# changelog

author: Gary Kotton <gkotton@redhat.com> - 2013.1.1-2
changelog:
  - Update to grizzly stable release 2013.1.1
  - Update install scripts to configure security groups
  - Update install scripts to remove virtual interface configurations


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-208
changelog:
  - Merge cluster administrative domains to cluster_t. Back ported from Fedora
  Resolves:#915151
  - Aadd additinal rules for disk plugins
  - Allow setuid/setgid caps for syslogd_t
  - Dontaudit sendmail to  write dovecote-deliver tmp files
  - Add suppport for /var/lib/openvpn
  - /var/spool/snmptt is a directory which snmdp needs to write to


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-210
changelog:
  - Allow nrpe to list /var
  - Allow apache to search automount tmp dirs if http_use_nfs is enabled
  - Add support for strongswan
  - Fix description of ftpd_use_fusefs boolean
  - Allow kdumpgui to write dos files for /boot/efi/EFI/fedora/grub.cfg
  - Back port tgtd fixes from Fedora to allow sys_rawio cap
  - Add support for OpenDMARCD
  Resolves:#983551
  - Allow openvpn to run unconfined scripts
  - Allow amavis to execute shell
  Resolves:#979421
  - man pages should be owned only by selinux-policy-doc package
  - Fix fs_manage_nfs_files and fs_manage_nfs_dirs boolean to allow to search autofs
  - Allow mysqld-safe sys_nice/sys_resource caps
  Resolves:#975921
  - Add labeling for /boot/etc/yaboot.conf
  Resolves:#973156
  - /var/log/syslog-ng should be labeled var_log_t
  - Back port munin-cgi fixes
  - Fix ftp_home_dir boolean 
  - Allow kdump to read kcore on MLS system
  - Add support for svn ports
  - Add labels for /dev/ptp*
  - Add labels for /etc/security/opasswd
  - Fix labeling for /etc/localtime lnk file
  - Add  tftp booleans for NFS/CIFS access
  - Merge amavis,clamd,clamscan,freshclam policies to antivirus policy
  - Label all nagios plugins as nagios_unconfined_plugin_exec_t by default
  - Add additional ports as mongod_port_t
  - Allow sandbox domains to use inherted terminals
  - Allow pegasus to execute mount in pegasus_t domain
  - Fix *_admin interfaces  and interface descriptions
  - Allow yppasswdd to use NIS
  - Allow nagios to manage nagios spool files
  - Allow ABRT to domtrans to prelink
  Resolves:#921234
  - Fix labeling for /var/lib/dspam/
  Resolves:#919456
  - Label postfix-policyd-spf-perl as bin_t
  - Allow nrpe to run sudo
  - Label /usr/bin/yum-builddep as rpm_exec_t
  - Label /usr/local/bin/x11vnc as xserver_exec_t
  - Allow logwatch to domtrans to mdadm
  - Allow postfix-master to list /tmp dir
  - Add lldpad policy and make it as unconfined domain
  - Allow sysadm to admin postfix
  - ALlow postfix_virtual to stream connect to mysql
  - Update zabbix policy
  - Activate watchod policy and make it as unconfined
  - Add httpd_serve_cobbler_files boolean
  - Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
  - Add oracleasm policy
  - Add support for pand
  - Add awstats_purge_apache_log_files boolean
  - Back port smstools policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-212
changelog:
  - Update rules for antivirus domains
  Resolves:#999471
  - Allow virt_domain to read virt_var_run_t symlinks
  - Allow chroot_user_t to read/write inherited user domain pty
  - Allow to start guest while the libvirtd is started with valgrind
  - Allow lldpad to talk with fcoemon
  - Allow chronyd sched_setscheduler


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-213
changelog:
  - Add openhpid policy
  Resolves:#1000521
  - Fix rhcs_domain_template to allow cluster_t to create socket in /var/run with correct labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-214
changelog:
  - Allow git daemons to read localization
  - Allow tgtd_t to connect to isns ports
  Resolves:#1003571
  - Cleanup antivirus policy and add additional fixes
  - Fix labeling for munin CGI scripts
  - Allow virtd_t also relabel unix stream sockets for virt_image_type
  - Fix fs_search_auto_mountpoints to allow search automount tmp dirs
  Resolves:#990661


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-215
changelog:
  - Add port definition of pka_ca to port 829 for openshift
  - Rename quantum to neutron
  - Allow rpcd to request the kernel to load a module
  - Allow ovsdb-server to create dirs/files in /tmp directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-216
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  - Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys


author: John Bresnahan <jbresnah@redhat.com> 2013.2.b3
changelog:
  - Update to 2013.2.b3
  - Remove runtime dep on python pbr
  - Revert use oslo.sphinx and remove local copy of doc


author: Petr Šabata <contyk@redhat.com> - 2.6.32-24
changelog:
  - Don't hang on rtnl_send() in a confined domain (#985526)
  - Run lnstat indefinitely if -c was not specified (#977845)
  - lnstat manpage SEE ALSO path fixes (#974694)
  - Document tc's force and batch options (#950122)
  - Fix include/linux/if_link.h to get in line with upstream again (#903228)
  - Add support for the IPv6 tokenized interface (#950400)
  - Handle ip-route rto_min parameters correctly (#859145)
  - Add VXLAN support (#929313, #908155)
  - Add mdb subcommand to bridge (#885977)
  - tc now supports the -OK option (#851371)


author: Thomas Graf <tgraf@redhat.com> 1.7.1-3
changelog:
  - Automatically start openvswitch service in ifup/ifdown-ovs
  - Don't add iptables accept rule for -p GRE as GRE tunneling is unsupported
  - openvswitch-test requires python-argparse


author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.0
changelog:
  - Update to upstream version 1.0.0.
  - Added Requires: python-keystoneclient >= 0.1.2.
  - 'nature' theme is not available in current sphinx version, use default.


author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.1-1
changelog:
  - Update to upstream version 1.0.1.
  - Remove new runtime dependency on python-pbr.
  - Remove requirements file.
  - Make requires generic instead of requiring specific versions.


author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.3-1
changelog:
  - Update to upstream 1.0.3.
  - README extension changed.
  - Get rid of pbr deps in the patch instead of this spec file.


author: Pádraig Brady <pbrady@redhat.com> - 2013.2-0.9.b3
changelog:
  - Fix typo in openstack-neutron-meetering-agent package name
  - Register all agent services with chkconfig during installation


