# changelog

author: Bernard Johnson <bjohnson@symetrix.com> - 3.2.1-1
changelog:
  - v 3.2.1
  - add lower case script URL alias for typing impaired
  - cleanup selinux macros
  - spec cleanup
  - make samba dependency on actual files required to EL5 can use samba-client
    or samba3x-client (bz #667479)
  - unbundle perl(Net::FTP::AutoReconnect) and perl(Net::FTP::RetrHandle)
  - remove old patch that is no longer needed
  - attempt to make sure $Conf{TopDir} is listed in updatedb PRUNEPATHS,
    otherwise at least generate a warning on statup (bz #554491)
  - move sockets to /var/run (bz #719499)
  - add support for systemd starting at F16 (bz #699441)
  - patch to move pid dir under /var/run
  - unbundle Net::FTP::*
  - add support for tmpfiles.d


author: Bernard Johnson <bjohnson@symetrix.com> - 3.2.1-4
changelog:
  - change macro conditionals to include tmpfiles.d support starting at
    Fedora 15 (bz #730053)
  - change install lines to preserve timestamps


author: Bernard Johnson <bjohnson@symetrix.com> - 3.2.1-6
changelog:
  - fix postun scriptlet error (bz #736946)
  - make postun scriptlet more coherent
  - change selinux context on log files to httpd_log_t and allow access
    to them (bz #730704)


author: Bernard Johnson <bjohnson@symetrix.com> - 3.2.1-7
changelog:
  - change %{_sharedstatedir} to %{_localstatedir}/lib as these expand
    differently on EL (bz #767719)
  - fix XSS vulnerability (bz #749846, bz #749847, bz #749848) CVE-2011-3361
  - additional documentation about enabling correct channels in RHEL to resolve
    all dependencies (bz #749627)
  - fix bug with missing tmpfiles.d directory
  - add perl(Digest::MD5) to list of build and install dependencies


author: Bernard Johnson <bjohnson@symetrix.com> 3.2.1-10
changelog:
  - cleanup build macros for Fedora
  - fix deprecated qw messages (partial fix for bz #755076)
  - CVE-2011-5081 BackupPC: XSS flaw in RestoreFile.pm
    (bz #795017, #795018, #795019)
  - Broken configuration for httpd 2.4 (bz #871353)


author: Trevor Vaughan <tvaughan@onyxpoint.com> 3.2.1-10.SIMP.4
changelog:
  - Updated the SELinux policy to work on install. The previous method
    *should* have worked, but there is an issue somewhere that seems to
    be an inconsistency in the way policies are loaded.


author: James Casey <james.casey@cern.ch> 5.1.0-7
changelog:
  - Added separate logging of messages whenever the logging interceptor is enabled in the config file
  - removed BrokerRegistry messages casued by REST API
  - now we don't log messages to stdout (so no duplicates in wrapper log).
  - upped the number and size of the rolling logs


author: Richard Clamp <richardc@unixbeard.net> - 5.9.1-1
changelog:
  - Updated to 5.9.1 (CPR-32)
  - Packaging cleanups as suggested by Jo Rhett in CPR-32
    - Unpack the magic wclg tarball and use the contents explicitly
    - Fix activemq init script status action (CPR-17)
    - Fix jetty admin password loading (CPR-32)
  - Remove dependency on tanukiwrapper (CPR-47)


author: Richard Clamp <richardc@unixbeard.net> - 5.9.1-2
changelog:
  - Change activemq.xml to be the one from the distribution tarball (CPR-89)
  - Added systemd unit to allow building on EL7 and FC20 (CPR-79)
  - Added explicit dependency on java


author: Pravin Satpute <psatpute@redhat.com> - 0.3-13
changelog:
  - added lucida-typewriter and fixed subpackage
  - removed common subpackage
  - added conf file for each subpackage


author: Robert Scheck <robert@fedoraproject.org> - 0.98.4-1
changelog:
  - Upgrade to 0.98.4 and updated daily.cvd (#1111811)
  - Add build requirement to libxml2 for DMG, OpenIOC and XAR


