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14
changelog:
  - Update to aarch64-jdk8u102-b14.
  - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  - Move 8158260 to 8u112 section following its backport to 8u.
  - Resolves: rhbz#1368440


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Add additional fix to Zero patch to properly handle result on 64-bit big-endian
  - Resolves: rhbz#1325422


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.12.1.el7]
changelog:
  - [md] dm-thin-metadata: fix bug in dm_thin_remove_range() (Mike Snitzer) [1310531 1284833]
  - [md] dm-thin: fix regression in advertised discard limits (Mike Snitzer) [1310531 1284833]
  - [scsi] hpsa: Update driver revision to RH2 (Joseph Szczypek) [1308923 1268073]
  - [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1308923 1268073]
  - [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1308917 1295557]
  - [net] tcp: send_reset: test for non-NULL sk first (Florian Westphal) [1308917 1295557]
  - [net] add inet_sk_transparent() helper (Florian Westphal) [1308917 1295557]
  - [net] add sk_fullsock() helper (Florian Westphal) [1308917 1295557]
  - [net] ipv6: Fix regression in udp_v6_mcast_next() (Hannes Frederic Sowa) [1308921 1298790]
  - [netdrv] mlx4_en: Remove BUG_ON assert when checking if ring is full (Kamal Heib) [1310132 1258136]
  - [netdrv] cxgb4: changes for new firmware 1.14.4.0 (Sai Vemuri) [1309541 1275825]
  - [netdrv] iwlwifi: pci: add a few more PCI subvendor IDs for the 7265 series (Stanislaw Gruszka) [1304336 1287564]
  - [netdrv] iwlwifi: edit the 3165 series and 8000 series PCI IDs (Stanislaw Gruszka) [1301885 1279780]
  - [netdrv] iwlwifi: Add new PCI IDs for the 8260 series (Stanislaw Gruszka) [1301885 1279780]
  - [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1298212 1294114]
  - [powerpc] kvm: Increase memslots to 512 (Thomas Huth) [1297758 1276254]
  - [powerpc] kvm: Implement extension to report number of memslots (Thomas Huth) [1297758 1276254]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.13.1.el7]
changelog:
  - [net] veth: don't modify ip_summed; doing so treats packets with bad checksums as good (Sabrina Dubroca) [1312430 1307099]


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Ran Regex: Red Hat Enterprise => Scientific
  -->  This RPM shouldn't say it is upstream's product
  - Added Source: sl-ldup.x509
  -->  The FNAL SL signing certificate for driver updates
  - Added Source: kernel-spec_use_our_keys.patch
  -->  Remove the TUV keys and sign with ours
  - Added Source: kernel.ini
  -->  Config file for automated patch script
  - Added Source: sl-kpatch.x509
  -->  The FNAL SL signing certificate for kpatch updates
  - Added Source: fnal-sl.cer
  -->  The FNAL SL signing certificate


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-104.el7
changelog:
  - kvm-qemu-iotests-Filter-qemu-io-output-in-025.patch [bz#1170974]
  - Resolves: bz#1170974
    (test case 025 of qemu-iotests fail for raw with qemu-kvm-1.5.3-83.el7.x86_64)


author: Jeff E. Nelson <jen@redhat.com> - 1.5.3-105.el7
changelog:
  - kvm-qtest-ide-test-disable-flush-test.patch [bz#1270341]
  - Resolves: bz#1270341
    (qemu-kvm build failure race condition in tests/ide-test)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-105.el7_2.1
changelog:
  - kvm-rbd-make-qemu-s-cache-setting-override-any-ceph-sett.patch [bz#1279389]
  - kvm-rbd-fix-ceph-settings-precedence.patch [bz#1279389]
  - Resolves: bz#1279389
    (ceph.conf properties override qemu's command-line properties)


