# changelog

author: Aristeu Rozanski <aris@redhat.com> [2.6.32-611.el6]
changelog:
  - [target] fcoe: Add tag support to tcm_fc (Andy Grover) [882092]
  - [scsi] don't store LUN bits in CDB byte 1 for USB mass-storage devices (Ewan Milne) [1255846]
  - [scsi] usb-storage: add try_rc_10_first flag (Ewan Milne) [1255846]
  - [scsi] usb-storage: add flags for VPD pages and REPORT LUNS (Ewan Milne) [1255846]
  - [mm] hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault (Andrea Arcangeli) [1291248]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-612.el6]
changelog:
  - [netdrv] ixgbevf: Minor cleanups (John Greene) [1249245]
  - [netdrv] ixgbevf: fix spoofed packets with random MAC (John Greene) [1249245]
  - [netdrv] ixgbevf: use ether_addr_copy instead of memcpy (John Greene) [1249245]
  - [netdrv] ixgbevf: Limit lowest interrupt rate for adaptive interrupt moderation to 12K (John Greene) [1249245]
  - [netdrv] drivers/net/intel: use napi_complete_done - ixgbevf only (John Greene) [1249245]
  - [netdrv] ixgbevf: add support for reporting RSS key and hash table for X550 (John Greene) [1249245]
  - [netdrv] ixgbevf: Set Rx hash type for ingress packets (John Greene) [1249245]
  - [netdrv] ixgbevf: fold ixgbevf_pull_tail into ixgbevf_add_rx_frag (John Greene) [1249245]
  - [netdrv] ixgbevf: Use dev_kfree_skb_any in xmit path, not dev_kfree_skb (John Greene) [1249245]
  - [netdrv] ixgbevf: Add the appropriate ethtool ops to query RSS indirection table and key (John Greene) [1249245]
  - [netdrv] ixgbevf: Add RSS Key query code (John Greene) [1249245]
  - [netdrv] ixgbevf: Add a RETA query code (John Greene) [1249245]
  - [netdrv] ixgbevf: Use ether_addr_copy instead of memcpy (John Greene) [1249245]
  - [netdrv] ixgbevf: Fix code comments and whitespace (John Greene) [1249245]
  - [netdrv] ethernet: codespell comment spelling fixes (John Greene) [1249245]
  - [netdrv] ixgbevf: combine all of the tasks into a single service task (John Greene) [1249245]
  - [netdrv] ixgbevf: rewrite watchdog task to function similar to igbvf (John Greene) [1249245]
  - [netdrv] ethernet/intel: Use eth_skb_pad and skb_put_padto helpers - ixgbevf only (John Greene) [1249245]
  - [netdrv] ixgbevf: add netpoll support (John Greene) [1249244 1277784]
  - [netdrv] ixgbevf: compare total_rx_packets and budget in ixgbevf_clean_rx_irq (John Greene) [1249245]
  - [netdrv] ixgbevf: Change receive model to use double buffered page based receives (John Greene) [1249245]
  - [netdrv] ixgbevf: convert to ndo_fix_features - part 2 (John Greene) [1249244]
  - [netdrv] ixgbe: do not report 2.5 Gbps as supported (John Greene) [1249244]
  - [netdrv] ixgbe: Clear stale pool mappings (John Greene) [1249244]
  - [netdrv] ixgbe: Reorder search to work from the top down instead of bottom up (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for adding/removing VLAN on PF bypassing the VLVF (John Greene) [1249244]
  - [netdrv] ixgbe: Simplify configuration of setting VLVF and VLVFB (John Greene) [1249244]
  - [netdrv] ixgbe: Reduce VT code indent in set_vfta by introducing jump label (John Greene) [1249244]
  - [netdrv] ixgbe: Simplify definitions for regidx and bit in set_vfta (John Greene) [1249244]
  - [netdrv] ixgbe: Fix SR-IOV VLAN pool configuration (John Greene) [1249244]
  - [netdrv] ixgbe: Return error on failure to allocate mac_table (John Greene) [1249244]
  - [netdrv] ixgbe: Always turn PHY power on when requested (John Greene) [1249244]
  - [netdrv] ixgbe: Save VF info and take references (John Greene) [1249244]
  - [netdrv] ixgbe: Wait for master disable to be set (John Greene) [1249244]
  - [netdrv] ixgbe: Correct spec violations by waiting after reset (John Greene) [1249244]
  - [netdrv] ixgbe: Refactor MAC address configuration code (John Greene) [1249244]
  - [netdrv] ixgbe: Use private workqueue to avoid certain possible hangs (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for newer thermal alarm (John Greene) [1249244]
  - [netdrv] ixgbe: Prevent KR PHY reset in ixgbe_init_phy_ops_x550em (John Greene) [1249244]
  - [netdrv] ixgbe: Remove CS4227 diagnostic code (John Greene) [1249244]
  - [netdrv] ixgbe: Add KR mode support for CS4227 chip (John Greene) [1249244]
  - [netdrv] ixgbe: Fix handling of NAPI budget when multiple queues are enabled per vector (John Greene) [1249244]
  - [netdrv] ixgbe: fix multiple kernel-doc errors (John Greene) [1249244]
  - [netdrv] intel: use napi_complete_done (John Greene) [1249244]
  - [netdrv] drivers/net: get rid of unnecessary initializations in .get_drvinfo (John Greene) [1249244]
  - [netdrv] ixgbe: Check for setup_internal_link method (John Greene) [1249244]
  - [netdrv] ixgbe: Fix CS4227-related semaphore error on reset failure (John Greene) [1249244]
  - [netdrv] ixgbe: disable LRO by default (John Greene) [1249244]
  - [netdrv] ixgbe: add flow control ethertype to the anti-spoofing filter (John Greene) [1249244]
  - [netdrv] ixgbe: Advance version to 4.2.1 (John Greene) [1249244]
  - [netdrv] ixgbe: X540 thermal warning interrupt not a GPI (John Greene) [1249244]
  - [netdrv] ixgbe: Fix FCRTH value in VM-to-VM loopback mode (John Greene) [1249244]
  - [netdrv] ixgbe: Only clear adapter_stopped if ixgbe_setup_fc succeeded (John Greene) [1249244]
  - [netdrv] ixgbe: Correct several flaws with with DCA setup (John Greene) [1249244]
  - [netdrv] ixgbe: Add new X550EM SFP+ device ID (John Greene) [1249244]
  - [netdrv] ixgbe: Update ixgbe_disable_pcie_master flow for X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Add small packet padding support for X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Correct setting of RDRXCTL register for X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: Correct error path in semaphore handling (John Greene) [1249244]
  - [netdrv] ixgbe: Limit SFP polling rate (John Greene) [1249244]
  - [netdrv] ixgbe: Allow SFP+ on more than 82598 and 82599 (John Greene) [1249244]
  - [netdrv] ixgbe: Add logic to reset CS4227 when needed (John Greene) [1249244]
  - [netdrv] ixgbe: Fix 1G and 10G link stability for X550EM_x SFP+ (John Greene) [1249244]
  - [netdrv] ixgbe: Add X550EM_x dual-speed SFP+ support (John Greene) [1249244]
  - [netdrv] ixgbe: Allow reduced delays during SFP detection (John Greene) [1249244]
  - [netdrv] ixgbe: Clear I2C destination location (John Greene) [1249244]
  - [netdrv] ixgbe: Enable bit-banging mode on X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Set lan_id before first I2C eeprom access (John Greene) [1249244]
  - [netdrv] ixgbe: Provide unlocked I2C methods (John Greene) [1249244]
  - [netdrv] ixgbe: Provide I2C combined on X550EM (John Greene) [1249244]
  - [netdrv] ixgbe: Add X550EM support for SFP insertion interrupt (John Greene) [1249244]
  - [netdrv] ixgbe: Accept SFP not present errors on all devices (John Greene) [1249244]
  - [netdrv] ixgbe: Add fdir support for SCTP on X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Add SFP+ detection for X550 hardware (John Greene) [1249244]
  - [netdrv] ixgbe: Teardown SR-IOV before unregister_netdev (John Greene) [1249244]
  - [netdrv] ixgbe: fix issue with SFP events with new X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: Resolve "initialized field overwritten" warnings (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for reporting 2.5G link speed (John Greene) [1249244]
  - [netdrv] ixgbe: fix bounds checking in ixgbe_setup_tc for 82598 (John Greene) [1249244]
  - [netdrv] ixgbe: support for ethtool set_rxfh (John Greene) [1249244]
  - [netdrv] ixgbe: Avoid needless PHY access on copper phys (John Greene) [1249244]
  - [netdrv] ixgbe: cleanup to use cached mask value (John Greene) [1249244]
  - [netdrv] ixgbe: Remove second instance of lan_id variable (John Greene) [1249244]
  - [netdrv] ixgbe: use kzalloc for allocating one thing (John Greene) [1249244]
  - [netdrv] ixgbe: Remove unused PCI bus types (John Greene) [1249244]
  - [netdrv] ixgbe: add new bus type for intergrated I/O interface (IOSF) (John Greene) [1249244]
  - [netdrv] ixgbe: add get_bus_info method for X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for entering low power link up state (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for VXLAN RX offloads (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for UDP-encapsulated tx checksum offload (John Greene) [1249244]
  - [netdrv] ixgbe: Check whether FDIRCMD writes actually complete (John Greene) [1249244]
  - [netdrv] ixgbe: Assign set_phy_power dynamically where needed (John Greene) [1249244]
  - [netdrv] ixgbe: add new function to check for management presence (John Greene) [1249244]
  - [netdrv] ixgbe: Simplify port-specific macros (John Greene) [1249244]
  - [netdrv] ixgbe: Don't report flow director filter's status (John Greene) [1249244]
  - [netdrv] ixgbe: Specify Rx hash type WRT Rx desc RSS type (John Greene) [1249244]
  - [netdrv] ixgbe: only report generic filters in get_ts_info (John Greene) [1249244]
  - [netdrv] ixgbe: Remember to write ixfi changes after modifying (John Greene) [1249244]
  - [netdrv] ixgbe: fix X550 default set_phy_power method (John Greene) [1249244]
  - [netdrv] ixgbe: Set lan_id before using I2C (John Greene) [1249244]
  - [netdrv] ixgbe: add link check for X550 copper (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for another X550 device (John Greene) [1249244]
  - [netdrv] ixgbe: fix X550 PHY function pointers (John Greene) [1249244]
  - [netdrv] ixgbe: fix X550 devices init flow (John Greene) [1249244]
  - [netdrv] ixgbe: fix bug in not clearing counters for X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: fix issue with sfp events with new X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: add support for interrupts from X550 external PHY (John Greene) [1249244]
  - [netdrv] ixgbe: Add const string for overheat message (John Greene) [1249244]
  - [netdrv] ixgbe: Add reset for X550 device (John Greene) [1249244]
  - [netdrv] ixgbe: add X550 support for external PHY and forced 1G/10G support (John Greene) [1249244]
  - [netdrv] ixgbe: Restore ESDP settings after MAC reset (John Greene) [1249244]
  - [netdrv] ixgbe: Add a PHY power state method (John Greene) [1249244]
  - [netdrv] ixgbe: add define for X557 PHY ID (John Greene) [1249244]
  - [netdrv] ixgbe: add support for WoL and autoneg FC for some X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: add array of MAC type dependent values (John Greene) [1249244]
  - [netdrv] ixgbe: Use a signed type to hold error codes (John Greene) [1249244]
  - [netdrv] ixgbe: Release semaphore bits in the right order (John Greene) [1249244]
  - [netdrv] ixgbe: Fix IOSF SB access issues (John Greene) [1249244]
  - [netdrv] ixgbe: Add GET_RSS_KEY command to VF-PF channel commands set (John Greene) [1249244]
  - [netdrv] ixgbe: Add a RETA query command to VF-PF channel API (John Greene) [1249244]
  - [netdrv] ixgbe: Add a new netdev op to allow/prevent a VF from querying an RSS info (John Greene) [1186052 1246195 1249244 1271403]
  - [netdrv] ixgbe: Add the appropriate ethtool ops to query RSS indirection table and key (John Greene) [1249244]
  - [netdrv] ixgbe: Refactor the RSS configuration code (John Greene) [1249244]
  - [netdrv] ixgbe: Drop unnecessary call to rcu_barrier (John Greene) [1249244]
  - [netdrv] ixgbe: adds x550 specific FCoE offloads (John Greene) [1249244]
  - [netdrv] ethernet: Use bool function returns of true/false instead of 1/0 (John Greene) [1249244]
  - [netdrv] ixgbe: cleanup make ixgbe_set_ethertype_anti_spoofing_X550 static (John Greene) [1249244]
  - [netdrv] ixgbe: Clean up type inconsistency (John Greene) [1249244]
  - [netdrv] ixgbe: add new wrapper for X550 support (John Greene) [1249244]
  - [netdrv] ethernet: codespell comment spelling fixes (John Greene) [1249244]
  - [netdrv] ixgbe: add Tx anti spoofing support (John Greene) [1249244]
  - [netdrv] ixgbe: add VXLAN offload support for X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: improve mac filter handling (John Greene) [1249244]
  - [netdrv] ixgbe: enable l2 forwarding acceleration for macvlans (John Greene) [1249244]
  - [netdrv] ixgbe: show <2 for encoding loss on PCIe Gen3 (John Greene) [1249244]
  - [netdrv] ixgbe: call pcie_get_mimimum_link to check if device has enough bandwidth (John Greene) [1249244]
  - [netdrv] revert "ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue" (John Greene) [1249244]
  - [netdrv] ixgbe: Add function for setting XPS queue mapping (John Greene) [1249244]
  - [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1249244]
  - [netdrv] net/mlx5e: Assign random MAC address if needed (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Write vlan list into vport context (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Write UC/MC list and promisc mode into vport context (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport vlans (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport promisc mode (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport state (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport mac lists (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Update access functions to Query/Modify vport MAC address (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Add HW capabilities and structs for SR-IOV E-Switch (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Use the right DMA free function on TX path (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Max mtu comparison fix (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Added self loopback prevention (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Fix inline header size calculation (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Fix LSO vlan insertion (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Re-eanble client vlan TX acceleration (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Return error in case mlx5e_set_features fails (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Don't allow more than max supported channels (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use the the real irqn in eq->irqn (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Wait for RX buffers initialization in a more proper manner (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid NULL pointer access in case of configuration failure (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Remove dead fmr code (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Wait for FW readiness on startup (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add pci error handlers to mlx5_core driver (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix internal error detection conditions (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use private health thread for each device (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use accessor functions to read from device memory (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Prepare cmd interface to system errors handling (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Improve mlx5 messages (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Update health syndromes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix wrong name in struct (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: New init and exit flow for mlx5_core (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix notification of page supplement error (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix async commands return code (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Remove redundant "err" variable usage (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Priv state flag not rolled-back upon netdev open error (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Disable VLAN filter in promiscuous mode (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Fix typo in mlx5_query_port_pvlc (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Remove dead code from alloc_cached_mr (Kamal Heib) [1246031]
  - [netdrv] mlx5: Expose correct page_size_cap in device attributes (Kamal Heib) [1246031]
  - [netdrv] mlx5: Fix missing device local_dma_lkey (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid accessing NULL pointer at ndo_select_queue (Kamal Heib) [1246031]
  - [netdrv] mlx5e: Fix sparse warnings in mlx5e_handle_csum (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support RX CHECKSUM_COMPLETE (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support ethtool get/set_pauseparam (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Ethtool link speed setting fixes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: HW LRO changes/fixes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support smaller RX/TX ring sizes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Add ethtool RSS configuration options (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Make RSS indirection table size a constant (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Have a single RSS Toeplitz hash key (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Support physical port counters (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Disable async events before unregister_netdev (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Rename/move functions following the ndo_stop flow change (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Light-weight netdev open/stop (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Introduce access function to modify RSS/LRO params (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Introduce the "Drop RQ" (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Unify the RX flow (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove the mlx5e_update_priv_params() function (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Introduce create/destroy RSS indir table access functions (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Do not use netdev_err before the netdev is registered (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid redundant de-reference (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove redundant assignment of sq->user_index (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove redundant field mlx5e_priv->num_tc (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Use hard-coded 4K page size for RQ/SQ/CQ (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Check the return value of mlx5_command_exec (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Input IPSEC.SPI into the RX RSS hash function (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: cosmetics: use BIT instead of "1 <<", and others (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: TX latency optimization to save DMA reads (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Allocate DMA coherent memory on reader NUMA node (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support ETH_RSS_HASH_XOR (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Set log_uar_page_sz for non 4K page size architecture (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Prefetch skb data on RX (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Pop cq outside mlx5e_get_cqe (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove mlx5e_cq.sqrq back-pointer (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove extra spaces (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid TX CQE generation if more xmit packets expected (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid redundant dev_kfree_skb() upon NOP completion (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove re-assignment of wq type in mlx5e_enable_rq (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Use skb_shinfo(skb)->gso_segs rather than counting them (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Static mapping of netdev priv resources to/from netdev TX queues (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Add transport domain to the ethernet TIRs/TISs (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add transport domain alloc/dealloc support (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support NETIF_F_SG (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Enforce max flow-tables level >= 3 (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Disable client vlan TX acceleration (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Add HW cacheline start padding (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Fix HW MTU settings (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: fix an error code (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix static checker warnings around system guid query flow (Kamal Heib) [1246031]
  - [netdrv] mlx5: Enable mutual support for IB and Ethernet (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Don't create IB instance over Ethernet ports (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Avoid using the MAD_IFC command under ISSI > 0 mode (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add more query port helpers (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use port number when querying port ptys (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use port number in the query port mtu helpers (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Get vendor-id using the query adapter command (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add new query HCA vport commands (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Make the vport helpers available for the IB driver too (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Check the return bitmask when querying ISSI (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Enable XRCs and SRQs when using ISSI > 0 (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Apply proper name convention to helpers (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_en: Add missing check for memory allocation failure (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Extend mlx5_core to support ConnectX-4 Ethernet functionality (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Ethernet resource handling files (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Ethernet Datapath files (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Set/Query port MTU commands (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Modify CQ moderation parameters (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Implement get/set port status (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Implement access functions of ptys register fields (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: New device capabilities handling (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: HW data structs/types definitions cleanup (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Set irq affinity hints (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core, mlx5_ib: Do not use vmap on coherent memory (Kamal Heib) [1246031]
  - [drm] revert 'drm/i915: resume MST after reading back hw state' (Rob Clark) [1292402]
  - [drm] i915: Wait for mst to finish suspending before disabling interrupts (Rob Clark) [1292402]
  - [drm] upstream sync to 4.4 (Rob Clark) [1135349 1248507]
  - [drm] nouveau/gr/gf117-: assume no PPC if NV_PGRAPH_GPC_GPM_PD_PES_TPC_ID_MASK is zero (Rob Clark) [1249814]
  - [drm] nouveau/gr/gf117-: read NV_PGRAPH_GPC_GPM_PD_PES_TPC_ID_MASK from correct GPC (Rob Clark) [1249814]
  - [drm] nouveau/gr/gf100-: split out per-gpc address calculation macro (Rob Clark) [1249814]
  - [drm] nouveau/bios: return actual size of the buffer retrieved via _ROM (Rob Clark) [1249814]
  - [drm] nouveau/pmu: remove whitelist for PGOB-exit WAR, enable by default (Rob Clark) [1218795 1218796]
  - [drm] nouveau/pmu/gk107: enable PGOB codepaths (Rob Clark) [1218795 1218796]
  - [drm] nouveau/pmu/gk104: check fuse to determine presence of PGOB (Rob Clark) [1218795 1218796]
  - [drm] radeon: Retry DDC probing on DVI on failure if we got an HPD interrupt (Rob Clark) [1249814]
  - [drm] drm: import vmwgfx (Rob Clark) [1281592]
  - [firmware] add i915 GuC firmware (Rob Clark) [1135349]
  - [firmware] add i915 DMC firmware (Rob Clark) [1135349]
  - [drm] upstream sync to 4.3 (Rob Clark) [1249814]
  - [drm] upstream sync to 4.2 (Rob Clark) [1249812 1274061]
  - [drm] upstream sync to 4.1 (Rob Clark) [1249810]
  - [drm] upstream sync to 4.0 (Rob Clark) [1249807]
  - [drm] upstream sync to 3.19 (Rob Clark) [1249806]
  - [kernel] iommu: Export intel_iommu_enabled to signal when iommu is in use (Rob Clark) [1249806]
  - [kernel] time: export nsec_to_jiffies64 (Rob Clark) [1249806]
  - [kernel] component: fix bug with legacy API (Rob Clark) [1249806]
  - [kernel] component: add support for component match array (Rob Clark) [1249806]
  - [kernel] component: ignore multiple additions of the same component (Rob Clark) [1249806]
  - [kernel] component: fix missed cleanup in case of devres failure (Rob Clark) [1249806]
  - [kernel] base: fix devres handling for master device (Rob Clark) [1249806]
  - [kernel] base: provide an infrastructure for componentised subsystems (Rob Clark) [1249806]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-613.el6]
changelog:
  - [drm] nouveau: remove stray header (Rob Clark) [1249807]
  - [kernel] ntp: Do leapsecond adjustment in adjtimex read path (Jerry Snitselaar) [1224408]
  - [kernel] time: Prevent early expiry of hrtimers CLOCK_REALTIME at the leap second edge (Jerry Snitselaar) [1224408]
  - [kernel] ntp: Introduce and use SECS_PER_DAY macro instead of 86400 (Jerry Snitselaar) [1224408]
  - [kernel] hrtimer: Make offset update smarter (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: Use ktime_t data for ktime_get_update_offsets (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: Provide internal ktime_t based data (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: indicate clock was set (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: Avoid possible deadlock from clock_was_set_delayed (Jerry Snitselaar) [1224408]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-614.el6]
changelog:
  - [powerpc] pseries: Limit EPOW reset event warnings (Gustavo Duarte) [1300202]
  - [perf] tools: Do not show trace command if it's not compiled in (Jiri Olsa) [1212539]
  - [perf] tools spec: Disable trace command on ppc arch (Jiri Olsa) [1212539]
  - [netdrv] mlx4_en: Fix the blueflame in TX path (Kamal Heib) [1295872 1303661 1303863 1304272]
  - [netdrv] mlx4_en: Fix HW timestamp init issue upon system startup (Kamal Heib) [1295872 1304272]
  - [netdrv] mlx4_en: Remove dependency between timestamping capability and service_task (Kamal Heib) [1295872 1304272]
  - [netdrv] mlx5_core: Fix trimming down IRQ number (Kamal Heib) [1304272]
  - [x86] Mark Intel Broadwell-DE SoC supported (Steve Best) [1253856]
  - [s390] zfcpdump: Fix collecting of registers (Hendrik Brueckner) [1303558]
  - [s390] dasd: fix failfast for disconnected devices (Hendrik Brueckner) [1303559]
  - [netdrv] bnxt_en: Fix crash in bnxt_free_tx_skbs() during tx timeout (John Linville) [1303703]
  - [netdrv] bnxt_en: Exclude rx_drop_pkts hw counter from the stack's rx_dropped counter (John Linville) [1303703]
  - [netdrv] bnxt_en: Ring free response from close path should use completion ring (John Linville) [1303703]
  - [block] Fix q_suspended logic error for io submission (David Milburn) [1227342]
  - [block] nvme: No lock while DMA mapping data (David Milburn) [1227342]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-615.el6]
changelog:
  - [s390] qeth: initialize net_device with carrier off (Hendrik Brueckner) [1198666]
  - [netdrv] Add rtlwifi driver from linux 4.3 (Stanislaw Gruszka) [1245452 1263386 1289574 761525]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-616.el6]
changelog:
  - [kernel] isolcpus: Output warning when the 'isolcpus=' kernel parameter is invalid (Prarit Bhargava) [1304216]
  - [mmc] Prevent 1.8V switch for SD hosts that don't support UHS modes (Petr Oros) [1307065]
  - [mmc] sdhci-pci-o2micro: Fix Dell E5440 issue (Petr Oros) [1307065]
  - [mmc] sdhci-pci-o2micro: Add SeaBird SeaEagle SD3 support (Petr Oros) [1307065]
  - [watchdog] hung task debugging: Inject NMI when hung and going to panic (Don Zickus) [1305919]
  - [watchdog] add sysctl knob hardlockup_panic (Don Zickus) [1305919]
  - [watchdog] perform all-CPU backtrace in case of hard lockup (Don Zickus) [1305919]
  - [drm] i915: Drop intel_update_sprite_watermarks (Lyude) [1306425]
  - [drm] i915: Setup DDI clk for MST on SKLi (Lyude) [1306425]
  - [drm] i915: Explicitly check for eDP in skl_ddi_pll_select (Lyude) [1306425]
  - [drm] i915: Don't skip mst encoders in skl_ddi_pll_select (Lyude) [1306425]
  - [scsi] qla2xxx: Set relogin flag when we fail to queue login requests (Chad Dupuis) [1306033]
  - [s390] kernel/syscalls: correct syscall number for __NR_setns (Hendrik Brueckner) [1219586]
  - [edac] sb_edac: fix channel/csrow emulation on Broadwell (Aristeu Rozanski) [1301230]
  - [usb] xhci: Workaround to get Intel xHCI reset working more reliably (Gopal Tiwari) [1146875]
  - [fs] revert "revert "dlm: print kernel message when we get an error from kernel_sendpage" (Robert S Peterson) [1264492]
  - [fs] revert "[fs] dlm: Replace nodeid_to_addr with kernel_getpeername" (Robert S Peterson) [1264492]
  - [s390] sclp: Determine HSA size dynamically for zfcpdump (Hendrik Brueckner) [1303557]
  - [s390] sclp: Move declarations for sclp_sdias into separate header file (Hendrik Brueckner) [1303557]
  - [netdrv] mlx4_en: add missing tx_queue init in en_start_port (Don Dutile) [1304016]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-617.el6]
changelog:
  - [infiniband] rdma/ocrdma: Bump up ocrdma version number to 11.0.0.0 (Don Dutile) [1253021]
  - [infiniband] rdma/ocrdma: Prevent CQ-Doorbell floods (Don Dutile) [1253021]
  - [infiniband] rdma/ocrdma: Check resource ids received in Async CQE (Don Dutile) [1253021]
  - [infiniband] rdma/ocrdma: Avoid a possible crash in ocrdma_rem_port_stats (Don Dutile) [1253021]
  - [kernel] driver core : Fix use after free of dev->parent in device_shutdown (Tomas Henzl) [1303215]
  - [kernel] driver core: fix shutdown races with probe/remove (Tomas Henzl) [1303215]
  - [kernel] driver core: Protect device shutdown from hot unplug events (Tomas Henzl) [1303215]
  - [netdrv] bnx2x: Add new device ids under the Qlogic vendor (Michal Schmidt) [1304252]
  - [kernel] klist: fix starting point removed bug in klist iterators (Ewan Milne) [1190273]
  - [md] raid1: extend spinlock to protect raid1_end_read_request against inconsistencies (Jes Sorensen) [1309154]
  - [md] raid1: fix test for 'was read error from last working device' (Jes Sorensen) [1309154]
  - [s390] cio: update measurement characteristics (Hendrik Brueckner) [1304257]
  - [s390] cio: ensure consistent measurement state (Hendrik Brueckner) [1304257]
  - [s390] cio: fix measurement characteristics memleak (Hendrik Brueckner) [1304257]
  - [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1302223] {CVE-2016-0774}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-618.el6]
changelog:
  - [documentation] filesystems: describe the shared memory usage/accounting (Rodrigo Freire) [1293615]
  - [kernel] Fix cgclear failure when encountering the rpciod kernel thread (Larry Woodman) [1220828]
  - [netdrv] qlcnic: constify qlcnic_mbx_ops structure (Harish Patil) [1252119]
  - [netdrv] net: qlcnic: delete redundant memsets (Harish Patil) [1252119]
  - [netdrv] qlcnic: Update version to 5.3.63 (Harish Patil) [1252119]
  - [netdrv] qlcnic: Don't use kzalloc unncecessarily for allocating large chunk of memory (Harish Patil) [1252119]
  - [netdrv] qlcnic: Add new VF device ID 0x8C30 (Harish Patil) [1252119]
  - [netdrv] qlcnic: Print firmware minidump buffer and template header addresses (Harish Patil) [1252119]
  - [netdrv] qlcnic: Add support to enable capability to extend minidump for iSCSI (Harish Patil) [1252119]
  - [netdrv] qlcnic: Rearrange ordering of header files inclusion (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix corruption while copying (Harish Patil) [1252119]
  - [netdrv] net: qlcnic: Deletion of unnecessary memset (Harish Patil) [1252119]
  - [netdrv] net: qlcnic: clean up sysfs error codes (Harish Patil) [1252119]
  - [netdrv] qlcnic: codespell comment spelling fixes (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix typo in printk messages (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix trivial typo in comment (Harish Patil) [1252119]
  - [netdrv] qlogic: Deletion of unnecessary checks before two function calls (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix dump_skb output (Harish Patil) [1252119]
  - [virt] kvm: x86: Don't report guest userspace emulation error to userspace (Bandan Das) [1163764] {CVE-2010-5313 CVE-2014-7842}
  - [virt] kvm: inject #UD if instruction emulation fails and exit to userspace (Bandan Das) [1163764] {CVE-2010-5313 CVE-2014-7842}
  - [netdrv] iwlwifi: Add new PCI IDs for the 8260 series (John Linville) [1286871 1308636]
  - [netdrv] iwlwifi: pcie: fix (again) prepare card flow (John Linville) [1286871 1308636]
  - [netdrv] nl80211: Fix potential memory leak from parse_acl_data (John Linville) [1286871 1308636]
  - [netdrv] mac80211: fix divide by zero when NOA update (John Linville) [1286871 1308636]
  - [netdrv] mac80211: allow null chandef in tracing (John Linville) [1286871 1308636]
  - [netdrv] mac80211: fix driver RSSI event calculations (John Linville) [1286871 1308636]
  - [netdrv] mac80211: Fix local deauth while associating (John Linville) [1286871 1308636]
  - [fs] xfs: ensure WB_SYNC_ALL writeback handles partial pages correctly (Brian Foster) [747564]
  - [fs] mm: introduce set_page_writeback_keepwrite() (Brian Foster) [747564]
  - [fs] xfs: always log the inode on unwritten extent conversion (Zorro Lang) [1018465]
  - [fs] vfs: fix data corruption when blocksize < pagesize for mmaped data (Lukas Czerner) [1205014]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-619.el6]
changelog:
  - [netdrv] cxgb4: add device ID for few T5 adapters (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix for write-combining stats configuration (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix tx flit calculation (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: changes for new firmware 1.14.4.0 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: memory corruption in debugfs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Force uninitialized state if FW in adapter is unsupported (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add MPS tracing support (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add some more details to sge qinfo (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: missing curly braces in t4_setup_debugfs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add support to dump edc bist status (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs support to dump meminfo (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Read correct FL congestion threshold for T5 and T6 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Allow firmware flash, only if cxgb4 is the master driver (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs entry to enable backdoor access (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix check to use new User Doorbell mechanism (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Enable cim_la dump to support T6 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Read stats for only available channels (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Update register ranges for T6 adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Don't use entire L2T table, use only its slice (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add PCI device ids for few more T5 and T6 adapters (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix incorrect sequence numbers shown in devlog (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add PCI device ID for custom T522 & T520 adapter (Sai Vemuri) [1252598]
  - [infiniband] iw_cxgb4: support for bar2 qid densities exceeding the page size (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Support for user mode bar2 mappings with T4 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs entry to dump channel rate (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs entry to dump CIM PIF logic analyzer contents (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add a debugfs entry to dump CIM MA logic analyzer logs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix static checker warning (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Use FW LDST cmd to access TP_PIO_ADDR, TP_PIO_DATA register first (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: program pci completion timeout (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Set mac addr from vpd, when we can't contact firmware (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Rename t4_link_start to t4_link_l1cfg (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add sge ec context flush service (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Free Virtual Interfaces in remove routine (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Remove WOL get/set ethtool support (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add support to dump loopback port stats (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add support in ethtool to dump channel stats (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add ethtool support to get adapter stats (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Adds SRIOV driver changes for T6 adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Adds support for T6 adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add is_t6 macro and T6 register ranges (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: remove unused fn to enable/disable db coalescing (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: function and argument name cleanup (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs facility to inject FL starvation (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add PHY firmware support for T420-BT cards (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Update T4/T5 adapter register ranges (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Optimize and cleanup setup memory window code (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: replace ntohs, ntohl and htons, htonl calls with the generic byteorder (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Remove dead function t4_read_edc and t4_read_mc (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Cleanup macros, add comments and add new MACROS (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Initialize RSS mode for all Ports (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Discard the packet if the length is greater than mtu (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Move SGE Ingress DMA state monitor (Don Dutile) [1252598]
  - [netdrv] cxgb4: Add device node to ULD info (Don Dutile) [1252598]
  - [netdrv] cxgb4: Pass in a Congestion Channel Map to t4_sge_alloc_rxq (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Enable congestion notification from SGE for IQs and FLs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Make sure that Freelist size is larger than Egress Congestion Threshold (Sai Vemuri) [1252598]
  - [infiniband] iw_cxgb4: Cleanup register defines/MACROS (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix sparse warnings (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Improve IEEE DCBx support, other minor open-lldp fixes (Sai Vemuri) [1252598]
  - [scsi] cxgb4i: Call into recently added cxgb4 ipv6 api (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix queue allocation for 40G adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Initialize mdio_addr before using it (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix ethtool get_settings for VF driver (Sai Vemuri) [1252598]
  - [netdrv] csiostor: Cleanup macros/register defines related to port and VI (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Fix DCB priority groups being returned in wrong order (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: dcb open-lldp interop fixes (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Fix bug in DCB app deletion (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Handle dcb enable correctly (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Improve handling of DCB negotiation or loss thereof (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: IEEE fixes for DCBx state machine (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix endian bug introduced in cxgb4 dcb patchset (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Makefile & Kconfig changes for DCBx support (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Integrate DCBx support into cxgb4 module. Register dbcnl_ops to give access to DCBx functions (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Add DCBx support codebase and dcbnl_ops (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Update fw interface file for DCBx support. Adds all the required fields to fw interface to communicate DCBx info (Sai Vemuri) [1252598]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-620.el6]
changelog:
  - [netdrv] mlx4-en: disable traffic class queueing by default (Don Dutile) [1309893]
  - [netdrv] mlx4-en: add missing patch to init rss_rings in get_profile (Don Dutile) [1309893]
  - [netdrv] net/mlx4_core: Fix mailbox leak in error flow when performing update qp (Don Dutile) [1309893]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-621.el6]
changelog:
  - [netdrv] net/mlx4_en: Wake TX queues only when there's enough room (Don Dutile) [1309893]
  - [netdrv] revert " net/mlx4_core: Fix mailbox leak in error flow when performing update qp" (Don Dutile) [1309893]
  - [netdrv] revert "mlx4-en: add missing patch to init rss_rings in get_profile" (Don Dutile) [1309893]
  - [netdrv] revert "mlx4-en: disable traffic class queueing by default" (Don Dutile) [1309893]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-622.el6]
changelog:
  - [netdrv] bonding: Fix ARP monitor validation (Jarod Wilson) [1244170]
  - [netdrv] sfc: only use RSS filters if we're using RSS (Jarod Wilson) [1304311]
  - [dm] delay: fix RHEL6 specific bug when establishing future 'expires' time (Mike Snitzer) [1311615]
  - [ata] Adding Intel Lewisburg device IDs for SATA (Steve Best) [1310237]
  - [i2c] i801: Adding Intel Lewisburg support for iTCO (Rui Wang) [1304872]
  - [x86] Mark Grangeville ixgbe PCI ID 15AE (1 gig PHY) unsupported (Steve Best) [1310585]
  - [kernel] lockd: properly convert be32 values in debug messages (Harshula Jayasuriya) [1289848]
  - [i2c] convert i2c-isch to platform_device (Prarit Bhargava) [1211747]
  - [tty] do not reset master's packet mode (Denys Vlasenko) [1308660]
  - [block] don't assume last put of shared tags is for the host (Jeff Moyer) [1300538]
  - [netdrv] i40evf: use pages correctly in Rx (Stefan Assmann) [1293754]
  - [netdrv] i40e: fix bug in dma sync (Stefan Assmann) [1293754]
  - [sched] fix KABI break (Seth Jennings) [1230310]
  - [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1230310]
  - [sched] sched,perf: Fix periodic timers (Seth Jennings) [1230310]
  - [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1230310]
  - [sched] Cleanup bandwidth timers (Seth Jennings) [1230310]
  - [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1230310]
  - [sched] fair: Fix unlocked reads of some cfs_b->quota/period (Seth Jennings) [1230310]
  - [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1230310]
  - [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq->lock (Seth Jennings) [1230310]
  - [sched] Fix hrtimer_cancel/rq->lock deadlock (Seth Jennings) [1230310]
  - [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1230310]
  - [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1230310]
  - [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1230310]
  - [drm] radeon: mask out WC from BO on unsupported arches (Oded Gabbay) [1303678]
  - [drm] add helper to check for wc memory support (Oded Gabbay) [1303678]
  - [acpi] pci: Account for ARI in _PRT lookups (Ivan Vecera) [1311421]
  - [pci] Move pci_ari_enabled() to global header (Ivan Vecera) [1311421]
  - [acpi] tpm, tpm_tis: fix tpm_tis ACPI detection issue with TPM 2.0 (Jerry Snitselaar) [1309641]
  - [acpi] Centralized processing of ACPI device resources (Jerry Snitselaar) [1309641]
  - [acpi] acpi: Add device resources interpretation code to ACPI core (Jerry Snitselaar) [1309641]
  - [netdrv] cxgb4 : Fix for the kernel panic caused by calling t4_enable_vi_params (Sai Vemuri) [1303493]
  - [mm] Remove false WARN_ON from pagecache_isize_extended (Brian Foster) [1205014]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-623.el6]
changelog:
  - [perf] revert "perf/x86/intel uncore: Move uncore_box_init() out of driver initialization" (Jiri Olsa) [1313062]
  - [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1299975]
  - [netdrv] hv_netvsc: Restore needed_headroom request (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: fix null ptr deref in skb allocation (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: Observe needed_headroom of the device (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: ipv6: numa: consolidate skb allocation to pktgen_alloc_skb (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: fix crash with vlan and packet size less than 46 (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: speedup fragmented skbs (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: correct uninitialized queue_map (Vitaly Kuznetsov) [1305000]
  - [net] pktgen node allocation (Vitaly Kuznetsov) [1305000]
  - [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1309241]
  - [net] veth: don't modify ip_summed; doing so treats packets with bad checksums as good (Sabrina Dubroca) [1308586]
  - [net] ipv6: udp: use sticky pktinfo egress ifindex on connect() (Xin Long) [1301475]
  - [net] provide default_advmss() methods to blackhole dst_ops (Paolo Abeni) [1305068]
  - [net] sctp: translate network order to host order when users get a hmacid (Xin Long) [1303822]
  - [powerpc] pseries: Make 32-bit MSI quirk work on systems lacking firmware support (Oded Gabbay) [1303678]
  - [powerpc] pseries: Force 32 bit MSIs for devices that require it (Oded Gabbay) [1303678]
  - [netdrv] bnxt_en: Fix zero padding of tx push data (John Linville) [1310301]
  - [netdrv] bnxt_en: Failure to update PHY is not fatal condition (John Linville) [1310301]
  - [netdrv] bnxt_en: Remove unnecessary call to update PHY settings (John Linville) [1310301]
  - [netdrv] bnxt_en: Poll link at the end of __bnxt_open_nic (John Linville) [1310301]
  - [netdrv] bnxt_en: Reduce default ring sizes (John Linville) [1310301]
  - [netdrv] bnxt_en: Fix implementation of tx push operation (John Linville) [1310301]
  - [netdrv] bnxt_en: Remove 20G support and advertise only 40GbaseCR4 (John Linville) [1310301]
  - [netdrv] bnxt_en: Cleanup and Fix flow control setup logic (John Linville) [1310301]
  - [netdrv] bnxt_en: Fix ethtool autoneg logic (John Linville) [1310301]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-624.el6]
changelog:
  - [netdrv] tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs (Ivan Vecera) [1222426]
  - [netdrv] bna: fix list corruption (Ivan Vecera) [1310957]
  - [netdrv] cxgb4 : Add cxgb4 T4/T5 firmware version 1.14.4.0, hardcode driver to the same (Sai Vemuri) [1270347]
  - [drm] i915: WaRsDisableCoarsePowerGating (Rob Clark) [1302269]
  - [drm] i915/skl: Add SKL GT4 PCI IDs (Rob Clark) [1302269]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-625.el6]
changelog:
  - [netdrv] cxgb4 : Patch to fix kernel panic on pinging over vlan interface (Sai Vemuri) [1303493]
  - [x86] mm: Improve AMD Bulldozer ASLR workaround (Rik van Riel) [1240883]
  - [x86] Properly export MSR values in kernel headers (Jacob Tanenbaum) [1298255]
  - [netdrv] tehuti: Firmware filename is tehuti/bdx.bin (Ivan Vecera) [1235961]
  - [netdrv] ixgbe: convert to ndo_fix_features (John Greene) [1279522]
  - [drm] revert "drm: Use vblank timestamps to guesstimate how many vblanks were missed" (Lyude Paul) [1300086]
  - [fs] writeback: Fix lost wake-up shutting down writeback thread (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wakeup events when forking bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: fix bad _bh spinlock nesting (Jeff Moyer) [1111683]
  - [fs] writeback: cleanup bdi_register (Jeff Moyer) [1111683]
  - [fs] writeback: remove unnecessary init_timer call (Jeff Moyer) [1111683]
  - [fs] writeback: optimize periodic bdi thread wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: prevent unnecessary bdi threads wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: move bdi threads exiting logic to the forker thread (Jeff Moyer) [1111683]
  - [fs] writeback: restructure bdi forker loop a little (Jeff Moyer) [1111683]
  - [fs] writeback: move last_active to bdi (Jeff Moyer) [1111683]
  - [fs] writeback: do not remove bdi from bdi_list (Jeff Moyer) [1111683]
  - [fs] writeback: simplify bdi code a little (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 2 (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 1 (Jeff Moyer) [1111683]
  - [fs] writeback: fix possible race when creating bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: harmonize writeback threads naming (Jeff Moyer) [1111683]
  - [fs] writeback: merge bdi_writeback_task and bdi_start_fn (Jeff Moyer) [1111683]
  - [fs] writeback: bdi_writeback_task must set task state before calling schedule (Jeff Moyer) [1111683]
  - [fs] writeback: remove wb_list (Jeff Moyer) [1111683]
  - [drm] i915: Change WARN_ON(!wm_changed) to I915_STATE_WARN_ON (Lyude Paul) [1309888]
  - [drm] i915: Quiet down state checks (Lyude Paul) [1309888]
  - [drm] i915: Fix a few of the !wm_changed warnings (Lyude Paul) [1309888]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-626.el6]
changelog:
  - [fs] nfsv4: OPEN must handle the NFS4ERR_IO return code correctly (Benjamin Coddington) [1272687]
  - [fs] quota: fix unwanted soft limit enforcement (Lukas Czerner) [1304603]
  - [fs] xfs: flush entire last page of old EOF on truncate up (Brian Foster) [1308482]
  - [fs] xfs: truncate_setsize should be outside transactions (Brian Foster) [1308482]
  - [scsi] megaraid: overcome a fw deficiency (Maurizio Lombardi) [1294983]
  - [scsi] megaraid_sas: Add an i/o barrier (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Fix SMAP issue (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Fix for IO failing post OCR in SRIOV environment (Tomas Henzl) [1294983]
  - [scsi] megaraid: fix null pointer check in megasas_detach_one() (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: SPERC OCR changes (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Introduce module parameter for SCSI command timeout (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: MFI adapter OCR changes (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Make adprecovery variable atomic (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: IO throttling support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Dual queue depth support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Code optimization build_and_issue_cmd return-type (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Reply Descriptor Post Queue (RDPQ) support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Fastpath region lock bypass (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Update device queue depth based on interface type (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Task management support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Syncing request flags macro names with firmware (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: MFI IO timeout handling (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Do not allow PCI access during OCR (Tomas Henzl) [1294983]
  - [scsi] hpsa: check for a null phys_disk pointer in ioaccel2 path (Joseph Szczypek) [1311728]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-627.el6]
changelog:
  - [net] rds: restore return value in rds_cmsg_rdma_args (Don Dutile) [1313089]
  - [net] rds: Fix assertion level from fatal to warning (Don Dutile) [1313089]
  - [netdrv] be2net: don't enable multicast flag in be_enable_if_filters routine (Ivan Vecera) [1309157]
  - [net] unix: correctly track in-flight fds in sending process user_struct (Hannes Frederic Sowa) [1313052] {CVE-2016-2550}
  - [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297422] {CVE-2015-8767}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-628.el6]
changelog:
  - [netdrv] bnx2x: fix crash on big-endian when adding VLAN (Michal Schmidt) [1311433]
  - [sound] alsa hda: only sync BCLK to the display clock for Haswell & Broadwell (Jaroslav Kysela) [1313672]
  - [sound] alsa hda: add component support (Jaroslav Kysela) [1313672]
  - [sound] alsa hda: pass intel_hda to all i915 interface functions (Jaroslav Kysela) [1313672]
  - [netdrv] igb: fix race accessing page->_count (Corinna Vinschen) [1315402]
  - [netdrv] igb: fix recent VLAN changes that would leave VLANs disabled after reset (Corinna Vinschen) [1309968]
  - [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1309898]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-629.el6]
changelog:
  - [x86] acpi: Avoid SRAT table checks for Hyper-V VMs (Vitaly Kuznetsov) [1312711]
  - [infiniband] ipoib: For sendonly join free the multicast group on leave (Don Dutile) [1315382]
  - [infiniband] ipoib: increase the max mcast backlog queue (Don Dutile) [1315382]
  - [infiniband] ipoib: Make sendonly multicast joins create the mcast group (Don Dutile) [1315382]
  - [infiniband] ipoib: Expire sendonly multicast joins (Don Dutile) [1315382]
  - [infiniband] ipoib: Clean up send-only multicast joins (Don Dutile) [1315382]
  - [infiniband] ipoib: Suppress warning for send only join failures (Don Dutile) [1315382]
  - [drm] i915: shut up gen8+ SDE irq dmesg noise (Rob Clark) [1313681]
  - [drm] i915: fix the SDE irq dmesg warnings properly (Rob Clark) [1313681]
  - [hv] vmbus: avoid wait_for_completion on crash (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload (Vitaly Kuznetsov) [1301903]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-630.el6]
changelog:
  - [mm] avoid hangs in lru_add_drain_all (Vitaly Kuznetsov) [1314683]
  - [net] esp{4, 6}: fix potential MTU calculation overflows (Herbert Xu) [1304313]
  - [net] xfrm: take net hdr len into account for esp payload size calculation (Herbert Xu) [1304313]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-631.el6]
changelog:
  - [input] synaptics: handle spurious release of trackstick buttons, again (Benjamin Tissoires) [1317808]
  - [hv] kvp: fix IP Failover (Vitaly Kuznetsov) [1312290]
  - [hv] util: Pass the channel information during the init call (Vitaly Kuznetsov) [1312290]
  - [hv] utils: Invoke the poll function after handshake (Vitaly Kuznetsov) [1312290]
  - [hv] utils: run polling callback always in interrupt context (Vitaly Kuznetsov) [1312290]
  - [hv] util: Increase the timeout for util services (Vitaly Kuznetsov) [1312290]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-632.el6]
changelog:
  - [s390] dasd: fix incorrect locking order for LCU device add/remove (Hendrik Brueckner) [1315740]
  - [s390] dasd: fix hanging device after LCU change (Hendrik Brueckner) [1315729]
  - [s390] dasd: prevent incorrect length error under z/VM after PAV changes (Hendrik Brueckner) [1313774]
  - [netdrv] igb: Fix VLAN tag stripping on Intel i350 (Corinna Vinschen) [1210699]
  - [netdrv] 3c59x: mask LAST_FRAG bit from length field in ring (Neil Horman) [1309210]
  - [ata] ahci: Remove obsolete Intel Lewisburg SATA RAID device IDs (Steve Best) [1317045]
  - [pci] fix truncation of resource size to 32 bits (Myron Stowe) [1316345]
  - [pci] fix pci_resource_alignment prototype (Myron Stowe) [1316345]
  - [sound] hda: Fix headphone mic input on a few Dell ALC293 machines (Jaroslav Kysela) [1315932]
  - [sound] hda: Add some FIXUP quirks for white noise on Dell laptop (Jaroslav Kysela) [1315932]
  - [sound] hda: Fix the white noise on Dell laptop (Jaroslav Kysela) [1315932]
  - [sound] hda: one Dell machine needs the headphone white noise fixup (Jaroslav Kysela) [1315932]
  - [sound] hda: Fix audio crackles on Dell Latitude E7x40 (Jaroslav Kysela) [1315932]
  - [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1302777]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-633.el6]
changelog:
  - [s390] lib: export udelay_simple for systemtap (Hendrik Brueckner) [1233912]
  - [netdrv] ixgbe: fix RSS limit for X550 (John Greene) [1314583]
  - [netdrv] mlx4_core: Fix error message deprecation for ConnectX-2 cards (Don Dutile) [1316013]
  - [dm] thin metadata: don't issue prefetches if a transaction abort has failed (Mike Snitzer) [1310661]
  - [scsi] be2iscsi: Add warning message for unsupported adapter (Maurizio Lombardi) [1253016]
  - [scsi] be2iscsi: Revert "Add warning message for, unsupported adapter" (Maurizio Lombardi) [1253016]
  - [scsi] hpsa: update copyright information (Joseph Szczypek) [1315469]
  - [scsi] hpsa: correct abort tmf for hba devices (Joseph Szczypek) [1315469]
  - [scsi] hpsa: correct ioaccel2 sg chain len (Joseph Szczypek) [1315469]
  - [scsi] hpsa: fix physical target reset (Joseph Szczypek) [1315469]
  - [scsi] hpsa: fix hpsa_adjust_hpsa_scsi_table (Joseph Szczypek) [1315469]
  - [scsi] hpsa: correct transfer length for 6 byte read/write commands (Joseph Szczypek) [1315469]
  - [scsi] hpsa: abandon rescans on memory alloaction failures (Joseph Szczypek) [1315469]
  - [scsi] hpsa: allow driver requested rescans (Joseph Szczypek) [1315469]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-634.el6]
changelog:
  - [scsi] cxgbi: Convert over to dst_neigh_lookup (Sai Vemuri) [1296461]
  - [netdrv] cxgb4: For T4, don't read the Firmware Mailbox Control register (Sai Vemuri) [1296469]
  - [netdrv] cxgb4: Use ACCES_ONCE macro to read queue's consumer index (Sai Vemuri) [1296484]
  - [netdrv] cxgb4: prevent simultaneous execution of service_ofldq (Sai Vemuri) [1296483]
  - [netdrv] cxgb4: Adds PCI device id for new T5 adapters (Sai Vemuri) [1296481]
  - [netdrv] cxgb4: Don't disallow turning off auto-negotiation (Sai Vemuri) [1296476]
  - [mm] check if section present during memory block registering (Xunlei Pang) [1297840]
  - [tty] ldisc: Close/Reopen race prevention should check tty->ldisc (Denys Vlasenko) [1312383]
  - [fs] proc-vmcore: wrong data type casting fix (Baoquan He) [1312206]
  - [infiniband] iw_cxgb3: Ignore positive return values from the ofld send functions (Sai Vemuri) [1296999]
  - [netdrv] cxgb4: Deal with wrap-around of queue for Work request (Sai Vemuri) [1296482]
  - [infiniband] iw_cxgb4: detect fatal errors while creating listening filters (Sai Vemuri) [1296480]
  - [md] dm snapshot: suspend merging snapshot when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: suspend origin when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: allocate a per-target structure for snapshot-origin target (Mike Snitzer) [1177389]
  - [md] dm: fix a race condition in dm_get_md (Mike Snitzer) [1177389]
  - [infiniband] iw_cxgb4: pass the ord/ird in connect reply events (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: fix misuse of ep->ord for minimum ird calculation (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: reverse the ord/ird in the ESTABLISHED upcall (Sai Vemuri) [1296478]
  - [usb] Revert "Revert 'Update USB default wakeup settings'" (Torez Smith) [1319081]
  - [netdrv] ibmveth: add support for TSO6 (Gustavo Duarte) [1318412]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-635.el6]
changelog:
  - [mm] backing-dev: ensure wakeup_timer is deleted (Jeff Moyer) [1318930]
  - [hv] vss: run only on supported host versions (Vitaly Kuznetsov) [1319813]
  - [sound] hda: Fix internal speaker for HP Z240 (Jaroslav Kysela) [1316673]
  - [perf] trace: Fix race condition at the end of started workloads (Jiri Olsa) [1302928]
  - [fs] nfsd: Combine decode operations for v4 and v4.1 (J. Bruce Fields) [1314536]
  - [hv] revert "vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: don't loose HVMSG_TIMER_EXPIRED messages" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: remove code duplication in message handling" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid wait_for_completion on crash" (Vitaly Kuznetsov) [1318882]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-636.el6]
changelog:
  - [netdrv] mlx4_en: Choose time-stamping shift value according to HW frequency (Kamal Heib) [1320448]
  - [fs] anon_inodes implement dname (Aristeu Rozanski) [1296019]
  - [net] packet: set transport header before doing xmit (John Greene) [1309526]
  - [net] tuntap: set transport header before passing it to kernel (John Greene) [1309526]
  - [netdrv] macvtap: set transport header before passing skb to lower device (John Greene) [1309526]
  - [net] ipv6: tcp: add rcu locking in tcp_v6_send_synack() (Jakub Sitnicki) [1312740]
  - [net] ipv6: sctp: add rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] ipv6: add complete rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] dccp: remove unnecessary codes in ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: remove unnecessary codes in tcp_ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: Refactor update of IPv6 flowi destination address for srcrt (RH) option (Jakub Sitnicki) [1312740]
  - [net] ipv6: protect flow label renew against GC (Sabrina Dubroca) [1313231]
  - [net] ipv6: fix possible deadlock in ip6_fl_purge / ip6_fl_gc (Sabrina Dubroca) [1313231]
  - [perf] annotate: Support full source file paths for srcline fix (Jiri Olsa) [1304472 1304479]
  - [perf] tools: Support full source file paths for srcline (Jiri Olsa) [1304472 1304479]
  - [perf] annotate: Fix -i option, which is currently ignored (Jiri Olsa) [1304472 1304479]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-637.el6]
changelog:
  - [netdrv] mlx4-en: add missing patch to init rss_rings in get_profile (Don Dutile) [1321164]
  - [netdrv] mlx4-en: disable traffic class queueing by default (Don Dutile) [1321164]
  - [netdrv] mlx4_core: Fix mailbox leak in error flow when performing update qp (Don Dutile) [1321164]
  - [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259581] {CVE-2015-5157}
  - [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259581] {CVE-2015-5157}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-638.el6]
changelog:
  - [mm] hugetlb: prevent BUG_ON in hugetlb_fault -> hugetlb_cow (Dave Anderson) [1303495]
  - [mm] hugetlb: fix race condition in hugetlb_fault (Dave Anderson) [1303495]
  - [s390] kdump: fix wrong BUG_ON statement (Hendrik Brueckner) [1321316]
  - [scsi] cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes (Sai Vemuri) [1320193]
  - [fs] nfs: fix a regression causing deadlock in nfs_wb_page_cancel() (Benjamin Coddington) [1135601]
  - [netdrv] cxgb4/ethtool: Get/set rx checksum (Sai Vemuri) [1225167]
  - [netdrv] cxgb4vf:The RX checksum feature was not completely ported to cxgb4vf driver (Sai Vemuri) [1225167]
  - [netdrv] cxgb4/cxgb4vf: Enable GRO (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Enable RX checksum offload flag (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Report correct link speed for unsupported ones (Sai Vemuri) [1296467]
  - [netdrv] cxgb4: Use vmalloc, if kmalloc fails (Sai Vemuri) [1296473]
  - [netdrv] cxgb4: Enhance driver to update FW, when FW is too old (Sai Vemuri) [1296472]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-639.el6]
changelog:
  - [input] wacom: fix ExpressKeys remote events (Aristeu Rozanski) [1318027]
  - [fs] revert "writeback: remove wb_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: bdi_writeback_task must set task state before calling schedule" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: merge bdi_writeback_task and bdi_start_fn" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: harmonize writeback threads naming" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix possible race when creating bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 1" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 2" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: simplify bdi code a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not remove bdi from bdi_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move last_active to bdi" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: restructure bdi forker loop a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move bdi threads exiting logic to the forker thread" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: prevent unnecessary bdi threads wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: optimize periodic bdi thread wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: remove unnecessary init_timer call" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: cleanup bdi_register" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix bad _bh spinlock nesting" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wakeup events when forking bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: Fix lost wake-up shutting down writeback thread" (Jeff Moyer) [1322297]
  - [mm] revert "backing-dev: ensure wakeup_timer is deleted" (Jeff Moyer) [1322297]
  - [perf] revert: perf changes out of "sched, perf: Fix periodic timers" (Jiri Olsa) [1322488]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-640.el6]
changelog:
  - [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
  - [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
  - [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
  - [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
  - [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
  - [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-641.el6]
changelog:
  - [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
  - [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
  - [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-642.el6]
changelog:
  - [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
  - [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
  - [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-4
changelog:
  - Build for x86_64 as well.  Kdump support doesn't work there, but users
    should be able to use kexec.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-8
changelog:
  - Fix the service stop case.  It was previously unloading the wrong kernel.
  - Implement the "restart" function.
  - Add the "irqpoll" option as a default kdump kernel commandline parameter.
  - Create a default kernel command line in the sysconfig file upon rpm install.