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.8.1.el6]
changelog:
  - [fs] raw: don't call set_blocksize when not changing the blocksize (Jeff Moyer) [951406 909482]
  - [x86] Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [952570 876275]
  - [netdrv] ixgbe: Only set gso_type to SKB_GSO_TCPV4 as RSC does not support IPv6 (Michael S. Tsirkin) [927292 908196]
  - [netdrv] bnx2x: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] qlcnic: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] ixgbe: fix gso type (Michael S. Tsirkin) [927292 908196]
  - [fs] gfs2: Allocate reservation structure before rename and link (Robert S Peterson) [924847 922999]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.9.1.el6]
changelog:
  - [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
  - [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
  - [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
  - [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
  - [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
  - [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
  - [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
  - [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
  - [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
  - [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
  - [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
  - [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
  - [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
  - [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
  - [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
  - [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
  - [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
  - [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
  - [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
  - [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
  - [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
  - [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
  - [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
  - [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
  - [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
  - [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
  - [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.10.1.el6]
changelog:
  - [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
  - [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
  - [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
  - [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
  - [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
  - [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
  - [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
  - [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
  - [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
  - [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
  - [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
  - [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
  - [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
  - [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
  - [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
  - [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
  - [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
  - [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
  - [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
  - [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.11.1.el6]
changelog:
  - [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}