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Related: rhbz#1344633


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.9
changelog:
  - journal: fix error handling when compressing journal objects (#1292447)
  - journal: irrelevant coding style fixes (#1292447)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.13
changelog:
  - core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (#1305608)
  - logind: process session/inhibitor fds at higher priority (#1305608)
  - sd-event: expose the event loop iteration counter via sd_event_get_iteration() (#1342173)
  - manager: Only invoke a single sigchld per unit within a cleanup cycle (#1342173)
  - manager: Fixing a debug printf formatting mistake (#1342173)
  - manager: don't skip sigchld handler for main and control pid for services (#3738) (#1342173)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.2
changelog:
  - device: rework how we enter tentative state (#1283579)
  - core: Do not bind a mount unit to a device, if it was from mountinfo (#1283579)
  - logind: set RemoveIPC=no by default (#1284588)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.3
changelog:
  - sysv-generator: follow symlinks in /etc/rc.d/init.d (#1288005)
  - man: RemoveIPC is set to no on rhel (#1284588)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19.7
changelog:
  - Revert "udev: fibre channel: fix NPIV support" (#1266934)
  - udev: path-id: fibre channel NPIV - use fc_vport's port_name (#1266934)
  - rules: set SYSTEMD_READY=0 on DM_UDEV_DISABLE_OTHER_RULES_FLAG=1 only with ADD event (#1312011)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40
changelog:
  - Resolves: rhbz#1270827 - local overrides: don't contact server with
                             overridden name/id


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-41
changelog:
  - Resolves: rhbz#1284814  - sssd: [sysdb_add_user] (0x0400): Error: 17
                             (File exists)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.2
changelog:
  - Resolves: rhbz#1311569 - [RFE] IPA: resolve external group memberships
                             of IPA groups during getgrnam and getgrgid


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.4
changelog:
  - Resolves: rhbz#1324442 - sssd be memory leak in sssd's memberof plugin
  - More patches from upstream related to the memory leak


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.7
changelog:
  - Resolves: rhbz#1339207 - sssd_nss memory usage keeps growing when trying
                             to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.8
changelog:
  - Resolves: rhbz#1339258 - [sssd] Trusted (AD) user's info stays in sssd
                             cache for much more than expected.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.9
changelog:
  - Resolves: rhbz#1339509 - sssd tries to resolve global catalog servers
                             from AD forest sub-domains in AD-IPA trust setup


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5.el7_2.2
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13
changelog:
  - qemu: Add conditions for qemu-kvm use on ppc64 (rhbz#1267882)
  - qemu: Move simplification variable to begining of the function (rhbz#1266856)
  - qemu: Extract -mem-path building into its own function (rhbz#1266856)
  - qemu: Add -mem-path even with numa (rhbz#1266856)
  - qemu: Use memory-backing-file only when needed (rhbz#1266856)
  - qemu: Always update migration times on destination (rhbz#1265902)
  - qemu: Copy completed migration stats only on success (rhbz#1265902)
  - qemu: Introduce flags in qemuMigrationCompleted (rhbz#1265902)
  - qemu: Make updating stats in qemuMigrationCheckJobStatus optional (rhbz#1265902)
  - qemu: Wait until destination QEMU consumes all migration data (rhbz#1265902)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.1
changelog:
  - qemu: migration: Properly parse memory hotplug migration flag (rhbz#1280419)
  - qemu: Emit correct audit message for memory hot unplug (rhbz#1280420)
  - qemu: Emit correct audit message for memory hot plug (rhbz#1280420)
  - qemu: Extract logic to determine the mlock limit size for VFIO (rhbz#1280420)
  - qemu: hotplug: Fix mlock limit handling on memory hotplug (rhbz#1280420)
  - qemu: domain: Restructurate control flow in qemuDomainGetMlockLimitBytes (rhbz#1280420)
  - qemu: Explain mlock limit size more in detail (rhbz#1280420)
  - qemu: hotplug: Reject VFIO hotplug if setting RLIMIT_MEMLOCK fails (rhbz#1283924)
  - process: Log when limiting the amount of locked memory (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() in qemuBuildCommandLine() (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() when attaching PCI hostdev (rhbz#1283924)
  - qemu: Add ppc64-specific math to qemuDomainGetMlockLimitBytes() (rhbz#1283924)
  - qemu: Always set locked memory limit for ppc64 domains (rhbz#1283924)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.4
changelog:
  - systemd: Escape machine name for machined (rhbz#1308494)
  - systemd: Add virSystemdGetMachineNameByPID (rhbz#1308494)
  - systemd: Modernize machine naming (rhbz#1308494)
  - virSystemdGetMachineNameByPID: Initialize @reply (rhbz#1308494)
  - util: Fix virCgroupNewMachine ATTRIBUTE_NONNULL args (rhbz#1308494)
  - dbus: Don't unref NULL messages (rhbz#1308494)
  - vmx: Expose datacenter path in domain XML (rhbz#1305489)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.5
changelog:
  - nodedev: Indent PCI express for future fix (rhbz#1331328)
  - nodedev: Expose PCI header type (rhbz#1331328)
  - nodedev: Fix parsing of generated XMLs (rhbz#1331328)
  - qemu: driver: Remove unnecessary flag in qemuDomainGetStatsBlock (rhbz#1339963)
  - qemu: driver: Separate bulk stats worker for block devices (rhbz#1339963)
  - qemu: bulk stats: Don't access possibly blocked storage (rhbz#1339963)


