# changelog

author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-12
changelog:
  - updated man pages - only slaptest can convert configuration schema
    (#584787)
  - openldap compiled with -fno-strict-aliasing (#596193)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - rebase to 2.4.23 (Fedora 14) (#644077)
  - uses Mozilla NSS instead of OpenSSL for TLS/SSL
  - added LDIF (ldif.h) to the public API
  - removed embeded Berkeley DB
  - removed autofs schema (use up-to-date version from autofs package instead)
  - removed compat-openldap subpackage (use separate package instead)
  - fixes: ldapsearch -Z hangs server if starttls fails (#652823)
  - fixes: improve SSL/TLS log messages (#652819)
  - fixes: crash when TLS_CACERTDIR contains a subdirectory (#652817)
  - fixes: TLS_CACERTDIR takes precedence over TLS_CACERT (#652816)
  - fixes: openldap should ignore files not in the openssl c_hash format in cacertdir (#652814)
  - fixes: slapd init script gets stuck in an infinite loop (#644399)
  - fixes: Remove lastmod.la from default slapd.conf.bak (#630637)
  - fixes: Mozilla NSS - delay token auth until needed (#616558)
  - fixes: Mozilla NSS - support use of self signed CA certs as server certs (#616554)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#613966)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#667795)
  - fix: move libraries from /usr/lib to /lib (#548475)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: some server certificates refused with inadequate type error (#669846)
  - fix: default encryption strength dropped in switch to using NSS (#669845)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-10
changelog:
  - fix: add symlinks for libraries moved in 2.4.23-5 to allow building
    packages which require these libraries in the old location (#678105)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-11
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend
  - fix: openldap startup script ignores ulimit settings (#679356)
  - fix: add symlinks into /usr/lib*/ (#680139)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-13
changelog:
  - fix update: openldap can't use TLS after a fork() (#671553)
  - fix: possible NULL pointer dereferences in NSS non-blocking patch (#684035)
  - fix: move libldif to /lib for consistency (#548475)
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-14
changelog:
  - fix update: openldap startup script ignores ulimit settings (#679356)
  - fix update: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-15
changelog:
  - fix: rpm -V fail when upgrading with openldap-devel installed (#693716)
    (remove devel *.so symlinks from /lib and leave them in /usr/lib)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-16
changelog:
  - fix: memleak in tlsm_auth_cert_handler (#717738)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#698921)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#701227)
  - fix: server scriptlets require initscripts package (#712358)
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712494)
  - fix: ldapsearch fails if no CA certificate is available (#713525)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-17
changelog:
  - fix: strict aliasing warnings during package build (#723487)
  - add partial RELRO support for libraries (#723999)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#729095)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#729087)
  - fix: TLS_REQCERT=never ignored when the certificate is expired (#722959)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#726984)
  - fix: OpenLDAP server segfaults when using back-sql (#727533)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#722923)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#723514)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-18
changelog:
  - fix: overlay refint option refint_nothing doesn't function correctly (#725479)
  - fix: Unwanted slash printed when installing openldap-servers (#732001)
  - manpage fix: TLS options in documentation are not valid for MozNSS (#684810)
  - fix: NSS_Init* functions are not thread safe (#731168)
  - manpage fix: errors in manual page slapo-unique (#723521) 
  - new feature: honor priority/weight with ldap_domain2hostlist (#730311)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-20
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#730311)
  - fix regression: openldap built without tcp_wrappers (#742592)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-21
changelog:
  - fix: ldapsearch crashes with invalid parameters (#743781)
  - fix: replication (syncrepl) with TLS causes segfault (#783445)
  - fix: openldap server in MirrorMode sometimes fails to resync via syncrepl (#784211)
  - use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
  - fix: missing options in manual pages of client tools (#745470)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
  - fix: slapd segfaults when certificate key cannot be loaded (#796808)
  - Jan Synáček <jsynacek@redhat.com>
    + fix: overlay constraint with count option work bad with modify operation (#742163)
    + fix: Default SSL certificate bundle is not found by openldap library (#742023)
    + fix: Duplicate close() calls in OpenLDAP (#784203)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-23
changelog:
  - security fix: CVE-2012-1164: assertion failure by processing search queries
    requesting only attributes for particular entry (#813162)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-24
changelog:
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
  - fix: memberof overlay on the frontend database causes server segfault (#730745)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
changelog:
  - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
  - fix: memory leak: def_urlpre is not freed (#816168)
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-28
changelog:
  - CVE-2012-2668 (#825875)
    + cipher suite selection by name can be ignored
    + default cipher suite is always selected


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-29
changelog:
  - fix: invalid order of TLS shutdown operations (#818572)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
  - fix: reading pin from file can make all TLS connections hang (#829319)
  - fix: replication with TLS does not work (#707599)
  - fix: some TLS ciphers cannot be enabled (#852339)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
  - fix: MozNSS certificate database in SQL format cannot be used (#857390)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
  - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
  - fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-1
changelog:
  - rebase to 2.4.39 (#923680)
    + drop a lot of upstreamed patches, backport the rest
    + compile in mdb
    + remove automatic slapd.conf -> slapd-config conversion


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - add another missing patch forgotten during the rebase
  - fix: enable dynamic linking - unresolved symbols in the smbk5pwd module


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-10
changelog:
  - revert previous patch (#1172296)
  - fix: crash in ldap_domain2hostlist when processing SRV record (#1164369)
  - support TLS 1.1 and later (#1160467)
  - enhancement: add ppolicy-check-password (#1155390)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1263477)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - fix: slapd crash in do_search (#1257543)
  - Fix: Cannot build the package after libtool rebase (#1296129)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-9
changelog:
  - fix: Bad log levels in check_password module (#1255046)
  - [rfe] add informational message about database backup when openldap is updated (#1261651)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1288545)
  - fix: We can't search expected entries from LDAP server (#1212283)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: update description in slapd.conf for NSS database related options (#1131094)
  - fix: check_password minPoints parameter useless (#1255063)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-11
changelog:
  - fix: OpenLDAP doesn't use sane (or default) cipher order (#1300701)
    + Add support for TLSv1.2, and SHA256 and SHA384 ciphers
    + Use what NSS considers default for DEFAULT cipher string.
    + Drop unnecessary hardcoded cipher suites' default flags
    + Update with TLSv1.2 ciphers
  - revert: check_password minPoints parameter useless (#1255063)


author: Orion Poplawski <orion@cora.nwra.com> - 1.0.1-2
changelog:
  - Use configure options to install includes and libraries
  - Add ld.so.conf.d file to find libraries
  - Add -fPIC for x86_64


author: Doug Ledford <dledford@redhat.com> - 1.1-2
changelog:
  - Various lint cleanups
  - Switch to using the standard alternatives mechanism instead of a home
    grown one


author: Doug Ledford <dledford@redhat.com> - 1.1-3
changelog:
  - Don't ghost the mpi.conf file as that means it will get removed when
    you remove 1 out of a number of alternatives based packages
  - Put the .mod file in -devel


author: Doug Ledford <dledford@redhat.com> - 1.1-4
changelog:
  - Make sure the post/preun scripts only add/remove alternatives on initial
    install and final removal, otherwise don't touch.


author: Doug Ledford <dledford@redhat.com> - 1.1-6
changelog:
  - Bump rev to match fc6 rev
  - Fixup some issue with alternatives support
  - Split the 32bit and 64bit libs ld.so.conf.d files into two files so
    multilib or single lib installs both work properly
  - Put libs into their own package
  - Add symlinks to /usr/share/openmpi/bin%{mode} so that opal_wrapper-%{mode}
    can be called even if it isn't the currently selected default method in
    the alternatives setup (opal_wrapper needs to be called by mpicc, mpic++,
    etc. in order to determine compile mode from argv[0]).


author: Doug Ledford <dledford@redhat.com> - 1.1.1-7
changelog:
  - Bump version to be at least as high as the RHEL4U5 openmpi
  - Integrate fixes made in RHEL4 openmpi into RHEL5 (fix a multilib conflict
    for the openmpi.module file by moving from _datadir to _libdir, make sure
    all sed replacements have the g flag so they replace all instances of
    the marker per line, not just the first, and add a %defattr tag to the
    files section of the -libs package to avoid install errors about
    brewbuilder not being a user or group)
  - Resolves: bz229298


author: Doug Ledford <dledford@redhat.com> - 1.2.3-1
changelog:
  - Update to latest upstream version
  - Fix file ownership on -libs package
  - Take a swing at solving the multi-install compatibility issues


author: Doug Ledford <dledford@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4 upstream version
  - Build against libtorque
  - Pass a valid mode to open
  - Resolves: bz189441, bz265141


author: Doug Ledford <dledford@redhat.com> - 1.3.3-1
changelog:
  - Make sure all created dirs are owned (bz474677)
  - Fix loading of pkgconfig file (bz476844)
  - Resolve file conflict between us and libotf (bz496131)
  - Resolve dangling symlinks issue (bz496909)
  - Resolve unexpanded %{mode} issues (bz496911)
  - Restore -devel subpackage (bz499851)
  - Make getting the default openmpi devel environment easier (bz504357)
  - Make the -devel package pull in the base package (bz459458)
  - Make it easier to use alternative compilers to build package (bz246484)


author: Jay Fenlason <fenlason@redhat.com> - 1.3.3-4
changelog:
  - Modify packaging to conform to
    https://fedoraproject.org/wiki/PackagingDrafts/MPI (bz521334).
  - remove --with-ft=cr from configure, as it was apparently causing problems
    for some people.
  - Add librdmacm-devel and librdmacm to BuildRequires (related bz515565).
  - Add openmpi-bz515567.patch to add support for the latest Chelsio device IDs
    (related bz515567).
  - Add exclude-arch (s390 s390x) because we don't have required -devel packages
    there.


author: Jay Fenlason <fenlason@redhat.com> - 1.3.3-5
changelog:
  - Move the module file from %{_datadir}/Modules/modulefiles/%{namearch} to
    %{_sysconfdir}/modulefiles/%{namearch} where it belongs.
  - Have the -devel subpackage own the man1 and man7 directories for completeness.
  - Add a blank line before the clean section.
  - Remove --enable-mpirun-prefix-by-default from configure.


author: Doug Ledford <dledford@redhat.com> - 1.4-1
changelog:
  - Update to latest upstream stable version
  - Add support for libibcm usage
  - Enable sge support via configure options since it's no longer on by default
  - Add patch to resolve allreduce issue (bz538199)
  - Remove no longer needed patch for Chelsio cards


author: Doug Ledford <dledford@redhat.com> - 1.4-3
changelog:
  - Fix pkgconfig file substitution
  - Bump version so we are later than the equivalent version from Red Hat
    Enterprise Linux


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-1
changelog:
  - New upstream version, which includes the changeset_r22324 patch.
  - Correct a typo in the Source0 line in this spec file.


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4
changelog:
  - Update to fix licencing and packaging issues:
    Use the system plpa and ltdl librarires rather than the ones in the tarball
    Remove licence incompatible files from the tarball.
  - update module.in to prepend-path		PYTHONPATH


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.2
changelog:
  - BuildRequire the infinipath-psm package to pull in support
    for it on x86_64.
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.3
changelog:
  - Split the psm support packages into their own rpms to close
    Resolves: rhbz616575 openmpi does not work with non-infinipath hardware


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Upgrade to new upstream version
    This disables openib-ibcm, which is broken in 1.5.3
    This brings in esmtp and valgrind memchecker support from Fedora
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-1
changelog:
  - Conditionalize the psm and psm-devel subpackages, to keep rpmbuild
    from trying to build them on ppc
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-2
changelog:
  - Fix the rpm macros for the -psm subpackage, so we can build
    a -psm varient of mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-1
changelog:
  - Clean up provides and requires to close
    Resolves: rhbz768457
  - Remove and obsolete the -psm variants that have been folded into the main
    packages.
    Resolves: rhbz758618
  - New upstream version
    Resolves: rhbz768109
    Related: rhbz739138


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-2
changelog:
  - Fix the build process by getting rid of the -build patch
    and autogen to fix
    Resolves: rhbz749115


author: Michal Schmidt <mschmidt@redhat.com> 1.10.1-1
changelog:
  - Update to 1.10.1.
  - Backport additional fixes from Fedora.
    - Fortran module install (bug #1154982)
    - Add upstream patch to fix zero size message
    Resolves: rhbz1130442, rhbz1142168


author: Michal Schmidt <mschmidt@redhat.com> 1.10.2-1
changelog:
  - Update to 1.10.2.
  - Use versioned directory and module names "openmpi-1.10",
    "openmpi-1.10-$arch".
    The unversioned names remain with openmpi-1.8 (built from compat-openmpi).
  - Related: rhbz1130442


author: Michal Schmidt <mschmidt@redhat.com> 1.10.2-2
changelog:
  - Name the binary package "openmpi-1.10". The provide name "openmpi"
    remains to openmpi-1.8 for maximum compatibility with RHEL 6.7.
  - Related: rhbz1130442


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Šimon Lukašík <slukasik@redhat.com> - 1.2.7-1
changelog:
  - upgrade to the latest upstream release (#1259037)
  - Introduced '--verbose' mode (#1287295)
  - Detailed OVAL results present in HTML report (#1140240)
  - fixed issues in scap-as-rpm tool (#1226398, #1258958)
  - introduced support for non-decimal OVAL vetsions (#1248378)
  - 'oscap oval eval --report' command (#1258958)
  - 'oscap xccdf generate --profile <custom-profile> guide' (#1139822)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-36
changelog:
  - add ldap backend (#455350)
  - skip sshd init's rsa1 creation in fips mode (#672870)
  - improve audit session key destroy (#642792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-71
changelog:
  - enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI (#756929)
  - add CAVS test driver for the aes-ctr ciphers (#782091)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-73
changelog:
  - remove openssh-4.3p2-no-v6only.patch (#732955)
  - adjust Linux out-of-memory killer (#744236)
  - fix sshd init script - check existence of crypto (#797384)
  - add RequiredAuthentications[12] (#657378)
  - run privsep slave process as the users SELinux context (#798241)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-82
changelog:
  - check return value of PK11_Authenticate in ssh-add -n (#782912)
  - document available methods to RequiredAuthentications[12] (#821641)
  - fix ssh-copy-id (#836650)
  - fix segmentation fault in ssh client (#836655)
  - update pam_ssh_agent_auth to 0.9.3 upstream version
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running (#834404)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-85
changelog:
  - fix chroot logging issue (#872169)
  - change the bad key permissions error message (#880575)
  - fix a race condition in ssh-agent (#896561)
  - backport support for PKCS11 from openssh-5.4p1 (#908038)
  - add a KexAlgorithms knob to the client and server configuration (#951704)
  - fix parsing logic of ldap.conf file (#954094)
  - Add HMAC-SHA2 algorithm support (#969565)
  - store krb5 credentials after a pam session is created (#974096)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-86
changelog:
  - Add support for certificate key types for users and hosts (#906872)
  - Apply RFC3454 stringprep to banners when possible (#955792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-87
changelog:
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A (#993577)
  - fixed an issue with broken 'ssh -I pkcs11' (#908038)
  - abort non-subsystem sessions to forced internal sftp-server (#993509)
  - reverted 'store krb5 credentials after a pam session is created (#974096)'


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-90
changelog:
  - change default value of MaxStartups - CVE-2010-5107 - #908707
  - add -fips subpackages that contains the FIPS module files (#1001565)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-95
changelog:
  - adjust the key echange DH groups and ssh-keygen according to SP800-131A (#993580)
  - log failed integrity test if /etc/system-fips exists (#1020803)
  - backport ECDSA and ECDH support (#1028335)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-96
changelog:
  - prevent a server from skipping SSHFP lookup (#1081338) CVE-2014-2653
  - ignore environment variables with embedded '=' or '\0' characters CVE-2014-2532
  - backport ControlPersist option (#953088)
  - log when a client requests an interactive session and only sftp is allowed (#997377)
  - don't try to load RSA1 host key in FIPS mode (#1009959)
  - restore Linux oom_adj setting when handling SIGHUP to maintain behaviour over restart
    (#1010429)
  - ssh-keygen -V - relative-specified certificate expiry time should be relative to current time
    (#1022459)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-97
changelog:
  - x11 forwarding - be less restrictive when can't bind to one of available addresses
    (#1027197)
  - better fork error detection in audit patch (#1028643)
  - fix openssh-5.3p1-x11.patch for non-linux platforms (#1100913)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-98
changelog:
  - add possibility to autocreate only RSA key into initscript (#1111568)
  - fix several issues reported by coverity


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-105
changelog:
  - Fix ControlPersist option with ProxyCommand (#1160487)
  - Backport fix of ssh-keygen with error : gethostname: File name too long (#1161454)
  - Backport show remote address instead of UNKNOWN after timeout at password prompt (#1161449)
  - Fix printing of extensions in v01 certificates (#1093869)
  - Fix confusing audit trail for unsuccessful logins (#1127312)
  - Don't close fds for internal sftp sessions (#1085710)
  - Fix config parsing quotes (backport) (#1134938)
  - Enable logging in chroot into separate file (#1172224)
  - Fix auditing when using combination of ForcedCommand and PTY (#1131585)
  - Fix ssh-copy-id on non-sh remote shells (#1135521)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-106
changelog:
  - Add missing ControlPersist option to man ssh (#1197763)
  - Add sftp option to force mode of created files (#1191055)
  - Do not load RSA1 keys in FIPS mode (#1197072)
  - Add missing support for ECDSA in ssh-keyscan (#1196331)
  - Fix coverity/gcc issues (#1196063)
  - Backport wildcard functionality for PermitOpen in sshd_config file (#1159055)
  - Ability to specify an arbitrary LDAP filter in ldap.conf (#1119506)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-109
changelog:
  - Fix problems with failing persistent connections (#1131585)
  - Fix memory leaks in auditing patch (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-110
changelog:
  - Fix minor problems found by covscan/gcc (#1196063)
  - Add missing options in man ssh (#1197763)
  - Add KbdInteractiveAuthentication documentation to man sshd_config (#1109251)
  - Correct freeing newkeys structure when privileged monitor exits (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-2
changelog:
  - make CA dir readable - the private keys are in private subdir (#584810)
  - a few fixes from upstream CVS
  - make X509_NAME_hash_old work in FIPS mode (#568395)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-3
changelog:
  - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738)
  - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-7
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers (#619762)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-8
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-15
changelog:
  - better documentation of the available digests in apps (#693858)
  - backported CHIL engine fixes (#693863)
  - allow testing build without downstream patches (#708511)
  - enable partial RELRO when linking (#723994)
  - add intelx engine with improved performance on new Intel CPUs
  - add OPENSSL_DISABLE_AES_NI environment variable which disables
    the AES-NI support (does not affect the intelx engine)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-16
changelog:
  - merge the optimizations for AES-NI, SHA1, and RC4 from the intelx
    engine to the internal implementations


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-21
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-26
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-28
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make 3des strength to be 128 bits instead of 168 (#1056616)
  - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits
  - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys)
  - FIPS mode: add DH selftest
  - FIPS mode: reseed DRBG properly on RAND_add()
  - FIPS mode: add RSA encrypt/decrypt selftest
  - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key
  - use the key length from configuration file if req -newkey rsa is invoked


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-25
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - drop EXPORT, RC2, and DES from the default cipher list (#1057520)
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - properly detect encryption failure in BIO (#1100819)
  - fail on hmac integrity check if the .hmac file is empty (#1105567)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-29
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-31
changelog:
  - fix CVE-2014-3567 - memory leak when handling session tickets
  - fix CVE-2014-3513 - memory leak in srtp support
  - add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-33
changelog:
  - fix CVE-2014-3570 - incorrect computation in BN_sqr()
  - fix CVE-2014-3571 - possible crash in dtls1_get_record()
  - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state
  - fix CVE-2014-8275 - various certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate
  - fix CVE-2015-0206 - possible memory leak when buffering DTLS records


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34
changelog:
  - copy digest algorithm when handling SNI context switch
  - improve documentation of ciphersuites - patch by Hubert Kario
  - add support for setting Kerberos service and keytab in
    s_server and s_client


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-35
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-38
changelog:
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-41
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-43
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1229871)
  - document some options of the speed command (#1197095)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.1
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
  - fix CVE-2016-0799 - memory issues in BIO_printf


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.0-1
changelog:
  - Updated the sources to 2.2.0. Couple of major changes are as follows:
  - Major changes:
  -       Adapt IANA ports of 5985 (http) and 5986 (https)
  -       Change the Ruby bindings module name to 'Openwsman'
  -       Change the Ruby plugin module name to 'Openwsman'
  -       IPv6 support (A_Venkatachalam@Dell.com)
  -       preliminary support for wbem intrinsic operations
  -           'EnumerateClassNames' and 'GetClass' (kkaempf@suse.de)
  -            (needs fixed sblim-sfcc, see www.openwsman.org for details)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-7
changelog:
  - Add missing openwsman headers to libwsman-devel
    Resolves: #615922
  - Move initscript to the right place
    Resolves: #626773
  - Fix return values from initscript according to guidelines
    Resolves: #613031
  - Fix ssl check behaviour in initscript
    Resolves: #617549
  - Fix openwsman crashes when sfcb is stopped
    Resolves: #625160


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Hack to get correct syscall for ia64.
  - Hack to get get timer interupt data.
  - Fix doc/Makefile.am.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Syscall value for x86_64.
  - Update manpage and documentation.
  - Revise utils/* to deprecate old.
  - Include CPU_P4_HT2 in op_help.c
  - Revise how CPU_TIMER_INT handled.
  - Apply cookie patch for all archs.
  - Correct autogen.sh location.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - turn on build for ppc64
  - change order op_visualise searches lib directories.
  - revise oprofile-0.4-deprecate patch.
  - utils/oprofile kernel range check, --save, and do_dump corrections.
  - update gui to use "--separate=library".


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Use /proc/ksym for module information.
  - Correct separate debuginfo handling.
  - Configure with --enable-abi.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - check min event counts.
  - revised op_to_source output to avoid changing line count.
  - p4event events revised.
  - hammer events revised.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - put in s390.
  - Fix includes for asserts.
  - Make sure elinks is available for html to txt conversion.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Eliminate AUTOMAKE and ACLOCAL definitions.
  - Correct QTDIR and add oprof_start to file manifests.


author: Will Cohen <wcohen@redhat.com> - 0.9.2-7
changelog:
  - Correct description for package.
  - Correct backtrace documentation. Resolves: rhbz#214793.
  - Correct race condition. Resolves: rhbz#220116.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-12
changelog:
  - Add shadow-utils to requires. Resolves: rhbz #501357
  - Add LGPL license to provided java support. Resolves: rhbz #474666
  - Correct handling of --verbose. Resolves: rhbz #454969


author: Will Cohen <wcohen@redhat.com> - 0.9.5-3
changelog:
  - Allow timer mode to work.
  - Correct location for addditional files in man pages. Resolves: rhbz #508669


author: Will Cohen <wcohen@redhat.com> - 0.9.6-5
changelog:
  - Handle debuginfo section differences. rhbz #591538
  - Produce a 32-bit ppc oprofile packages for java support. rhbz #463223


author: Will Cohen <wcohen@redhat.com> - 0.9.6-10
changelog:
  - Corrections for i386/arch_perfmon filters.
  - Make nehalem events available.
  - Add AMD family 12/14/15h support. Resolves: rhbz #650126
  - Add Intel westmere support. Resolves: rhbz #643478
  - opcontrol numeric argument checking. Resolves: rhbz #589638


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: William Cohen <wcohen@redhat.com> - 0.9.9-12
changelog:
  - Add support for Intel Xeon D. rhbz1231399
  - Add support for Intel Skylake Mobile/Desktop processors. rhbz1254764
  - Fix coverity warnings. rhbz1206242


author: Weiping Pan <wpan@redhat.com> 2.0.8.rh1 2
changelog:
  - rebuild oracleasm for RHEL6.5, sync to upstream commit d368091e98dc
  - (oracleasm: Add support for new error return codes from block/SCSI)


author: Weiping Pan <wpan@redhat.com> 2.0.8 4
changelog:
  - add  .clear_inode callback, fix bug 1157408.
  - rebuild oracleasm for RHEL6.6 in brew, update the version to 2.0.8-4


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.4-2
changelog:
  - Reference authors from the project AUTHORS file instead of listing in description
  - Change Source0 to reference the project's Mercurial repo
  - Cleaned up the summaries and descriptions
  - Incorporate the results of Fedora package self-review


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.4-3
changelog:
  - Include an AUTHORS and license file in each package
  - Change the library package name to pacemaker-libs to be more
    Fedora compliant
  - Remove execute permissions from xml related files
  - Reference the new cluster-glue devel package name
  - Update the tarball from upstream to version c9120a53a6ae
    + High: PE: Only prevent migration if the clone dependancy is stopping/starting on the target node
    + High: PE: Bug 2160 - Dont shuffle clones due to colocation
    + High: PE: New implementation of the resource migration (not stop/start) logic
    + Medium: Tools: crm_resource - Prevent use-of-NULL by requiring a resource name for the -A and -a options
    + Medium: PE: Prevent use-of-NULL in find_first_action()
    + Low: Build: Include licensing files


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-0.4.c9120a53a6ae.hg
changelog:
  - Incorporate the feedback from the cluster-glue review
  - Realistically, the version is a 1.0.5 pre-release
  - Use the global directive instead of define for variables
  - Use the haclient/hacluster group/user instead of daemon
  - Use the _configure macro
  - Fix install dependancies


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-1
changelog:
  - Add dependancy on resource-agents
  - Use the version of the configure macro that supplies --prefix, --libdir, etc
  - Update the tarball from upstream to version 462f1569a437 (Pacemaker 1.0.5 final)
    + High: Tools: crm_resource - Advertise --move instead of --migrate
    + Medium: Extra: New node connectivity RA that uses system ping and attrd_updater
    + Medium: crmd: Note that dc-deadtime can be used to mask the brokeness of some switches


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-2
changelog:
  - Add versioned perl dependancy as specified by
      https://fedoraproject.org/wiki/Packaging/Perl#Packages_that_link_to_libperl
  - No longer remove RPATH data, it prevents us finding libperl.so and no other
    libraries were being hardcoded
  - Compile in support for heartbeat
  - Conditionally add heartbeat-devel and corosynclib-devel to the -devel requirements
    depending on which stacks are supported


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-3
changelog:
  - Update the tarball from upstream to version 38cd629e5c3c
    + High: Core: Bug lf#2169 - Allow dtd/schema validation to be disabled
    + High: PE: Bug lf#2106 - Not all anonymous clone children are restarted after configuration change
    + High: PE: Bug lf#2170 - stop-all-resources option had no effect
    + High: PE: Bug lf#2171 - Prevent groups from starting if they depend on a complex resource which can't
    + High: PE: Disable resource management if stonith-enabled=true and no stonith resources are defined
    + High: PE: Don't include master score if it would prevent allocation
    + High: ais: Avoid excessive load by checking for dead children every 1s (instead of 100ms)
    + High: ais: Bug rh#525589 - Prevent shutdown deadlocks when running on CoroSync
    + High: ais: Gracefully handle changes to the AIS nodeid
    + High: crmd: Bug bnc#527530 - Wait for the transition to complete before leaving S_TRANSITION_ENGINE
    + High: crmd: Prevent use-after-free with LOG_DEBUG_3
    + Medium: xml: Mask the "symmetrical" attribute on rsc_colocation constraints (bnc#540672)
    + Medium (bnc#520707): Tools: crm: new templates ocfs2 and clvm
    + Medium: Build: Invert the disable ais/heartbeat logic so that --without (ais|heartbeat) is available to rpmbuild
    + Medium: PE: Bug lf#2178 - Indicate unmanaged clones
    + Medium: PE: Bug lf#2180 - Include node information for all failed ops
    + Medium: PE: Bug lf#2189 - Incorrect error message when unpacking simple ordering constraint
    + Medium: PE: Correctly log resources that would like to start but can't
    + Medium: PE: Stop ptest from logging to syslog
    + Medium: ais: Include version details in plugin name
    + Medium: crmd: Requery the resource metadata after every start operation


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-4
changelog:
  - Include the fixes from CoroSync integration testing
  - Move the resource templates - they're not documentation
  - Ensure documentation is placed in a standard location
  - Exclude documentation that is included elsewhere in the package

  - Update the tarball from upstream to version ee19d8e83c2a
    + High: cib: Correctly clean up when both plaintext and tls remote ports are requested
    + High: PE: Bug bnc#515172 - Provide better defaults for lt(e) and gt(e) comparisions
    + High: PE: Bug lf#2197 - Allow master instances placemaker to be influenced by colocation constraints
    + High: PE: Make sure promote/demote pseudo actions are created correctly
    + High: PE: Prevent target-role from promoting more than master-max instances
    + High: ais: Bug lf#2199 - Prevent expected-quorum-votes from being populated with garbage
    + High: ais: Prevent deadlock - dont try to release IPC message if the connection failed
    + High: cib: For validation errors, send back the full CIB so the client can display the errors
    + High: cib: Prevent use-after-free for remote plaintext connections
    + High: crmd: Bug lf#2201 - Prevent use-of-NULL when running heartbeat


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-6
changelog:
  - Let snmp automatically pull in lm_sensors-devel if required
    and available on that arch (its not on s390x)