author: Thomas Graf <tgraf@redhat.com> - 1.101-10
changelog:
  - kdump7.patch
     o Remove elf32 core headers support for x86_64
     o Fix x86 prepare elf core header routine
     o Fix ppc64 kexec -p failure for gcc 4.10
     o Fix few warnings for gcc 4.10
     o Add the missing --initrd option for ppc64
     o Fix ppc64 persistent root device bug
  - Remove --elf32-core-headers from default configuration, users
    may re-add it via KEXEC_ARGS.
  - Remove obsolete KEXEC_HEADERS


author: Thomas Graf <tgraf@redhat.com> - 1.101-15
changelog:
  - Don't add kdump service by default, let the user manually add it to
    avoid everyone seeing a warning.


author: Neil Horman <nhorman@redhat.com> - 1.101-45
changelog:
  - fixed typo in mkdumprd for bz 202983
  - fixed typo in mkdumprd for bz 203053
  - clarified docs in kdump.conf with examples per bz 203015


author: Jarod Wilson <jwilson@redhat.com> - 1.101-46
changelog:
  - ppc64 fixups:
    - actually build ppc64 binaries (bug 203407)
    - correct usage output
    - avoid segfault in command-line parsing
  - install kexec man page
  - use regulation Fedora BuildRoot


author: Neil Horman <nhorman@redhat.com> - 1.101-58
changelog:
  - Updating kdump.init and mkdumprd with most recent RHEL5 fixes
  - Fixing BuildReq to require elfutils-devel-static


author: Neil Horman <nhorman@redhat.com> - 1.102pre-1
changelog:
  - Bumping kexec version to latest horms tree (bz 257201)
  - Adding trigger to remove initrds when a kernel is removed


author: Neil Horman <nhorman@redhat.com> - 1.102pre-3
changelog:
  - Fix ARCH placement in kdump init script (bz 427201)
  - Fix BuildRequires
  - Fix Makedumpfile to build with new libelf


author: Neil Horman <nhorman@redhat.com> - 1.102pre-6
changelog:
  - Bringing rawhide up to date with bugfixes from RHEL5
  - Adding patch to prevent kexec buffer overflow on ppc (bz 428684)


author: Neil Horman <nhorman@redhat.com> 2.0.0-18
changelog:
  - Updated initscript to use mkdumprd2 if manifest is present
  - Updated spec to require dash
  - Updated sample manifest to point to correct initscript
  - Updated populate_std_files helper to fix sh symlink


author: Neil Horman <nhorman@redhat.com> -2.0.0-56
changelog:
  - Added utsname support to makedumpfile for 2.6.32 (bz 556356)
  - Cleaned up some syntax in the changelog


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-78
changelog:
  - Forward patches from RHEL5, Resolves: bz 592312  600566
    600571  600572 600574 600575 600577 600578 600579 600581 600583
    600584  600585 600586 600588 600590 600591 600593 600594 600595
    600596 600597  600598 600599 600600 600601 600602 600604 600605
    600606 600607 600610 600611 600613 600896 602785  602905.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-86
changelog:
  - When there are double quotes in LABEL= in kdump.conf, findfs
    will not be able to find the correct label, we should allow
    quotes in LABEL= in kdump.conf because a label name may contain
    spaces. See comment #4 of bug 600611.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-87
changelog:
  - We don't need to escape '#' with "\#", otherwise '#' will be
    executed as a command before aliased. See comment #4 of bug 600896.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-92
changelog:
  - When there are multiple net dump targets, let the last one
    overwrite the previous ones, stop showing errors in this case.
    See comment #4 in bug 600607.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-95
changelog:
  - Move modules from /lib into /lib/modules/`uname -r`, and
    regenerate modules.dep for them. Resolves bug 602033.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-99
changelog:
  - Support btrfs, and move fs type check earlier so that
    mkdumprd will fail soon with unsupported fs type.
    Resolves bug 607515 and bug 607131.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-102
changelog:
  - If a symlink with the same name exists, remove it first before
    copying, so that extra_bins will be copied correctly.
    Resolves bug 611699.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-107
changelog:
  - Include the patch from Cai, adding missed options to --help
    of makedumpfile. Resolves bug 606704.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-197
changelog:
  - Add coordination between kdump and cluster fencing for long
    kernel panic dumps, resolve bug 585332. From Ryan O'Hara.


author: Dave Young <dyoung@redhat.com> - 2.0.0-227
changelog:
  - Fix the default dump failure option, resolve bug 729675.
  - Add default console font, resolve bug 784114.
  - Set pipefail at the beginning of init, resolve bug 771671.
  - Some bug fixes for raw dump, resolve bug 794981.