author: Don Howard <dhoward@redhat.com> [2.6.32-358.111.1.openstack.el6]
changelog:
  - [net] packet: fix network header offset in skb for raw sockets (Stefan Assmann) [973484 845515]
  - [net] Add generic packet offload infrastructure (Vlad Yasevich) [973485 801856]
  - [net] Switch to using the new packet offload infrastructure (Vlad Yasevich) [973485 801856]
  - [net] Add net protocol offload registration infrustructure (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Add new offload registration infrastructure (Vlad Yasevich) [973485 801856]
  - [net] ipv4: Switch to using the new offload infrastructure (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Switch to using new offload infrastructure (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Separate ipv6 offload support (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Separate tcp offload functionality (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Separate out UDP offload functionality (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Move exthdr offload support into separate file (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Update ipv6 static library with newly needed functions (Vlad Yasevich) [973485 801856]
  - [net] ipv4: Pull GSO registration out of inet_init() (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Pull IPv6 GSO registration out of the module (Vlad Yasevich) [973485 801856]
  - [net] use right lock in __dev_remove_offload (Vlad Yasevich) [973485 801856]
  - [net] ipv6: Preserve ipv6 functionality needed by NET (Vlad Yasevich) [973485 801856]
  - [net] Disable all TSO features when SG is disabled (Amerigo Wang) [973483 892868]
  - [net] fix netdev_increment_features() (Amerigo Wang) [973483 892868]
  - [net] add generic PF_BRIDGE:RTM_ FDB hooks (Amerigo Wang) [971663 907447]
  - [net] netdevice: make address const in device address management (Amerigo Wang) [971663 907447]
  - [net] rtnetlink: add attributes to fdb interface (Amerigo Wang) [971663 907447]
  - [net] rtnetlink: notify events for FDB NTF_SELF adds and deletes (Amerigo Wang) [971663 907447]
  - [net] rtnetlink: do not check master for bridge ports (Amerigo Wang) [971663 907447]
  - [net] dst: Introduce skb_tunnel_rx() helper (Amerigo Wang) [971663 907447]
  - [net] netlink: Add nla_put_net{16,32,64}() helpers (Amerigo Wang) [971663 907447]
  - [net] igmp: export symbol ip_mc_leave_group (Amerigo Wang) [971663 907447]
  - [net] vxlan: virtual extensible lan (Amerigo Wang) [971663 907447]
  - [net] vxlan: put UDP socket in correct namespace (Amerigo Wang) [971663 907447]
  - [net] vxlan: remove unused including <linux/version.h> (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix more sparse warnings (Amerigo Wang) [971663 907447]
  - [net] vxlan: minor output refactoring (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix byte order in hash function (Amerigo Wang) [971663 907447]
  - [net] vxlan: associate with tunnel socket on transmit (Amerigo Wang) [971663 907447]
  - [net] vxlan: allow configuring port range (Amerigo Wang) [971663 907447]
  - [net] vxlan: add additional headroom (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix receive checksum handling (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix oops when give unknown ifindex (Amerigo Wang) [971663 907447]
  - [net] vxlan: don't expire permanent entries (Amerigo Wang) [971663 907447]
  - [net] vxlan: allow a user to set TTL value (Amerigo Wang) [971663 907447]
  - [net] vxlan: Fix error that was resulting in VXLAN MTU size being 10 bytes too large (Amerigo Wang) [971663 907447]
  - [net] vxlan: fix a typo (Amerigo Wang) [971663 907447]
  - [net] vxlan: Update hard_header_len based on lowerdev when instantiating VXLAN (Amerigo Wang) [971663 907447]
  - [net] vxlan: remove unused variable (Amerigo Wang) [971663 907447]
  - [net] vxlan: Use the underlying device index when joining/leaving multicast groups (Amerigo Wang) [971663 907447]
  - [net] vxlan: Add ethtool drvinfo (Amerigo Wang) [971663 907447]
  - [Documentation] vxlan: fix command usage in its doc (Amerigo Wang) [971663 907447]
  - [fs] proc/ns: proc files for namespace naming policy (Amerigo Wang) [971672 880142]
  - [kernel] ns: Introduce the setns syscall (Amerigo Wang) [971672 880142]
  - [kernel] ns: Wire up the setns system call (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Add support for the network namespace (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Add support for the uts namespace (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Add support for the ipc namespace (Amerigo Wang) [971672 880142]
  - [net] ns: Allow setting the network namespace by fd (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Fix Oops on stat of /proc/<zombie pid>/ns/net (Amerigo Wang) [971672 880142]
  - [fs] ns proc: Return -ENOENT for a nonexistent /proc/self/ns/ entry (Amerigo Wang) [971672 880142]
  - [net] ns: fix get_net_ns_by_fd for !CONFIG_NET_NS (Amerigo Wang) [971672 880142]
  - [net] ns: get_net_ns_by_fd() oopses if proc_ns_fget() returns an error (Amerigo Wang) [971672 880142]
  - [net] ns: fix proxy ARP entries listing on a netns (Amerigo Wang) [971672 880142]
  - [net] ns: fix net_alloc_generic() (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: prevent crash when ns_entries is empty (Amerigo Wang) [971672 880142]
  - [fs] improve scalability of pseudo filesystems (Amerigo Wang) [971672 880142]
  - [fs] proc/ns: Fix the namespace inode permission checks (Amerigo Wang) [971672 880142]
  - [net] ns: keep vlan slaves on master netns move (Amerigo Wang) [971672 880142]
  - [net] dev_forward_skb should call nf_reset (Amerigo Wang) [971672 880142]
  - [net] Allow tagged VLAN packets to flow through VETH devices (Amerigo Wang) [971672 880142]
  - [net] fix mtu check when TSO is enabled (Amerigo Wang) [971672 880142]
  - [net] dev_forward_skb() should clear skb_iif (Amerigo Wang) [971672 880142]
  - [net] rtnetlink: speedup rtnl_dump_ifinfo() (Amerigo Wang) [971672 880142]
  - [net] Introduce unregister_netdevice_queue() (Amerigo Wang) [971672 880142]
  - [net] Introduce unregister_netdevice_many() (Amerigo Wang) [971672 880142]
  - [net] introduce NETDEV_UNREGISTER_PERNET (Amerigo Wang) [971672 880142]
  - [net] NETDEV_UNREGISTER_PERNET -> NETDEV_UNREGISTER_BATCH (Amerigo Wang) [971672 880142]
  - [net] Handle NETREG_UNINITIALIZED devices correctly (Amerigo Wang) [971672 880142]
  - [net] use list_first_entry macro (Amerigo Wang) [971672 880142]
  - [net] use rcu_barrier() in rollback_registered_many (Amerigo Wang) [971672 880142]
  - [net] factorize sync-rcu call in unregister_netdevice_many (Amerigo Wang) [971672 880142]
  - [net] deinit automatic LIST_HEAD (Amerigo Wang) [971672 880142]
  - [net] Fix more stale on-stack list_head objects (Amerigo Wang) [971672 880142]
  - [net] Move rcu_barrier from rollback_registered_many to netdev_run_todo (Amerigo Wang) [971672 880142]
  - [net] dev_close() should check IFF_UP (Amerigo Wang) [971672 880142]
  - [netdrv] dummy: fix rcu_sched self-detected stalls (Amerigo Wang) [971672 880142]
  - [net] device name allocation cleanups (Amerigo Wang) [971672 880142]
  - [net] fix dev_get_valid_name (Amerigo Wang) [971672 880142]
  - [net] rtnetlink: Add missing manual netlink notification in dev_change_net_namespaces (Amerigo Wang) [971672 880142]
  - [net] fix incorrect getting net device's name (Amerigo Wang) [971672 880142]
  - [netdrv] veth: Fix the byte counters (Amerigo Wang) [971672 880142]
  - [netdrv] veth: Fix packet checksumming (Amerigo Wang) [971672 880142]
  - [netdrv] veth: Enforce minimum size of VETH_INFO_PEER (Amerigo Wang) [971672 880142]
  - [net] openvswitch: Add support for network namespaces (Amerigo Wang) [971672 880142]
  - [net] ns: add a printk to explain a failure (Amerigo Wang) [971672 880142]
  - [net] WARN if skb_checksum_help() is called on skb requiring segmentation (Amerigo Wang) [973487 903961]
  - [net] adjust skb_gso_segment() for calling in rx path (Amerigo Wang) [973482 904914]
  - [net] openvswitch: Move LRO check from transmit to received (Amerigo Wang) [973482 904914]
  - [net] more accurate network taps in transmit path (Amerigo Wang) [973481 915552]
  - [net] drop_monitor: convert some kfree_skb call sites to consume_skb (Amerigo Wang) [973481 915552]
  - [net] netlink: dont drop packet but consume it (Amerigo Wang) [973481 915552]
  - [net] netlink: drop_monitor/dropwatch friendly (Amerigo Wang) [973481 915552]
  - [net] openvswitch: Stop using NLA_PUT*() (Thomas Graf) [971667 923212]
  - [net] openvswitch: using kfree_rcu() to simplify the code (Thomas Graf) [971667 923212]
  - [net] openvswitch: Increase maximum number of datapath ports (Thomas Graf) [971667 923212]
  - [net] openvswitch: Remove unecessary semicolon (Thomas Graf) [971667 923212]
  - [net] openvswitch: Print device when warning about over MTU packets (Thomas Graf) [971667 923212]
  - [net] openvswitch: Store flow key len if ARP opcode is not request or reply (Thomas Graf) [971667 923212]
  - [net] openvswitch: Process RARP packets with ethertype 0x8035 similar to ARP packets (Thomas Graf) [971667 923212]
  - [net] netfilter: ip6_tables: add flags parameter to ipv6_find_hdr() (Thomas Graf) [971667 923212]
  - [net] ipv6: Move ipv6_find_hdr() out of Netfilter code (Thomas Graf) [971667 923212]
  - [net] ipv6: improve ipv6_find_hdr() to skip empty routing headers (Thomas Graf) [971667 923212]
  - [net] core: add function for incremental IPv6 pseudo header checksum updates (Thomas Graf) [971667 923212]
  - [net] openvswitch: add ipv6 'set' action (Thomas Graf) [971667 923212]
  - [net] openvswitch: use this_cpu_ptr per-cpu helper (Thomas Graf) [971667 923212]
  - [net] openvswitch: add skb mark matching and set action (Thomas Graf) [971667 923212]
  - [net] openvswitch: Use RCU callback when detaching netdevices (Thomas Graf) [971667 923212]
  - [net] openvswitch: Fix ovs_vport_cmd_del return value on success (Thomas Graf) [971667 923212]
  - [net] openvswitch: Fix ovs_vport_cmd_new return value on success (Thomas Graf) [971667 923212]
  - [net] openvswitch: Call genlmsg_end in queue_userspace_packet (Thomas Graf) [971667 923212]
  - [net] openvswitch: Fix parsing invalid LLC/SNAP ethertypes (Thomas Graf) [971667 923212]
  - [net] openvswitch: fix the calculation of checksum for vlan header (Thomas Graf) [971667 923212]
  - [net] openvswitch: remove some useless comments (Thomas Graf) [971667 923212]
  - [net] introduce new priv_flag indicating iface capable of change mac when running (Thomas Graf) [971667 923212]
  - [net] openvswitch: Use eth_mac_addr() instead of duplicating it (Thomas Graf) [971667 923212]
  - [net] openvswitch: Avoid useless holes in struct vport (Thomas Graf) [971667 923212]
  - [net] openvswitch: Make OVSP_LOCAL 32-bit (Thomas Graf) [971667 923212]
  - [net] openvswitch: Change ENOENT return value to ENODEV in lookup_vport() (Thomas Graf) [971667 923212]
  - [net] openvswitch: Allow OVS_USERSPACE_ATTR_USERDATA to be variable length (Thomas Graf) [971667 923212]
  - [net] openvswitch: Use FIELD_SIZEOF() in dp_init() (Thomas Graf) [971667 923212]
  - [net] Fix corruption of skb csum field in pskb_expand_head() of net/core/skbuff.c (Amerigo Wang) [971660 918011]
  - [net] Fix skb_copy_expand() handling of ->csum_start (Amerigo Wang) [971660 918011]
  - [net] gro: fix different skb headrooms (Amerigo Wang) [971660 918011]
  - [net] gro: Re-fix different skb headrooms (Amerigo Wang) [971660 918011]
  - [net] gso: fix possible wrong checksum generation (Amerigo Wang) [971660 918011]
  - [net] tso: Fix possible wrong checksum generation (Amerigo Wang) [971660 918011]
  - [net] fix a wrong assignment in skb_split() (Amerigo Wang) [971660 918011]
  - [net] Rename skb_has_frags to skb_has_frag_list (Amerigo Wang) [971660 918011]
  - [net] offloading: Generalize netif_get_vlan_features() (Amerigo Wang) [971660 918011]
  - [net] offloading: Pass features into netif_needs_gso() (Amerigo Wang) [971660 918011]
  - [net] offloading: Convert dev_gso_segment() to use precomputed features (Amerigo Wang) [971660 918011]
  - [net] offloading: Convert skb_need_linearize() to use precomputed features (Amerigo Wang) [971660 918011]