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.0-0.1-00d9bcac8775.hg
changelog:
  - Related: rhbz#rhbz#543948
  - Update the tarball from upstream to version 00d9bcac8775
    + High: PE: Bug 2213 - Ensure groups process location constraints so that clone-node-max works for cloned groups
    + High: PE: Bug lf#2153 - Update regression tests
    + High: PE: Bug lf#2153 - non-clones shouldn't restart when clones stop/start on other nodes
    + High: PE: Bug lf#2209 - Clone ordering should be able to prevent startup of dependant clones
    + High: PE: Bug lf#2216 - Correctly identify the state of anonymous clones when deciding when to probe
    + High: PE: Bug lf#2225 - Operations that require fencing should wait for 'stonith_complete' not 'all_stopped'.
    + High: PE: Bug lf#2225 - Prevent clone peers from stopping while another is instance is (potentially) being fenced
    + High: PE: Correctly anti-colocate with a group
    + High: PE: Correctly unpack ordering constraints for resource sets to avoid graph loops
    + High: Replace stonithd with the new fencing subsystem
    + High: cib: Ensure the loop searching for a remote login message terminates
    + High: cib: Finally fix reliability of receiving large messages over remote plaintext connections
    + High: cib: Fix remote notifications
    + High: cib: For remote connections, default to CRM_DAEMON_USER since thats the only one that the cib can validate the password for using PAM
    + High: cib: Remote plaintext - Retry sending parts of the message that didn't fit the first time
    + Medium: PE: Bug lf#2206 - rsc_order constraints always use score at the top level
    + Medium: PE: Provide a default action for resource-set ordering
    + Medium: PE: Silently fix requires=fencing for stonith resources so that it can be set in op_defaults
    + Medium: ais: Some clients such as gfs_controld want a cluster name, allow one to be specified in corosync.conf
    + Medium: cib: Create valid notification control messages
    + Medium: cib: Indicate where the remote connection came from
    + Medium: cib: Send password prompt to stderr so that stdout can be redirected
    + Medium: extra: Add the daemon parameter to the controld metadata
    + Medium: fencing: Re-engineer the stonith daemon to support RHCS agents
    + Medium: tools: Make crm_mon functional with remote connections
    + Medium: xml: Bug bnc#552713 - Treat node unames as text fields not IDs
    + Medium: xml: Bug lf#2215 - Create an always-true expression for empty rules when upgrading from 0.6


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.0-1
changelog:
  - Related: rhbz#543948
  - Update the tarball from upstream to version 07ab245be519
    + High: crmd: Always connect to stonith
    + High: crmd: Ensure batch-limit is correctly enforced
    + High: crmd: Ensure we have the latest status after a transition abort
    + High: Fencing: Overhaul the fencing daemon
    + High: PE: Bug lf#2153 - non-clones shouldn't restart when clones stop/start on other nodes - improved
    + Medium: PE: Allow resource sets to be reused between ordering and colocation constraints
    + Medium: PE: Implement serializing order constraints that dont cause restarts or inhibit migration
    + Medium: PE: Include node attributes for the node to be fenced
    + Medium: PE: Make crm_simulate a full replacement for ptest
    + Medium: PE: Only complain about target-role=master for non m/s resources
    + Medium: PE: Prevent non-multistate resources from being promoted through target-role
    + Medium: PE: Simplify the rsc_order syntax - don't make funky inferences based on score
    + Medium: PE: Support serialized sets of resources
    + Medium: Tools: Bug lf#2286 - Allow the shell to accept template parameters on the command line
    + Medium: Tools: Bug lf#2307 - Provide a way to determin the nodeid of past cluster members
    + Medium: Tools: crm: add update method to template apply (LF 2289)
    + Medium: Tools: crm: direct RA interface for stonith class resource agents (LF 2270)
    + Medium: Tools: crm: don't remove sets which contain id-ref attribute (LF 2304)
    + Medium: Tools: crm: exclude locations when testing for pathological constraints (LF 2300)
    + Medium: Tools: crm: fix exit code on single shot commands
    + Medium: Tools: crm: fix node delete (LF 2305)
    + Medium: Tools: crm: implement -F (--force) option
    + Medium: Tools: crm: rename status to cibstatus (LF 2236)
    + Medium: Tools: crm: stay in crm if user specified level only (LF 2286)


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.1-1
changelog:
  - Resolves: rhbz#559868
  - Split off the doc package as it has grown quite large
  - Split off the cluster test suite (CTS) so that it can be used by other projects
  - Update the tarball from upstream to version 46e288ab9014
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: Agents: Prevent shell expansion of '*' when there are files in /var/lib/heartbeat/cores/root
    + High: ais: Bug lf#2340 - Force rogue child processes to terminate after waiting 2.5 minutes
    + High: ais: Bug lf#2359 - Default expected votes to 2 inside Corosync/OpenAIS plugin
    + High: ais: Bug lf#2359 - expected-quorum-votes not correctly updated after membership change
    + High: ais: Bug rhbz#525552 - Move non-threadsafe calls to setenv() to after the fork()
    + High: crmd: Bug bnc#578644 - Improve handling of cancelled operations caused by resource cleanup
    + High: crmd: Make sure we wait for fencing to complete before continuing
    + High: crmd: Prevent use-of-NULL when non-DCs get stonith callbacks
    + High: Fencing: Account for stonith_get_info() always returning a pointer to the same static buffer
    + High: Fencing: Bug bnc#577007 - Correctly parse the hostlist output from stonith agents
    + High: Fencing: Correctly parse arg maps and do not return a provider for unknown agents
    + High: fencing: Fix can_fence_host_with_device() logic and improve hostlist output parsing
    + High: PE: Bug lf#2358 - Fix master-master anti-colocation
    + High: PE: Correctly implement optional colocation between primitives and clone resources
    + High: PE: Suppress duplicate ordering constraints to achieve orders of magnitude speed increases for large clusters
    + High: Shell: move scores from resource sets to the constraint element (lf#2331)
    + High: Shell: recovery from bad/outdated help index file
    + Medium: Shell: implement lifetime for rsc migrate and node standby (lf#2353)
    + Medium: Shell: node attributes update in configure (bnc#582767)


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-2
changelog:
  - Do not build on ppc and ppc64.
    Resolves: rhbz#590992
  - Rebase on new upstream release
    + High: ais: Do not count votes from offline nodes and calculate current votes before sending quorum data
    + High: ais: Ensure the list of active processes sent to clients is always up-to-date
    + High: ais: Look for the correct conf variable for turning on file logging
    + High: ais: Use the threadsafe version of getpwnam
    + High: Core: Bug lf#2414 - Prevent use-after-free reported by valgrind when doing xpath based deletions
    + High: Core: fix memory leaks exposed by valgrind
    + High: crmd: Bug 2401 - Improved detection of partially active peers
    + High: crmd: Bug lf#2379 - Ensure the cluster terminates when the PE is not available
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the PE connection after it dies
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the stonith-ng connection
    + High: crmd: Do not allow the target_rc to be misused by resource agents
    + High: crmd: Do not ignore action timeouts based on FSA state
    + High: crmd: Ensure we dont get stuck in S_PENDING if we loose an election to someone that never talks to us again
    + High: crmd: Fix memory leaks exposed by valgrind
    + High: crmd: Remove race condition that could lead to multiple instances of a clone being active on a machine
    + High: crmd: Send erase_status_tag() calls to the local CIB when the DC is fenced, since there is no DC to accept them
    + High: crmd: Use global fencing notifications to prevent secondary fencing operations of the DC
    + High: PE: Bug lf#2317 - Avoid needless restart of primitive depending on a clone
    + High: PE: Bug lf#2361 - Ensure clones observe mandatory ordering constraints if the LHS is unrunnable
    + High: PE: Bug lf#2383 - Combine failcounts for all instances of an anonymous clone on a host
    + High: PE: Bug lf#2384 - Fix intra-set colocation and ordering
    + High: PE: Bug lf#2403 - Enforce mandatory promotion (colocation) constraints
    + High: PE: Bug lf#2412 - Correctly locate clone instances by their prefix
    + High: PE: Don ot be so quick to pull the trigger on nodes that are coming up
    + High: PE: Fix memory leaks exposed by valgrind
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: PE: Rewrite native_merge_weights() to avoid Fix use-after-free
    + High: Shell: always reload status if working with the cluster (bnc#590035)
    + High: Shell: check timeouts also against the default-action-timeout property
    + High: Shell: Default to using the status section from the live CIB (bnc#592762)
    + High: Shell: edit multiple meta_attributes sets in resource management (lf#2315)
    + High: Shell: enable comments (lf#2221)
    + High: Tools: crm_mon - fix memory leaks exposed by valgrind


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-3
changelog:
  - Resolves: rhbz#590667
  - Rebase on new upstream release
    + High: Core: Bug lf#2401 - Backed out changeset 6e6980376f01


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-5
changelog:
  - Resolves: rhbz#594296 - rpmdiff checks
    + Remove legacy scripts
    + Add missing man pages
    + Fix sub-package version requires


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-6
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: cib: Also free query result for xpath operations that return more than one hit
    + High: cib: Fix the application of unversioned diffs
    + High: Core: Correctly unpack HA_Messages containing multiple entries with the same name
    + High: Core: Resolve coverity RESOURCE_LEAK defects
    + High: crmd: All nodes should see status updates, not just he DC
    + High: crmd: Allow non-DC nodes to clear failcounts too
    + High: crmd: Base DC election on process relative uptime
    + High: crmd: Make sure the membership cache is accurate after a sucessful fencing operation
    + High: crmd: Make sure we always poke the FSA after a transition to clear any TE_HALT actions
    + High: crmd: Prevent segmentation fault
    + High: PE: Avoid creating invalid ordering constraints for probes that are not needed
    + High: PE: Bug lf#1959 - Fail unmanaged resources should not prevent other services from shutting down
    + High: PE: Bug lf#2422 - Ordering dependencies on partially active groups not observed properly
    + High: PE: Bug lf#2424 - Use notify oepration definition if it exists in the configuration
    + High: PE: Bug lf#2433 - No services should be stopped until probes finish
    + High: PE: Correctly detect when there is a real failcount that expired and needs to be cleared
    + High: PE: Correctly handle pseudo action creation
    + High: PE: Fix colocation for interleaved clones
    + High: PE: Fix colocation with partially active groups
    + High: PE: Fix potential use-after-free defect from coverity
    + High: PE: Fix use-after-free in order_actions() reported by valgrind
    + High: PE: Prevent endless loop when looking for operation definitions in the configuration
    + High: stonith: Correctly parse pcmk_host_list parameters that appear on a single line
    + High: tools: crm_simulate - Resolve coverity USE_AFTER_FREE defect


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-7
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: ais: Use service slot 10 to avoid conflicting with cman


author: Andrew Beekhof <andrew@beekhof.net> 1.1.4-1
changelog:
  - Resolves: rhbz#668466
  - Update tarball to upstream version: 3ac6ac993d6d
    + Performance improvements for larger clusters
    + Miscellaneous bug fixes


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-1
changelog:
  - Fix rpmlint warnings
  - Rebase on new upstream release
    See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details
    + Bugs lf#2445, lf#2493, lf#2508, lf#2518, lf#2527, lf#2544,
           lf#2545, lf#2550, lf#2551, lf#2554, lf#2558, bnc#665131
  - Resolves: rhbz#676286 - Add per device 'diag' option to pacemaker stonith action


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-2
changelog:
  - Fix cman integration
  - Resolves: rhbz#684838 - Correctly notify fenced of a successful fencing event
  - Resolves: rhbz#684825 - Ensure Pacemaker uses the most recent membership/quorum information


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-6
changelog:
  - Update tarball to upstream version: b933cbea41b5
  - Resolves: rhbz#708797
  - Resolves: rhbz#451848
  - Resolves: rhbz#708722
  - Resolves: rhbz#720136


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.6-1
changelog:
  - Update tarball to upstream version: a02c0f1
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/a12de08...a02c0f1
  - Do not build in support for snmp, esmtp by default
  - Create a package for cluster unaware libraries to minimze our footprint
    on non-cluster nodes
  - Better subpackage descriptions
  - Resolves: rhbz#743175


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-1
changelog:
  - Update tarball to upstream version: 148fccf
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/148fccf...a12de08
  - Add libqb-devel as a build dependancy
  - Resolves: rhbz#782255 rhbz#754216 rhbz#729035
  - Related:  rhbz#790627


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-2
changelog:
  - Update patch level to upstream version: c26e624
  - Resolves: rhbz#720214 rhbz#720218 rhbz#754216 rhbz#789397
    For full details, see:
      https://github.com/ClusterLabs/pacemaker/compare/c26e624...148fccf


author: David Vossel <dvossel@redhat.com> - 1.1.7-3
changelog:
  - Add libqb-devel as a dependancy of pacemaker-libs-devel
  - Medium: PE: Report resources as active in correct data about resource location
    Resolves:  rhbz#799070
  - Low: Tools: Bug rhbz#801351 - Fix crm_report help text
    Resolves: rhbz#801351


author: David Vossel <dvossel@redhat.com> - 1.1.7-5
changelog:
  - Use default value for HB_DAEMON_DIR define when clusterglue does not provide one.
    Resolves: rhbz#808557


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-1
changelog:
  - Rebuild for upstream 1.1.8 release
  - Resolves: rhbz#816875

  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

    + New IPC implementation from libqb
    + New logging implementation from libqb
    + Quieter - info, debug and trace logs are no longer sent to syslog
    + Dropped dependancy on cluster-glue
    + Config and core directories no longer located in heartbeat directories
    + Support for managing systemd services
    + Rewritten local resource management daemon
    + Version bumps for every shared library due to API cleanups
    + Removes crm shell, install/use pcs shell and GUI instead


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested
    + Warn about node names containing a capital letter
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-4
changelog:
  - Resolves: rhbz#816875
  - Update to upstream db9410b

    + Cluster: Detect node name collisions in corosync
    + Cluster: Strip domains from node names by default
    + Core: Prevent ordering changes when applying xml diffs
    + Fencing: On failure, only try a topology device once from the remote level.
    + Fencing: Retry stonith device for duration of action's timeout period.
    + Fencing: Support 'on_target' option in fencing device metadata for forcing unfence on target node
    + mcp: Re-attach to existing pacemaker components when mcp fails
    + pengine: Bug cl#5101 - Ensure stop order is preserved for partially active groups
    + pengine: Bug cl#5111 - When clone/master child rsc has on-fail=stop, insure all children stop on failure.
    + pengine: Correctly unpack active anonymous clones
    + pengine: Support a 'requires' resource meta-attribute for controlling whether it needs quorum, fencing or nothing
    + pengine: Support resources that require unfencing before start


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-5
changelog:
  - Resolves: rhbz#877364
  - Update to upstream e69dfc1

    + attrd: Correctly handle deletion of non-existant attributes
    + cib: Do not pass local variables to mainloop_add_fd() when creating remote connections
    + Cluster: Do not strip the domain from node names calculated from uname(2)
    + Core: Supply the correct number of arguments for the format string
    + corosync: Avoid errors when closing failed connections
    + fencing: Automatically append 'nodeid' to fencing agent args if it is detected agent supports 'nodeid' parameter
    + mcp: chmod the correct directory instead of /var/run
    + pengine: Prevent double-free for cloned primitive from template


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-6
changelog:
  - Resolves: rhbz#877364
  - Update to upstream d20d06f

    + cib: Avoid use-after-free by correctly support cib_no_children for non-xpath queries
    + cib: Remove text nodes from cib replace operations
    + Cluster: Preserve corosync membership state when matching node name/id entries
    + cman: Do not wait for unmanaged resources during shutdown
    + cman: Ensure reliable shutdown
    + cman: Ignore qdisk 'nodes'
    + Core: Prevent use-of_NULL in IPC code
    + corosync: Ensure peer state is preserved when matching names to nodeids
    + crmd: Avoid filling the ipc queue with data we don't need
    + crmd: Prevent election storms caused by getrusage() values being too close
    + Fencing: Correctly terminate when all device options have been exhausted
    + Fencing: Record delegated self-fencing operations in case they fail
    + legacy: Re-enable logging from the pacemaker plugin
    + pengine: Bug rhbz#880249 - Ensure orphan masters are demoted before being stopped
    + pengine: Bug rhbz#880249 - Teach the PE how to recover masters into primitives
    + pengine: Ensure previous migrations are completed before attempting another one
    + tools: crm_report - Fix node list detection


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-7
changelog:
  - Resolves: rhbz#880249
  - Update to upstream ca7bf5e

    + Fencing: Only try peers for non-topology based operations once
    + tools: Have crm_resource generate a valid transition key when sending resource commands to the crmd


author: Andrew Beekhof <andrew@beekhof.net> 1.1.10-1
changelog:
  - Update source tarball to revision: Pacemaker-1.1.10
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

  - Resolves: rhbz#891766
  - Resolves: rhbz#902407
  - Resolves: rhbz#908450
  - Resolves: rhbz#913093
  - Resolves: rhbz#951340
  - Resolves: rhbz#951371
  - Related: rhbz#987355


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-3
changelog:
  + Fix: pengine: Do not restart resources that depend on unmanaged resources
    + Fix: crmd: Prevent recurring monitors being cancelled due to notify operations


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-4
changelog:
  + Fix: crmd: Prevent crash by passing log arguments in the correct order
    + Fix: pengine: Do not re-allocate clone instances that are blocked in the Stopped state
    + Fix: pengine: Do not allow colocation with blocked clone instances


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-5
changelog:
  + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-7
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996850
    + Fix: crm_report: Collect corosync quorum data
      Resolves: rhbz#989292


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-8
changelog:
  + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
      Resolves: rhbz#997346


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-9
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  - Remove unsupported resource agent
      Resolves: rhbz#1005678
  - Provide a meaningful error if --master is used for primitives and groups


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: cman: Do not start pacemaker if cman startup fails
    + Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996850


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-12
changelog:
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
      Resolves: rhbz#1011618
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
      Resolves: rhbz#902407
  - Fix: crm_resource: Observe --master modifier for --move
      Resolves: rhbz#902407


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-14
changelog:
  - Log: crmd: Supply arguments in the correct order
      Resolves: rhbz#996850
  - Fix: Invalid formatting of log message causes crash
      Resolves: rhbz#996850


author: David Vossel <dvossel@redhat.com> - 1.1.10-15
changelog:
  - Fix: Removes unnecessary newlines in crm_resource -O output
      Resolves: rhbz#1038155
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
      Resolves: rhbz#1046131
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1046131


author: David Vossel <dvossel@redhat.com> - 1.1.10-16
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078954


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-1
changelog:
  - Update to upstream release 1.1.12-rc3
  - The CIB has O(2) better performance and updates are applied with greater reliablity
  - Transient attributes are now recorded in a truely atomic manner
  - Supports fencing agents that need the host to be unfenced at startup
  - CIB ACLs have been reimplemented and are now enabled 
  - Various bugs squashed

  - Resolves: rhbz#1020210 rhbz#1036631 rhbz#1069279
  - Resolves: rhbz#1069795 rhbz#1071995


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-2
changelog:
  - Bug rhbz#1054307 - cname pattern match should be more restrictive in init script
      Resolves: rhbz#1054307


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-3
changelog:
  - Fix: crmd: avoid double free caused by nested hash table removal
  - Fix: ignore SIGPIPE with gnutls is in use
  - Fix: cib: cl#5222 - Prevent assert in xml_calculate_changes() on performing cib operations
      Resolves: rhbz#1071995


author: David Vossel <dvossel@redhat.com> - 1.1.12-5
changelog:
  - Properly clear shutdown transient attribute after node leaves
    membership.

    Resolves: rhbz#1198638


author: David Vossel <dvossel@redhat.com> - 1.1.12-6
changelog:
  - Fixes invalid free in attrd
  - Fixes crm_mon -E option for external script.
  - Fixes acl read-only access role assignment.

    Resolves: rhbz#1205292
    Resolves: rhbz#1208896
    Resolves: rhbz#1207621


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-7
changelog:
  - Ensure relevant components clear cache entries are cleared when peers leave the cluster

    Resolves: rhbz#1193499


author: David Vossel <dvossel@redhat.com> - 1.1.12-8
changelog:
  - Reduce log severity for style upgrade notice.
   - Properly export pacemaker related sysconfig variables
   - Remove warning during yum update of pacemaker packages.

    Resolves: rhbz#1163982
    Resolves: rhbz#1177821
    Resolves: rhbz#1210291


author: Klaus Wenninger <kwenning@redhat.com> - 1.1.14-1.0
changelog:
  - Update to upstream release 1.1.14
   - added README_RGManager_porting to document replacement of
       ccs2cib, ccs_flatten & disable_rgmanager
   - added patchset (0100-0111) from master to implement graceful
       stop of pacemaker_remote
   - require minimum-version 0.17.0 of libqb

    Resolves: rhbz#1193499
    Resolves: rhbz#1195500
    Resolves: rhbz#1200853
    Resolves: rhbz#1215809
    Resolves: rhbz#1219103
    Resolves: rhbz#1235316
    Resolves: rhbz#1246490
    Resolves: rhbz#1246563
    Resolves: rhbz#1252206
    Resolves: rhbz#1257333
    Resolves: rhbz#1275223
    Resolves: rhbz#1287535
    Resolves: rhbz#1297564


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.14-3
changelog:
  - prevent crmd crash after unexpected Pacemaker Remote connection takeover
   - ensure package URL is displayed correctly

    Resolves: rhbz#1252206


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.%{version}, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group %group syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - update internal db4 to 4.5.20 version
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add select-context option to pam_selinux (#213812)
  - autoreconf won't work with autoconf-2.61 as configure.in is not yet adjusted
    for it


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-8
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)
  - update gmo files as we patch some po files (#218271)
  - add use_current_range option to pam_selinux (#220487)
  - improve the role selection in pam_selinux
  - remove shortcut on Password: in ja locale (#218271)
  - revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.0-1
changelog:
  - upgrade to new upstream version
  - drop pam_stack module as it is obsolete
  - some changes to silence rpmlint


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-1
changelog:
  - upgrade to new upstream version resolving CVE-2007-0003
  - pam_namespace: unmount poly dir for override users


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-3
changelog:
  - correctly relabel tty in the default case (#229542)
  - pam_unix: cleanup of bigcrypt support
  - pam_unix: allow modification of '*' passwords to root


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-4
changelog:
  - pam_console: always decrement use count (#230823)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)
  - we don't patch any po files anymore


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-5
changelog:
  - pam_selinux: improve context change auditing (#234781)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-6
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)
  - pam_namespace: add support for temporary logons (#241226)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-3
changelog:
  - updated db4 to 4.6.18 (#249740)
  - added user and new instance parameters to namespace init
  - document the new features of pam_namespace
  - do not log an audit error when uid != 0 (#249870)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-5
changelog:
  - most devices are now handled by HAL and not pam_console (patch by davidz)
  - license tag fix
  - multifunction scanner device support (#251468)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-6
changelog:
  - do not ask for blank password when SELinux confined (#254044)
  - initialize homedirs in namespace init script (original patch by dwalsh)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-9
changelog:
  - do not preserve contexts when copying skel and other namespace.init
    fixes (#298941)
  - do not free memory sent to putenv (#231698)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-17
changelog:
  - test for setkeycreatecon correctly
  - add exclusive login mode of operation to pam_selinux_permit (original
    patch by Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-1
changelog:
  - new upstream release
  - add default soft limit for nproc of 1024 to prevent
    accidental fork bombs (#432903)


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-2
changelog:
  - if shadow is readable for an user do not prevent him from
    authenticating any user with unix_chkpwd (#433459)
  - call audit from unix_chkpwd when appropriate


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-4
changelog:
  - pam_namespace: fix problem with level polyinst (#438264)
  - pam_namespace: improve override checking for umount
  - pam_selinux: fix syslogging a context after free() (#438338)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-4
changelog:
  - pam_namespace: allow safe creation of directories owned by user (#437116)
  - pam_unix: fix multiple error prompts on password change (#443872)


author: Tomas Mraz <tmraz@redhat.com> 1.0.2-1
changelog:
  - pam_loginuid: uids are unsigned (#460241)
  - new minor upstream release
  - use external db4
  - drop tests for not pulling in libpthread (as NPTL should
    be safe)


author: Tomas Mraz <tmraz@redhat.com> 1.0.2-2
changelog:
  - new password quality checks in pam_cracklib
  - report failed logins from btmp in pam_lastlog
  - allow larger groups in modutil functions
  - fix leaked file descriptor in pam_tally


author: Tomas Mraz <tmraz@redhat.com> 1.0.90-4
changelog:
  - fix parsing of config files containing non-ASCII characters
  - fix CVE-2009-0579 (mininimum days for password change ignored) (#487216)
  - pam_access: improve handling of hostname resolution


author: Tomas Mraz <tmraz@redhat.com> 1.0.91-6
changelog:
  - add password-auth, fingerprint-auth, and smartcard-auth
    for applications which can use them namely gdm (#494874)
    patch by Ray Strode


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-5
changelog:
  - do not change permissions with pam_console_apply
  - drop obsolete pam_tally module and the faillog file (#461258)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-7
changelog:
  - pam_console: fix memory corruption when executing handlers (patch by
    Stas Sergeev) and a few more fixes in the handler execution code (#532302)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-5
changelog:
  - fix insecure dropping of priviledges in pam_xauth, pam_env,
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-6
changelog:
  - do not overwrite /var/log/tallylog on package update (#614766)
  - add support for uid and gid ranges in limits.conf (#622847)
  - add new pam_faillock module (#644971)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-7
changelog:
  - fix a few memory leaks in error paths and other mistakes
    found by a code review
  - add rhost and tty to auditing data in modules (#677664)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-12
changelog:
  - add character sequence test to pam_cracklib
  - drop unused difignore option from pam_cracklib (#811243)
  - add enforce_for_root option to pam_cracklib (#588893)
  - mention limits.d in the limits.conf(5) manpage (#723297)
  - add ability to lock out inactive accounts to pam_lastlog
  - fix require_selinux option in pam_namespace (#750601)
  - add mntopts flag for tmpfs polyinstantiation method
  - preserve authtok_type in pam_get_authtok() (#811168)
  - fix username mismatch in pam_unix remember feature (#815516)
  - relax restriction of root in pam_pwhistory
  - relax soft nproc limit for root in 90-nproc.conf


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-22
changelog:
  - pam_tally2: added no_lockf_timeout option, do not use it
  - pam_tally2: added debug option
  - pam_tally2: do not create the log file as executable (#1186361)
  - add manpage symlink for environment(5) (#1110258)
  - pam_group: add support for Development/Debug syntax (#1114220)


author: Juan Antonio Martinez <jonsito at teleline.es 0:0.5-1
changelog:
  - upgrade to 0.5beta1 version
  - BuildRequires now complains compilation of html manual from xml file


author: Juan Antonio Martinez <jonsito at teleline.es 0:0.5.2-0
changelog:
  - Updated to 0.5.2 release
  - Changed /etc/pkcs11 for /etc/pam_pkcs11
  - Changed /usr/share/pkcs11_login for /usr/share/pam_pkcs11
  - Next item is change package name to pam_pkcs11


author: Robert Relyea <rrelyea at redhat.com> 0.5.3-6
changelog:
  - Include the login token in the environment
  - Conditionally turn on OCSP
  - Treat uninitialized tokens as not present.


author: Ray Strode <rstrode@redhat.com> 0.5.3-7
changelog:
  - add new wait_for_card option that stalls auth process
    until a card is inserted
  - if the user is reauthenticating (already logged in, but
    say unlocking the screen) then only treat the token the
    user logged in with as a valid authentication token
  - clean up "smart card" word.  Before we had a mix of 
    "smartcard", "Smart Card", "SmartCard", and "smart card" 
    i think.
  - only say "Please insert your smart card." instead of
    "Please insert your Smart Card or enter username" if 
    username based login isn't allowed.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-13
changelog:
  - Fix the default mapping order.
  - Make ocsp support controlled by a config entry.
  - Fix login crash
  - revert to explicit paths until we can fix 'login' and 'authconfig'


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-15
changelog:
  - add l10n support
  - correct mapper order.
  - login should allow SSL Client Auth certs rather than restricting to Email
    Signing certs.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-17
changelog:
  - restrict reauthentication to the token used in the inital login.
  - don't require reauthentication apps to log into a token if the user
    didn't initally log into the token.
  - handle the case where we have more than one token.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-19
changelog:
  - Fix problem where pin was not being passed in the pam password variable
    correctly. Needed for Kerberos PKInit


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-20
changelog:
  - Use pam_syslog rather than syslog (patch by Tmraz).
  - Signal to the user that change password is not supported by pam_pkcs11.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-21
changelog:
  - update password supported patch.
  - fix bug where the user and smart card prompt was coming up in login after
    the username had been entered.
  - use pam_ignore for the case where we always want to drop to the other
    pam_modules.
  - add environment variables for the certificate used to authenticate.


author: Bob Relyea <rrelyea@redhat.com> - 0.6.2-1
changelog:
  - Pick up the latest pam_pkcs11 from upstream

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-11.1
changelog:
  - Silence expected errors from the console
  - make sure change log has correct dates and email
    Resolves: #654460, #586149


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-13
changelog:
  - If the ssl part is specified for ldap, default to ldaps unless
    otherwise specified in the .conf file