author: Dave Young <dyoung@redhat.com> - 2.0.0-229
changelog:
  - clarify "insufficient memory" in firstboot kdump module, resolve bug 799529 
  - mkdumprd: call add_rootfs early, resolve bug 799231
  - Do not depend on selinuxcoreutils, resolve bug 697657


author: Dave Young <dyoung@redhat.com> - 2.0.0-230
changelog:
  - Update firstboot threshold to 2G and roundup memsize value, resolve bug 802201
  - convert PREFIX to NETMASK for the second kernel, resolve bug 699318


author: Dave Young <dyoung@redhat.com> - 2.0.0-233
changelog:
  - Clarify the kdump.conf documentation, resolve bug 805793
  - uncomment the default core_collector and path, resolve bug 805793
  - fix module finding logic, resolve bug 794580


author: Dave Young <dyoung@redhat.com> - 2.0.0-236
changelog:
  - Warn when dumping to encrypted devices, resolve bug 743551
  - Correct the meaning of BOOTPROTO=none, resolve bug 805803


author: Dave Young <dyoung@redhat.com> - 2.0.0-242
changelog:
  - add s390x support in firstboot, resolve bug 805040
  - deal with s390x threshold in firstboot, resolve bug 805040


author: Dave Young <dyoung@redhat.com> - 2.0.0-246
changelog:
  - Do not run default/final action if network interface fails to come up, resolve bug 822146
  - Move default action handling code in a separate function, resolve bug 822146
  - Append to /etc/iface_to_active file instead of overwriting, resolve bug 822146
  - Allow activation of more than one network interface in second kernel, resolve bug 822146
  - always find and install the fs module for local fs dump, resolve bug 842476
  - document the supported fs types, resolve bug 813354


author: Dave Young <dyoung@redhat.com> - 2.0.0-248
changelog:
  - Exclude microcode kernel module, resolve bug 788253
  - Exclude virtio_balloon kernel module, resolve bug 770000


author: Dave Young <dyoung@redhat.com> - 2.0.0-249
changelog:
  - improve warning message for remain size checking, resolve bug 857282
  - propagate_ssh_key remove selinux flips for ssh key generation, resolve bug 816467
  - random feeding fix, resolve bug 825640
  - do not print error when there's no vendor-model-type, resolve bug 801344, bug 628610


author: Dave Young <dyoung@redhat.com> - 2.0.0-250
changelog:
  - mkdumprd: Support line mode terminals for s390x, resolve bug 818645
  - Fix kdump documentation about vmcore-dmesg handling, resolve bug 850623


author: Dave Young <dyoung@redhat.com> - 2.0.0-252
changelog:
  - remove hardcode for including ata_generic driver, resolve bug 820474
  - mkdumprd: Fix /dev/mapper/* links not being created by default, resolve bug 874832
  - vmcore-dmesg: Determine correct machine pointer size, resolve bug 871292


author: Dave Young <dyoung@redhat.com> - 2.0.0-254
changelog:
  - blacklist IB module mlx4_core.ko, resolve bug 876891
  - create bonding device dynamiclly, resolve bug 859824


author: Dave Young <dyoung@redhat.com> - 2.0.0-255
changelog:
  - make the SCSI dump target work with Linux on System z, resolve bug 870957
  - extract Linux on System z device init into separate functions, resolve bug 870957
  - remove hwclock calls for Linux on System z, resolve bug 821376


author: Baoquan He <bhe@redhat.com> - 2.0.0-259
changelog:
  - kexec-tools: Map network devices based on MAC address
  - kexec-tools: Allow mkdumprd modules blacklist to be overwritten by extra_modules
  - Add description about default action 'mount_root_run_init' and 'poweroff'
  - check_encrypted fix
  - add virtio disk identify logic
  - Add scsi_id disk identify logic
  - move scsi_id install to a function
  - move identify critical disk logic to a function


author: Baoquan He <bhe@redhat.com> - 2.0.0-260
changelog:
  - kexec-tools: powerpc: dt_reserve doesn't allocate enough memory for large properties
  - mkdumprd: check for empty dasd options
  - mkdumprd: Remove redundant code from handledm()


author: Baoquan He <bhe@redhat.com> - 2.0.0-261
changelog:
  - kexec: Respect memory limit while building crash memory ranges on ppc64, resolve bug 871522 
  - modprobe output awkscripts fix, resolve bug 876667 
  - kdump.init: exit and print error if kernel is old but using nr_cpus=1, resolve bug 844572
  - kdump.conf.5: the location of makedumpfile is said wrongly, resolve bug 847247
  - mkdumprd: remove redundant code of checkinging IS_UUID/IS_LABEL for lvm PV Name, resolve bug 879471
  - mkdumprd: handlelvordev cleanup, resolve bug 879471


author: Baoquan He <bhe@redhat.com> - 2.0.0-262
changelog:
  - kexec-tools: Allow kdump over a network work with an arbitrary bridge, bond or vlan name , resolve bug 959449
  - Add files related to fips support , resolve bug 909402
  - Change the old copy of symlink file , resolve bug 909402
  - kdump.conf: the location of makedumpfile is said wrongly , resolve bug 847247
  - Revert no-udev lvm.conf changes , resolve bug 888609


author: Baoquan He <bhe@redhat.com> - 2.0.0-263
changelog:
  - Add a help message into man page of makedumpfile for -b option, resolve bug 825476
  - makedumpfile: add a big patch to upgrade from v1.3.5 to v1.5.3, resolve bug 825476
  - add missing logs for makedumpfile patches, resolve bug 825476
  - RHEL6.4 PATCH Use conditional restart when adding or removing CPU/Memory, resolve bug 883543
  - mkdumprd: add tab key as delimiter of core_collector in kdump.conf, resolve bug 852373


author: Baoquan He <bhe@redhat.com> - 2.0.0-264
changelog:
  - kexec-tools.spec: turn on the dynamic and lzo build for makedumpfile, resolve bug 825476
  - kexec-tools.spec: Validate patches related to makedumpfile, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-265
changelog:
  - add selinux relabel when service startup, resolve bug 797231
  - add bzip2-devel and lzo-devel to BuildRequires, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-266
changelog:
  - kdump.conf.5: Modify 2 spelling errors
  - kexec-tools: Only remap network once when cluster configured
  - tools: Clean up /etc/iface_map after remapping the devices
  - kernel cmdline: Remove hugepage allocations
  - mkdumprd: change default disk_timeout to 180 seconds
  - kdump.conf: Tell user to specify module without ".ko" suffix
  - kdump.conf: add some missing supported configurations from kdump.conf.5
  - kdump.conf: change line columns to 80
  - Raw dump: use /sbin/blockdev to flush out block device buffers
  - Update translation file for firstboot
  - Update translation file for firstboot


author: Baoquan He <bhe@redhat.com> - 2.0.0-267
changelog:
  - mkdumprd: improve error message when e2fsprogs is missing, resolves bug 975642
  - mkdumprd: improve error message when btrfs-progs is missing, resolves bug 810494
  - Document mkdumprd option --allow-missing, resolves bug 951035


author: Baoquan He <bhe@redhat.com> - 2.0.0-269
changelog:
  - add snappy build, resolves bug 902147
  - This patch fixes the parsing of inline comments in config file, resolves bug 967427


author: Baoquan He <bhe@redhat.com> - 2.0.0-271
changelog:
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption, resolves bug 1009207


author: Baoquan He <bhe@redhat.com> - 2.0.0-272
changelog:
  - Allow multipathd to configure multipath map before adding partition devmappings, resolves bug 906601
  - mkdumprd: use timeout_count as a global variable, resolves bug 906601
  - mkdumprd: add support for SCM devices available for Linux on System z, resolves bug 903529
  - kdump.init: Run multiple kdump init instances one by one in serial order, resolves bug 963948


author: Baoquan He <bhe@redhat.com> - 2.0.0-273
changelog:
  - Fix max_mapnr issue on system has over 44-bit addressing, resolves bug 1008543
  - makedumpfile: fails phys_base calculation on sadump format, resolves bug 1010103


author: Baoquan He <bhe@redhat.com> - 2.0.0-274
changelog:
  - Add fence_kdump support for generic clusters, resolves bug 1083938
  - Add function setup_cluster_nodes_and_options, resolves bug 1083938
  - Add function get_pcs_cluster_nodes, resolves bug 1083938
  - Add function is_pcs_fence_kdump, resolves bug 1083938


author: Baoquan He <bhe@redhat.com> - 2.0.0-276
changelog:
  - kexec-tools: non-default routes are ignored by kdump, resolves bug 806992
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel, resolves bug 1061480
  - use -p option with fsck instead of -y, resolves bug 1055679
  - kdump doesn't work properly with nic that has "-" in it's name, resolves bug 874529
  - fix makedumpfile report and debug messages not shown, resolves bug 1016451


author: Baoquan He <bhe@redhat.com> - 2.0.0-277
changelog:
  - mkdumprd: add support for s390 DASD FBA type device, resolves bug 1022871
  - Check status of fsck before trying to mount a file system, resolves bug 1055672


author: Baoquan He <bhe@redhat.com> - 2.0.0-278
changelog:
  - Stop maximizing the bitmap buffer to reduce the risk of OOM, resolves bug 1114153
  - Move counting pfn_memhole for cyclic mode, resolves bug 1114153
  - Remove the 1st bitmap buffer from the ELF path in cyclic mode, resolves bug 1114153
  - Fix free bitmap_buffer_cyclic error, resolves bug 1114153
  - Introduce the mdf_pfn_t type, resolves bug 1114153


author: Baoquan He <bhe@redhat.com> - 2.0.0-279
changelog:
  - mkdurmpd: Issue sync after saving vmcore-dmesg.txt, resolves bug 1123061
  - mkdumprd: Fix check condition of selinux status, resolves bug 1122880
  - mkdumprd: fix no such file or directory warning in 2nd kernel on s390, resolves bug 1122883
  - Support for eppic language as a subpackage, resolves bug 823561
  - update .gitignore/sources for eppic_030413.tar.gz, resolves bug 823561
  - makedumpfile: Fix Makefile for eppic_makedumpfile.so build, resolves bug 823561


author: Baoquan He <bhe@redhat.com> - 2.0.0-280
changelog:
  - mkdumprd: wait for multipath device node, resolves bug 1128248
  - mkdumprd: clean up found logic in wait_for_multipath_devices(), resolves bug 1128248
  - use "getent ahostsv4 host-name" to get ipv4 address of a host name, resolves bug 1127138


author: Baoquan He <bhe@redaht.com> - 2.0.0-281
changelog:
  - starting kdump service after network, local fs and remote fs, resolves bug 1132300
  - Add sample eppic scripts to kexec-tools-eppic package, resolves bug 1104837
  - Convert leftover "getent hosts" to "getent ahostsv4", resolves bug 1142666
  - mkdurmpd: Fix the syntax error on the condition of fips inexistence, resolves bug 1131945


author: Baoquan He <bhe@redhat.com> - 2.0.0-283
changelog:
  - makedumpfile: Exclude unnecessary hugepages. resolves bug 1068674
  - makedumpfile: Vtop address translation support for vmalloc region in PPC64 arch. resolves bug 1068674
  - makedumpfile: Initialize for vmalloc address translation support in PPC64 arch. resolves bug 1068674
  - makedumpfile: Get rid of overrun adjustments. resolves bug 1068674
  - makedumpfile: Generic handling of multi-page exclusions. resolves bug 1068674


author: Baoquan He <bhe@redhat.com> - 2.0.0-286
changelog:
  - update kexec-kdump-howto.txt, resolves bug 949376
  - mkdumprd: Load the mlx4_core module if it is needed in the 2nd kernel, resolves bug 1099589
  - nfs dump will fail when netdev has different device name in ifcfg-$dev, resolves bug 1005141 
  - udev-rules: Restart kdump service on cpu ADD/REMOVE events, resolves bug 1113276


author: Baoquan He <bhe@redhat.com> - 2.0.0-287
changelog:
  - firstboot: fix overlapped gui in case low resolution, resolves bug 947803
  - mkdumprd: Load ipmi_watchdog module if it is running, resolves bug 1259503
  - kdump.init: remove the incomplete kdump.img, resolves bug 1240958


author: Baoquan He <bhe@redhat.com> - 2.0.0-288
changelog:
  - Remove the useless code about minix supporting, resolves bug 903510
  - mkdumprd: Use max partition number to create device in 2nd kernel, resolves bug 1260819
  - makedumpfile: Code changes to satisfy the coverity scan and fix the grammar problem, resolves bug 836926
  - kdump.init: remove useless code about /etc/kdump-adv-conf/initramfs.conf, resolves bug 873064
  - mkdumprd: Exclude 3 Hyper-V modules by default, resolves bug 1228774
  - makedumpfile fails to copy some firmware memory in sadump vmcore formats, resolves bug 1282999


author: Baoquan He <bhe@redhat.com> - 2.0.0-290
changelog:
  - mkdumprd: Fix shell error that kdump uses the variable without initializing, resolves bug 903510
  - mkdumprd: Fix incorrect variant MNTIMAGE, resolves bug 1294327


author: Baoquan He <bhe@redhat.com> - 2.0.0-291
changelog:
  - fadump/ppc64: update spec file, resolves bug 1254923
  - fadump/ppc64: add firmware-assisted dump howto document, resolves bug 1254923
  - fadump/ppc64: handle default action in fadump mode, resolves bug 1254923
  - fadump/ppc64: modify kdump init script to capture vmcore to local filesystems, resolves bug 1254923
  - fadump/ppc64: modify kdump script to stop firmware assisted dump, resolves bug 1254923
  - fadump/ppc64: modify kdump script to start the firmware assisted dump, resolves bug 1254923
  - fadump/ppc64: modify status routine to check for firmware-assisted dump, resolves bug 1254923


author: Baoquan He <bhe@redhat.com> - 2.0.0-292
changelog:
  - mkdumprd: Enhance kdump to handle multiport network card properly resolves bug 1284605
  - mkdumprd: Create special partition name for NVME device resolves bug 1235374
  - Don't handle vnet<n> used by VMs on RHEV host resolves bug 1283191
  - mkdumprd: hush does not support parenthesis in ko parameter directly resolves bug 1028298
  - kdump.init: fix a typo resolves bug 1295283


author: Baoquan He <bhe@redhat.com> - 2.0.0-293
changelog:
  - mkdumprd: Remove partition seperater as well while dropping partition number in device name, resolves bug 1228799


author: Baoquan He <bhe@redhat.com> - 2.0.0-298
changelog:
  - b0e4c65 Use file offset in initialize_mmap(), resolves bug 1314158
  - 85f20f9 mkdumprd: redirect stderr of bmc-watchdog to /dev/null resolves bug 1315270


author: Baoquan He <bhe@redhat.com> - 2.0.0-299
changelog:
  - mkdumprd: Use a flexible way to create rtc device, resolves bug 1315148
  - hyper-v: do not exclude hv_utils module, resolves bug 1228774


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-16
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1070244)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-17
changelog:
  - backport fix to not spin on a short read when reading the length of a
    response over TCP (RT#7508, #922884)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-18
changelog:
  - pkinit: backport tweaks to avoid trying to call the prompter callback
    when one isn't set (part of #965721)
  - pkinit: backport the ability to use a prompter callback to prompt for
    a password when reading private keys (the rest of #965721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-19
changelog:
  - packaging: don't Obsoletes: older versions of krb5-pkinit-openssl and
    virtual Provide: krb5-pkinit-openssl on EL6, where we don't need to
    bother with any of that (#1001961)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-20
changelog:
  - apply patch from Nikolai Kondrashov to pass a default realm set in
    /etc/sysconfig/krb5kdc to the kdb_check_weak helper, so that it doesn't
    produce an error if there isn't one set in krb5.conf (#1009389)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-21
changelog:
  - drop patch to add additional access() checks to ksu - they shouldn't be
    resulting in any benefit


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-22
changelog:
  - add patch from Jatin Nansi to avoid attempting to clear memory at the
    NULL address if krb5_encrypt_helper() returns an error when called
    from encrypt_credencpart() (#1055329, pull #158)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-23
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1087068, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-25
changelog:
  - ksu: if the -e flag isn't used, use the target user's shell when checking
    for authorization via the target user's .k5users file (#1026721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-26
changelog:
  - pull in backport of patch to not subsequently always require that responses
    come from master KDCs if we get one from a master somewhere along the way
    while chasing referrals (RT#7650, #1113652)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-27
changelog:
  - pull in backported fix for denial of service by injection of malformed
    GSSAPI tokens (CVE-2014-4341, CVE-2014-4342, #1121510)
  - incorporate backported patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800, more of


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-29
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121510)
  - gssapi: pull in proposed-and-accepted fix for a double free in initiators
    (David Woodhouse, CVE-2014-4343, #1121510)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-30
changelog:
  - ksu: when evaluating .k5users, treat lines with just a principal name as if
    they contained the principal name followed by '*', and don't throw away data
    from .k5users when we're not passed a command to run, which implicitly means
    we're attempting to run the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: Roland Mainz <roland.mainz@nrubsig.org> 1.10.3-34
changelog:
  - Backport of krb1.12 localauth plugin support
    See krb5-1.10-localauth_backport.patch for porting comments.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-35
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-36
changelog:
  - Backported krbdev #7996 ("Simplify and improve ksu cred
    verification"; cherry-picked from upstream
    bbfe19f03bdeca7b05b542dbae4c1692c9800c70) to fix RH bug
      less than 5 mins"): When verifying the user's initial
    credentials, don't compute a server name and preemptively
    obtain creds for it. This change allows
    |krb5_verify_init_creds()| to use any host key in the
    keytab, and not just the one for the canonicalized local
    hostname.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - Backported krb5-1.12.2 changes for |getclhoststr()|
    to fix RH bug #1154130 ("kadmind (Error): iprop_full_resync_1:
    getclhoststr failed").


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-38
changelog:
  - Backported krbdev #7868 ("Use preauth options when changing
    password") from krb-1.13 to fix RH bug #1075656 ("krb5
    client ignores FAST settings for changepw requests"):
    If we try to change the password in
    |rb5_get_init_creds_password()|, we must use all
    application-specified gic options which affect
    preauthentication when getting the kadmin/changepw ticket.
    Create a helper function |make_chpw_options()| which copies
    the application's options, unsets the options we don't want,
    and sets options appropriate for a temporary ticket.


author: - Roland Mainz <rmainz@redhat.com> - 1.10.3-39
changelog:
  - Backout patch #137 for krbdev #7996 ("Simplify and improve
    ksu cred verification" - see 1.10.3-36) for now until we
    figure out how to get this working.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-40
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-42
changelog:
  - fix for RH bug #1210704 ("Remove stray include in krb5's
    localauth_plugin.h"). This unnecessary #include statement
    was causing build failures on some systems by making libkrb5
    sources depend on gssapi.h (and as result to libcom_err,
    too).


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-54
changelog:
  - Fix gss_accept_sec_context output_token return in error cases
    Also backport upstream test for this.
  - Resolves: #1279249


author: Tomas Smetana <tsmetana@redhat.com> 20070328-2
changelog:
  - fix wrong exit status of spawned process after SIGSTOP
  - fix building of debuginfo package, add %{?dist} to release
  - fix handling of SIGTTOU in non-interactive shell
  - remove useless builtins


author: Tomas Smetana <tsmetana@redhat.com> 20071105-2
changelog:
  - fix #405381 - ksh will not handle $(xxx) when typeset -r IFS
  - fix #386501 - bad group in spec file


author: Michal Hlavinka <mhlavink@redhat.com> 20081104-1
changelog:
  - update to 2008-11-04
  - ast-ksh-locales are not useable remove them
  - /usr/bin/ksh symlink was removed


author: Michal Hlavinka <mhlavink@redhat.com> - 20100202-6
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584704)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-3
changelog:
  - fix file io race condition when file was created, but still does not exist (#660319)
  - use 'alternatives' for (m)ksh switching (#659658)
  - do not forget to restore file handles after execution of sourced script (#651888)
  - fix bug when here document got sometimes truncated (#644362)
  - do not forget to close autoloaded file with function definition (#643811)
  - fix wrong typeset handling of arrays that could caused a crash (#637052)
  - fix minor issues in man page (#619692)
  - fix crash when ksh get SIGPIPE while already executing signal handler (#616691)
  - fix wrong output redirection in SIGPIPE trap (#616684)
  - add RLIMIT_RTPRIO and RLIMIT_NICE support to ulimit (#582690)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - ksh did not wait for pipeline to complete when pipefail option was used (#702016)
  - completion used after an environment variable reported bad susbstituion error (#702015)
  - ksh child exit code not preserved correctly (#702013)
  - do not change $0 in posix function (#702011)
  - fix man page information about default value for PATH variable (#702008)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - fix crashe when IFS is unset inside a function (#683734)
  - do not count empty array elements (#702014)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-2
changelog:
  - fix overflow in subshell loop (#858263)
  - set default editing mode to emacs (#761551)
  - ksh -m did not turn monitor mode on (#960034)
  - prevent fork bomb trigered by SIGSTP (#922851)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-14
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1066589)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-16
changelog:
  - do not resend signal on termination (#1075635)
  - fix argv rewrite (#1047506)
  - fix brace expansion on/off (#1078698)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070350)
  - fix parser errors related to the end of the here-document marker (#1036931)
  - ksh hangs when command substitution fills out the pipe buffer (#1062296)
  - using typeset -l with a restricted variabled caused segmentation fault (#1083713)
  - ksh stopped on read when monitor mode was enabled (#1023109)
  - monitor mode was documented incorrectly (#1019334)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-17
changelog:
  - do not crash when unsetting running function from another one (#1105138)
  - should report an error when trying to cd into directory without execution bit (#1102627)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-18
changelog:
  - job locking mechanism did not survive compiler optimization (#1112306)
  - wrong return code from a pipe in command substitution (#1117316)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd to directory without execution permission can't fail silently (#1160923)
  - current directory could differ from PWD (#1168611)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1173668)
  - exporting fixed with variable corrupted its data (#1188377)
  - fixes memmory leak on unset of associative array (#1189294)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - fix segfault when handling a trap (#1117404)
  - closing a file descriptor in a command substitution caused loss of the output (#1116072)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Paul Wouters <paul@xelerance.com> 1.0.0-6
changelog:
  - added a make clean for 2.3.3 since .o files were left behind upstream,
    causing failure on ppc platform


author: Paul Wouters <paul@xelerance.com> 1.0.1-3
changelog:
  - Fixed changelog typo in date
  - Rebuild requested for PT_GNU_HASH support from gcc
  - Did not upgrade to 1.1.0 due to compile issues on x86_64


author: Paul Wouters <paul@xelerance.com> 1.2.0-2
changelog:
  - Own the /usr/include/ldns directory (bug #233858)
  - Removed obsoleted patch
  - Remove files form previous libtool run accidentally packages by upstream


author: Paul Wouters <paul@xelerance.com> 1.2.0-10
changelog:
  - Added sha256 DS record patch to ldns-key2ds
  - Minor tweaks for proper doc/man page installation.
  - Workaround for parallel builds


author: Paul Wouters <paul@xelerance.com> 1.2.0-11
changelog:
  - Patch for ldns-key2ds to write to stdout
  - Again remove extra set of man pages from doc
  - own /usr/include/ldns (bug 233858)


author: Paul Wouters <paul@xelerance.com> - 1.5.1-4
changelog:
  - Memory management bug when generating a sha256 key, see:
    https://bugzilla.redhat.com/show_bug.cgi?id=493953


author: Paul Wouters <paul@xelerance.com> - 1.6.0-3
changelog:
  - Added patch to compile with --without-ssl
  - Removed openssl dependancies
  - Recompiled with --without-ssl


author: Paul Wouters <paul@xelerance.com> - 1.6.1-2
changelog:
  - Added openssl dependancy back in, since we get more functionality
   when using openssl. Especially in 'drill'.


author: Paul Wouters <paul@xelerance.com> - 1.6.2-1
changelog:
  - Upgraded to 1.6.2. This fixes various bugs.
    (upstream released mostly to default with sha2 for the imminent
     signed root, but we already enabled that in our builds)


author: Paul Wouters <paul@xelerance.com> - 1.6.4-2
changelog:
  - Fix missing _ldns.so causing ldns-python to not work
  - Patch for installing ldns-python files
  - Patch for rpath in ldns-python
  - Don't install .a file for ldns-python


author: Paul Wouters <paul@xelerance.com> - 1.6.10-2
changelog:
  - Fix for losing nameserver when it drops UDP fragments in
    ldns_resolver_send_pkt [Willem Toorop <willem@NLnetLabs.nl>]
  - Added ldnsx module (to be merged into ldns soon)
    http://git.xelerance.com/cgi-bin/gitweb.cgi?p=ldnsx.git;a=summary


author: Paul Wouters <paul@xelerance.com> - 1.6.11-2
changelog:
  - Updated to 1.6.11, fixes rhbz#741026 which is CVE-2011-3581
  - Python goes into sitearch, not sitelib
  - Fix source link and spelling errors in description


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-1
changelog:
  - Upgraded to 1.6.13, bugfix release
  - Added --disable-ecdsa as ECC is still banned
  - Removed --with-sha2 - it is always enabled and option was removed


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-2
changelog:
  - Added reworked ldns-read-zone patch from trunk
    (adds -p for SOA padding, and -o for zeroizing timestamps/sigs)


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-7.1
changelog:
  - port the rhel-7 package version to rhel-6
  - enabled ECDSA due to Unbound
  - Fix issue in DSA algorithm (#1077799)


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated to libX11-0.99.2 from the X11R7 RC1 release.
  - Added en_GR.UTF-8 locale to file manifest.
  - Forcibly remove Xcms.txt


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libX11 to version 0.99.3 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-4
changelog:
  - Added libX11-0.99.3-datadir-locale-dir-fix.patch, to fix build to install
    the locale data files into datadir instead of libdir. (#173282)


author: Mike A. Harris <mharris@redhat.com> 0.99.4-1
changelog:
  - Updated libX11 to version 0.99.4 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added libX11-1.0.1-setuid.diff to fix potential security issue (#196094)
  - Change dependency on "filesystem" package to "xorg-x11-filesystem" package,
    so we can control this dep centrally.
  - Added NEWS to doc list.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libX11 to version 1.0.2
  - Bump BuildRequires and Requires to "xorg-x11-proto-devel >= 7.1-2" to meet
    new "xproto >= 7.0.6" dependency.
  - Disable libX11-0.99.3-datadir-locale-dir-fix.patch as it is now included
    upstream.
  - Remove autoconf dependency as we no longer need it.


author: Mike A. Harris <mharris@redhat.com> 1.0.3-1.fc6
changelog:
  - Updated libX11 to version 1.0.3
  - Remove libX11-1.0.1-setuid.diff as it is included in the 1.0.3 release.
  - Added 'dist' tag to "Release:"


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2.fc6
changelog:
  - Added libX11-nls-indic-locales-bug185376.patch to add support for various
    indic locales which have now been committed upstream (#185376)


author: Adam Jackson <ajax@redhat.com> 1.1.2-3
changelog:
  - libX11-1.1.2-GetMotionEvents.patch: Fix the definition of XGetMotionEvents
    to match the argument order in the headers. (#274671)


author: Adam Jackson <ajax@redhat.com> 1.1.3-2
changelog:
  - libX11-1.1.3-xkb-lock-fix.patch: Don't LockDisplay() recursively.  Fixes
    Gnome hang at logout. (#326461)


author: Adam Jackson <ajax@redhat.com> 1.1.4-3
changelog:
  - libX11-1.1.4-xcb-xreply-leak.patch: Fix a leak when the client has a
    non-fatal error handler. (mclasen, fdo #17616)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated to libXext-0.99.1 from the X11R7 RC1 release.
  - Added manpages that were absent in X11R7 RC0, and updated the file lists
    to find them in section "man3x".


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXext to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXext to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1" to devel package (#173713)
  - Added "libX11-devel" to devel package (#176078)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> - 1.0.1-5
changelog:
  - Merge-Review #226070
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README file


author: Robert Scheck <robert@fedoraproject.org> 1.1-2
changelog:
  - libXext-1.1-XAllocID.patch: call XAllocID with the display lock held.
  - libXext-1.1-event_vec-smash.patch: don't smash the event processing vector
    if the server has an older extension version than the client.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Adam Jackson <ajax@redhat.com> 1.2.3-2.fc7
changelog:
  - libXfont-1.2.3-namespace-pollution.patch: Hide some symbols from the dynamic
    linker to avoid colliding with other libs.


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Mike A. Harris <mharris@redhat.com> 2.1.7-4
changelog:
  - Added "BuildRequires: fontconfig-devel >= 2.2" dependency that was
    previously missed.  Also added "Requires: fontconfig >= 2.2" runtime
    dependency.
  - Added missing defattr to devel subpackage.


author: Mike A. Harris <mharris@redhat.com> 2.1.7-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new style X library package names


author: Mike A. Harris <mharris@redhat.com> 2.1.8-2
changelog:
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 2.1.8.1-1
changelog:
  - Updated libXft to version 2.1.8.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "Requires: libXrender-devel" to -devel subpackage for (#175465)


author: Mike A. Harris <mharris@redhat.com> 2.1.10
changelog:
  - Updated libXft to version 2.1.10
  - Specify freetype dependencies as >= 2.1.9-1
  - Futureproof builds by adding release number to fontconfig dependencies.


author: parag <paragn@fedoraproject.org> - 2.1.12-4
changelog:
  - Merge-Review #226074
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length NEWS file


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXi to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as build fails without it, but does
    not check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXi to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192721)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package for xi.pc
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> 1.1.3-2
changelog:
  - Merge-review #226076
  - Removed BR:pkgconfig
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length AUTHORS README file


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.3-2
changelog:
  - 0001-Handle-unknown-device-classes.patch: don't corrupt memory when a
    server sends unknown device classes.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.3-3
changelog:
  - Fix 0001-Handle-unknown-device-classes.patch: missing prototype change for
    copy_classes in XIQueryDevice caused parameter corruption (#744960)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXrandr to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXrandr to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 1.1.0.1-1
changelog:
  - Updated libXrandr to version 1.1.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193428)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192724)
  - Remove package ownership of mandir/libdir/etc.


author: Adam Jackson <ajax@redhat.com> 1.2.0-3
changelog:
  - BuildRequire on the randrproto virtual instead of a magic x-x-p-d version.
  - Fix -devel package to require sufficiently new randrproto.


author: parag <paragn@fedoraproject.org> 1.2.2-2
changelog:
  - Merge-Review #226083
  - Removed BR:pkgconfig 
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: Mike A. Harris <mharris@redhat.com> 0.9.0.1-1
changelog:
  - Updated libXrender to version 0.9.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.9.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193429)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> 0.9.4-2
changelog:
  - Merge-Review #226084
  - Removed BR:pkgconfig 
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: Mike A. Harris <mharris@redhat.com> 1.0.3-3
changelog:
  - Update BuildRoot to use Fedora Packaging Guidelines.
  - Add missing "BuildRequires: libX11-devel, pkgconfig"


author: Mike A. Harris <mharris@redhat.com> 1.0.4-1
changelog:
  - Updated libdrm to version 1.0.4 from X11R7 RC1
  - Remove i915_drv.h, imagine_drv.h, mach64_drv.h, mga_drv.h, mga_ucode.h,
    r128_drv.h, radeon_drv.h, savage_drv.h, sis_drv.h, sis_ds.h, tdfx_drv.h,
    via_drv.h, via_ds.h, via_mm.h, via_verifier.h from file manifest.


author: Mike A. Harris <mharris@redhat.com> 1.0.5-1
changelog:
  - Updated libdrm to version 1.0.5 from dri.sf.net upstream to work around
    mesa unichrome dri driver compile failure.


author: Mike A. Harris <mharris@redhat.com> 2.0-1
changelog:
  - Updated libdrm to version 2.0 from dri.sf.net.  This is an ABI incompatible
    release, meaning everything linked to it needs to be recompiled.


author: Mike A. Harris <mharris@redhat.com> 2.0-2
changelog:
  - Replaced the temporary tongue-in-cheek humourous package summary and
    description with the proper package descriptions, as many people didn't get
    the joke, while others felt it was getting old.  Ah well, I had my fun for
    a while anyway.  ;o)


author: Mike A. Harris <mharris@redhat.com> 2.0.1-4
changelog:
  - Added "Exclusivearch: ix86, x86_64, ia64, ppc, alpha, sparc, sparc64" to
    restrict build to DRI-enabled architectures.


author: Adam Jackson <ajax@redhat.com> 2.4.0-0.1
changelog:
  - libdrm-2.4.0-no-freaking-mknod.patch: Don't magically mknod the device
    file, that's what udev is for.


author: Adam Jackson <ajax@redhat.com> 2.4.0-0.11
changelog:
  - libdrm-2.4.0-no-bc.patch: Delete the /proc/dri BC code.  It's not needed,
    and the kernel implementation is sufficiently broken that we should avoid
    ever touching it.


author: Kristian Høgsberg <krh@redhat.com> - 2.4.0-0.15
changelog:
  - Avoid shared-core when doing make install so we don't install kernel
    header files.  Drop kernel header files from -devel pkg files list.


author: Dave Airlie <airlied@redhat.com> 2.4.0-0.19
changelog:
  - add back modesetting support - this is a snapshot from modesetting-gem
  - any bugs are in the other packages that fail to build


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libfontenc to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added libfontenc-0.99.2-use-datadir-for-encodings.patch and invoke aclocal
    and automake to activate the changes.  This fixes a bug reported against
    mkfontscale, in which it looks in _datadir for the font encodings files,
    which was traced back to libfontenc (#173875).
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-2" to ensure that
    /usr/include/X11 is a directory rather than a symlink before this package
    gets installed, to avoid bug (#173384).