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-5
changelog:
  - mention copy/copytruncate/renamecopy influence to olddir option (#1175292)
  - delete last log when dateformat cannot be sorted alphabetically (#1174208)
  - mark cron.daily/logrotate as config file (#1174207)
  - create olddir diectory if it does not exist (#1187161)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed parsing of invalid variables in incoming packets (#1248414)
  - Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
    becomes writable (#1241897)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-24
changelog:
  - Fixed lmSensorsTable not reporting sensors with duplicate names
    (#1252053)
  - Fixed close() overhead of extend commands (#1252048)
  - Fixed out-of-bounds write in python code (#1252034)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.21
changelog:
  - Stop gssd from flooding the KDC with TGT fetches (bz 1264999)
  - Decouple the start/stop of rpcbind with nfs-server and rpc-statd (bz 1266993)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.21_2
changelog:
  - exportfs: Restore the EAI_NONAME check in host_pton() (bz 1288435)
  - gssd: Don't assume the machine account will be in uppercase (bz 1288433)


author: Petr Lautrbach <plautrba@redhat.com> 3.2-3
changelog:
  - Correctly declare OAEP parameter in RSA Wrap tests to prevent a possible
    scope issue (#1088512)
  - several fixes for pkcsep11_migrate


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - Merge two MozNSS cipher suite definition patches into one. (#1245279)
  - Use what NSS considers default for DEFAULT cipher string. (#1245279)
  - Remove unnecesary defaults from ciphers' definitions (#1245279)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - NSS does not support string ordering (#1231522)
  - implement and correct order of parsing attributes (#1231522)
  - add multi_mask and multi_strength to correctly handle sets of attributes (#1231522)
  - add new cipher suites and correct AES-GCM attributes (#1245279)
  - correct DEFAULT ciphers handling to exclude eNULL cipher suites (#1245279)


author: John Kacur <jkacur@redhat.com> - 0.11.1-10
changelog:
  - dropped the git housekeeping patch, not relevant here
  - docs-Remove-stray-a.patch
  - CLI-Introduce-nohz_full-N-entity.patch
  - tuna-config-Fix-pygtk-import.patch
  - tuna-Make-isolate-include-operations-affect-proc-irq.patch
  - tuna-Decide-whether-to-isolate-a-thread-based-on-PF_.patch
  - tuna-Fix-race-in-is_hardirq_handler.patch
  - CLI-Do-not-show-column-headers-when-not-outputting-t.patch
  - Correct-a-typo-in-the-net.ipv4.ipfrag_time-help-stri.patch
  Resolves: rhbz#1234963


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.13-10.1
changelog:
  - Prevent lrmd crash when logging certain systemd operation failures
  - Handle systemd shutdown properly
  - Don't delete fence device when deleting an attribute
  - Handle new top output format in HealthCPU resource
  - Implement graceful stopping of pacemaker_remote
  - Update CTS to match applied code patches
  - Resolves: rhbz#1299339
  - Resolves: rhbz#1299340
  - Resolves: rhbz#1299341
  - Resolves: rhbz#1299342
  - Resolves: rhbz#1299348