  - [net] offloading: Convert checksums to use centrally computed features (Amerigo Wang) [971660 918011]
  - [net] offloading: fix can_checksum_protocol() arguments swap (Amerigo Wang) [971660 918011]
  - [net] offloading: do not disable sg for packets requiring no checksum (Amerigo Wang) [971660 918011]
  - [net] ip_gre: include route header_len in max_headroom calculation (Amerigo Wang) [971660 918011]
  - [net] gre: PPP over IPv4 (Point-to-Point Tunneling Protocol) (Amerigo Wang) [971660 918011]
  - [net] gre: fix improper error handling (Amerigo Wang) [971660 918011]
  - [net] ip_gre: lockless xmit (Amerigo Wang) [971660 918011]
  - [net] ip_gre: Fix ip_gre lockless xmits (Amerigo Wang) [971660 918011]
  - [net] gre: add GSO support (Amerigo Wang) [971660 918011]
  - [net] ip_gre: fix possible use after free (Amerigo Wang) [971660 918011]
  - [net] ip_gre: set transport header correctly to gre header (Amerigo Wang) [971660 918011]
  - [net] ip_gre: Fix kernel panic in IP_GRE with GRE csums (Amerigo Wang) [971660 918011]
  - [net] ip_gre: When TOS is inherited, use configured TOS value for non-IP packets (Amerigo Wang) [971660 918011]
  - [net] offloading: Add support for hardware-offloaded encapsulation (Amerigo Wang) [971660 918011]
  - [net] offloading: Handle encapsulated offloads before fragmentation or handing to lower dev (Amerigo Wang) [971660 918011]
  - [net] Add skb_unclone() helper functions (Amerigo Wang) [971660 918011]
  - [net] ipv6: fix warning in xfrm6_mode_tunnel_input (Amerigo Wang) [971660 918011]
  - [net] ipv4: fix warning in xfrm4_mode_tunnel_input (Amerigo Wang) [971660 918011]
  - [net] gso: factor out skb_mac_gso_segment() from skb_gso_segment() (Amerigo Wang) [971660 918011]
  - [net] gre: Add TCP segmentation offload for GRE (Amerigo Wang) [971660 918011]
  - [net] ip_gre: allow CSUM capable devices to handle packets (Amerigo Wang) [971660 918011]
  - [net] ip_gre: remove an extra dst_release() (Amerigo Wang) [971660 918011]
  - [net] ip_gre: Fix IP-Identification (Amerigo Wang) [971660 918011]
  - [net] ip_gre: Fix GRE_CSUM case (Amerigo Wang) [971660 918011]
  - [net] ip_gre: add ethtool support to gre tunnel (Amerigo Wang) [971660 918011]
  - [net] ipv4: Fix ip-header identification for gso packets (Amerigo Wang) [971660 918011]
  - [net] gro: add checksuming helpers (Amerigo Wang) [971660 918011]
  - [net] gro: add gro_cells infrastructure (Amerigo Wang) [971660 918011]
  - [net] ip_gre: get rid of ipgre_lock (Amerigo Wang) [971660 918011]
  - [net] ip_gre: add GRO capability (Amerigo Wang) [971660 918011]
  - [net] ip_gre: enable GRO by default (Amerigo Wang) [971660 918011]
  - [net] ip_gre: fix the inner header offset for gretap (Amerigo Wang) [971660 918011]
  - [net] Kill link between CSUM and SG features (Amerigo Wang) [971657 918014]
  - [net] tunneling: Inherit NETIF_F_SG for hw_enc_features (Amerigo Wang) [971657 918014]
  - [net] tunneling: Add generic Tunnel segmentation (Amerigo Wang) [971657 918014]
  - [net] vxlan: capture inner headers during encapsulation (Amerigo Wang) [971657 918014]
  - [net] vxlan: Add capability of Rx checksum offload for inner packet (Amerigo Wang) [971657 918014]
  - [net] vxlan: Use tunnel_ip_select_ident() for tunnel IP-Identification (Amerigo Wang) [971657 918014]
  - [net] vxlan: reset nf before xmit vxlan encapsulated packet (Amerigo Wang) [971657 918014]
  - [net] vxlan: fix oops when delete netns containing vxlan (Amerigo Wang) [971657 918014]
  - [net] vxlan: Use UDP Tunnel segmention (Amerigo Wang) [971657 918014]
  - [net] vxlan: add ethtool support (Amerigo Wang) [971657 918014]
  - [net] gre: Fix GREv4 TCPv6 segmentation (Amerigo Wang) [971655 960008]
  - [net] vxlan: Fix TCPv6 segmentation (Amerigo Wang) [971655 960008]
  - [net] vlan: adjust vlan_set_encap_proto() for its callers (Thomas Graf) [971669 919068]
  - [net] vlan: Enable software emulation for vlan accleration (Thomas Graf) [971669 919068]
  - [net] offloading: Support multiple vlan tags in GSO (Thomas Graf) [971669 919068]
  - [net] offloading: Do not mask out NETIF_F_HW_VLAN_TX for vlan (Thomas Graf) [971669 919068]
  - [net] Revert: openvswitch: Make Open vSwitch use non-accel VLAN tagging (Thomas Graf) [971669 919068]
  - [net] veth: extend device features (Thomas Graf) [971666 959780]
  - [net] Support specifying the network namespace upon device creation (Thomas Graf) [971672 880142]
  - [net] rtnetlink: Fix ip link add netns oops (Thomas Graf) [971672 880142]
  - [net] rtnetlink: Allow setting the network namespace by fd (Thomas Graf) [971672 880142]
  - [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [971670 886420]
  - [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [971670 886420]
  - [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [971670 886420]
  - [net] scm: Reorder scm_cookie (Thomas Graf) [971672 880142]
  - [kernel] user_ns: Introduce user_nsmap_uid and user_ns_map_gid (Thomas Graf) [971672 880142]
  - [net] sock: Introduce cred_to_ucred (Thomas Graf) [971672 880142]
  - [net] af_unix: Allow SO_PEERCRED to work across namespaces (Thomas Graf) [971672 880142]
  - [net] af_netlink: Add needed scm_destroy after scm_send (Thomas Graf) [971672 880142]
  - [net] scm: Capture the full credentials of the scm sender (Thomas Graf) [971672 880142]
  - [net] af_unix: Allow credentials to work across user and pid namespaces (Thomas Graf) [971672 880142]
  - [net] af_unix: Allow connecting to sockets in other network namespaces (Thomas Graf) [971672 880142]
  - [net] scm: Capture the full credentials of the scm sender (Thomas Graf) [971672 880142]
  - [net] af_unix: dont send SCM_CREDENTIALS by default (Thomas Graf) [971672 880142]
  - [net] scm: fix incorrect credentials passing (Thomas Graf) [971672 880142]
  - [net] af_unix: Only allow recv on connected (Thomas Graf) [971672 880142]
  - [net] af_netlink: force credentials passing (Thomas Graf) [971672 880142]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.114.1.openstack.el6]
changelog:
  - [x86] apic: Add probe() for apic_flat (Prarit Bhargava) [975086 953342]
  - [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
  - [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
  - [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
  - [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
  - [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
  - [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
  - [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
  - [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
  - [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
  - [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
  - [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
  - [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
  - [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
  - [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
  - [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
  - [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
  - [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
  - [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}
  - [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
  - [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
  - [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
  - [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
  - [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
  - [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
  - [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.118.1.openstack.el6]
changelog:
  - [netdrv] qlcnic: fix vlgrp handling (Stefan Assmann) [995125 886420]
  - [netdrv] bna: fix vlan_grp handling (Stefan Assmann) [995125 886420]
  - [net] set IFF_LIVE_ADDR_CHANGE to ext_priv_flags (Amos Kong) [995409 904924]
  - [net] veth: add vlan features (Flavio Leitner) [985838 959817]
  - [net] openvswitch: Add Kconfig dependency on GRE-DEMUX (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Add gre tunnel support (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Optimize flow key match for non tunnel flows (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Expand action buffer size (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Add tunneling interface (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Copy individual actions (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Simplify interface ovs_flow_metadata_from_nlattrs() (Amerigo Wang) [993251 976810]
  - [net] openvswitch: make skb->csum consistent with rest of networking stack (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Fix misspellings in comments and docs (Amerigo Wang) [993251 976810]
  - [net] openvswitch: fix variable names in comment (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Unify vport error stats handling (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Remove unused get_config vport op (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Immediately exit on error in ovs_vport_cmd_set() (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Remove unneeded ovs_netdev_get_ifindex() (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Simplify datapath locking (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Use ETH_ALEN to define ethernet addresses (Amerigo Wang) [993251 976810]
  - [net] openvswitch: datapath.h: Fix a stale comment (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Don't insert empty OVS_VPORT_ATTR_OPTIONS attribute (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Move common genl notify code into ovs_notify() (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Refine Netlink message size calculation and kill FLOW_BUFSIZE (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Use nla_memcpy() to memcpy() data from attributes (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Specify the minimal length of OVS_PACKET_ATTR_PACKET in the policy (Amerigo Wang) [993251 976810]
  - [net] openvswitch: correct an invalid BUG_ON (Amerigo Wang) [993251 976810]
  - [net] openvswitch: Preallocate reply skb in ovs_vport_cmd_set() (Amerigo Wang) [993251 976810]
  - [net] ip_gre: fix a soft lockup in ipgre_fini() (Amerigo Wang) [993251 976810]
  - [net] gre: Fix MTU sizing check for gretap tunnels (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: Use skb-len to PMTU check (Amerigo Wang) [993251 976810]
  - [net] gre: fix a regression in ioctl (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: Add dont fragment flag (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: push generic protocol handling to ip_tunnel module (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: extend iptunnel_xmit() (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: fix kernel panic with icmp_dest_unreach (Amerigo Wang) [993251 976810]
  - [net] gre: export gre_handle_offloads() function (Amerigo Wang) [993251 976810]
  - [net] gre: export gre_build_header() function (Amerigo Wang) [993251 976810]
  - [net] gre: Allow multiple protocol listener for gre protocol (Amerigo Wang) [993251 976810]
  - [net] gre: Simplify gre protocol registration locking (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: remove __net_init/exit from exported functions (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: specify protocol outside IP header (Amerigo Wang) [993251 976810]
  - [net] ip_gre: fix a possible crash in ipgre_err() (Amerigo Wang) [993251 976810]
  - [net] ipv4: typo issue, remove erroneous semicolon (Amerigo Wang) [993251 976810]
  - [net] ip_gre: fix a possible crash in parse_gre_header() (Amerigo Wang) [993251 976810]
  - [net] ip_gre: don't overwrite iflink during net_dev init (Amerigo Wang) [993251 976810]
  - [net] ip_tunnel: Fix off-by-one error in forming dev name (Amerigo Wang) [993251 976810]
  - [net] gre: Refactor GRE tunneling code (Amerigo Wang) [993251 976810]
  - [net] ip: convert __IPTUNNEL_XMIT() to an inline function (Amerigo Wang) [993251 976810]
  - [net] export unregister_netdevice_many() (Amerigo Wang) [993251 976810]
  - [netdrv] be2net: fix VLAN traffic if no VLAN group is registered (Stefan Assmann) [975974 980772]
  - [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
  - [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