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libfontenc to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated libfontenc to version 1.0.0 from X11R7 RC4
  - Added libfontenc-1.0.0-get-fontdir-from-pkgconfig.patch which now replaces
    libfontenc-0.99.2-use-datadir-for-encodings.patch by using pkgconfig to
    query fontutil.pc for fontdir.
  - Added "BuildRequires: font-utils >= 1.0.0" to find fontutil.pc
  - Removed libfontenc-0.99.2-use-datadir-for-encodings.patch


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Remove package ownership of mandir/libdir/etc.
  - Added "BuildRequires: autoconf" temporarily as long as autoconf is needed


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-2
changelog:
  - Silence unnecessary warning
    Resolves: rhbz#1201846
  - Access oVirt REST API through /ovirt-engine/api rather than /api
    Resolves: rhbz#1277447
  - Allow to cancel ovirt:// authentication dialog in virt-viewer
    Resolves: rhbz#1201604
  - Make sure 'cancelled' signal is disconnected when objects die
    Related: rhbz#1201604
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274355
  - Don't print ticket value to stdout
    Resolves: rhbz#1216118
  - Add support for accessing VMs behind proxies
    Resolves: rhbz#1292754


author: Elliot Lee <sopwith@redhat.com> 2.0.0-7
changelog:
  - More missing libXau hackery (prog_as.patch so we can run auto* to pull 
  in an updated libtool)
  - _smp_mflags


author: Richard Jones <rjones@redhat.com> - 1.0.25-4
changelog:
  - New upstream version 1.0.25.
  - Enable debugging when running the tests.
  - Disable tests - don't work correctly in Koji.


author: Richard Jones <rjones@redhat.com> - 1.0.26-6
changelog:
  - Experimentally try to reenable ppc and ppc64 builds.
  - Note BZ numbers which are causing tests to fail.


author: Richard Jones <rjones@redhat.com> - 1.0.28-1
changelog:
  - New upstream version 1.0.28.  Nothing has visibly changed, but
    the source has been gettextized and we want to check that doesn't
    break anything.


author: Richard Jones <rjones@redhat.com> - 1.0.29-3
changelog:
  - New upstream version 1.0.29 (fixes RHBZ#502007 RHBZ#502018).
  - This should allow us to enable tests for i386 and x86-64.
  - Added test-bootbootboot.sh script which was missed from 1.0.29 tarball.
  - Pass kernel noapic flag to workaround RHBZ#502058.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.33-1
changelog:
  - New upstream version 1.0.33.
  - --with-java-home option is no longer required.
  - Upstream contains potential fixes for:
      501878 built-in commands like 'alloc' and 'help' don't autocomplete
      501883 javadoc messed up in libguestfs java documentation
      501885 Doesn't detect missing Java, --with-java-home=no should not be needed
      502533 Polish translation of libguestfs
      n/a    Allow more ext filesystem kmods (Charles Duffy)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.37-1
changelog:
  - New upstream version 1.0.37.
  - Fixes:
    . "mkdir-p" should not throw errors on preexisting directories (RHBZ#503133)
    . cramfs and squashfs modules should be available in libguestfs appliances
        (RHBZ#503135)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.39-1
changelog:
  - New upstream version 1.0.39.
  - Fixes:
    . libguestfs /dev is too sparse for kernel installation/upgrade (RHBZ#503169)
    . OCaml bindings build failure (RHBZ#502309)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.44-1
changelog:
  - New upstream version 1.0.44.
  - Try enabling tests on ppc & ppc64 since it looks like the bug(s?)
    in qemu which might have caused them to fail have been fixed.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.47-2
changelog:
  - New upstream release 1.0.47.
  - Enable experimental supermin appliance build.
  - Fix path to appliance.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.48-1
changelog:
  - New upstream release 1.0.48.
  - Should fix all the brokenness from 1.0.47.
  - Requires febootstrap >= 2.3.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.49-5
changelog:
  - Remove workaround for RHBZ#507007, since bug is now fixed.
  - Pull in upstream patch to fix pclose checking
    (testing as possible fix for RHBZ#507066).
  - Pull in upstream patch to check waitpid return values
    (testing as possible fix for RHBZ#507066).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.57-1
changelog:
  - New upstream release 1.0.57.
  - New tool virt-df (obsoletes existing package with this name).
  - RHBZ#507066 may be fixed, so reenable tests.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.64-3
changelog:
  - RHBZ#513249 bug in qemu is now fixed, so try to rebuild and run tests.
  - However RHBZ#503236 still prevents us from testing on i386.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.65-1
changelog:
  - New upstream release 1.0.65.
  - Add Obsoletes for virt-df2 (RHBZ#514309).
  - Disable tests because of ongoing TCG problems with newest qemu in Rawhide.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.66-5
changelog:
  - Set network interface to ne2k_pci (workaround for RHBZ#516022).
  - Rerun autoconf because patch touches configure script.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.69-1
changelog:
  - New upstream release 1.0.69.
  - Reenable the tests (because RHBZ#516543 is supposed to be fixed).
  - New main loop code should fix RHBZ#501888, RHBZ#504418.
  - Add waitpid along guestfs_close path (fixes RHBZ#518747).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.72-1
changelog:
  - New upstream release 1.0.72.
  - New tools: virt-edit, virt-rescue.
  - Combine virt-cat, virt-df, virt-edit, virt-inspector and virt-rescue
    into a single package called libguestfs-tools.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.73-1
changelog:
  - New upstream release 1.0.73.
  - OCaml library now depends on xml-light.
  - Deal with installed documentation.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.75-2
changelog:
  - New upstream release 1.0.75.
  - New library: libhivex.
  - New tools: virt-win-reg, hivexml, hivexget.
  - Don't require chntpw.
  - Add BR libxml2-devel, accidentally omitted before.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.77-1
changelog:
  - New upstream release 1.0.77.
  - Support for mounting guest in host using FUSE (guestmount command).
  - hivex*(1) man pages should be in main package, not -devel, since
    they are user commands.
  - libguestfs-tools: Fix "self-obsoletion" issue raised by rpmlint.
  - perl: Remove bogus script Sys/bindtests.pl.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.78-2
changelog:
  - New upstream release 1.0.78.
  - Many more filesystem types supported by this release - add them
    as dependencies.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.79-2
changelog:
  - New upstream release 1.0.79.
  - Adds FUSE test script and multiple fixes for FUSE (RHBZ#538069).
  - Fix virt-df in Xen (RHBZ#538041).
  - Improve speed of supermin appliance.
  - Disable FUSE-related tests because Koji doesn't currently allow them.
    fuse: device not found, try 'modprobe fuse' first


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.80-1
changelog:
  - New upstream release 1.0.80.
  - New Polish translations (RHBZ#502533).
  - Give a meaningful error if no usable kernels are found (RHBZ#539746).
  - New tool: virt-list-filesystems


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.80-11
changelog:
  - Remove gfs-utils (deprecated and removed from Fedora 13 by the
    upstream Cluster Suite developers).
  - Include patch to fix regression in qemu -serial stdio option.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.81-1
changelog:
  - New upstream version 1.0.81.
  - Remove two upstream patches.
  - virt-inspector: Make RPM application data more specific (RHBZ#552718).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.81-8
changelog:
  - Backport special handling of libgcc_s.so.
  - Backport unreadable files patch from RHEL 6 / upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.82-1
changelog:
  - New upstream version 1.0.82.  This includes the two patches
    we were carrying, so those are now removed.
  - This release fixes:
    RHBZ#559498 (Oriya translation).
    RHBZ#559480 (Punjabi translation).
    RHBZ#558593 (Should prevent corruption by multilib).
    RHBZ#559237 (Telugu translation).
    RHBZ#557655 (Use xstrtol/xstrtoll to parse integers in guestfish).
    RHBZ#557195 (Missing crc kernel modules for recent Linux).
  - In addition this contains numerous fixes to the hivex library
    for parsing Windows Registry files, making hivex* and virt-win-reg
    more robust.
  - New API call 'filesize'.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.82-6
changelog:
  - Backport a better fix for RHBZ557655 test from upstream.
  - Backport fix for unreadable yum.log from upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.83-2
changelog:
  - New upstream release 1.0.83.
  - This release fixes:
    Add Marathi translations (RHBZ#561671).
    Polish translations (RHBZ#502533).
    Add Gujarti translations (Sweta Kothari) (RHBZ#560918).
    Update Oriya translations (thanks Manoj Kumar Giri) (RHBZ#559498).
    Set locale in C programs so l10n works (RHBZ#559962).
    Add Tamil translation (RHBZ#559877) (thanks to I.Felix)
    Update Punjabi translation (RHBZ#559480) (thanks Jaswinder Singh)
  - There are significant fixes to hive file handling.
  - Add hivexsh and manual page.
  - Remove two patches, now upstream.


author: Matthew Booth <mbooth@redhat.com> - 1.0.83-6
changelog:
  - Change buildnonet to buildnet
  - Allow buildnet, mirror, updates, virtio and runtests to be configured by user
    macros.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.83-7
changelog:
  - Disable tests.  These fail in Koji (on RHEL 5 kernel) because of a
    bug in preadv/pwritev emulation in glibc (RHBZ#563103).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.84-4
changelog:
  - Don't include generator.ml in rpm.  It's 400K and almost no one will need it.
  - Add comments to spec file about how repo building works.
  - Whitespace changes in the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.84-6
changelog:
  - Fix quoting in supermin-split script (RHBZ#566511).
  - Don't include bogus './builddir' entries in supermin hostfiles
    (RHBZ#566512).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.85-1
changelog:
  - New upstream version 1.0.85.
  - Remove hivex, now a separate upstream project and package.
  - Remove supermin quoting patch, now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.0.85-2.4
changelog:
  - Backport upstream patch to remove dependency on /lib/libntfs-3g.so.N.
  - The above depends on the bash quoting patch, so apply that first.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.1-1
changelog:
  - New upstream stable branch version 1.2.1.
  - Includes the new tools virt-list-partitions, virt-resize, and
    updated virt-rescue and virt-win-reg (with regedit support).
  - Reenable tests.
  - Fixes bugs: 580650, 579155, 580246, 579664, 578123, 509597,
    505329, 576876, 576688, 576689, 569757, 567567, 570181.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.2-1
changelog:
  - New upstream stable branch version 1.2.2.
  - Fixes RHBZ#580016.
  - Fixes several important bugs in virt-resize.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.3-1
changelog:
  - New upstream stable branch version 1.2.3.
  - Fixes: 582548, 583554, 582948, 582901, 582929, 582899, 582953,
    578407.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.5-1.el6.5
changelog:
  - Branch from Fedora 13 and compile for RHEL-6.
  - Include NTFS support in the appliance for V2V and other virtualization
    operations on Windows guests.
  - Backport aug_clear API from upstream development branch.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.7-1
changelog:
  - Pull in latest release of upstream stable branch.
  - Remove NTFS support from this package.
  - Backport supermin unification patch from upstream development branch.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.7-1.el6.5
changelog:
  - Backport ignore utempter patch from upstream.
  - Work around buggy getlogin_r test in gnulib.
  - Explicitly depend on e2fsprogs (no longer pulled in implicitly).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.7-1.11
changelog:
  - For RHBZ#600148:
    * In guestfs_mkfs_b, map block size to cluster size for VFAT and NTFS
    * Remove power-of-2 test from API tests.  Not supported by backported
      code.


author: Matthew Booth <mbooth@redhat.com> - 1:1.2.7-1.21
changelog:
  - Rely on upstream augeas lens for modules.conf (RHBZ#616753)
  - Use link-local addresses for host<->guest communication (RHBZ#613562)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.7-1.24
changelog:
  - Remove runtime requires xfsprogs and /lib64/libhandle.so.1 (RHBZ#630986).
    Note that we have removed support completely from the appliance.  Even
    installing xfsprogs separately will not provide support in this
    build of libguestfs.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.6.2-4
changelog:
  - New upstream stable version 1.6.2, rebase for RHEL 6.1 (RHBZ#613593).
  - Remove previous patches which are now all upstream and in this new version.
  - BR febootstrap 2.10 (RHBZ#628849).
  - BR cryptsetup-luks for new LUKS encryption support.
  - ocaml-xml-light{,-devel} is no longer required to build.
  - guestfish is no longer dependent on virt-inspector.
  - Require the ruby package.
  - Disable PHP and Haskell bindings in configure (they wouldn't build anyway,
    but this will help people building from source).
  - Set sysconfdir in configure.
  - --enable-debug-command is no longer required by configure script.
  - New command 'virt-make-fs'.
  - Include virt-inspector2, upstream replacement for virt-inspector.
  - Provide hexedit replacement script for guestfish.
  - BR autotools, and rerun after applying patches.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-3
changelog:
  - New upstream version 1.7.17, rebase for RHEL 6.1 (RHBZ#613593).
  - Require febootstrap >= 2.11.
  - Split out new libguestfs-tools-c package from libguestfs-tools.
    . This is so that the -tools-c package can be pulled in by people
      wanting to avoid a dependency on Perl, while -tools pulls in everything
      as before.
    . The C tools currently are: cat, df, filesystems, fish, inspector, ls,
      mount, rescue.
    . libguestfs-tools no longer pulls in guestfish.
  - guestfish no longer requires pod2text, hence no longer requires perl.
  - guestfish also depends on: less, man, vi, emacs.
  - Add BR db4-utils (although since RPM needs it, it not really necessary).
  - Runtime requires on db4-utils should be on core lib, not tools package.
  - Change all "Requires: perl-Foo" to "Requires: perl(Foo)".
  - New manual pages containing example code.
  - Ship examples for C, OCaml, Ruby, Python.
  - Don't ship HTML versions of man pages.
  - Rebase no-fuse-test patch to latest version.
  - New tool: virt-filesystems.
  - Rename perl-libguestfs as perl-Sys-Guestfs (RHBZ#652587).
  - Remove guestfs-actions.h and guestfs-structs.h.  Libguestfs now
    only exports a single <guestfs.h> header file.
  - Add AUTHORS file from tarball.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-4
changelog:
  - Backport patches up to upstream 1.8.0 _except_ for:
     * changes which require febootstrap 3.x
     * changes which were only relevant for other distros


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-8
changelog:
  - Backport patches up to upstream 1.8.1. (RHBZ#613593)
  - Fixes:
     * guestfish: fails to tilde expand '~' when $HOME unset (RHBZ#617440)
     * libguestfs: unknown filesystem /dev/fd0 (RHBZ#666577)
     * libguestfs: unknown filesystem label SWAP-sda2 (RHBZ#666578)
     * libguestfs: unknown filesystem /dev/hd{x} (cdrom) (RHBZ#666579)
     * virt-filesystems fails on guest with corrupt filesystem label (RHBZ#668115)
     * emphasize "libguestfs-winsupport" in error output (RHBZ#627468)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-10
changelog:
  - Remove external hexedit script and make guestfish users set $HEXEDITOR.
    This is because requiring emacs pulls in all of X (RHBZ#641494).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-12
changelog:
  - Fix typo in virt-make-fs manual page.
    resolves: rhbz#673721
  - Add a grep-friendly string to LIBGUESTFS_TRACE output.
    resolves: rhbz#673477


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-18
changelog:
  - python: Convert any iterable argument to a list.
    resolves: rhbz#693306
  - Renumber the RHEL 6.1-specific patches from 0500+.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-23
changelog:
  - Use git to manage patches.
  - Include all minor bugfixes from upstream stable-1.8 branch up to
    libguestfs 1.8.11.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-24
changelog:
  - inspect: Detect 32 bit applications running on WOW64 emulator
    resolves: rhbz#692394
  - perl: Binding and test for guestfs_last_errno
    resolves: rhbz#672491
  - New API: list-dm-devices
    fish: Show device mapper device in tab completion
    resolves: rhbz#688062
  - Document that fullvirt query only works for Linux guests
    resolves: rhbz#690358


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-25
changelog:
  - Fix 'unknown filesystem' warnings in old inspection code
    resolves: rhbz#678231
    resolves: rhbz#666578


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-26
changelog:
  - Document that remote run in cmd substitution context hangs.
    resolves: rhbz#730248
  - Note that additional memory may be required to typecheck Augeas lenses.
    resolves: rhbz#729887


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.1-1
changelog:
  - Rebase to libguestfs 1.16.1
  - Disable tests (probably because we are hitting
    https://lists.gnu.org/archive/html/qemu-devel/2010-02/threads.html#00823 )
    resolves: rhbz#719879


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.6-1
changelog:
  - Rebase to libguesfs 1.16.6
    resolves: rhbz#798197, rhbz#797760,rhbz#790958,rhbz#798980,rhbz#795322,rhbz#796520
  - Fix virt-inspector2 man page.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.8-1
changelog:
  - Rebase to libguestfs 1.16.8
    resolves: rhbz#719879
  - Fix set_autosync function so it is not 'ConfigOnly'
    resolves: rhbz#796520
  - Fix header compilation for C++
    resolves: rhbz#799695


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.10-1
changelog:
  - Rebase to libguestfs 1.16.10
    resolves: rhbz#719879
  - Fix: libguestfs holds open file descriptors when handle is launched
    resolves: rhbz#801788
  - Fix: Document for set-pgroup need to be updated
    resolves: rhbz#801273
  - Fix: Possible null dereference and resource leaks
    resolves: rhbz#801298


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.12-1
changelog:
  - Rebase to libguestfs 1.16.12
    resolves: rhbz#719879
  - Fix: could not locate HKLM\SYSTEM\MountedDevices
    resolves: rhbz#803699


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.14-1
changelog:
  - Rebase to libguestfs 1.16.14
    resolves: rhbz#719879
  - virt-sysprep should use virt-inspector2
    resolves: rhbz#807557
  - Fix: mkfs blocksize option breaks when creating btrfs
    resolves: rhbz#807905


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.15-1
changelog:
  - Rebase to libguestfs 1.16.15
    resolves: rhbz#719879
  - Fix: inspection doesn't recognize Fedora 17+ (RHBZ#809401)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.18-2
changelog:
  - Rebase to libguestfs 1.16.18
    resolves: rhbz#719879
  - Fix: guestfs_last_error not set when qemu fails early during launch
    resolves: rhbz#811673
  - Fix: RFE: virt-sysprep: hostname can not be changed on rhel system
    (RHBZ#811112)
  - Fix: RFE: virt-sysprep: net-hwaddr not removed from "ifcfg-*" files on
    rhel (RHBZ#811117)
  - Fix: inspection fails on ubuntu 10.04 guest with encrypted swap (RHBZ#811872)
  - Fix: cannot open disk images which are symlinks to files that
    contain ':' (colon) character (RHBZ#812092)
  - BR gettext-devel so we can rerun autoconf.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.19-1
changelog:
  - Rebase to libguestfs 1.16.19
    resolves: rhbz#719879
  - Rebuild against augeas 0.9.0-3.el6
    related: rhbz#808662
  - Fix: Don't abort inspection if mdadm.conf ARRAY doesn't have a uuid.
  - Switch back to git for patch management.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.30-1
changelog:
  - Rebase to libguestfs 1.16.30
    resolves: rhbz#837691, rhbz#822626, rhbz#830369, rhbz#838609, rhbz#843068, rhbz#816839, rhbz#836573
  - Rebuild for new location of krb5 library.
  - Remove workaround for test-getlogin_r test.  This is fixed by a
    change in libguestfs (commit 6e1b5f0feac50a4) instead.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.30-3
changelog:
  - Force krb5 version that contains new build layout.
  - Add non-upstream patch to exclude iptables from the appliance.
    resolves: rhbz#858648


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-1
changelog:
  - Rebase to libguestfs 1.16.31.
  - Backport mount-local feature.
    resolves: rhbz#830135
  - Include copy-patches.sh shell script.
  - Simplify .gitignore.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-3
changelog:
  - Add dependency on fuse.
    resolves: rhbz#836501
  - Clarify the error message from resize2fs-M.
    resolves: rhbz#801640
  - Increase limit on size of Windows registry for inspection (RHBZ#852396).
  - Change virt-sparsify to work with old 'file' command (RHBZ#853763).
  - Enable tests by adding an LD_PRELOAD workaround for RHBZ#563103.
  - Tidy up comments in the check section.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-4
changelog:
  - Fix inspection of Windows guests (RHBZ#858126).
  - Fix list-devices when different drive interfaces are used (RHBZ#858128).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.32-2
changelog:
  - Rebase to libguestfs 1.16.32 which includes a fix for inspection
    of Windows guests.
    resolves: rhbz#858126
  - Skip test-mdadm.sh.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.32-3
changelog:
  - Set permissions of .guestfish files in home directories to 0600
    resolves: rhbz#843068
  - Ignore /etc/release if /etc/redhat-release exists
    resolves: rhbz#872454


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.34-1
changelog:
  - Rebase to latest stable-1.16 branch version libguestfs 1.16.34.
  - Include missing patch which adds <locale.h> to fuse/guestmount.c
    resolves: rhbz#883338
  - Fix link to engineering git repo.
  - Add workaround for bug in yum: RHBZ#883463.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-1
changelog:
  - Rebase to libguestfs 1.20.11.
    resolves: rhbz#958183
  - Remove buildnet: builds now detect network automatically.
  - The rhel-6.x branches containing the patches used in RHEL are
    now stored on a public git repository
    (https://github.com/libguestfs/libguestfs/branches).
  - Compare spec file to Fedora 18 and fix where necessary.
  - Backport new APIs part-get-gpt-type and part-set-gpt-type
    resolves: rhbz#965495
  - Fix DoS (abort) due to a double free flaw when inspecting certain guest
    files / images (CVE-2013-2124)
    resolves: rhbz#968337
  - libguestfs-devel should depend on an explicit version of
    libguestfs-tools-c, in order that the latest package is pulled in.
  - Rebuild against Augeas >= 1.0.0-5
    resolves: rhbz#971207
  - Backport Windows inspection changes
    resolves: rhbz#971090
  - Add back state test commands to guestfish
    resolves: rhbz#971664
  - Work around problem with ntfsresize command in RHEL 6
    resolves: rhbz#971326
  - Fix txz-out API
    resolves: rhbz#972413
  - Move virt-sysprep to the libguestfs-tools-c package since it's no longer
    a shell script
    resolves: rhbz#975572
  - Fix hostname inspection because of faulty Augeas path expression
    resolves: rhbz#975377
  - Calculate appliance root correctly when iface drives are added
    resolves: rhbz#975760
  - Add notes about resizing Windows disk images to virt-resize documentation
    resolves: rhbz#975753
  - Remove dependency on lsscsi, not available in 6Client
    resolves: rhbz#973425
  - Fix yum cache copy so it works if there are multiple repos
    resolves: rhbz#980502
  - Fix hivex-commit API to fail with relative paths
    resolves: rhbz#980372
  - Better documentation for filesystem-available API
    resolves: rhbz#980358
  - Fix double free when kernel link fails during launch
    resolves: rhbz#983690
  - Fix virt-sysprep --firstboot option
    resolves: rhbz#988863
  - Fix cap-get-file so it returns empty string instead of error on no cap
    resolves: rhbz#989352
  - Better documentation for acl-set-file
    resolves: rhbz#985269
  - Fix bogus waitpid error when using guestfish --remote
    resolves: rhbz#996825
  - Disable 9p support
    resolves: rhbz#997884
  - Document that guestfish --remote doesn't work with certain other arguments
    resolves: rhbz#996039
  - Enable kvmclock in the appliance to reduce clock instability
    resolves: rhbz#998108
  - Fix 'sh' command before mount causes daemon to segfault
    resolves: rhbz#1000122
  - Various fixes to tar-out 'excludes' (RHBZ#1001875)
  - Document use of glob + rsync-out (RHBZ#1001876)
  - Document mke2fs blockscount (RHBZ#1002032)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-2
changelog:
  - Fix CVE-2013-4419: insecure temporary directory handling for
    guestfish's network socket
    resolves: rhbz#1019737


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-3
changelog:
  - Fix .new method in Ruby bindings.
    resolves: rhbz#1072062
  - Properly use timeout --foreground when running tests
    resolves: rhbz#1025269
  - Fix cancellation on errors in tar-in
    resolves: rhbz#1091805
  - Check whether something has been mounted to / when using mount-local* APIs
    resolves: rhbz#1057510


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-4
changelog:
  - Don't inhibit partition detection if LDM not available
    resolves: rhbz#1079182
  - Deprecate blockdev_setbsz and make it do nothing
    resolves: rhbz#624335
  - Disable fstrim API
    resolves: rhbz#982979
  - Backport virt-sysprep from libguestfs 1.24, with few backports from
    greater versions too
    resolves: rhbz#1037166
  - virt-sparsify: don't overwrite block or char devices if used as output files
    resolves: rhbz#1056558
  - fix few typos in the documentation
    resolves: rhbz#1099332


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-7
changelog:
  - FUSE: fix access as root to files and directories not owned by root
    resolves: rhbz#1106548
  - virt-sparsify: check for available space before starting
    resolves: rhbz#1097359
  - Enable gdisk support to make part-get-gpt-type and part-set-gpt-type work
    resolves: rhbz#965495


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-11
changelog:
  - virt-sysprep: Fix locking accounts with passwords.
    resolves: rhbz#1037166
  - Update copy-patches script to RHEL 6.6.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-12
changelog:
  - Fix lvm-set-filter to work with newer lvm2 versions.
    resolves: rhbz#1168751
  - Fix handling of structs in the Java bindings.
    resolves: rhbz#1074005
  - Fix scrub-file so it can work on symlinks.
    resolves: rhbz#1091859
  - Show also aliases in the output of `guestfish -h`.
    resolves: rhbz#1100530
  - Fix typo in the man page of virt-edit.
    resolves: rhbz#1151739
  - virt-ls: always output the checksum field in CSV mode.
    resolves: rhbz#1151901
  - virt-ls: avoid double slashes in directory output.
    resolves: rhbz#1151911
  - Fix newline character in error output.
    resolves: rhbz#1153974
  - Fix virt-sysprep firstboot scripts to not be run more than once.
    resolves: rhbz#1159651
  - Fix logging of virt-sysprep firstboot scripts.
    resolves: rhbz#1160203
  - Fix description of 'set_append' and 'get_append' APIs.
    resolves: rhbz#1164734


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-13
changelog:
  - guestfish: fix Tab completion with some filesystems (e.g. xfs).
    resolves: rhbz#1153846
  - Improve drive caching by selecting the caching mode.
    resolves: rhbz#1038977
  - Generate user-cancel automatically, so there is also documentation for it.
    resolves: rhbz#1100533
  - virt-sysprep: make sure to trigger autorelabel by default when removing
    users.
    resolves: rhbz#1153855
  - virt-sysprep: recommend usage of --selinux-relabel with SELinux guests.
    related: rhbz#1153855
  - virt-sparsify: allow block devices as output.
    resolves: rhbz#1122557


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-14
changelog:
  - Raise augeas (Build)Requires to >= 1.0.0-8.el6, which fixes
    rhbz#1160261, so virt-sysprep can remove users from /etc/shadow;
    also remove note about that lack.
    resolves: rhbz#1138630
  - Make sure that libguesfs (the library itself), and virt-sparsify in
    particular, can handle filenames with ':'.
    resolves: rhbz#1128942


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-16
changelog:
  - Fix the old inspection code to handle some features of RHEL 7 images:
    handle /bin as symlink to /usr/bin, grub2 in boot partition, and
    recognize xfs as filesystem (reading UUID and label for it).
    resolves: rhbz#1216305
  - Fix reading of icon in RHEL 7 guests.
    resolves: rhbz#1216298
  - virt-sysprep: don't delete /var/spool/at/.SEQ
    resolves: rhbz#1229305
  - virt-sparsify: read all the output of `qemu-img --help`
    resolves: rhbz#1218934
  - Fix getting long labels for NTFS and btrfs filesystems; also correct the
    documented maximum length of btrfs labels.
    resolves: rhbz#1164729


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-17
changelog:
  - Mention ext2/3/4 in set-label error messages for ext labels.
    resolves: rhbz#1294956
  - Fix handling of symlinks in ll and llz, and when editing files in guestfish
    and virt-edit.
    resolves: rhbz#1293276


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: Petr Sabata <psabata@redhat.com> - 1.0.10-2
changelog:
  - Avoid NULL dereference when parsing supported_classes sys entry
  - Remove redundant buildroot definition
  - Resolves: rhbz#690014


author: Petr Šabata <contyk@redhat.com> - 1.0.13-1
changelog:
  - 1.0.13 bump + 47d8dca, "Set SerialNumber to 'Unknown' if not found"  (#788510)
  - Subpackage the pkgconfig file


author: Petr Šabata <contyk@redhat.com> - 1.0.16-1
changelog:
  - 1.0.16 bump, documentation and autotools scripts updates (#829810)
  - Fix an old bogus date in the changelog


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.2
changelog:
  - Fixes for the iwpmd start-up scripts with systemd
  - A change to enable multi devices per port mapper client
  - Releasing libiwpm-1.0.2 to be included in OFED-3.18


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3rc1
changelog:
  - Adding iwpmd.conf file to enable changing the size
    of the netlink socket receive buffer
  - Including a fix for failing to send netlink messages


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3
changelog:
  - Fix for the init script to enable the service to start automatically
    after boot on SLES11 SP4
  - Releasing libiwpm-1.0.3 to be included in OFED-3.18-1


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Adam Jackson <ajax@redhat.com> 0.9.1-3.20071031
changelog:
  - libpciaccess-fd-cache.patch: Cache sysfs PCI config space file
    descriptors for great boot speed justice.


author: Dave Airlie <airlied@redhat.com> 0.10.6-1
changelog:
  - rebase to latest release (will do release with VGA bits later)
  - libpciaccess-boot-vga.patch: add boot vga patch from upstream


author: Dave Airlie <airlied@redhat.com> 0.10.6-4
changelog:
  - Add support for default vga arb device selection
  - Update libpciaccess VGA arb code for newer kernel API


author: Adam Jackson <ajax@redhat.com> 0.10.6-5
changelog:
  - libpciaccess-0.10.6-rom-sanity.patch: If we hit the /dev/mem path for
    reading a device's ROM, verify that it looks like it at least might belong
    to the device in question by checking vendor and device ID match.  Fixes
    vbetool post hanging forever (and thus blocking boot) on some dual-gpu
    laptops.


