# changelog

author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.0
changelog:
  - Update to upstream version 1.0.0.
  - Added Requires: python-keystoneclient >= 0.1.2.
  - 'nature' theme is not available in current sphinx version, use default.


author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.1-1
changelog:
  - Update to upstream version 1.0.1.
  - Remove new runtime dependency on python-pbr.
  - Remove requirements file.
  - Make requires generic instead of requiring specific versions.


author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.3-1
changelog:
  - Update to upstream 1.0.3.
  - README extension changed.
  - Get rid of pbr deps in the patch instead of this spec file.


author: Jordan OMara <jomara@redhat.com> 0.0.17-1
changelog:
  - replace "spacewalk" with "satellite" (cwolfe@redhat.com)
  - bz972780 add nova conductor to controller (cwolfe@redhat.com)


author: Jason Guiditta <jguiditt@redhat.com> 0.0.20-1
changelog:
  - Add support for either neutron or nova networking hostgroups.
  - Add Cinder, Heat, Ceilometer to Quickstack
  - Initial Load Balanced api support
  - Initial clustered mysql nodes (pacemaker cluster)
  - Set puppet data type in seeds.rb


author: Jason Guiditta <jguiditt@redhat.com> 0.0.21-1
changelog:
  - Configuration improvements for ha mysql
  - Update installer to work with foreman 1.3
  - Add horizon support to Load Balancer
  - Add plugin for cisco nexus to neutron setups


author: Jason Guiditta <jguiditt@redhat.com> 0.0.22-1
changelog:
  - Fix foreman-proxy port conflict
  - More installer tweaks
  - Neutron, Heat user fixes
  - Added external ovs bridge creation
  - Remove Clusterlabs repo


author: Jason Guiditta <jguiditt@redhat.com> 0.0.23-1
changelog:
  - Refactored Host Groups to make smaller base list
  - Gluster backend support for cinder and glance
  - Add numerous new config flags
  - Add initial neutron vlan support/configs


author: Jason Guiditta <jguiditt@redhat.com> 0.0.24-1
changelog:
  - BZ #1038281 - Do not disable selinux on openstack foreman installer.
  - BZ #1038772 - Remove Tech Preview text.
  - Add Swift Proxy to Controllers, new hostgroup for swift storage.
  - Tweak host group configuration/naming.
  - Load balancer cleanup, add Swift Proxy.
  - Update to work with latest packstack-puppet updates.


author: Jakub Ruzicka <jruzicka@redhat.com> 0.3.2-2
changelog:
  - Update to upstream 0.3.2.
  - Remove pbr deps in the patch instead of this spec file.
  - Ec2Signer patch is included in this version.


author: Pádraig Brady <pbrady@redhat.com> - 2013.2-0.9.b3
changelog:
  - Fix typo in openstack-neutron-meetering-agent package name
  - Register all agent services with chkconfig during installation


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.5.1.el6]
changelog:
  - [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [921958 883905]
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_auth() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [fs] nls: improve UTF8 -> UTF16 string conversion routine (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [fs] fat: Fix stat->f_namelen (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [netdrv] tun: fix ioctl() based info leaks (Thomas Graf) [922350 922351] {CVE-2012-6547}
  - [virt] x86: Add a check to catch Xen emulation of Hyper-V (Andrew Jones) [923204 918239]
  - [fs] cifs: fix expand_dfs_referral (Sachin Prabhu) [923098 902492]
  - [fs] cifs: factor smb_vol allocation out of cifs_setup_volume_info (Sachin Prabhu) [923098 902492]
  - [fs] cifs: have cifs_cleanup_volume_info not take a double pointer (Sachin Prabhu) [923098 902492]
  - [fs] nfs: Dont allow NFS silly-renamed files to be deleted, no signal (Dave Wysochanski) [920266 905095]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.6.1.el6]
changelog:
  - [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
  - [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
  - [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
  - [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
  - [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
  - [net] sunrpc: Get rid of the redundant xprt->shutdown bit field (J. Bruce Fields) [915579 893584]
  - [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
  - [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
  - [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
  - [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
  - [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.8.1.el6]
changelog:
  - [fs] raw: don't call set_blocksize when not changing the blocksize (Jeff Moyer) [951406 909482]
  - [x86] Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [952570 876275]
  - [netdrv] ixgbe: Only set gso_type to SKB_GSO_TCPV4 as RSC does not support IPv6 (Michael S. Tsirkin) [927292 908196]
  - [netdrv] bnx2x: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] qlcnic: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] ixgbe: fix gso type (Michael S. Tsirkin) [927292 908196]
  - [fs] gfs2: Allocate reservation structure before rename and link (Robert S Peterson) [924847 922999]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.9.1.el6]
changelog:
  - [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
  - [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
  - [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
  - [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
  - [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
  - [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
  - [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
  - [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
  - [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
  - [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
  - [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
  - [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
  - [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
  - [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
  - [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
  - [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
  - [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
  - [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
  - [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
  - [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
  - [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
  - [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
  - [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
  - [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
  - [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
  - [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
  - [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.10.1.el6]
changelog:
  - [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
  - [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
  - [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
  - [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
  - [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
  - [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
  - [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
  - [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
  - [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
  - [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
  - [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
  - [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
  - [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
  - [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
  - [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
  - [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
  - [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
  - [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
  - [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
  - [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.11.1.el6]
changelog:
  - [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}