author: Orion Poplawski <orion@cora.nwra.com> - 0.99.2-1
changelog:
  - Update to 0.99.2
  - Enable llvm
  - Drop cliopts patch fixed upstream, use upstream's "--forground" option name
  - Fix main.cvd (fedora #1325482, epel #1325717)
  - Own bytecode.cld (#1176252) and mirrors.dat, ship bytecode.cvd
  - Update daily.cvd
  - Fixup Requires(pre) usage (#1319151)


author: Robert Scheck <robert@fedoraproject.org> - 3.7.1-7
changelog:
  - Change run-time requirement from bind-utils to %{_bindir}/dig
    as it can be provided/satisfied by different packages


author: Nathanael Noblet <nathanael@gnat.ca> - 1.10-0.2
changelog:
  - Cleaned up the directories and init script names
  - Added Requires(postun)
  - Fixed logrotate script


author: Nathanael Noblet <nathanael@gnat.ca> - 1.10-1
changelog:
  - Use integer for release ver
  - Unified Requires(foo) style
  - Added missing Requires
  - Consistent macro useage
  - Remove dot from initscript filename


author: Harald Hoyer <harald@redhat.com> 004-399
changelog:
  - add hyper kernel modules
  Resolves: rhbz#1298445 rhbz#1223315
  - fix ifcfg generation
  Resolves: rhbz#1261893
  - support multiple vlan definitions
  Resolves: rhbz#1111358
  - support setting of MTU via ip=..:ibft:<mtu>
  Resolves: rhbz#1076465
  - use cpio -R root:root rather than cpio -R 0:0
  Resolves: rhbz#1049763
  - fail hard if final image could not be written
  Resolves: rhbz#1252449
  - create correct bonding interface
  Resolves: rhbz#1263013


author: Harald Hoyer <harald@redhat.com> - 004-403
changelog:
  - network/ifup: use the correct interface name for the vlan parent
  - iscsiroot: for iscsi_firmware retry, if iscsistart -N fails
  Resolves: rhbz#1111358


author: Harald Hoyer <harald@redhat.com> - 004-408
changelog:
  - add more kernel modules for crypt
  Resolves: rhbz#1322893
  - trigger acpi subsystem before running plymouth
  Resolves: rhbz#1218130


author: Harald Hoyer <harald@redhat.com> - 004-409
changelog:
  - don't handle "iscsistart -N" exit value
    start iscsistart -b more reliably in the background
  Resolves: rhbz#1324340


author: Chris Ricker <kaboom@oobleck.net> 2.4b2-3
changelog:
  - Simplify doc packaging (Matthias Saou)
  - Simplify clean (Matthias Saou)
  - Don't strip fping6 binary (Matthias Saou)
  - Preserve timestamps


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855317
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-5
changelog:
  - Add support for microsecond precision of home server's response_window
    option, client's response_window option with the same precision and home
    server's response_timeouts option, backported from v3.0.x.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-6
changelog:
  - Fix missing braces around a condition branch in client response_window
    patch.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-1
changelog:
  - Upgrade to the latest upstream release v2.2.6
    Resolves: Bug#921563  raddebug not working correctly
    Resolves: Bug#921567  raddebug -t 0 exists immediately
    Resolves: Bug#1060319 MSCHAP Authentication is not working using automatic
                          windows user credentials
    Resolves: Bug#1078736 Rebase FreeRADIUS to 2.2.4
    Resolves: Bug#1135439 Default message digest defaults to sha1
    Resolves: Bug#1142669 EAP-TLS and OCSP validation causing segmentation
                          fault
    Resolves: Bug#1173388 dictionary.mikrotik missing Attributes
  - Remove radutmp rotation
    Resolves: Bug#904578  radutmp should not rotate
  - Check for start_servers not exceeding max_servers
    Resolves: Bug#1146828 radiusd silently fails when start_servers is higher
                          than max_servers


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-4
changelog:
  - Move OpenSSL init out of version check
    Resolves: Bug#1189394 radiusd segfaults after update
  - Comment-out ippool-dhcp.conf inclusion
    Resolves: Bug#1189386 radiusd fails to start after 'clean' installation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-5
changelog:
  - Fix EAP client authentication with TLS 1.2
    Resolves: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-6
changelog:
  - Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
    Related: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Kostas Georgiou <georgiou@fedoraproject.org> - 3.1.7-1
changelog:
  - New upstream release
  - Spec file cleanups
  - Use the new name_match feature to enable the diskusage plugin by default


author: Nick Le Mouton <nick@noodles.net.nz> - 3.7.1-1
changelog:
  - Merged from f23 to bring ganglia up to date 
  - Removed memcache support (libmemcached on el5 and el6 not up-to-date enough)