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.0-2
changelog:
  - remove "." from Summary
  - Add "check-devel to BuildRequires
  - Add "make check" to check section
  - Changed a buildroot to RPM_BUILD_ROOT
  - Document alphatag, numcomm and dirty variables.


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.1-1
changelog:
  - SPEC: add procps to BuildRequire
  - SPEC: remove automake and autoconf from BuildRequire
  - SPEC: remove call to ./autogen.sh
  - SPEC: update to new upstream version 0.4.1
  - LOOP: check read() return value
  - DOCS: add missing @param on new timeout argument
  - BUILD: only set -g and -O options if explicitly requested.
  - BUILD: Remove unneccessary check for library "dl"
  - BUILD: improve the release build system


author: Angus Salkeld <asalkeld@redhat.com> - 0.5.1-1
changelog:
  - Rebased to 0.5.1 which includes:
  - LOOP: make the return more consistent in qb_loop_timer_expire_time_get()
  - LOG: add string.h to qblog.h
  - Add a qb_strerror_r wrapper.
  - don't let an invalid time stamp provoke a NULL dereference
  - LOG: move priority check up to prevent unnecessary format.
  - rename README to README.markdown


author: Angus Salkeld <asalkeld@redhat.com> - 0.6.0-1
changelog:
  - Rebased to 0.6.0 which includes (#734457):
  - Add a stop watch
  - LOG: serialize the va_list, don't snprintf
  - LOG: change active list into array access
  - atomic: fix qb_atomic_pointer macros
  - LOG: allow the thread priority to be set.
  - Fix splint warning on ubuntu 11.04


author: Angus Salkeld <asalkeld@redhat.com> - 0.9.0-2
changelog:
  - Disable loop and ipc tests as they use features not availble on brew.
  - Get the tests to print out (disable parallel-tests).
  - Call autogen.sh to get the no parallel-tests
  - Disable ppc arch as the "make check" fails.


author: David Vossel <dvossel@redhat.com> - 0.14.2-2
changelog:
  - Fixes issue with qb_ipcc_recv() that resulted in nearly 100%
    cpu usage during certain situations. (#869446)


author: David Vossel <dvossel@redhat.com> - 0.14.2-3
changelog:
  - Additional upstream work to address 100% cpu usage bug in
    realtime environment.
    cpu usage during certain situations. (#869446)


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2
changelog:
  - Increase size of the buffer where we make the socket name to allow for longer PIDs 
    Resolves: rhbz#1276345


author: Roland Dreier <rdreier@cisco.com> - 1.0.6-2
changelog:
  - Spec file cleanups from Fedora review: add BuildRequires for
    libibverbs, and move the static library to -static.


author: Doug Ledford <dledford@redhat.com> - 1.0.15-1
changelog:
  - Update to latest upstream release (adds FDR support and fixes 696019 the
    upstream way)
  - Include fixes in git not yet in a release
  - Related: bz750609
  - Resolves: bz700289


author: Doug Ledford <dledford@redhat.com> - 1.0.17-0.git4b5c1aa
changelog:
  - Pre-release version of 1.0.17
  - Resolves a CVE vulnerability between librdmacm and ibacm
  - Fixes various minor bugs in sample programs
  - Resolves: bz866221, bz816074


author: Doug Ledford <dledford@redhat.com> - 1.0.17-1
changelog:
  - Official 1.0.17 release
  - The fix to bug 866221 got kicked back as incomplete last time, fix
    it for real this time.
  - Intel adapters that use the qib driver don't like using inline data,
    so use a memory region that is registered instead
  - Resolves: bz866221, bz828071


author: Doug Ledford <dledford@redhat.com> - 1.0.19.1-1
changelog:
  - Update to latest upstream release
  - Drop patches that upstream has folded in
  - Resolves: bz1119108


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-8
changelog:
  - Resolves: rhbz#798983 Kannada langpack missing
  - Resolves: rhbz#798926 fix endianess assumptions of lotuswordpro filter
  - Resolves: rhbz#800272 complain about unknown commandline options


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-12
changelog:
  - Resolves: rhbz#810267 better CSV import default separators
  - Resolves: rhbz#807392 focus problems and tearable menus


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-13
changelog:
  - Resolves: rhbz#809466 libreoffice-core (unintentionally) provides
    libraptor.so.1()() and librdf.so.0()()


author: Stephan Bergmann <sbergman@redhat.com> - 3.4.5.2-18
changelog:
  - Resolves: rhbz#820554 Java functionality broken with gcj
  - Resolves: rhbz#855972 crash on switching to outline view
  - Resolves: rhbz#863052 ZipIOException in MSOffice 2010 msxml
  - Resolves: rhbz#902694 inaccessibile CJK/Indic shortcuts
  - Resolves: rhbz#833512 missing some backwards compat launchers
  - Resolves: rhbz#876742 manipulation with larger tables in impress is very slow
  - Resolves: rhbz#841812 accept empty string as scalar numeric 0
  - Resolves: rhbz#847519 do not access vector elements beyond size
  - Resolves: rhbz#865058 retard overflow of internal table of number formats
  - Resolves: rhbz#871462 remove testdocs that trigger anti-virus software


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-3
changelog:
  - Resolves: rhbz#833512 provide a /usr/bin/openoffice.org-1.9 for backwards compat
  - Resolves: rhbz#902694 inaccessibile CJK/Indic shortcuts


author: David Tardon <dtardon@redhat.com> - 1:4.0.4.2-10
changelog:
  - Resolves: rhbz#1012379 sound file included in presentation displayed
    as a gray sqaure
  - Resolves: rhbz#1012390 CRITICAL **: AtkObject* atk_object_wrapper_ref
  - Resolves: rhbz#1038189 libreoffice does not recognize new printer
  - Resolves: rhbz#1085420 LO incorrectly provides liblcms2.so.2
  - Resolves: rhbz#1065629 RTF import probable regression with non-english
    BigMachines exports
  - Resolves: rhbz#1020712 No Default Font showing when write in text
    boxes at first, behaving unusual
  - Resolves: rhbz#1021915 Menu drop-down list overlapping with other menu
    items
  - Resolves: rhbz#1035298 Transaction check errors due to file conflicts
  - Related: rhbz#1035298 provide non-arch variants of openoffice.org
    provides too


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-14
changelog:
  - Resolves: rhbz#1130264 crash in gstreamer callback on s390x
  - Resolves: rhbz#1131428 cannot export charts as svg
  - Resolves: rhbz#1035298 obsolete openoffice.org-langpack-ms_MY


author: David Tardon <dtardon@redhat.com> - 1:4.2.8.2-11
changelog:
  - Resolves: rhbz#1223696 some labels in print dialog are not translated, even
    though the translations exist


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-1
changelog:
  - move reporter plugins from abrt to libreport
  - fixed provides/obsolete to properly obsolete report package
  - wizard: make more fields editable
  - Related: #697494


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-2
changelog:
  - removed mailx from possible reporter list (still enabled as post-create event)
  - added python bindings to libreport client lib
  - honor reporters minimal rating
  - fixed (null) in bz summary
  - Related: #714045


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-3
changelog:
  - improved compatibility with bugzilla
  - enabled bugzilla for libreport reports (analyzer=libreport)
  - Resolves: #725857


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-4
changelog:
  - further improvement in Anaconda compatibility rhbz#727243
  - warn silently when keyring is not available rhbz#725858
  - Resolves: #727243 #725858


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-5
changelog:
  - added the report cmdline tool rhbz#725660
  - fixed man pages version rhbz#728190
  - fixed text wrapping rhbz#728132
  - improved dump_dir detection rhbz#728166
  - fixed reporting from Anaconda newt ui rhbz#729566
  - added defualt config file for rhtsupport rhbz#729566
  - make reporters use default conf when -c is not used rhbz#729986
  - Resolves: #725660 #728190 #728132 #728166 #729566 #729986


author: Karel Klíč <kklic@redhat.com> - 2.0.5-6
changelog:
  - Added two patches (libreport-code-was-moved-to-abrt.git,
    libreport-fix-d-delete-option) from upstream making report-cli
    -d/--delete to remove DUMP_DIR after reporting. First patch also
    removes --list and --info and --full options, which were already
    moved to abrt-cli.
    Resolves: #726097
  - Added fallback text editor for editing multiline fields in Anaconda
    Resolves: #728479


author: Denys Vlasenko <dvlasenk@redhat.com> - 2.0.5-7
changelog:
  - Fix report-cli crash if config files are missing.
    Resolves: #730942
  - Pull in libreport-plugin-reportuploader on update
    (fixes a problem with "yum update" on RHEL system with old report package.
    Resolves: #732683


author: Nikola Pajkovsky <npajkovs@redhat.com> - 2.0.5-8
changelog:
  - Missing man pages of report and report.conf
    Resolves: #729957
  - Update translations
    Resolves: #731037


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.5-9
changelog:
  - fixed make check rhbz#729686
  - fixed attaching anaconda-tb* rhbz#731389
  - Resolves: #729686 #731389


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.5-11
changelog:
  - disabled bugzilla rhbz#739936
  - own /etc/libreport/plugins/ rhbz#744782
  - removed unused patches to make rpmdiff happy
  - updated translation
  - Resolves: #739936 #744782


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-12
changelog:
  - updated translation rhbz#731037
  - search kbase before creating the ticket rhbz#743198
  - Resolves: #731037 #743198


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-15
changelog:
  - fix the kbase searching rhbz#743198
  - updated translation Related: #731037
  - Resolves: #743198 #731037


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-1
changelog:
  - new upstream release
  - fixed typos in man
  - fixed handling of anaconda-tb file
  - generate valid xml file
  - Resolves: #759377, #758366, #746727


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-6
changelog:
  - opt kernel out of showing smolt information in abrt bug reports. rhbz#795548
  - ABRT mailx plugin on by default causes crashes being always labelled as reported rhbz#803618
  - pkg-config --cflags libreport includs -fPIC rhbz#803736
  - Coverity revealed memory leaks and possibly other issues rhbz#809416
  - GLib warnings by report-gtk when crash dir does not exist rhbz#813283
  - `report' tool requires current working directory to be a crash dir rhbz#817051
  - Searching for duplicate anaconda bugs while reporting exception against partner-bugzilla during install fails rhbz#820985
  - Undefined non-weak symbols rhbz#826745
  - ABRT has wrong URL in dialog
  Resolves: #809416,#813283,#817051,#826745,#820985,#795548,#803618,#803736


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-7
changelog:
  - don't warn about daemon connection when deleting a problem rhbz#799909
  - ignore non problem dirs when cleaning old problems rhbz#847291
  - Resolves: #799909, #847291


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-8
changelog:
  - use the default template for bz reports rhbz#747410
  - fix adding users to CC in bugzilla rhbz#841338
  - Resolves: #747410, #841338


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-10
changelog:
  - updated translation rhbz#864025
  - fixed brewtap warnings rhbz#812283
  - silence few rpmdiff warnings rhbz#857425
  - Resolves: #864025, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-12
changelog:
  - fixed relro flags
  - removed confusing warning message
  - added versioned requirements to silence rpmdiff
  - Resolved: #847291, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-16
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports LibMissingRELRO rhbz#812283
  - libreport attached sosreport into bugzilla with bad mimetype rhbz#885509
  - reporter-rhtsupport on RHEL6.4 unable to open cases in RHT customer center rhbz#896090
  - Change default set of reporters shown by CLI/GUI rhbz#948286
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - Resolves: #885509, #812283, #961231, #961231, #961231, #948286, #759443, #896090, #875260


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-17
changelog:
  - updated translation rhbz#993626
  - fixed bugs doscovered by coverity rhbz#905051
  - Resolves: #993626, #905051


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-19
changelog:
  - updated transaltion (ko) rhbz#993626
  - fixed bugzilla reporter to work with the new xmlrpc api rhbz#991088
  - Resolves: #991088, #993626


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-20
changelog:
  - Bugzilla: pass Bugzilla_token in all XML RPC calls
  - mailx: improve notification e-mail headers
  - mailx: include hostane in notification e-mail
  - Resolves: #989530, #997871, #1090466, #1093375


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-23
changelog:
  - resolve symbolic and hard link vulnerabilities
  - defend against directory traversal attack
  - Resolves: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-24
changelog:
  - switch ownership of new directories from "abrt:user" to "user:abrt"
  - fix a bug allowing libreport to read files outside dump directories
  - Related: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282144


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-29
changelog:
  - Change reporting workflow to enhance the quality of opened customer cases
  - Limit the description section for ABRT reported cases
  - Resolves: #1258474, #1261398


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-31
changelog:
  - Add pkg_vendor, reproducer and reproducible to description
  - Attach all dump dir's element to a new case
  - Change libreport-version to 2.0.9.1
  - Resolves: #1261398


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.1
changelog:
  - Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
  - Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.2
changelog:
  - Resolves: rhbz#1289498 keyingtries=0 is broken
  - Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
  - Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
  - Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.25.3-1
changelog:
  * Merged context translation patch, originally by TCS,
  	  with modifications by Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	* Added selinux_getpolicytype() function.
  	* Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  * Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
  	  of the use of the non-standard format (original patch changed
  	  for style).
  	* Merged patch from Todd Miller to fix memory leak in matchpathcon.c.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to upstream
  	* Removed sending of setrans init message.
  	* Merged matchpathcon memory leak fix from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
changelog:
  - Upgrade to upstream
  	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
changelog:
  * Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
  	* Merged patch to drop support for old /etc/sysconfig/selinux and
  	  /etc/security policy file layout from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to upstream
  	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to upstream
  	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
  	* Merged sidput(NULL) patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Upgrade to upstream
  	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Upgrade to upstream
  	* Merged additional swig python bindings from Dan Walsh.
  	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Upgrade to upstream
  	* Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
  	  This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.

  2.0.17 2007-05-31
  	* Updated Lindent script and reindented two header files.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Upgrade to upstream
  	* Class and permission mapping support patches from Eamon Walsh.
  	* Object class discovery support patches from Chris PeBenito.
  	* Refactoring and errno support in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
changelog:
  - Upgrade to upstream
  	* Updated version for stable branch.	
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.
  	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
  	* Added swigify to top-level Makefile from Dan Walsh.
  	* Fix for string_to_security_class segfault on x86_64 from Stephen
  	  Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
changelog:
  - Move libselinux.so into devel package
  - Upgrade to upstream
  	* Fix segfault resulting from uninitialized print-callback pointer.
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
changelog:
  - Upgrade to latest from NSA
  	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
  	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
  	* Fix swig binding for rpm_execcon from James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Upgrade to upstream
  	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
  	* Pass CFLAGS when using gcc for linking from Dennis Gilmore.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Upgrade to upstream
  	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
changelog:
  - Upgrade to upstream
  	* Merged refactored AVC netlink code from Eamon Walsh.
  	* Merged new X label namespaces from Eamon Walsh.
  	* Bux fix and minor refactoring in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
changelog:
  - Upgrade to upstream
  	* AVC enforcing mode override patch from Eamon Walsh.
  	* Aligned attributes in AVC netlink code from Eamon Walsh.
  - Move libselinux.so back into devel package, procps has been fixed


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Upgrade to upstream
  	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
  	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
  	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
changelog:
  - Fix memory references in audit2why and change to use tuples
  - Update to Upstream
  	* Fix for the avc:  granted null message bug from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
changelog:
  - Update to Upstream
  	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
  	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
changelog:
  - Update to Upstream
  	* Merged compute_member AVC function and manpages from Eamon Walsh.
  	* Provide more error reporting on load policy failures from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
changelog:
  - Update to Upstream
  	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
changelog:
  - Update to Upstream
  	* Fixed selinux_set_callback man page.
  	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
  	* Fix memory leaks in matchpathcon from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
changelog:
  - Update to Upstream
  	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
  	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
changelog:
  - Update to Upstream
  	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
  	* Add swig python bindings for avc interfaces from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
changelog:
  - Update to Upstream
  	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
  	  This prevents adding them via semanage.
  	* Fix audit2why shadowed variables from Stephen Smalley.
  	* Note that freecon NULL is legal in man page from Karel Zak.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
changelog:
  - Update to Upstream
  	* Merge ruby bindings from Dan Walsh.
  - Add support for Linux groups to getseuserbyname


author: Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
changelog:
  - Update to Upstream
  	* Add group support to seusers using %groupname syntax from Dan Walsh.
  	* Mark setrans socket close-on-exec from Stephen Smalley.
  	* Only apply nodups checking to base file contexts from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
changelog:
  - Update to Upstream
  	* New man pages from Dan Walsh.
  	* Update flask headers from refpolicy trunk from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
changelog:
  - Update to Upstream
  	* Correct message types in AVC log messages.
  	* Make matchpathcon -V pass mode from Dan Walsh.
  	* Add man page for selinux_file_context_cmp from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
changelog:
  - Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
  - Add Restorecon/Install python functions from Luke Macken


author: Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
changelog:
  - Add new function getseuser which will take username and service and return
  - seuser and level.  ipa will populate file in future.
  - Change selinuxdefcon to return just the context by default


author: Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
changelog:
  - Update to upstream 
  	* Netlink socket handoff patch from Adam Jackson.
  	* AVC caching of compute_create results by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
changelog:
  - Update to upstream 
  	* deny_unknown wrapper function from KaiGai Kohei.
  	* security_compute_av_flags API from KaiGai Kohei.
  	* Netlink socket management and callbacks from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
changelog:
  - Update to upstream 
  	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
  	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
  	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
  	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
changelog:
  - Update to upstream 
  	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
  	* Label substitution support from Dan Walsh.
  	* Support for labeling virtual machine images from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
changelog:
  - Update to upstream 
  	* Add per-service seuser support from Dan Walsh.
  	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
  	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
  	Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
changelog:
  - Update to upstream 
  	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
  	pthread dependency.
  	* Removed fini_context_translations() altogether.
  	* Merged lazy init patch from Stephen Smalley based on original patch
  	by Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
changelog:
  - Update to upstream 
  	* Add exception handling in libselinux from Dan Walsh. This uses a
  	  shell script called exception.sh to generate a swig interface file.
  	* make swigify
  	* Make matchpathcon print <<none>> if path not found in fcontext file.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
changelog:
  * Set errno=EINVAL for invalid contexts from Dan Walsh.
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.
  Resolves: #593788


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: Jeremy Katz <katzj@redhat.com> 0.7.4-3
changelog:
  - fix to not try to include non-existent doc files and remove all 
    unwanted files from the build
  - include api docs 
  - don't build the apache module


author: Jeremy Katz <katzj@redhat.com> 0.7.9-3
changelog:
  - better lib64 patch
  - fix building of libwsdl-build to use libtool so that it gets built 
    with -fPIC as needed


author: Jeremy Katz <katzj@redhat.com> 1.99.17-1
changelog:
  - rename package to libsoup
  - update to 1.99.17
  - don't obsolete soup for now, it's parallel installable


author: David Malcolm <dmalcolm@redhat.com> - 2.2.2-1
changelog:
  - update from 2.2.1 to 2.2.2
  - add explicit devel requirements on glib2-devel, pkgconfig, gtk-doc, gnutls-devel and libxml2-devel


author: David Malcolm <dmalcolm@redhat.com> - 2.2.5-1
changelog:
  - 2.2.5
  - Removed gnome-bug-306877-soup-connection-ntlm.c.patch (#160071) as this is 
    now in upstream tarball


author: Matthew Barnes <mbarnes@redhat.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Bump glib2 requirement to >= 2.15.3.
  - Clean up some redundant dependencies.
  - Remove patch for RH bug #327871 (fixed in glibc).


author: Felipe Borges <feborges@redhat.com> - 0.2.4-2
changelog:
  - Allocate at least 1 page if there are no Pages: or Page: comments in the PS file
  - Resolves: #667717


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-3
changelog:
  - Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
  -                         the size of its entries are very large


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.10-1
changelog:
  - Resolves: rhbz#766334 - Rebase libtdb to match the version required
                            by Samba4
  - Enable the Python bindings to satisfy samba4 BuildRequirements
  - Obsoletes tdb-1.2.9-limit-tdb_expand.patch


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.8-3.2
changelog:
  - Move _tdb_text.py to python-tdb subpackage
  - Resolves: rhbz#1329664 - tdb mispackaged tdb_text.py file


author: Steve Dickson <steved@redhat.com> 0.1.7-2
changelog:
  - Uncommented tcp6 and udp6 in the default /etc/netconfig file.
  - Added hooks to used the libgssapi library.


author: <steved@redhat.com> 0.1.7-6
changelog:
  - Fixed potential buffer overflow in xdr_strings
  - Added a optimization to bindresvport that allows more
    ports to be tried.


author: <steved@redhat.com> 0.1.7-9
changelog:
  - Fixed mutex lock problem in clnt_raw_create()
  - Ignore the return value of snprintf() and use strlen() instead
    to bump the pointer in clnt_sperror()
  - A couple ntohs() were needed in bindresvport_sa()
  - Added IP_RECVERR processing with to clnt_dg_call() so
    application will see errors instead of timing out
  - Make sure remote address (xp_rtaddr) is populated
    with the correct type of address.
  - Change the order of network ids in /etc/netconfg
    putting ipv4 ids before ipv6.
  - Bumped up Release from 8 to 9.


author: Steve Dickson <steved@redhat.com> 0.1.7-11
changelog:
  - Made tcp6/udp6 network ids no longer visible in the netconfig
    file since the ipv6 code is not fully baked yet in rpcbind. (bz 249121)


author: Steve Dickson <steved@redhat.com> 0.1.9-5
changelog:
  - Fix for taddr2addr conversion bug of local addresses
  - Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
    src/clnt_raw.c
  - Added some #ifdef NOTUSED around some code in src/rpbc_clnt.c
    that was not being used...


author: Steve Dickson <steved@redhat.com> 0.1.10-3
changelog:
  - backwards compatibility: fix order of fields in TI-RPC's 
    svc_req (bz 481388)
  - Removed a number warnings.


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.1.11-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Steve Dickson <steved@redhat.com> 0.2.1-7
changelog:
  - Fixed some races in getnetconfig code (bz 1031498)
  - Remove the installation of libtirpc.a and libtirpc.la (bz 869397)


author: Steve Dickson <steved@redhat.com> 0.2.1-11
changelog:
  - Backported upstream debugging (bz 1273158)
  - Fixed memory leak in svc_vc_create (bz 1276687)
  - Fixed memory leak in svc_tli_create (bz 1276855)
  - Fixed memory leak in __svc_vc_dodestroy (bz 1276856)


author: Jindrich Novy <jnovy@redhat.com> 0.9.0-0.3.gitbef33bb
changelog:
  - update comment on how the tarball was created
  - use abbreviated git hash within package name to avoid conflicts
  - add to %description that libusb1 is incompatible with libsub-0.1


author: Hans de Goede <hdegoede@redhat.com> - 1.0.9-0.6.rc1
changelog:
  - Don't split bulk transfers unnecessary
  - Resolves: rhbz#830751
  - Don't let disconnect_kernel_driver detach the usbfs driver
  - Resolves: rhbz#820205


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - blktapdd support for alternate drivers like blktap
  - memory leak fixes (xend interface and XML parsing)
  - compile fix
  - mlock/munlock size fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.9-1
changelog:
  - better error reporting
  - python bindings fixes and extensions
  - add support for shareable drives
  - add support for non-bridge style networking
  - hot plug device support
  - added support for inactive domains
  - API to dump core of domains
  - various bug fixes, cleanups and improvements
  - updated the localization


author: Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
changelog:
  - support for inactive Xen domains
  - improved support for Xen display and vnc
  - a few bug fixes
  - localization updates


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
changelog:
  - Fixed path to qemu daemon for autostart
  - Fixed generation of <features> block in XML
  - Pre-create config directory at startup


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
changelog:
  - Disable kqemu support since its not in Fedora qemu binary
  - Fix for -vnc arg syntax change in 0.9.0  QEMU


author: Daniel Veillard <veillard@redhat.com> - 0.2.1-1
changelog:
  - Release of 0.2.1
  - lot of bug and portability fixes
  - Add support for network autostart and init scripts
  - New API to detect the virtualization capabilities of a host
  - Documentation updates


author: Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
changelog:
  - don't require xen; we don't need the daemon and can control non-xen now
  - fix scriptlet error (need to own more directories)
  - update description text


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-1
changelog:
  - Release of 0.2.3
  - lot of assorted bugfixes and cleanups
  - support for Xen-3.1
  - new scheduler API


author: Daniel Veillard <veillard@redhat.com> - 0.3.0-1
changelog:
  - Release of 0.3.0
  - Secure remote access support
  - unification of daemons
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.1-1
changelog:
  - Release of 0.3.1
  - localtime clock support
  - PS/2 and USB input devices
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.2-1
changelog:
  - Release of 0.3.2
  - API for domains migration
  - APIs for collecting statistics on disks and interfaces
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1
changelog:
  - Release of 0.3.3
  - Avahi support
  - NUMA support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - Release of 0.4.0
  - SASL based authentication
  - PolicyKit authentication
  - improved NUMA and statistics support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - Release of 0.4.1
  - Storage APIs
  - xenner support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.7.0-1
changelog:
  - ESX, VBox3, Power Hypervisor drivers
  - new net filesystem glusterfs
  - Storage cloning for LVM and Disk backends
  - interface implementation based on netcf
  - Support cgroups in QEMU driver
  - QEmu hotplug NIC support
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-2
changelog:
  - Make sure qemu can access kernel/initrd (bug #516034)
  - Set perms on /var/lib/libvirt/boot to 0711 (bug #516034)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5
changelog:
  - Add PCI host device hotplug support
  - Allow PCI bus reset to reset other devices (#499678)
  - Fix stupid PCI reset error message (bug #499678)
  - Allow PM reset on multi-function PCI devices (bug #515689)
  - Re-attach PCI host devices after guest shuts down (bug #499561)
  - Fix list corruption after disk hot-unplug
  - Fix minor 'virsh nodedev-list --tree' annoyance


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-0.2.gitfac3f4c
changelog:
  - Update to newer snapshot of 0.7.1
  - Stop libvirt using untrusted 'info vcpus' PID data (#520864)
  - Support relabelling of USB and PCI devices
  - Enable multipath storage support
  - Restart libvirtd upon RPM upgrade


author: Daniel Veillard <veillard@redhat.com> - 0.7.1-1
changelog:
  - Upstream release of 0.7.1
  - ESX, VBox driver updates
  - mutipath support
  - support for encrypted (qcow) volume
  - compressed save image format for Qemu/KVM
  - QEmu host PCI device hotplug support
  - configuration of huge pages in guests
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-8
changelog:
  - Disable sound backend, even when selinux is disabled (#524499)
  - Re-label qcow2 backing files (#497131)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-10
changelog:
  - Create /var/log/libvirt/{lxc,uml} dirs for logrotate
  - Make libvirt-python dependon on libvirt-client
  - Sync misc minor changes from upstream spec


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-11
changelog:
  - Fix libvirtd memory leak during error reply sending (#528162)
  - Add several PCI hot-unplug typo fixes from upstream


author: Daniel Veillard <veillard@redhat.com> - 0.7.2-1
changelog:
  - Upstream release of 0.7.2
  - Allow to define ESX domains
  - Allows suspend and resulme of LXC domains
  - API for data streams
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.4-1
changelog:
  - upstream release of 0.7.4
  - udev node device backend
  - API to check object properties
  - better QEmu monitor processing
  - MAC address based port filtering for qemu
  - support IPv6 and multiple addresses per interfaces
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.5-1
changelog:
  - Add new API virDomainMemoryStats
  - Public API and domain extension for CPU flags
  - vbox: Add support for version 3.1
  - Support QEMU's virtual FAT block device driver
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-0.pre20100121
changelog:
  - Push a prerelease version of 0.7.6 for testing in Beta1
  - Allow specifying -cpu model/flags for qemu
  - Resolves: rhbz#515213
  - Add async qemu machine protocol to libvirt based on JSON QEmu API
  - Resolves: rhbz#518701
  - Allow for static PCI address assignment to all devices
  - Resolves: rhbz#481924
  - expose qemu's -fda fat:floppy feature (525074)
  - configuration of virtual CPU topology (sockets, threads, cores) (538015)
  - rewrite file chown'ing code to use security driver framework (547545 )
  - cannot create a headless KVM virtual machine (548127)
  - Improve virsh schedular parameters documentation (548485)
  - Fail to delete a inactive pool using command "virsh pool-delete" (530985)
  - virsh man page updation for using container (lxc:///) (528709)
  - Command 'virsh vcpuinfo' returns libvirt error in RHEL6 with KVM (522829)
  - Expose information about host CPU flags in capabilities (518062)


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-1
changelog:
  - upstream release of 0.7.6
  - Use QEmu new device adressing when possible
  - Implement CPU topology support for QEMU driver
  - Implement SCSI controller hotplug/unplug for QEMU
  - Implement support for multi IQN
  - a lot of fixes and improvements
  - Resolves: rhbz#558761


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-2
changelog:
  - enable JSON interface, desactivated by default in 0.7.6
  - Resolves: rhbz#563189
  - make sure cgroups are installed and that cgconfig service is on
  - Resolves: rhbz#531263


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.6-3
changelog:
  - Fix balloon units handling in JSON mode (rhbz #566261)
  - Invoke qmp_capabilities at monitor startup (rhbz #563189)


author: Daniel Veillard <veillard@redhat.com> - 0.7.7-1
changelog:
  - macvtap support (rhbz#553348)
  - async job handling (rhbz #515278)
  - virtio channel (rhbz#515281)
  - computing baseline CPU
  - virDomain{Attach,Detach}DeviceFlags
  - Improve libvirt error reporting for failed migrations (rhbz#528793)
  - qemu driver support CPU hotplug (rhbz#533138)
  - wrong (octal) device number for attaching USB devices (rhbz#549840)
  - cannot save domain into root_squashing nfs export (rhbz#558763)
  - assorted bug fixes and lots of cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100312
changelog:
  - preview for 0.7.8 rebase
  - Extra non upstream basic patch for spice and XQL
  - Resolves: rhbz#515264
  - Resolves: rhbz#515265
  - connected virsh dies with a SIGPIPE after libvirtd restart
  - Resolves: rhbz#526656
  - error when running logrotate on s/390x arch
  - Resolves: rhbz#547514


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100322
changelog:
  - preview #2 for 0.7.8 rebase
  - migration max downtime API
  - Resolves: rhbz#561935
  - allow suspend during migration
  - Resolves: rhbz#561934
  - support vhost net mode at qemu startup for net devices
  - Resolves: rhbz#540391
  - read-only device access support for qemu
  - Resolves: rhbz#556769
  - LSB compliance of libvirtd init script
  - Resolves: rhbz#538701
  - No domain vcpu information output when using JSON monitor
  - Resolves: rhbz#572051
  - "qemudDomainSetMaxMemory" does not work and should be removed
  - Resolves: rhbz#572146
  - after setvcpus, any virsh command will be hung
  - Resolves: rhbz#572193
  - virsh interactive terminal crash or hung
  - Resolves: rhbz#572376
  - virsh hangs after core dump
  - Resolves: rhbz#572544
  - Fix very slow file allocation on ext3


author: Daniel Veillard <veillard@redhat.com> - 0.7.8-0.pre20100330
changelog:
  - preview #3 for 0.7.8 rebase
  - kvm hpet support
  - Resolves: rhbz#576973
  - hook scripts support
  - Resolves: rhbz#569965
  - Need to add time keeping abstraction
  - Resolves: rhbz#557285
  - notification of guest reboot
  - Resolves: rhbz#527572
  - Ability to preserve RTC clock adjustments across guest reboots
  - Resolves: rhbz#515273
  - Notifications of guest stopping due to disk I/O errors
  - Resolves: rhbz#515270
  - VNC ticketing support (524623) spice still needed
  - VNC client disconnect/connect events (515268) spice still needed