author: Don Howard <dhoward@redhat.com> [2.6.32-358.111.1.openstack.el6]
changelog:
  - [net] packet: fix network header offset in skb for raw sockets (Stefan Assmann) [973484 845515]
  - [net] Add generic packet offload infrastructure (Vlad Yasevich) [973485 801856]
  - [net] Switch to using the new packet offload infrastructure (Vlad Yasevich) [973485 801856]
  - [net] Add net protocol offload registration infrustructure (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Add new offload registration infrastructure (Vlad Yasevich) [973485 801856]
  - [net] ipv4: Switch to using the new offload infrastructure (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Switch to using new offload infrastructure (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Separate ipv6 offload support (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Separate tcp offload functionality (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Separate out UDP offload functionality (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Move exthdr offload support into separate file (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Update ipv6 static library with newly needed functions (Vlad Yasevich) [973485 801856]
  - [net] ipv4: Pull GSO registration out of inet_init() (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Pull IPv6 GSO registration out of the module (Vlad Yasevich) [973485 801856]
  - [net] use right lock in __dev_remove_offload (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Preserve ipv6 functionality needed by NET (Vlad Yasevich) [973485 801856]
  - [net] Disable all TSO features when SG is disabled (Amerigo Wang) [973483 892868]
  - [net] fix netdev_increment_features() (Amerigo Wang) [973483 892868]
  - [net] add generic PF_BRIDGE:RTM_ FDB hooks (Amerigo Wang) [971663 907447]
  - [net] netdevice: make address const in device address management (Amerigo Wang) [971663 907447]
  - [net] rtnetlink: add attributes to fdb interface (Amerigo Wang) [971663 907447]
  - [net] rtnetlink: notify events for FDB NTF_SELF adds and deletes (Amerigo Wang) [971663 907447]
  - [net] rtnetlink: do not check master for bridge ports (Amerigo Wang) [971663 907447]
  - [net] dst: Introduce skb_tunnel_rx() helper (Amerigo Wang) [971663 907447]
  - [net] netlink: Add nla_put_net{16,32,64}() helpers (Amerigo Wang) [971663 907447]
  - [net] igmp: export symbol ip_mc_leave_group (Amerigo Wang) [971663 907447]
  - [net] vxlan: virtual extensible lan (Amerigo Wang) [971663 907447]
  - [net] vxlan: put UDP socket in correct namespace (Amerigo Wang) [971663 907447]
  - [net] vxlan: remove unused including <linux/version.h> (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix more sparse warnings (Amerigo Wang) [971663 907447]
  - [net] vxlan: minor output refactoring (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix byte order in hash function (Amerigo Wang) [971663 907447]
  - [net] vxlan: associate with tunnel socket on transmit (Amerigo Wang) [971663 907447]
  - [net] vxlan: allow configuring port range (Amerigo Wang) [971663 907447]
  - [net] vxlan: add additional headroom (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix receive checksum handling (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix oops when give unknown ifindex (Amerigo Wang) [971663 907447]
  - [net] vxlan: don't expire permanent entries (Amerigo Wang) [971663 907447]
  - [net] vxlan: allow a user to set TTL value (Amerigo Wang) [971663 907447]
  - [net] vxlan: Fix error that was resulting in VXLAN MTU size being 10 bytes too large (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix a typo (Amerigo Wang) [971663 907447]
  - [net] vxlan: Update hard_header_len based on lowerdev when instantiating VXLAN (Amerigo Wang) [971663 907447]
  - [net] vxlan: remove unused variable (Amerigo Wang) [971663 907447]
  - [net] vxlan: Use the underlying device index when joining/leaving multicast groups (Amerigo Wang) [971663 907447]
  - [net] vxlan: Add ethtool drvinfo (Amerigo Wang) [971663 907447]
  - [Documentation] vxlan: fix command usage in its doc (Amerigo Wang) [971663 907447]
  - [fs] proc/ns: proc files for namespace naming policy (Amerigo Wang) [971672 880142]
  - [kernel] ns: Introduce the setns syscall (Amerigo Wang) [971672 880142]
  - [kernel] ns: Wire up the setns system call (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Add support for the network namespace (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Add support for the uts namespace (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Add support for the ipc namespace (Amerigo Wang) [971672 880142]
  - [net] ns: Allow setting the network namespace by fd (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Fix Oops on stat of /proc/<zombie pid>/ns/net (Amerigo Wang) [971672 880142]
  - [fs] ns proc: Return -ENOENT for a nonexistent /proc/self/ns/ entry (Amerigo Wang) [971672 880142]
  - [net] ns: fix get_net_ns_by_fd for !CONFIG_NET_NS (Amerigo Wang) [971672 880142]
  - [net] ns: get_net_ns_by_fd() oopses if proc_ns_fget() returns an error (Amerigo Wang) [971672 880142]
  - [net] ns: fix proxy ARP entries listing on a netns (Amerigo Wang) [971672 880142]
  - [net] ns: fix net_alloc_generic() (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: prevent crash when ns_entries is empty (Amerigo Wang) [971672 880142]
  - [fs] improve scalability of pseudo filesystems (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Fix the namespace inode permission checks (Amerigo Wang) [971672 880142]
  - [net] ns: keep vlan slaves on master netns move (Amerigo Wang) [971672 880142]
  - [net] dev_forward_skb should call nf_reset (Amerigo Wang) [971672 880142]
  - [net] Allow tagged VLAN packets to flow through VETH devices (Amerigo Wang) [971672 880142]
  - [net] fix mtu check when TSO is enabled (Amerigo Wang) [971672 880142]
  - [net] dev_forward_skb() should clear skb_iif (Amerigo Wang) [971672 880142]
  - [net] rtnetlink: speedup rtnl_dump_ifinfo() (Amerigo Wang) [971672 880142]
  - [net] Introduce unregister_netdevice_queue() (Amerigo Wang) [971672 880142]
  - [net] Introduce unregister_netdevice_many() (Amerigo Wang) [971672 880142]
  - [net] introduce NETDEV_UNREGISTER_PERNET (Amerigo Wang) [971672 880142]
  - [net] NETDEV_UNREGISTER_PERNET -> NETDEV_UNREGISTER_BATCH (Amerigo Wang) [971672 880142]
  - [net] Handle NETREG_UNINITIALIZED devices correctly (Amerigo Wang) [971672 880142]
  - [net] use list_first_entry macro (Amerigo Wang) [971672 880142]
  - [net] use rcu_barrier() in rollback_registered_many (Amerigo Wang) [971672 880142]
  - [net] factorize sync-rcu call in unregister_netdevice_many (Amerigo Wang) [971672 880142]
  - [net] deinit automatic LIST_HEAD (Amerigo Wang) [971672 880142]
  - [net] Fix more stale on-stack list_head objects (Amerigo Wang) [971672 880142]
  - [net] Move rcu_barrier from rollback_registered_many to netdev_run_todo (Amerigo Wang) [971672 880142]
  - [net] dev_close() should check IFF_UP (Amerigo Wang) [971672 880142]
  - [netdrv] dummy: fix rcu_sched self-detected stalls (Amerigo Wang) [971672 880142]
  - [net] device name allocation cleanups (Amerigo Wang) [971672 880142]
  - [net] fix dev_get_valid_name (Amerigo Wang) [971672 880142]
  - [net] rtnetlink: Add missing manual netlink notification in dev_change_net_namespaces (Amerigo Wang) [971672 880142]
  - [net] fix incorrect getting net device's name (Amerigo Wang) [971672 880142]
  - [netdrv] veth: Fix the byte counters (Amerigo Wang) [971672 880142]
  - [netdrv] veth: Fix packet checksumming (Amerigo Wang) [971672 880142]
  - [netdrv] veth: Enforce minimum size of VETH_INFO_PEER (Amerigo Wang) [971672 880142]
  - [net] openvswitch: Add support for network namespaces (Amerigo Wang) [971672 880142]
  - [net] ns: add a printk to explain a failure (Amerigo Wang) [971672 880142]
  - [net] WARN if skb_checksum_help() is called on skb requiring segmentation (Amerigo Wang) [973487 903961]
  - [net] adjust skb_gso_segment() for calling in rx path (Amerigo Wang) [973482 904914]
  - [net] openvswitch: Move LRO check from transmit to received (Amerigo Wang) [973482 904914]
  - [net] more accurate network taps in transmit path (Amerigo Wang) [973481 915552]
  - [net] drop_monitor: convert some kfree_skb call sites to consume_skb (Amerigo Wang) [973481 915552]
  - [net] netlink: dont drop packet but consume it (Amerigo Wang) [973481 915552]
  - [net] netlink: drop_monitor/dropwatch friendly (Amerigo Wang) [973481 915552]
  - [net] openvswitch: Stop using NLA_PUT*() (Thomas Graf) [971667 923212]
  - [net] openvswitch: using kfree_rcu() to simplify the code (Thomas Graf) [971667 923212]
  - [net] openvswitch: Increase maximum number of datapath ports (Thomas Graf) [971667 923212]
  - [net] openvswitch: Remove unecessary semicolon (Thomas Graf) [971667 923212]
  - [net] openvswitch: Print device when warning about over MTU packets (Thomas Graf) [971667 923212]
  - [net] openvswitch: Store flow key len if ARP opcode is not request or reply (Thomas Graf) [971667 923212]
  - [net] openvswitch: Process RARP packets with ethertype 0x8035 similar to ARP packets (Thomas Graf) [971667 923212]
  - [net] netfilter: ip6_tables: add flags parameter to ipv6_find_hdr() (Thomas Graf) [971667 923212]
  - [net] ipv6: Move ipv6_find_hdr() out of Netfilter code (Thomas Graf) [971667 923212]
  - [net] ipv6: improve ipv6_find_hdr() to skip empty routing headers (Thomas Graf) [971667 923212]
  - [net] core: add function for incremental IPv6 pseudo header checksum updates (Thomas Graf) [971667 923212]
  - [net] openvswitch: add ipv6 'set' action (Thomas Graf) [971667 923212]
  - [net] openvswitch: use this_cpu_ptr per-cpu helper (Thomas Graf) [971667 923212]
  - [net] openvswitch: add skb mark matching and set action (Thomas Graf) [971667 923212]
  - [net] openvswitch: Use RCU callback when detaching netdevices (Thomas Graf) [971667 923212]
  - [net] openvswitch: Fix ovs_vport_cmd_del return value on success (Thomas Graf) [971667 923212]
  - [net] openvswitch: Fix ovs_vport_cmd_new return value on success (Thomas Graf) [971667 923212]
  - [net] openvswitch: Call genlmsg_end in queue_userspace_packet (Thomas Graf) [971667 923212]
  - [net] openvswitch: Fix parsing invalid LLC/SNAP ethertypes (Thomas Graf) [971667 923212]
  - [net] openvswitch: fix the calculation of checksum for vlan header (Thomas Graf) [971667 923212]
  - [net] openvswitch: remove some useless comments (Thomas Graf) [971667 923212]
  - [net] introduce new priv_flag indicating iface capable of change mac when running (Thomas Graf) [971667 923212]
  - [net] openvswitch: Use eth_mac_addr() instead of duplicating it (Thomas Graf) [971667 923212]
  - [net] openvswitch: Avoid useless holes in struct vport (Thomas Graf) [971667 923212]
  - [net] openvswitch: Make OVSP_LOCAL 32-bit (Thomas Graf) [971667 923212]
  - [net] openvswitch: Change ENOENT return value to ENODEV in lookup_vport() (Thomas Graf) [971667 923212]
  - [net] openvswitch: Allow OVS_USERSPACE_ATTR_USERDATA to be variable length (Thomas Graf) [971667 923212]
  - [net] openvswitch: Use FIELD_SIZEOF() in dp_init() (Thomas Graf) [971667 923212]
  - [net] Fix corruption of skb csum field in pskb_expand_head() of net/core/skbuff.c (Amerigo Wang) [971660 918011]
  - [net] Fix skb_copy_expand() handling of ->csum_start (Amerigo Wang) [971660 918011]
  - [net] gro: fix different skb headrooms (Amerigo Wang) [971660 918011]
  - [net] gro: Re-fix different skb headrooms (Amerigo Wang) [971660 918011]
  - [net] gso: fix possible wrong checksum generation (Amerigo Wang) [971660 918011]
  - [net] tso: Fix possible wrong checksum generation (Amerigo Wang) [971660 918011]
  - [net] fix a wrong assignment in skb_split() (Amerigo Wang) [971660 918011]
  - [net] Rename skb_has_frags to skb_has_frag_list (Amerigo Wang) [971660 918011]
  - [net] offloading: Generalize netif_get_vlan_features() (Amerigo Wang) [971660 918011]
  - [net] offloading: Pass features into netif_needs_gso() (Amerigo Wang) [971660 918011]
  - [net] offloading: Convert dev_gso_segment() to use precomputed features (Amerigo Wang) [971660 918011]
  - [net] offloading: Convert skb_need_linearize() to use precomputed features (Amerigo Wang) [971660 918011]
  - [net] offloading: Convert checksums to use centrally computed features (Amerigo Wang) [971660 918011]
  - [net] offloading: fix can_checksum_protocol() arguments swap (Amerigo Wang) [971660 918011]
  - [net] offloading: do not disable sg for packets requiring no checksum (Amerigo Wang) [971660 918011]
  - [net] ip_gre: include route header_len in max_headroom calculation (Amerigo Wang) [971660 918011]
  - [net] gre: PPP over IPv4 (Point-to-Point Tunneling Protocol) (Amerigo Wang) [971660 918011]
  - [net] gre: fix improper error handling (Amerigo Wang) [971660 918011]
  - [net] ip_gre: lockless xmit (Amerigo Wang) [971660 918011]
  - [net] ip_gre: Fix ip_gre lockless xmits (Amerigo Wang) [971660 918011]
  - [net] gre: add GSO support (Amerigo Wang) [971660 918011]
  - [net] ip_gre: fix possible use after free (Amerigo Wang) [971660 918011]
  - [net] ip_gre: set transport header correctly to gre header (Amerigo Wang) [971660 918011]
  - [net] ip_gre: Fix kernel panic in IP_GRE with GRE csums (Amerigo Wang) [971660 918011]
  - [net] ip_gre: When TOS is inherited, use configured TOS value for non-IP packets (Amerigo Wang) [971660 918011]
  - [net] offloading: Add support for hardware-offloaded encapsulation (Amerigo Wang) [971660 918011]
  - [net] offloading: Handle encapsulated offloads before fragmentation or handing to lower dev (Amerigo Wang) [971660 918011]
  - [net] Add skb_unclone() helper functions (Amerigo Wang) [971660 918011]
  - [net] ipv6: fix warning in xfrm6_mode_tunnel_input (Amerigo Wang) [971660 918011]
  - [net] ipv4: fix warning in xfrm4_mode_tunnel_input (Amerigo Wang) [971660 918011]
  - [net] gso: factor out skb_mac_gso_segment() from skb_gso_segment() (Amerigo Wang) [971660 918011]
  - [net] gre: Add TCP segmentation offload for GRE (Amerigo Wang) [971660 918011]
  - [net] ip_gre: allow CSUM capable devices to handle packets (Amerigo Wang) [971660 918011]
  - [net] ip_gre: remove an extra dst_release() (Amerigo Wang) [971660 918011]
  - [net] ip_gre: Fix IP-Identification (Amerigo Wang) [971660 918011]
  - [net] ip_gre: Fix GRE_CSUM case (Amerigo Wang) [971660 918011]
  - [net] ip_gre: add ethtool support to gre tunnel (Amerigo Wang) [971660 918011]
  - [net] ipv4: Fix ip-header identification for gso packets (Amerigo Wang) [971660 918011]
  - [net] gro: add checksuming helpers (Amerigo Wang) [971660 918011]
  - [net] gro: add gro_cells infrastructure (Amerigo Wang) [971660 918011]
  - [net] ip_gre: get rid of ipgre_lock (Amerigo Wang) [971660 918011]
  - [net] ip_gre: add GRO capability (Amerigo Wang) [971660 918011]
  - [net] ip_gre: enable GRO by default (Amerigo Wang) [971660 918011]
  - [net] ip_gre: fix the inner header offset for gretap (Amerigo Wang) [971660 918011]
  - [net] Kill link between CSUM and SG features (Amerigo Wang) [971657 918014]
  - [net] tunneling: Inherit NETIF_F_SG for hw_enc_features (Amerigo Wang) [971657 918014]
  - [net] tunneling: Add generic Tunnel segmentation (Amerigo Wang) [971657 918014]
  - [net] vxlan: capture inner headers during encapsulation (Amerigo Wang) [971657 918014]
  - [net] vxlan: Add capability of Rx checksum offload for inner packet (Amerigo Wang) [971657 918014]
  - [net] vxlan: Use tunnel_ip_select_ident() for tunnel IP-Identification (Amerigo Wang) [971657 918014]
  - [net] vxlan: reset nf before xmit vxlan encapsulated packet (Amerigo Wang) [971657 918014]
  - [net] vxlan: fix oops when delete netns containing vxlan (Amerigo Wang) [971657 918014]
  - [net] vxlan: Use UDP Tunnel segmention (Amerigo Wang) [971657 918014]
  - [net] vxlan: add ethtool support (Amerigo Wang) [971657 918014]
  - [net] gre: Fix GREv4 TCPv6 segmentation (Amerigo Wang) [971655 960008]
  - [net] vxlan: Fix TCPv6 segmentation (Amerigo Wang) [971655 960008]
  - [net] vlan: adjust vlan_set_encap_proto() for its callers (Thomas Graf) [971669 919068]
  - [net] vlan: Enable software emulation for vlan accleration (Thomas Graf) [971669 919068]
  - [net] offloading: Support multiple vlan tags in GSO (Thomas Graf) [971669 919068]
  - [net] offloading: Do not mask out NETIF_F_HW_VLAN_TX for vlan (Thomas Graf) [971669 919068]
  - [net] Revert: openvswitch: Make Open vSwitch use non-accel VLAN tagging (Thomas Graf) [971669 919068]
  - [net] veth: extend device features (Thomas Graf) [971666 959780]
  - [net] Support specifying the network namespace upon device creation (Thomas Graf) [971672 880142]
  - [net] rtnetlink: Fix ip link add netns oops (Thomas Graf) [971672 880142]
  - [net] rtnetlink: Allow setting the network namespace by fd (Thomas Graf) [971672 880142]
  - [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [971670 886420]
  - [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [971670 886420]
  - [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [971670 886420]
  - [net] scm: Reorder scm_cookie (Thomas Graf) [971672 880142]
  - [kernel] user_ns: Introduce user_nsmap_uid and user_ns_map_gid (Thomas Graf) [971672 880142]
  - [net] sock: Introduce cred_to_ucred (Thomas Graf) [971672 880142]
  - [net] af_unix: Allow SO_PEERCRED to work across namespaces (Thomas Graf) [971672 880142]
  - [net] af_netlink: Add needed scm_destroy after scm_send (Thomas Graf) [971672 880142]
  - [net] scm: Capture the full credentials of the scm sender (Thomas Graf) [971672 880142]
  - [net] af_unix: Allow credentials to work across user and pid namespaces (Thomas Graf) [971672 880142]
  - [net] af_unix: Allow connecting to sockets in other network namespaces (Thomas Graf) [971672 880142]
  - [net] scm: Capture the full credentials of the scm sender (Thomas Graf) [971672 880142]
  - [net] af_unix: dont send SCM_CREDENTIALS by default (Thomas Graf) [971672 880142]
  - [net] scm: fix incorrect credentials passing (Thomas Graf) [971672 880142]
  - [net] af_unix: Only allow recv on connected (Thomas Graf) [971672 880142]
  - [net] af_netlink: force credentials passing (Thomas Graf) [971672 880142]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.114.1.openstack.el6]
changelog:
  - [x86] apic: Add probe() for apic_flat (Prarit Bhargava) [975086 953342]
  - [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
  - [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
  - [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
  - [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
  - [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
  - [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
  - [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
  - [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
  - [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
  - [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
  - [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
  - [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
  - [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
  - [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
  - [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
  - [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
  - [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
  - [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}
  - [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
  - [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
  - [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
  - [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
  - [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
  - [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
  - [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.118.1.openstack.el6]
changelog:
  - [netdrv] qlcnic: fix vlgrp handling (Stefan Assmann) [995125 886420]
  - [netdrv] bna: fix vlan_grp handling (Stefan Assmann) [995125 886420]
  - [net] set IFF_LIVE_ADDR_CHANGE to ext_priv_flags (Amos Kong) [995409 904924]
  - [net] veth: add vlan features (Flavio Leitner) [985838 959817]
  - [net] openvswitch: Add Kconfig dependency on GRE-DEMUX (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Add gre tunnel support (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Optimize flow key match for non tunnel flows (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Expand action buffer size (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Add tunneling interface (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Copy individual actions (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Simplify interface ovs_flow_metadata_from_nlattrs() (Amerigo Wang) [993251 976810]
  - [net] openvswitch: make skb->csum consistent with rest of networking stack (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Fix misspellings in comments and docs (Amerigo Wang) [993251 976810]
  - [net] openvswitch: fix variable names in comment (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Unify vport error stats handling (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Remove unused get_config vport op (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Immediately exit on error in ovs_vport_cmd_set() (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Remove unneeded ovs_netdev_get_ifindex() (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Simplify datapath locking (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Use ETH_ALEN to define ethernet addresses (Amerigo Wang) [993251 976810]
  - [net] openvswitch: datapath.h: Fix a stale comment (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Don't insert empty OVS_VPORT_ATTR_OPTIONS attribute (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Move common genl notify code into ovs_notify() (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Refine Netlink message size calculation and kill FLOW_BUFSIZE (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Use nla_memcpy() to memcpy() data from attributes (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Specify the minimal length of OVS_PACKET_ATTR_PACKET in the policy (Amerigo Wang) [993251 976810]
  - [net] openvswitch: correct an invalid BUG_ON (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Preallocate reply skb in ovs_vport_cmd_set() (Amerigo Wang) [993251 976810]
  - [net] ip_gre: fix a soft lockup in ipgre_fini() (Amerigo Wang) [993251 976810]
  - [net] gre: Fix MTU sizing check for gretap tunnels (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: Use skb-len to PMTU check (Amerigo Wang) [993251 976810]
  - [net] gre: fix a regression in ioctl (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: Add dont fragment flag (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: push generic protocol handling to ip_tunnel module (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: extend iptunnel_xmit() (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: fix kernel panic with icmp_dest_unreach (Amerigo Wang) [993251 976810]
  - [net] gre: export gre_handle_offloads() function (Amerigo Wang) [993251 976810]
  - [net] gre: export gre_build_header() function (Amerigo Wang) [993251 976810]
  - [net] gre: Allow multiple protocol listener for gre protocol (Amerigo Wang) [993251 976810]
  - [net] gre: Simplify gre protocol registration locking (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: remove __net_init/exit from exported functions (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: specify protocol outside IP header (Amerigo Wang) [993251 976810]
  - [net] ip_gre: fix a possible crash in ipgre_err() (Amerigo Wang) [993251 976810]
  - [net] ipv4: typo issue, remove erroneous semicolon (Amerigo Wang) [993251 976810]
  - [net] ip_gre: fix a possible crash in parse_gre_header() (Amerigo Wang) [993251 976810]
  - [net] ip_gre: don't overwrite iflink during net_dev init (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: Fix off-by-one error in forming dev name (Amerigo Wang) [993251 976810]
  - [net] gre: Refactor GRE tunneling code (Amerigo Wang) [993251 976810]
  - [net] ip: convert __IPTUNNEL_XMIT() to an inline function (Amerigo Wang) [993251 976810]
  - [net] export unregister_netdevice_many() (Amerigo Wang) [993251 976810]
  - [netdrv] be2net: fix VLAN traffic if no VLAN group is registered (Stefan Assmann) [975974 980772]
  - [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
  - [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
  - [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
  - [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
  - [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
  - [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
  - [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
  - [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
  - [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
  - [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
  - [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
  - [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
  - [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
  - [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
  - [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
  - [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
  - [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
  - [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
  - [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]
  - [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
  - [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
  - [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559] {CVE-2013-2232}
  - [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
  - [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
  - [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]
  - [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
  - [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
  - [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
  - [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
  - [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
  - [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
  - [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]