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-14
changelog:
  - Handle PKCS #11 modules when NSS or pam_pkcs11 only specify a partial path
  - Fix coverity issues (found in 7.0 coverity scan)


author: Martin Hicks <mort@sgi.com> - 3.0.1-2
changelog:
  - Remove IB dependencies.  The Infiniband PMDA is being moved to
    a stand-alone package.
  - Move cluster PMDA to a stand-alone package.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.5-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Fix security flaws: CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 (BZ 848629)


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.6-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Introduces new python-pcp and pcp-testsuite sub-packages.


author: Nathan Scott <nathans@redhat.com> - 3.6.9-1
changelog:
  - Update to latest PCP sources.
  - Fix pmcd sigsegv in NUMA/CPU indom setup (BZ 858384)
  - Fix sar2pcp uninitialised perl variable warning (BZ 859117)
  - Fix pcp.py and pmcollectl with older python versions (BZ 852234)


author: Nathan Scott <nathans@redhat.com> - 3.6.10-1
changelog:
  - Update to latest PCP sources.
  - Resolve tmpfile security flaws: CVE-2012-5530
  - Introduces new "pcp" user account for all daemons to use.


author: Nathan Scott <nathans@redhat.com> - 3.6.10-2
changelog:
  - Ensure tmpfile directories created in %files section.
  - Resolve tmpfile create/teardown race conditions.


author: Nathan Scott <nathans@redhat.com> - 3.8.0-1
changelog:
  - Update to latest PCP sources.
  - Validate metric names passed into pmiAddMetric (BZ 958019)
  - Install log directories with correct ownership (BZ 960858)


author: Nathan Scott <nathans@redhat.com> - 3.8.1-1
changelog:
  - Update to latest PCP sources.
  - Fix log import silently dropping >1024 metrics (BZ 968210)
  - Move some commonly used tools on the usual PATH (BZ 967709)
  - Improve pmatop handling of missing proc metrics (BZ 963085)
  - Stop out-of-order records corrupting import logs (BZ 958745)


author: Nathan Scott <nathans@redhat.com> - 3.8.2-1
changelog:
  - Update to latest PCP sources.
  - Integrate gluster related stats with PCP (BZ 969348)
  - Fix for iostat2pcp not parsing iostat output (BZ 981545)
  - Start pmlogger with usable config by default (BZ 953759)
  - Fix pmatop failing to start, gives stacktrace (BZ 963085)


author: Nathan Scott <nathans@redhat.com> - 3.8.3-1
changelog:
  - Default to Unix domain socket (authenticated) local connections.
  - Introduces new pcp-pmda-infiniband sub-package.
  - Disable systemtap-sdt-devel usage on ppc.


author: Nathan Scott <nathans@redhat.com> - 3.8.4-1
changelog:
  - Very minor release containing mostly QA related changes.
  - Enables many more metrics to be logged for Linux hosts.


author: Nathan Scott <nathans@redhat.com> - 3.8.6-1
changelog:
  - Update to latest PCP sources.
  - Rework pmpost test which confused virus checkers (BZ 1024850)
  - Tackle pmatop reporting issues via alternate metrics (BZ 998735)


author: Nathan Scott <nathans@redhat.com> - 3.8.9-1
changelog:
  - Reduce set of exported symbols from DSO PMDAs (BZ 1025694)
  - Symbol-versioning for PCP shared libraries (BZ 1037771)
  - Fix pmcd/Avahi interaction with multiple ports (BZ 1035513)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.0-1
changelog:
  - Create new sub-packages for pcp-webapi and pcp-manager
  - Split configuration from pcp-libs into pcp-conf (multilib)
  - Fix pmdagluster to handle more volumes, fileops (BZ 1066544)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.9.2-1
changelog:
  - Improve pmdarpm(1) concurrency complications (BZ 1044297)
  - Fix pmconfig(1) shell output string quoting (BZ 1085401)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-1
changelog:
  - Merged pcp-gui and pcp-doc packages into core PCP.
  - Allow for conditional libmicrohttpd builds in spec file.
  - Adopt slow-start capability in systemd PMDA (BZ 1073658)
  - Resolve pmcollectl network/disk mis-reporting (BZ 1097095)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-3
changelog:
  - Backport PCP daemon signal handling fixes (BZ 847343).
  - Resolve potential signed integer overflow (ET rpmdiff 97915).
  - Update spec to ensure tutorial files live in pcp-doc package.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-1
changelog:
  - Update to latest PCP sources again (BZ 1158681).
  - Fixes bug in s390x /proc/cpuinfo parsing (BZ 1196540).
  - Added explicit PAPI 5.1.1 build dependencies (BZ 1188045).
  - Improved diagnostics for chkconfig-driven service (BZ 1131022).
  - New sub-package for pcp-import-ganglia2pcp.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-2
changelog:
  - Resolve PAPI build dependency issues again (BZ 1188045).
  - Fix Avahi-related pmwebd memory corruption (BZ 1199052).
  - Resolve QA test case failures (BZ 1198031 & BZ 1198981).


author: Nathan Scott <nathans@redhat.com> - 3.10.3-3
changelog:
  - Fix postfix pmda failing to setgid to postfix user (BZ 1213724).
  - Fix postfix pmda not reporting incoming mails (BZ 1213764).
  - Consistent naming for tools related to LVM cache (BZ 1218007).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Resolve local_sock() double free error (BZ 1258846).
  - Resolve netfilter pmda uses outdated /proc API (BZ 1221653).
  - Update to latest PCP sources (BZ 1248272).
  - Fix pmatop attribute error (BZ 1195429).
  - Fix pmwebd fails when monitoring systems with Vector (BZ 1238863).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-3
changelog:
  - Correct papi version we link against (BZ 1295694)
  - Fix possible overflow with pmdaproc using local context options (BZ 1295801)
  - Dropped pcp-compat package from upstream (BZ 1294390)


author: Lukas Berk <lberk@redhat.com> - 3.10.9-4
changelog:
  - Correct interrupts parsing on s390x platforms (BZ 1297822)
  - Correct papi version we link against for 32 bit arches (BZ 1295694)


author: Lukas Berk <lberk@redhat.com> 3.10.9-6
changelog:
  - Update pmdanamed testcaes (BZ 1303005)
  - Fix possible fd leak in pmdanamed (BZ 1223311)
  - Fix issue with pmdagfs2 installation (BZ 1305939)
  - Address testcase 370 failure on non x86_64 archs (BZ 1305940)
  - Address endian issue with pmdalinux on some platforms (BZ 1298722)


author: Chris Feist <cfeist@redhat.com> - 0.9.26-6
changelog:
  - Added additional specific steps for configuring pcs on Red Hat Enterprise
    Linux 6
  - Resolves: rhbz#878682


author: Chris Feist <cfeist@redhat.com> - 0.9.26-9
changelog:
  - pcs now allows assigning constraints to group/clone/multistate resources
  - pcs no longer deletes resources from the lrm during resource removal
  - Resolves: rhbz#894174 rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.26-10
changelog:
  - Removed one extra place where pcs incorrectly deleted resources from the lrm
  - Resolves: rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.73-1
changelog:
  - Cluster name is now viewable on RHEL 6
  - Cluster.conf is now removed on destroy
  - Misc man page & usage updates
  - When removing the last resource from a group, remove any constraints still
    remaining on group


author: Chris Feist <cfeist@redhat.com> - 0.9.74-1
changelog:
  - pcs cluster edit should now work properly
  - Allow removal of group and resources inside group with
    pcs resource delete <group name>


author: Chris Feist <cfeist@redhat.com> - 0.9.75-1
changelog:
  - Removing a resource that is part of a resource set is now allowed
  - When you try to remove a group from a master that has more than one
    resource you now recieve a helpful error
  - Unclone works on clones where constraints have been added
  - Removing a group with constraints now works properly
  - Master/Slave groups now have constraints properly removed before being
    deleted


author: Chris Feist <cfeist@redhat.com> - 0.9.76-1
changelog:
  - Renamed resource group remove/delete to ungroup
  - Fixed moving resource masters
  - Allow cloing/mastering last resource in a group


author: Chris Feist <cfeist@redhat.com> - 0.9.77-1
changelog:
  - Fixed managing/unmanaging groups/clones/masters of resources
  - Fixed issue when using --group when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.78-1
changelog:
  - Fixed error codes and stdout/stderr output on errors from pcs resource
    enable/disable
  - Automatically add interval to operations which don't specify an interval


author: Chris Feist <cfeist@redhat.com> - 0.9.79-1
changelog:
  - Fixed OCF_CHECK_LEVEL operation setting in resource update
  - Return proper error codes when stopping/starting/enable/disabling resources
  - Return proper error code on auth


author: Chris Feist <cfeist@redhat.com> - 0.9.80-1
changelog:
  - More fixes for OCF_CHECK_LEVEL issues
  - Fix traceback when adding a resourcew with a provider that doesn't exist
  - Create proper two_node cluster when only two nodes are specified in cluster
    setup
  - Give useful error when bad options are used with 'op'


author: Chris Feist <cfeist@redhat.com> - 0.9.81-1
changelog:
  - Fix issues when updating resource with multiple operations with the same
    action
  - Fixed constraint rules and improved usage documentation


author: Chris Feist <cfeist@redhat.com> - 0.9.82-1
changelog:
  - Show constraint id when printing out location rules
  - Improve error messages when adding location rules with errors
  - Add ability to remove constraint rules
  - Allow move of master/slave resources if --master is present


author: Chris Feist <cfeist@redhat.com> - 0.9.87-1
changelog:
  - Allow two ordering constraints with same resources
  - Improved error messages when trying to master/clone resources
  - Updated error message when attempting to move a master/slave without
    --master


author: Chris Feist <cfeist@redhat.com> - 0.9.88-1
changelog:
  - Don't allow order/colocation constraints created for master primitives
  - Check in clones for stonith resources
  - Clarify 'constraint rule add' in man page/usage
  - Fixed minor usage issue with colocation sets


author: Chris Feist <cfeist@redhat.com> - 0.9.89-1
changelog:
  - Show location constraint role in pcs status/constraint
  - Disable resource before removing
  - Misc man/usage fixes


author: Chris Feist <cfeist@redhat.com> - 0.9.90-1
changelog:
  - Add ability to set node attributes
  - Fix issue setting meta attributes on a master when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.101-1
changelog:
  - Rebase for new features
  - Added ability to set uidgid in cluster.conf
  - Stonith level add now properly recognizes nodes
  - Resolves: rhbz#1025053 rhbz#1019410


author: Chris Feist <cfeist@redhat.com> - 0.9.101-3
changelog:
  - When creating a resource using --group/--clone/--master put the group
    inside the master/clone/group before putting it into the live CIB
  - Resolves: rhbz#1066927


author: Chris Feist <cfeist@redhat.com> - 0.9.118-2
changelog:
  - Re-synced to upstream sources
  - Fixed dependency on rubygems
  - Fixed pam long timeouts due to fprintd
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.120-2
changelog:
  - Use /usr/sbin/pcs for pcs instead of /sbin/pcs
  - Use Open4 instead of POpen4 for running commands
  - Fixed cluster setup for RHEL6
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.121-1
changelog:
  - Don't try to get metadata for fence_check, fence_tool & fence_node
  - Cloned M/S groups can now be deleted
  - Clone options can now follow --clone
  - Cloned resources with globally-unique=true can now be deleted
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.123-3
changelog:
  - Added ability to upgrade cluster cib and we auto upgrade cib if we're running
    an acl command (except show or help)
  - Resolves: rhbz#1112727


author: Chris Feist <cfeist@redhat.com> - 0.9.123-4
changelog:
  - Fixed resource delete for clones of groups with more than one resource
  - Fixed unclone of group so all resources are removed
  - Resolves: rhbz#1107612 rhbz#1108778


author: Chris Feist <cfeist@redhat.com> - 0.9.123-6
changelog:
  - Fixed issue with sync cluster.conf & adding uid/gid across cluster on RHEL6 w/ pcsd
  - Resolves: rhbz#1102836


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.138-1
changelog:
  - Rebased to latest upstream packages
  - Fixed creating default resource operations
  - Added support for RRP and corosync options for cman based clusters
  - Allowed scope=configuration in cib commands
  - Added support for configuring a cluster remotely using pcsd
  - Fixed globally-unique clone resources in pcsd
  - Added resource location to resources / stonith devices list
  - Fixed formatting of resource / fence agent description
  - Fence agent description now contains information about the agent
  - Parallelized cluster start and cluster stop
  - Added warning when nodes stop will cause a loss of the quorum
  - pcs status --full now displays Node attributes and Migration summary
  - Resolves: rhbz#1185738 rhbz#1031141 rhbz#1121769 rhbz#1126835 rhbz#1160359 rhbz#1168986 rhbz#1174244 rhbz#1174793 rhbz#1174798 rhbz#1174801 rhbz#1184763 rhbz#1184922


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.139-1
changelog:
  - Rebased to latest upstream packages
  - Fixed constraints removal and node standby/unstandby using remote GUI
  - Fixed displaying of fence / resource agent metadata in GUI
  - Added Pacemaker Resource defaults and Op defaults to 'pcs config' output
  - Fixed 'pcs resource clear' used on cloned group
  - Added support for scope option in cib commands
  - Added warning when creating a cluster with UDPU transport
  - Reload cluster.conf after node addition / removal
  - Resolves: rhbz#1185738 rhbz#1168982 rhbz#1174793 rhbz#1187488 rhbz#1190167 rhbz#1190168 rhbz#1191898 rhbz#1193433


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.145-1
changelog:
  - Rebased to latest upstream packages
  - Added a warning to "pcs cluster setup" when a node is already in a cluster
  - Fixes in help text and man page
  - Rubygems built with RELRO
  - Added option to put a node into maintenance mode
  - Ungrouping the last resource from a cloned group no longer produces an invalid CIB
  - Removing a resource from a group no longer removes constraints referencing that group
  - Fixed session and cookies processing
  - Fixed command injection vulnerability
  - Added support for exporting cluster configuration to a list of pcs commands using clufter
  - Added automatic removal of old config file backups
  - Fixed removing a fence device from fence levels on deleting the device
  - Resolves: rhbz#1260021 rhbz#1190732 rhbz#1203802 rhbz#1230368 rhbz#1242158 rhbz#1243744 rhbz#1245721 rhbz#1247883 rhbz#1247979 rhbz#1253288 rhbz#1253292 rhbz#1264795 rhbz#1273391 rhbz#1275254


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.146-1
changelog:
  - Rebased to latest upstream packages
  - Rubygems built with RELRO
  - Resolves: rhbz#1260021 rhbz#1242158


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.148-1
changelog:
  - Rebased to latest upstream packages
  - Fixed crashes on one-node clusters
  - Resolves: rhbz#1260021 rhbz#1283627


author: Ivan Devat <idevat@redhat.com> - 0.9.148-2
changelog:
  - Moved DISABLED_GUI option to /etc/sysconfig/pcsd
  - Added backend support for new cluster properties form in web UI
  - Fixed multilib .pyc/.pyo issue
  - Resolves: rhbz#1297782 rhbz#1298163


author: Ivan Devat <idevat@redhat.com> - 0.9.148-3
changelog:
  - Fixed updating cluster properties from older version of web UI
  - Fixed syntax error in utilization attributes functions
  - Resolves: rhbz#1298163
  - Related: rhbz#1260021


author: Doug Ledford <dledford@redhat.com> - 1.2-11
changelog:
  - Upstream has updated the tarball without updating the version, so we
    grabbed the one from the OFED-1.3.2-20080728.0355 tarball
  - Resolves: bz451481


author: Doug Ledford <dledford@redhat.com> - 1.2-13.el5
changelog:
  - Update to ofed 1.4.1 final bits
  - Rebuild against non-XRC libibverbs
  - Related: bz506097, bz506258


author: Doug Ledford <dledford@redhat.com> - 1.3.0-1
changelog:
  - Update to latest upstream release (1.2.3 -> 1.3.0)
  - Strip rocee related code out of upstream update
  - Add a buildrequires on libibumad because upstream needs it now
  - Fix lack of build on i686
  - Related: bz725016
  - Resolves: bz724896


author: Doug Ledford <dledford@redhat.com> - 1.3.0-2
changelog:
  - Update to latest upstream release
  - No longer strip rocee related code out, we can compile with it now
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 2.0-1
changelog:
  - Update to latest upstream release
  - We had to drop ib_clock_test program as no equivalent exists
    in the latest release
  - Resolves: bz806183, bz806185, bz830099


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Fix rpmdiff detected error.  Upstream overrode our cflags so stack
    protector got turned off.
  - Related: bz806183


author: Michal Schmidt <mschmidt@redhat.com> - 3.0-2.0.16.gb2f2e82
changelog:
  - Respect distro CFLAGS, restore fortification.
  - debuginfo package had executable source files.
  - Related: bz1127235, bz1129312


author: Robin Norwood <rnorwood@redhat.com> - 1.12-1
changelog:
  - Update to latest upstream version: 1.12
  - Fix license tag
  - Add BuildRequires for ExtUtils::MakeMaker and Test::Simple
  - Fix package review issues:
  - Source URL
  - Resolves: bz#226264


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to latest upstream version: 1.15
  - Add buildreq and req for perl(Net::LibIDN) to avoid croaking when trying to
    verify an international name against a certificate


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26 (verify_hostname_of_cert matched only the prefix for the
    hostname when no wildcard was given, e.g. www.example.org matched against a
    certificate with name www.exam in it [#509819])


author: Paul Howarth <paul@city-fan.org> - 1.27-1
changelog:
  - Update to 1.27
    - various regex fixes for i18n and service names
    - fix warnings from perl -w (CPAN RT#48131)
    - improve handling of errors from Net::ssl_write_all


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30 (fix memleak when SSL handshake failed)
  - Add buildreq procps needed for memleak test


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.25-0.fdr.4
changelog:
  - Rename to perl-Net-SSLeay, provide perl-Net_SSLeay for compatibility
    with the rest of the world.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.26-0.fdr.1
changelog:
  - Update to unofficial 1.26 from Peter Behroozi, adds get1_session(),
    enables session caching with IO::Socket::SSL (bug 1859, bug 1860).
  - Bring outdated test14 up to date (bug 1859, test suite still not enabled).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.30-2
changelog:
  - CVE-2005-0106: patch from Mandriva
    http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:023


author: Paul Howarth <paul@city-fan.org> - 1.32-1
changelog:
  - update to 1.32, incorporate new upstream URLs
  - cosmetic spec changes suiting new maintainer's preferences
  - fix argument order for find with -depth
  - remove patch for CVE-2005-0106, fixed upstream in 1.30 (#191351)
    (http://rt.cpan.org/Public/Bug/Display.html?id=19218)
  - remove test patch, no longer needed
  - re-encode Credits as UTF-8
  - include TODO as %doc
  - add buildreqs perl(Array::Compare), perl(MIME::Base64), perl(Sub::Uplevel),
    perl(Test::Exception), perl(Test::NoWarnings), perl(Test::Pod),
    perl(Test::Warn), perl(Tree::DAG_Node)
  - add patch needed to disable testsuite non-interactively
  - run test suite but disable external tests by default; external tests can be
    enabled by using rpmbuild --with externaltests
  - add patch to change hosts connected to in external tests


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - update to 1.35
  - drop flag and patch for enabling/disabling external tests - patch now upstream
  - external hosts patch no longer needed as we don't do external tests
  - filter out unversioned provide for perl(Net::SSLeay)
  - use the distro openssl flags rather than guessing them


author: Paul Howarth <paul@city-fan.org> - 1.35-7
changelog:
  - update to svn trunk (rev 252), needed due to omission of MD2 functionality
    from OpenSSL 1.0.0 (CPAN RT#48916)


author: Robin Norwood <rnorwood@redhat.com> - 5.808-1
changelog:
  - Update to latest CPAN version
  - Re-enable tests.  We'll see if they work now
  - Move Requires filter into spec file
  - Add Provides filter for unnecessary unversioned provides


author: Robin Norwood <rnorwood@redhat.com> - 5.808-4
changelog:
  - Fix various issues from package review:
  - Fix tabs and spacing
  - Remove unneeded BR: perl
  - convert non-utf-8 files to utf-8
  - Resolves: bz#226268


author: Marcela Mašláňová <mmaslano@redhat.com> 5.816-1
changelog:
  - update to 5.816
  - fix #465855 - install --aliases by default
  - use upstream patch for previous problem (see rt 38736)


author: Petr Pisar <ppisar@redhat.com> - 5.833-3
changelog:
  - Implement hostname verification that is disabled by default. You can install
    IO::Socket::SSL Perl module and set PERL_LWP_SSL_VERIFY_HOSTNAME=1
    enviroment variable (or modify your application to set ssl_opts option
    correctly) to enable the verification. See LWP::UserAgent POD for more
    details. (bug #745800)


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Joe Orton <jorton@redhat.com> - 5.3.3-1
changelog:
  - update to 5.3.3 (#645591)
  - add security fixes for CVE-2010-3709, CVE-2010-3710,
    CVE-2010-3870, CVE-2009-5016 (#651953)
  - prevent extract() cloberring $GLOBALS (#655118)
  - ensure correct mysql_config is used in biarch builds


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.3.3-6
changelog:
  - merge Joe's changes:
  - improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740732)


author: Joe Orton <jorton@redhat.com> - 5.3.3-11
changelog:
  - add security fixes for CVE-2012-0781, CVE-2011-4153, CVE-2012-0057,
    CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix permission on source files (#676364)
  - fix negative keys with var_export (#771738)
  - fix setDate when DateTime created from timestamp (#812819)
  - add php(language) and missing provides (#837042)
  - use arch-specific requires (#833545)
  - fix possible buffer overflow in pdo_odbc (#836264)
  - fix possible segfault in pdo_mysql (#824199)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-16
changelog:
  - fix stream support in fileinfo (#858653)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-29
changelog:
  - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
    extension not provided or git binary patches (#1064027)
  - odbc: fix incompatible pointer type (#1053982)
  - mysqli: fix possible segfault in mysqli_stmt::bind_result
    php bug 66762 (#1069167)
  - mysql: fix php_mysql_fetch_hash writes long value into int
    php bug 52636 (#1054953)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-31
changelog:
  - soap: fixRFC2616 transgression (#1045019)
  - fix static calling in non-static method (#953786)
  - fix autoload called from closing session (#954027)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-34
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Jan Kaluza <jkaluza@redhat.com> - 5.3.3-35
changelog:
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480


author: Remi Collet <rcollet@redhat.com> - 5.3.3-36
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.3.3-37
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-38
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-39
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-41
changelog:
  - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
  - core: fix use-after-free in unserialize CVE-2015-2787
  - exif: fix free on unitialized pointer CVE-2015-0232
  - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
  - date: fix use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.3.3-43
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4026, #1213407
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: more fix type confusion through unserialize #1222538


author: Remi Collet <rcollet@redhat.com> - 5.3.3-47
changelog:
  - fix wrong warning in openssl_encrypt() for missing IV
    when IV is not required #1260315
  - fix segfault's when you try and allocate an SplFixedArray
    with size >= 9999 #1071344
  - segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
  - add options to enable TLS in curl #1255920
  - fix segfault in gc_collect_cycles #1122681


author: Joe Orton <jorton@redhat.com> 1:1.4.9-2
changelog:
  - update to 1.4.9 (thanks to Remi Collet, #183359)
  - package /usr/share/pear/.pkgxml (#190252)
  - update to XML_RPC-1.4.8
  - bundle the v3.0 LICENSE file


author: Joe Orton <jorton@redhat.com> 1:1.4.11-3
changelog:
  - use BuildArch not BuildArchitectures (#226925)
  - fix to use preferred BuildRoot (#226925)
  - strip more buildroot-relative paths from *.reg
  - force correct gpg path in default pear.conf


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.6.2-1
changelog:
  - update to 1.6.2
  - remove patches merged upstream
  - Fix : "pear install" hangs on non default channel (#283401)


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be %{_sysconfdir}/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Joe Orton <jorton@redhat.com> - 1:1.9.4-1
changelog:
  - update to 1.9.4 (#651897)
  - update XML_RPC to 1.5.4, Structures_Graph to 1.0.4, Archive_Tar to 1.3.7


author: Remi Collet <rcollet@redhat.com> - 1:1.9.4-5
changelog:
  - fix unexpanded RPM macro in triggerpostun #1018131
  - define date.timezone in pear/pecl commands #1040839
  - define %php_metadir macro #953810
  - fix incorrect handling of backslashes in file names #1216952


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-1
changelog:
  - update to 0.26.0
  - patch to add missing emms instructions
  - reenable iwmmxt since configure should now detect if it can't built


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-2
changelog:
  - Add experimental patch to use OpenMP
    If this causes your X server to misbehave, please file bugs.


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Added component versioning comments
  -   Updated JSS from "4.2.6-10" to "4.2.6-12"
  -   Modified installation section to preserve timestamps
  -   Removed sectional comments


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-3
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Removed empty "pre" from "pki-ca"
  -   Consolidated directory ownership
  -   Corrected file ownership within subpackages
  -   Removed all versioning from NSS and NSPR packages


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Allow 'pki-native-tools' to be installed independently of 'pki-setup'
  - Removed explicit 'pki-setup' requirement from 'pki-ca'
    (since it already requires 'pki-common')
  - 'pki-setup'
  -     Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group
  -     Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP
        and TKS.
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*,
        pkicreate fails Fedora 14 and above
  -     Bugzilla Bug #23346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-symkey'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-native-tools'
  -     template change
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-util'
  -     Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical
        cannot be set to true
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and
        CS interface
  -     Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse
        ASN.1 encoding/decoding is broken
  -     Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #223319 - Certificate Status inconsistency between token
        db and CA
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-java-tools'
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to
        5000 bytes
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-common'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable
        started before configuration completed
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5
        policy mappings (seem hardcoded)
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #548699 - subCA's admin certificate should be generated by
        itself
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile
        caAgentServerCert (null cert_request)
  -     Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited
        number of times
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #629677 - TPS: token enrollment fails.
  -     Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN
        in a SCEP request
  -     Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection
        pools not reliable - improve connections or discovery
  -     Bugzilla Bug #629769 - password decryption logs plain text password
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #607380 - CC: Make sure Java Console can configure all
        security relevant config items
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #489342 -
        com.netscape.cms.servlet.common.CMCOutputTemplate.java
        doesn't support EC
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated
        for SCEP signing and encryption.
  -     Bugzilla Bug #223336 - ECC: unable to clone a ECC CA
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #223313 - should do random generated IV param
        for symmetric keys
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #648757 - expose and use updated cert verification
        function in JSS
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing
        e.c. support
  -     Bugzilla Bug #651040 - cloning shoud not include sslserver
  -     Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to
        CS.cfg files imcomplete when the cert is stored on a hsm
  -     Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . .
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #642359 - CC Feature - need to verify certificate when it
        is added
  -     Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires
        auditing
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an
        error to TPS even if certificate in question is already revoked.
  -     Bugzilla Bug #663546 - Disable the functionalities that are not exposed
        in the console
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #642741 - CS build uses deprecated functions
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  - 'pki-selinux'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer -
        selinux changes
  - 'pki-ca'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of
        CC interface doc review
  -     Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with
        admin privilege throws error "You are not authorized to perform this
        operation".
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws
        'Internal Server Error'.
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA
        release -- DRM and TKS do not seem to have CRL checking enabled
  -     Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help
        correctly set up CC environment
  -     Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in
        certificates (RFC 4262)
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object
        signing support in RHCS
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke
        certs in TPS
  -     Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature 
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #223346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key
        usage
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-silent'
  -     Bugzilla Bug #627309 - pkisilent subca configuration fails.
  -     Bugzilla Bug #640091 - pkisilent panels need to match with changed java
        subsystems
  -     Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM
        Clone.
  -     Bugzilla Bug #643053 - pkisilent DRM configuration fails
  -     Bugzilla Bug #583754 - pki-silent needs an option to configure signing
        algorithm for CA certificates
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module
        Panel up to before Security Domain Panel
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #588323 - Failed to enable cipher 0xc001
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves,
        signing algorithm
  -     Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords
        with special characters
  -     Bugzilla Bug #642741 - CS build uses deprecated functions


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-2
changelog:
  - 'pki-symkey'
  -     Bugzilla Bug #671265 - pki-symkey jar version incorrect
  - 'pki-common'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-3
changelog:
  - Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files
    in /var/run and /var/lock


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes
  - 'pki-setup'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  - 'pki-common'
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment"
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection
        error.
  -     Bugzilla Bug #504056 - Completed SCEP requests are assigned to the
        "begin" state instead of "complete".
  -     Bugzilla Bug #504055 - SCEP requests are not properly populated
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment" -
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  -     Bugzilla Bug #672920 - CA console: adding policy to a profile throws
        'Duplicate policy' error in some cases.
  -     Bugzilla Bug #673199 - init script returns control before web apps have
        started
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #504013 - sscep request is rejected due to authentication
        error if submitted through one time pin router certificate enrollment.
  -     Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing
        information
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-silent'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - 'pki-common'
  -     Bugzilla Bug #674894 - ipactl restart : an annoy output line
  -     Bugzilla Bug #675179 - ipactl restart : an annoy output line


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - 'pki-common'
  -     Bugzilla Bug #676051 - IPA installation failing - Fails to create CA
        instance
  -     Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
        instance