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-0.pre20100407
changelog:
  - preview #4 for 0.8.0 rebase
  - snapshot API
  - domain with disk on root-squashing nfs and security driver mismatch
  - Resolves: rhbz#578630
  - Fail to read xml when restore domain
  - Resolves: rhbz#577719
  - loop "virsh cd" in virsh interactive terminal generate unknown error
  - Resolves: rhbz#572380
  - support setting qemu's -drive werror=stop/enospc with configuration
  - Resolves: rhbz#526231


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-1
changelog:
  - official 0.8.0 upstream release
  - Resolves: rhbz#558761
  - new patch set of patches for RHEL-6 SPICE and addons
  - Enable QMP/ JSON mode in the QEMU monitor
  - Resolves: rhbz#563189
  - Support configuration of SPICE as a graphics protocol
  - Resolves: rhbz#515265
  - vnc (and spice) ticketing
  - Resolves: rhbz#524623
  - enable spice tls encryption in domainXML, and which channels are encrypted
  - Resolves: rhbz#573382
  - notification of VNC/SPICE client disconnect/connect events
  - Resolves: rhbz#515268


author: Daniel P. Berrange <berrange@redhat.com> - 0.8.0-2
changelog:
  - Refresh SPICE patches to fix test failures
  - Related: rhbz#515265, rhbz#524623, rhbz#573382
  - Enable test suite during build, disabling tests that don't work in mock
  - Related: rhbz#558761


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-3
changelog:
  - Build ESX support in
  - Resolves: rhbz#581966
  - a batch of network filter fixes, IBM request and upstream fixes
  - Resolves: rhbz#579993
  - couple of patchs to fix device handling with QMP
  - Related: rhbz#563189
  - fix python binding for snapshotting
  - spec file fixes for nwfiler build and RHEL-5 virt-v2v specific rebuild


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-4
changelog:
  - Fix libvirtd startup when avahi failed to look up local host name
  - CPU selection fixes
  - Resolves: rhbz#581627
  - fix migration poll value
  - Resolves: rhbz#584928
  - crash dump job caused libvirt hang
  - Resolves: rhbz#580853
  - Fix initial VCPU pinning in qemu driver
  - Resolves: rhbz#578434
  - fix cpu hotplug command names


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-2
changelog:
  - Don't wipe generated iface target in active domains (588046)
  - Fix LXC domain lookup and error handling (586361)
  - Fix a protocol breakage introduced in libvirt-0.8.0
  - Add support for nic hotplug in QEMU/KVM (589978)
  - Seemless migration of spice graphics clients (589989)
  - fix build with ESX support
  - Resolves: rhbz#581966
  - fix multilib problem (587231)


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-3
changelog:
  - missing python bindings due to older XML api
  - Resolves: rhbz#589453
  - Fix two possible crashes in JSON event dispatch
  - Resolves: rhbz#586353
  - Fix handling of disk backing stores with cgroups
  - Resolves: rhbz#581476
  - virsh schedinfo --set error handling on unknow parameters
  - Resolves: rhbz#586632
  - Apply extra patches for nwfilter
  - Resolves: rhbz#588554
  - Fix hang during concurrent guest migrations
  - Resolves: rhbz#582278


author: Dave Allan <dallan@redhat.com> - 0.8.1-5
changelog:
  - Don't reset user/group/security label for any files on shared filesystems
  - Resolves: rhbz#578889
  - Make saved state labelling ignore the dynamic_ownership parameter
  - Resolves: rhbz#588562
  - Fix & protect against NULL pointer dereference in monitor code
  - Resolves: rhbz#591076
  - Fix virFileResolveLink return value
  - Resolves: rhbz#591363
  - Add support for SSE4.1 and SSE4.2 CPU features
  - Resolves: rhbz#592977


author: Dave Allan <dallan@redhat.com> - 0.8.1-6
changelog:
  - Support seamless migration of SPICE graphics clients (refresh)
  - Resolves: rhbz#591551
  - Fix swapping of PCI vendor & product names in udev backend
  - Resolves: rhbz#578419
  - Fix cgroup setup code to cope with root squashing NFS
  - Resolves: rhbz#593193
  - Fix startup error reporting race
  - Resolves: rhbz#591272


author: Dave Allan <dallan@redhat.com> - 0.8.1-7
changelog:
  - Fix sign extension error in libvirt's parsing of qemu options
  - Resolves: rhbz#592070
  - Graceful shutdown/suspend of libvirt guests on host shutdown
  - Resolves: rhbz#566647
  - Fix pci device hotplug
  - Resolves: rhbz#572867
  - Support 802.1Qbg and bh
  - Resolves: rhbz#532760, rhbz#570949, rhbz#590110, rhbz#570923


author: Dave Allan <dallan@redhat.com> - 0.8.1-8
changelog:
  - Ensure virtio serial has stable addressing
  - Resolves: rhbz#586665
  - SELinux socket labelling on QEMU monitor socket for MLS
  - Resolves: rhbz#593739
  - Fix enumeration of partitions in disks with a trailing digit in path
  - Resolves: rhbz#593785
  - Enable probing of VPC disk format type
  - Resolves: rhbz#597981
  - Delete UNIX domain sockets upon daemon shutdown
  - Resolves: rhbz#598163
  - Fix Migration failure 'canonical hostname pointed to localhost'
  - Resolves: rhbz#589864
  - Fix up the python bindings for snapshotting
  - Resolves: rhbz#591839
  - Sanitize pool target paths
  - Resolves: rhbz#593565
  - Prevent host network conflicts
  - Resolves: rhbz#594494
  - Support 802.1Qbg and bh (vnlink/VEPA) (refresh)
  - Resolves: rhbz#590110


author: Dave Allan <dallan@redhat.com> - 0.8.1-9
changelog:
  - Touch libvirt-guests lockfile
  - Resolves: rhbz#566647
  - Add qemu.conf option for clearing capabilities
  - Resolves: rhbz#593903
  - Add support for launching guest in paused state
  - Resolves: rhbz#589465
  - Add virsh vol-pool command
  - Resolves: rhbz#602217
  - Add vol commands to virsh man page
  - Resolves: rhbz#600640
  - Remove bogus migrate error messages
  - Resolves: rhbz#601575


author: Dave Allan <dallan@redhat.com> - 0.8.1-10
changelog:
  - Add multiIQN XML output
  - Resolves: rhbz#587700
  - Fix udev node device parent-child device relationships
  - Resolves: rhbz#593995
  - Fix leaks in udev device add/remove
  - Resolves: rhbz#595490
  - Fix device destroy return value
  - Resolves: rhbz#597998
  - Update nodedev scsi_host data before use
  - Resolves: rhbz#600048
  - Display wireless devices in nodedev list
  - Resolves: rhbz#604811
  - Show pool and domain persistence
  - Resolves: rhbz#603696
  - Fix cleanup after failing to hotplug a PCI device
  - Resolves: rhbz#605168
  - Add '-nodefconfig' command line arg to QEMU
  - Resolves: rhbz#602778
  - Switch to private redhat namespace for QMP I/O error reason
  - Resolves: rhbz#586353
  - Improve error messages for missing drivers & unsupported functions
  - Resolves: rhbz#595609
  - macvtap: get interface index if not provided
  - Resolves: rhbz#605187
  - Fix leaks in remote code
  - Resolves: rhbz#603442
  - Add an optional switch --uuid to the virsh vol-pool command
  - Resolves: rhbz#604929
  - Change per-connection hashes to be indexed by UUIDs
  - Resolves: rhbz#603494
  - Run virsh from libvirt-guests script with /dev/null on stdin
  - Resolves: rhbz#606314
  - Increase dd block size to speed up domain save
  - Resolves: rhbz#601775
  - Fix reference counting bugs on qemu monitor
  - Resolves: rhbz#602660
  - Add missing action parameter in IO error callback
  - Resolves: rhbz#607157


author: Dave Allan <dallan@redhat.com> - 0.8.1-11
changelog:
  - Do not block during incoming migration
  - Resolves: rhbz#579440
  - Label serial devices
  - Resolves: rhbz#585249
  - parthelper: fix compilation without optimization
  - Related: rhbz#593785
  - Fix name/UUID uniqueness checking in storage/network
  - Resolves: rhbz#593951
  - Don't squash file permissions when migration fails
  - Resolves: rhbz#607922
  - Properly handle 'usbX' sysfs files
  - Resolves: rhbz#603867
  - add pool support to vol-key command & improve vol commands help
  - Resolves: rhbz#598365
  - document attach-disk better
  - Resolves: rhbz#601143
  - Config iptables to allow tftp port if network <tftp> element exists
  - Resolves: rhbz#607294
  - Fix failure to generate python bindings when libvirt.h.in is updated
  - Related: rhbz#589465
  - Allow all interface names
  - Resolves: rhbz#593907
  - Fix nodedevice refcounting
  - Resolves: rhbz#608753
  - Move nwfilter functions inside extern C and fix a locking bug
  - Resolves: rhbz#597391
  - Fix failure to restore qemu domains with selinux enforcing
  - Resolves: rhbz#590975
  - Check for presence of qemu -nodefconfig option before using it
  - Resolves: rhbz#608859


author: Dave Allan <dallan@redhat.com> - 0.8.1-12
changelog:
  - Don't invoke destroy callback from qemuMonitorOpen() failure paths
  - Resolves: rhbz#609060
  - virFileResolveLink: guarantee an absolute path
  - Resolves: rhbz#608092
  - SPICE patches have translatable strings without format args
  - Resolves: rhbz#608917
  - No way to pass disk format type to pool-define-as nor pool-create-as
  - Resolves: rhbz#597790
  - Fix enforcement of direction of traffic for rules describing incoming traffic
  - Resolves: rhbz#606889
  - Clarify virsh help pool-create-as text
  - Resolves: rhbz#609044


author: Dave Allan <dallan@redhat.com> - 0.8.1-14
changelog:
  - Support virtio disk hotplug in JSON mode
  - Resolves: rhbz#573946
  - Fix QEMU monitor JSON crash
  - Resolves: rhbz#604585
  - CVE-2010-2237 CVE-2010-2238 CVE-2010-2239
  - Resolves: rhbz#607817
  - CVE-2010-2242 Apply a source port mapping to virtual network masquerading
  - Resolves: rhbz#608049
  - Fix hang if QEMU exits (almost) immediately
  - Resolves: rhbz#610056
  - Support new CPU models provided by qemu-kvm
  - Resolves: rhbz#605830
  - Fix comparison of two host CPUs
  - Resolves: rhbz#611401
  - Don't mess with the CPU returned by arch driver
  - Resolves: rhbz#613014
  - Fail when CPU type cannot be detected from XML
  - Resolves: rhbz#613760
  - Use -nodefconfig when probing for CPU models
  - Resolves: rhbz#613764
  - cpuCompare: Fix crash on unexpected CPU XML
  - Resolves: rhbz#613765
  - Properly report failure to create raw storage volume files
  - Related: rhbz#547543
  - Fix IOErrorReasonCallback python bindings
  - Related: rhbz#586353
  - Parthelper: canonicalize block device paths
  - Related: rhbz#593785


author: Dave Allan <dallan@redhat.com> - 0.8.1-16
changelog:
  - Make PCI device ordering consistent with older releases
  - Resolves: rhbz#592026
  - Fix libvirtd hang during concurrent bi-directional migration
  - Resolves: rhbz#599590


author: Dave Allan <dallan@redhat.com> - 0.8.1-17
changelog:
  - Set a stable & high MAC addr for guest TAP devices
  - Resolves: rhbz#616517
  - Fix bogus commit of -16 patches
  - Related: rhbz#592026
  - Related: rhbz#599590


author: Dave Allan <dallan@redhat.com> - 0.8.1-19
changelog:
  - Add character device backend activating QEMU internal spice agent
  - Resolves: rhbz#615757
  - Make libvirt-guests initscript Fedora compliant
  - Resolves: rhbz#617300


author: Dave Allan <dallan@redhat.com> - 0.8.1-21
changelog:
  - Fix multiple PCI device assignment bugs
  - Resolves: rhbz#617116
  - Fix the ACS checking in the PCI code
  - Resolves: rhbz#615218
  - Disable boot=on when not using KVM
  - Resolves: rhbz#594068
  - Don't leak delay string when freeing virInterfaceBridgeDefs
  - Resolves: rhbz#620837


author: Dave Allan <dallan@redhat.com> - 0.8.1-22
changelog:
  - Mitigate asynchronous device_del
  - Resolves: rhbz#609437
  - Fix PCI address allocation
  - Resolves: rhbz#618484
  - Make nodeinfo skip offline CPUs
  - Resolves: rhbz#622515


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-25
changelog:
  - fix PXE booting on the virtual network
  - Resolves: rhbz#623951
  - fix tunelled migration
  - Resolves: rhbz#624062


author: Dave Allan <dallan@redhat.com> - 0.8.1-26
changelog:
  - Fix problem with capabilities XML generation
  - Resolves: rhbz#620847
  - Correctly reserve and release PCI slots
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j16
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-28.el6
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#561935)
  - Make SASL work over UNIX domain sockets (rhbz#641687)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#643407)
  - Fix save/restore on root_squashed NFS (rhbz#643884)
  - Fix race on multiple migration (rhbz#638285)
  - Export host information through SMBIOS to guests (rhbz#526224)
  - Support forcing a CDROM eject (rhbz#626305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-29.el6
changelog:
  - spec file cleanups (rhbz#649523)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#659310)
  - Fix funny error in clock-variable (rhbz#660194)
  - Export host information through SMBIOS to guests (rhbz#526224)
  - Ensure device is deleted from guest after unplug (rhbz#644015)
  - Distinguish between QEMU domain shutdown and crash (rhbz#656845)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-1.el6
changelog:
  - Rebased to upstream 0.8.7 (rhbz#653985)
  - The following bugs got fixed by the rebase:
      rhbz#586124, rhbz#595350, rhbz#611793, rhbz#611822, rhbz#617439,
      rhbz#620363, rhbz#626873, rhbz#627143, rhbz#628772, rhbz#639595,
      rhbz#639603, rhbz#656795, rhbz#658657, rhbz#659855, rhbz#660706,
      rhbz#664406, rhbz#665446


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-2.el6
changelog:
  - Fix spec file which was not fully rebased to 0.8.7 (rhbz#653985, rhbz#660706)
  - Skip IB700 watchdog device when assigning PCI slots (rhbz#667091)
  - Improve error reporting when parsing dhcp info (rhbz#653300)
  - Don't chown saved image back to root if dynamic_ownership=0 (rhbz#661720)
  - Fix core dumps if unix_sock_group is set (rhbz#623166)
  - Add support for Westmere CPU model (rhbz#656248)
  - Add XML config switch to enable/disable vhost-net support (rhbz#643050)
  - Enable tuning of qemu network tap device "sndbuf" size (rhbz#665293)
  - Support for explicit boot device ordering (rhbz#646895)
  - Avoid qemu holding migration fd indefinitely (rhbz#620363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-3.el6
changelog:
  - Report error if invalid type specified for character device (rhbz#638968)
  - Improve log for domain related APIs (rhbz#640202)
  - Reject SDL graphic if it's not supported by qemu (rhbz#633326)
  - Don't lose track of events when callbacks are slow (rhbz#624252)
  - Fail if per-device boot is used but deviceboot is not supported (rhbz#670399)
  - Avoid sending STOPPED event twice (rhbz#666158)
  - Fix issues introduced by dependency patches for rhbz#646895


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-4.el6
changelog:
  - Fix event-handling data race (rhbz#671567)
  - Add support for VNC over a unix domain socket (rhbz#651415)
  - Support intel 'ich6' model (rhbz#648486)
  - Do not use virtio-serial port 0 for generic ports (rhbz#670394)
  - Set SELinux context label of pipes used for qemu migration (rhbz#667756)
  - Support customizable x509 certificate paths for client (rhbz#629510)
  - Round up capacity for LVM volume creation (rhbz#670529)
  - Show error prompt when trying to managed save a shutoff domain (rhbz#672449)
  - Report more proper error for unsupported graphics (rhbz#671319)
  - Expand the man page text for virsh setmaxmem (rhbz#622534)
  - Fix event-handling allocation crash (rhbz#671564)
  - Require --mac to avoid detach-interface ambiguity (rhbz#671050)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-5.el6
changelog:
  - Docs for customizable x509 certificate paths for client (rhbz#629510)
  - Fix tests for VNC over a unix domain socket (rhbz#651415)
  - Fix problems with peer-to-peer migration (rhbz#673434)
  - Fix tunneled migration broken since 0.8.7-2 (rhbz#672199)
  - Update docs for cpu_shares setting (rhbz#641187)
  - Fix possible hang if SASL is used (rhbz#672226)
  - Cancel migration in progress when virsh gets Ctrl-C (rhbz#635353)
  - Enhance virsh migrate command (rhbz#619039)
  - Support for specifying AIO mode for qemu disks (rhbz#591703)
  - Don't leave domain paused after restore (rhbz#670278)
  - Fix possible deadlock/crash in qemu driver (rhbz#673588)
  - Add shortcut for qemu HMP pass through (rhbz#628940)
  - Fix error message when attach device fails (rhbz#675030)
  - Support for booting from assigned PCI devices (rhbz#646895)
  - Improve handling of unlimited value for memory tunables (rhbz#669069)
  - Add smartcard support (rhbz#641834)
  - Remove some RHEL-specific patches which are no longer required (rhbz#653985)
  - Support for disabling/enabling KSM per domain (rhbz#635419)
  - Add --all flag to virsh freecell command (rhbz#653530)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-6.el6
changelog:
  - Fix typo in parsing of spice 'auth' data (rhbz#676374)
  - Fix attach-interface regression (rhbz#676686)
  - Block I/O tunables via blkio cgroups controller (rhbz#632492)
  - Support SCSI RAID type & lower log level for unknown types (rhbz#675771)
  - Only initialize/cleanup libpciaccess once (rhbz#675698)
  - Imprint all logs with version + package build information (rhbz#673226)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-7.el6
changelog:
  - Properly escape special characters in domain names (rhbz#676908)
  - Fix enum type declaration (rhbz#628940)
  - Fix cleanup on VM state after failed QEMU startup (rhbz#673588)
  - Fix XML generation for smartcards (rhbz#677308)
  - Ignore failure of "qemu -M ?" on older qemu (rhbz#676563)
  - Fix typo in setting up SPICE passwords (rhbz#677709)
  - Avoid NULL dereference in virDomainMemoryStats (rhbz#677484)
  - Avoid NULL dereference on error in qemu driver (rhbz#677493)
  - Fix error message when saving a shutoff domain (rhbz#677547)
  - Create enough volumes for mpath pool (rhbz#677231)
  - Allow to delete device mapper disk partition (rhbz#611443)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-8.el6
changelog:
  - Fix --all flag of virsh freecell to really show all cells (rhbz#653530)
  - Add txmode attribute to interface XML for virtio backend (rhbz#629662)
  - Give each virtual network bridge its own fixed MAC address (rhbz#609463)
  - Fix virsh snapshot-list with --quiet option (rhbz#678833)
  - Delay IFF_UP'ing 802.1Qbh interface until migration final stage (rhbz#678826)
  - Fix several memory bugs (rhbz#679164)
  - Fix virt-pki-validate when CERTTOOL is missing (rhbz#679153)
  - Fix memory corruption in virFileAbsPath (rhbz#680281)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-9.el6
changelog:
  - Reorder nwfilter match extensions relative to state match (rhbz#678139)
  - Avoid overwriting error message in qemu driver (rhbz#678870)
  - Allow removing hash entries in virHashForEach (rhbz#681459)
  - Avoid double close on qemu domain restore (rhbz#672725)
  - Fix DomainObj refcounting/hashtable races in qemu driver (rhbz#670848)
  - Fix several memory leaks (rhbz#682249)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-11.el6
changelog:
  - Support vram specification for qxl graphics (rhbz#673578)
  - Fix parsing int options in virsh (rhbz#639587)
  - Use -o encryption=on instead of -e for qemu-img (rhbz#676984)
  - Support domain snapshots with current QMP (rhbz#589076)
  - Update auditing support (rhbz#642785)
  - Only request sound cgroup ACL when required (rhbz#680398)
  - Allow fine-tuning of device ACL permissions (rhbz#683163)
  - Support vhost in attach-interface (rhbz#683276)
  - Don't request cgroup ACL access for /dev/net/tun (rhbz#683305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-12.el6
changelog:
  - Fix vram settings for qxl graphics (rhbz#673578)
  - Free stream when domain shuts down while its console is open (rhbz#682741)
  - Use hardcoded python path in libvirt.py (rhbz#684204)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Eliminate potential null pointer deref when auditing macvtap devices (rhbz#642785)
  - Insert error messages to avoid a quiet abortion of commands (rhbz#605660)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-13.el6
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Handle DNS over IPv6 (rhbz#687896)
  - Start dnsmasq even if no dhcp ranges/hosts are specified (rhbz#687291)
  - Use a separate dhcp leases file for each network (rhbz#687551)
  - Fix a possible crash in storage driver (rhbz#684712)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-14.el6
changelog:
  - Fix delayed events when SASL is active (rhbz#624252)
  - Fix ref-counting bugs (rhbz#688774)
  - Log an error if on failure to connect to netlink socket (rhbz#689001)
  - Log error and abort network startup when radvd isn't found (rhbz#688957)
  - Add PCI sysfs reset access rights to qemu (rhbz#689002)
  - Fix regression with qemu:///session URI (rhbz#684655)
  - Avoid leaking PCI config fd into qemu (rhbz#687993)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-15.el6
changelog:
  - Fix return value for virJSONValueFromString if it fails (rhbz#688723)
  - Fix positioning to end of qemu log file (rhbz#689986)
  - Initialization error of qemuCgroupData in Qemu host usb hotplug (rhbz#690183)
  - 8021Qbh: Use preassociate-rr during the migration prepare stage (rhbz#684870)
  - Make error reporting in libvirtd thread safe (rhbz#689374)
  - Add missing dependencies (rhbz#690022)
  - Fix restoring a compressed save image (rhbz#691034)
  - Fix label restore bugs in qemu driver (rhbz#690737)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.1-1.el6
changelog:
  - Rebased to upstream 0.9.1 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#587276, rhbz#591058, rhbz#592170, rhbz#598792, rhbz#673814,
      rhbz#677228, rhbz#681458, rhbz#682237, rhbz#692745, rhbz#693932,
      rhbz#694382, rhbz#695653, rhbz#698071, rhbz#698197, rhbz#698208,
      rhbz#698490, rhbz#701305


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.2-1.el6
changelog:
  - Rebased to upstream 0.9.2 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#569567, rhbz#691830, rhbz#607526, rhbz#609650, rhbz#632495,
      rhbz#640603, rhbz#658713, rhbz#669549, rhbz#677229, rhbz#678548,
      rhbz#640603, rhbz#682237, rhbz#683005, rhbz#684848, rhbz#688859,
      rhbz#690695, rhbz#692355, rhbz#693203, rhbz#694516, rhbz#697650,
      rhbz#698133, rhbz#702044, rhbz#704124, rhbz#704144, rhbz#705405,
      rhbz#706869, rhbz#706883, rhbz#706966, rhbz#707173, rhbz#707257,
      rhbz#707298, rhbz#709576, rhbz#709776, rhbz#710150, rhbz#711151


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-1.el6
changelog:
  - Rebased to upstream 0.9.3 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#591974, rhbz#632499, rhbz#641087, rhbz#664629, rhbz#679668,
      rhbz#682121, rhbz#693648, rhbz#693650, rhbz#693661, rhbz#698340,
      rhbz#698825, rhbz#698861, rhbz#701394, rhbz#707439, rhbz#707530,
      rhbz#715355, rhbz#716826, rhbz#717203, rhbz#718143, rhbz#712050,
      rhbz#715184


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-2.el6
changelog:
  - Fix mistaken order of server cert/key parameters in constructor (rhbz#719838)
  - qemu: Don't chown files on NFS share if dynamic_ownership is off (rhbz#716478)
  - util: Don't try to fchown files opened as non-root (rhbz#707257)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-4.el6
changelog:
  - storage: Avoid memory leak on metadata fetching (rhbz#707155)
  - graphics: Add support for action_if_connected in qemu (rhbz#707212)
  - qemu: Save domain status ASAP after creating qemu process (rhbz#707894)
  - bios: Add support for SGA (rhbz#711598)
  - pci: Initialize state values on reattach (rhbz#713697)
  - Keep consistence between code and doc on log level and usage (rhbz#716888)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.3-8.el6
changelog:
  - libvirt crash when running domains and vdsm is restarted (rhbz#723811)
  - connect to hypervisor with unconfigured tls/tcp connection pbm (rhbz#723442)
  - virsh list produced segmentation fault when libvirtd is not up (rhbz#723843)
  - clientcert.pem validation failure cause libvirtd crash (rhbz#723881)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-0rc1.el6
changelog:
  - rebased to upstream 0.9.4 release candidate 1 (rhbz#705814)
  - the rebase also fixes the following bugs:
      rhbz#603039, rhbz#632499, rhbz#632760, rhbz#643947, rhbz#678027,
      rhbz#697742, rhbz#697841, rhbz#704836, rhbz#707530, rhbz#720350,
      rhbz#720889, rhbz#721335, rhbz#722862


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-0rc2.el6
changelog:
  - rebased to upstream 0.9.4 release candidate 2 (rhbz#705814)
  - the rebase also fixes the following bugs:
      rhbz#667624, rhbz#669586, rhbz#682084, rhbz#707155, rhbz#707212,
      rhbz#725322, rhbz#725935, rhbz#725950


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-1.el6
changelog:
  - Rebased to upstream 0.9.4 (rhbz#705814)
  - The rebase also fixes the following bugs:
      rhbz#634653, rhbz#707212, rhbz#722806, rhbz#723862, rhbz#726304,
      rhbz#726398, rhbz#727047, rhbz#727094