author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.5-1
changelog:
  - Update to upstream version 1.0.5.
  - Update dependencies.
  - Remove runtime dependency on python-pbr.
  - Change Source0 to PyPI.


author: Derek Higgins <derekh@redhat.com> - 1.7.4-2
changelog:
  - removing reference to tmpfiles.d/openstack-swift.conf in packaging
  - adding python-swiftclient as a BuildRequires


author: Pete Zaitcev <zaitcev@redhat.com> - 1.7.4-2.1
changelog:
  - Add missing Upstart jobs and init scripts for daemons, bz#885530
  - Drop duplicated /var/run directories from the spec


author: Xavier Queralt <xqueralt@redhat.com> - 2013.2-4
changelog:
  - Remove cert and scheduler hard dependency on cinderclient - rhbz#1031679
  - Require ipmitool for baremetal driver - rhbz#1022243
  - Ensure we don't boot oversized images (CVE-2013-4463 and CVE-2013-2096)


author: Jeff Peeler <jpeeler@redhat.com> 2013.2-0.6.b3
changelog:
  - fix init scripts (rhbz 1006868)
  - added python-babel
  - remove runtime pbr dependency (rhbz 1006911)


author: Jeff Peeler <jpeeler@redhat.com> 2013.2-0.7.b3
changelog:
  - Depend on python-oslo-config >= 1.2 so it upgraded automatically
  - Distribute dist defaults in heat-dist.conf separate to user heat.conf (rhbz 1008560)


author: Jeff Peeler <jpeeler@redhat.com> 2013.2-0.8.b3
changelog:
  - fix the python-oslo-config dependency to cater for epoch
  - add api-paste-dist.ini to /usr/share/heat


author: Jakub Ruzicka <jruzicka@redhat.com> - 1:0.10.0-1
changelog:
  - Update to upstream 0.10.0.
  - Remove runtime dependency on python-pbr.
  - Add doc package.
  - New BuildRequires: python2-devel, python-d2to1, python-pbr
  - Remove python-keystoneclient version cap.