  - [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
  - [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
  - [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
  - [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
  - [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
  - [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
  - [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
  - [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
  - [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
  - [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
  - [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
  - [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
  - [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
  - [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
  - [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
  - [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
  - [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]
  - [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
  - [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
  - [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559] {CVE-2013-2232}
  - [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
  - [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
  - [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]
  - [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
  - [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
  - [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
  - [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
  - [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
  - [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
  - [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-358.123.1.openstack.el6]
changelog:
  - [redhat] configs: enable CONFIG_OPENVSWITCH_VXLAN (Amerigo Wang) [1009006 981285]
  - [net] openvswitch: Add vxlan tunneling support (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Add tx-vlan offload support (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Improve vxlan headroom calculation (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Factor out vxlan send api (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Extend vxlan handlers for openvswitch (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Add vxlan recv demux (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Restructure vxlan receive (Amerigo Wang) [1009006 981285]
  - [net] vxlan: Restructure vxlan socket apis (Amerigo Wang) [1009006 981285]
  - [net] openvswitch: Reset tunnel key between input and output (Amerigo Wang) [1009006 981285]
  - [net] openvswitch: Use correct type while allocating flex array (Amerigo Wang) [1009006 981285]
  - [net] openvswitch: Fix bad merge resolution (Amerigo Wang) [1009006 981285]
  - [net] vxlan: fix a soft lockup in vxlan module removal (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix a regression of igmp join (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix rcu related warning (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fdb: replace an existing entry (Amerigo Wang) [1009025 923915]
  - [kernel] list: introduce list_first_entry_or_null (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix igmp races (Amerigo Wang) [1009025 923915]
  - [net] vxlan: unregister on namespace exit (Amerigo Wang) [1009025 923915]
  - [net] vxlan: add necessary locking on device removal (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Fix kernel crash on rmmod (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix function name spelling (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fdb: allow specifying multiple destinations for zero MAC (Amerigo Wang) [1009025 923915]
  - [net] rtnetlink: allow using zero MAC address in rtnl_fdb_add, rtnl_fdb_del (Amerigo Wang) [1009025 923915]
  - [net] fix address check in rtnl_fdb_del (Amerigo Wang) [1009025 923915]
  - [net] vxlan: allow removal of single destination from fdb entry (Amerigo Wang) [1009025 923915]
  - [net] vxlan: introduce vxlan_fdb_parse (Amerigo Wang) [1009025 923915]
  - [net] vxlan: introduce vxlan_fdb_find_rdst (Amerigo Wang) [1009025 923915]
  - [net] vxlan: add implicit fdb entry for default destination (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Fix sparse warnings 2 (Amerigo Wang) [1009025 923915]
  - [net] vxlan: cosmetic cleanup's (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Use initializer for dummy structures (Amerigo Wang) [1009025 923915]
  - [net] vxlan: port module param should be ushort (Amerigo Wang) [1009025 923915]
  - [net] vxlan: convert remotes list to list_rcu (Amerigo Wang) [1009025 923915]
  - [net] vxlan: make vxlan_xmit_one void (Amerigo Wang) [1009025 923915]
  - [net] vxlan: move cleanup to uninit (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix race caused by dropping rtnl_unlock (Amerigo Wang) [1009025 923915]
  - [net] vxlan: send notification when MAC migrates (Amerigo Wang) [1009025 923915]
  - [net] vxlan: move IGMP join/leave to work queue (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix crash from work pending on module removal (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix out of order operation on module removal (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix check for migration of static entry (Amerigo Wang) [1009025 923915]
  - [net] vxlan: handle skb_clone failure (Amerigo Wang) [1009025 923915]
  - [net] vxlan: only migrate dynamic FDB entries (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix race between flush and incoming learning (Amerigo Wang) [1009025 923915]
  - [net] vxlan: defer vxlan init as late as possible (Amerigo Wang) [1009025 923915]
  - [net] vxlan: use unsigned int instead of unsigned (Amerigo Wang) [1009025 923915]
  - [net] vxlan: remove the unused rcu head from struct vxlan_rdst (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Update vxlan fdb 'used' field after each usage (Amerigo Wang) [1009025 923915]
  - [net] vxlan: listen on multiple ports (Amerigo Wang) [1009025 923915]
  - [net] vxlan: do not set SKB_GSO_UDP (Amerigo Wang) [1009025 923915]
  - [net] vxlan: allow choosing destination port per vxlan (Amerigo Wang) [1009025 923915]
  - [net] vxlan: compute source port in network byte order (Amerigo Wang) [1009025 923915]
  - [net] vxlan: source compatiablity with IFLA_VXLAN_GROUP (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix byte order issues with NDA_PORT (Amerigo Wang) [1009025 923915]
  - [net] vxlan: document UDP default port (Amerigo Wang) [1009025 923915]
  - [net] vxlan: update mail address and copyright date (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Allow L2 redirection with L3 switching (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Allow setting destination to unicast address (Amerigo Wang) [1009025 923915]
  - [net] vxlan: don't bypass encapsulation for multi- and broadcasts (Amerigo Wang) [1009025 923915]
  - [net] vxlan: use htonl when snooping for loopback address (Amerigo Wang) [1009025 923915]
  - [net] vxlan: fix some sparse warnings (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Bypass encapsulation if the destination is local (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Fix sparse warnings (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Use IP Tunnels tunnel ENC encap API (Amerigo Wang) [1009025 923915]
  - [net] vxlan: generalize forwarding tables (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Add vlan support to static neighbors (Amerigo Wang) [1009025 923915]
  - [net] vxlan: allow live mac address change (Amerigo Wang) [1009025 923915]
  - [net] vxlan: add DOVE extensions for VXLAN (Amerigo Wang) [1009025 923915]
  - [net] vxlan: move SET_ETHTOOL_OPS() to vxlan_newlink() (Amerigo Wang) [1009025 923915]
  - [net] vxlan: specify fl4.proto before calling ip_route_output_key() (Amerigo Wang) [1009025 923915]
  - [net] vxlan: Depend on CONFIG_INET (Amerigo Wang) [1009025 923915]
  - [md] raid1, raid10: use freeze_array in place of raise_barrier in various places (Jes Sorensen) [1003765 997845]
  - [scsi] megaraid_sas: megaraid_sas driver init fails in kdump kernel (Nikola Pajkovsky) [1001963 833299]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (Nikola Pajkovsky) [988228 876778]
  - [net] bridge: Add multicast_querier toggle and disable queries by default (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Fix fatal typo in setup of multicast_querier_expired (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Restart queries when last querier expires (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Add br_multicast_start_querier (Flavio Leitner) [995334 905561]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1006932 1002765]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [1006956 998752]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [993547 867689]
  - [net] bridge: do not call setup_timer() multiple times (Amerigo Wang) [997746 994430]
  - [fs] lockd: protect nlm_blocked list (David Jeffery) [993544 967095]
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Jiri Benc) [987649 987651] {CVE-2013-4162}
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988708 981741]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988708 981741]
  - [fs] cifs: fix issue mounting of DFS ROOT when redirecting from one domain controller to the next (Sachin Prabhu) [994866 976535]
  - [fs] nfs: Make nfs_readdir revalidate less often (Scott Mayhew) [994867 976879]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Scott Mayhew) [994867 976879]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Scott Mayhew) [994867 976879]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Scott Mayhew) [987262 983288]
  - [fs] nfs: fix a leak at nfs_lookup_revalidate() (Dave Wysochanski) [987261 975211]
  - [acpi] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [993547 867689]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [993547 867689]
  - [acpi] Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [993547 867689]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [997745 952012]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [997745 952012]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [997745 952012]
  - [net] bridge: Replace mp->mglist hlist with a bool (Amerigo Wang) [997745 952012]
  - [mm] fadvise: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages (Larry Woodman) [994140 957821]
  - [net] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1003931 955712]
  - [virt] xen-netfront: reduce gso_max_size to account for max TCP header (Andrew Jones) [1004657 957231]
  - [pps] Fix a use-after free bug when unregistering a source (Jiri Benc) [997916 920155]
  - [scsi] fnic: Fix SGEs limit (Chris Leech) [991346 829506]
  - [x86] Round the calculated scale factor in set_cyc2ns_scale() (Prarit Bhargava) [1001954 975507]
  - [x86] sched: Fix overflow in cyc2ns_offset (Prarit Bhargava) [1001954 975507]
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1000314 947275]
  - [net] sctp: Fix list corruption resulting from freeing an association on a list (Jiri Pirko) [1002184 887868]
  - [fs] nfs: Add functionality to allow waiting on all outstanding reads to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Ensure that NFS file unlock waits for readahead to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Convert nfs_get_lock_context to return an ERR_PTR on failure (Dave Wysochanski) [996424 976915]
  - [x86] thermal: Disable power limit notification interrupt (Shyam Iyer) [999328 908990]
  - [x86] thermal: Delete power-limit-notification console messages (Shyam Iyer) [999328 908990]
  - [fs] gfs2: Reserve journal space for quota change in do_grow (Robert S Peterson) [988384 976823]
  - [netdrv] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [995458 988460]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [996014 987426]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-358.123.2.openstack.el6]
changelog:
  - [net] vxlan: Avoid creating fdb entry with NULL destination (Amerigo Wang) [1009025 923915]
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [1004252 1004233] {CVE-2013-4299}