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1 to pick up some additional bug fixes.
  - Remove 0001-message_to_write_data_free-Don-t-unref-data-message-.patch
    (included in 2.26.1).
  Resolves: #883021


author: Colin Walters <walters@redhat.com> - 2.26.1-3
changelog:
  - Explicitly disable systemtap for this rebase; I am not aware
    of a significant number of current users in upstream, and it
    has not to my knowledge been tested in RHEL6.
    Resolves: #1000287


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1035941


author: Colin Walters <walters@redhat.com> - 2.26.1-8
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1036097


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.8-3
changelog:
  - Revert deprecations picked up through rebases to avoid further bugs
    like rhbz#1136304 (devhelp).


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.190
changelog:
  - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296029).
  - Update malloc free_list cyclic fix (#1264189).
  - Update tzdata-update changes (#1200555).


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 3.13-1
changelog:
  - GT6 update
  - Drop patches globus-callout-flavor.patch and globus-callout-doxygen.patch
    (fixed upstream)


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 15.29-1
changelog:
  - GT6 update
  - Drop patch globus-common-disable-network-tests.patch
    Use NO_EXTERNAL_NET environment variable implemented upstream instead


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 9.10-1
changelog:
  - GT6 update
  - Drop patches globus-gsi-cert-utils-deps.patch and
    globus-gsi-cert-utils-doxygen.patch (fixed upstream)


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 11.22-1
changelog:
  - GT6 update: GT-627: gss_import_cred crash
  - Enable checks on EPEL6 ppc64 - no longer fails with above fix


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 4.5-1
changelog:
  - Update to Globus Toolkit 6.0
  - Drop GPT build system and GPT packaging metadata
  - Drop progs subpackage - merged with globus-gsi-cert-utils-progs


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.5.el6
changelog:
  - gpxe-Support-underlying-UNDI-devices-that-don-t-support-i.patch [bz#661840 bz#668005]
  - Resolves: bz#661840
    (undi polling fix for Emulex NICs)
  - Resolves: bz#668005
    ([RFE] gpxe should support polling NICs)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.6.el6
changelog:
  - gpxe-Revert-Support-underlying-UNDI-devices-that-don-t-su.patch [bz#661840]
    (patch is broken)
  - Related: bz#661840
    (undi polling fix for Emulex NICs)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.7.el6
changelog:
  - gpxe-Add-SUPPORTED_-constants-to-pxe_api.h.patch [bz#661840]
  - gpxe-Support-underlying-UNDI-devices-that-don-t-support-i-reapply.patch [bz#661840]
  - Resolves: bz#661840
    (undi polling fix for Emulex NICs)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.8.el6
changelog:
  - gpxe-Replace-virtio-net-with-native-gPXE-driver.patch [bz#743893]
  - gpxe-Fix-DEBUG-builds-for-filenames-with-hyphens.patch [bz#743893]
  - Resolves: bz#743893
    (Failed to PXE boot when using Virtio)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.10.el6
changelog:
  - gpxe-Provide-fetch_setting_origin.patch [bz#972671]
  - gpxe-Use-next-server-from-filename-s-settings-block.patch [bz#972671]
  - Resolves: bz#972671
    (pxe boot fails if next-server details come from a different dhcp server)


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.11.el6
changelog:
  - gpxe-Avoid-setting-PSH-flag-when-SYN-flag-is-set.patch [bz#1105189]
  - gpxe-Set-PSH-flag-only-on-packets-containing-data.patch [bz#1105189]
  - Resolves: bz#1105189
    (HTTP request generated by gPXE has wrong TCP flag (SYN & PSH) in first packet in session)


author: Jeff E. Nelson <jenelson@redhat.com> - gpxe-0.9.7-6.12.el6
changelog:
  - gpxe-Add-init_pci_busdevfn.patch [bz#1057249]
  - gpxe-Enable-infrastructure-to-specify-an-autoboot-device-lo.patch [bz#1057249]
  - gpxe-Allow-prefix-to-specify-a-PCI-autoboot-device-location.patch [bz#1057249]
  - gpxe-Store-boot-bus-dev.fn-address-as-autoboot-device-locat.patch [bz#1057249]
  - gpxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00.0.patch [bz#1057249]
  - Resolves: bz#1057249
    (NIC boot order use device PCI address order instead of device boot order)