author: Terry Wilson <twilson@redhat.com> - 2013.2-12
changelog:
  - Add vpnaas/fwaas configs to init scripts, bz#1032450
  - Pass neutron rootwrap.conf in sudoers.d/neutron, bz#984097


author: Terry Wilson <twilson@redhat.com> - 2013.2-13
changelog:
  - QPID fixes from oslo-incubator, bz#1038711, bz#1038717
  - Remove dnsmasq version warning, bz#997961
  - Ensure that disabled services are properly handled on upgrade, bz#1040704


author: Miguel Ángel Ajo <majopela@redhat.com> 2013.2.3-10
changelog:
  - Moved all plugin sources to python-neutron to avoid breaking
    hidden upstream dependencies from agents to plugins, etc.
    fixes rhbz#1120146
  - Removed the hyper-v agent exclude.
  - Added a few LICENSE files to packages that missed it.


author: Martin Mágr <mmagr@redhat.com> - 2013.2-4
changelog:
  - Added puppet-ceilometer, puppetlabs-mongodb, puppet-heat and puppet-pacemaker
  - Synchronized modules with current state in package packstack-modules-puppet


author: Ben Nemec <bnemec@redhat.com> - 2013.2-5
changelog:
  - Added puppet-certmonger and puppet-nssdb
  - Synchronized modules with current state in package packstack-modules-puppet


author: Martin Mágr <mmagr@redhat.com> - 2013.2-6
changelog:
  - Synchronized modules with current havana branch of Packstack
    and openstack-puppet-modules-repo (https://github.com/redhat-openstack/openstack-puppet-modules)


author: Martin Mágr <mmagr@redhat.com> - 2013.2-8
changelog:
  - Synchronized modules with current havana branch of redhat-openstack/openstack-puppet-modules
  - Added apache24.patch and mariadb.patch


author: Martin Mágr <mmagr@redhat.com> - 2013.2-8.1
changelog:
  - Added 0001-Fix-network_vlan_ranges-parameter-for-OVS-plugin.patch (rhbz#1066549)
  - Added 0002-Change-dhcp_lease_duration-to-Havana-default-of-8640.patch (rhbz#1082505)
  - Added 0003-Do-not-create-symblic-link-for-cisco-plugin.patch (rhbz#1080442)


author: Iván Chavero <ichavero@redhat.com> - 2013.2-8.3
changelog:
  - Added patches to make utf8 the default charset
  - Added cinder.patch
  - Added glance.patch
  - Added heat.patch
  - Added keystone.patch
  - Added neutron.patch
  - Added nova.patch
  - Added openstack.patch


author: Martin Mágr <mmagr@redhat.com> - 2013.2-9
changelog:
  - Synchronized modules with current havana branch of redhat-openstack/openstack-puppet-modules
  - Removed unnecessary puppet-neutron patches


author: Jeff Peeler <jpeeler@redhat.com> 1.2.1-1
changelog:
  - Version bump to match upstream
  - Added cfn-create-aws-symlinks
  - Updated URL, Source
  - Added psutil requires
  - Changed install location from /opt to /bin


author: Alan Pevec <apevec@redhat.com> - 2013.2-0.10.b3
changelog:
  - havana-3 milestone
  - drop pbr run-time dependency
  - set distribution defaults in keystone-dist.conf


author: Gary Kotton <gkotton@redhat.com> - 2013.1.1-2
changelog:
  - Update to grizzly stable release 2013.1.1
  - Update install scripts to configure security groups
  - Update install scripts to remove virtual interface configurations


author: Jeff Peeler <jpeeler@redhat.com> 2013.2-0.1.b1
changelog:
  - rebase to havana-1
  - consolidate api-paste files into one file in common
  - removed runner.py as it is no longer present
  - added heat-manage
  - added new buildrequires pbr and d2to1


author: Jeff Peeler <jpeeler@redhat.com> 2013.2-0.5.b3
changelog:
  - rebase to havana-3
  - remove tests from common
  - remove cli package and move heat-manage into common
  - added requires for python-heatclient
  - remove python-boto as boto has been moved to another repo
  - remove heat-cfn bash completion
  - add /var/run/heat directory


author: Martin Mágr <mmagr@redhat.com> - 2013.2-9.3
changelog:
  - Added 0001-Disable-report_interval-and-agent_down_time-setting.patch (rhbz#1152667)
  - Add puppet-gluster to openstack-puppet-modules (rhbz#1075766)
  - Periodically flush expired tokens from the keystone database. (rhbz#1113148)
  - Synchronized modules with current havana branch of redhat-openstack/openstack-puppet-modules
  - Added 0001-Replace-qpid_host-with-qpid_hostname.patch
  - Added 0002-Add-parameter-qpid_protocol-to-notify-qpid-so-ssl-ca.patch
  - Added 0003-Revert-Explicitly-set-default-notifier-strategy.patch


author: John Bresnahan <jbresnah@redhat.com> 2013.2-0.7.b3
changelog:
  - Update to 2013.2.b3
  - Remove runtime dep on python pbr
  - Revert use oslo.sphinx and remove local copy of doc


author: Petr Šabata <contyk@redhat.com> - 2.6.32-24
changelog:
  - Don't hang on rtnl_send() in a confined domain (#985526)
  - Run lnstat indefinitely if -c was not specified (#977845)
  - lnstat manpage SEE ALSO path fixes (#974694)
  - Document tc's force and batch options (#950122)
  - Fix include/linux/if_link.h to get in line with upstream again (#903228)
  - Add support for the IPv6 tokenized interface (#950400)
  - Handle ip-route rto_min parameters correctly (#859145)
  - Add VXLAN support (#929313, #908155)
  - Add mdb subcommand to bridge (#885977)
  - tc now supports the -OK option (#851371)


author: Mike Cressman <mcressman@redhat.com> - 0.18-16
changelog:
  - Errata build 1
  - BZs: 847038,861162,868951,923452,948489,951719,951296,953777
         956240,957869,958895,961444
  - HA BZs: 955718,955752


author: Mike Cressman <mcressman@redhat.com> - 0.18-17
changelog:
  - BZ 951296 - removed new --credit switch, instead set federation
    credit unlimited to avoid qmf schema change in MRG 2.3


author: Mike Cressman <mcressman@redhat.com> - 0.18-18
changelog:
  - BZ 964189 - improved the counting for replication shutoff
  - BZ 971295 - change name of replication shutoff switch
  - BZ 948489 - get replication shutoff working correctly w/cluster


author: Alan Pevec <apevec@redhat.com> 2.10.0-2
changelog:
  - Include bash_completion file (#872544) (Alvaro Lopez Ortega)
  - Add dependency on python-iso8601 (#881515)


author: Jakub Ruzicka <jruzicka@redhat.com> 2.13.0-1
changelog:
  - Update to upstream version 2.13.0. (#921769)
  - Update requires from tools/pip-requires.
  - versioninfo is gone from tarball, generate it.


author: Jakub Ruzicka <jruzicka@redhat.com> - 1:2.14.1-1
changelog:
  - Update to upstream version 2.14.1.
  - New build requires: python-d2to1, python-pbr
  - New require: python-six
  - Remove runtime dependency on python-pbr.
  - Include new upstream manpage.


author: Jakub Ruzicka <jruzicka@redhat.com>
changelog:
  - Update to upstream 2.15.0
  - Add python-babel dependency
  - Nuke pbr deps handling in patch instead of this spec file


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Pádraig Brady <pbrady@redhat.com> - 2013.2-0.4.b2
changelog:
  - Add dependency on python-suds to support the netapp driver
  - Add dependency on python-keystoneclient for auth token middleware
  - Add dependency on qemu-img for volume creation from Glance images


author: Alan Pevec <apevec@redhat.com> 2013.2.3-2
changelog:
  - updated to stable havana 2013.2.3 release
  - Trustee token revocation does not work with memcache backend CVE-2014-2237


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.19.dev919
changelog:
  - Moves packstack logs to /var/log/packstack (#999923)
  - Doesn't set up the L3_EXT_BRIDGE twice(rhbz#1000981)
  - Updates puppet-nova module (#1015995)
  - Adds support for LBaaS agent (#1019780)
  - Adds validation for gluster volumes using hostnames (#1020479)
  - Validates type of given ssh key (#1022477)
  - Doesn't touch NetworkManager and iptables (rhbz#1024292, rhbz#1023955)
  - Updates puppet-certmonger module and puppet-pacemaker module (rhbz#1027455)
  - Adds puppet-openstack-storage (rhbz#1027460)
  - Adds missing options to packstack man page (rhbz#1032103)
  - Adds support for cinder::backup::swift (rhbz#1021627)
  - Adds auth option to qpid (rhbz#972643)
  - Fixes errors when nova is disabled (rhbz#987888, rhbz#1024564, rhbz#1026795)
  - Fixes the nova_ceilometer.pp template (rhbz#1032070)
  - Fixes heat installer when executed in interactive mode
  - Updates puppet-neutron module to latest stable/havana branch (rhbz#1017280)
  - Added the help_url pointing to RH doc (rhbz#1030398)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.20.dev924
changelog:
  - Adds cinder API v2 endpoint to keystone (rhbz#1030088)
  - Upgrades DB before neutron server starts (rhbz#1037675)
  - Adds localhost to the list of Horizon's ALLOWED_HOSTS


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.22.dev930
changelog:
  - Allow Ceilometer API for all hosts (rhbz#1040404)
  - Require also core_plugin setting
  - Revert "Move packstack logs to /var/log/packstack" due to security reasons