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-2.el6
changelog:
  - daemon: Unlink unix socket paths on shutdown (rhbz#725702)
  - rpc:Fix sasl session relocking intead of unlocking it (rhbz#729198)
  - network: Eliminate lag in updating dnsmasq hosts files (rhbz#727982)
  - Don't mount /dev for application containers (rhbz#728835)
  - support connected parameter in set_password (rhbz#707212)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-3.el6
changelog:
  - Fix large files support (rhbz#728992)
  - qemu: Avoid overwriting errors from virGetHostname (rhbz#729567)
  - qemu: Fix -chardev udp if parameters are omitted (rhbz#689761)
  - managedsave: Prohibit use on transient domains (rhbz#729714)
  - nwfilter: Tolerate disappearing interfaces while instantiating filter (rhbz#729945)
  - docs: Describe new virtual switch configuration in network XML docs (rhbz#643947)
  - storage: Directory shouldn't be listed as type 'file' (rhbz#727088)
  - virsh: Add dir type for listing volumes with vol-list (rhbz#727088)
  - qemu: Avoid crash on process attach (rhbz#730615)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-4.el6
changelog:
  - Bugfix: Check stdoutWatch before removing the handler. (rhbz#730600)
  - daemon: Fix regression of libvirtd reloading support (rhbz#730428)
  - libvirtd.init.in: Stop/restart() - wrong return value in case of failure (rhbz#730510)
  - Add API for duplicating a socket/client file descriptor (rhbz#720269)
  - Add backlog parameter to virNetSocketListen (rhbz#720269)
  - Support changing UNIX socket owner in virNetSocketNewListenUNIX (rhbz#720269)
  - qemu: Refactor do{Tunnel, Native}Migrate functions (rhbz#720269)
  - qemu: Use virNetSocket for tunneled migration (rhbz#720269)
  - qemu: Use fd: protocol for migration (rhbz#720269)
  - qemu: Support event_idx parameter for virtio disk and net devices (rhbz#725448)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-5.el6
changelog:
  - patch problem for seamless SPICE migration (rhbz#730753)
  - macvtap: Fix getPhysfn to get the PF of a direct attach network interface (rhbz#732082)
  - SSL spice session can't be kept during migration (rhbz#729874)
  - Storage driver should flush host cache after cloning volumes (rhbz#689416)
  - Documentation for CFS bandwidth limiting cgroup (rhbz#692769)
  - libvirt error message should show the uri content but not (null) (rhbz#730244)
  - libvirtd.conf error causes libvirtd to exit silently (rhbz#728654)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-6.el6
changelog:
  - daemon: Move TLS initialization to virInitialize (rhbz#732893)
  - Fix command test wrt gnutls initialize & fix debugging (rhbz#732893)
  - qemu: Init reattaching related members pciDevice before reattach (rhbz#728203)
  - qemu: error if qemu monitor command not found for BlockJob (rhbz#727502)
  - virsh: error if specified bandwidth is invalid for blockjob (rhbz#727502)
  - util: Only fchown newly created files in virFileOpenAs (rhbz#534010)
  - screenshot: Implement multiple screen support (rhbz#710489)
  - security: Rename SetSocketLabel APIs to SetDaemonSocketLabel (rhbz#731243)
  - security: Introduce SetSocketLabel (rhbz#731243)
  - qemu: Correctly label migration TCP socket (rhbz#731243)
  - snapshot: Don't leak resources on qemu snapshot failure (rhbz#733499)
  - Fix memory leak while scanning snapshots (rhbz#674537)
  - qemu: Minor formatting cleanup (rhbz#674537)
  - Swap virDomain and virDomainSnapshot declaration (rhbz#674537)
  - snapshot: Only pass snapshot to qemu command line when reverting (rhbz#674537)
  - snapshot: Track current snapshot across restarts (rhbz#674537)
  - send-key: Fix scan keycode map (rhbz#733597)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-7.el6
changelog:
  - qemu: Properly label outgoing pipe for tunneled migration (rhbz#733998)
  - snapshot: Forbid snapshot on autodestroy domain (rhbz#733806)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-8.el6
changelog:
  - qemu: Fix a regression of domain save (rhbz#735011)
  - virsh: Improve send-key documentation (rhbz#699847)
  - start: Allow discarding managed save (rhbz#730750)
  - virsh: Support 'virsh start --force-boot' on older servers (rhbz#730750)
  - maint: Fix comment typos (rhbz#730750)
  - qemu: Refactor file opening (rhbz#730750)
  - qemu: Detect incomplete save files (rhbz#730750)
  - virsh: Avoid memory leak on cmdVolCreateAs (rhbz#735008)
  - snapshot: Fix corner case on OOM during creation (rhbz#674537)
  - Ensure stream is aborted when exiting console (rhbz#731673)
  - following for (rhbz#731583, rhbz#731579, rhbz#731584, rhbz#731673):
  - Ensure client streams are closed when marking a client for close
  - Fix race condition in abort of stream
  - Tweak debugging message in RPC client code
  - Don't attempt to read from a stream if it is closed
  - Ensure async packets never get marked for sync replies
  - Ignore unused streams in virStreamAbort
  - rpc: Don't close connection if program is unknown
  - rpc: Fix a typo in debugging log in virNetServerProgramSendStreamData
  - stream: Remove redundant reference to client while sending stream data
  - Fix memory leak dispatching domain events
  - Avoid use-after-free on streams, due to message callbacks
  - Fix tracking of RPC messages wrt streams
  - Fix parted sector size assumption (rhbz#735441)
  - Fix incorrect path length check in sanlock lockspace setup (rhbz#735443)
  - Fix sanlock socket security labelling (rhbz#735442)
  - Remove bogus virSecurityManagerSetProcessFDLabel method (rhbz#735442)
  - security: Fix build (rhbz#735442)
  - Fix keymap used to talk with QEMU (rhbz#632499)
  - virsh: Fix snapshot-create-as to handle arbitrary names (rhbz#735495)
  - virsh: Add virsh snapshot-current --name (rhbz#735495)
  - virsh: Add snapshot-parent (rhbz#735495)
  - virsh: Don't reject undefine on active domain (rhbz#735495)
  - virsh: Fix logic bug (rhbz#735495)
  - virsh: Fix dead store (rhbz#735495)
  - virsh: Tweak misleading wording (rhbz#735495)
  - virsh: Concatenate qemu-monitor-command arguments (rhbz#735495)
  - maint: Treat more libxml2 functions as free-like (rhbz#735495)
  - xml: Add another convenience function (rhbz#735495)
  - maint: Simplify lots of libxml2 clients (rhbz#735495)
  - virsh: Add list --managed-save (rhbz#735495)
  - virsh: Prefer unsigned flags (rhbz#735495)
  - snapshot: Add snapshot-list --parent to virsh (rhbz#735495)
  - qemu: Allow to undefine a running domain (rhbz#735498)
  - test: Allow to undefine a running domain (rhbz#735498)
  - build: Fix typo in recent test patch (rhbz#735498)
  - test: Rewrite test to match change in behavior (rhbz#735498)
  - virsh: Properly interleave shared stdout and stderr (rhbz#735498)
  - snapshot: Better events when starting paused (rhbz#733762)
  - snapshot: Fine-tune ability to start paused (rhbz#733762)
  - snapshot: Expose --running and --paused in virsh (rhbz#733762)
  - snapshot: Fine-tune qemu saved images starting paused (rhbz#733762)
  - snapshot: Improve reverting to qemu paused snapshots (rhbz#733762)
  - snapshot: Properly revert qemu to offline snapshots (rhbz#733762)
  - snapshot: Fine-tune qemu snapshot revert states (rhbz#733762)
  - snapshot: Properly revert qemu to offline snapshots (rhbz#733762)
  - snapshot: Fine-tune qemu snapshot revert states (rhbz#733762)
  - snapshot: Speed up snapshot location (rhbz#733529)
  - snapshot: Avoid crash when deleting qemu snapshots (rhbz#733529)
  - snapshot: Track current domain across deletion of children (rhbz#733529)
  - snapshot: Simplify acting on just children (rhbz#733529)
  - snapshot: Allow deletion of just snapshot metadata (rhbz#735457)
  - snapshot: Let qemu discard only snapshot metadata (rhbz#735457)
  - snapshot: Identify which snapshots have metadata (rhbz#735457)
  - snapshot: Reflect new dumpxml and list options in virsh (rhbz#735457)
  - snapshot: Identify qemu snapshot roots (rhbz#735457)
  - snapshot: Allow recreation of metadata (rhbz#735457)
  - snapshot: Refactor virsh snapshot creation (rhbz#735457)
  - snapshot: Improve virsh snapshot-create, add snapshot-edit (rhbz#735457)
  - snapshot: Add qemu snapshot creation without metadata (rhbz#735457)
  - snapshot: Add qemu snapshot redefine support (rhbz#735457)
  - vbox, xenapi: Add virDomainUndefineFlags (rhbz#735457)
  - snapshot: Prevent stranding snapshot data on domain destruction (rhbz#735457)
  - snapshot: Teach virsh about new undefine flags (rhbz#735457)
  - snapshot: Refactor some qemu code (rhbz#735457)
  - snapshot: Cache qemu-img location (rhbz#735457)
  - snapshot: Support new undefine flags in qemu (rhbz#735457)
  - snapshot: Prevent migration from stranding snapshot data (rhbz#735457)
  - snapshot: Refactor domain xml output (rhbz#735553)
  - snapshot: Allow full domain xml in snapshot (rhbz#735553)
  - snapshot: Correctly escape generated xml (rhbz#735553)
  - snapshot: Update rng to support full domain in xml (rhbz#735553)
  - snapshot: Store qemu domain details in xml (rhbz#735553)
  - schedinfo: Update man page about virsh schedinfo command (unknown)
  - snapshot: Additions to domain xml for disks (rhbz#638510)
  - snapshot: Reject transient disks where code is not ready (rhbz#638510)
  - snapshot: Introduce new deletion flag (rhbz#638510)
  - snapshot: Expose new delete flag in virsh (rhbz#638510)
  - snapshot: Allow halting after snapshot (rhbz#638510)
  - snapshot: Expose halt-after-creation in virsh (rhbz#638510)
  - snapshot: Support extra state in snapshots (unknown)
  - snapshot: Add <disks> to snapshot xml (rhbz#638510)
  - snapshot: Also support disks by path (rhbz#638510)
  - snapshot: Add virsh domblklist command (rhbz#638510)
  - snapshot: Add flag for requesting disk snapshot (rhbz#638510)
  - snapshot: Wire up disk-only flag to snapshot-create (rhbz#638510)
  - snapshot: Reject unimplemented disk snapshot features (rhbz#638510)
  - snapshot: Make it possible to audit external snapshot (rhbz#638510)
  - snapshot: Wire up new qemu monitor command (rhbz#638510)
  - snapshot: Wire up live qemu disk snapshots (rhbz#638510)
  - snapshot: Use SELinux and lock manager with external snapshots (rhbz#638510)
  - daemon: Create priority workers pool (rhbz#692663)
  - qemu: Introduce job queue size limit (rhbz#692663)
  - qemu: Deal with stucked qemu on daemon startup (rhbz#692663)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-10.el6
changelog:
  - virterror: Fix error message for VIR_ERR_INVALID_ARG (rhbz#689388)
  - remote: Refuse connecting to remote socket (rhbz#689388)
  - Threadpool: Initialize new dynamic workers (rhbz#692663)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-11.el6
changelog:
  - blockinfo: Fix qemu regression in handling disk name (rhbz#736603)
  - doc: Fix incorrect option in send-key (rhbz#736297)
  - virsh: Fix typo in opts_send_key (rhbz#736297)
  - rpc: Avoid memory leak on virNetTLSContextValidCertificate (rhbz#735650)
  - tests: Avoid memory leak on testTLSSessionInit (rhbz#735650)
  - qemu: Fix seamless SPICE migration with older qemu (rhbz#730753)
  - snapshot: Fix regression with system checkpoints (rhbz#736682)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-12.el6
changelog:
  - selinux: Detect virt_use_nfs boolean set (rhbz#589922)
  - virnetsocket: Pass KRB5CCNAME env variable (rhbz#737176)
  - snapshot: Fix double free of qemuImgBinary (rhbz#737010)
  - qemu_api: Modify apibuild.py to generate docs for QEMU APIs (rhbz#736040)
  - qemu_api: Update Makefile for subdir docs (rhbz#736040)
  - qemu_api: Add comments for API virDomainQemuMonitorCommand (rhbz#736040)
  - qemu_api: Add override XML and C files for QEMU APIs (rhbz#736040)
  - qemu_api: Update Py binding generator to generate files for QEMU APIs (rhbz#736040)
  - qemu_api: Update Makefile to generate libvirtmod_qemu lib (rhbz#736040)
  - qemu_api: Update libvirt spec file (rhbz#736040)
  - Remove two references to files not generated (rhbz#736040)
  - qemu_api: Doc improvements (rhbz#736040)
  - python: Fix libvirt.py generation to include virterror info (rhbz#736040)
  - snapshot: New APIs for inspecting snapshot object (rhbz#735457)
  - snapshot: Use new API for less work (rhbz#735457)
  - snapshot: ABI stability must include memory sizing (rhbz#735553)
  - spec: Require augeas for sanlock (rhbz#738314)
  - sanlock: Add missing test command in virt-sanlock-cleanup.in (rhbz#738534)
  - snapshot: Tweak snapshot-create-as diskspec docs (rhbz#738411)
  - qemu: Hold conn open for all threads started by qemuProcessReconnectAll (rhbz#738778)
  - rpc: Convert unknown procedures to VIR_ERR_NO_SUPPORT (rhbz#738439)
  - Prevent crash from dlclose() of libvirt.so (rhbz#739167)
  - doc: Add statment about permissions needed to do a core dump (rhbz#738146)
  - snapshot: Affect persistent xml after disk snapshot (rhbz#738676)
  - snapshot: Allow disk snapshots of qcow2 disks (rhbz#738676)
  - qemu: Prevent disk corruption on domain shutdown (rhbz#734773)
  - qemu: Introduce shutdown reason for paused state (rhbz#734773)
  - qemu: Fix shutoff reason when domain crashes (rhbz#739641)
  - qemu: Properly detect crash of a rebooted domain (rhbz#739641)
  - qemu: Avoid memory leak (rhbz#739704)
  - remote: Avoid memory leak (rhbz#739704)
  - util: Avoid memory leak (rhbz#739704)
  - Fix memory leak parsing 'relabel' attribute in domain security XML (rhbz#739704)
  - Don't leak memory if a cgroup is mounted multiple times (rhbz#739704)
  - network: Eliminate potential memory leak on parse failure (rhbz#739704)
  - virsh: doc: Fix supported driver types for attach-disk command (rhbz#738970)
  - Do not log invalid operations in libvirtd logs (rhbz#590807)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-13.el6
changelog:
  - Fix crash on events due to allocation errors (rhbz#737881)
  - remote: Fix crash on OOM (rhbz#737881)
  - Fix persistent migration config save (rhbz#738148)
  - qemu: Transfer inactive XML among cookie (rhbz#738148)
  - storage: Ensure the device path exists before refreshing disk pool (rhbz#611442)
  - Store max migration bandwidth in qemuDomainObjPrivate struct (rhbz#740099)
  - Save migration speed in qemuDomainMigrateSetMaxSpeed (rhbz#740099)
  - Set qemu migration speed unlimited when migrating to file (rhbz#740099)
  - Use max bandwidth from qemuDomainObjPrivate struct when migrating (rhbz#740099)
  - build: Silence warning on 32-bit build (rhbz#740099)
  - conf: Assign newDef of active domain as persistent conf if it is NULL (rhbz#728428)
  - qemu: Avoid dereferencing a NULL pointer (rhbz#739704)
  - sanlock: Fix memory leak (rhbz#739704)
  - virsh: Fix regression in argv parsing (rhbz#740168)
  - snapshot: Fix logic bug in qemu undefine (rhbz#735457)
  - snapshot: Prepare to remove transient snapshot metadata (rhbz#735457)
  - snapshot: Remove snapshot metadata on transient exit (rhbz#735457)
  - snapshot: Also delete empty directory (rhbz#735457)
  - virsh: Do not ignore the specified flags for cmdSaveImageDefine (rhbz#740508)
  - selinux: Correctly report warning if virt_use_nfs not set (rhbz#589922)
  - qemu: Properly hot-unplug drives (rhbz#696596)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-14.el6
changelog:
  - Fix synchronous reading of stream data (rhbz#741337)
  - qemu: Add ability to set PCI device "rombar" on or off (rhbz#738095)
  - virsh: Better document --copy-storage migrate options (rhbz#677220)
  - virsh: Enhance documentation of commands starting jobs (rhbz#705237)
  - qemu: Always remove domain object if MigratePrepare fails (rhbz#741251)
  - security: Properly chown/label bidirectional and unidirectional fifos (rhbz#740478)
  - qemu: Check domain status details when reconnecting monitor (rhbz#617890)
  - qemu: Finish domain shutdown on reconnect (rhbz#617890)
  - qemu: Avoid loop of fake reboots (rhbz#617890)
  - qemu: Preserve fakeReboot flag in domain status (rhbz#617890)
  - snapshot: Fix man page typos (rhbz#740686)
  - docs: Document virsh nodedev-* commands (rhbz#740686)
  - docs: Document node device XML (rhbz#740686)
  - qemu: Add return value check (rhbz#739704)
  - qemu: Check for ejected media during startup and migration (rhbz#725673)
  - virsh: Update man page for cpu_shares parameter (rhbz#639591)
  - virsh: Describe attach-interface parameter target (rhbz#698899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-15.el6
changelog:
  - Add virFileLock and virFileUnlock APIs (rhbz#728153)
  - Move pidfile functions into util/virpidfile.{c, h} (rhbz#728153)
  - Introduce functions for checking whether a pidfile is valid (rhbz#728153)
  - Add some APIs which use locking for crashsafe pidfile handling (rhbz#728153)
  - Convert libvirtd to use crash-safe pidfile APIs (rhbz#728153)
  - build: Fix recent build failures (rhbz#728153)
  - daemon: Don't remove pidfiles in init scripts (rhbz#728153)
  - daemon: Modify init script to detect upstart managed libvirtd (rhbz#728153)
  - qemu: Check for outstanding async job too (rhbz#742277)
  - qemu: Make PCI multifunction support more manual (rhbz#727530)
  - network: Fill in bandwidth from portgroup for all forward modes (rhbz#743176)
  - snapshot: Refactor virsh snapshot parent computation (rhbz#742410)
  - snapshot: Better virsh handling of missing current, parent (rhbz#742410)
  - qemu: Fix migration with dname (rhbz#740533)
  - qemu: Correct misspelled 'enospc' option, and only use for werror (rhbz#730909)
  - snapshot: Add REVERT_FORCE to API (rhbz#742615)
  - snapshot: Use qemu-img on disks in use at time of snapshot (rhbz#742615)
  - snapshot: Enforce REVERT_FORCE on qemu (rhbz#742615)
  - init: Raise default system aio limits (rhbz#740899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-16.el6
changelog:
  - qemu: Enable multifunction for older qemu (rhbz#738388)
  - qemu: Don't fail virDomainGetInfo if we can't update balloon info (rhbz#741217)
  - qemu: Leave rerror policy at default when enospace is requested (rhbz#730909)
  - snapshot: Fix virsh error message typo (rhbz#735457)
  - snapshot: Let virsh edit disk snapshots (rhbz#744071)
  - snapshot: Simplify redefinition of disk snapshot (rhbz#744071)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-17.el6
changelog:
  - Fix deadlock when the RPC program is unknown (rhbz#743843)
  - qemuDomainAttach: Initialize pidfile variable (rhbz#744548)
  - storage: Do not use comma as seperator for lvs output (rhbz#727474)
  - snapshot: Avoid accidental renames with snapshot-edit (rhbz#744724)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-18.el6
changelog:
  - virDomainCoreDump: Introduce VIR_DUMP_RESET flag (rhbz#632498)
  - qemu: Implement VIR_DUMP_RESET (rhbz#632498)
  - qemu: Check for domain being active on successful job acquire (rhbz#745734)
  - Set to NULL members that have been freed to prevent crashes (rhbz#746075)
  - virFDStream: Close also given errfd (fd leak) (rhbz#746075)
  - qemu: Silence Coverity false positive (rhbz#739704)
  - command: Avoid fd leak on failure (rhbz#739704)
  - build: Add compiler attributes to virUUIDParse (rhbz#739704)
  - qemu: Check for json allocation failure (rhbz#739704)
  - qemu: Fix text block info parsing (rhbz#739704)
  - storage: Plug memory leak on error (rhbz#739704)
  - conf: Plug memory leak on error (rhbz#739704)
  - qemu: Plug memory leak on migration (rhbz#739704)
  - macvtap: Plug memory leak for 802.1Qbh (rhbz#739704)
  - macvtap: Avoid invalid free (rhbz#739704)
  - Update to require sanlock 1.8 for license compliance (rhbz#739518)
  - events: Propose a separate lock for event queue (rhbz#743817)
  - util: Make getaddrinfo failure nonfatal in virGetHostname (rhbz#738915)
  - qemu: Make sure BeginJob is always followed by EndJob (rhbz#746268)
  - pci: Fix pciDeviceListSteal on multiple devices (rhbz#733587)
  - qemu: Do not reattach PCI device used by other domain when shutdown (rhbz#733587)
  - qemu: Honor the orginal PCI dev properties when reattaching (rhbz#736214)
  - daemon: Always advertise libvirtd service (rhbz#726616)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-20.el6
changelog:
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747516)
  - storage: Plug iscsi memory leak (rhbz#747516)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-21.el6
changelog:
  - docs: Document managed=yes of hostdev passthrough (rhbz#740686)
  - ServerClient: Flush cached data (rhbz#748025)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-1.el6
changelog:
  - Rebase to upstream 0.9.10 (rhbz#752433)
  - Add support for sVirt in the LXC driver
  - block rebase: add new API virDomainBlockRebase
  - API: Add api to set and get domain metadata
  - virDomainGetDiskErrors public API
  - conf: add rawio attribute to disk element of domain XML
  - Add new public API virDomainGetCPUStats()
  - Introduce virDomainPMSuspendForDuration API
  - resize: add virStorageVolResize() API
  - Add a virt-host-validate command to sanity check HV config
  - Add new virDomainShutdownFlags API
  - QEMU guest agent support
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-2.el6
changelog:
  - qemu: Set capabilities based on supported monitor commands (rhbz#766958)
  - qemu: Implement DomainPMSuspendForDuration (rhbz#766958)
  - snapshot: Fix snapshot deletion use-after-free (rhbz#790744)
  - storage: Allow runtime detection of scrub (rhbz#725013)
  - qemu: Unlock monitor when connecting to dest qemu fails (rhbz#783968)
  - qemu: Prevent crash of libvirtd without guest agent (rhbz#790745)
  - python: Expose virDomain{G,S}etInterfaceParameters APIs in python binding (rhbz#770971)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-3.el6
changelog:
  - storage: Allow runtime detection of scrub missing build dep (rhbz#725013)
  - daemon: Plug memory leak (rhbz#795978)
  - daemon: Fix logic bug with virAsprintf (rhbz#795978)
  - util: Fix virFileAccessibleAs return path from parent (rhbz#795093)
  - Add support for unsafe migration (rhbz#751631)
  - virsh: Add --unsafe option to migrate command (rhbz#751631)
  - Introduce virStorageFileIsClusterFS (rhbz#751631)
  - qemu: Forbid migration with cache != none (rhbz#751631)
  - qemu: Nicer error message on failed graceful destroy (rhbz#795656)
  - Error out when using SPICE TLS with spice_tls=0 (rhbz#790436)
  - Revert "spec: Mark directories in /var/run as ghosts" (rhbz#788985)
  - Fixed URI parsing (rhbz#785164)
  - virsh: Fix informational message in iface-bridge command (rhbz#797066)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-4.el6
changelog:
  - Improve error reporting when virsh console is run without a TTY (rhbz#729940)
  - pidfile: Make checking binary path in virPidFileRead optional (rhbz#729940)
  - Add flags for virDomainOpenConsole (rhbz#729940)
  - virsh: Add support for VIR_DOMAIN_CONSOLE_* flags (rhbz#729940)
  - fdstream: Emit stream abort callback even if poll() doesnt. (rhbz#729940)
  - fdstream: Add internal callback on stream close (rhbz#729940)
  - util: Add helpers for safe domain console operations (rhbz#729940)
  - qemu: Add ability to abort existing console while creating new one (rhbz#729940)
  - Fixed service handling in specfile (rhbz#786770)
  - qemu: Don't emit tls-port spice option if port is -1 (rhbz#798220)
  - docs: Comments wiping supported algorithms (rhbz#725013)
  - libvirt-guests: Add documentation and clean up to use virsh's improved list (rhbz#693758)
  - libvirt-guests: Don't try to do a managed-save of transient guests (rhbz#693758)
  - virsh: Enhance list command to ease creation of shell scripts (rhbz#693758)
  - libvirt-guests: Check if URI is reachable before launching commands (rhbz#720691)
  - hooks: Add support for capturing hook output (rhbz#795127)
  - qemu: Add pre-migration hook (rhbz#795127)
  - Support for cpu64-rhel* qemu cpu models (rhbz#768450)
  - util: Add netlink event handling to virnetlink.c (rhbz#693842)
  - Add de-association handling to macvlan code (rhbz#693842)
  - qemu: Add ibmvscsi controller model (rhbz#782034)
  - qemu: Add virtio-scsi controller model (rhbz#782034)
  - conf: Add helper function to look up disk controller model (rhbz#782034)
  - conf: Introduce new attribute for device address format (rhbz#782034)
  - qemu: New cap flag to indicate if channel is supported by scsi-disk (rhbz#782034)
  - qemu: Build command line for the new address format (rhbz#782034)
  - tests: Add tests for virtio-scsi and ibmvscsi controllers (rhbz#782034)
  - virsh: Two new helper functions for disk device changes (rhbz#713932)
  - virsh: Use vshFindDisk and vshPrepareDiskXML in cmdDetachDisk (rhbz#713932)
  - virsh: New command cmdChangeMedia (rhbz#713932)
  - qemu: Require json for block jobs (rhbz#799055)
  - qemu: Pass block pull backing file to monitor (rhbz#799055)
  - virsh: Expose partial pull (rhbz#799055)
  - libvirt-guests: Add parallel startup and shutdown of guests (rhbz#625362)
  - qemu: Shared or readonly disks are always safe wrt migration (rhbz#751631)
  - util: Eliminate crash in virNetDevMacVLanCreateWithVPortProfile (rhbz#693842)
  - rpc: Fix client crash on connection close (rhbz#800185)
  - conf: Add missing device types to virDomainDevice(Type|Def) (rhbz#691539)
  - conf: Relocate virDomainDeviceDef and virDomainHostdevDef (rhbz#691539)
  - conf: Reorder static functions in domain_conf.c (rhbz#691539)
  - qemu: Rename virDomainDeviceInfoPtr variables to avoid confusion (rhbz#691539)
  - conf: Add device pointer to args of virDomainDeviceInfoIterate callback (rhbz#691539)
  - conf: Make hostdev info a separate object (rhbz#691539)
  - conf: HostdevDef parse/format helper functions (rhbz#691539)
  - conf: Give each hostdevdef a parent pointer (rhbz#691539)
  - conf: Put subsys part of virDomainHostdevDef into its own struct (rhbz#691539)
  - conf: Hostdev utility functions (rhbz#691539)
  - qemu: Re-order functions in qemu_hotplug.c (rhbz#691539)
  - qemu: Refactor hotplug detach of hostdevs (rhbz#691539)
  - conf: Parse/format type='hostdev' network interfaces (rhbz#691539)
  - qemu: Support type='hostdev' network devices at domain start (rhbz#691539)
  - conf: Change virDomainNetRemove from static to global (rhbz#691539)
  - qemu: Use virDomainNetRemove instead of inline code (rhbz#691539)
  - qemu: Support type=hostdev network device live hotplug attach/detach (rhbz#691539)
  - util: Two new pci util functions (rhbz#691539)
  - util: Support functions for mac/portprofile associations on hostdev (rhbz#691539)
  - util: Changes to support portprofiles for hostdevs (rhbz#691539)
  - qemu: Install port profile and mac address on netdev hostdevs (rhbz#691539)
  - Fix build after commit e3ba4025 (rhbz#693842)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-5.el6
changelog:
  - Avoid global variable shadowed (rhbz#737726)
  - Add nodeGetCPUmap() for getting available CPU IDs in a cpumap. (rhbz#737726)
  - Qemu driver for virDomainGetCPUstats using cpuacct cgroup. (rhbz#737726)
  - Cpu-stats command shows cpu statistics information of a domain. (rhbz#737726)
  - Ensure max_id is initialized in linuxParseCPUmap() (rhbz#737726)
  - rpc: Allow truncated return for virDomainGetCPUStats (rhbz#737726)
  - qemu: Don't parse device twice in attach/detach (rhbz#770031)
  - sanlock: Fix condition left crippled while debugging (rhbz#785736)
  - sanlock: Use STREQ_NULLABLE instead of STREQ on strings that may be null (rhbz#785736)
  - qemu: Fix startupPolicy for snapshot-revert (rhbz#798938)
  - util: Don't overflow on errno in virFileAccessibleAs (rhbz#798938)
  - blockResize: Add flag for bytes (rhbz#796526)
  - docs: Use correct terminology for 1024 bytes (rhbz#796526)
  - api: Add overflow error (rhbz#796526)
  - util: New function for scaling numbers (rhbz#796526)
  - xml: Share 'unit' in RNG (rhbz#796526)
  - xml: Output memory unit for clarity (rhbz#796526)
  - storage: Support more scaling suffixes (rhbz#796526)
  - xml: Drop unenforced minimum memory limit from RNG (rhbz#796526)
  - xml: Use long long internally, to centralize overflow checks (rhbz#796526)
  - xml: Use better types for memory values (rhbz#796526)
  - xml: Allow scaled memory on input (rhbz#796526)
  - virsh: Add option aliases (rhbz#796526)
  - virsh: Use option aliases (rhbz#796526)
  - virsh: Add command aliases, and rename nodedev-detach (rhbz#796526)
  - virsh: Improve storage unit parsing (rhbz#796526)
  - virsh: Improve memory unit parsing (rhbz#796526)
  - qemuBuildCommandLine: Don't add tlsPort if none set (rhbz#801443)
  - Removed more AMD-specific features from cpu64-rhel* models (rhbz#768450)
  - qemu: Support disk filenames with comma (rhbz#801970)
  - cpustats: Collect VM user and sys times (miss python bindings) (rhbz#800366)
  - cpustats: Report user and sys times (rhbz#800366)
  - qemu: Fix (managed)save and snapshots with host mode CPU (rhbz#801160)
  - qemu: Make block io tuning smarter (rhbz#770683)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-6.el6
changelog:
  - cpu: Add new flag supported by qemu to the cpu definition (rhbz#767364)
  - Added support for AMD Bulldozer CPU (rhbz#767364)
  - graphics: Cleanup port policy (rhbz#801443)
  - qemu: Reverse condition in qemuDomainCheckDiskPresence (rhbz#798938)
  - cpu: Add cpu definition for Intel Sandy Bridge cpu type (rhbz#761005)
  - cpu: Disable tsc-deadline feature not supported in qemu on RHEL 6.3 (rhbz#761005)
  - qemu: Support numad (rhbz#769930)
  - numad: Fix typo and warning (rhbz#769930)
  - qemu: Use scsi-block for lun passthrough instead of scsi-disk (rhbz#782034)
  - util: Make virDomainLeaseDefFree global (rhbz#802851)
  - qemu: Don't 'remove' hostdev objects from domain if operation fails (rhbz#802851)
  - util: Eliminate device object leaks related to virDomain*Remove*() (rhbz#802851)
  - virsh: Fix invalid free (rhbz#803591)
  - qemu: Eliminate memory leak in qemuDomainUpdateDeviceConfig (rhbz#802854)
  - qemu: Support persistent hotplug of <hostdev> devices (rhbz#802856)
  - qemu: Fix segfault when detaching non-existent network device (rhbz#802644)
  - remote: Fix migration leaks (rhbz#798497)
  - virsh: Trim aliases from -h output (rhbz#796526)
  - Fix handling of blkio deviceWeight empty string (rhbz#804028)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-7.el6
changelog:
  - snapshot: Make quiesce a bit safer (rhbz#804210)
  - python: Avoid memory leaks on libvirt_virNodeGetMemoryStats (rhbz#770944)
  - qemu: Use unlimited speed when migrating to file (rhbz#740099)
  - qemu: Add support for domain cleanup callbacks (rhbz#795305)
  - qemu: Avoid dangling migration-in job on shutoff domains (rhbz#795305)
  - qemu: Add connection close callbacks (rhbz#795305)
  - qemu: Make autodestroy utilize connection close callbacks (rhbz#795305)
  - qemu: Avoid dangling migration-out job when client dies (rhbz#795305)
  - python: Avoid memory leaks on libvirt_virNodeGetCPUStats (rhbz#770943)
  - util: Consolidate duplicated error messages in virnetlink.c (rhbz#693842)
  - python: Add virDomainGetCPUStats python binding API (rhbz#800366)
  - snapshot: Add qemu capability for 'transaction' command (rhbz#782457)
  - snapshot: Add atomic create flag (rhbz#782457)
  - snapshot: Make offline qemu snapshots atomic (rhbz#782457)
  - snapshot: Rudimentary qemu support for atomic disk snapshot (rhbz#782457)
  - snapshot: Add support for qemu transaction command (rhbz#782457)
  - snapshot: Wire up qemu transaction command (rhbz#782457)
  - snapshot: Improve qemu handling of reused snapshot targets (rhbz#782457)
  - Clarify virsh freecell manpage entry (rhbz#698521)
  - Add support for event tray moved of removable disks (rhbz#575160)
  - docs: Add documentation for new attribute tray of disk target (rhbz#575160)
  - conf: Parse and for the tray attribute (rhbz#575160)
  - qemu: Do not start with source for removable disks if tray is open (rhbz#575160)
  - qemu: Prohibit setting tray status as open for block type disk (rhbz#575160)
  - qemu: Update tray status while tray moved event is emitted (rhbz#575160)
  - build: Fix incorrect enum declaration (rhbz#575160)
  - spec: Add missed dependancy for numad (rhbz#769930)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-9.el6
changelog:
  - qemu: Avoid entering monitor with locked driver (rhbz#803186)
  - snapshot: Don't pass NULL to QMP command creation (rhbz#807147)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-10.el6
changelog:
  - python: Add new helper functions for python to C conversion (rhbz#807751)
  - python: Make python APIs use these helper functions (rhbz#807751)
  - python: Improve conversion validation (rhbz#807751)
  - qemu_agent: Issue guest-sync prior to every command (rhbz#808527)
  - qemu: Fix memory leak in virDomainGetVcpus (rhbz#808979)
  - qemu: Reflect any memory rounding back to xml (rhbz#808522)
  - conf: Allow fuzz in XML with cur balloon > max (rhbz#808522)
  - qemu: Start nested job in qemuDomainCheckEjectableMedia (rhbz#803186)
  - virsh: Clarify escape sequence (rhbz#808652)
  - virsh: Plug memory leaks on failure path (rhbz#807555)
  - conf: Prevent crash of libvirtd without channel target name (rhbz#808371)
  - qemu: Don't leak temporary list of USB devices (rhbz#808459)
  - qemu: Delete USB devices used by domain on stop (rhbz#808459)
  - qemu: Build activeUsbHostdevs list on process reconnect (rhbz#808459)
  - qemu: Fix virtio+macvtap migration from 6.3 to older hosts (rhbz#806633)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-11.el6
changelog:
  - test: Fix segfault in networkxml2argvtest (rhbz#810100)
  - conf: Plug memory leaks on virDomainDiskDefParseXML (rhbz#575160)
  - qemu_ga: Don't overwrite errors on FSThaw (rhbz#808527)
  - Fix parallel build in docs/ directory (rhbz#810559)
  - qemu: Make migration fail when port profile association fails on the dst host (rhbz#811026)
  - Wire up <loader> to set the QEMU BIOS path (rhbz#811227)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-12.el6
changelog:
  - blockjob: Add qemu capabilities related to block pull jobs (rhbz#811683)
  - blockjob: Add API for async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Optimize JSON event handler lookup (rhbz#811683)
  - blockjob: Wire up qemu async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Allow for fast-finishing job (rhbz#811683)
  - virsh: Minor syntactic cleanups (rhbz#811683)
  - qemu: Use consistent error when qemu binary is too old (rhbz#811683)
  - blockjob: Add virsh blockpull --wait (rhbz#811683)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix mem leak in qemuProcessInitCpuAffinity (rhbz#810157)
  - numad: Convert node list to cpumap before setting affinity (rhbz#810157)
  - numad: Ignore cpuset if placement is auto (rhbz#810157)
  - conf: Do not parse cpuset only if the placement is auto (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-13.el6
changelog:
  - Fix a problem in the patchset, rhbz#811497 one was applied twice in -12
  - qemu, util: On restart of libvirt restart vepa callbacks (rhbz#812430)
  - qemu, util: Fix netlink callback registration for migration (rhbz#812430)
  - util: Only register callbacks for CREATE operations in virnetdevmacvlan.c (rhbz#812430)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-14.el6
changelog:
  - blockjob: Add new API flags (rhbz#638506)
  - blockjob: Add 'blockcopy' to virsh (rhbz#638506)
  - blockjob: Enhance xml to track mirrors across libvirtd restart (rhbz#638506)
  - blockjob: React to active block copy (rhbz#638506)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#638506)
  - blockjob: Return appropriate event and info (rhbz#638506)
  - blockjob: Support pivot operation on cancel (rhbz#638506)
  - blockjob: Make drive-reopen safer (rhbz#638506)
  - blockjob: Implement block copy for qemu (rhbz#638506)
  - blockjob: Allow for existing files (rhbz#638506)
  - blockjob: Allow mirroring under SELinux (rhbz#638506)
  - blockjob: Accommodate RHEL backport names (rhbz#638506)
  - virsh: Avoid strtol (rhbz#813972)
  - conf: Tighten up XML integer parsing (rhbz#813972)
  - snapshot: Fix memory leak on error (rhbz#782457)
  - virsh: Avoid uninitialized memory usage (rhbz#814080)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-15.el6
changelog:
  - qemu: Improve errors related to offline domains (rhbz#816662)
  - blockjob: Check for active vm before checking blockcopy bits (rhbz#816662)
  - qemu: Preserve original error during migration (rhbz#807907)
  - rpc: Discard non-blocking calls only when necessary (rhbz#807907)
  - qemu: Fix detection of failed migration (rhbz#807907)
  - qemu: Avoid bogus error at the end of tunnelled migration (rhbz#807907)
  - qemu: Make sure qemu can access its directory in hugetlbfs (rhbz#815206)
  - virsh: Fix docs for list command (rhbz#814021)
  - virsh: Fix and clarify the --title flag for the list command in man page (rhbz#814021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-16.el6
changelog:
  - qemuOpenFile: Don't force chown on NFS (rhbz#810241)
  - util: Fix crash when starting macvtap interfaces (rhbz#815270)
  - qemu: Fix segfault when host CPU is empty (rhbz#817078)
  - blockjob: Allow speed setting in block copy (rhbz#815791)
  - blockjob: Fix block-stream bandwidth race (rhbz#815791)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-17.el6
changelog:
  - qemu: Don't modify domain on failed blockiotune (rhbz#819014)
  - qemu: Reject blockiotune if qemu too old (rhbz#819014)
  - qemu: Don't use virDomainDefFormat* directly (rhbz#815503)
  - qemu: Emit compatible XML when migrating a domain (rhbz#815503)
  - usb: Create functions to search usb device accurately (rhbz#815755)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#815755)
  - virsh: Avoid heap corruption leading to virsh abort (rhbz#819636)
  - util: Fix libvirtd startup failure due to netlink error (rhbz#816465)
  - util: Allow specifying both src and dst pid in virNetlinkCommand (rhbz#816465)
  - util: Function to get local nl_pid used by netlink event socket (rhbz#816465)
  - util: Set src_pid for virNetlinkCommand when appropriate (rhbz#816465)
  - domain_conf: Add "usbredir" to list of valid spice channels (rhbz#819498)
  - domain_conf: Add "default" to list of valid spice channels (rhbz#819499)
  - snapshot: Allow block devices past cgroup (rhbz#810200)
  - blockjob: Allow block devices past cgroup (rhbz#810200)
  - util: Avoid libvirtd crash in virNetDevTapCreate (rhbz#817234)
  - python: Fix the forward_null error in Python binding codes (rhbz#771021)
  - xen: Fix resource leak in xen driver (rhbz#771021)
  - test: Fix resource leak in test driver (rhbz#771021)
  - node: Fix resource leak in nodeinfo.c (rhbz#771021)
  - virnet: Fix resource leak in virnetlink.c (rhbz#771021)
  - vmx: Fix resource leak (rhbz#771021)
  - qemu: Fix resource leak (rhbz#771021)
  - uuid: Fix possible non-terminated string (rhbz#771021)
  - node_device: Fix possible non-terminated string (rhbz#771021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-18.el6
changelog:
  - numad: Set memory policy from numad advisory nodeset (rhbz#810157)
  - numad: Copy 'placement' of <numatune> to <vcpu> by default (rhbz#810157)
  - numad: Always output 'placement' of <vcpu> (rhbz#810157)
  - qemu: Avoid the memory allocation and freeing (rhbz#810157)
  - numad: Divide cur_balloon by 1024 before passing it to numad (rhbz#810157)
  - numad: Check numactl-devel if compiled with numad support (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.13-1.el6
changelog:
  - first rebase for 6.4 more to come
  - kvm-guest failed to start; double-close bug in libvirt (rhbz#823716)
  - potential to deadlock libvirt on EPIPE (rhbz#827234)
  - fix keepalive issues (rhbz#832081)
  - CPU topology parsing bug on special NUMA platform (rhbz#828729)
  - libvirtd will crash when tight loop of hotplug/unplug PCI device (rhbz#822373)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.10.0-0rc0.el6
changelog:
  - New build based on upstream snapshot 0.10.0-0rc0 (rhbz#836934)
  - Cleanup and rebase of the few RHEL-only patches