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.13.el6
changelog:
  - gpxe-Add-support-for-local-configuration-files.patch [bz#968474]
  - gpxe-Extract-timing-parameters-out-to-config-dhcp.h.patch [bz#968474]
  - gpxe-Use-spec-compliant-timeouts.patch [bz#968474]
  - Resolves: bz#968474
    ([RFE] option to increase gpxe retry timeout)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.9.7-6.14.el6
changelog:
  - gpxe-Fix-timeouts.patch [bz#1206042]
  - Resolves: bz#1206042
    (Connection time out when install vm through network)


author: Jeff E. Nelson <jen@redhat.com> - 0.9.7-6.15.el6
changelog:
  - gpxe-Include-port-in-HTTP-Host-header-as-needed.patch [bz#1231931]
  - Resolves: bz#1231931
    (gPXE 'Host' header being transferred without port)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-1
changelog:
  - fix 'make check' by using binaries built with a different path for their
    own check files
  - add a non-fips compile-time option, which we don't use


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.9-1
changelog:
  - look for prelink at compile-time, and if we find it try to invoke it
    using a full pathname before trying with $PATH (#512275)
  - buildrequires: prelink so that it will be found at compile-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.10-1
changelog:
  - refuse to truncate output below half the size of the hash length, or 80
    bits, whichever is higher, in case we get used in a situation where
    not doing so would make us vulnerable to CVE-2009-0217, in which an
    attacker manages to convince a party doing verification to truncate
    both the just-computed value and the value to be checked before
    comparing them, as comparing just 1 bit would make detecting forgeries
    close to impossible


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.11-1
changelog:
  - error out when we previously skipped a check entry because the value to be
    checked is the wrong size
  - fix estimation of the expected length for truncated values


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-1
changelog:
  - fix regression of #512275 -- we looked for prelink, but didn't record
    its location properly (#548438)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-2
changelog:
  - backport fix to treat unexpected command-line arguments as an error to
    avoid setting incorrect expectations, and warn when a check file doesn't
    appear to contain anything for us to check (#1016706)


author: <ruben@rubenkerkhof.com> 0.5.0-1
changelog:
  - Updated to new upstream version
  - Changed the service name in the scriptlets
  - Added a configuration file
  - Included GPL License


author: <ruben@rubenkerkhof.com> 0.5.4-1
changelog:
  - Update to new upstream version
  - Upstream fixed permissions on pidfile
  - New manpage for incron.conf
  - Upstream fixed example conf file


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.91-2.6.2.1
changelog:
  - Bump to 2.6.2 and u91b00.
  - Drop PR2568/RH1248530 backport now applied upstream.
  - Resolves: rhbz#1271920


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.1
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
  - Resolves: rhbz#1295767


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.1
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Remove patches added for RH1183014 which are now upstream in 2.6.5/7u99.
  - Resolves: rhbz#1320657