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.23.dev934
changelog:
  - CONFIG_NEUTRON_LBAAS_HOSTS should be empty in allinone (rhbz#1040585)
  - service_plugins must not be list with empty string (rhbz#1040585)


author: Pádraig Brady <pbrady@redhat.com> - 2013.2.1-0.24.dev936
changelog:
  - Reinstate the V1 API needed by cinder client (rhbz#1043280)
  - Use class for notifier strategy (rhbz#1020002)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.28.dev948
changelog:
  - Move to the upstream puppet-vswitch module
  - Add missing example options (rhbz#971745)
  - Removed patches since they are not needed anymore
  - Install php only with nagios (rhbz#1039660)
  - Change puppet-qpid module to upstream (rhbz#1029576)
  - Update puppet-neutron to stable/havana which contains fixes for Puppet 3.4+ (lp#1267488)
  - Updated puppet-swift to stable/havana (rhbz#1039981)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.29.dev956
changelog:
  - Fixes qpid SSL installation errors (rhbz#1052163, rhbz#1048705)
  - Open Keystone port for ALL (rhbz#1041560)


author: Jeff Peeler <jpeeler@redhat.com> 2013.1-1.3
changelog:
  - bumped obsoletes for f18 rebuilds of the old heat package
  - added missing policy.json file (rhbz#965549)


author: Jakub Ruzicka <jruzicka@redhat.com> 0.2.5-1
changelog:
  - Update to latest upstream. (0.2.5 + patches)
  - Add new python requires from requirements.txt. (d2to1, pbr, six)


author: Matthias Runge <mrunge@redhat.com> - 2013.2-0.10b3
changelog:
  - Havana-3 snapshot
  - drop node.js and node-less from buildrequirements
  - add runtime requirement python-lesscpy
  - own openstack_dashboard dir
  - fix keystore handling issue


author: Matthias Runge <mrunge@redhat.com> - 2013.2-0.11b3
changelog:
  - add BuildRequires python-eventlet to fix ./manage.py issue during build
  - fix import in rhteme.less


author: Pádraig Brady <P@draigBrady.com> 2013.1-6
changelog:
  - Grizzly keystone sample credentials adjustments
  - Support systems with SELinux disabled
  - Improve handling of users in openstack-db --drop
  - Fix handling of cgroup service
  - Fix handling of passwords with mariadb


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.30.dev979
changelog:
  - Update puppet-tempest module to stable/havana (rhbz#981116)
  - ML2 support (rhbz#1017144)
  - VXLAN support (rhbz#1021778)
  - Run keystone-manage token-flush every minute (rhbz#1029671)
  - Moved puppetlabs-firewall to upstream master (rhbz#1034538, rhbz#1018900)
  - Updated puppetlabs-mongodb module  (rhbz#1028690, rhbz#1036207, rhbz#1029322)
  - Unified verbose and debug settings (rhbz#1048041)
  - Bugfix (rhbz#1050140)
  - Fixes nagios overwrite of apache configuration (rhbz#1054498)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.31.dev982
changelog:
  - Fixes apache duplicated Listen statements
  - Adds back LibvirtHybridOVSBridgeDriver for OVS installations (rhbz#1052124)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.32.dev987
changelog:
  - ML2 support fixes (rhbz#1066519, rhbz#1068962, rhbz#1069215)
  - Added allow_versions for swift storage all (#967308)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.35.dev1009
changelog:
  - Use openstack-puppet-modules (rhbz#1063982)
  - Fixed Swift installation (rhbz#1072070, rhbz#1072099)
  - Added support for VMWare vCenter (rhbz#1061372)
  - Executing --allinone now we honor the default values (rhbz#1056689)
  - Ensure ovs_neutron_plugin.ini has correct ownership (rhbz#1080438)
  - Fixed race condition for keystone.log (rhbz#1071674)
  - Disable provisioning for multihost installations (rhbz#bug1080369)
  - Enable DHCP ports on neutron-dhcp-agent hosts (rhbz#999695)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.36.dev1013
changelog:
  - Updated Heat templates according to latest stable/havana (rhbz#1084216)
  - Redirect to https port when SSL enabled (rhbz#1078130)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.37.dev1048
changelog:
  - [Keystone] Use a valid e-mail for admin user in keystone (rhbz#1020199)
  - [MySQL] Reverts InnoDB performance tuning patches (rhbz#1150104)
  - [Neutron] Connect bridge with interface only on network hosts (rhbz#1152588)
  - [Nova] Use LibvirtHybridOVSBridgeDriver with ML2 plugin (rhbz#1152107)
  - [Neutron] Load bridge module (rhbz#1123465)
  - [Neutron] Errors when setting CONFIG_NEUTRON_OVS_TUNNEL_IF to a VLAN
    interface in RHEL OSP 4 ((rhbz#1143906))
  - [Packstack] RFE: packstack and foreman should install the rhos sos
    plugins on all nodes (rhbz#1131619)
  - [Neutron] Neutron security group not working as expected due to
    'net.bridge.bridge-nf-call-iptables' set to 0 (rhbz#1123465)
  - [Neutron] Packstack should open Tunnel ports VXLAN and GRE (rhbz#1111640)
  - [Cinder] Openstack-cinder-backup service is not running after install (rhbz#1075609)
  - [vCenter] Fix duplicated parameters in answer file (rhbz#1061372)
  - [Packstack] Better localhost checking for SSL configuration (rhbz#1078130)
  - [Packstack] Add hostname to SSL redirection (rhbz#1078130)
  - [Keystone] Ensure that we run token-flush cron job under correct user (rhbz#1071674)


author: Lon Hohberger <lhh@redhat.com> - 0.1.2-8
changelog:
  - Call restorecon on /srv to ensure that previously-created
    Swift objects have the correct SELinux context
    Resolves: rhbz#918721


author: Lon Hohberger <lhh@redhat.com> - 0.1.2-9
changelog:
  - Depend on later release of selinux-policy since it contains
    fixes for OpenStack Quantum
    Resolves: rhbz#923426


author: Lon Hohberger <lhh@redhat.com> - 0.1.2-10
changelog:
  - Depend on later release of selinux-policy since it contains
    fixes for OpenStack Swift's use of GlusterFS 
    Resolves: rhbz#923426


author: Lon Hohberger <lhh@redhat.com> - 0.1.3-1
changelog:
  - Remove unnecessary policy for LBaaS
  - Rebase to 0.1.3
  - Correct file contexts in %post for now
    Resolves: rhbz#1020052


author: Lon Hohberger <lhh@redhat.com> - 0.1.3-2
changelog:
  - Set neutron-vpn-agent to neutron_exec_t
  - Require RHEL 6.5 selinux-policy
    Resolves: rhbz#1039204


author: Matthias Runge <mrunge@redhat.com> - 2013.2-0.5b2
changelog:
  - move requirements from horizon to openstack-dashboard package
  - introduce explicit requirements for dependencies


author: Matthew Farrellee <matt@redhat> - 0.2-3
changelog:
  - Updates to build on EL6,
  -  Use SysV init instead of systemd, copied from openstack-nova-api.init
  -  Use python-sphinx10, it has sphinx.ext.viewcode


author: Matthew Farrellee <matt@redhat> - 0.3-0.1.a252.ga1714e0
changelog:
  - Update to build and run post pbr addition and pycrypto removal
  - Add removal of sdist egg
  - Add magic patch to use SQLAlchemy0.7 on EL6
  - Add workaround patch for novaclient bug 1223934


author: Mike Cressman <mcressman@redhat.com> - 0.18-10
changelog:
  - BZs: 875660, 876664
  - HA BZs: 860701, 874192, 874118,874298
  - remove faulty fix for 871100
  - add new /etc/qpid/qpidd.acl
  - qmf build cleanup
  - add back deprecated fromString() that we must carry on MRG 2.x
    for compatibility


author: Mike Cressman <mcressman@redhat.com> - 0.18-14
changelog:
  - consolidated the store patch files, now using the new 0.18 store branch
    (no code changes)
  - BZs: 835119,884036,887044,896451
  - HA BZs: 883548,886262,886656


author: Mike Cressman <mcressman@redhat.com> - 0.18-18
changelog:
  - BZ 966636 - malformed SSL client cert crashes broker
  - BZ 990240 - segfault in qpidd if client attempts to transactionally dequeue the same message twice
  - BZ 990542 - cluster restart stalled with cluster-size=2 and auth=yes
  - BZ 1005699 - store module does not raise exception when attempting to enqueue a message bigger than the journal size
  - BZ 1007398 - Dequeue rid is not enqueued on LVQ


author: Jakub Ruzicka <jruzicka@redhat.com> 0.2.3-1
changelog:
  - Updated to upstream version 0.2.3.
  - Add new dependency: PyYAML.
  - Add new build requires: python-d2to1 and python-pbr.
  - Remove requirements.txt file.
  - Generate versioninfo file.


author: Xavier Queralt <xqueralt@@redhat.com> - 2013.2.1-3
changelog:
  - Require python-keystoneclient for api-paste - rhbz#909113
  - Fix root disk leak in live migration - CVE-2013-7130


author: Vladan Popovic <vpopovic@redhat.com> 2013.2.3-2
changelog:
  - Add RBAC policy for ec2 API security groups calls - CVE-2014-0167
  - Move notification point to a better place
  - notify calling process we are ready to serve


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-208
changelog:
  - Merge cluster administrative domains to cluster_t. Back ported from Fedora
  Resolves:#915151
  - Aadd additinal rules for disk plugins
  - Allow setuid/setgid caps for syslogd_t
  - Dontaudit sendmail to  write dovecote-deliver tmp files
  - Add suppport for /var/lib/openvpn
  - /var/spool/snmptt is a directory which snmdp needs to write to


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-210
changelog:
  - Allow nrpe to list /var
  - Allow apache to search automount tmp dirs if http_use_nfs is enabled
  - Add support for strongswan
  - Fix description of ftpd_use_fusefs boolean
  - Allow kdumpgui to write dos files for /boot/efi/EFI/fedora/grub.cfg
  - Back port tgtd fixes from Fedora to allow sys_rawio cap
  - Add support for OpenDMARCD
  Resolves:#983551
  - Allow openvpn to run unconfined scripts
  - Allow amavis to execute shell
  Resolves:#979421
  - man pages should be owned only by selinux-policy-doc package
  - Fix fs_manage_nfs_files and fs_manage_nfs_dirs boolean to allow to search autofs
  - Allow mysqld-safe sys_nice/sys_resource caps
  Resolves:#975921
  - Add labeling for /boot/etc/yaboot.conf
  Resolves:#973156
  - /var/log/syslog-ng should be labeled var_log_t
  - Back port munin-cgi fixes
  - Fix ftp_home_dir boolean 
  - Allow kdump to read kcore on MLS system
  - Add support for svn ports
  - Add labels for /dev/ptp*
  - Add labels for /etc/security/opasswd
  - Fix labeling for /etc/localtime lnk file
  - Add  tftp booleans for NFS/CIFS access
  - Merge amavis,clamd,clamscan,freshclam policies to antivirus policy
  - Label all nagios plugins as nagios_unconfined_plugin_exec_t by default
  - Add additional ports as mongod_port_t
  - Allow sandbox domains to use inherted terminals
  - Allow pegasus to execute mount in pegasus_t domain
  - Fix *_admin interfaces  and interface descriptions
  - Allow yppasswdd to use NIS
  - Allow nagios to manage nagios spool files
  - Allow ABRT to domtrans to prelink
  Resolves:#921234
  - Fix labeling for /var/lib/dspam/
  Resolves:#919456
  - Label postfix-policyd-spf-perl as bin_t
  - Allow nrpe to run sudo
  - Label /usr/bin/yum-builddep as rpm_exec_t
  - Label /usr/local/bin/x11vnc as xserver_exec_t
  - Allow logwatch to domtrans to mdadm
  - Allow postfix-master to list /tmp dir
  - Add lldpad policy and make it as unconfined domain
  - Allow sysadm to admin postfix
  - ALlow postfix_virtual to stream connect to mysql
  - Update zabbix policy
  - Activate watchod policy and make it as unconfined
  - Add httpd_serve_cobbler_files boolean
  - Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
  - Add oracleasm policy
  - Add support for pand
  - Add awstats_purge_apache_log_files boolean
  - Back port smstools policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-212
changelog:
  - Update rules for antivirus domains
  Resolves:#999471
  - Allow virt_domain to read virt_var_run_t symlinks
  - Allow chroot_user_t to read/write inherited user domain pty
  - Allow to start guest while the libvirtd is started with valgrind
  - Allow lldpad to talk with fcoemon
  - Allow chronyd sched_setscheduler