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.13-10.4
changelog:
  - Fix multiple issues with crm_resource --restart
  - Properly handle descendents of unrunnable clones
  - Resolves: rhbz#1347806
  - Resolves: rhbz#1349493


author: Remi Collet <rcollet@redhat.com> - 5.4.16-35
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Dogtag Team <pki-devel@redhat.com> 10.2.5-9
changelog:
  - Bugzilla Bug #1318302 - pkispawn ignores 3rd-party CA certs in
    pki_clone_pkcs12_path
  - Bugzilla Bug #1320580 - IPA replica installation fails if password
    has % character in it.


author: Dogtag Team <pki-devel@redhat.com> 10.2.5-10
changelog:
  - Bugzilla Bug #1318302 - pkispawn ignores 3rd-party CA certs in
    pki_clone_pkcs12_path (python hash fix)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-3
changelog:
  - Disabling translated man pages due to conflicts with man-pages-*
  - Removing /etc/sysctl.d (quietly stolen by systemd)
  - Related: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Related: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-39
changelog:
  - Fix hashlib algorithms breaking by initializing OpenSSL_add_all_digests
  function in _hashlib library
  Resolves: rhbz#1371132


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-11.1
changelog:
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1316440)
  - Add nfs-rquotad.service alias for backward compatibility (bug #1316440)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1316440)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-54.10
changelog:
  - nfsserver: fix nfs-idmapd fails to start due to var-lib-nfs-rpc_pipefs.mount being active

    Resolves: rhbz#1332435


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-54.17
changelog:
  - nfsserver: fix monitor issues causing NFS to start on "debug-monitor"
    and "resource cleanup"

    Resolves: rhbz#1370385


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-54.4
changelog:
  - NovaEvacuate: invoke off action
  - galera: add custom host/port support

    Resolves: rhbz#1304019
    Resolves: rhbz#1304711


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-54.6
changelog:
  - nfsserver: fix systemd status detection
  - Replace NovaCompute with nova-compute-wait which lets systemd
    manage the nova-compute process

    Resolves: rhbz#1304370
    Resolves: rhbz#1304811


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.1
changelog:
  - Allow openvswitch read/write hugetlb filesystem.
  Resolves: rhbz#1299405
  - Allow smbcontrol domain to send sigchld to ctdbd domain.
  Resolves: rhbz#1301522


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.2
changelog:
  - Add fs_manage_hugetlbfs_files() interface.
  Resolves: rhbz#1299405
  - Allow openvswitch to manage hugetlfs files and dirs
  Resolves: rhbz#1299405


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.5
changelog:
  - Label /var/log/ganesha.log as gluster_log_t
  - Allow glusterd_t domain to create glusterd_log_t files.
  - Label /var/run/ganesha.pid as gluster_var_run_t.
  Resolves: rhbz#1333903


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-60.6
changelog:
  - Allow ganesha-ha.sh script running under unconfined_t domain communicate with glusterd_t domains via dbus.
  Resolves:#1340365


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.8
changelog:
  - Add SELinux support for ceph filesystem.
  Resolves: rhbz#1365640
  - Allow sanlock service to read/write cephfs_t files
  Resolves: rhbz#1365640


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.9
changelog:
  - Dontaudit ldconfig read gluster lib files.
  Resolves: rhbz#1372182
  - Add interface glusterd_dontaudit_read_lib_dirs()
  Resolves: rhbz#1372182
  - Dontaudit Occasionally observing AVC's while running geo-rep automation
  Resolves: rhbz#1372182
  - Allow glusterd to manage socket files labeled as glusterd_brick_t.
  Resolves: rhbz#1372191


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-6
changelog:
  - delay sending responses from compat tree after map cache search
  - Resolves: #1281748
  - fix processing of ID views
  - Resolves: #1281750, #1281752


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-15.1
changelog:
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-15.2
changelog:
  - Fix thread-safety issue causing a crash when playing a Youtube video spanning
    multiple monitors
    Resolves: rhbz#1253375