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-3
changelog:
  - Resolves #676873 - Rebase pki-core again to pick the latest features and fixes
  -     Resolves #676048 - Installation within IPA hangs, r1846
  -     Resolves #679173 - uninitialized variable warnings from Perl, r1860
  -     Resolves #679174 - netstat loop fixes needed, r1862
  -     Resolves #679580 - Velocity fails to load all dependent classes, r1864


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-8
changelog:
  - Resolves 645097 
  - Resolves #683172 - pkisilent needs to provide option to set
    nsDS5ReplicaTransportInfo to TLS in replication agreements
    when creating a clone, r1886


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-10
changelog:
  - Resolves #688251 - Dogtag installation under IPA takes too much
    time - SELinux policy compilation, r1908


author: Ade Lee <alee@redhat.com> 9.0.3-12
changelog:
  - Resolves #689909 - Dogtag installation under IPA takes too much
    time - remove the inefficient sleeps, r2097


author: Ade Lee <alee@redhat.com> 9.0.3-13
changelog:
  - Resolves #698796: Race conditions during IPA installation, r2103 (alee)
  - Resolves #708075 - Clone installation does not work over NAT, r2104 (alee)
  - Resolves #726785 - If replication fails while setting up a clone it 
    will wait forever, r2106 (alee)
  - Resolves #691076 - pkiremove removes the registry entry for all instances
    on a machine, r2112 (mharmsen)
  - Resolves #693835 - /var/log/tomcat6/catalina.out owned by pkiuser, r2118
    (mharmsen)
  - Resolves #729126 - Increase default validity from 6mo to 2yrs in IPA
    profile, r2125 (awnuk)
  - Resolves #728651 - CS8 64 bit pkicreate script uses wrong library name
    for, r2126 (mharmsen)
  - Resolves #700522 - pki tomcat6 instances currently running unconfined,
    r2128 (alee)


author: Ade Lee <alee@redhat.com> 9.0.3-14
changelog:
  - Resolves #700522 - pki tomcat6 instances currently running unconfined, 
    allow server to come up when selinux disabled, r2149


author: Ade Lee <alee@redhat.com> 9.0.3-21
changelog:
  - Resolves #771790 - sslget does not work after FEDORA-2011-17400 update,
    breaking FreeIPA install (fixed in Git repo)


author: Ade Lee <alee@redhat.com> 9.0.3-23
changelog:
  - Resolves #769388 - pki-silent does not properly escape command-line arguments
    (fixed in Git repo)


author: Ade Lee <alee@redhat.com> 9.0.3-26
changelog:
  - Resolves #844459 - Increase audit cert renewal range to 2 years (mharmsen)
  - Resolves #841663 - serial number incorrectly cast from BigInt to integer in
    installation wizard (mharmsen)
  - Resolves #858864 - create/ identify a mechanism for clients to determine that
    the pki subsystem is up (alee)


author: Ade Lee <alee@redhat.com> 9.0.3-27
changelog:
  - Resolves #867640 - ipa-replica-install Configuration of CA failed
    by REVERTING #819111 - Non-existent container breaks replication


author: Ade Lee <alee@redhat.com> 9.0.3-31
changelog:
  - Resolves #887305 - /var/run/pki/ca has wrong selinux context
  - Resolves #895702 - pki-cad restart avc denial


author: Ade Lee <alee@redhat.com> 9.0.3-32
changelog:
  - Resolves #999055 - AVC denials during ipa server and replica installs
  - Resolves #998715 - Package Sanity Test Failures


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-33
changelog:
  - Resolves #1051382 - IPA Replica installation fails when using an external CA
  - Test patch to filter out invalid XML and provide additional debugging
    information
  - Resolves #1083170 - Prevent LDAP Attributes from being affected by Locale
  - Resolves #1096142 - IPA replica setup fails during CA setup with
                        "unable to parse xml"
  - Resolves #1061442 - RFE - ipa-server should keep backup of CS.cfg
  - Resolves #1055080 - Giant /var/log/pki-ca/debug


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-39
changelog:
  - Resolves #1144608 - pki-core failed to build with cmake-2.8.12.2-4.el6
  - Resolves #1037248 - pki-core FTBFS if "-Werror=format-security" flag is used
  - Resolves #1243 - Outdated selinux-policy dependency in Dogtag 9


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-40
changelog:
  - Resolves #1171848 - IPA - port 9443 (pki-core) is vulnerable to SSLv3 POODLE
    (based upon upstream changes provided by cfu and alee)


author: Jack Magne <jmagne@redhat.com> 9.0.3-42
changelog:
  - Resolves #1221900 - pki-core: cross-site scripting flaw in the dogtag administration page (port 9180, port 9444) [rhel-6.7]


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-43
changelog:
  - Resolves #1225589 - unable to create rhel 7.1 replica from rhel 6 replica CA because subsystem user does not exist


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-44
changelog:
  - Resolves #1256039 - Fixed missing subsystem user on external CA case.
  - Removed unused backup files (.p*) generated by the patches.


author: Ade Lee <alee@redhat.com> 9.0.3-48
changelog:
  - Resolves #1306989 - Crash seen with pki-common pkg during IPA server install
  - Resolves #1290535 - Check for incompatible Java at startup
  - Resolves #1313207 - ca.subsystem.certreq missing from CS.cfg


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v 
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local; 
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with 
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
          * Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to 
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user 
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol. 
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
     	  semodule_* utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package 
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs 
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  	  * audit2allow: process MAC_POLICY_LOAD events
  	  * newrole:  run shell with - prefix to start a login shell
  	  * po:  po file updates
  	  * restorecond:  bail if SELinux not enabled
  	  * fixfiles: omit -q 
  	  * genhomedircon:  fix exit code if non-root
  	  * semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan. 
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly 
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it 
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
  	* Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
  	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
  	* Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
  	* Fixed newrole non-pam build.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
  	* Merged new audit2allow from Karl MacMillan.
  	  This audit2allow depends on the new sepolgen python module.
  	  Note that you must run the sepolgen-ifgen tool to generate
  	  the data needed by audit2allow to generate refpolicy. 
  	* Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
  	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
  	* Merged seobject exception handler fix from Caleb Case.
  	* Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
  	* Merged translations update from Dan Walsh.
  	* Merged chcat fixes from Dan Walsh.
  	* Merged man page fixes from Dan Walsh.
  	* Merged seobject prefix validity checking from Dan Walsh.
  	* Merged Makefile and refparser.py patch from Dan Walsh.
  	  Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
  	* Merged newrole O_NONBLOCK fix from Linda Knippers.
  	* Merged sepolgen and audit2allow patches to leave generated files 
  	  in the current directory from Karl MacMillan.
  	* Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
  	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
  	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
  	* Merged patch to update PLY from Karl MacMillan.
  	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
  	* Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
  	* Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
  	* Merged better matching for refpolicy style from Karl MacMillan
  	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
  	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
  	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
  	* Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
  	* Merged updates to sepolgen-ifgen from Karl MacMillan.
  	* Merged updates to sepolgen parser and tools from Karl MacMillan.
  	  This includes improved debugging support, handling of interface 
  	  calls with list parameters, support for role transition rules,
  	  updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
  	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
  	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
  	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
  	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
  	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
  	* Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
  	* Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged setfiles -c usage fix from Dan Walsh.
  	* Merged restorecon fix from Yuichi Nakamura.
  	* Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
  	* Fix genhomedircon searching for USER from Todd Miller
  	* Install run_init with mode 0755 from Dan Walsh.
  	* Fix chcat from Dan Walsh.
  	* Fix fixfiles pattern expansion and error reporting from Dan Walsh.	
  	* Optimize genhomedircon to compile regexes once from Dan Walsh.
  	* Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
  	* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
  	* Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
  	* Update semodule man page for -D from Dan Walsh.
  	* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
  	* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
  	* Fix semodule option handling from Dan Walsh.
  	* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
  	* Drop verbose output on fixfiles -C from Dan Walsh.
  	* Fix argument handling in fixfiles from Dan Walsh.
  	* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
  	* Update Makefile to not build restorecond if
  	  /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
  	* Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
  	* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
  	* Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
  	* Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
  	* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
  	* Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
  	* Make semodule_expand use sepol_set_expand_consume_base to reduce
  	  peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
  	* Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
  	* Update audit2allow to report dontaudit cases from Dan Walsh.
  	* Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk> 
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add 	rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
  	* Remove security_check_context calls for prefix validation from semanage.
  	* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
  	* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
  	* Add support for boolean files and group support for seusers from Dan Walsh.
  	* Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
  	* fixfiles will now remove all files in /tmp and will check for
  	  unlabeled_t in /tmp and /var/tmp from Dan Walsh.
  	* add glob support to restorecond from Dan Walsh.
  	* allow semanage to handle multi-line commands in a single transaction
  	  from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
  	* Allow local file context entries to override policy entries in
  	semanage from Dan Walsh.
  	* Newrole error message corrections from Dan Walsh.
  	* Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
  	* chcat: cut categories at arbitrary point (25) from Dan Walsh
  	* semodule: use new interfaces in libsemanage for compressed files
  	  from Dan Walsh
  	* audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
  	* Add btrfs to fixfiles from Dan Walsh.
  	* Remove restorecond error for matching globs with multiple hard links
   	  and fix some error messages from Dan Walsh.
  	* Make removing a non-existant module a warning rather than an error
  	  from Dan Walsh.
  	* Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
  	* Fix transaction checking from Dan Walsh.
  	* Make fixfiles -R (for rpm) recursive.
  	* Make semanage permissive clean up after itself from Dan Walsh.
  	* add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
  	* Keep setfiles from spamming console from Dan Walsh.
  	* Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
  	* Modify setfiles to exclude mounts without seclabel option in
  	/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
  	* Re-enable disable_dontaudit rules upon semodule -B from Christopher
  	Pardy and Dan Walsh.
  	* setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
  	* Modify restorecon to only call realpath() on user-supplied pathnames
  	from Stephen Smalley.
  	* Fix typo in fixfiles that prevented it from relabeling btrfs 
  	  filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
  	* Modify setfiles/restorecon checking of exclude paths.  Only check
  	user-supplied exclude paths (not automatically generated ones based on
  	lack of seclabel support), don't require them to be directories, and
  	ignore permission denied errors on them (it is ok to exclude a path to
  	which the caller lacks permission).


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
          * Add semanage dontaudit to turn off dontaudits from Dan Walsh.
          * Fix semanage to set correct mode for setrans file from Dan Walsh.
          * Fix malformed dictionary in portRecord from Dan Walsh.
  	* Restore symlink handling support to restorecon based on a patch by
  	Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
  	udev scripts that was broken by policycoreutils 2.0.70.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
  	* Change semodule upgrade behavior to install even if the module
  	  is not present from Dan Walsh.
  	* Make setfiles label if selinux is disabled and a seclabel aware
  	  kernel is running from Caleb Case.
  	* Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
  	* Remove setrans management from semanage, as it does not work
  	  from Dan Walsh.
  	* Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
  	* Fixed bug preventing semanage node -a from working
  	  from Chad Sellers
  	* Fixed bug preventing semanage fcontext -l from working
  	  from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
  	* Remove non-working OUTFILE from fixfiles from Dan Walsh.
  	* Additional exception handling in chcat from Dan Walsh.

  	* fix sepolgen to read a "type 1403" msg as a policy load by Stephen
  	  Smalley <sds@tycho.nsa.gov>
  	* Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox 
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
  	* Add since-last-boot option to audit2allow from Dan Walsh.
  	* Fix sepolgen output to match what Chris expects for upstream
  	  refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond 
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19
changelog:
  - Fix sandbox -H and -T regression
  Resolves: #626404
  - Fix fcontext translation handling in system-config-selinux


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.9
changelog:
  - selinux-polgengui should not blow up on disabled SELinux system
  Resolves: #695288
  CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare
  Resolves: #679690
  check return value of getpwuid()
  Fix semanage module -D' traceback
  Resolves: #666861 
  sandbox -- AttributeError: 'module' object has no attribute 'chcon' 	
  Resolves: #690502 	
  system-config-selinux could not open interface info 	
  Resolves: #696809
  Mv sandbox.conf.5.gz to sandbox.5.gz and put in base package
  Resolves: #690744 
  sestatus usage message not complete (missing -b option) 	
  Resolves: #705027
  correct package name in the -sandbox subpackage description 	
  Resolves: #679798
  dracut attempts to load_policy with SELinux=disabled 	
  Resolves: #659076
  Resolves: #658532
  8 options are not described in semanage man page 	
  Resolves: #677541
  Mention "semanage module" in semanage man page 	 
  Resolves: #677542
  Update translations
  Allow polcycoreutils-gui and tools to run on disabled SELinux systems
  Resolves: #695288 
  Resolves: #689153


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.10
changelog:
  - Fix policycoreutils-sandbox description
  - Change sepolgen-ifgen to search all available policy files
  - Fix portspage in system-config-selinux to not crash
  - fix to sandbox 
    - Fix seunshare to use more secure handling of /tmp
      - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
     - Change to allow sandbox to run on nfs homedirs, add start python script
     - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
     - Move seunshare to sandbox package
     - Fix sandbox to show correct types in  usage statement
  Resolves: #679690
  Resolves: #679689
  Resolves: #677541
  Resolves: #679798
  - Fixes for sepologen 
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface
    - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
    - Add sandbox to sepolgen
    - Polgengui raises the wrong type of exception.  #471078
  - Cleanup chcat man page
  - Update translations
  - restorecond fixes
    - Have restorecond watch more directories in homedir
    - Fix restorecond watching utmp file for people logging in our out
    - Exit in restorecond if it can not find a UID in the passwd database

  - Stop fixfiles from complaining about missing dirs

  - Semanage fixes
    - Fix up node handling in semanage command
    - Fix proper handling of getopt errors
    - Do not allow modules names to contain spaces
    - Change semanage to not allow it to semanage module -D
  Resolves: #677542
  - Change setsebool to suggest run as root on failure
  - Don't report error on load_policy when system is disabled.
  - Fix unchecked return value of getpwuid()


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.11
changelog:
  - Remove sandbox calling -k, only should be used by seunshare, should not be
  called all the time.
  Resolves: #679690
  Resolves: #679689
  Resolves: #677541
  Resolves: #679798


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.12
changelog:
  - Back port option handling in semanage to handle semodule module -D correctly
  - Back port manpage from Fedora
  Resolves: #666861


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.13
changelog:
  - Fix spec file to require rsync for sandbox
  Resolves: #734467
  - Fix spec file to require gtkhtml2 for lockdown booleans program
  Resolves: #702860
  - Fix bugs found by Coverity
  Resolves: #717640
  Resolves: #728833


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.15
changelog:
  - Needs require gnome-python2-gtkhtml2 to make system-config-selinux working
  - Not use open_init_pty by default


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.16
changelog:
  - Restorecon should not be exiting with a 1 when it is successful in relabeling a file
  Resolves: #740699
  Resolves: #739587


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.18
changelog:
  - Other fix for semanage man page
  Resolves: #677541
  - Don't report error on load_policy when system is disabled.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.19
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the 
  - parent namesspace.
  - restorecond -u needs to watch terminal for exit if run outside of dbus.
  - Fix unchecked return codes
  Related: #785678


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.22
changelog:
  - Make sure installing po files use -p
  - Fix unchecked return codes
  Resolves: #684015
  - Fix semanage is sending the wrong kind of audit events 
  - Fix Polyinstantiated namespace mount leaking to excluded users 
  Related: #786664 
  - Fix selinux-policy update shows error parsing file obj_perm_s... 
  Related: #786191


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.25
changelog:
  - Make restorecon to return proper exit codes on failure
  Resolves:#824779
  - Fix generated role_types for *.te
  Resolves:#843727


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.27
changelog:
  - Fix restorecond usage
  - Add missing te_stream_rules and if_stream_rules templates
  Resolves:#816460
  - Print a message if no default labels are assigned
  Resolves:#851479


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.28
changelog:
  - Allow to define sock file in /etc directory 
  Resolves:#816460
  - Make output of audit2allow when AVC can be allowed by boolean more readable


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.30
changelog:
  - Fix restorecond init script
  - Make setools.seinfo working only on SELinux enabled systems in seobjet.py
  Resolves:#893065


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.31
changelog:
  - Make setsebool less verbose on errors
  Resolves:#984484
  - Make <<none>> spec working for semanage fcontext
  - Make audit2allow witn o option to append output instead of write


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.33
changelog:
  - Fix semanage
  Resolves:#860506
  - Make semanage man page and help consistent
  - Fix setsebool to give better error message on bad boolean names
  - Add support for exclude dirs in fixfiles
  - Fix semanage boolean to require a value


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.37
changelog:
  - Add workaround to make allow_polyinstantiation=1 directive working for xguest with semanage-booleans
  Resolves:#1008790


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.41
changelog:
  - Allow use sandbox to follow homedirs symlinks
  Resolves:#913175
  - Make sure file equivalance target and source do not end
   with a /
  - Allow make only valid domains as permissive domains
  - Fix polgen.py to allow "_" in a policy file.
  - Implement --noreload option to semanage
  - Add missing long options in sandbox man page


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.42
changelog:
  - Fail properly on invalid options for restorecon/setfiles when using -R or -r
  - Check if all files exist for setfiles and restorecon
  - Remove handling of cgroups from sandbox. 
  Resolves:#1091139
  - Make -q and -d options mutually exclusive


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.43
changelog:
  - Fix semanage man page to contain also noreload option
  Resolves:#1032828
  - Fix sandbox man page
  - Make setfiles more informative if bad option is given


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.46
changelog:
  - Make semanage -i working on empty file
  - Fix setfiles man page
  - Fix setfiles -r option to be working correctly
  Resolves:#1086456


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.47
changelog:
  - Fix setfiles man page
  Resolves:#1086456
  - Fix  semanage fcontext  error message when non-existing context given
  Resolves:#1122023


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-20
changelog:
  - chcat: Change the isSensitivity() detection
  Resolves: rhbz#965397
  - Move sepolgen utility from policycoreutils-gui to policycoreutils-python
  Resolves: rhbz#995778
  - audit2allow: use date time format compatible with ausearch
  Resolves: rhbz#1111999


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-21
changelog:
  - fixfiles verify: do not relabel /tmp and /var/tmp dirs
  Resolves: rhbz#1113083
  - Fix semanage -S <store> -o <output>
  Resolves: rhbz#1122850


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-23
changelog:
  - Move python scripts in /usr/share/system-config-selinux to policycoreutils-python
  Resolves: rhbz#995778


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-26
changelog:
  - restorecond: treat root as a regular user
  Resolves: rhbz#1281877
  - semanage: don't skip reserver_port_t
  Resolves: rhbz#1225806
  - semanage: check if a store exists
  Resolves: rhbz#1208801
  - fixfiles: check the SELinux status
  Resolves: rhbz#1240788


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-27
changelog:
  - sandbox: Improve comments in sysconfig file
  Resolves: rhbz#1159336
  - secon, newrole: fix inconsistence between --help and man page
  Resolves: rhbz#1278811, rhbz#1278913


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct %changelog
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-4
changelog:
  - Fix text selection
  - Add patch poppler-0.12.3-text-selection.patch by Brian Ewins
  - Add patch poppler-0.12.3-text-selection-tables.patch by Marek Kasik
  - Make Provides/Obsoletes versioned
  - Add requirement of poppler-data
  - Resolves: #557812


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-4
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639860


author: Tim Waugh <twaugh@redhat.com> 0.0.1-1
changelog:
  - Default permissions for directories.
  - Initscript should not be marked config.
  - Fixed license tag.
  - Better buildroot tag.


author: Tim Waugh <twaugh@redhat.com> 0.0.1-2
changelog:
  - More consistent use of macros.
  - Build requires xmlto.
  - Don't use %makeinstall.
  - No need to run make check.


author: Tim Waugh <twaugh@redhat.com> 0.0.3-1
changelog:
  - 0.0.3:
    - Allow multiple services to be defined in a single configuration
      file.
    - Allow protocol specifications, e.g. ipp/udp.


author: Tim Waugh <twaugh@redhat.com> 0.0.4-1
changelog:
  - 0.0.4:
    - Fixed initscript so that it will not be reordered to start after
      rpcbind (bug #487250).


author: Tim Waugh <twaugh@redhat.com> 0.0.4-7
changelog:
  - Fix small memory leak and move malloc() check close to call (bug #718176).
  - Requires chkconfig (bug #712362).


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Sync with Fedora devel, including:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Resolves: #552617
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #554431
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Use -N not the obsolete -n in useradd call
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql
  - add sparc/sparc64 to multilib header support


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557297
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html
  Resolves: #565558
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #561010
  - adjust license tag to reflect OSI decision


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593033


author: Tom Lane <tgl@redhat.com> 8.4.4-2
changelog:
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #561010


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812082


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - don't try to load System.map (and spit error messages if it does not
    exist) if ps or top are not going to use it, both to speed things up
    and remove the ugly messages when they don't make sense.
  - in top, print the possible error messages using standard top SHOWMESSAGE
    (because it will be now printed out when already in terminal mode).


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - procps-2.0.7
  - integrated all patches except for signames patch, which is broken
    and unnecessary
  - See NEWS for changes between 2.0.6 and 2.0.7
  - Added patch to correctly install desktop file.  Oops.


author: Alexander Larsson <alexl@redhat.com> 2.0.7-23
changelog:
  - Fix unsigned/signed bug. Closes #60998.
  - Update threadbadhack to correctly propagate process time to the main thread.


author: Alexander Larsson <alexl@redhat.com> 2.0.7-24
changelog:
  - Fix saving of sort, fixes #32757
  - Fix printing size, fixes #48224
  - Fix float decimal point input #58163


author: Colin Walters <walters@redhat.com> 3.2.1-4
changelog:
  - Add little patch to make w/who work when getattr access
    to /proc/<pid> for the user's login process is denied


author: Alan Cox <alan@redhat.com> 3.2.1-6
changelog:
  - Removed broken SELinux patch to w
  - Added a better alternative whereby we get less data but don't fall for
    vanished processes when SELinux is running


author: Karel Zak <kzak@redhat.com> 3.2.3-6
changelog:
  - update FAQ
  - update spec description
  - fix text in .noproc patch
  - fix segv fault if cpu number exceeding 38 (#137159)


author: Karel Zak <kzak@redhat.com> 3.2.5-1
changelog:
  - update to new upstream 3.2.5
  - recreate selinux patch
  - remove errno, slabinfo21 and fullpath patches -- all fixed by upstream


author: Karel Zak <kzak@redhat.com> 3.2.5-4
changelog:
  - fix #144459 - sysctl reports error: unknown error <...> reading key '<key>'
    (now sysctl doesn't read data from write-only /proc/sys files)


author: Karel Zak <kzak@redhat.com> 3.2.5-7
changelog:
  - improve procps-3.2.5-sysctl-writeonly.patch
  - fix #161449 - "top" ignores user and system toprc
  - fix #161559 - top segfaults when resizing console
  - fix #160796 - vmstat crashes when accessing LVM partition
  - fix #161303 - 'top' failed when remove cpus


author: Karel Zak <kzak@redhat.com> 3.2.6-4
changelog:
  - fix #191493 - watch -n doesn't handle large integers properly
  - fix #186017 - top "Cpu0" line never updates on single processor machine
                  (bugfix added to the 'remcpu' patch)
  - fix #168444 - memory usage conflicts with /proc/meminfo
  - fix #174619 - top reports wrong values for CPU(s) in batch mode
  - fix #185299 - cpu steal time support


author: Karel Zak <kzak@redhat.com> 3.2.7-8
changelog:
  - remove zombie patch (needs more investigation)
  - fix #208100 - top command with '-c' option become not to display list of tasks
  - fix #199174 - top returns with exit code 1 even if no error occurs


author: Karel Zak <kzak@redhat.com> 3.2.7-10
changelog:
  - fix #212637 - sysctl using deprecated syscall
  - fix #140975 - top corrupts screen when sorting on first column


author: Karel Zak <kzak@redhat.com> 3.2.7-11
changelog:
  - fix #234546 - 'w' doesn't give correct information about what's being run.
  - fix #228870 - process `sysctl' is using deprecated sysctl
  - cleanup spec file


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-12
changelog:
  - fix #183029 - watch ignores multibyte characters
  - fix #222251 - STIME column can jitter
  - fix array overflow in sysctl


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-17
changelog:
  - fix #185994 - top "Cpu0" line never updates when using
    "Single Cpu = Off" option on single processor machine


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-18
changelog:
  - fix displaying the CPU column as integer (related #354001)
  - don't install slabtop -- there's no /proc/slabinfo


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-21
changelog:
  - rebase patches
  - clear screen in top when switching windows
  - fix #435453 - errors with man -t formatting of ps man page


author: Daniel Novotny <dnovotny@redhat.com> 3.2.7-22
changelog:
  - fix #472783 vmstat -p <partition name> not working
  - extended diskstat parameters to unsigned long to avoid overflow


author: Daniel Novotny <dnovotny@redhat.com> 3.2.7-24
changelog:
  - slabtop -o should display the info once and then exit (RHEL bug #475963)
  - added timestamp to vmstat with new option -t (#476134)


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-4
changelog:
  - fix #554674 -  vmstat command with -n and -m does not display header even once
  - fix #554721 -  procps states a bug is hit when receiving a signal
  - fix #479703 -  [RFE] Additional option for 'top'


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-5
changelog:
  - fix #564371 -  Enhance top to display in MB vs KB
  - fix #565971 -  double free or corruption in ps


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-9
changelog:
  - fix #581547 - add vmstat -w option for wider output
  - fix #583629 - pmap does not display RSS values for a pid
  - fix #583625 - document that usernames exceeding column width are substituted with user ID


author: Jan Görig <jgorig@redhat.com> 3.2.8-15
changelog:
  - fix #622389 - The sysctl command's man page doesn't describe the option -A correctly
  - minor changelog fix


author: Jan Görig <jgorig@redhat.com> 3.2.8-17
changelog:
  - fixed bugs in procps-3.2.7-ps-cgroup.patch and procps-3.2.8-pmap-smaps.patch
  - fixed memory leaks in vmstat
  - Resolves: rhbz#684031


author: Jan Görig <jgorig@redhat.com> 3.2.8-18
changelog:
  - fix #692397 - wrong formatting of ps man page
  - fix #709684 - procps/top SWAP statistics makes no sense
    patch by KOSAKI Motohiro
  - fix #690078 - replace dlopen with build time linking
    - dropped procps-3.2.7-libselinux.patch and procps-3.2.7-ps-libselinux.patch
  - fix #690078 - nullifying variables in procps-3.2.8-pmap-smaps.patch


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-20
changelog:
  - fix #701710 - vmstat does not print out correct free page count on 8TB SGI system
  - Resolves: rhbz#701710


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-21
changelog:
  - fix #736023 - Common realloc mistake: 'screen' nulled but not freed upon failure
  - Resolves: rhbz#736023


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-22
changelog:
  - fix #751475 - top displays incorrect CPU summary the first time with CPULOOP=1
  -   Patch15: procps-3.2.7-top-env-cpuloop.patch altered
  - fix #746997 - top utility can't sort by memory usage in batch mode
  - fix #766792 - No devel headers for procps
  - Resolves: rhbz#751475 rhbz#746997 rhbz#766792


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-23
changelog:
  - fix for #757734 - top: Sorting by memory usage is not documented
  - additionally introduces other missing switches in the top man-page
  - Resolves: rhbz#746997


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-24
changelog:
  - fix for #851664 - vmstat -S M 1' and 'vmstat -S m 1' erronously
  - ... output constant 'si' and 'so' value of 0
  - Resolves: rhbz#851664


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-26
changelog:
  - #1089817 - Return value of pgrep is incorrect
  - #950748 - /lib64/libproc.so package both in procps and procps-devel
  - #1011216 - Backport man page fix of top utility - RES = CODE + DATA
  - #1082877 - top/man: RES - physical memory a task 'has used'->'is using'
  - #1034337 - Include man pages for openproc(), readproc() and readproctab()
  - Resolves: rhbz#1089817 rhbz#950748 rhbz#1011216 rhbz#1082877 rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-27
changelog:
  - #1060681 - ps -p cycles over all PIDs instead of just one
  - #963799 - Should shared memory be accounted in cached in free output?
  - Resolves: rhbz#1060681 rhbz#963799


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-28
changelog:
  - #1105125 - Locale dependent float delay in top and watch utilities
  - #1039013 - Include an API in RHEL to return the number of opened file descriptors for a process
  - Resolves: rhbz#1105125
  - Related: rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-31
changelog:
  - #993072 - Make the "free" command a little more human friendly
  - #1172059 - ps coredump in stat2proc()
  - #1120580 - [RFE] Have sysctl -p read info from /etc/sysctl.d
  - #1123311 - RFE: "w" should have "-n" flag to suppress reverse name resolution of IP addresses
  - #1163404 - [procps] find_elf_note invalid read if setenv has been called before libproc init
  - Resolves: rhbz#993072 rhbz#1172059 rhbz#1120580 rhbz#1123311 rhbz#1163404


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-36
changelog:
  - #1201024 - [RFE] Increase sysctl -p line size limit
  - #1246573 - typo in ps man page
  - #1251101 - Fixing human readable patch (removing trailing spaces)
  - #1284076 - [RFE] Support for thread cgroups
  - #1288208 - use of /proc/self/auxv breaks ps when running as a different euid
  - #1288497 - pmap - no sums computed for RSS and Dirty column
  - Resolves: #1201024 #1246573 #1251101 #1284076 #1288208 #1288497