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-635.el6]
changelog:
  - [mm] backing-dev: ensure wakeup_timer is deleted (Jeff Moyer) [1318930]
  - [hv] vss: run only on supported host versions (Vitaly Kuznetsov) [1319813]
  - [sound] hda: Fix internal speaker for HP Z240 (Jaroslav Kysela) [1316673]
  - [perf] trace: Fix race condition at the end of started workloads (Jiri Olsa) [1302928]
  - [fs] nfsd: Combine decode operations for v4 and v4.1 (J. Bruce Fields) [1314536]
  - [hv] revert "vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: don't loose HVMSG_TIMER_EXPIRED messages" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: remove code duplication in message handling" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid wait_for_completion on crash" (Vitaly Kuznetsov) [1318882]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-636.el6]
changelog:
  - [netdrv] mlx4_en: Choose time-stamping shift value according to HW frequency (Kamal Heib) [1320448]
  - [fs] anon_inodes implement dname (Aristeu Rozanski) [1296019]
  - [net] packet: set transport header before doing xmit (John Greene) [1309526]
  - [net] tuntap: set transport header before passing it to kernel (John Greene) [1309526]
  - [netdrv] macvtap: set transport header before passing skb to lower device (John Greene) [1309526]
  - [net] ipv6: tcp: add rcu locking in tcp_v6_send_synack() (Jakub Sitnicki) [1312740]
  - [net] ipv6: sctp: add rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] ipv6: add complete rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] dccp: remove unnecessary codes in ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: remove unnecessary codes in tcp_ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: Refactor update of IPv6 flowi destination address for srcrt (RH) option (Jakub Sitnicki) [1312740]
  - [net] ipv6: protect flow label renew against GC (Sabrina Dubroca) [1313231]
  - [net] ipv6: fix possible deadlock in ip6_fl_purge / ip6_fl_gc (Sabrina Dubroca) [1313231]
  - [perf] annotate: Support full source file paths for srcline fix (Jiri Olsa) [1304472 1304479]
  - [perf] tools: Support full source file paths for srcline (Jiri Olsa) [1304472 1304479]
  - [perf] annotate: Fix -i option, which is currently ignored (Jiri Olsa) [1304472 1304479]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-637.el6]
changelog:
  - [netdrv] mlx4-en: add missing patch to init rss_rings in get_profile (Don Dutile) [1321164]
  - [netdrv] mlx4-en: disable traffic class queueing by default (Don Dutile) [1321164]
  - [netdrv] mlx4_core: Fix mailbox leak in error flow when performing update qp (Don Dutile) [1321164]
  - [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259581] {CVE-2015-5157}
  - [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259581] {CVE-2015-5157}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-638.el6]
changelog:
  - [mm] hugetlb: prevent BUG_ON in hugetlb_fault -> hugetlb_cow (Dave Anderson) [1303495]
  - [mm] hugetlb: fix race condition in hugetlb_fault (Dave Anderson) [1303495]
  - [s390] kdump: fix wrong BUG_ON statement (Hendrik Brueckner) [1321316]
  - [scsi] cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes (Sai Vemuri) [1320193]
  - [fs] nfs: fix a regression causing deadlock in nfs_wb_page_cancel() (Benjamin Coddington) [1135601]
  - [netdrv] cxgb4/ethtool: Get/set rx checksum (Sai Vemuri) [1225167]
  - [netdrv] cxgb4vf:The RX checksum feature was not completely ported to cxgb4vf driver (Sai Vemuri) [1225167]
  - [netdrv] cxgb4/cxgb4vf: Enable GRO (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Enable RX checksum offload flag (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Report correct link speed for unsupported ones (Sai Vemuri) [1296467]
  - [netdrv] cxgb4: Use vmalloc, if kmalloc fails (Sai Vemuri) [1296473]
  - [netdrv] cxgb4: Enhance driver to update FW, when FW is too old (Sai Vemuri) [1296472]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-639.el6]
changelog:
  - [input] wacom: fix ExpressKeys remote events (Aristeu Rozanski) [1318027]
  - [fs] revert "writeback: remove wb_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: bdi_writeback_task must set task state before calling schedule" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: merge bdi_writeback_task and bdi_start_fn" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: harmonize writeback threads naming" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix possible race when creating bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 1" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 2" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: simplify bdi code a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not remove bdi from bdi_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move last_active to bdi" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: restructure bdi forker loop a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move bdi threads exiting logic to the forker thread" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: prevent unnecessary bdi threads wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: optimize periodic bdi thread wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: remove unnecessary init_timer call" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: cleanup bdi_register" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix bad _bh spinlock nesting" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wakeup events when forking bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: Fix lost wake-up shutting down writeback thread" (Jeff Moyer) [1322297]
  - [mm] revert "backing-dev: ensure wakeup_timer is deleted" (Jeff Moyer) [1322297]
  - [perf] revert: perf changes out of "sched, perf: Fix periodic timers" (Jiri Olsa) [1322488]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-640.el6]
changelog:
  - [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
  - [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
  - [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
  - [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
  - [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
  - [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-641.el6]
changelog:
  - [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
  - [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
  - [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-642.el6]
changelog:
  - [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
  - [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
  - [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-642.1.1.el6]
changelog:
  - [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
  - [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
  - [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
  - [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
  - [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
  - [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
  - [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
  - [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
  - [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]


author: Michal Nowak <mnowak@redhat.com> - 3.60-1
changelog:
  - previous version was called "3.6" but this is broken update
    path wrt version "3.53" -- thus bumping to "3.60"


author: Michal Nowak <mnowak@redhat.com> - 3.70-2
changelog:
  - spec file change, which prevented uploading most recent tarball
    so the RPM was "3.70" but tarball was from 3.60