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-26.2
changelog:
  - Related: #1330576 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-26.3
changelog:
  - Related: #1330576 - CVE-2016-4553 squid: Cache poisoning issue in
    HTTP Request handling
  - Related: #1334491 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556
    squid: various flaws


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-15
changelog:
  - RHEL 7.2 erratum
    - fixed compilation of testing binaries during make check
    - added legacy group processing patch
    - replaced buggy base64 decoder with a public domain implementation
    Resolves: rhbz#1254621
    Resolves: rhbz#1183818
    Resolves: rhbz#1247591


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-4.1
changelog:
  - fixed various verification issues (by verification-fixes patch)
    resolves: rhbz#1282565
  - realtime profile now sets cpumask of unbound workqueues
    (by realtime-set-unbound-workqueues patch)
    resolves: rhbz#1282566
  - fixed lapic_timer_adv_ns cache in realtime-virtual-host profile
    (by lapic-timer-adv-ns-cache-fix patch)
    resolves: rhbz#1282567
  - fixed find-lapictscdeadline-optimal-fix in realtime-virtual-host profile
    (by find-lapictscdeadline-optimal-fix patch)
    resolves: rhbz#1282592
  - removed nohz_full from the realtime profile (by realtime-remove-nohz-full
    patch)
    resolves: rhbz#1282570


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-4.2
changelog:
  - fixed race in modprobe in realtime-virtual-host profile and extended
    stop action to have hint why it is called
    resolves: rhbz#1298204


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-4.4
changelog:
  - fixed traceback by always stripping assignment modifiers even if not used
    (by assignment-modifiers-strip-fix patch)
    resolves: rhbz#1363682
  - added workaround for embedded slashes in device names
    (by embedded-slashes-in-device-name-fix patch)
    related: rhbz#1363682


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-4.5
changelog:
  - realtime: disabled timer migration
    resolves: rhbz#1360800
  - realtime-virtual-host/guest: added rcu_nocbs kernel boot parameter
    resolves: rhbz#1334479


author: Patsy Franklin <pfrankli@redhat.com> - 2016d-1
changelog:
  - Rebase to 2016d 
    - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
    - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
    - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
      Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
      at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016d-2
changelog:
  - Fix java conditionals to always build all the java tzdata. OpenJDK 7 is the
    default/base Java. It is sufficient for building everything. (#1230903)


author: Patsy Franklin <pfrankli@redhat.com> - 2016f-1
changelog:
  - Rebase to 2016f
    - Egypt cancelled DST.
    - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.


author: Victor Toso <victortoso@redhat.com> - 2.0-6.1
changelog:
  - Utilize SSO to authenticate against oVirt engine for foreign menu support
    Resolves: rhbz#1344635


author: Pavel Grunt <pgrunt@redhat.com> - 2.0-6.2
changelog:
  - Adjust timer to refresh ovirt foreign menu
    Resolves: rhbz#1353627
  - Fix crash when disabling the last display
    Resolves: rhbz#1354283


author: Radek Novacek <rnovacek@redhat.com> 0.14-8
changelog:
  - Fix logging of fatal errors
  - Change systemd unit type to notify
  - Warn about usage of env and owner in non-remote libvirt mode
  - Fix proxy support in ESX and Hyper-V modes
  - Resolves: rhbz#1254843, rhbz#1243341, rhbz#1250782


author: Radek Novacek <rnovacek@redhat.com> 0.14-9
changelog:
  - Check config option
  - Another attempt on hyperv proxy support
  - Resolves: rhbz#1254843, rhbz#1250782


author: Martin Osvald <mosvald@rehat.com> - 3.0.2-10
changelog:
  - Resolves: #1058704 - vsftpd does not support DHE cipher suites
  - Resolves: #1058712 - vsftpd does not support ECDHE cipher suites
  - Resolves: #1198259 - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d configuration


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-14.el7_2.1
changelog:
  - signal-handling related fixes collected from upstream (#1198671)
  - queue signals while processing a job exit (#1291782)
  - fix malloc() signal leak in lexsave() (#1267912)