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.2-1
changelog:
  - interrupts: Add find_by_user_regex
  - process: Always set the "cmdline" array, even if empty
  - pidstats: Remove dead processes in find_by_name()
  - pidstats: Add process class to catch dict references for late parsing
  - pidstats: Move the /proc/PID/{stat,status} parsing to classes
  - pidstats: Introduce process_flags method


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.7-1
changelog:
  - Fix pidstat.process_flag()
  - Introduce pflags utility
  - Parse IRQ affinities for !root
  - Add PF_NO_SETAFFINITY const


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.9-1
changelog:
  - Adds documentations to classes, more work to do on methods
  - Fixes parsing of users in /proc/interrupts users field
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1245677


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 7.18.1-1
changelog:
  - Update to 7.18.1
  - Disable tests because it's not testing the built library, it's trying to
    test an installed library.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 7.18.2-1
changelog:
  - Update to 7.18.2
  - Thanks to Ville Skyttä re-enable the tests and fix a minor problem
    with the setup.py. (Bug # 45400)


author: Karel Klic <kklic@redhat.com> - 7.19.0-6
changelog:
  - Added do_curl_reset-refcount.patch: Fixed reference counting of
    Py_None in reset function
    Resolves: rhbz#624559
  - Added do_curl_reset-reinitialize-handle.patch: Proper
    re-initialization of internal settings in reset function
    Resolves: rhbz#565654


author: Andy Grover <agrover@redhat.com> - 1.9.9-6
changelog:
  - Update based on review comments
    - Fully document steps to build archive
    - Remove commented-out extraneous text
    - Remove a repeat in Requires line
    - Update git-version.patch to have proper sha1
    - Change location of fabric spec files to /var/lib/target
  - Remove unused specs


author: Andy Grover <agrover@redhat.com> - 2.1.fb20-1
changelog:
  - Update to new upstream version
  - Remove patches
    * fix nodeacl-dump.patch
    * retry-target-creation.patch


author: Andy Grover <agrover@redhat.com> - 2.1.fb21-3
changelog:
  - Add patches:
      0003-Fix-dumping-of-PSCSI-storage-objects.patch
      0004-pscsi-Save-udev_path-instead-of-h-c-t-l.patch
      0005-fix-colonize.patch
      0006-Add-support-for-NodeACL-tag.patch
      0007-Fix-up-tag-save-restore.patch
  - Rename existing patches to match naming scheme


author: James Antill <james@fedoraproject.org> 3.0.0-6
changelog:
  - Fix the ftp byterange port problem:
  - Resolves: bug#419241
  - Fixup the progress UI:
  -   add function for total progress
  -   add total progress percentagee current download line
  -   add rate to current download line
  -   use dead space when finished downloading
  -   don't confuse download rate on regets.


author: James Antill <james@fedoraproject.org> 3.0.0-7
changelog:
  - Fix reget's against servers that don't allow Range requests, also tweaks
  - reget == check_timestamp, if anyone/thing uses that.
  - Resolves: bug#435156
  - Fix minor typo in progress for single instance.


author: James Antill <james@fedoraproject.org> 3.0.0-8
changelog:
  - Tweak progress output so it's hopefully less confusing
  - Add dynamic resizing ability to progress bar
  - Resolves: bug#437197


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> 3.9.1-10
changelog:
  - Fix parsing of FTP 213 responses.
  - Resolves: bug#970262
  - Set proper errcode when raising URLGRabError.
  - Resolves: bug#1271242


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.4.el6
changelog:
  - kvm-virtio-Remove-duplicate-macro-definition-for-max.-vi.patch [bz#543825]
  - kvm-virtio-console-qdev-conversion-new-virtio-serial-bus.patch [bz#543825]
  - kvm-virtio-serial-bus-Maintain-guest-and-host-port-open-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-a-port-name-property-for-port-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-support-for-buffering-guest-ou.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-ability-to-hot-unplug-ports.patch [bz#543825]
  - kvm-virtio-serial-Add-a-virtserialport-device-for-generi.patch [bz#543825]
  - kvm-Move-virtio-serial-to-Makefile.hw.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.5.el6
changelog:
  - Remove unneeded/unsupported features: [bz#555336]
    - make default options explicit
    - remove sdl support
    - remove sb16 emulation
    - remove oss support
    - remove curses support
    - disable curl support
    - disable bluez support
    - enable -Werror
    - limit block drivers support
    - add host_cdrom block device
  - Resolves: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.9.el6
changelog:
  - Disable -Werror again, as there are still warnings on the build
  - Related: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.11.el6
changelog:
  - kvm-block-Introduce-BDRV_O_NO_BACKING.patch [bz#556459]
  - kvm-block-Add-bdrv_change_backing_file.patch [bz#556459]
  - kvm-qemu-img-rebase.patch [bz#556459]
  - Resolves: bz#556459
    (RFE - In-place backing file format change)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.12.el6
changelog:
  - kvm-virtio-serial-bus-Remove-guest-buffer-caching-and-th.patch [bz#543825]
  - kvm-virtio-serial-Make-sure-we-don-t-crash-when-host-por.patch [bz#543825]
  - kvm-virtio-serial-Use-MSI-vectors-for-port-virtqueues.patch [bz#543825]
  - kvm-virtio-serial-bus-Match-upstream-whitespace.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.13.el6
changelog:
  - kvm-reduce-number-of-reinjects-on-ACK.patch [bz#557435]
  - kvm-Add-missing-newline-at-the-end-of-options-list.patch [bz#558412]
  - kvm-vnc-Fix-artifacts-in-hextile-decoding.patch [bz#558414]
  - kvm-QMP-Drop-wrong-assert.patch [bz#558415]
  - kvm-vmware_vga-Check-cursor-dimensions-passed-from-guest.patch [bz#558435]
  - kvm-virtio-pci-thinko-fix.patch [bz#558438]
  - kvm-QMP-Don-t-free-async-event-s-data.patch [bz#558465]
  - kvm-vnc_refresh-return-if-vd-timer-is-NULL.patch [bz#558466]
  - kvm-osdep.c-Fix-accept4-fallback.patch [bz#558477]
  - kvm-QMP-Emit-asynchronous-events-on-all-QMP-monitors.patch [bz#558619]
  - kvm-vnc_refresh-calling-vnc_update_client-might-free-vs.patch [bz#558846]
  - Resolves: bz#557435
    (KVM: WIN7-32bit blue screen (IMAGE_NAME:  ntkrnlmp.exe).)
  - Resolves: bz#558412
    (-help output not terminated by newline)
  - Resolves: bz#558414
    (Artifacts in hextile decoding)
  - Resolves: bz#558415
    (Assert triggers on qmp commands returning lists)
  - Resolves: bz#558435
    (vmware-svga buffer overflow copying cursor data)
  - Resolves: bz#558438
    (virtio status bits corrupted if guest deasserts bus mastering bit)
  - Resolves: bz#558465
    (Double-free of qmp async messages)
  - Resolves: bz#558466
    (Possible segfault on vnc client disconnect)
  - Resolves: bz#558477
    (Incorrect handling of EINVAL from accept4())
  - Resolves: bz#558619
    (QMP: Emit asynchronous events on all QMP monitors)
  - Resolves: bz#558846
    (fix use-after-free in vnc code)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.14.el6
changelog:
  - kvm-MCE-Fix-bug-of-IA32_MCG_STATUS-after-system-reset.patch [bz#558416]
  - kvm-Fix-CPU-topology-initialization.patch [bz#558432]
  - kvm-loader-more-ignores-for-rom-intended-to-be-loaded-by.patch [bz#558467]
  - kvm-pc-add-machine-type-for-0.12.patch [bz#558470]
  - kvm-virtio-console-Rename-virtio-serial.c-back-to-virtio.patch [bz#559089]
  - kvm-virtio-serial-bus-Fix-bus-initialisation-and-allow-f.patch [bz#559503]
  - Resolves: bz#558416
    (Machine check exception injected into qemu reinjected after every reset)
  - Resolves: bz#558432
    (CPU topology not taking effect)
  - Resolves: bz#558467
    (roms potentially loaded twice)
  - Resolves: bz#558470
    (Incorrect machine types)
  - Resolves: bz#559089
    (Rename virtio-serial.c to virtio-console.c as is upstream.)
  - Resolves: bz#559503
    (virtio-serial: fix multiple devices intialisation)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.15.el6
changelog:
  - kvm-VNC-Use-enabled-key-instead-of-status.patch [bz#549759]
  - kvm-VNC-Make-auth-key-mandatory.patch [bz#549759]
  - kvm-VNC-Rename-client-s-username-key.patch [bz#549759]
  - kvm-VNC-Add-family-key.patch [bz#549759]
  - kvm-VNC-Cache-client-info-at-connection-time.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_CONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_DISCONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_INITIALIZED-event.patch [bz#549759]
  - kvm-block-avoid-creating-too-large-iovecs-in-multiwrite_.patch [bz#558730]
  - Resolves: bz#549759
    (A QMP event notification on VNC client connect/disconnect events)
  - Resolves: bz#558730
    (qemu may create too large iovecs for the kernel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.17.el6
changelog:
  - kvm-Fix-QEMU_WARN_UNUSED_RESULT.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow2_grow_l1_table.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow_save_vmstate.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-get_cluster_table.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-qcow2_alloc_cluster_offset.patch [bz#560623]
  - kvm-block-Return-original-error-codes-in-bdrv_pread-writ.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-grow_refcount_table.patch [bz#560623]
  - kvm-qcow2-Improve-error-handling-in-update_refcount.patch [bz#560623]
  - kvm-qcow2-Allow-updating-no-refcounts.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-update_refcount-return-value.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-qcow2_alloc_clusters-return-value.patch [bz#560623]
  - kvm-net-Make-inet_strfamily-public.patch [bz#562181]
  - kvm-net-inet_strfamily-Better-unknown-family-report.patch [bz#562181]
  - kvm-vnc-Use-inet_strfamily.patch [bz#562181]
  - Resolves: bz#560623
    (error codes aren't always propagated up through the block layer (e.g. -ENOSPC))
  - Resolves: bz#562181
    (Small VNC related cleanup)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.18.el6
changelog:
  - kvm-roms-minor-fixes-and-cleanups.patch [bz#558818]
  - kvm-fw_cfg-rom-loader-tweaks.patch [bz#558818]
  - kvm-roms-rework-rom-loading-via-fw.patch [bz#558818]
  - kvm-pci-allow-loading-roms-via-fw_cfg.patch [bz#558818]
  - kvm-pc-add-rombar-to-compat-properties-for-pc-0.10-and-p.patch [bz#558818]
  - Resolves: bz#558818
    (rom loading)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.19.el6
changelog:
  - kvm-virtio_blk-Factor-virtio_blk_handle_request-out.patch [bz#560942]
  - kvm-virtio-blk-Fix-restart-after-read-error.patch [bz#560942]
  - kvm-virtio-blk-Fix-error-cases-which-ignored-rerror-werr.patch [bz#560942]
  - Resolves: bz#560942
    (virtio-blk error handling doesn't work reliably)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.20.el6
changelog:
  - kvm-QMP-Add-QEMU-s-version-to-the-greeting-message.patch [bz#557930]
  - kvm-QMP-Introduce-the-qmp_capabilities-command.patch [bz#557930]
  - kvm-QMP-Enforce-capability-negotiation-rules.patch [bz#557930]
  - kvm-QMP-spec-Capability-negotiation-updates.patch [bz#557930]
  - kvm-json-escape-u0000-.-u001F-when-outputting-json.patch [bz#559667]
  - kvm-json-fix-PRId64-on-Win32.patch [bz#563878]
  - kvm-qjson-Improve-debugging.patch [bz#563875]
  - kvm-Monitor-remove-unneeded-checks.patch [bz#563876]
  - kvm-QError-Don-t-abort-on-multiple-faults.patch [bz#559635]
  - kvm-QMP-Don-t-leak-on-connection-close.patch [bz#559645]
  - kvm-QMP-Emit-Basic-events.patch [bz#558623]
  - Resolves: bz#557930
    (QMP: Feature Negotiation support)
  - Resolves: bz#558623
    (QMP: Basic async events are not emitted)
  - Resolves: bz#559635
    (QMP: assertion on multiple faults)
  - Resolves: bz#559645
    (QMP: leak when a QMP connection is closed)
  - Resolves: bz#559667
    (QMP: JSON parser doesn't escape some control chars)
  - Resolves: bz#563875
    (QJSON: Improve debugging)
  - Resolves: bz#563876
    (Monitor: remove unneeded checks)
  - Resolves: bz#563878
    (QJSON: Fix PRId64 handling)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.21.el6
changelog:
  - kvm-net-add-API-to-disable-enable-polling.patch [bz#562958]
  - kvm-virtio-rename-features-guest_features.patch [bz#562958]
  - kvm-qdev-add-bit-property-type.patch [bz#562958]
  - kvm-qdev-fix-thinko-leading-to-guest-crashes.patch [bz#562958]
  - kvm-virtio-add-features-as-qdev-properties-fixup.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.22.el6
changelog:
  - kvm-QMP-BLOCK_IO_ERROR-event-handling.patch [bz#547501]
  - kvm-block-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-ide-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-scsi-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-virtio-blk-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-add-rhel-machine-types.patch [bz#558838]
  - kvm-QMP-Fix-query-balloon-key-change.patch [bz#568739]
  - Resolves: bz#547501
    (RFE: a QMP event notification for disk  I/O errors with werror/rerror flags)
  - Resolves: bz#558838
    (add rhel machine types)
  - Resolves: bz#568739
    (QMP: Fix 'query-balloon' key)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.23.el6
changelog:
  - kvm-ide-device-version-property.patch [bz#558835]
  - kvm-pc-add-driver-version-compat-properties.patch [bz#558835]
  - kvm-qemu-img-Fix-segfault-during-rebase.patch [bz#567602]
  - Resolves: bz#558835
    (ide/scsi drive versions)
  - Resolves: bz#567602
    (qemu-img rebase subcommand got Segmentation fault)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.24.el6
changelog:
  - kvm-path.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-hw-pc.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-slirp-misc.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-savevm.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-bochs.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-Introduce-qemu_write_full.patch [bz#567099]
  - kvm-force-to-test-result-for-qemu_write_full.patch [bz#567099]
  - kvm-block-cow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vmdk.o-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vvfat.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow2.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-net-slirp.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-usb-linux.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-vl.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-monitor.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-linux-user-mmap.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-check-pipe-return-value.patch [bz#567099]
  - kvm-fix-qemu-kvm-_FORTIFY_SOURCE-compilation.patch [bz#567099]
  - kvm-Enable-_FORTIFY_SOURCE-2.patch [bz#567099]
  - kvm-qcow2-Fix-image-creation-regression.patch [bz#567099]
  - kvm-cow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-slirp-check-system-success.patch [bz#567099]
  - kvm-qcow2-return-errno-instead-of-1.patch [bz#567099]
  - kvm-qcow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-make-vmdk_snapshot_create-return-errno.patch [bz#567099]
  - kvm-vmdk-fix-double-free.patch [bz#567099]
  - kvm-vmdk-share-cleanup-code.patch [bz#567099]
  - kvm-block-print-errno-on-error.patch [bz#567099]
  - kvm-documentation-qemu_write_full-don-t-work-with-non-bl.patch [bz#567099]
  - kvm-virtio-serial-pci-Allow-MSI-to-be-disabled.patch [bz#567035]
  - kvm-pc-Add-backward-compatibility-options-for-virtio-ser.patch [bz#567035]
  - kvm-virtio-serial-don-t-set-MULTIPORT-for-1-port-dev.patch [bz#567035]
  - kvm-qdev-Add-a-DEV_NVECTORS_UNSPECIFIED-enum-for-unspeci.patch [bz#567035]
  - kvm-virtio-pci-Use-DEV_NVECTORS_UNSPECIFIED-instead-of-1.patch [bz#567035]
  - kvm-kbd-leds-infrastructure.patch [bz#569767]
  - kvm-kbd-leds-ps-2-kbd.patch [bz#569767]
  - kvm-kbd-leds-usb-kbd.patch [bz#569767]
  - kvm-kbd-keds-vnc.patch [bz#569767]
  - kvm-migration-Clear-fd-also-in-error-cases.patch [bz#570174]
  - Resolves: bz#567035
    (Backport changes for virtio-serial from upstream: disabling MSI, backward compat.)
  - Resolves: bz#567099
    (Allow _FORTIFY_SOURCE=2 & --enable-warning)
  - Resolves: bz#569767
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#570174
    (Restoring a qemu guest from a saved state file using -incoming sometimes fails and hangs)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.25.el6
changelog:
  - kvm-qemu-memory-notifiers.patch [bz#562958]
  - kvm-tap-add-interface-to-get-device-fd.patch [bz#562958]
  - kvm-add-API-to-set-ioeventfd.patch [bz#562958]
  - kvm-notifier-event-notifier-implementation.patch [bz#562958]
  - kvm-virtio-add-notifier-support.patch [bz#562958]
  - kvm-virtio-add-APIs-for-queue-fields.patch [bz#562958]
  - kvm-virtio-add-set_status-callback.patch [bz#562958]
  - kvm-virtio-move-typedef-to-qemu-common.patch [bz#562958]
  - kvm-virtio-pci-fill-in-notifier-support.patch [bz#562958]
  - kvm-vhost-vhost-net-support.patch [bz#562958]
  - kvm-tap-add-vhost-vhostfd-options.patch [bz#562958]
  - kvm-tap-add-API-to-retrieve-vhost-net-header.patch [bz#562958]
  - kvm-virtio-net-vhost-net-support.patch [bz#562958]
  - kvm-qemu-kvm-add-vhost.h-header.patch [bz#562958]
  - kvm-irqfd-support.patch [bz#562958]
  - kvm-msix-add-mask-unmask-notifiers.patch [bz#562958]
  - kvm-virtio-pci-irqfd-support.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.26.el6
changelog:
  - kvm-add-spice-into-the-configure-file.patch [bz#549757]
  - kvm-spice-core-bits.patch [bz#549757]
  - kvm-spice-add-keyboard.patch [bz#549757]
  - kvm-spice-add-mouse.patch [bz#549757]
  - kvm-spice-simple-display.patch [bz#549757]
  - kvm-move-x509-file-name-defines-to-qemu-x509.h.patch [bz#549757]
  - kvm-spice-tls-support.patch [bz#549757]
  - kvm-spice-configure-listening-addr.patch [bz#549757]
  - kvm-spice-add-qxl-device.patch [bz#549757]
  - Resolves: bz#549757
    (Provide SPICE support  / -spice command line argument)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.27.el6
changelog:
  - kvm-spice-add-tablet.patch [bz#574211]
  - kvm-spice-simple-display-wake-spice-server-only-when-idl.patch [bz#574212]
  - kvm-spice-qxl-switch-back-to-vga-mode-on-register-access.patch [bz#574214]
  - kvm-spice-qxl-ring-access-security-fix.patch [bz#568820]
  - kvm-vnc-support-password-expire.patch [bz#525935]
  - kvm-spice-vnc-add-__com.redhat_set_password-monitor-comm.patch [bz#525935]
  - kvm-spice-add-audio-support.patch [bz#574222]
  - kvm-spice-make-image-compression-configurable.patch [bz#574225]
  - kvm-spice-configure-channel-security.patch [bz#574225]
  - kvm-spice-configure-renderer.patch [bz#574225]
  - kvm-spice-send-connect-disconnect-monitor-events.patch [bz#558957]
  - kvm-spice-qxl-update-vga-help-text-indicating-qxl-is-the.patch [bz#574853]
  - kvm-spice-notifying-spice-when-migration-starts-and-ends.patch [bz#574849]
  - kvm-spice-add-__com.redhat_spice_migrate_info-monitor-co.patch [bz#574849]
  - Resolves: bz#525935
    (RFE: expire vnc password)
  - Resolves: bz#558957
    (A QMP event notification on SPICE client connect/disconnect events)
  - Resolves: bz#568820
    (EMBARGOED CVE-2010-0431 qemu: Insufficient guest provided pointers validation [rhel-6.0])
  - Resolves: bz#574211
    (spice: add tablet support)
  - Resolves: bz#574212
    (spice:wake spice server only when idle)
  - Resolves: bz#574214
    (qxl: switch qxl from native into vga mode on vga register access)
  - Resolves: bz#574222
    (spice: add audio support)
  - Resolves: bz#574225
    (spice: add config options)
  - Resolves: bz#574849
    (spice: client migration support)
  - Resolves: bz#574853
    (spice/qxl: add qxl to -vga help text)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.28.el6
changelog:
  - kvm-qcow2-Factor-next_refcount_table_size-out.patch [bz#567940]
  - kvm-qcow2-Rewrite-alloc_refcount_block-grow_refcount_tab.patch [bz#567940]
  - kvm-qcow2-More-checks-for-qemu-img-check.patch [bz#567940]
  - kvm-spice-virtual-machine-channel-replacement-for-remove.patch [bz#576488]
  - Resolves: bz#567940
    (qcow2 corruption with I/O error during refcount block allocation)
  - Resolves: bz#576488
    (Spice: virtio serial based device for guest-spice client communication)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.29.el6
changelog:
  - kvm-scsi-device-version-property.patch [bz#558835]
  - kvm-scsi-disk-fix-buffer-overflow.patch [bz#558835]
  - Resolves: bz#558835
    (ide/scsi drive versions)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.30.el6
changelog:
  - kvm-New-API-for-asynchronous-monitor-commands.patch [bz#574939]
  - kvm-Revert-QMP-Fix-query-balloon-key-change.patch [bz#574939]
  - kvm-virtio-Add-memory-statistics-reporting-to-the-balloo.patch [bz#574939]
  - Resolves: bz#574939
    (Memory statistics support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.31.el6
changelog:
  - kvm-Transparent-Hugepage-Support-3.patch [bz#574525]
  - kvm-monitor-Don-t-check-for-mon_get_cpu-failure.patch [bz#574642]
  - kvm-QError-New-QERR_OPEN_FILE_FAILED.patch [bz#574642]
  - kvm-monitor-convert-do_memory_save-to-QError.patch [bz#574642]
  - kvm-monitor-convert-do_physical_memory_save-to-QError.patch [bz#574642]
  - kvm-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#574642]
  - kvm-monitor-convert-do_cpu_set-to-QObject-QError.patch [bz#574642]
  - kvm-monitor-Use-QERR_INVALID_PARAMETER-instead-of-QERR_I.patch [bz#575800]
  - kvm-Revert-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#575800]
  - kvm-json-parser-Fix-segfault-on-malformed-input.patch [bz#575800]
  - kvm-fix-i-format-handling-in-memory-dump.patch [bz#575800]
  - kvm-Don-t-set-default-monitor-when-there-is-a-mux-ed-one.patch [bz#575800]
  - kvm-monitor-Document-argument-type-M.patch [bz#575821]
  - kvm-QDict-New-qdict_get_double.patch [bz#575821]
  - kvm-monitor-New-argument-type-b.patch [bz#575821]
  - kvm-monitor-Use-argument-type-b-for-migrate_set_speed.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_speed-to-QObject.patch [bz#575821]
  - kvm-monitor-New-argument-type-T.patch [bz#575821]
  - kvm-monitor-Use-argument-type-T-for-migrate_set_downtime.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_downtime-to-QObject.patch [bz#575821]
  - kvm-block-Emit-BLOCK_IO_ERROR-before-vm_stop-call.patch [bz#575912]
  - kvm-QMP-Move-STOP-event-into-do_vm_stop.patch [bz#575912]
  - kvm-QMP-Move-RESET-event-into-qemu_system_reset.patch [bz#575912]
  - kvm-QMP-Sync-with-upstream-event-changes.patch [bz#575912]
  - kvm-QMP-Drop-DEBUG-event.patch [bz#575912]
  - kvm-QMP-Revamp-the-qmp-events.txt-file.patch [bz#575912]
  - kvm-QMP-Introduce-RTC_CHANGE-event.patch [bz#547534]
  - kvm-QMP-Introduce-WATCHDOG-event.patch [bz#557083]
  - kvm-spice-add-more-config-options.patch [bz#576561]
  - Resolves: bz#547534
    (RFE: a QMP event notification for RTC clock changes)
  - Resolves: bz#557083
    (QMP events for watchdog events)
  - Resolves: bz#574525
    (Align qemu-kvm guest memory for transparent hugepage support)
  - Resolves: bz#574642
    (QMP: Convert do_cpu_set() to QObject)
  - Resolves: bz#575800
    (Monitor: Backport a collection of fixes)
  - Resolves: bz#575821
    (QMP: Convert migrate_set_speed, migrate_set_downtime to QObject)
  - Resolves: bz#575912
    (QMP: Backport event related fixes)
  - Resolves: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.32.el6
changelog:
  - kvm-Revert-spice-add-more-config-options.patch [bz#576561]
    (need to wait for spice patches to be included on spice-server)
  - Related: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.33.el6
changelog:
  - kvm-Fix-kvm_load_mpstate-for-vcpu-hot-add.patch [bz#569613]
  - kvm-qemu-kvm-enable-get-set-vcpu-events-on-reset-and-mig.patch [bz#569613]
  - kvm-Synchronize-kvm-headers.patch [bz#569613]
  - kvm-Increase-VNC_MAX_WIDTH.patch [bz#569613]
  - kvm-device-assignment-default-requires-IOMMU.patch [bz#569613]
  - kvm-Do-not-allow-vcpu-stop-with-in-progress-PIO.patch [bz#569613]
  - kvm-fix-savevm-command-without-id-or-tag.patch [bz#569613]
  - kvm-Do-not-ignore-error-if-open-file-failed-serial-dev-t.patch [bz#569613]
  - kvm-segfault-due-to-buffer-overrun-in-usb-serial.patch [bz#569613]
  - kvm-fix-inet_parse-typo.patch [bz#569613]
  - kvm-virtio-net-fix-network-stall-under-load.patch [bz#569613]
  - kvm-don-t-dereference-NULL-after-failed-strdup.patch [bz#569613]
  - kvm-net-Remove-unused-net_client_uninit.patch [bz#569613]
  - kvm-net-net_check_clients-runs-too-early-to-see-device-f.patch [bz#569613]
  - kvm-net-Fix-bogus-Warning-vlan-0-with-no-nics-with-devic.patch [bz#569613]
  - kvm-net-net_check_clients-checks-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-info-network-shows-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-Monitor-command-set_link-finds-only-VLAN-clients.patch [bz#569613]
  - kvm-ide-save-restore-pio-atapi-cmd-transfer-fields-and-i.patch [bz#569613]
  - kvm-cirrus-Properly-re-register-cirrus_linear_io_addr-on.patch [bz#569613]
  - Related: bz#569613
    (backport qemu-kvm-0.12.3 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.34.el6
changelog:
  - kvm-Monitor-Introduce-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-simple-handlers-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cont-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_eject-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cpu_set-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_block_set_passwd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_getfd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_closefd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_add-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_remove-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_memory_save-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_physical_memory_save-to-cmd_new_r.patch [bz#563491]
  - kvm-Monitor-Convert-do_info-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_change-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-to-mon_set_password-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-mon_spice_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Rename-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Debugging-support.patch [bz#563491]
  - kvm-Monitor-Drop-the-print-disabling-mechanism.patch [bz#563491]
  - kvm-Monitor-Audit-handler-return.patch [bz#563491]
  - kvm-Monitor-Debug-stray-prints-the-right-way.patch [bz#563491]
  - kvm-Monitor-Report-more-than-one-error-in-handlers.patch [bz#563491]
  - Resolves: bz#563491
    (QMP: New internal error handling mechanism)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.35.el6
changelog:
  - kvm-QError-New-QERR_DEVICE_NOT_ENCRYPTED.patch [bz#563641]
  - kvm-Wrong-error-message-in-block_passwd-command.patch [bz#563641]
  - kvm-Monitor-Introduce-RFQDN_REDHAT-and-use-it.patch [bz#578493]
  - kvm-QMP-Fix-Spice-event-names.patch [bz#578493]
  - Resolves: bz#563641
    (QMP: Wrong error message in block_passwd command)
  - Resolves: bz#578493
    (QMP: Fix spice event names)
  - ksm.init: touch max_kernel_pages only if it exists [bz#561907]
  - Resolves: bz#561907
  - ksmtuned: add debug information [bz#576789]
  - Resolves: bz#576789


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.36.el6
changelog:
  - kvm-char-Remove-redundant-qemu_chr_generic_open-call.patch [bz#558236]
  - kvm-add-close-callback-for-tty-based-char-device.patch [bz#558236]
  - kvm-Restore-terminal-attributes-for-tty-based-monitor.patch [bz#558236]
  - kvm-Restore-terminal-monitor-attributes-addition.patch [bz#558236]
  - Resolves: bz#558236
    (qemu-kvm monitor corrupts tty on exit)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.37.el6
changelog:
  - kvm-balloon-Fix-overflow-when-reporting-actual-memory-si.patch [bz#578912]
  - kvm-json-parser-Output-the-content-of-invalid-keyword.patch [bz#576544]
  - Resolves: bz#576544
    (Error message doesn't contain the content of invalid keyword)
  - Resolves: bz#578912
    (Monitor: Overflow in 'info balloon')