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-213
changelog:
  - Add openhpid policy
  Resolves:#1000521
  - Fix rhcs_domain_template to allow cluster_t to create socket in /var/run with correct labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-214
changelog:
  - Allow git daemons to read localization
  - Allow tgtd_t to connect to isns ports
  Resolves:#1003571
  - Cleanup antivirus policy and add additional fixes
  - Fix labeling for munin CGI scripts
  - Allow virtd_t also relabel unix stream sockets for virt_image_type
  - Fix fs_search_auto_mountpoints to allow search automount tmp dirs
  Resolves:#990661


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-215
changelog:
  - Add port definition of pka_ca to port 829 for openshift
  - Rename quantum to neutron
  - Allow rpcd to request the kernel to load a module
  - Allow ovsdb-server to create dirs/files in /tmp directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-216
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  - Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys


author: Nikola Đipanov <ndipanov@redhat.com> - 0.4-5
changelog:
  - Change FLAGS to the new CONF module in nova-novncproxy
  - Drop the hard dwp on whole nova package and require only nova-common


author: Martin Magr <mmagr@redhat.com> - 0.6.4-5
changelog:
  - Added silent editor check patch (https://bitbucket.org/catherinedevlin/cmd2/issue/1/silent-editor-check)


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-358.123.1.openstack.el6]
changelog:
  - [redhat] configs: enable CONFIG_OPENVSWITCH_VXLAN (Amerigo Wang) [1009006 981285]
  - [net] openvswitch: Add vxlan tunneling support (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Add tx-vlan offload support (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Improve vxlan headroom calculation (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Factor out vxlan send api (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Extend vxlan handlers for openvswitch (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Add vxlan recv demux (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Restructure vxlan receive (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Restructure vxlan socket apis (Amerigo Wang) [1009006 981285]
  - [net] openvswitch: Reset tunnel key between input and output (Amerigo Wang) [1009006 981285]
  - [net] openvswitch: Use correct type while allocating flex array (Amerigo Wang) [1009006 981285]
  - [net] openvswitch: Fix bad merge resolution (Amerigo Wang) [1009006 981285]
  - [net] vxlan: fix a soft lockup in vxlan module removal (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix a regression of igmp join (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix rcu related warning (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fdb: replace an existing entry (Amerigo Wang) [1009025 923915]
  - [kernel] list: introduce list_first_entry_or_null (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix igmp races (Amerigo Wang) [1009025 923915]
  - [net] vxlan: unregister on namespace exit (Amerigo Wang) [1009025 923915]
  - [net] vxlan: add necessary locking on device removal (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Fix kernel crash on rmmod (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix function name spelling (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fdb: allow specifying multiple destinations for zero MAC (Amerigo Wang) [1009025 923915]
  - [net] rtnetlink: allow using zero MAC address in rtnl_fdb_add, rtnl_fdb_del (Amerigo Wang) [1009025 923915]
  - [net] fix address check in rtnl_fdb_del (Amerigo Wang) [1009025 923915]
  - [net] vxlan: allow removal of single destination from fdb entry (Amerigo Wang) [1009025 923915]
  - [net] vxlan: introduce vxlan_fdb_parse (Amerigo Wang) [1009025 923915]
  - [net] vxlan: introduce vxlan_fdb_find_rdst (Amerigo Wang) [1009025 923915]
  - [net] vxlan: add implicit fdb entry for default destination (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Fix sparse warnings 2 (Amerigo Wang) [1009025 923915]
  - [net] vxlan: cosmetic cleanup's (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Use initializer for dummy structures (Amerigo Wang) [1009025 923915]
  - [net] vxlan: port module param should be ushort (Amerigo Wang) [1009025 923915]
  - [net] vxlan: convert remotes list to list_rcu (Amerigo Wang) [1009025 923915]
  - [net] vxlan: make vxlan_xmit_one void (Amerigo Wang) [1009025 923915]
  - [net] vxlan: move cleanup to uninit (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix race caused by dropping rtnl_unlock (Amerigo Wang) [1009025 923915]
  - [net] vxlan: send notification when MAC migrates (Amerigo Wang) [1009025 923915]
  - [net] vxlan: move IGMP join/leave to work queue (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix crash from work pending on module removal (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix out of order operation on module removal (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix check for migration of static entry (Amerigo Wang) [1009025 923915]
  - [net] vxlan: handle skb_clone failure (Amerigo Wang) [1009025 923915]
  - [net] vxlan: only migrate dynamic FDB entries (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix race between flush and incoming learning (Amerigo Wang) [1009025 923915]
  - [net] vxlan: defer vxlan init as late as possible (Amerigo Wang) [1009025 923915]
  - [net] vxlan: use unsigned int instead of unsigned (Amerigo Wang) [1009025 923915]
  - [net] vxlan: remove the unused rcu head from struct vxlan_rdst (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Update vxlan fdb 'used' field after each usage (Amerigo Wang) [1009025 923915]
  - [net] vxlan: listen on multiple ports (Amerigo Wang) [1009025 923915]
  - [net] vxlan: do not set SKB_GSO_UDP (Amerigo Wang) [1009025 923915]
  - [net] vxlan: allow choosing destination port per vxlan (Amerigo Wang) [1009025 923915]
  - [net] vxlan: compute source port in network byte order (Amerigo Wang) [1009025 923915]
  - [net] vxlan: source compatiablity with IFLA_VXLAN_GROUP (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix byte order issues with NDA_PORT (Amerigo Wang) [1009025 923915]
  - [net] vxlan: document UDP default port (Amerigo Wang) [1009025 923915]
  - [net] vxlan: update mail address and copyright date (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Allow L2 redirection with L3 switching (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Allow setting destination to unicast address (Amerigo Wang) [1009025 923915]
  - [net] vxlan: don't bypass encapsulation for multi- and broadcasts (Amerigo Wang) [1009025 923915]
  - [net] vxlan: use htonl when snooping for loopback address (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix some sparse warnings (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Bypass encapsulation if the destination is local (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Fix sparse warnings (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Use IP Tunnels tunnel ENC encap API (Amerigo Wang) [1009025 923915]
  - [net] vxlan: generalize forwarding tables (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Add vlan support to static neighbors (Amerigo Wang) [1009025 923915]
  - [net] vxlan: allow live mac address change (Amerigo Wang) [1009025 923915]
  - [net] vxlan: add DOVE extensions for VXLAN (Amerigo Wang) [1009025 923915]
  - [net] vxlan: move SET_ETHTOOL_OPS() to vxlan_newlink() (Amerigo Wang) [1009025 923915]
  - [net] vxlan: specify fl4.proto before calling ip_route_output_key() (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Depend on CONFIG_INET (Amerigo Wang) [1009025 923915]
  - [md] raid1, raid10: use freeze_array in place of raise_barrier in various places (Jes Sorensen) [1003765 997845]
  - [scsi] megaraid_sas: megaraid_sas driver init fails in kdump kernel (Nikola Pajkovsky) [1001963 833299]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (Nikola Pajkovsky) [988228 876778]
  - [net] bridge: Add multicast_querier toggle and disable queries by default (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Fix fatal typo in setup of multicast_querier_expired (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Restart queries when last querier expires (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Add br_multicast_start_querier (Flavio Leitner) [995334 905561]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1006932 1002765]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [1006956 998752]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [993547 867689]
  - [net] bridge: do not call setup_timer() multiple times (Amerigo Wang) [997746 994430]
  - [fs] lockd: protect nlm_blocked list (David Jeffery) [993544 967095]
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Jiri Benc) [987649 987651] {CVE-2013-4162}
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988708 981741]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988708 981741]
  - [fs] cifs: fix issue mounting of DFS ROOT when redirecting from one domain controller to the next (Sachin Prabhu) [994866 976535]
  - [fs] nfs: Make nfs_readdir revalidate less often (Scott Mayhew) [994867 976879]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Scott Mayhew) [994867 976879]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Scott Mayhew) [994867 976879]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Scott Mayhew) [987262 983288]
  - [fs] nfs: fix a leak at nfs_lookup_revalidate() (Dave Wysochanski) [987261 975211]
  - [acpi] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [993547 867689]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [993547 867689]
  - [acpi] Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [993547 867689]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [997745 952012]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [997745 952012]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [997745 952012]
  - [net] bridge: Replace mp->mglist hlist with a bool (Amerigo Wang) [997745 952012]
  - [mm] fadvise: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages (Larry Woodman) [994140 957821]
  - [net] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1003931 955712]
  - [virt] xen-netfront: reduce gso_max_size to account for max TCP header (Andrew Jones) [1004657 957231]
  - [pps] Fix a use-after free bug when unregistering a source (Jiri Benc) [997916 920155]
  - [scsi] fnic: Fix SGEs limit (Chris Leech) [991346 829506]
  - [x86] Round the calculated scale factor in set_cyc2ns_scale() (Prarit Bhargava) [1001954 975507]
  - [x86] sched: Fix overflow in cyc2ns_offset (Prarit Bhargava) [1001954 975507]
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1000314 947275]
  - [net] sctp: Fix list corruption resulting from freeing an association on a list (Jiri Pirko) [1002184 887868]
  - [fs] nfs: Add functionality to allow waiting on all outstanding reads to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Ensure that NFS file unlock waits for readahead to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Convert nfs_get_lock_context to return an ERR_PTR on failure (Dave Wysochanski) [996424 976915]
  - [x86] thermal: Disable power limit notification interrupt (Shyam Iyer) [999328 908990]
  - [x86] thermal: Delete power-limit-notification console messages (Shyam Iyer) [999328 908990]
  - [fs] gfs2: Reserve journal space for quota change in do_grow (Robert S Peterson) [988384 976823]
  - [netdrv] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [995458 988460]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [996014 987426]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-358.123.2.openstack.el6]
changelog:
  - [net] vxlan: Avoid creating fdb entry with NULL destination (Amerigo Wang) [1009025 923915]
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [1004252 1004233] {CVE-2013-4299}