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: James Findley <sixy@gmx.com> - 0.8.7-1
changelog:
  - Update to release 0.8.7 (fixes #610140 and #604277).
  - Patch to fix two deprecation warnings on python 2.6.
  - Patched initscript to fix #590233.


author: Remi Collet <remi@fedoraproject.org> - 1.0.7-1
changelog:
  - version 1.0.7 GA
  - remove non GPL documentation
  - disable test_network and test_connection on EL-5


author: Remi Collet <remi@fedoraproject.org> - 1.1.4-1
changelog:
  - version 1.1.4 GA
    http://dev.mysql.com/doc/relnotes/connector-python/en/news-1-1.html
  - add link to documentation in package description
  - raise dependency on python 2.6


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032488 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269361 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289890


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-2
changelog:
  - Enable two additional ciphers and keep another one disabled
  - Prevent enabling extended masker key derive


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-6
changelog:
  - Fix syntax errors in patch that disables sslv2 tests
  - Resolves: Bug 1297888 - Rebase RHEL 6.8 to NSS 3.21 for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-15
changelog:
  - Fix shlibsign to return non-zero on failure
  - Resolves: Bug 587634 - shlibsign returns 0 although if fails


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-23
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-1
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Fix the required nspr version to be 4.10.6
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-41
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-43
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1229871)
  - document some options of the speed command (#1197095)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Ben Woodard <woodard@redhat.com
changelog:
  - removed dot at end of summary
  - removed unused/broken smp build
  - changed to using initrddir macro
  - changed depricated Prereq to Requires


author: Ben Woodard <woodard@redhat.com>
changelog:
  - add parameters to make
  - replace etc with _sysconfdir in most places
  - remove post section with unexplained removing of cached man pages.
  - removed dots at end of all summaries.


author: Robin Norwood <rnorwood@redhat.com> - 1.20-2
changelog:
  - Resolves: rhbz#226240
  - Incorporate changes from Steven Pritchard's package review
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Remove check macro cruft.
  - Update build dependencies.
  - Package LICENSE.
  - BR unzip, zip for better test coverage.


author: Steven Pritchard <steve@kspei.com> 2.05-1
changelog:
  - Update to 2.05.
  - Drop explicit Requires: perl(Crypt::CBC).
  - LD_RUN_PATH hack shouldn't be needed now.
  - Trim file list a bit.
  - License is BSD, more or less.


author: Paul Howarth <paul@city-fan.org> - 1.07-6
changelog:
  - License is "GPLv2 or Artistic", not "GPLv2+ or Artistic"
  - BR: perl(Test::Pod) for additional test coverage
  - BR: Perl core modules that might be dual-lived
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Fix provides filter to work with rpm ≥ 4.9
  - Don't need to remove empty directories from buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands
  - Reinstate buildroot definition and cleaning for EPEL-5 compatibility
  - Use tabs


author: Stepan Kasal <skasal@redhat.com> - 1.5-10
changelog:
  - Recode as UTF-8, fix argument order find with -depth (both by Paul Howarth)
  - Other minor cleanups


author: Matthaus Owens <matthaus@puppetlabs.com>
changelog:
  - Remove for loop on examples/ code which no longer exists. Add --no-run-if-empty to xargs invocations.


author: Jason Antman <jason@jasonantman.com>
changelog:
  - Move systemd service and unit file names back to "puppet" from erroneous "puppetagent"
  - Add symlink to puppetagent unit file for compatibility with current bug
  - Alter package removal actions to deactivate and stop both service names


author: Andrea Veri <averi@fedoraproject.org> - 4.5.1-2.20150121git7a91f20
changelog:
  - Make sure metadata.json gets installed correctly for Puppet to actually
    recognize the module release version. Thanks Simon Lukasik for the patch.