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.38.el6
changelog:
  - kvm-read-only-Make-CDROM-a-read-only-drive.patch [bz#537164]
  - kvm-read-only-BDRV_O_FLAGS-cleanup.patch [bz#537164]
  - kvm-read-only-Added-drives-readonly-option.patch [bz#537164]
  - kvm-read-only-Disable-fall-back-to-read-only.patch [bz#537164]
  - kvm-read-only-No-need-anymoe-for-bdrv_set_read_only.patch [bz#537164]
  - kvm-read_only-Ask-for-read-write-permissions-when-openin.patch [bz#537164]
  - kvm-read-only-Read-only-device-changed-to-opens-it-s-fil.patch [bz#537164]
  - kvm-read-only-qemu-img-Fix-qemu-img-can-t-create-qcow-im.patch [bz#537164]
  - kvm-block-clean-up-bdrv_open2-structure-a-bit.patch [bz#537164]
  - kvm-block-saner-flags-filtering-in-bdrv_open2.patch [bz#537164]
  - kvm-block-flush-backing_hd-in-the-right-place.patch [bz#537164]
  - kvm-block-fix-cache-flushing-in-bdrv_commit.patch [bz#537164]
  - kvm-block-more-read-only-changes-related-to-backing-file.patch [bz#537164]
  - kvm-read-only-minor-cleanup.patch [bz#537164]
  - kvm-read-only-Another-minor-cleanup.patch [bz#537164]
  - kvm-read-only-allow-read-only-CDROM-with-any-interface.patch [bz#537164]
  - kvm-qemu-img-rebase-Add-f-option.patch [bz#580028]
  - kvm-qemu-io-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-nbd-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-img-Fix-error-message.patch [bz#579974]
  - kvm-Replace-calls-of-old-bdrv_open.patch [bz#579974]
  - Resolves: bz#537164
    (-drive arg has no way to request a read only disk)
  - Resolves: bz#579974
    (Get segmentation fault when creating qcow2 format image on block device with "preallocation=metadata")
  - Resolves: bz#580028
    ('qemu-img re-base' broken on block devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.39.el6
changelog:
  - kvm-virtio-blk-revert-serial-number-support.patch [bz#564101]
  - kvm-block-add-topology-qdev-properties.patch [bz#564101]
  - kvm-virtio-blk-add-topology-support.patch [bz#564101]
  - kvm-scsi-add-topology-support.patch [bz#564101]
  - kvm-ide-add-topology-support.patch [bz#564101]
  - kvm-pcnet-make-subsystem-vendor-id-match-hardware.patch [bz#580140]
  - Resolves: bz#564101
    ([RFE] topology support in the virt block layer)
  - Resolves: bz#580140
    (emulated pcnet nic in qemu-kvm has wrong PCI subsystem ID for Windows XP driver)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.40.el6
changelog:
  - cpu-model-config-1.patch [bz#569661]
  - cpu-model-config-2.patch [bz#569661]
  - cpu-model-config-3.patch [bz#569661]
  - cpu-model-config-4.patch [bz#569661]
  - Resolves: bz#569661
    (RHEL6.0 requires backport of upstream cpu model support..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.42.el6
changelog:
  - kvm-net-remove-NICInfo.bootable-field.patch [bz#561078]
  - kvm-net-remove-broken-net_set_boot_mask-boot-device-vali.patch [bz#561078]
  - kvm-boot-remove-unused-boot_devices_bitmap-variable.patch [bz#561078]
  - kvm-check-kvm-enabled.patch [bz#580109]
  - kvm-qemu-rename-notifier-event_notifier.patch [bz#580109]
  - kvm-virtio-API-name-cleanup.patch [bz#580109]
  - kvm-vhost-u_int64_t-uint64_t.patch [bz#580109]
  - kvm-virtio-pci-fix-coding-style.patch [bz#580109]
  - kvm-vhost-detect-lack-of-support-earlier-style.patch [bz#580109]
  - kvm-configure-vhost-related-fixes.patch [bz#580109]
  - kvm-vhost-fix-features-ack.patch [bz#580109]
  - kvm-vhost-net-disable-mergeable-buffers.patch [bz#580109]
  - Resolves: bz#561078
    ("Cannot boot from non-existent NIC" when using virt-install --pxe)
  - Resolves: bz#580109
    (vhost net lacks upstream fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.43.el6
changelog:
  - kvm-qemu-option-Make-qemu_opts_foreach-accumulate-return.patch [bz#579470]
  - kvm-qdev-Fix-exit-code-for-device.patch [bz#579470]
  - kvm-qdev-Add-help-for-device-properties.patch [bz#579470]
  - kvm-qdev-update-help-on-device.patch [bz#579470]
  - kvm-qdev-Add-rudimentary-help-for-property-value.patch [bz#579470]
  - kvm-qdev-Free-opts-on-failed-do_device_add.patch [bz#579470]
  - kvm-qdev-Improve-diagnostics-for-bad-property-values.patch [bz#579470]
  - kvm-qdev-Catch-attempt-to-attach-more-than-one-device-to.patch [bz#579470]
  - kvm-usb-Remove-disabled-monitor_printf-in-usb_read_file.patch [bz#579470]
  - kvm-savevm-Fix-loadvm-to-report-errors-to-stderr-not-the.patch [bz#579470]
  - kvm-pc-Fix-error-reporting-for-boot-once.patch [bz#579470]
  - kvm-pc-Factor-common-code-out-of-pc_boot_set-and-cmos_in.patch [bz#579470]
  - kvm-tools-Remove-unused-cur_mon-from-qemu-tool.c.patch [bz#579470]
  - kvm-monitor-Separate-default-monitor-and-current-monitor.patch [bz#579470]
  - kvm-block-Simplify-usb_msd_initfn-test-for-can-read-bdrv.patch [bz#579470]
  - kvm-monitor-Factor-monitor_set_error-out-of-qemu_error_i.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-from-monitor.c-to-own-.patch [bz#579470]
  - kvm-error-Simplify-error-sink-setup.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-into-their-own-header.patch [bz#579470]
  - kvm-error-New-error_printf-and-error_vprintf.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qdev_d.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qbus_f.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-scsi_h.patch [bz#579470]
  - kvm-error-Replace-qemu_error-by-error_report.patch [bz#579470]
  - kvm-error-Rename-qemu_error_new-to-qerror_report.patch [bz#579470]
  - kvm-error-Infrastructure-to-track-locations-for-error-re.patch [bz#579470]
  - kvm-error-Include-the-program-name-in-error-messages-to-.patch [bz#579470]
  - kvm-error-Track-locations-in-configuration-files.patch [bz#579470]
  - kvm-QemuOpts-Fix-qemu_config_parse-to-catch-file-read-er.patch [bz#579470]
  - kvm-error-Track-locations-on-command-line.patch [bz#579470]
  - kvm-qdev-Fix-device-and-device_add-to-handle-unsuitable-.patch [bz#579470]
  - kvm-qdev-Factor-qdev_create_from_info-out-of-qdev_create.patch [bz#579470]
  - kvm-qdev-Hide-no_user-devices-from-users.patch [bz#579470]
  - kvm-qdev-Hide-ptr-properties-from-users.patch [bz#579470]
  - kvm-monitor-New-monitor_cur_is_qmp.patch [bz#579470]
  - kvm-error-Let-converted-handlers-print-in-human-monitor.patch [bz#579470]
  - kvm-error-Polish-human-readable-error-descriptions.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_BAD.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_IN_USE.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_NOT_FOUND.patch [bz#579470]
  - kvm-qdev-convert-setting-device-properties-to-QError.patch [bz#579470]
  - kvm-qdev-Relax-parsing-of-bus-option.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_MULTIPLE_BUSSES.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_NO_BUS.patch [bz#579470]
  - kvm-qdev-Convert-qbus_find-to-QError.patch [bz#579470]
  - kvm-error-New-error_printf_unless_qmp.patch [bz#579470]
  - kvm-error-New-QERR_BAD_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NO_HOTPLUG.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_INIT_FAILED.patch [bz#579470]
  - kvm-error-New-QERR_NO_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-Revert-qdev-Use-QError-for-device-not-found-error.patch [bz#579470]
  - kvm-error-Convert-do_device_add-to-QError.patch [bz#579470]
  - kvm-qemu-option-Functions-to-convert-to-from-QDict.patch [bz#579470]
  - kvm-qemu-option-Move-the-implied-first-name-into-QemuOpt.patch [bz#579470]
  - kvm-qemu-option-Rename-find_list-to-qemu_find_opts-exter.patch [bz#579470]
  - kvm-monitor-New-argument-type-O.patch [bz#579470]
  - kvm-monitor-Use-argument-type-O-for-device_add.patch [bz#579470]
  - kvm-monitor-convert-do_device_add-to-QObject.patch [bz#579470]
  - kvm-error-Trim-includes-after-Move-qemu_error-friends.patch [bz#579470]
  - kvm-error-Trim-includes-in-qerror.c.patch [bz#579470]
  - kvm-error-Trim-includes-after-Infrastructure-to-track-lo.patch [bz#579470]
  - kvm-error-Make-use-of-error_set_progname-optional.patch [bz#579470]
  - kvm-error-Link-qemu-img-qemu-nbd-qemu-io-with-qemu-error.patch [bz#579470]
  - kvm-error-Move-qerror_report-from-qemu-error.-ch-to-qerr.patch [bz#579470]
  - Resolves: bz#579470
    (QMP: device_add support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.44.el6
changelog:
  - kvm-spice-add-more-config-options-readd.patch [bz#576561]
  - BuildRequires spice-server-devel >= 0.4.2-10.el6 because of API changes
  - Resolves: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.45.el6
changelog:
  - kvm-Documentation-Add-monitor-commands-to-function-index.patch [bz#559670]
  - kvm-error-Put-error-definitions-back-in-alphabetical-ord.patch [bz#559670]
  - kvm-error-New-QERR_DUPLICATE_ID.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_create-to-QError.patch [bz#559670]
  - kvm-error-New-QERR_INVALID_PARAMETER_VALUE.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_set-to-QError.patch [bz#559670]
  - kvm-error-Drop-extra-messages-after-qemu_opts_set-and-qe.patch [bz#559670]
  - kvm-error-Use-QERR_INVALID_PARAMETER_VALUE-instead-of-QE.patch [bz#559670]
  - kvm-error-Convert-qemu_opts_validate-to-QError.patch [bz#559670]
  - kvm-error-Convert-net_client_init-to-QError.patch [bz#559670]
  - kvm-error-New-QERR_DEVICE_IN_USE.patch [bz#559670]
  - kvm-monitor-New-commands-netdev_add-netdev_del.patch [bz#559670]
  - kvm-qdev-Convert-qdev_unplug-to-QError.patch [bz#582325]
  - kvm-monitor-convert-do_device_del-to-QObject-QError.patch [bz#582325]
  - kvm-block-Fix-error-code-in-multiwrite-for-immediate-fai.patch [bz#582575]
  - kvm-block-Fix-multiwrite-memory-leak-in-error-case.patch [bz#582575]
  - Resolves: bz#559670
    (No 'netdev_add' command in monitor)
  - Resolves: bz#582325
    (QMP: device_del support)
  - Resolves: bz#582575
    (Backport bdrv_aio_multiwrite fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.46.el6
changelog:
  - kvm-spice-add-auth-info-to-monitor-events.patch [bz#581540]
  - Resolves: bz#581540
    (SPICE graphics event does not include auth details)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.47.el6
changelog:
  - kvm-Request-setting-of-nmi_pending-and-sipi_vector.patch [bz#569613]
  - Resolves: bz#569613
    (backport qemu-kvm-0.12.3 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.48.el6
changelog:
  - kvm-virtio-serial-save-load-Ensure-target-has-enough-por.patch [bz#574296]
  - kvm-virtio-serial-save-load-Ensure-nr_ports-on-src-and-d.patch [bz#574296]
  - kvm-virtio-serial-save-load-Ensure-we-have-hot-plugged-p.patch [bz#574296]
  - kvm-virtio-serial-save-load-Send-target-host-connection-.patch [bz#574296]
  - kvm-virtio-serial-Use-control-messages-to-notify-guest-o.patch [bz#574296]
  - kvm-virtio-serial-whitespace-match-surrounding-code.patch [bz#574296]
  - kvm-virtio-serial-Remove-redundant-check-for-0-sized-wri.patch [bz#574296]
  - kvm-virtio-serial-Update-copyright-year-to-2010.patch [bz#574296]
  - kvm-virtio-serial-Propagate-errors-in-initialising-ports.patch [bz#574296]
  - kvm-virtio-serial-Send-out-guest-data-to-ports-only-if-p.patch [bz#574296]
  - kvm-iov-Introduce-a-new-file-for-helpers-around-iovs-add.patch [bz#574296]
  - kvm-iov-Add-iov_to_buf-and-iov_size-helpers.patch [bz#574296]
  - kvm-virtio-serial-Handle-scatter-gather-buffers-for-cont.patch [bz#574296]
  - kvm-virtio-serial-Handle-scatter-gather-input-from-the-g.patch [bz#574296]
  - kvm-virtio-serial-Apps-should-consume-all-data-that-gues.patch [bz#574296]
  - kvm-virtio-serial-Discard-data-that-guest-sends-us-when-.patch [bz#574296]
  - kvm-virtio-serial-Implement-flow-control-for-individual-.patch [bz#574296]
  - kvm-virtio-serial-Handle-output-from-guest-to-unintialis.patch [bz#574296]
  - kvm-virtio-serial-bus-wake-up-iothread-upon-guest-read-n.patch [bz#574296]
  - kvm-Bail-out-when-VCPU_CREATE-fails.patch [bz#587227]
  - Resolves: bz#574296
    (Fix migration for virtio-serial after port hot-plug/hot-unplug operations)
  - Resolves: bz#587227
    (Fix segfault when creating more vcpus than allowed.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.49.el6
changelog:
  - kvm-block-Free-iovec-arrays-allocated-by-multiwrite_merg.patch [bz#586572]
  - Resolves: bz#586572
    (virtio-blk multiwrite merge memory leak)
  - Force spice to be enabled and fix BuildRequires to use spice-server-devel
  - Resolves: bz#588904
    (qemu-kvm builds without spice support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.50.el6
changelog:
  - kvm-vl.c-fix-BZ-588828-endless-loop-caused-by-non-option.patch [bz#588828]
  - Resolves: bz#588828
    (endless loop when parsing of command line with bare image argument)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.51.el6
changelog:
  - kvm-fdc-fix-drive-property-handling.patch [bz#584902]
  - Resolves: bz#584902
    (Cannot associate drive with a floppy device using -global)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.52.el6
changelog:
  - kvm-qemu-img-use-the-heap-instead-of-the-huge-stack-arra.patch [bz#585837]
  - kvm-qemu-img-rebase-Fix-output-image-corruption.patch [bz#585837]
  - Resolves: bz#585837
    (After re-base snapshot, the file in the snapshot disappeared)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.53.el6
changelog:
  - kvm-virtio-blk-Fix-use-after-free-in-error-case.patch [bz#578448]
  - kvm-block-Fix-multiwrite-error-handling.patch [bz#578448]
  - kvm-Fix-boot-once-option.patch [bz#579692]
  - kvm-QError-New-QERR_QMP_BAD_INPUT_OBJECT_MEMBER.patch [bz#573578]
  - kvm-QMP-Use-QERR_QMP_BAD_INPUT_OBJECT_MEMBER.patch [bz#573578]
  - kvm-QError-Improve-QERR_QMP_BAD_INPUT_OBJECT-desc.patch [bz#573578]
  - kvm-QMP-Check-arguments-member-s-type.patch [bz#573578]
  - kvm-QMP-Introduce-RESUME-event.patch [bz#590102]
  - kvm-pci-irq_state-vmstate-breakage.patch [bz#588133]
  - Resolves: bz#573578
    (Segfault when migrating via QMP command interface)
  - Resolves: bz#578448
    (qemu-kvm segfault when nfs restart(without using werror&rerror))
  - Resolves: bz#579692
    (qemu-kvm "-boot once=drives" couldn't function properly)
  - Resolves: bz#588133
    (RHEL5.4 guest can lose virtio networking during migration)
  - Resolves: bz#590102
    (QMP: Backport RESUME event)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.54.el6
changelog:
  - kvm-qemu-config-qemu_read_config_file-reads-the-normal-c.patch [bz#588756]
  - kvm-qemu-config-Make-qemu_config_parse-more-generic.patch [bz#588756]
  - kvm-blkdebug-Basic-request-passthrough.patch [bz#588756]
  - kvm-blkdebug-Inject-errors.patch [bz#588756]
  - kvm-Make-qemu-config-available-for-tools.patch [bz#588756]
  - kvm-blkdebug-Add-events-and-rules.patch [bz#588756]
  - kvm-qcow2-Trigger-blkdebug-events.patch [bz#588756]
  - kvm-qcow2-Fix-access-after-end-of-array.patch [bz#588762]
  - kvm-qcow2-rename-two-QCowAIOCB-members.patch [bz#588762]
  - kvm-qcow2-Don-t-ignore-immediate-read-write-failures.patch [bz#588762]
  - kvm-qcow2-Remove-request-from-in-flight-list-after-error.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-write_l2_entries.patch [bz#588762]
  - kvm-qcow2-Fix-error-return-code-in-qcow2_alloc_cluster_l.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-write_l1_entry.patch [bz#588762]
  - kvm-qcow2-Return-0-errno-in-l2_allocate.patch [bz#588762]
  - kvm-qcow2-Remove-abort-on-free_clusters-failure.patch [bz#588762]
  - kvm-Add-qemu-error.o-only-once-to-target-list.patch [bz#591061]
  - kvm-block-Fix-bdrv_commit.patch [bz#589439]
  - kvm-fix-80000001.EDX-supported-bit-filtering.patch [bz#578106]
  - kvm-fix-CPUID-vendor-override.patch [bz#591604]
  - Resolves: bz#578106
    (call trace when boot guest with -cpu host)
  - Resolves: bz#588756
    (blkdebug is missing)
  - Resolves: bz#588762
    (Backport qcow2 fixes)
  - Resolves: bz#589439
    (Qcow2 snapshot got corruption after commit using block device)
  - Resolves: bz#591061
    (make fails to build after make clean)
  - Resolves: bz#591604
    (cannot override cpu vendor from the command line)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.55.el6
changelog:
  - kvm-turn-off-kvmclock-when-resetting-cpu.patch [bz#588884]
  - kvm-virtio-blk-Avoid-zeroing-every-request-structure.patch [bz#593369]
  - Resolves: bz#588884
    (Rebooting a kernel with kvmclock enabled, into a kernel with kvmclock disabled, causes random crashes)
  - Resolves: bz#593369
    (virtio-blk: Avoid zeroing every request structure)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.56.el6
changelog:
  - kvm-dmg-fix-open-failure.patch [bz#580363]
  - kvm-block-get-rid-of-the-BDRV_O_FILE-flag.patch [bz#580363]
  - kvm-block-Convert-first_drv-to-QLIST.patch [bz#580363]
  - kvm-block-separate-raw-images-from-the-file-protocol.patch [bz#580363]
  - kvm-block-Split-bdrv_open.patch [bz#580363]
  - kvm-block-Avoid-forward-declaration-of-bdrv_open_common.patch [bz#580363]
  - kvm-block-Open-the-underlying-image-file-in-generic-code.patch [bz#580363]
  - kvm-block-bdrv_has_zero_init.patch [bz#580363]
  - kvm-block-Do-not-export-bdrv_first.patch [bz#590998]
  - kvm-block-Convert-bdrv_first-to-QTAILQ.patch [bz#590998]
  - kvm-block-Add-wr_highest_sector-blockstat.patch [bz#590998]
  - Resolves: bz#580363
    (Error while creating raw image on block device)
  - Resolves: bz#590998
    (qcow2 high watermark)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.57.el6
changelog:
  - kvm-stash-away-SCM_RIGHTS-fd-until-a-getfd-command-arriv.patch [bz#582684]
  - Resolves: bz#582684
    (Monitor: getfd command is broken)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.58.el6
changelog:
  - kvm-Fix-segfault-after-device-assignment-hot-remove.patch [bz#582874]
  - Resolves: bz#582874
    (Guest hangs during restart after hot unplug then hot plug physical NIC card)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.59.el6
changelog:
  - kvm-pci-cleanly-backout-of-pci_qdev_init.patch [bz#590884]
  - kvm-ide-Fix-ide_dma_cancel.patch [bz#593287]
  - Resolves: bz#590884
    (bogus 'info pci' state when hot-added assigned device fails to initialize)
  - Resolves: bz#593287
    (Failed asserting during ide_dma_cancel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.60.el6
changelog:
  - kvm-spice-vmc-add-copyright.patch [bz#576488]
  - kvm-spice-vmc-remove-debug-prints-and-defines.patch [bz#576488]
  - kvm-spice-vmc-add-braces-to-single-line-if-s.patch [bz#576488]
  - kvm-spice-vmc-s-SpiceVirtualChannel-SpiceVMChannel-g.patch [bz#576488]
  - kvm-spice-vmc-s-spice_virtual_channel-spice_vmc-g.patch [bz#576488]
  - kvm-spice-vmc-all-variables-of-type-SpiceVMChannel-renam.patch [bz#576488]
  - kvm-spice-vmc-remove-meaningless-cast-of-void.patch [bz#576488]
  - kvm-spice-vmc-add-spice_vmc_ring_t-fix-write-function.patch [bz#576488]
  - kvm-spice-vmc-don-t-touch-guest_out_ring-on-unplug.patch [bz#576488]
  - kvm-spice-vmc-VirtIOSerialPort-vars-renamed-to-vserport.patch [bz#576488]
  - kvm-spice-vmc-add-nr-property.patch [bz#576488]
  - kvm-spice-vmc-s-SPICE_VM_CHANNEL-SPICE_VMC-g.patch [bz#576488]
  - kvm-spice-vmc-add-vmstate.-saves-active_interface.patch [bz#576488]
  - kvm-spice-vmc-rename-guest-device-name-to-com.redhat.spi.patch [bz#576488]
  - kvm-spice-vmc-remove-unused-property-name.patch [bz#576488]
  - Resolves: bz#576488
    (Spice: virtio serial based device for guest-spice client communication)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.61.el6
changelog:
  - Add "file" format to bdrv whitelist
  - Resolves: bz#593909
    (VM can not start by using qemu-kvm-0.12.1.2-2.56.el6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.62.el6
changelog:
  - kvm-block-add-logical_block_size-property.patch [bz#566785]
  - kvm-virtio-serial-bus-fix-ports_map-allocation.patch [bz#591176]
  - kvm-Move-cpu-model-config-file-to-agree-with-rpm-build-B.patch [bz#569661]
  - Resolves: bz#566785
    (virt block layer must not keep guest's logical_block_size fixed)
  - Resolves: bz#569661
    (RHEL6.0 requires backport of upstream cpu model support..)
  - Resolves: bz#591176
    (migration fails since virtio-serial-bus is using uninitialized memory)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.63.el6
changelog:
  - kvm-fix-undefined-shifts-by-32.patch [bz#590922]
  - kvm-qemu-char.c-drop-debug-printfs-from-qemu_chr_parse_c.patch [bz#590922]
  - kvm-Fix-corner-case-in-chardev-udp-parameter.patch [bz#590922]
  - kvm-pci-passthrough-zap-option-rom-scanning.patch [bz#590922]
  - kvm-UHCI-spurious-interrupt-fix.patch [bz#590922]
  - kvm-Fix-SIGFPE-for-vnc-display-of-width-height-1.patch [bz#590922]
  - kvm-spice-vmc-remove-ringbuffer.patch [bz#589670]
  - kvm-spice-vmc-add-dprintfs.patch [bz#589670]
  - Resolves: bz#589670
    (spice: Ensure ring data is save/restored on migration)
  - Related: bz#590922
    (backport qemu-kvm-0.12.4 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.64.el6
changelog:
  - kvm-qemu-kvm-fix-crash-on-reboot-with-vhost-net.patch [bz#585940]
  - Related: bz#585940
    (qemu-kvm crashes on reboot when vhost is enabled)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.65.el6
changelog:
  - kvm-qcow2-Fix-creation-of-large-images.patch [bz#577106]
  - kvm-vnc-sync-lock-modifier-state-on-connect.patch [bz#569767]
  - kvm-json-lexer-Initialize-x-and-y.patch [bz#589952]
  - kvm-json-lexer-Handle-missing-escapes.patch [bz#589952]
  - kvm-qjson-Handle-f.patch [bz#589952]
  - kvm-json-lexer-Drop-buf.patch [bz#589952]
  - kvm-json-streamer-Don-t-use-qdict_put_obj.patch [bz#589952]
  - kvm-block-fix-sector-comparism-in-multiwrite_req_compare.patch [bz#596119]
  - kvm-block-Fix-multiwrite-with-overlapping-requests.patch [bz#596119]
  - Resolves: bz#569767
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#577106
    (Abort/Segfault when creating qcow2 format image with 512b cluster size)
  - Resolves: bz#589952
    (QMP breaks when issuing any command with a backslash)
  - Resolves: bz#596119
    (Possible corruption after block request merge)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.66.el6
changelog:
  - kvm-device-assignment-use-stdint-types.patch [bz#595495]
  - kvm-device-assignment-Don-t-use-libpci.patch [bz#595495]
  - kvm-device-assignment-add-config-fd-qdev-property.patch [bz#595495]
  - Resolves: bz#595495
    (Fail to hotplug pci device to guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.67.el6
changelog:
  - kvm-qemu-address-todo-comment-in-exec.c.patch [bz#595301]
  - Resolves: bz#595301
    (QEMU terminates without warning with virtio-net and SMP enabled)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.68.el6
changelog:
  - kvm-virtio-blk-fix-barrier-support.patch [bz#595813]
  - Resolves: bz#595813
    (virtio-blk doesn't handle barriers correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.69.el6
changelog:
  - Changes to make-release script with no resulting changes on binary package
  - kvm-virtio-utilize-PUBLISH_USED_IDX-feature.patch [bz#595287]
  - Resolves: bz#595287
    (virtio net/vhost net speed enhancements from upstream kernel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.70.el6
changelog:
  - kvm-virtio-invoke-set_features-on-load.patch [bz#595263]
  - kvm-virtio-net-return-with-value-in-void-function.patch [bz#595263]
  - kvm-vhost-net-fix-reversed-logic-in-mask-notifiers.patch [bz#585940]
  - kvm-hpet-Disable-for-Red-Hat-Enterprise-Linux.patch [bz#595130]
  - ksmtuned: typo MemCached -> Cached [bz#597005]
  - kvm-virtio-net-stop-vhost-backend-on-vmstop.patch [bz#598896]
  - kvm-msix-fix-msix_set-unset_mask_notifier.patch [bz#598896]
  - Resolves: bz#585940
    (qemu-kvm crashes on reboot when vhost is enabled)
  - Resolves: bz#595130
    (Disable hpet by default)
  - Resolves: bz#595263
    (virtio net lacks upstream fixes as of may 24)
  - Resolves: bz#597005
    (ksmtune: typo: MemCached -> Cached)
  - Resolves: bz#598896
    (migration breaks networking with vhost-net)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.71.el6
changelog:
  - kvm-device-assignment-fix-failure-to-exit-on-shared-IRQ.patch [bz#585310]
  - kvm-doc-Fix-host-forwarding-monitor-command-documentatio.patch [bz#588719]
  - kvm-doc-Fix-acl-monitor-command-documentation.patch [bz#588719]
  - kvm-doc-Heading-for-monitor-command-cpu-got-lost-restore.patch [bz#588719]
  - kvm-doc-Clean-up-monitor-command-function-index.patch [bz#588719]
  - kvm-fix-info-cpus-halted-state-reporting.patch [bz#593769]
  - kvm-sysemu-Export-no_shutdown.patch [bz#559618]
  - kvm-Monitor-Return-before-exiting-with-quit.patch [bz#559618]
  - kvm-QMP-Add-Downstream-extension-of-QMP-to-spec.patch [bz#566291]
  - kvm-Revert-PCI-Convert-pci_device_hot_add-to-QObject.patch [bz#580365]
  - kvm-Revert-monitor-Convert-do_pci_device_hot_remove-to-Q.patch [bz#580365]
  - kvm-drive-allow-rerror-werror-and-readonly-for-if-none.patch [bz#565609 bz#593256]
  - kvm-qdev-properties-Fix-u-intXX-parsers.patch [bz#596093]
  - kvm-vnc-factor-out-vnc_desktop_resize.patch [bz#590070]
  - kvm-vnc-send-desktopresize-event-as-reply-to-set-encodin.patch [bz#590070]
  - kvm-vnc-keep-track-of-client-desktop-size.patch [bz#590070]
  - kvm-vnc-don-t-send-invalid-screen-updates.patch [bz#590070]
  - kvm-vnc-move-size-changed-check-into-the-vnc_desktop_res.patch [bz#590070]
  - kvm-check-for-active_console-before-using-it.patch [bz#591759]
  - Resolves: bz#559618
    (QMP: Fix 'quit' to return success before exiting)
  - Resolves: bz#565609
    (Unable to use werror/rerror with  -drive syntax using if=none)
  - Resolves: bz#566291
    (QMP: Support vendor extensions)
  - Resolves: bz#580365
    (QMP: pci_add/pci_del conversion should be reverted)
  - Resolves: bz#585310
    (qemu-kvm does not exit when device assignment fails due to IRQ sharing)
  - Resolves: bz#588719
    (Fix monitor command documentation)
  - Resolves: bz#590070
    (QEMU misses DESKTOP-RESIZE event if it is triggered during client connection initialization)
  - Resolves: bz#591759
    (Segmentation fault when using vnc to view guest without vga card)
  - Resolves: bz#593256
    (Unable to set readonly flag for floppy disks)
  - Resolves: bz#593769
    ("info cpus" doesn't show halted state)
  - Resolves: bz#596093
    (16bit integer qdev properties are not parsed correctly.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.72.el6
changelog:
  - kvm-Monitor-Make-RFQDN_REDHAT-public.patch [bz#586349]
  - kvm-QMP-Add-error-reason-to-BLOCK_IO_ERROR-event.patch [bz#586349]
  - kvm-virtio-net-truncating-packet.patch [bz#591494]
  - kvm-vhost-net-check-PUBLISH_USED-in-backend.patch [bz#600203]
  - kvm-device-assignment-don-t-truncate-MSIX-capabilities-t.patch [bz#596315]
  - kvm-If-a-USB-keyboard-is-unplugged-the-keyboard-eventhan.patch [bz#561433]
  - Resolves: bz#561433
    (Segfault when keyboard is removed)
  - Resolves: bz#586349
    (BLOCK_IO_ERROR event does not provide the errno that caused it.)
  - Resolves: bz#591494
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#596315
    (device assignment truncates MSIX table size)
  - Resolves: bz#600203
    (vhost net new userspace on old kernel: 95: falling back on userspace virtio)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.73.el6
changelog:
  - kvm-net-Fix-hotplug-with-pci_add.patch [bz#599460]
  - Resolves: bz#599460
    (virtio nic is hotpluged when hotplug rtl8139 nic to guest)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.74.el6
changelog:
  - kvm-raw-posix-Detect-CDROM-via-ioctl-on-linux.patch [bz#593758]
  - kvm-block-Remove-special-case-for-vvfat.patch [bz#593758]
  - kvm-block-Make-find_image_format-return-raw-BlockDriver-.patch [bz#593758]
  - kvm-block-Add-missing-bdrv_delete-for-SG_IO-BlockDriver-.patch [bz#593758]
  - kvm-block-Assume-raw-for-drives-without-media.patch [bz#593758]
  - Resolves: bz#593758
    (qemu fails to start with -cdrom /dev/sr0 if no media inserted)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.75.el6
changelog:
  - kvm-qcow2-Fix-corruption-after-refblock-allocation.patch [bz#598407]
  - kvm-qcow2-Fix-corruption-after-error-in-update_refcount.patch [bz#598507]
  - kvm-qcow2-Allow-qcow2_get_cluster_offset-to-return-error.patch [bz#598507]
  - kvm-qcow2-Change-l2_load-to-return-0-errno.patch [bz#598507]
  - kvm-qcow2-Return-right-error-code-in-write_refcount_bloc.patch [bz#598507]
  - kvm-qcow2-Clear-L2-table-cache-after-write-error.patch [bz#598507]
  - kvm-qcow2-Fix-error-handling-in-l2_allocate.patch [bz#598507]
  - kvm-qcow2-Restore-L1-entry-on-l2_allocate-failure.patch [bz#598507]
  - kvm-qcow2-Allow-get_refcount-to-return-errors.patch [bz#598507]
  - kvm-qcow2-Avoid-shadowing-variable-in-alloc_clusters_nor.patch [bz#598507]
  - kvm-qcow2-Allow-alloc_clusters_noref-to-return-errors.patch [bz#598507]
  - kvm-qcow2-Return-real-error-code-in-load_refcount_block.patch [bz#598507]
  - kvm-make-release-make-mtime-owner-group-consistent.patch
  - Resolves: bz#598407
    (qcow2 corruption bug in refcount table growth)
  - Resolves: bz#598507
    (Backport qcow2 error path fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.76.el6
changelog:
  - kvm-fix-vnc-memory-corruption-with-width-1400.patch [bz#602724]
  - kvm-net-Fix-VM-start-with-net-none.patch [bz#599460]
  - kvm-monitor-Remove-pci_add-command-for-Red-Hat-Enterpris.patch [bz#602590]
  - kvm-monitor-Remove-pci_del-command-for-Red-Hat-Enterpris.patch [bz#602590]
  - kvm-monitor-Remove-drive_add-command-for-Red-Hat-Enterpr.patch [bz#602590]
  - Resolves: bz#599460
    (virtio nic is hotpluged when hotplug rtl8139 nic to guest)
  - Resolves: bz#602590
    (Disable pci_add, pci_del, drive_add)
  - Resolves: bz#602724
    (VNC disconnect segfault on KVM video consoles)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.77.el6
changelog:
  - kvm.modules: autoload vhost-net module too [bz#596891]
  - Resolves: bz#596891
    (vhost-net module should be loaded automatically)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.78.el6
changelog:
  - kvm-block-read-only-open-cdrom-as-read-only-when-using-m.patch [bz#602026]
  - kvm-acpi_piix4-save-gpe-and-pci-hotplug-slot-status.patch [bz#598022]
  - kvm-Don-t-check-for-bus-master-for-old-guests.patch [bz#596014]
  - kvm-Make-IDE-drives-defined-with-device-visible-to-cmos_.patch [bz#597147]
  - Resolves: bz#596014
    (hot add virtio-blk-pci via device_add lead to virtio network lost)
  - Resolves: bz#597147
    (libvirt: kvm disk error after first stage install of Win2K or WinXP)
  - Resolves: bz#598022
    (Hot-added device is not visible in guest after live-migration.)
  - Resolves: bz#602026
    (Cannot change cdrom by "change device filename [format] " in (qemu) command line)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.79.el6
changelog:
  - kvm-Make-geometry-of-IDE-drives-defined-with-device-visi.patch [bz#597147]
  - Resolves: bz#597147
    (libvirt: kvm disk error after first stage install of Win2K or WinXP)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.80.el6
changelog:
  - don't package kvmtrace anymore
  - Resolves: bz#605426
    (obsolete kvmtrace binary is still being packaged)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.81.el6
changelog:
  - kvm-virtio-Enable-the-PUBLISH_USED-feature-by-default-fo.patch [bz#602417]
  - kvm-do-not-enter-vcpu-again-if-it-was-stopped-during-IO.patch [bz#595647]
  - Resolves: bz#595647
    (Windows guest with qxl driver can't get into S3 state)
  - Resolves: bz#602417
    (Enable VIRTIO_RING_F_PUBLISHED bit for all virtio devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.82.el6
changelog:
  - kvm-monitor-allow-device-to-be-ejected-if-no-disk-is-ins.patch [bz#581789]
  - kvm-New-slots-need-dirty-tracking-enabled-when-migrating.patch [bz#596609]
  - kvm-Make-netdev_del-delete-the-netdev-even-when-it-s-in-.patch [bz#596274]
  - kvm-device-assignment-msi-PBA-is-long.patch [bz#605359]
  - kvm-qcow2-Fix-qemu-img-check-segfault-on-corrupted-image.patch [bz#604210]
  - kvm-qcow2-Don-t-try-to-check-tables-that-couldn-t-be-loa.patch [bz#604210]
  - kvm-qcow2-Fix-error-handling-during-metadata-preallocati.patch [bz#604210]
  - kvm-block-Add-bdrv_-p-write_sync.patch [bz#607200]
  - kvm-qcow2-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#607200]
  - kvm-virtio-serial-Fix-compat-property-name.patch [bz#607263]
  - kvm-rtc-Remove-TARGET_I386-from-qemu-config.c-enables-dr.patch [bz#606733]
  - Resolves: bz#581789
    (Cannot eject cd-rom when configured to host cd-rom)
  - Resolves: bz#596274
    (QMP: netdev_del sometimes fails claiming the device is in use)
  - Resolves: bz#596609
    (Live migration failed when migration during boot)
  - Resolves: bz#604210
    (Segmentation fault when check  preallocated qcow2 image on lvm.)
  - Resolves: bz#605359
    (Fix MSIX regression from bz595495)
  - Resolves: bz#606733
    (Unable to set the driftfix parameter)
  - Resolves: bz#607200
    (qcow2 image corruption when using cache=writeback)
  - Resolves: bz#607263
    (Unable to launch QEMU with -M pc-0.12 and  virtio serial)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.83.el6
changelog:
  - kvm-add-some-tests-for-invalid-JSON.patch [bz#585009]
  - kvm-implement-optional-lookahead-in-json-lexer.patch [bz#585009]
  - kvm-remove-unnecessary-lookaheads.patch [bz#585009]
  - kvm-per-machine-type-smbios-Type-1-smbios-values.patch [bz#605704]
  - kvm-raw-posix-Use-pread-pwrite-instead-of-lseek-read-wri.patch [bz#607688]
  - kvm-block-Cache-total_sectors-to-reduce-bdrv_getlength-c.patch [bz#607688]
  - kvm-block-allow-filenames-with-colons-again-for-host-dev.patch [bz#599122]
  - Resolves: bz#585009
    (QMP: input needs trailing  char)
  - Resolves: bz#599122
    (Unable to launch QEMU with a guest disk filename containing a ':')
  - Resolves: bz#605704
    (qemu-kvm: set per-machine-type smbios strings)
  - Resolves: bz#607688
    (Excessive lseek() causes severe performance issues with vm disk images over NFS)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.84.el6
changelog:
  - kvm-Add-KVM-paravirt-cpuid-leaf.patch [bz#606084]
  - Resolves: bz#606084
    (Allow control of kvm cpuid option via -cpu flag)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.85.el6
changelog:
  - kvm-Remove-usage-of-CONFIG_RED_HAT_DISABLED.patch [bz#605638]
  - kvm-monitor-Remove-host_net_add-remove-for-Red-Hat-Enter.patch [bz#605638]
  - kvm-monitor-Remove-usb_add-del-commands-for-Red-Hat-Ente.patch [bz#605638]
  - kvm-virtio-blk-fix-the-list-operation-in-virtio_blk_load.patch [bz#607244]
  - kvm-QError-Introduce-QERR_DEVICE_INIT_FAILED_2.patch [bz#596279]
  - kvm-dev-assignment-Report-IRQ-assign-errors-in-QMP.patch [bz#596279]
  - Resolves: bz#596279
    (QMP: does not report the real cause of PCI device assignment failure)
  - Resolves: bz#605638
    (Remove unsupported monitor commands from qemu-kvm)
  - Resolves: bz#607244
    (virtio-blk doesn't load list of pending requests correctly)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.86.el6
changelog:
  - kvm-net-delete-QemuOpts-when-net_client_init-fails.patch [bz#603851]
  - kvm-QMP-Fix-error-reporting-in-the-async-API.patch [bz#587382]
  - kvm-QMP-Remove-leading-whitespace-in-package.patch [bz#580648]
  - kvm-Add-optional-dump-of-default-config-file-paths-v2-BZ.patch [bz#601540]
  - Resolves: bz#580648
    (QMP: Bad package version in greeting message)
  - Resolves: bz#587382
    (QMP: balloon command may not report an error)
  - Resolves: bz#601540
    (qemu requires ability to verify location of cpu model definition file..)
  - Resolves: bz#603851
    (QMP: Can't reuse same 'id' when netdev_add fails)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.87.el6
changelog:
  - kvm-qxl-drop-check-for-depths-32.patch [bz#597198]
  - kvm-spice-handle-16-bit-color-depth.patch [bz#597198 bz#600205]
  - kvm-device-assignment-Don-t-deassign-when-the-assignment.patch [bz#597968]
  - kvm-block-fix-physical_block_size-calculation.patch [bz#566785]
  - kvm-Add-x2apic-to-cpuid-feature-set-for-new-Intel-models.patch [bz#601517]
  - Resolves: bz#566785
    (virt block layer must not keep guest's logical_block_size fixed)
  - Resolves: bz#597198
    (qxl: 16bpp vga mode is broken.)
  - Resolves: bz#597968
    (Should not allow one physical NIC card to be assigned to one guest for many times)
  - Resolves: bz#600205
    (Live migration cause qemu-kvm Segmentation fault (core dumped)by using "-vga std")
  - Resolves: bz#601517
    (x2apic needs to be present in all new Intel cpu models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.88.el6
changelog:
  - kvm-Exit-if-incoming-migration-fails.patch [bz#570174]
  - kvm-Factorize-common-migration-incoming-code.patch [bz#570174]
  - Resolves: bz#570174
    (Restoring a qemu guest from a saved state file using -incoming sometimes fails and hangs)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.89.el6
changelog:
  - kvm-device-assignment-be-more-selective-in-interrupt-dis.patch [bz#605361]
  - Resolves: bz#605361
    (82576 physical function device assignment doesn't work with win7)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.90.el6
changelog:
  - kvm-device-assignment-Avoid-munmapping-the-real-MSIX-are.patch [bz#572043]
  - kvm-device-assignment-Cleanup-on-exit.patch [bz#572043]
  - Resolves: bz#572043
    (Guest gets segfault when do multiple device hot-plug and hot-unplug)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.91.el6
changelog:
  - kvm-doc-Update-monitor-info-subcommands.patch [bz#582262]
  - kvm-Fix-typo-in-balloon-help.patch [bz#582262]
  - kvm-monitor-Reorder-info-documentation.patch [bz#582262]
  - kvm-QMP-Introduce-commands-documentation.patch [bz#582262]
  - kvm-QMP-Sync-documentation-with-RHEL6-only-changes.patch [bz#582262]
  - kvm-Monitor-Drop-QMP-documentation-from-code.patch [bz#582262]
  - kvm-hxtool-Fix-line-number-reporting-on-SQMP-EQMP-errors.patch [bz#582262]
  - kvm-monitor-New-command-__com.redhat_drive_add.patch [bz#581963]
  - kvm-Fix-driftfix-option.patch [bz#611229]
  - Resolves: bz#581963
    (QMP: missing drive_add command in JSON mode)
  - Resolves: bz#582262
    (QMP: Missing commands doc)
  - Resolves: bz#611229
    (-rtc cmdline changes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.92.el6
changelog:
  - build-time-only fix: fix the tarball-generation make-release script for newer git versions
    (kvm-make-release-fix-mtime-on-rhel6-beta.patch)
  - Related: bz#581963 bz#582262 bz#611229