author: Jordan OMara <jomara@redhat.com> 0.0.13-1
changelog:
  - adding dependency on PackStack modules at runtime
  - renaming modules from TryStack to QuickStack
  - misc fixes


author: Pete Zaitcev <zaitcev@redhat.com> 1.9.1-1
changelog:
  - Update to 1.9.1, includes CVE-2013-4155
  - Includes unfortunately standards-compliant XML listings, to be fixed
  - Reseller prefix in Keystone must end with an underscore
  - Make only proxy depend on openstack-swift-plugin-swift3


author: Matthias Runge <mrunge@redhat.com> - 2013.1-0.7.g3
changelog:
  - fix compressed css (rhbz#921036)
  - enable compression in httpd file
  - set expires in httpd config file


author: Matthias Runge <mrunge@redhat.com> - 2013.2-0.4b2
changelog:
  - havana-2
  - change requirements from python-quantumclient to neutronclient
  - require python-ceilometerclient
  - add requirement python-lockfile, change lockfile location to /tmp


author: Jason Guiditta <jguiditt@redhat.com> 0.0.25-1
changelog:
  - BZ #1039661 Fix manifests to work with updated puppet modules
  - BZ #1039698 add IPAPPEND 2 to pxe template
  - BZ #1040021 Fix enable/disable of heat_cfg and heat_cloudwatch


author: Jason Guiditta <jguiditt@redhat.com> 1.0.0-1
changelog:
  - BZ #1042933 - neutron-server fails to start (stamp issue)
  - BZ #1040610 Open Ceilometer API port on controller node
  - BZ #1042862 Update RHEL OS description
  - BZ #1043634 Swift Storage manifest uses incorrect variable


author: Crag Wolfe <cwolfe@redhat.com> 1.0.1-1
changelog:
  - BZ #1045132 - l3 external_network_bridge now configurable.
  - BZ #1045137 - Ensure physical ports added to ovs bridge on networker.


author: Jason Guiditta <jguiditt@redhat.com> 1.0.2-1
changelog:
  - BZ #1048922 - Package name cannot have array for newer puppet.
  - BZ #1050182 - remove the Gluster Storage Host Group.
  - BZ #1049688 - Quickstack manifest parameter renaming.
  - BZ #1046120 - Remove unused parameter bridge_keep_ip.
  - BZ #1015625 - Add selinux support for glusterfs config.
  - BZ #1043964 - Fix to move neutron setup after db setup.


author: Jason Guiditta <jguiditt@redhat.com> 1.0.4-1
changelog:
  - BZ #1054181 - Set OS description consistently, install LSB.
  - BZ #1052408 - HA Mysql manifest: allow creation of neutron db user.
  - BZ #1055852 - HTTP 500 Error using Neutron metadata agent.
  - BZ #1056892 - Handle interface names containing ".".
  - BZ #1049633 - Foreman should support VXLAN.
  - BZ #1017281 - Add support for ML2 Core Plugin.
  - BZ #1056055 - Create cinder-volumes VG backed by a loopback file.
  - BZ #1062664 - Configure qpid_hostname for Controller host groups.
  - BZ #1062670 - Add tuned configuration for compute nodes.
  - BZ #1056383 - Foreman Controller's swift proxy no longer runs.
  - BZ #1055207 - Add localhost and ip access for Horizon UI.
  - BZ #1063514 - cinder_gluster_servers default value.
  - BZ #998599  - Add options for SSL support using files or FreeIPA.
  - BZ #1054498 - Fix double port 80 directives in apache.


author: Jason Guiditta <jguiditt@redhat.com> 1.0.6-1
changelog:
  - BZ #1033247 - Global Booleans for Specifying Service Deployment.
  - BZ #1049079 - Use openstack-puppet-modules package.
  - BZ #1049121 - Install a Highly Available OpenStack deployment using Foreman
    (HA/mysql).
  - BZ #1049122 - Install a Highly Available OpenStack deployment using Foreman
    (qpid).
  - BZ #1052408 - HA Mysql manifest: allow creation of neutron db user.
  - BZ #1053623 - openstack-selinux package is not installed on foreman_clients.
  - BZ #1056992 - Foreman will use bridge map even after it is removed from
    neutron networker parameter.
  - BZ #1062699 - Foreman should allow for cinder share mount options.
  - BZ #1063425 - Provide option to set bind_host/bind_port for API services.
  - BZ #1064056 - Foreman Heat ports not opened in a foreman based Nova network
    install.
  - BZ #1068885 - Foreman-installer doesn't create keystonerc_admin file on
    controller.
  - BZ #1073087 - [RFE] Use subscription-manager in kickstart template, not
    rhnreg_ks.
  - BZ #1075818 - Create New Hostgroup to enable HA deployments.
  - BZ #1076205 - In the HA All-in-One Host Group provide the ability to
    disable a given service.
  - BZ #1077818 - Modify installer to accept environment variable for Foreman
    provisioning interface.
  - BZ #1078279 - Pull latest Cisco Nexus updates.
  - BZ #1080646 - admin_password not set in /etc/neutron/metadata_agent.ini.
  - BZ #1082811 - Add Keystone Service to HA hostgroup.
  - BZ #1083781 - Add Glance Service to HA hostgroup.
  - BZ #1084534 - Add Nova Service to HA hostgroup.
  - BZ #1085547 - Keystone role is created as _member_ instead of Member.
  - BZ #1086344 - Add Cinder service to HA hostgroup.
  - BZ #1086934 - Add Horizon service to HA hostgroup.
  - BZ #1087713 - Add Swift Proxy service to HA hostgroup.
  - BZ #1088139 - Add HA Mysql A/P to HA hostgroup.
  - BZ #1088608 - Add Neutron Service to HA hostgroup.
  - BZ #1088611 - Add Heat Service to HA hostgroup.


author: Matthew Farrellee <matt@redhat> - 0.3-0.2
changelog:
  - 0.3 rc3 build
  - Remove workaround patch for novaclient bug 1223934
  - Remove spec infrastructure for master branch build
  - Remove html generation until python-oslo-sphinx is available


author: Jakub Ruzicka <jruzicka@redhat.com> 1.5.0-1
changelog:
  - Update to upstream 1.5.0 release.
  - Add new build requires: python-pbr, python-d2to1.
  - Remove runtime dependency on python-pbr.


author: Jakub Ruzicka <jruzicka@redhat.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0.
  - Include man page.
  - Remove all pbr deps in the patch instead of this spec file.


author: Jakub Ruzicka <jruzicka@redhat.com> 1.8.0-1
changelog:
  - Update to upstream 1.8.0
  - Add SSL certificate verification by default (CVE-2013-6396)
  - New runtime and build dependency: pyOpenSSL
  - New runtime dependency: python-keystoneclient
  - python-pbr has been removed from runtime by upstream


author: Tomáš Mráz <tmraz@redhat.com> - 0.13-6
changelog:
  - Check for error returns which cause segfaults in FIPS mode
  - Fix missing error check and leak found by gcc-with-cpychecker (#800086)


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-1
changelog:
  - new upstream release fixing a security issue with string
    formatting subjectAltName of a certificate


author: Thomas Graf <tgraf@redhat.com> 1.7.1-3
changelog:
  - Automatically start openvswitch service in ifup/ifdown-ovs
  - Don't add iptables accept rule for -p GRE as GRE tunneling is unsupported
  - openvswitch-test requires python-argparse


author: Jakub Ruzicka <jruzicka@redhat.com> 0.3.0-1
changelog:
  - Update to upstream 0.3.0
  - New dependencies: python-six, python-requests
  - Restore compatibility with old EPEL python-keyring


author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.6-2
changelog:
  - Fix DeprecationWarning when printing exception
  - Provide -doc package with auto-generated documentation
  - Provide upstream manpage
  - Improve package description


author: Jakub Ruzicka <jruzicka@redhat.com> 0.4.1-4
changelog:
  - Don't require an email address when creating a user
  - Put bash completion in /etc/profile.d (rhbz#1024581)


author: Pete Zaitcev <zaitcev@redhat.com>
changelog:
  - 1.0.0-0.20120612git
  - Rename once again to match guidelines for pre-releases
  - Drop Group: per review bz#831871 c#3


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-223
changelog:
  - Fix dovecot_rw_pipes() interface
  - Allow piranha_pulse_t to search tmpfs
  - Allow sysadm to stream connect to postfix-master process
  - Label /usr/sbin/fence_sanlockd as fenced_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-225
changelog:
  - Re-write rules to create tmpfs for all piranha tmpfs files/dirs
  - Allow piranha-lvs to manage piranha_tmpfs_t
  Resolves:#1018306


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-226
changelog:
  - Label /usr/sbin/fence_scsi as fenced_exec_t
  - Fix cluster domains to create dirs in /var/run/cluster as var_run_t to make resource scripts working
  Resolves:#915151


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-227
changelog:
  - Resource agents needs to manage /etc/cluster to place own config files
  Resolves:#915151
  - tgtd needs ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-228
changelog:
  - Add daemons_enable_cluster_mode boolean and turn on it by default until RHEL6.6
  Resolves:#915151
  - Add tcp/8893 as milter port
  - Allow antivirus domain to read localization without the boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-229
changelog:
  - Add bootloader_exec_t labeling for /sbin/grubby
  Resolves:#915729
  - Add etc_runtime_t label for zipl.conf
  - Allow daemons to manage cluster lib files if daemons_enable_cluster_mode is enabled