author: Jakub Ruzicka <jruzicka@redhat.com> 0.2.3-1
changelog:
  - Updated to upstream version 0.2.3.
  - Add new dependency: PyYAML.
  - Add new build requires: python-d2to1 and python-pbr.
  - Remove requirements.txt file.
  - Generate versioninfo file.


author: Dan Prince <dprince@redhat.com> - 2013.2-0.19.b3
changelog:
  - Rebase on downstream packages.
  - Drop b3 from package name.
  - Comment out patches.
  - Drop build dependency on python-d2to1.
  - Add compute dependency on genisoimage (for Cloud Drive support)
  - Add compute dependency on sysfsutils  (for volume support)
  - Add dependency on python-oslo-messaging (in preparation for I)
  - Add build dep on python-oslo-sphinx (patch removed).


author: Derek Higgins <derekh@redhat.com> - 1.7.4-2
changelog:
  - removing reference to tmpfiles.d/openstack-swift.conf in packaging
  - adding python-swiftclient as a BuildRequires


author: Pete Zaitcev <zaitcev@redhat.com> - 1.7.4-2.1
changelog:
  - Add missing Upstart jobs and init scripts for daemons, bz#885530
  - Drop duplicated /var/run directories from the spec


author: Dan Prince <dprince@redhat.com> - 1.8.0-2
changelog:
  - Rebase on latest grizzly packages.
  - Added pbr requirement.
  - Added swift-config.
  - Remove requirements.txt.
  - Add patch to build with sphinx 1.0 (private-members requires > 1.1)


author: Jeff Peeler <jpeeler@redhat.com> 2013.2-0.5.b3
changelog:
  - rebase to havana-3
  - remove tests from common
  - remove cli package and move heat-manage into common
  - added requires for python-heatclient
  - remove python-boto as boto has been moved to another repo
  - remove heat-cfn bash completion
  - add /var/run/heat directory


author: Jeff Peeler <jpeeler@redhat.com> 2013.2-0.6.b3
changelog:
  - fix init scripts (rhbz 1006868)
  - added python-babel
  - remove runtime pbr dependency (rhbz 1006911)


author: Jeff Peeler <jpeeler@redhat.com> 2013.2-0.7.b3
changelog:
  - Depend on python-oslo-config >= 1.2 so it upgraded automatically
  - Distribute dist defaults in heat-dist.conf separate to user heat.conf (rhbz 1008560)


author: Jeff Peeler <jpeeler@redhat.com> 2013.2-0.8.b3
changelog:
  - fix the python-oslo-config dependency to cater for epoch
  - add api-paste-dist.ini to /usr/share/heat


author: Pete Zaitcev <zaitcev@redhat.com> 1.9.1-1
changelog:
  - Update to 1.9.1, includes CVE-2013-4155
  - Includes unfortunately standards-compliant XML listings, to be fixed
  - Reseller prefix in Keystone must end with an underscore
  - Make only proxy depend on openstack-swift-plugin-swift3