author: Fabian Affolter <fabian@bernewireless.net> - 0.5.0-1
changelog:
  - Removed build cond for check section
  - Switched to python2-devel
  - Updated to new upstream version 0.5.0


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
  - Renamed patches to python-urllib3-*
  - Fixed ssl check patch to use the correct cert path for Fedora.
  - Included dependency on ca-certificates
  - Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
  - Upstream patch to fix Accept header when behind a proxy.
  - Reorganize patch numbers to more clearly distinguish them.


author: Melissa Stone <melissa@puppetlabs.com> - 0.4.1-3
changelog:
  - Use RbConfig rather than Config to find sitelibdir
  - Use vendorlibdir and vendorarchdir for rhel 7


author: Moses Mendoza <msoes@puppetlabs.com> - 0.6.2-1
changelog:
  - Package rgen as a library. The tarball is created from a `gem unpack`
  - of rubygem-rgen and tarring up the resulting contents.


author: Ryan McKern <ryan.mckern@puppetlabs.com> - 1:2.2.0-2
changelog:
  - Bump release to version 1:2.2.0 in order to override a broken 2.3.2 package
    that was shipped and later yanked. The incompatable package broke user resources,
    and was removed from distribution on Feb 19 2014.
  - "Epoch is forever"


author: Melissa Stone <melissa@puppetlabs.com> - 1.6.2-1
changelog:
  - Update to upstream latest v1.6.2
  - Rework spec file to comply with modern fedora requirements
  - Stop building doc package


author: Russell Harrison <rharrison@fedoraproject.org> 0.2.1-3
changelog:
  - Drop requirement for the puppet package
  - Moving files not required at run time to the doc subpackage
  - Excluding files not meant for packaging instead of removing them durring install
  - Other fixes requested durring package review


author: Russell Harrison <rharrison@fedoraproject.org> 0.3.2-1
changelog:
  - New upstream version. http://puppet-lint.com/changelog/
  - Remove exit code patch. Fixed in upstream


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 0.4.0-2
changelog:
  - Remove unused macro (#470694)
  - Add ruby(abi) = 1.8 as required by package guidelines (#470694)
  - Move %{gemdir}/bin/rackup to %{_bindir} (#470694)


author: Jeff McCune <jeff@puppetlabs.com> - 1.2.1-1
changelog:
  - Updated rack gem to version 1.2.1
  - Modified SPEC to use vendor provided ruby rather than system ruby
  - Updated list of %files in package.  Added rack.gemspec


author: Jeff McCune <jeff@puppetlabs.com> - 1.0.1-2
changelog:
  - Updated SPEC file to install using system ruby
  - Updated SPEC file for version 1.0.1 of rack for Passenger 2.2.11


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-1
changelog:
  - Upgrade to upstream 0.1.21 version
  - Drop C2S profile patch since it has been adopted upstream
  - Include datastream forms of benchmarks for Red Hat Enterprise Linux 6
    and Red Hat Enterprise Linux 7
  - Include the kickstart file for United States Government Configuration
    Baseline (USGCB) profile for Red Hat Enterprise Linux 6


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-2
changelog:
  - Re-implement nodev, noexec, and nosuid removable media OVAL checks
    (RH BZ#1185426)
  - Don't include the 'test' profile into the SCAP content (RH BZ#1199946)
  - Document USGCB profile kickstart availability for Red Hat Enterprise Linux 6
    in the scap-security-guide manual page (RH BZ#1133963)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-3
changelog:
  - Rebuild scap-security-guide RPM against openscap >= 1.0.9 in order the
    upstream SCAP Security Guide logo to be rendered properly in the generated
    HTML guide


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-4
changelog:
  - Update R / BR to lightweight openscap-scanner >= 1.0.10-2 package
    (RH BZ#1243396)
  - Update URL to point to official SCAP Security Guide GitHub repository


