# changelog

author: Kamil Dudka <kdudka@redhat.com> 2.2.49-6
changelog:
  - add function acl_extended_file_nofollow() (#720318)
  - build with partial RELRO support as a security enhancement (#723998)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-7
changelog:
  - fix SIGSEGV of getfacl -e on overly long group name (#1025246)
  - fix test-suite failure on a repeated run (#743847)


author: Kai Engert <kaie@redhat.com> - 2014.1.98-65.2
changelog:
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate (rhbz#1138230).
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key.


author: Kai Engert <kaie@redhat.com> - 2015.2.3-65.1
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-69
changelog:
  - Document ErrorPolicy in cupsd.conf manpage (bug #1120587, STR #4457).
  - Prevent cups-polld busy loop when access is restricted (bug #1164854).
  - Apply upstream patch to prevent crash in cupsdContinueJob() (bug #1187840).
  - Added failover backend to support priority-based failover (bug #1115219).
  - Apply patch to fix sanitize_title documentation (bug #988062, STR #4569).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-70
changelog:
  - Fixed SetEnv patch (bug #1198394).
  - Validate ErrorPolicy directory when reading configuration (bug #1196217,
    STR #4591).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.4.2-73
changelog:
  - Fix failover backend options parsing (bug #1231322).
  - The socket backend could go into an infinite loop with certain printers
    (bug #1276772, STR #3622)
  - dnssd backend: don't crash if avahi gives a callback with no TXT record
    (bug #1269305)
  - Don't unload jobs that couldn't be saved (bug #1283003, STR #4742).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-76
changelog:
  - 1344782 - Banner pages do not show time-at-creation or time-at-processing
  - 1219571 - Invalid memory accesses lead to crash when configured class has implicit class as first member


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.4.2-77
changelog:
  - 1099617 - Using "lp -o orientation-requested=6" with a PDF file has no effect.
  - 1268131 - Printing PDF with fit-to-page doesn't take printer HW margins into account


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.50-1
changelog:
  - functions: improve killing loops
  - netfs: tweak nfs umount
  - sysctl.conf: mention sysctl -a
  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
  - spec: require plymouth
  - fix mangled sysconfig/init.s390
  - rc.sysinit: don't perform fsck twice with /.autorelabel
  - ifdown-eth: fix comparison
  - ifup-eth: if arping fails, output responding MAC
  - network-functions: fix change_resolv_conf after grep update
  - spec: add sysctl.d dir
  - rc.sysinit: fix typo in fs
  - rename_devices: comments need to have a blank before them
  - rename_device: remove comments and trailing whitespaces
  - bonding: warn if the ifup for slave device failed
  - clarify daemon() usage message
  - ifdown: clean ipv4 localhost addresses
  - ifup-post: check resolve.conf also with DNS2
  - ifup: add missing quotes
  - ifup-eth: some bridge options are applied later
  - init.d/halt: give init some time to reexecute
  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
  - ifup-wireless: fix calling of phy_wireless_device
  - rc.sysinit: apply quotas after system is relabeled


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.54-1
changelog:
  - specfile: require newer lvm
  - ifdown-eth: add timeout for when flushing global scope
  - functions: support boolean values in is_true() & is_false()
  - ifup-aliases: do not return with error when arping fails
  - netconsole: resolve domain name via 'getent' instead of 'hosts'


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.55-1
changelog:
  - ipcalc: detect invalid mask
  - ifup-aliases: send gratuitous ARPs when adding addresses
  - network: treat other tunnel interfaces (fixes ifdown stage)
  - kexec-disable.conf: release kexec memory properly
  - network-functions: do not send hostname via dhclient everytime
  - sysconfig/network: NO_DHCP_HOSTNAME option introduced
  - ipv6_add_addr_on_device: replace the existing address on NIC


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-27
changelog:
  - 1170750 apply "Set non negotiated params early" from upstream
    to fix SendTargets discovery over iSER with some targets


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16
changelog:
  - Update to aarch64-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16
changelog:
  - Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
  - Resolves: rhbz#1468473


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.8.1.el6]
changelog:
  - [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
  - [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.9.1.el6]
changelog:
  - [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.10.1.el6]
changelog:
  - [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
  - Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
  - [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
  - [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
  - [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
  - [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
  - [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
  - [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
  - [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - fix segfault when handling a trap (#1117404)
  - closing a file descriptor in a command substitution caused loss of the output (#1116072)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-55
changelog:
  - Resolves: rhbz#1415785 - ldap_child does not remove temporary files
                             when it's killed with  SIGTERM


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-56
changelog:
  - Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present
  - Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.3-57
changelog:
  - Resolves: rhbz#1473005 - The originalMemberOf attribute disappears from
                             the cache, causing intermittent HBAC issues


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1327697 - Fix netlogon credential checks
  - resolves: #1327746 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-37
changelog:
  - resolves: #1380151 - Fix memory leak in idmap_ad module
  - resolves: #1333561 - Fix smbclient connection issues to DFS shares
  - resolves: #1372611 - Allow ntlmsssp session key setup without signing
                         (Workaround for broken NetApp and EMC NAS)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-38
changelog:
  - resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                         empty list


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1428835 - Performance issues with vfs_dirsort and extended
                         attributes


author: Vritant Jain <adarshvritant@gmail.com> 1.18.5-1
changelog:
  - 1396405: Use an int for port on connections (csnyder@redhat.com)
  - 1393010: Correlate request ID, method and handler in logs
    (csnyder@redhat.com)
  - 1394776: Fix port, insecure, and handler options on M2Crypto wrapper
    (csnyder@redhat.com)
  - 1394351: Add httplib constants to m2cryptohttp (khowell@redhat.com)
  - 1390688: Add missing socket import (khowell@redhat.com)
  - Reduce usage of m2crypto (#184) (kevin@kahowell.net)


author: Vritant Jain <adarshvritant@gmail.com> 1.18.6-1
changelog:
  - 1400719: Proxy host not available for release command (wpoteat@redhat.com)
  - 1397201: Expose classes in m2crypto wrapper (khowell@redhat.com)


author: Adam Tkac <atkac redhat com> - 0.17-60
changelog:
  - merge review related fixes (#226379)
  - remove unused patches
    - netkit-rsh-0.16-pamfix.patch
    - netkit-rsh-0.16-jbj2.patch
    - netkit-rsh-0.16-jbj3.patch


author: Michal Ruprich <mruprich@redhat.com> - 0.17-64.1
changelog:
  - Resolves: #1450821 - rlogin fails to connect rsh-server after updating util-linux-ng from version 2.17.2-12.18.el6 to 2.17.2-12.24.el6


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307
changelog:
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1404152
  - Label /usr/bin/puppet* binaries as puppet_exec_t
  Resolves: rhbz#1386181


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307.1
changelog:
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  Resolves: rhbz#1462824
  - Disable mysqld_safe_t secure mode environment cleansing.
  Resolves: rhbz#1464145


author: Petr Menšík <pemensik@redhat.com> - 1.4.20-23.4
changelog:
  - Update trust anchors (#1458345)
  - Update managed keys from trigger
  - Fix periodic updates of root.key


author: Lyude Paul <cpaul@redhat.com> 7.6.1-2
changelog:
  - Fix annoying trailing whitespace after %description
  - Update firmware license
  - Added missing firmware file TAHITI_vce.bin (#1310823)