author: <pbrady@redhat.com> 1.10.0-0.2.rc1
changelog:
  - add swift home directory for signing_dir, bz#967631
  - Make status print correct identity, bz#917657
  - Add "shutdown" to server-type services that support HUP signal, bz#927423
  - Add a missing newline in service openstack-swift-proxy shutdown, bz#971881


author: Pádraig Brady <pbrady@redhat.com> 1.10.0-2
changelog:
  - Update to Havana GA
  - Fix service startup issue due to bad depencency checking (#1020449)
  - Fix version reporting


author: Matthias Runge <mrunge@redhat.com> - 2013.2-0.4b2
changelog:
  - havana-2
  - change requirements from python-quantumclient to neutronclient
  - require python-ceilometerclient
  - add requirement python-lockfile, change lockfile location to /tmp


author: Matthias Runge <mrunge@redhat.com> - 2013.2-0.5b2
changelog:
  - move requirements from horizon to openstack-dashboard package
  - introduce explicit requirements for dependencies


author: Matthias Runge <mrunge@redhat.com> - 2013.2-0.10b3
changelog:
  - Havana-3 snapshot
  - drop node.js and node-less from buildrequirements
  - add runtime requirement python-lesscpy
  - own openstack_dashboard dir
  - fix keystore handling issue


author: Matthias Runge <mrunge@redhat.com> - 2013.2-0.11b3
changelog:
  - add BuildRequires python-eventlet to fix ./manage.py issue during build
  - fix import in rhteme.less


author: Alan Pevec <apevec@redhat.com> 1:0.4.1-1
changelog:
  - Add dependency on python-setuptools (#850844)
  - Revert client script rename, old glance client is now deprecated.
  - New upstream release.


author: Jakub Ruzicka <jruzicka@redhat.com> - 1:0.10.0-1
changelog:
  - Update to upstream 0.10.0.
  - Remove runtime dependency on python-pbr.
  - Add doc package.
  - New BuildRequires: python2-devel, python-d2to1, python-pbr
  - Remove python-keystoneclient version cap.


author: Alan Pevec <apevec@redhat.com> - 2013.2-0.10.b3
changelog:
  - havana-3 milestone
  - drop pbr run-time dependency
  - set distribution defaults in keystone-dist.conf


author: Daniel Veillard <veillard@redhat.com> - 2.48-5
changelog:
  - suppress the no address DHCP warning from logs (rhbz#704073)
  - fixes various small problems in the initscript (rhbz#584009)


author: Jiri Denemark <jdenemar@redhat.com> - 2.48-7
changelog:
  - Fix lease-change script (rhbz#815819)
  - Check tftp-root exists and is accessible at startup (rhbz#824214)


author: Tomas Hozza <thozza@redhat.com> - 2.48-10
changelog:
  - Fixed dnsmasq-2.48-add-bind-dynamic-option.patch
   - the option --bind-dynamic was not set correctly when used


author: Tomas Hozza <thozza@redhat.com> - 2.48-11
changelog:
  - Revert previous changes because of many problems with --bind-dynamic option backport.
  - Dropping dnsmasq-2.48-add-bind-dynamic-option.patch
  - Set SO_BINDTODEVICE socket option when using --bind-interfaces (rhbz#884957)


author: Alan Pevec <apevec@redhat.com> 1:0.1.3.9-1
changelog:
  - Handle "503 Service Unavailable" exception (lp#1028799)
  - add --wrap option for long PKI tokens (lp#1053728)
  - remove deprecated Diablo options
  - add --os-token and --os-endpoint options to match
    http://wiki.openstack.org/UnifiedCLI/Authentication


author: Alan Pevec <apevec@redhat.com> 0.1.3.27-1
changelog:
  - Allow empty description for tenants (lp#1025929)
  - Documentation updates
  - change default  wrap for tokens from 78 characters to 0 (lp#1061514)
  - bootstrap a keystone user in one cmd
  - Useful message when missing catalog (lp#949904)


author: Alan Pevec <apevec@redhat.com> 2.10.0-2
changelog:
  - Include bash_completion file (#872544) (Alvaro Lopez Ortega)
  - Add dependency on python-iso8601 (#881515)


author: Jordan OMara <jomara@redhat.com> 0.0.17-1
changelog:
  - replace "spacewalk" with "satellite" (cwolfe@redhat.com)
  - bz972780 add nova conductor to controller (cwolfe@redhat.com)


author: Jason Guiditta <jguiditt@redhat.com> 0.0.20-1
changelog:
  - Add support for either neutron or nova networking hostgroups.
  - Add Cinder, Heat, Ceilometer to Quickstack
  - Initial Load Balanced api support
  - Initial clustered mysql nodes (pacemaker cluster)
  - Set puppet data type in seeds.rb


author: Jason Guiditta <jguiditt@redhat.com> 0.0.21-1
changelog:
  - Configuration improvements for ha mysql
  - Update installer to work with foreman 1.3
  - Add horizon support to Load Balancer
  - Add plugin for cisco nexus to neutron setups


author: Jason Guiditta <jguiditt@redhat.com> 0.0.22-1
changelog:
  - Fix foreman-proxy port conflict
  - More installer tweaks
  - Neutron, Heat user fixes
  - Added external ovs bridge creation
  - Remove Clusterlabs repo


author: Ralph Bean <rbean@redhat.com> - 1.3.2-1
changelog:
  - Latest upstream.
  - Patched pyparsing version constraint for py2.
  - Modernized python3 conditional.
  - Temporarily disabled python3 subpackage for python3-pyparsing dep.
  - Added temporary explicit dependency on python3-pyparsing>=2.0.0.


author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.5-1
changelog:
  - Update to upstream version 1.0.5.
  - Update dependencies.
  - Remove runtime dependency on python-pbr.
  - Change Source0 to PyPI.


author: Jakub Ruzicka <jruzicka@redhat.com> 1.0.6-2
changelog:
  - Fix DeprecationWarning when printing exception
  - Provide -doc package with auto-generated documentation
  - Provide upstream manpage
  - Improve package description


author: Ralph Bean <rbean@redhat.com> - 0.4.1-1.20130103hg108
changelog:
  - Move to a post-release hg checkout.
  - Experimenting with background value creation.
  - Temporarily removed the CHANGES doc


author: Ralph Bean <rbean@redhat.com> - 0.4.2-1
changelog:
  - Upstream accepted async patches.
  - Added BuildRequires on python-mock
  - Restrict python-dogpile-core to newer version.
  - Remove tests since they're kind of stochastic.


author: Jakub Ruzicka <jruzicka@redhat.com> 1.5.0-1
changelog:
  - Update to upstream 1.5.0 release.
  - Add new build requires: python-pbr, python-d2to1.
  - Remove runtime dependency on python-pbr.


author: Jakub Ruzicka <jruzicka@redhat.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0.
  - Include man page.
  - Remove all pbr deps in the patch instead of this spec file.


author: Jakub Ruzicka <jruzicka@redhat.com> 0.3.2-2
changelog:
  - Update to upstream 0.3.2.
  - Remove pbr deps in the patch instead of this spec file.
  - Ec2Signer patch is included in this version.