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-1
changelog:
  - Rebase to upstream 0.1.27 version (RH BZ#1267509, RH BZ#1284045,
    RH BZ#1270329, RH BZ#1250895, RH BZ#1270710, RH BZ#1223865)
  - Perform the spec changes necessary for the rebase:
    * Update path to remediation functions library, list of provided
    kickstart files, path to scap-security-guide(8) manual page, path
    to LICENSE file
    * Drop:
    - scap-security-guide-0.1.21-dev-shm-removable.patch
    - scap-security-guide-0.1.21-dont-include-the-test-profile.patch
    patches since they have been merged upstream
    * Replace:
    - scap-security-guide-0.1.21-document-kickstart-in-manual-page.patch
    with its updated:
    - scap-security-guide-0.1.27-document-kickstarts-in-manual-page.patch
    version to also document inclusion of new kickstart files for Red Hat
    Enterprise Linux 6 that are available in upstream's 0.1.27 release
    * Introduce the new scap-security-guide-doc subpackage (to contain the
    HTML formatted documents containing security guides that have been
    generated from XCCDF benchmarks present in the scap-security-guide package)
    * Include the datastream versions of Firefox and Java Runtime Environment
    (JRE) benchmarks


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-2
changelog:
  - Modify the upstream provided kickstart files for Red Hat Enterprise Linux 6
    to use internal scap-security-guide RPM package rather than upstream git
    repository copies (RH BZ#1251929)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-1
changelog:
  - Rebase to upstream 0.1.28 version
  - Start using consistent IDs for OVAL definitions (RH BZ#1250808)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-2
changelog:
  - Update URL to PCI DSS standard (latest version is v3.1 from April 2015)
  - Enhance title of CNSS No.1253 profile for Red Hat Enterprise Linux 6
    (RH BZ#1284045#c8)
  - Drop 'install_hids' rule from PCI DSS profile for both Red Hat Enterprise
    Linux 6 and 7 (since we don't have an OVAL check for this requirement)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-10
changelog:
  - fix verification of SSL certificate with NUL in name (#553390, CVE-2009-4565)
  - don't start service by default (#529686)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - dropped patches (fixed upstream): exitpanic, certcnnul


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-5
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-9
changelog:
  - fixed MAXHOSTNAMELEN for FQDN
    resolves: rhbz#640234
  - fixed assertion if server connection is lost while making LDAP query
    resolves: rhbz#837007
  - fixed milterfdleaks patch to check socket before using fcntl on it
    resolves: rhbz#845821
  - fixed ldap_routing macro
    resolves: rhbz#890227
  - properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    resolves: rhbz#1106852


author: Morgan Haskel <morgan.haskel@onyxpoint.com> - 1.0.2-0
changelog:
  - Updated with all sorts of goodness including:
    - Some code cleanup
    - The ability to dump to syslog
    - The ability to replay from syslog
    - A rate limiter to not collect things that don't seem to be
      originating from a human.


author: John Jackson <jjackson@prophasys.com> - 1.0.2-1
changelog:
  - Determined that the sudosh.sh overlay in /etc/profile.d did not
    properly pass arguments to sudosh when called with -c and whitespace
    separation. This has been fixed.


author: Trevor Vaughan <tvaughan@ponyxpoint.com> - 1.0.2-2
changelog:
  - Rewrote some of the code to work better with syslog.
  - Fixed some typos
  - Removed some unnecessary code
  - Updated the spec file to properly use the WITH_SYSLOG calls


author: Peter Jones <pjones@redhat.com> - 4.02-9
changelog:
  - Avoid a workaround that causes machines to stall in PXE boots that
    use the local disk.
    ResolveS:rhbz#980671


author: Peter Jones <pjones@redhat.com> - 4.04-2
changelog:
  - Make the subpackages noarch, not i686, so rel-eng doesn't have to fight
    it to get working dependency resolution.
    Related: rhbz#980671


author: Steve Grubb <sgrubb@redhat.com> 0.3.13-1
changelog:
  - New upstream bug fix release
  resolves: #633584 - Pick up latest TrouSerS package
  resolves: #1074634 - Buffer overflow detected in TrouSerS daemon


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 2.0.12-1
changelog:
  - Update to version 2.0.12
  - Drop patches voms-gsoap.patch, voms-sha2-proxy.patch and voms-strndup.patch
    (accepted upstream)
  - Add alternatives to the client package to allow parallel installation of
    the java implementation of the client tools


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 2.0.13-1
changelog:
  - Update to version 2.0.13
  - Drop patches: voms-nossl3.patch, voms-tls1.patch, voms-gcc6.patch,
    voms-paren.patch, voms-comment-in-comment.patch and voms-doxygen.patch