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231
changelog:
  - Add named_cache_t label for /var/lib/unbound
  - Fix puppet_domtrans_master() interface to make passenger working correctly if it wants to read puppet config files
  - Allow anitvirus domains to manage own log dirs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.53-1
changelog:
  - New upstream release 1.53
  - Fixing set_multi() so that if the server closes the connection it will no
    longer raise AttributeError
  - readline() now will mark the connection dead if the read fails
  - Changing check_keys to use re.match() instead of str.translate(), because
    re.match() works with Python < 2.6
  - Add a MANIFEST.in file
  - Client() now takes a "check_keys" option, which defaults to True
  - Converting control character checking of keys based on performance testing of
    alternatives
  - Converted unicode tests from using u''
  - Doing a "set" after server goes away, raised AttributeError: 'NoneType'
    object has no attribute 'sendall'
  - incr/decr return None instead of 0 on server connection failure
  - Supports IPv6 connections using: "inet6:[fd00::32:19f7]:11000"


author: Ihar Hrachyshka <ihrachys@redhat.com> 2013.2.4-2
changelog:
  - Merged in el6-havana branch, resolving conflicts between platforms
    with if-else conditionals. This is needed because el6-havana was
    (erroneously) locked when locking el6 branch.


author: Ihar Hrachyshka <ihrachys@redhat.com> 2013.2.4-6
changelog:
  - Fixed an error in %pre rule that adds neutron user that was introduced
    during el6-havana branch merged.


author: Jakub Ruzicka <jruzicka@redhat.com> 1:0.6.0-1
changelog:
  - Update to upstream 0.6.0
  - Align doc build with other client packages
  - Put bash completion in /etc/bash_completion.d (optional bash-completion)


author: Ralph Bean <rbean@redhat.com> - 0.4.1-1.20130103hg108
changelog:
  - Move to a post-release hg checkout.
  - Experimenting with background value creation.
  - Temporarily removed the CHANGES doc


author: Ralph Bean <rbean@redhat.com> - 0.4.2-1
changelog:
  - Upstream accepted async patches.
  - Added BuildRequires on python-mock
  - Restrict python-dogpile-core to newer version.
  - Remove tests since they're kind of stochastic.


author: Alan Pevec <apevec@redhat.com> 1:0.4.1-1
changelog:
  - Add dependency on python-setuptools (#850844)
  - Revert client script rename, old glance client is now deprecated.
  - New upstream release.


author: Ralph Bean <rbean@redhat.com> - 1.3.2-1
changelog:
  - Latest upstream.
  - Patched pyparsing version constraint for py2.
  - Modernized python3 conditional.
  - Temporarily disabled python3 subpackage for python3-pyparsing dep.
  - Added temporary explicit dependency on python3-pyparsing>=2.0.0.


author: Petr Sabata <contyk@redhat.com> - 2.6.32-17
changelog:
  - Fix GRED options clearing
  - Resolves: rhbz#709652
  - Add macvlan/macvtap passtru support
  - Resolves: rhbz#692867
  - Resolves: rhbz#693878


author: Petr Šabata <contyk@redhat.com> - 2.6.32-18
changelog:
  - Fix changing of ip6ip6 tunnel hoplimit
  - Resolves: rhbz#730627
  - lnstat -d should dump to stdout
  - Resolves: rhbz#736106


author: Petr Šabata <contyk@redhat.com> - 2.6.32-19
changelog:
  - Adding mqprio qdisc support (#748767)
  - Adding QFQ discipline support (#788120)
  - A required update of include/linux/pkt_sched.h


author: Petr Šabata <contyk@redhat.com> - 2.6.32-20
changelog:
  - Add support for multicast rules, IPv4 only due to kernel limitations;
    see #631984, comment 14 for details (#812779)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.16.dev870
changelog:
  - Add information on location of horizon password (rhbz#1002326)
  - Make network_vlan_ranges available in GRE setups (rhbz#1006534)
  - Include the host's FQDN in Horizon's ALLOWED_HOSTS (rhbz#1028678)
  - Improve error reporting for shell commands (rhbz#1031786)
  - Fixed comments for interactive installation (rhbz#1030767)
  - Replace qpid_host with qpid_hostname (lp#1242715)
  - Make sure iptables are enabled (rhbz#1023955)
  - Align packstack templates with ceilometer upstream git repo (rhbz#1022189)
  - Add missing options to packstack man page (rhbz#1032103)
  - Disable unsupported features in Horizon for RHOS (rhbz#1035651)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.17.dev876
changelog:
  - Add information on location of horizon password (rhbz#1002326)
  - Updates puppet-ceilometer module so it won't fails as 2013.2.1-0.16.dev870 do


author: Jeff Peeler <jpeeler@redhat.com> 2013.2.1-2
changelog:
  - added MySQL-python requires
  - Fix heat-manage to work with parallel installed packages
  - removed heat-db-setup (rhbz 1046326)


author: Ryan Brown <rybrown@redhat.com> 2013.2.4-1.3
changelog:
  - Remove systemd requirement for EL6 and below
  - Use python-sphinx10 package instead of standard EL6 sphinx


author: Rafael Schloming <rafaels@redhat.com> - 0.1.897961-1
changelog:
  - Added groups to subpackages.
  - Replaced python_sitelib with python_sitearch, use %global instead of %define, and killed unused ruby_sitelib.


author: Ryan Hallisey <rhallise@redhat.com> - 0.1.5-1
changelog:
  - Allow sshd_t to read from nova_var_lib_t files
  - Allow sshd_t to talk to nova_var_lib_t dirs
    Resolves: rhbz#1122457


author: Lon Hohberger <lhh@redhat.com> - 0.1.5-4
changelog:
  - Add back skeleton swift module with just the unconfined domain
    portion in order to not conflict and not regress
    Resolves: rhbz#1148463


author: <pbrady@redhat.com> 1.10.0-0.2.rc1
changelog:
  - add swift home directory for signing_dir, bz#967631
  - Make status print correct identity, bz#917657
  - Add "shutdown" to server-type services that support HUP signal, bz#927423
  - Add a missing newline in service openstack-swift-proxy shutdown, bz#971881


author: Pádraig Brady <pbrady@redhat.com> 1.10.0-2
changelog:
  - Update to Havana GA
  - Fix service startup issue due to bad depencency checking (#1020449)
  - Fix version reporting


author: Jakub Ruzicka <jruzicka@redhat.com> 2.0.2-1
changelog:
  - Update to upstream 2.0.2
  - Switch from pyOpenSSL to python-requests - update dependencies
  - Remove unneeded dependency: python-simplejson


author: Pádraig Brady <pbrady@redhat.com> 2013.2-1
changelog:
  - Improve reporting of services in openstack-status
  - Add heat and ceilometer services to those reported
  - Prompt the user if switching databases with openstack-db


author: Pádraig Brady <pbrady@redhat.com> - 2013.2-2
changelog:
  - Improve openstack-status output
  - Add a new openstack-service command to to control enabled services
  - Add an --update option to openstack-db to update a service's database
  - Add support for heat and neutron to openstack-db


author: Daniel Veillard <veillard@redhat.com> - 2.48-5
changelog:
  - suppress the no address DHCP warning from logs (rhbz#704073)
  - fixes various small problems in the initscript (rhbz#584009)


author: Jiri Denemark <jdenemar@redhat.com> - 2.48-7
changelog:
  - Fix lease-change script (rhbz#815819)
  - Check tftp-root exists and is accessible at startup (rhbz#824214)


author: Tomas Hozza <thozza@redhat.com> - 2.48-10
changelog:
  - Fixed dnsmasq-2.48-add-bind-dynamic-option.patch
   - the option --bind-dynamic was not set correctly when used


author: Tomas Hozza <thozza@redhat.com> - 2.48-11
changelog:
  - Revert previous changes because of many problems with --bind-dynamic option backport.
  - Dropping dnsmasq-2.48-add-bind-dynamic-option.patch
  - Set SO_BINDTODEVICE socket option when using --bind-interfaces (rhbz#884957)


author: Jeff Peeler <jpeeler@redhat.com> 0.0.1-6
changelog:
  - rebase to a495079695e914fa7ec93292497bfc2471f41510
  - Source moved from stackforge to openstack
  - added curl requires
  - switched to pbr
  - remove all sudo related files as they are no longer used


author: Mike Burns <mburns@redhat.com> 1.0.6-2
changelog:
  - Fix unescaped backslash in S sequense
  - Fix uncapitalized reference
  - fix get_nic_from_network
  - Open firewall for rsync
  - install and run rpcbind
  - fix ha swift proxy and storage node


author: Jason Guiditta <jguiditt@redhat.com> 1.0.7-1
changelog:
  - BZ #1068885 - Fix url in keystonerc.
  - BZ #1062699 - Cinder + GlusterFS mount options on HA controller.
  - HA general bug fixes, better stonith support


author: Jason Guiditta <jguiditt@redhat.com> 1.0.8-1
changelog:
  - NFS backend for Cinder on HA controller.
  - Fix cinder-volume to be managed by pacemaker.
  - Fix Neutron to use bind_host for HA.
  - Work around Pacemaker bug where multiple calls to create a resource could
    fail.


author: Jason Guiditta <jguiditt@redhat.com> 1.0.10-1
changelog:
  - BZ #1094029 - Bug fix: numeric mysql password causes error.
  - BZ #1097826 - SElinux - rsync /etc/keystone/ssl error.
  - BZ #1095853 - Remove simplify plugin dep.
  - BZ #1088608 - Neutron HA tweaks.


author: Johan Hedin <johan.o.hedin@gmail.com> - 2.4.4-3
changelog:
  - Added missing daemon name to the preun script for the server
  - Fixed init script so that it does not kill the server on shutdown
  - Renamed mongodb-devel to libmongdb-devel
  - Dependency cleanup between the sub packages
  - Moved Requires for the server to the server sub package
  - Using %{_unitdir} macro for where to put systemd unit files
  - Fixed rpmlint warnings regarding % in comments and mixed tabs/spaces
  - Run systemd-tmpfiles --create mongodb.conf in post server


author: Troy Dawson <tdawson@redhat.com> - 2.4.5-1
changelog:
  - Update to version 2.4.5 to fix CVE-2013-4650
  - Patch3 fixed upstream - https://jira.mongodb.org/browse/SERVER-5575
  - Patch4 fixed upstream - https://jira.mongodb.org/browse/SERVER-6514
  - Put lib dir in correct place
  - no longer have to remove duplicate headers


author: Troy Dawson <tdawson@redhat.com> - 2.4.5-3
changelog:
  - Removed hardening section.  Currently doesn't work with 2.4.x
    Wasn't really being applied when we thought it was.
  - Cleaned up RHEL5 spec leftovers