author: Martin Magr <mmagr@redhat.com> - 0.6.4-5
changelog:
  - Added silent editor check patch (https://bitbucket.org/catherinedevlin/cmd2/issue/1/silent-editor-check)


author: Jeff Peeler <jpeeler@redhat.com> 1.2.1-1
changelog:
  - Version bump to match upstream
  - Added cfn-create-aws-symlinks
  - Updated URL, Source
  - Added psutil requires
  - Changed install location from /opt to /bin


author: Dan Prince <dprince@redhat.com> 0.4.2-1
changelog:
  - Drop long_description on RHEL/Centos.
  - Adjust sitelib files include to match * instead of .* on RHEL/Centos.


author: Pádraig Brady <pbrady@redhat.com> - 2013.2-0.4.b2
changelog:
  - Add dependency on python-suds to support the netapp driver
  - Add dependency on python-keystoneclient for auth token middleware
  - Add dependency on qemu-img for volume creation from Glance images


author: Nikola Đipanov <ndipanov@redhat.com> - 0.4-5
changelog:
  - Change FLAGS to the new CONF module in nova-novncproxy
  - Drop the hard dwp on whole nova package and require only nova-common


author: Matthew Farrellee <matt@redhat> - 0.2-3
changelog:
  - Updates to build on EL6,
  -  Use SysV init instead of systemd, copied from openstack-nova-api.init
  -  Use python-sphinx10, it has sphinx.ext.viewcode


author: Matthew Farrellee <matt@redhat> - 0.3-0.1.a252.ga1714e0
changelog:
  - Update to build and run post pbr addition and pycrypto removal
  - Add removal of sdist egg
  - Add magic patch to use SQLAlchemy0.7 on EL6
  - Add workaround patch for novaclient bug 1223934


author: Matthew Farrellee <matt@redhat> - 0.3-0.2
changelog:
  - 0.3 rc3 build
  - Remove workaround patch for novaclient bug 1223934
  - Remove spec infrastructure for master branch build
  - Remove html generation until python-oslo-sphinx is available


author: Lon Hohberger <lhh@redhat.com> - 0.1.2-8
changelog:
  - Call restorecon on /srv to ensure that previously-created
    Swift objects have the correct SELinux context
    Resolves: rhbz#918721


author: Lon Hohberger <lhh@redhat.com> - 0.1.2-9
changelog:
  - Depend on later release of selinux-policy since it contains
    fixes for OpenStack Quantum
    Resolves: rhbz#923426


author: Lon Hohberger <lhh@redhat.com> - 0.1.2-10
changelog:
  - Depend on later release of selinux-policy since it contains
    fixes for OpenStack Swift's use of GlusterFS 
    Resolves: rhbz#923426


author: Martin Mágr <mmagr@redhat.com> - 2013.1.1-0.15.dev625
changelog:
  - Omit Nova DB password only on compute nodes (#966325)
  - Find free device during host startup (#971145)


author: Martin Mágr <mmagr@redhat.com> - 2013.1.1-0.20.dev642
changelog:
  - Fixed provider network option (#976380)
  - Made token_format configurable (#978853)
  - Enable LVM snap autoextend (#975894)
  - MariaDB support (#981116)


author: Martin Mágr <mmagr@redhat.com> - 2013.1.1-0.21.dev651
changelog:
  - Swithed to https://github.com/packstack/puppet-qpid (#977786)
  - If allinone and quantum selected, install basic network (#986024)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.1.dev691
changelog:
  - Added support for Cinder GlusterFS backend configuration (#919607)
  - Added support for linuxbridge (#971770)
  - Service names made more descriptive (#947381)
  - Increased timeout of kernel update (#973217)
  - Set debug=true for Nova to have some logs (#958152)
  - kvm.modules is loaded only if it exists (#979041)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.2.dev702
changelog:
  - ovs_use_veth=True is no longer required
  - Remove libvirt's default network (i.e. virbr0) to avoid confusion
  - Rename Quantum to Neutron
  - Added support for configuration of Cinder NFS backend driver (#916301)
  - Removed CONFIG_QUANTUM_USE_NAMESPACES option


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.3.dev722
changelog:
  - Use 3% more space for cinder-volumes (982622)
  - Changed the repository for the neutron submodule (#998286)
  - Added net.bridge.bridge-nf-call*=1 on compute nodes (#981144)
  - Fixed Rawhide support (#995872)
  - Inform about support only on RHEL (#975913)
  - Use multi validators in CONFIG_SWIFT_PROXY_HOSTS (#928969)
  - Correct CIDR values in case of invalid is given (#969977)
  - Accept IPv6 address and single IP in range parameters (#949704)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.4.dev740
changelog:
  - Added GRE support (#1003120)
  - Added MySQL admin password confirmation (#977443)
  - Made MySQL installation optional (#890175)
  - Persist allinone OVS bridge (#991591)
  - Added the haproxy Puppet module
  - Default to use emX instead of ethX on Fedora


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.6.dev749
changelog:
  - Added posibility to change Nova network manager (#915365)
  - Support for Ceilometer installation (#967310)
  - Support for Heat installation (#967309)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.10.dev763
changelog:
  - Adds "default-storage-engine=InnoDB" to /etc/my.cnf (#980593)
  - Accepts more CLI options (#985361)
  - Added GRE support (#1004397)


author: Martin Mágr <mmagr@redhat.com> - 2013.2.1-0.11.dev806
changelog:
  - Improved logging (lp#1228187)
  - Adds error checking when puppet fails internally (rhbz#958587)
  - Store iptables in file when testing netns (rhbz#1016773)
  - Got rid of create_resources module (rhbz#961049)
  - Creates keystonerc_admin for user (rhbz#964005, rhbz#976394)
  - Prescript plugin improvement (rhbz#976787, rhbz#967369)
  - Enable optional channel when RHSM is used (rhbz#978651)
  - Changes error message in certain cases (rhbz#989334, rhbz#1006476, rhbz#1003959)
  - Rephrase support message (rhbz#991801)
  - Adds support for multihost nova-network (rhbz#1001916)
  - Adds Firewall rules for access to OpenStack components (rhbz#1002063)
  - Allows overlapping IPs for Neutron (rhbz#1008863)


author: Jakub Ruzicka <jruzicka@redhat.com> 2.13.0-1
changelog:
  - Update to upstream version 2.13.0. (#921769)
  - Update requires from tools/pip-requires.
  - versioninfo is gone from tarball, generate it.


author: Jakub Ruzicka <jruzicka@redhat.com> - 1:2.14.1-1
changelog:
  - Update to upstream version 2.14.1.
  - New build requires: python-d2to1, python-pbr
  - New require: python-six
  - Remove runtime dependency on python-pbr.
  - Include new upstream manpage.


author: Jakub Ruzicka <jruzicka@redhat.com>
changelog:
  - Update to upstream 2.15.0
  - Add python-babel dependency
  - Nuke pbr deps handling in patch instead of this spec file


author: Pádraig Brady <P@draigBrady.com> 2013.1-6
changelog:
  - Grizzly keystone sample credentials adjustments
  - Support systems with SELinux disabled
  - Improve handling of users in openstack-db --drop
  - Fix handling of cgroup service
  - Fix handling of passwords with mariadb


author: Pádraig Brady <pbrady@redhat.com> 2013.2-1
changelog:
  - Improve reporting of services in openstack-status
  - Add heat and ceilometer services to those reported
  - Prompt the user if switching databases with openstack-db


author: Jeff Peeler <jpeeler@redhat.com> 0.0.1-6
changelog:
  - rebase to a495079695e914fa7ec93292497bfc2471f41510
  - Source moved from stackforge to openstack
  - added curl requires
  - switched to pbr
  - remove all sudo related files as they are no longer used