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.93.el6
changelog:
  - kvm-make-rtc-alatm-work.patch [bz#598836]
  - kvm-qemu-img-check-Distinguish-different-kinds-of-errors.patch [bz#612164]
  - kvm-qcow2-vdi-Change-check-to-distinguish-error-cases.patch [bz#612164]
  - Resolves: bz#598836
    (RHEL 6.0 RTC Alarm unusable in vm)
  - Resolves: bz#612164
    ([kvm] qemu image check returns cluster errors when using virtIO block (thinly provisioned) during e_no_space events (along with EIO errors))


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.94.el6
changelog:
  - kvm-Revert-ide-save-restore-pio-atapi-cmd-transfer-field.patch [bz#612481]
  - kvm-vmstate-add-subsections-code.patch [bz#612481]
  - kvm-ide-fix-migration-in-the-middle-of-pio-operation.patch [bz#612481]
  - kvm-ide-fix-migration-in-the-middle-of-a-bmdma-transfer.patch [bz#612481]
  - kvm-Initial-documentation-for-migration-Signed-off-by-Ju.patch [bz#612481]
  - kvm-Disable-non-rhel-machine-types-pc-0.12-pc-0.11-pc-0..patch [bz#607263]
  - Resolves: bz#607263
    (Remove -M pc-0.12 support)
  - Resolves: bz#612481
    (Enable migration subsections)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.95.el6
changelog:
  - kvm-Move-CPU-definitions-to-usr-share-.-BZ-610805.patch [bz#610805]
  - kvm-QEMUFileBuffered-indicate-that-we-re-ready-when-the-.patch [bz#609261]
  - kvm-device-assignment-Better-fd-tracking.patch [bz#611715]
  - Resolves: bz#609261
    (Exec outgoing migration is too slow)
  - Resolves: bz#610805
    (Move CPU definitions to /usr/share/...)
  - Resolves: bz#611715
    (qemu-kvm gets no responsive  when do  hot-unplug pass-through device)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.96.el6
changelog:
  - fix some errors in ksmd.init [bz#570467]
  - fix some errors in ksmtuned.init [bz#579883]
  - kvm-Add-x2apic-to-cpuid-feature-set-for-new-AMD-models.-.patch [bz#613884]
  - Resolves: bz#570467
    ([RHEL 6] Initscripts improvement for ksm and ksmtuned)
  - Resolves: bz#579883
    (init script doesn't stop ksmd)
  - Resolves: bz#613884
    (x2apic needs to be present in all new AMD cpu models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.97.el6
changelog:
  - kvm-block-Fix-early-failure-in-multiwrite.patch [bz#602209]
  - kvm-block-Handle-multiwrite-errors-only-when-all-request.patch [bz#602209]
  - kvm-migration-respect-exit-status-with-exec.patch [bz#584372]
  - kvm-set-proper-migration-status-on-write-error-v3.patch [bz#584372]
  - kvm-Set-SMBIOS-vendor-to-QEMU-for-RHEL5-machine-types.patch [bz#614377]
  - kvm-Don-t-reset-bs-is_temporary-in-bdrv_open_common.patch [bz#611797]
  - kvm-Change-default-CPU-model-qemu64-to-model-6.patch [bz#614537]
  - kvm-set-model-6-on-Intel-CPUs-on-cpu-x86_64.conf.patch [bz#614537]
  - kvm-vhost-fix-miration-during-device-start.patch [bz#615228]
  - Resolves: bz#584372
    (Fails to detect errors when using exec: based migration)
  - Resolves: bz#602209
    (Core dumped during Guest installation)
  - Resolves: bz#611797
    (qemu does not call unlink() on temp files in snapshot mode)
  - Resolves: bz#614377
    (Windows 7 requires re-activation when migrated from RHEL5 to RHEL6)
  - Resolves: bz#614537
    (Skype crashes on VM.)
  - Resolves: bz#615228
    (oom in vhost_dev_start)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.98.el6
changelog:
  - kvm-ram_blocks-Convert-to-a-QLIST.patch [bz#596328]
  - kvm-Remove-uses-of-ram.last_offset-aka-last_ram_offset.patch [bz#596328]
  - kvm-pc-Allocate-all-ram-in-a-single-qemu_ram_alloc.patch [bz#596328]
  - kvm-qdev-Add-a-get_dev_path-function-to-BusInfo.patch [bz#596328]
  - kvm-pci-Implement-BusInfo.get_dev_path.patch [bz#596328]
  - kvm-savevm-Add-DeviceState-param.patch [bz#596328]
  - kvm-savevm-Make-use-of-DeviceState.patch [bz#596328]
  - kvm-eepro100-Add-a-dev-field-to-eeprom-new-free-function.patch [bz#596328]
  - kvm-virtio-net-Incorporate-a-DeviceState-pointer-and-let.patch [bz#596328]
  - kvm-qemu_ram_alloc-Add-DeviceState-and-name-parameters.patch [bz#596328]
  - kvm-ramblocks-Make-use-of-DeviceState-pointer-and-BusInf.patch [bz#596328]
  - kvm-savevm-Migrate-RAM-based-on-name-offset.patch [bz#596328]
  - kvm-savevm-Use-RAM-blocks-for-basis-of-migration.patch [bz#596328]
  - kvm-savevm-Create-a-new-continue-flag-to-avoid-resending.patch [bz#596328]
  - kvm-qemu_ram_free-Implement-it.patch [bz#596328]
  - kvm-pci-Free-the-space-allocated-for-the-option-rom-on-r.patch [bz#596328]
  - kvm-ramblocks-No-more-being-lazy-about-duplicate-names.patch [bz#596328]
  - kvm-savevm-Reset-last-block-info-at-beginning-of-each-sa.patch [bz#616525]
  - kvm-block-Change-bdrv_commit-to-handle-multiple-sectors-.patch [bz#615152]
  - kvm-Revert-virtio-Enable-the-PUBLISH_USED-feature-by-def.patch [bz#616501]
  - kvm-Revert-vhost-net-check-PUBLISH_USED-in-backend.patch [bz#616501]
  - kvm-Revert-virtio-utilize-PUBLISH_USED_IDX-feature.patch [bz#616501]
  - kvm-savevm-Fix-memory-leak-of-compat-struct.patch [bz#596328]
  - kvm-virtio-blk-Create-exit-function-to-unregister-savevm.patch [bz#580010]
  - Resolves: bz#580010
    (migration failed after pci_add and pci_del a virtio storage device)
  - Resolves: bz#596328
    ([RHEL6 Beta1] : KVM guest remote migration fails with pci device hotplug.)
  - Resolves: bz#615152
    (rhel 6 performance worse than rhel5.6 when committing 1G  changes recorded in  snapshot in its base image.)
  - Resolves: bz#616501
    (publish used ABI incompatible with future guests)
  - Resolves: bz#616525
    (savevm needs to reset block info on each new save)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.99.el6
changelog:
  - kvm-Documentation-Add-a-warning-message-to-qemu-kvm-help.patch [bz#596232]
  - Resolves: bz#596232
    (Update docs to exclude unsupported options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.100.el6
changelog:
  - kvm-Disable-SCSI.patch [bz#617534]
  - kvm-spice-don-t-force-fullscreen-redraw-on-display-resiz.patch [bz#612074]
  - kvm-KVM_GET_SUPPORTED_CPUID-doesn-t-return-all-host-cpui.patch [bz#616188]
  - kvm-Do-not-try-loading-option-ROM-for-hotplug-PCI-device.patch [bz#612696]
  - Resolves: bz#612074
    (core dumped while live migration with spice)
  - Resolves: bz#612696
    (virsh attach-device crash kvm guest.)
  - Resolves: bz#616188
    (KVM_GET_SUPPORTED_CPUID doesn't return all host cpuid flags..)
  - Resolves: bz#617534
    (Disable SCSI and usb-storage)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.101.el6
changelog:
  - kvm-virtio-net-correct-packet-length-checks.patch [bz#591494]
  - kvm-avoid-canceling-ide-dma-rediff.patch [bz#617414]
  - Resolves: bz#591494
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#617414
    (avoid canceling in flight ide dma)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.102.el6
changelog:
  - kvm-spice-Rename-conflicting-ramblock.patch [bz#617463]
  - kvm-block-default-to-0-minimal-optimal-I-O-size.patch [bz#617271]
  - Resolves: bz#617271
    (RHEL6 qemu-kvm guest gets partitioned at sector 63)
  - Resolves: bz#617463
    (Coredump occorred when enable qxl)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.103.el6
changelog:
  - kvm-migration-Accept-cont-only-after-successful-incoming.patch [bz#581555]
  - Resolves: bz#581555
    (race between qemu monitor "cont" and incoming migration can cause failed restore/migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.104.el6
changelog:
  - kvm-vhost_dev_unassign_memory-don-t-assert-if-removing-f.patch [bz#617085]
  - Resolves: bz#617085
    (core dumped when add netdev to VM with vhost on)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.105.el6
changelog:
  - kvm-device-assignment-Use-PCI-I-O-port-sysfs-resource-fi.patch [bz#615214]
  - kvm-block-Change-bdrv_eject-not-to-drop-the-image.patch [bz#558256]
  - Resolves: bz#558256
    (rhel6 disk not detected first time in install)
  - Resolves: bz#615214
    ([VT-d] Booting RHEL6 guest with Intel 82541PI NIC assigned by libvirt cause qemu crash)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.106.el6
changelog:
  - kvm-device-assignment-Leave-option-ROM-space-RW-KVM-does.patch [bz#618788]
  - kvm-block-Fix-bdrv_has_zero_init.patch [bz#616890]
  - kvm-Fix-segfault-in-mmio-subpage-handling-code.patch [bz#619414]
  - kvm-Migration-reopen-block-devices-files.patch [bz#618601]
  - Resolves: bz#616890
    ("qemu-img convert" fails on block device)
  - Resolves: bz#618601
    (We need to reopen images after migration)
  - Resolves: bz#618788
    (device-assignment hangs with kvm_run: Bad address)
  - Resolves: bz#619414
    (CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register() [rhel-6.0])


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.107.el6
changelog:
  - kvm-Correct-cpuid-flags-and-model-fields-V2.patch [bz#613892 bz#618332]
  - Resolves: bz#613892
    ([SR-IOV]VF device can not start on 32bit Windows2008 SP2)
  - Resolves: bz#618332
    (CPUID_EXT_POPCNT enabled in qemu64 and qemu32 built-in models.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.108.el6
changelog:
  - kvm-Fix-migration-with-spice-enabled.patch [bz#618168]
  - kvm-virtio-Factor-virtqueue_map_sg-out.patch [bz#607244]
  - kvm-virtio-blk-Fix-migration-of-queued-requests.patch [bz#607244]
  - Resolves: bz#607244
    (virtio-blk doesn't load list of pending requests correctly)
  - Resolves: bz#618168
    (Qemu-kvm in the src host core dump when do migration by using spice)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.109.el6
changelog:
  - kvm-qdev-Reset-hotplugged-devices.patch [bz#607611]
  - kvm-Block-I-O-signals-in-audio-helper-threads.patch [bz#621161]
  - Resolves: bz#607611
    (pci hotplug of e1000, rtl8139 nic device fails for all guests.)
  - Resolves: bz#621161
    (qemu-kvm crashes with I/O Possible message)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.110.el6
changelog:
  - kvm-vhost-Fix-size-of-dirty-log-sync-on-resize.patch [bz#622356]
  - Resolves: bz#622356
    (Live migration failed during reboot due to vhost)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.112.el6
changelog:
  - kvm-qemu-img-rebase-Open-new-backing-file-read-only.patch [bz#624666]
  - Resolves: bz#624666
    (qemu-img re-base broken on RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.113.el6
changelog:
  - kvm-disable-guest-provided-stats-on-info-ballon-monitor-.patch [bz#623903]
  - Resolves: bz#623903
    (query-balloon commmand didn't return on pasued guest cause virt-manger hang)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.114.el6
changelog:
  - fix ksmd.init "status" [bz#570467]
  - kvm-virtio-net-Make-tx_timer-timeout-configurable.patch [bz#624767]
  - kvm-virtio-net-Limit-number-of-packets-sent-per-TX-flush.patch [bz#624767]
  - kvm-virtio-net-Rename-tx_timer_active-to-tx_waiting.patch [bz#624767]
  - kvm-virtio-net-Introduce-a-new-bottom-half-packet-TX.patch [bz#624767]
  - kvm-spice-qxl-enable-some-highres-modes.patch [bz#482427]
  - kvm-add-MADV_DONTFORK-to-guest-physical-memory-v2.patch [bz#633699]
  - kvm-virtio-serial-Check-if-virtio-queue-is-ready-before-.patch [bz#596610]
  - kvm-virtio-serial-Assert-for-virtio-queue-ready-before-v.patch [bz#596610]
  - kvm-virtio-serial-Check-if-more-max_ports-specified-than.patch [bz#616703]
  - kvm-virtio-serial-Cleanup-on-device-hot-unplug.patch [bz#624396]
  - kvm-block-Fix-image-re-open-in-bdrv_commit.patch [bz#635354]
  - kvm-qxl-clear-dirty-rectangle-on-resize.patch [bz#617119]
  - kvm-VGA-Don-t-register-deprecated-VBE-range.patch [bz#625948]
  - kvm-BZ-619168-qemu-should-more-clearly-indicate-internal.patch [bz#619168]
  - kvm-fix-and-on-russian-keymap.patch [bz#639437]
  - Resolves: bz#482427
    (support high resolutions)
  - Resolves: bz#570467
    ([RHEL 6] Initscripts improvement for ksm and ksmtuned)
  - Resolves: bz#596610
    ("Guest moved used index from 0 to 61440" if remove virtio serial device before virtserialport)
  - Resolves: bz#616703
    (qemu-kvm core dump with virtio-serial-pci max-port greater than 31)
  - Resolves: bz#617119
    (Qemu becomes unresponsive during unattended_installation)
  - Resolves: bz#619168
    (qemu should more clearly indicate internal detection of this host out-of-memory condition at startup..)
  - Resolves: bz#624396
    (migration failed after hot-unplug virtserialport - Unknown savevm section or instance '0000:00:07.0/virtio-console' 0)
  - Resolves: bz#624767
    (Replace virtio-net TX timer mitigation with bottom half handler)
  - Resolves: bz#625948
    (qemu exits when hot adding rtl8139 nic to win2k8 guest)
  - Resolves: bz#633699
    (Cannot hot-plug nic in windows VM when the vmem is larger)
  - Resolves: bz#635354
    (Can not commit copy-on-write image's data to raw backing-image)
  - Resolves: bz#639437
    (Incorrect russian vnc keymap)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.115.el6
changelog:
  - kvm-spice-qxl-update-modes-ptr-in-post_load.patch [bz#631522]
  - kvm-spice-qxl-make-draw_area-and-vgafb-share-memory.patch [bz#631522]
  - Give a nicer message if retune is called while ksmtuned is off [bz#637976]
  - Resolves: bz#631522
    (spice: prepare qxl for 6.1 update.)
  - Resolves: bz#637976
    (ksmtuned: give a nicer message if retune is called while ksmtuned is off)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.116.el6
changelog:
  - ksmtuned: committed_memory of 0 qemus [bz#609016]
  - kvm-Fix-underflow-error-in-device-assignment-size-check.patch [bz#632054]
  - kvm-check-for-close-errors-on-qcow2_create.patch [bz#641127]
  - Resolves: bz#609016
    (incorrect committed memory on idle host)
  - Resolves: bz#632054
    ([Intel 6.0 Virt] guest bootup fail with intel 82574L NIC assigned)
  - Resolves: bz#641127
    (qemu-img ignores close() errors)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.117.el6
changelog:
  - kvm-savevm-Really-verify-if-a-drive-supports-snapshots.patch [bz#599307]
  - kvm-drop-boot-on-from-help-string.patch [bz#643681]
  - kvm-Fix-parameters-of-prctl.patch [bz#585910]
  - kvm-Ignore-SRAO-MCE-if-another-MCE-is-being-processed.patch [bz#585910]
  - kvm-Add-RAM-physical-addr-mapping-in-MCE-simulation.patch [bz#585910]
  - kvm-Add-savevm-loadvm-support-for-MCE.patch [bz#585910]
  - kvm-Fix-SRAO-SRAR-MCE-injecting-on-guest-without-MCG_SER.patch [bz#585910]
  - Resolves: bz#585910
    ([Intel 6.1 Bug] SRAO MCE in guest kills QEMU-KVM (qemu-kvm component))
  - Resolves: bz#599307
    (info snapshot return "bdrv_snapshot_list: error -95")
  - Resolves: bz#643681
    (Do not advertise boot=on capability to libvirt)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.118.el6
changelog:
  - kvm-net-delay-freeing-peer-host-device.patch [bz#634661]
  - kvm-QMP-Improve-debuggability-of-the-BLOCK_IO_ERROR-even.patch [bz#624607]
  - Resolves: bz#624607
    ([qemu] [rhel6] guest installation stop (pause) on 'eother' event over COW disks (thin-provisioning))
  - Resolves: bz#634661
    ([RHEL6 Snap13]: Hot-unplugging of virtio nic issue in Windows2008 KVM guest.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.119.el6
changelog:
  - kvm-bz-603413-e1000-secrc-support.patch [bz#603413]
  - kvm-net-properly-handle-illegal-fd-vhostfd-from-command-.patch [bz#581750]
  - kvm-Enable-non-page-boundary-BAR-device-assignment.patch [bz#647307]
  - kvm-Fix-build-failure-with-DEVICE_ASSIGNMENT_DEBUG.patch [bz#647307]
  - kvm-slow_map-minor-improvements-to-ROM-BAR-handling.patch [bz#647307]
  - kvm-device-assignment-Always-use-slow-mapping-for-PCI-op.patch [bz#647307]
  - kvm-e1000-Fix-TCP-checksum-overflow-with-TSO.patch [bz#648333]
  - kvm-device-assignment-Fix-slow-option-ROM-mapping.patch [bz#647307]
  - Resolves: bz#581750
    (Vhost: Segfault when assigning a none vhostfd)
  - Resolves: bz#603413
    (RHEL3.9 guest netdump hung with e1000)
  - Resolves: bz#647307
    (Support slow mapping of PCI Bars)
  - Resolves: bz#648333
    (TCP checksum overflows in qemu's e1000 emulation code when TSO is enabled in guest OS)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.120.el6
changelog:
  - kvm-Fix-snapshot-deleting-images-on-disk-change.patch [bz#653582]
  - Resolves: bz#653582
    (Changing media with -snapshot deletes image file)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.121.el6
changelog:
  - kvm-monitor-Rename-argument-type-b-to-f.patch [bz#625681]
  - kvm-monitor-New-argument-type-b-bool.patch [bz#625681]
  - kvm-monitor-Use-argument-type-b-for-set_link.patch [bz#625681]
  - kvm-monitor-Convert-do_set_link-to-QObject-QError.patch [bz#625681]
  - Resolves: bz#625681
    (RFE QMP: should have command to disconnect and connect network card for whql testing)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.122.el6
changelog:
  - kvm-cleanup-block-driver-option-handling-in-vl.c.patch [bz#653536]
  - kvm-Add-cache-unsafe-parameter-to-drive.patch [bz#653536]
  - kvm-move-unsafe-to-end-of-caching-modes-in-help.patch [bz#653536]
  - kvm-qemu-img-Eliminate-bdrv_new_open-code-duplication.patch [bz#653536]
  - kvm-qemu-img-Fix-BRDV_O_FLAGS-typo.patch [bz#653536]
  - kvm-qemu-img-convert-Use-cache-unsafe-for-output-image.patch [bz#653536]
  - kvm-block-Fix-virtual-media-change-for-if-none.patch [bz#625319]
  - kvm-Check-for-invalid-initrd-file.patch [bz#624721]
  - kvm-qcow-qcow2-implement-bdrv_aio_flush.patch [bz#653972]
  - kvm-block-Remove-unused-s-hd-in-various-drivers.patch [bz#653972]
  - kvm-qcow2-Remove-unnecessary-flush-after-L2-write.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-write_refcount_block_entries.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-update_refcount.patch [bz#653972]
  - kvm-qcow2-Move-sync-out-of-qcow2_alloc_clusters.patch [bz#653972]
  - kvm-qcow2-Get-rid-of-additional-sync-on-COW.patch [bz#653972]
  - kvm-cutils-qemu_iovec_copy-and-qemu_iovec_memset.patch [bz#653972]
  - kvm-qcow2-Avoid-bounce-buffers-for-AIO-read-requests.patch [bz#653972]
  - kvm-qcow2-Avoid-bounce-buffers-for-AIO-write-requests.patch [bz#653972]
  - kvm-kill-empty-index-on-qemu-doc.texi.patch [bz#604992]
  - kvm-add-VMSTATE_BOOL.patch [bz#645342]
  - kvm-Add-Intel-HD-Audio-support-to-qemu.patch [bz#645342]
  - Resolves: bz#604992
    (index is empty in qemu-doc.html)
  - Resolves: bz#624721
    ([qemu] [rhel6] bad error handling when qemu has no 'read' permissions over {kernel,initrd} files [pass boot options])
  - Resolves: bz#625319
    (Failed to update the media in floppy device)
  - Resolves: bz#645342
    (Implement QEMU driver for modern sound device like Intel HDA)
  - Resolves: bz#653536
    (qemu-img convert poor performance)
  - Resolves: bz#653972
    (qcow2: Backport performance related patches)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.123.el6
changelog:
  - kvm-qcow2-Implement-bdrv_truncate-for-growing-images.patch [bz#613893]
  - kvm-qemu-img-Add-resize-command-to-grow-shrink-disk-imag.patch [bz#613893]
  - kvm-qemu-img-Fix-copy-paste-bug-in-documentation.patch [bz#613893]
  - Resolves: bz#613893
    ([RFE] qemu-io enable truncate function for qcow2.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.124.el6
changelog:
  - kvm-Fix-compilation-error-missing-include-statement.patch [bz#608548]
  - kvm-use-qemu_blockalign-consistently.patch [bz#608548]
  - kvm-raw-posix-handle-512-byte-alignment-correctly.patch [bz#608548]
  - kvm-virtio-blk-propagate-the-required-alignment.patch [bz#608548]
  - kvm-scsi-disk-propagate-the-required-alignment.patch [bz#608548]
  - kvm-ide-propagate-the-required-alignment.patch [bz#608548]
  - kvm-Support-marking-a-device-as-non-migratable.patch [bz#635954]
  - kvm-device-assignment-Register-as-un-migratable.patch [bz#635954]
  - Resolves: bz#608548
    (QEMU doesn't respect hardware sector size of underlying block device when doing O_DIRECT)
  - Resolves: bz#635954
    (RFE: Assigned device should block migration)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.125.el6
changelog:
  - kvm-New-option-fake-machine.patch [bz#658288]
  - spec file code for --enable-fake-machine [bz#658288]
  - Resolves: bz#658288
    (Include (disabled by default) -fake-machine patch on qemu-kvm RPM spec)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.126.el6
changelog:
  - kvm-Fix-build-problem-with-recent-compilers.patch [bz#662633]
  - kvm-vhost-fix-infinite-loop-on-error-path.patch [bz#628634]
  - Resolves: bz#628634
    (vhost_net: untested error handling in vhost_net_start)
  - Resolves: bz#662633
    (Fix build problem with recent compilers)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.127.el6
changelog:
  - kvm-pci-import-Linux-pci_regs.h.patch [bz#624790]
  - kvm-pci-s-PCI_SUBVENDOR_ID-PCI_SUBSYSTEM_VENDOR_ID-g.patch [bz#624790]
  - kvm-pci-use-pci_regs.h.patch [bz#624790]
  - kvm-pci-add-API-to-add-capability-at-a-known-offset.patch [bz#624790]
  - kvm-pci-consolidate-pci_add_capability_at_offset-into-pc.patch [bz#624790]
  - kvm-pci-pci_default_cap_write_config-ignores-wmask.patch [bz#624790]
  - kvm-pci-Remove-pci_enable_capability_support.patch [bz#624790]
  - kvm-device-assignment-Use-PCI-capabilities-support.patch [bz#624790]
  - kvm-pci-Replace-used-bitmap-with-config-byte-map.patch [bz#624790]
  - kvm-pci-Remove-cap.length-cap.start-cap.supported.patch [bz#624790]
  - kvm-device-assignment-Move-PCI-capabilities-to-match-phy.patch [bz#624790]
  - kvm-pci-Remove-capability-specific-handlers.patch [bz#624790]
  - kvm-device-assignment-Make-use-of-config_map.patch [bz#624790]
  - kvm-device-assignment-Fix-off-by-one-in-header-check.patch [bz#624790]
  - kvm-pci-Remove-PCI_CAPABILITY_CONFIG_.patch [bz#624790]
  - kvm-pci-Error-on-PCI-capability-collisions.patch [bz#624790]
  - kvm-device-assignment-Error-checking-when-adding-capabil.patch [bz#624790]
  - kvm-device-assignment-pass-through-and-stub-more-PCI-cap.patch [bz#624790]
  - Resolves: bz#624790
    (pass through fails with KVM using Neterion Inc's X3100 Series 10GbE PCIe I/O Virtualized Server Adapter in Multifunction mode.)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.128.el6
changelog:
  - kvm-virtio-invoke-set_status-callback-on-reset.patch [bz#623735]
  - kvm-virtio-net-unify-vhost-net-start-stop.patch [bz#623735]
  - kvm-tap-clear-vhost_net-backend-on-cleanup.patch [bz#623735]
  - kvm-tap-make-set_offload-a-nop-after-netdev-cleanup.patch [bz#623735]
  - Resolves: bz#623735
    (hot unplug of vhost net virtio NIC causes qemu segfault)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.129.el6
changelog:
  - kvm-let-management-choose-whether-transparent-huge-pages.patch [bz#628308]
  - kvm-tap-generalize-code-for-different-vnet-header-len.patch [bz#616659]
  - kvm-tap-add-APIs-for-vnet-header-length.patch [bz#616659]
  - kvm-vhost_net-mergeable-buffers-support.patch [bz#616659]
  - kvm-vhost-Fix-address-calculation-in-vhost_dev_sync_regi.patch [bz#623552]
  - Resolves: bz#616659
    (mrg buffers: migration breaks between systems with/without vhost)
  - Resolves: bz#623552
    (SCP image fails from host to guest with vhost on when do migration)
  - Resolves: bz#628308
    ([RFE] let management choose whether transparent huge pages are used)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.130.el6
changelog:
  - kvm-Bug-632257-Duplicate-CPU-fea.tures-in-cpu-x86_64.con.patch [bz#632257]
  - kvm-BZ-647308-Support-Westmere-as-a-CPU-model-or-include.patch [bz#647308]
  - kvm-trace-Add-trace-events-file-for-declaring-trace-even.patch [bz#632722]
  - kvm-trace-Support-disabled-events-in-trace-events.patch [bz#632722]
  - kvm-trace-Add-user-documentation.patch [bz#632722]
  - kvm-trace-Trace-qemu_malloc-and-qemu_vmalloc.patch [bz#632722]
  - kvm-trace-Trace-virtio-blk-multiwrite-and-paio_submit.patch [bz#632722]
  - kvm-trace-Trace-virtqueue-operations.patch [bz#632722]
  - kvm-trace-Trace-port-IO.patch [bz#632722]
  - kvm-trace-Trace-entry-point-of-balloon-request-handler.patch [bz#632722]
  - kvm-trace-fix-a-typo.patch [bz#632722]
  - kvm-trace-fix-a-regex-portability-problem.patch [bz#632722]
  - kvm-trace-avoid-unnecessary-recompilation-if-nothing-cha.patch [bz#632722]
  - kvm-trace-Use-portable-format-strings.patch [bz#632722]
  - kvm-trace-Don-t-strip-lines-containing-arbitrarily.patch [bz#632722]
  - kvm-trace-Trace-bdrv_aio_-readv-writev.patch [bz#632722]
  - kvm-trace-remove-timestamp-files-when-cleaning-up.patch [bz#632722]
  - kvm-trace-Format-strings-must-begin-end-with-double-quot.patch [bz#632722]
  - kvm-apic-convert-debug-printf-statements-to-tracepoints.patch [bz#632722]
  - kvm-Add-a-DTrace-tracing-backend-targetted-for-SystemTAP.patch [bz#632722]
  - kvm-Add-support-for-generating-a-systemtap-tapset-static.patch [bz#632722]
  - kvm-trace-Trace-vm_start-vm_stop.patch [bz#632722]
  - spec file changes to enable trace support [bz#632722]
  - Resolves: bz#632257
    (Duplicate CPU fea.tures in cpu-x86_64.conf)
  - Resolves: bz#632722
    ([6.1 FEAT] QEMU static tracing framework)
  - Resolves: bz#647308
    (Support Westmere as a CPU model or included within existing models..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.131.el6
changelog:
  - fix spec file to require systemtap, or configure won't enable the systemtap
    tapset
  - Resolves: bz#632722
    ([6.1 FEAT] QEMU static tracing framework)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.132.el6
changelog:
  - kvm-BZ-636494-cpu-check-does-not-correctly-enforce-CPUID.patch [bz#636494]
  - kvm-QDict-Introduce-qdict_get_qdict.patch [bz#647447]
  - kvm-monitor-QMP-Drop-info-hpet-query-hpet.patch [bz#647447]
  - kvm-QMP-Teach-basic-capability-negotiation-to-python-exa.patch [bz#647447]
  - kvm-QMP-Fix-python-helper-wrt-long-return-strings.patch [bz#647447]
  - kvm-QMP-update-query-version-documentation.patch [bz#647447]
  - kvm-Revert-QMP-Remove-leading-whitespace-in-package.patch [bz#647447]
  - kvm-QMP-monitor-update-do_info_version-to-output-broken-.patch [bz#647447]
  - kvm-QMP-Remove-leading-whitespace-in-package-again.patch [bz#647447]
  - kvm-QMP-doc-Add-Stability-Considerations-section.patch [bz#647447]
  - kvm-QMP-Update-README-file.patch [bz#647447]
  - kvm-QMP-Revamp-the-Python-class-example.patch [bz#647447]
  - kvm-QMP-Revamp-the-qmp-shell-script.patch [bz#647447]
  - kvm-QMP-Drop-vm-info-example-script.patch [bz#647447]
  - kvm-qemu-char-Introduce-Memory-driver.patch [bz#647447]
  - kvm-QMP-Introduce-Human-Monitor-passthrough-command.patch [bz#647447]
  - kvm-QMP-qmp-shell-Introduce-HMP-mode.patch [bz#647447]
  - kvm-PCI-Export-pci_map_option_rom.patch [bz#667188]
  - kvm-device-assignment-Allow-PCI-to-manage-the-option-ROM.patch [bz#667188]
  - kvm-virtio-serial-bus-bump-up-control-vq-size-to-32.patch [bz#656198]
  - kvm-Move-stdbool.h.patch [bz#635954]
  - kvm-savevm-Fix-no_migrate.patch [bz#635954]
  - kvm-device-assignment-Properly-terminate-vmsd.fields.patch [bz#635954]
  - Resolves: bz#635954
    (RFE: Assigned device should block migration)
  - Resolves: bz#636494
    (-cpu check  does not correctly enforce CPUID items)
  - Resolves: bz#647447
    (QMP:  provide a hmp_passthrough command to allow execution of non-converted commands)
  - Resolves: bz#656198
    (Can only see 16 virtio ports while assigned 30 virtio serial ports on commandLine)
  - Resolves: bz#667188
    (device-assignment leaks option ROM memory)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.133.el6
changelog:
  - kvm-spice-rip-out-all-the-old-non-upstream-spice-bits.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Use-display-types-for-local-display-only.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-pflib-PixelFormat-conversion-library.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-support-for-generic-notifier-lists.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Rewrite-mouse-handlers-to-use-QTAILQ-and-to-have-an-.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-kbd_mouse_has_absolute.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Add-notifier-for-mouse-mode-changes.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-sdl-use-mouse-mode-notifier.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-input-make-vnc-use-mouse-mode-notifiers.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-make-sure-to-send-pointer-type-change-event-on-S.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vmmouse-adapt-to-mouse-handler-changes.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-wacom-tablet-activate-event-handlers.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-cursor-add-cursor-functions.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-use-new-cursor-struct-functions-for-vmware-vga-and-s.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-spice-into-the-configure-file-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-bits-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-keyboard-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-mouse-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-simple-display-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-tablet-support.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-tls-support-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-make-compression-configurable.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-config-options-for-channel-security.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-config-options-for-the-listening-address.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-misc-config-options.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-audio.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-add-copyright-to-spiceaudio.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-fix-watching-for-write-events.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-core-fix-warning-when-building-with-spice-0.6..patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-display-replace-private-lock-with-qemu-mutex.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-qxl-device-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-connection-events.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-spice-add-qmp-query-spice-and-hmp-info-spice-command.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-Revert-vnc-support-password-expire.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-auth-reject-cleanup.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-support-password-expire-again.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-vnc-spice-add-set_passwd-monitor-command.patch [bz#642131 bz#634153 bz#615947 bz#632458 bz#631832 bz#647865]
  - kvm-qdev-Track-runtime-machine-modifications.patch [bz#653591]
  - kvm-rtl8139-Use-subsection-to-restrict-migration-after-h.patch [bz#653591]
  - kvm-add-migration-state-change-notifiers.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-vnc-client-migration.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-vnc-spice-fix-never-and-now-expire_time.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qxl-zap-spice-0.4-migration-compatibility-bits.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-add-chardev-v4.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-qxl-locking-fix.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qxl-locking-fix-for-qemu-kvm.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-qmp-events-restore-rhel6.0-compatibility.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - kvm-spice-monitor-commands-restore-rhel6.0-compatibility.patch [bz#615947 bz#631832 bz#632458 bz#634153 bz#642131 bz#647865]
  - Resolves: bz#615947
    (RFE QMP: support of query spice for guest)
  - Resolves: bz#631832
    (manpage is missing spice options)
  - Resolves: bz#632458
    (Guest may core dump when booting with spice and qxl.)
  - Resolves: bz#634153
    (coredumped when enable qxl without spice)
  - Resolves: bz#642131
    (qemu-kvm aborts of 'qemu_spice_display_create_update: unhandled depth: 0 bits')
  - Resolves: bz#647865
    (support 2560x1440 in qxl)
  - Resolves: bz#653591
    ([RHEL6 Snap13]: Hot-unplugging issue noticed with rtl8139nic after migration of KVM guest.)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.134.el6
changelog:
  - kvm-switch-stdvga-to-pci-vgabios.patch [bz#638468]
  - kvm-switch-vmware_vga-to-pci-vgabios.patch [bz#638468]
  - kvm-add-rhel6.1.0-machine-type.patch [bz#638468]
  - kvm-vgabios-update-handle-compatibility-with-older-qemu-.patch [bz#638468]
  - kvm-qemu-io-Fix-error-messages.patch [bz#672187]
  - kvm-wdt_i6300esb-register-a-reset-function.patch [bz#637180]
  - kvm-Watchdog-disable-watchdog-timer-when-hard-rebooting-.patch [bz#637180]
  - kvm-usb-linux-increase-buffer-for-USB-control-requests.patch [bz#672720]
  - kvm-device-assignment-Cap-number-of-devices-we-can-have-.patch [bz#670787]
  - kvm-clear-vapic-after-reset.patch [bz#669268]
  - kvm-add-support-for-protocol-driver-create_options.patch [bz#637701]
  - kvm-qemu-img-avoid-calling-exit-1-to-release-resources-p.patch [bz#637701]
  - kvm-Use-qemu_mallocz-instead-of-calloc-in-img_convert.patch [bz#637701]
  - kvm-img_convert-Only-try-to-free-bs-entries-if-bs-is-val.patch [bz#637701]
  - kvm-Consolidate-printing-of-block-driver-options.patch [bz#637701]
  - kvm-Fix-formatting-and-missing-braces-in-qemu-img.c.patch [bz#637701]
  - kvm-Fail-if-detecting-an-unknown-option.patch [bz#637701]
  - kvm-Make-error-handling-more-consistent-in-img_create-an.patch [bz#637701]
  - kvm-qemu-img-Deprecate-obsolete-6-and-e-options.patch [bz#637701]
  - kvm-qemu-img-Free-option-parameter-lists-in-img_create.patch [bz#637701]
  - kvm-qemu-img-Fail-creation-if-backing-format-is-invalid.patch [bz#637701]
  - kvm-Introduce-strtosz-library-function-to-convert-a-stri.patch [bz#637701]
  - kvm-Introduce-strtosz_suffix.patch [bz#637701]
  - kvm-qemu-img.c-Clean-up-handling-of-image-size-in-img_cr.patch [bz#637701]
  - kvm-qemu-img.c-Re-factor-img_create.patch [bz#637701]
  - kvm-Introduce-do_snapshot_blkdev-and-monitor-command-to-.patch [bz#637701]
  - kvm-Prevent-creating-an-image-with-the-same-filename-as-.patch [bz#637701]
  - kvm-qemu-option-Fix-uninitialized-value-in-append_option.patch [bz#637701]
  - kvm-bdrv_img_create-use-proper-errno-return-values.patch [bz#637701]
  - kvm-block-Use-backing-format-driver-during-image-creatio.patch [bz#637701]
  - kvm-Make-strtosz-return-int64_t-instead-of-ssize_t.patch [bz#637701]
  - kvm-strtosz-use-unsigned-char-and-switch-to-qemu_isspace.patch [bz#637701]
  - kvm-strtosz-use-qemu_toupper-to-simplify-switch-statemen.patch [bz#637701]
  - kvm-strtosz-Fix-name-confusion-in-use-of-modf.patch [bz#637701]
  - kvm-strtosz-Use-suffix-macros-in-switch-statement.patch [bz#637701]
  - kvm-do_snapshot_blkdev-error-on-missing-snapshot_file-ar.patch [bz#637701]
  - kvm-pci-memory-leak-of-PCIDevice-rom_file.patch [bz#672229]
  - Resolves: bz#637180
    (watchdog timer isn't reset when qemu resets)
  - Resolves: bz#637701
    (RFE - support live snapshot of a subset of disks without RAM)
  - Resolves: bz#638468
    ([qemu-kvm] bochs vga lfb @ 0xe0000000 causes trouble for hot-plug)
  - Resolves: bz#669268
    (WinXP hang when reboot after setup copies files to the installation folders)
  - Resolves: bz#670787
    (Hot plug the 14st VF to guest causes guest shut down)
  - Resolves: bz#672187
    (Improper responsive message when shrinking qcow2 image)
  - Resolves: bz#672229
    (romfile memory leak)
  - Resolves: bz#672720
    (getting 'ctrl buffer too small' error on USB passthrough)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.135.el6
changelog:
  - kvm-Bug-625333-qemu-treatment-of-nodefconfig-and-readcon.patch [bz#625333]
  - kvm-ide-Factor-ide_flush_cache-out.patch [bz#670539]
  - kvm-ide-Handle-flush-failure.patch [bz#670539]
  - kvm-virtio-blk-Respect-werror-option-for-flushes.patch [bz#670539]
  - kvm-block-Allow-bdrv_flush-to-return-errors.patch [bz#670539]
  - kvm-ide-Handle-immediate-bdrv_aio_flush-failure.patch [bz#670539]
  - kvm-virtio-blk-Handle-immediate-flush-failure-properly.patch [bz#670539]
  - kvm-vhost-error-code.patch [bz#633394]
  - kvm-vhost-fix-up-irqfd-support.patch [bz#633394]
  - kvm-virtio-pci-mask-notifier-error-handling-fixups.patch [bz#633394]
  - kvm-test-for-ioeventfd-support-on-old-kernels.patch [bz#633394]
  - kvm-virtio-pci-Rename-bugs-field-to-flags.patch [bz#633394]
  - kvm-virtio-move-vmstate-change-tracking-to-core.patch [bz#633394]
  - kvm-virtio-pci-Use-ioeventfd-for-virtqueue-notify.patch [bz#633394]
  - kvm-ioeventfd-error-handling-cleanup.patch [bz#633394]
  - kvm-remove-redhat-disable-THP.patch [bz#635418]
  - kvm-PATCH-RHEL6.1-qemu-kvm-acpi_piix4-qdevfy.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-pci-allow-devices-being-tagge.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-piix-tag-as-not-hotpluggable.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-vga-tag-as-not-hotplugable-v3.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-qxl-tag-as-not-hotpluggable.patch [bz#498774]
  - kvm-PATCH-RHEL6.1-qemu-kvm-acpi_piix4-expose-no_hotplug-.patch [bz#498774]
  - kvm-char-Split-out-tcp-socket-close-code-in-a-separate-f.patch [bz#621484]
  - kvm-char-mark-socket-closed-if-write-fails-with-EPIPE.patch [bz#621484]
  - Resolves: bz#498774
    (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))
  - Resolves: bz#621484
    (Broken pipe when working with unix socket chardev)
  - Resolves: bz#625333
    (qemu treatment of -nodefconfig and -readconfig problematic for debug)
  - Resolves: bz#633394
    ([6.1 FEAT] virtio-blk ioeventfd support)
  - Resolves: bz#635418
    (Allow enable/disable ksm per VM)
  - Resolves: bz#670539
    (Block devices don't implement correct flush error handling)
  - Related: bz#635418
    (Allow enable/disable ksm per VM)


author: Luiz Capitulino <lcapitulino@redhat.com> - qemu-kvm-0.12.1.2-2.136.el6
changelog:
  - kvm-Introduce-fw_name-field-to-DeviceInfo-structure.patch [bz#643687]
  - kvm-Introduce-new-BusInfo-callback-get_fw_dev_path.patch [bz#643687]
  - kvm-Keep-track-of-ISA-ports-ISA-device-is-using-in-qdev.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-ISA-bus-in-qdev.patch [bz#643687]
  - kvm-Store-IDE-bus-id-in-IDEBus-structure-for-easy-access.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-IDE-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-system-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-pci-bus.patch [bz#643687]
  - kvm-Record-which-USBDevice-USBPort-belongs-too.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-for-usb-bus.patch [bz#643687]
  - kvm-Add-get_fw_dev_path-callback-to-scsi-bus.patch [bz#643687]
  - kvm-Add-bootindex-parameter-to-net-block-fd-device.patch [bz#643687]
  - kvm-Change-fw_cfg_add_file-to-get-full-file-path-as-a-pa.patch [bz#643687]
  - kvm-Add-bootindex-for-option-roms.patch [bz#643687]
  - kvm-Add-notifier-that-will-be-called-when-machine-is-ful.patch [bz#643687]
  - kvm-Pass-boot-device-list-to-firmware.patch [bz#643687]
  - kvm-close-all-the-block-drivers-before-the-qemu-process-.patch [bz#635527]
  - kvm-qemu-img-snapshot-Use-writeback-caching.patch [bz#635527]
  - kvm-qcow2-Add-QcowCache.patch [bz#635527]
  - kvm-qcow2-Use-QcowCache.patch [bz#635527]
  - kvm-qcow2-Batch-flushes-for-COW.patch [bz#635527]
  - Commited 'Remove vhost blacklisting' by hand [bz#665299]
  - kvm-add-bootindex-parameter-to-assigned-device.patch [bz#643687]
  - kvm-tap-safe-sndbuf-default.patch [bz#674539]
  - kvm-do-not-pass-NULL-to-strdup.patch [bz#643687]
  - kvm-Use-Makefile-to-install-qemu-kvm-in-correct-location.patch [bz#672441]
  - kvm-Fix-CVE-2011-0011-qemu-kvm-Setting-VNC-password-to-e.patch [bz#667976]
  - kvm-vhost-force-vhost-off-for-non-MSI-guests.patch [bz#674562]
  - Resolves: bz#635527
    (KVM:qemu-img re-base poor performance(on local storage) when snapshot to a new disk)
  - Resolves: bz#643687
    (Allow to specify boot order on qemu command line.)
  - Resolves: bz#665299
    (load vhost-net by default)
  - Resolves: bz#667976
    (CVE-2011-0011 qemu-kvm: Setting VNC password to empty string silently disables all authentication [rhel-6.1])
  - Resolves: bz#672441
    (Tracetool autogenerate qemu-kvm.stp with wrong qemu-kvm path)
  - Resolves: bz#674539
    (slow guests block other guests on the same lan)
  - Resolves: bz#674562
    (disable vhost-net for rhel5 and older guests)