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.10.0-1.el6
changelog:
  - New build based on upstream release 0.10.0 (rhbz#836934)
  - agent: add qemuAgentArbitraryCommand() for general qemu agent command
  - Introduce virDomainPinEmulator and virDomainGetEmulatorPinInfo functions
  - network: use firewalld instead of iptables, when available
  - network: make network driver vlan-aware
  - esx: Implement network driver
  - Various LXC improvements
  - Add virDomainGetHostname
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.10.2-1.el6
changelog:
  - New build based on upstream release 0.10.2 (rhbz#836934)
  - network: define new API virNetworkUpdate
  - add support for QEmu sandbox support
  - blockjob: add virDomainBlockCommit
  - New APIs to get/set Node memory parameters
  - new API virConnectListAllSecrets
  - new API virConnectListAllNWFilters
  - new API virConnectListAllNodeDevices
  - new API virConnectListAllInterfaces
  - new API virConnectListAllNetworks
  - new API virStoragePoolListAllVolumes
  - Add PMSUSPENDED life cycle event
  - new API virStorageListAllStoragePools
  - Add per-guest S3/S4 state configuration
  - qemu: Support for Block Device IO Limits
  - a lot of bug fixes, improvements and portability work


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-2.el6
changelog:
  - qemu: Wait for SPICE to migrate (rhbz#836135)
  - lxc: Correctly report active cgroups (rhbz#860907)
  - network: Backend for virNetworkUpdate of interface list (rhbz#844404)
  - Fix start of containers with custom root filesystem (rhbz#861564)
  - Correct checking of virStrcpyStatic() return value (rhbz#864122)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-3.el6
changelog:
  - conf: Rename life cycle actions to event actions (rhbz#832156)
  - conf: Add on_lockfailure event configuration (rhbz#832156)
  - locking: Add const char * parameter to avoid ugly typecasts (rhbz#832156)
  - locking: Pass hypervisor driver name when acquiring locks (rhbz#832156)
  - locking: Add support for lock failure action (rhbz#832156)
  - locking: Implement lock failure action in sanlock driver (rhbz#832156)
  - conf: Add support for startupPolicy for USB devices (rhbz#843560)
  - qemu: Introduce qemuFindHostdevUSBDevice (rhbz#843560)
  - qemu: Add option to treat missing USB devices as success (rhbz#843560)
  - qemu: Implement startupPolicy for USB passed through devices (rhbz#843560)
  - Add MIGRATABLE flag for virDomainGetXMLDesc (rhbz#843560)
  - qemu: Make save/restore with USB devices usable (rhbz#843560)
  - conf: Mark missing optional USB devices in domain XML (rhbz#843560)
  - security: Also parse user/group names instead of just IDs for DAC labels (rhbz#860519)
  - doc: Update description about security labels on formatdomain.html (rhbz#860519)
  - util: Extend virGetUserID and virGetGroupID to support names and IDs (rhbz#860519)
  - security: Update user and group parsing in security_dac.c (rhbz#860519)
  - doc: Update description about user/group in qemu.conf (rhbz#860519)
  - Fix kvm_pv_eoi with kvmclock (rhbz#860971)
  - Change qemuSetSchedularParameters to use AFFECT_CURRENT (rhbz#852260)
  - Fix handling of itanium arch name in QEMU driver (rhbz#863115)
  - Add a qemu capabilities cache manager (rhbz#863115)
  - Switch over to use cache for building QEMU capabilities (rhbz#863115)
  - Remove probing of flags when launching QEMU guests (rhbz#863115)
  - Remove probing of machine types when canonicalizing XML (rhbz#863115)
  - Remove probing of CPU models when launching QEMU guests (rhbz#863115)
  - Make qemuCapsProbeMachineTypes & qemuCapsProbeCPUModels static (rhbz#863115)
  - Remove xenner support (rhbz#863115)
  - Refactor guest init to support qemu-system-i386 binary too (rhbz#863115)
  - Add a qemuMonitorGetVersion() method for QMP query-version command (rhbz#863115)
  - Add a qemuMonitorGetMachines() method for QMP query-machines command (rhbz#863115)
  - Add a qemuMonitorGetCPUDefinitions method for QMP query-cpu-definitions command (rhbz#863115)
  - Add a qemuMonitorGetCommands() method for QMP query-commands command (rhbz#863115)
  - Add a qemuMonitorGetEvents() method for QMP query-events command (rhbz#863115)
  - Add a qemuMonitorGetObjectTypes() method for QMP qom-list-types command (rhbz#863115)
  - Add a qemuMonitorGetObjectProps() method for QMP device-list-properties command (rhbz#863115)
  - Add a qemuMonitorGetTargetArch() method for QMP query-target command (rhbz#863115)
  - Remove some unused includes in QEMU code (rhbz#863115)
  - Move command/event capabilities detection out of QEMU monitor code (rhbz#863115)
  - Fix regression starting QEMU instances without query-events (rhbz#863115)
  - Refactor qemuCapsParseDeviceStr to work from data tables (rhbz#863115)
  - Fix QEMU test with 1.2.0 help output (rhbz#863115)
  - Ignore error from query-cpu-definitions (rhbz#863115)
  - Fix potential deadlock when agent is closed (rhbz#859712)
  - Fix (rare) deadlock in QEMU monitor callbacks (rhbz#859712)
  - Convert virLXCMonitor to use virObject (rhbz#864336)
  - Remove pointless virLXCProcessMonitorDestroy method (rhbz#864336)
  - Simplify some redundant locking while unref'ing objects (rhbz#859712)
  - Fix deadlock in handling EOF in LXC monitor (rhbz#864336)
  - Avoid bogus I/O event errors when closing the QEMU monitor (rhbz#859712)
  - qemu: Fix parsing of x86 CPU models (rhbz#864097)
  - python: Keep consistent handling of Python integer conversion (rhbz#816609)
  - esx: Fix and improve esxListAllDomains function (rhbz#864384)
  - virsh: Block SIGINT while getting BlockJobInfo (rhbz#845448)
  - spec: Add support for libssh2 transport (rhbz#513363)
  - Revert "Use XDG Base Directories instead of storing in home directory" (rhbz#859331)
  - doc: Sort out the relationship between <vcpu>, <vcpupin>, and <emulatorpin> (rhbz#855218)
  - conf: Ignore vcpupin for not onlined vcpus when parsing (rhbz#855218)
  - conf: Initialize the pinning policy for vcpus (rhbz#855218)
  - qemu: Create or remove cgroup when doing vcpu hotpluging (rhbz#857013)
  - qemu: Initialize cpuset for hotplugged vcpu as def->cpuset (rhbz#855218)
  - conf: Ignore emulatorpin if vcpu placement is auto (rhbz#855218)
  - qemu: Ignore def->cpumask if emulatorpin is specified (rhbz#855218)
  - Avoid straying </cpuset> (rhbz#855218)
  - conf: Fix virDevicePCIAddressEqual args (rhbz#805071)
  - conf: VirDomainDeviceInfoCopy utility function (rhbz#805071)
  - qemu: Reorganize qemuDomainChangeNet and qemuDomainChangeNetBridge (rhbz#805071)
  - Add support for SUSPEND_DISK event (rhbz#839661)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-4.el6
changelog:
  - node_memory: Add new parameter field to tune the new sysfs knob (rhbz#840113)
  - daemon: Fix removing abstract namespaces (rhbz#859331)
  - tests: Fix domain-events python test (rhbz#839661)
  - conf: Fix crash with cleanup (rhbz#866288)
  - spec: Add runtime requirement for libssh2 (rhbz#866508)
  - spec: Require newer sanlock on recent distros (rhbz#832156)
  - spec: Require newer sanlock on recent distros 2 (rhbz#832156)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-5.el6
changelog:
  - qemu: Clear async job when p2p migration fails early (rhbz#867412)
  - qemu: Pin the emulator when only cpuset is specified (rhbz#867372)
  - qemu: Correctly wait for spice to migrate (rhbz#867724)
  - qemu: Fixed default machine detection in qemuCapsParseMachineTypesStr (rhbz#867764)
  - conf: Make tri-state feature options more universal (rhbz#864606)
  - conf: Add support for HyperV Enlightenment features (rhbz#864606)
  - qemu: Add support for HyperV Enlightenment feature "relaxed" (rhbz#864606)
  - network: Set to NULL after virNetworkDefFree() (rhbz#866364)
  - qemu: Always format CPU topology (rhbz#866999)
  - qemu: Don't fail without emulatorpin or cpumask (rhbz#867372)
  - qemu: Allow migration with host USB devices (rhbz#843560)
  - qemu: Do not require hostuuid in migration cookie (rhbz#863059)
  - network: Free/null newDef if network fails to start (rhbz#866364)
  - migrate: v2: Use VIR_DOMAIN_XML_MIGRATABLE when available (rhbz#856864)
  - qemu: Avoid holding the driver lock in trivial snapshot API's (rhbz#772088)
  - storage: List more file types (rhbz#772088)
  - storage: Treat 'aio' like 'raw' at parse time (rhbz#772088)
  - storage: Match RNG to supported driver types (rhbz#772088)
  - storage: Use enum for default driver type (rhbz#772088)
  - storage: Use enum for disk driver type (rhbz#772088)
  - storage: Use enum for snapshot driver type (rhbz#772088)
  - storage: Don't probe non-files (rhbz#772088)
  - storage: Get entire metadata chain in one call (rhbz#772088)
  - storage: Don't require caller to pre-allocate metadata struct (rhbz#772088)
  - storage: Remember relative names in backing chain (rhbz#772088)
  - storage: Make it easier to find file within chain (rhbz#772088)
  - storage: Cache backing chain while qemu domain is live (rhbz#772088)
  - storage: Use cache to walk backing chain (rhbz#772088)
  - blockjob: Remove unused parameters after previous patch (rhbz#772088)
  - blockjob: Manage qemu block-commit monitor command (rhbz#772088)
  - blockjob: Wire up online qemu block-commit (rhbz#772088)
  - blockjob: Implement shallow commit flag in qemu (rhbz#772088)
  - blockjob: Refactor qemu disk chain permission grants (rhbz#772088)
  - blockjob: Properly label disks for qemu block-commit (rhbz#772088)
  - blockjob: Avoid segv on early error (rhbz#772088)
  - blockjob: Accommodate early RHEL backport naming (rhbz#772088)
  - virsh: Fix segfault of snapshot-list (rhbz#837544)
  - network: Always create dnsmasq hosts and addnhosts files, even if empty (rhbz#868389)
  - network: Don't allow multiple default portgroups (rhbz#868483)
  - selinux: Use raw contexts (rhbz#851981)
  - selinux: Add security selinux function to label tapfd (rhbz#851981)
  - selinux: Use raw contexts 2 (rhbz#851981)
  - selinux: Fix wrong tapfd relablling (rhbz#851981)
  - selinux: Remove unused variables in socket labelling (rhbz#851981)
  - selinux: Relabel tapfd in qemuPhysIfaceConnect (rhbz#851981)
  - storage: Let format probing work on root-squash NFS (rhbz#856247)
  - snapshot: Sanity check when reusing file for snapshot (rhbz#856247)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#856247)
  - blockjob: React to active block copy (rhbz#856247)
  - blockjob: Return appropriate event and info (rhbz#856247)
  - blockjob: Support pivot operation on cancel (rhbz#856247)
  - blockjob: Make drive-reopen safer (rhbz#856247)
  - blockjob: Implement block copy for qemu (rhbz#856247)
  - blockjob: Allow for existing files in block-copy (rhbz#856247)
  - blockjob: Allow mirroring under SELinux and cgroup (rhbz#856247)
  - blockjob: Relabel entire existing chain (rhbz#856247)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-6.el6
changelog:
  - xml: Omit domain name from comment if it contains double hyphen (rhbz#868692)
  - cpu: Add recently added cpu feature flags. (rhbz#797283)
  - esx: Update version checks for vSphere 5.1 (rhbz#865670)
  - qemu: Add helper to prepare cpumap for affinity setting (rhbz#869096)
  - qemu: Keep the affinity when creating cgroup for emulator thread (rhbz#869096)
  - qemu: Prohibit chaning affinity of domain process if placement is 'auto' (rhbz#870099)
  - network: Fix networkValidate check for default portgroup and vlan (rhbz#868483)
  - qemu: Fix attach/detach of netdevs with matching mac addrs (rhbz#862515)
  - snapshot: Improve snapshot-list error message (rhbz#869100)
  - virsh: Remove --flags from nodesuspend (rhbz#869508)
  - virsh: Fix POD syntax (rhbz#870273)
  - xml: Print uuids in the warning (rhbz#868692)
  - blockjob: Support both RHEL and upstream qemu drive-mirror (rhbz#871055)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-7.el6
changelog:
  - sanlock: Introduce 'user' and 'group' conf variables (rhbz#820173)
  - esx: Fix connection to ESX 5.1 (rhbz#865670)
  - cpu: Fix definition of flag smap (rhbz#797283)
  - util: Do a better job of matching up pids with their binaries (rhbz#871201)
  - qemu: Fix EmulatorPinInfo without emulatorpin (rhbz#871312)
  - build: Fix RPM build for non-x86 platforms (rhbz#820173)
  - qemu: Report errors from iohelper (rhbz#866369)
  - build: Fix linking with systemtap probes (rhbz#866369)
  - iohelper: Fdatasync() at the end (rhbz#866369)
  - net-update docs: S/domain/network/ (rhbz#872104)
  - cpu: Add newly added cpu flags (rhbz#838127)
  - cpu: Add AMD Opteron G5 cpu model (rhbz#838127)
  - cpu: Add Intel Haswell cpu model (rhbz#843087)
  - snapshot: New XML for external system checkpoint (rhbz#638512)
  - snapshot: Improve disk align checking (rhbz#638512)
  - snapshot: Populate new XML info for qemu snapshots (rhbz#638512)
  - snapshot: Merge pre-snapshot checks (rhbz#638512)
  - qemu: Fix possible race when pausing guest (rhbz#638512)
  - qemu: Clean up snapshot retrieval to use the new helper (rhbz#638512)
  - qemu: Split out domain memory saving code to allow reuse (rhbz#638512)
  - snapshot: Add flag to enable creating checkpoints in live state (rhbz#638512)
  - snapshot: qemu: Add async job type for snapshots (rhbz#638512)
  - snapshot: qemu: Rename qemuDomainSnapshotCreateActive (rhbz#638512)
  - snapshot: qemu: Add support for external checkpoints (rhbz#638512)
  - snapshot: qemu: Remove restrictions preventing external checkpoints (rhbz#638512)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.10.2-8.el6
changelog:
  - iohelper: Don't report errors on special FDs (rhbz#866369)
  - esx: Yet another connection fix for 5.1 (rhbz#873538)
  - qemu: Don't corrupt pointer in qemuDomainSaveMemory() (rhbz#873537)
  - build: Place attributes in correct location (rhbz#873934)
  - Introduce new VIR_DOMAIN_EVENT_SUSPENDED_API_ERROR event (rhbz#866388)
  - qemu: Emit event if 'cont' fails (rhbz#866388)
  - virsh: Make ,, escape parsing common (rhbz#874171)
  - virsh: Add snapshot-create-as memspec support (rhbz#874171)
  - qemu: Fix domain ID numbering race condition (rhbz#874330)
  - qemu: Allow migration to be cancelled at prepare phase (rhbz#873792)
  - AbortJob: Fix documentation (rhbz#873792)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-9
changelog:
  - util: Improve error reporting from absolutePathFromBaseFile helper (rhbz#874860)
  - storage: Fix broken backing chain (rhbz#874860)
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#874050)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#874050)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#874050)
  - virsh: save: Report an error if XML file can't be read (rhbz#876868)
  - virsh: Fix uninitialized variable in cmdSnapshotEdit (rhbz#877303)
  - qemu: Allow larger discrepency between memory & currentMemory in domain xml (rhbz#873134)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-10
changelog:
  - Add note about numeric domain names to manpage (rhbz#824253)
  - Use virNetServerRun instead of custom main loop (rhbz#867246)
  - qemu: Fix RBD attach regression (rhbz#878862)
  - qemu: Stop recursive detection of image chains when an image is missing (rhbz#878862)
  - Fix exiting of libvirt_lxc program on container quit (rhbz#879360)
  - snapshot: qemu: Add support for external inactive snapshots (rhbz#876816)
  - conf: Fix private symbols exported by files in conf (rhbz#876816)
  - snapshot: qemu: Fix detection of external snapshots when deleting (rhbz#876816)
  - snapshot: Require user to supply external memory file name (rhbz#876816)
  - snapshot: Add two more filter sets to API (rhbz#876817)
  - snapshot: Add virsh back-compat support for new filters (rhbz#876817)
  - snapshot: Implement new filter sets (rhbz#876817)
  - snapshot: Expose location through virsh snapshot-info (rhbz#876817)
  - sanlock: Retry after EINPROGRESS (rhbz#820173)
  - storage: Fix logical volume cloning (rhbz#879780)
  - cpu: Add Intel Haswell cpu model (fix previous downstream definition) (rhbz#879282)
  - virsh: Report error when taking a snapshot with empty --memspec argument (rhbz#879130)
  - lxc: Don't crash if no security driver is specified in libvirt_lxc (rhbz#880064)
  - lxc: Avoid segfault of libvirt_lxc helper on early cleanup paths (rhbz#880064)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-11
changelog:
  - Fix uninitialized variable in virLXCControllerSetupDevPTS (rhbz#880064)
  - storage: Fix device detach regression with cgroup ACLs (rhbz#876828)
  - storage: Fix bug of fs pool destroying (rhbz#878400)
  - qemu: Fix a crash when save file can't be opened (rhbz#880919)
  - bitmap: Fix typo to use UL type of integer constant in virBitmapIsAllSet (rhbz#876415)
  - virsh: Rewrite cmdDomDisplay (rhbz#878779)
  - network: Fix crash when portgroup has no name (rhbz#879473)
  - util: Capabilities detection for dnsmasq (rhbz#882265)
  - util: New virSocketAddrIsPrivate function (rhbz#882265)
  - network: Use dnsmasq --bind-dynamic when available (rhbz#882265)
  - storage: Fix scsi detach regression with cgroup ACLs (rhbz#876828)
  - libssh2_session: Support DSS keys as well (rhbz#878376)
  - virsh: Fix error messages in iface-bridge (rhbz#878376)
  - virsh: Check the return value of virStoragePoolGetAutostart (rhbz#878376)
  - conf: Check the return value of virXPathNodeSet (rhbz#878376)
  - conf: snapshot: Check return value of virDomainSnapshotObjListNum (rhbz#878376)
  - util: Fix virBitmap allocation in virProcessInfoGetAffinity (rhbz#878376)
  - virsh: Use correct sizeof when allocating cpumap (rhbz#878376)
  - rpc: Don't destroy xdr before creating it in virNetMessageEncodeHeader (rhbz#878376)
  - virsh: Do timing even for unusable connections (rhbz#878376)
  - conf: Fix uninitialized variable in virDomainListSnapshots (rhbz#878376)
  - Fix error handling in virSecurityManagerGetMountOptions (rhbz#878376)
  - conf: Prevent crash with no uuid in cephx auth secret (rhbz#878376)
  - conf: Fix virDomainNetGetActualDirect*() and BridgeName() (rhbz#881480)
  - virsh: Report errors if arguments of the schedinfo command are incorrect (rhbz#882915)
  - systemd: Require dbus service (rhbz#830201)
  - spec: Require dbus-daemon when using libvirtd in Fedora (rhbz#830201)
  - qemu: Don't free PCI device if adding it to activePciHostdevs fails (rhbz#877095)
  - util: Slightly refactor PCI list functions (rhbz#877095)
  - qemu: Fix memory (and FD) leak on PCI device detach (rhbz#877095)
  - util: Do not keep PCI device config file open (rhbz#877095)
  - node_memory: Improve the docs (rhbz#872656)
  - node_memory: Do not fail if there is parameter unsupported (rhbz#872656)
  - node_memory: Fix bug of node_memory_tune (rhbz#872656)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-12
changelog:
  - qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
  - remote: Avoid the thread race condition (rhbz#866524)
  - storage: Error out earlier if the volume target path already exists (rhbz#832302)
  - dnsmasq: Fix parsing of the version number (rhbz#885727)
  - qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
  - examples: Fix balloon event callback (rhbz#884650)
  - util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
  - util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
  - util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
  - util: Fix warning message in previous patch (rhbz#883832)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-13
changelog:
  - network: Prevent dnsmasq from listening on localhost (rhbz#886821)
  - sanlock: Re-add lockspace unconditionally (rhbz#820173)
  - Fix "virsh create" example (rhbz#887187)
  - docs: Fix some typos in examples (rhbz#887187)
  - network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-14
changelog:
  - util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
  - util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
  - util: Fix botched check for new netlink request filters (rhbz#889319)
  - blockjob: Fix memleak that prevented block pivot (rhbz#888426)
  - sanlock: Chown lease files as well (rhbz#820173)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-15
changelog:
  - snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
  - snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
  - snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
  - snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
  - util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
  - qemu: Add a hash table for the shared disks (rhbz#878578)
  - docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
  - conf: Parse and format the new XML (rhbz#878578)
  - qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
  - qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
  - qemu: Relax hard RSS limit (rhbz#891653)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-16
changelog:
  - qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
  - Add RESUME event listener to qemu monitor. (rhbz#894085)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-17
changelog:
  - storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
  - qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
  - qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18
changelog:
  - rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
  - spec: Disable libssh2 support (rhbz#513363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-19
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#888503)
  - schema: Make the cpuset type reusable across schema files (rhbz#888503)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#888503)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#888503)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#888503)
  - capabilities: Add additional data to the NUMA topology info (rhbz#888503)
  - test: Add support for thread and core information for the test driver (rhbz#888503)
  - xen: Initialize variable before using (rhbz#888503)
  - xen: Actually fix the uninitialized variable (rhbz#888503)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913244)
  - qemu_agent: Ignore expected EOFs (rhbz#892079)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#882077)
  - qemu: Destroy domain on decompression binary error (rhbz#894723)
  - qemu: Run lzop with '--ignore-warn' (rhbz#894723)
  - Don't ignore return value of qemuProcessKill (rhbz#903238)
  - Fix race condition when destroying guests (rhbz#903238)
  - Log warning if storage magic matches, but version does not (rhbz#903248)
  - Add lots of debugging to storage file probing code (rhbz#903248)
  - Fix probing of QED file format (rhbz#903248)
  - util: Add virendian.h macros (rhbz#903248)
  - util: Use new virendian.h macros (rhbz#903248)
  - storage: Rearrange functions (rhbz#903248)
  - storage: Prepare for refactoring (rhbz#903248)
  - storage: Refactor metadata lookup (rhbz#903248)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#903248)
  - storage: Test backing chain traversal (rhbz#903248)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#896013)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#895882)
  - qemu: Add checking in helpers for sgio setting (rhbz#908073)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#908073)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#908073)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#908073)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#908073)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#908073)
  - qemu: Fix the memory leak (rhbz#908073)
  - Fix crash changing CDROM media (rhbz#908073)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#908073)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#914677)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#896604)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#896604)
  - qemu: Fix QMP detection of QXL graphics (rhbz#896604)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#896604)
  - conf: Add optional attribte primary to video <model> element (rhbz#896604)
  - qemu: Use newer -device video device in qemu commandline (rhbz#896604)
  - tests: Add one -device video device testcase (rhbz#896604)
  - qemu: Detect VGA_QXL capability correctly (rhbz#896604)
  - qemu: Support ram bar size for qxl devices (rhbz#896604)
  - conf: Don't leak 'primary' video property on error (rhbz#896604)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#912179)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#912179)
  - storage: Cleanup logical volume creation code (rhbz#912179)
  - docs: Clarify semantics of sparse storage volumes (rhbz#912179)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#906299)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#906299)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#906299)
  - locking: Resolve resource leaks on non error path (rhbz#906299)
  - selinux: Resolve resource leak using the default disk label (rhbz#906299)
  - storage: Resolve resource leaks with cmd processing (rhbz#906299)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#906299)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#906299)
  - storage: Need to add virCommandFree() (rhbz#906299)
  - qemu: Fix startupPolicy regression (rhbz#896013)
  - util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#923963)
  - security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#923946)
  - security: Don't add seclabel of type none if there's already a seclabel (rhbz#923946)
  - libvirt_private.syms: Correctly export seclabel APIs (rhbz#923946)
  - security_manager.c: Append seclabel iff generated (rhbz#923946)
  - rpc: Fix client crash when server drops connection (rhbz#921538)
  - storage: Fix volume cloning for logical volume. (rhbz#948678)
  - qemu: Allow migration over IPv6 (rhbz#846013)
  - qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#846013)
  - remote: Don't call NULL closeFreeCallback (rhbz#911609)
  - libvirt: Increase connection reference count for callbacks (rhbz#911609)
  - virsh: Unregister the connection close notifier upon termination (rhbz#911609)
  - virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#911609)
  - virsh: Register and unregister the close callback also in cmdConnect (rhbz#911609)
  - rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#911609)
  - tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951227)
  - Avoid use of free'd memory in auto destroy callback (rhbz#950286)
  - Fix crash in QEMU auto-destroy with transient guests (rhbz#950286)
  - daemon: Fix leak after listing volumes (CVE-2013-1962)
  - Don't try to add non-existant devices to ACL (rhbz#922153)
  - Avoid spamming logs with cgroups warnings (rhbz#922153)
  - audit: Properly encode device path in cgroup audit (rhbz#922203)
  - qemu: Set correct migrate host in client_migrate_info (rhbz#920441)
  - qemu: Fix crash in migration of graphics-less guests. (rhbz#920441)
  - Fix F_DUPFD_CLOEXEC operation args (rhbz#961034)
  - cgroup: Be robust against cgroup movement races (rhbz#903433)
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#920441)
  - qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#920441)
  - virSocketAddrIsWildcard: Use IN6_IS_ADDR_UNSPECIFIED correctly (rhbz#920441)
  - libvirt: lxc: Don't mkdir when selinux is disabled (rhbz#915485)
  - Don't mount selinux fs in LXC if selinux is disabled (rhbz#915485)
  - virsh: Don't print --(null) in vol-name and vol-pool (rhbz#924571)
  - virsh: Fix docs for "virsh setmaxmem" (rhbz#924648)
  - qemu: Remove managed save flag from VM when starting with --force-boot (rhbz#917510)
  - qemu: Don't update count of vCPUs if hot-unplug has failed (rhbz#895424)
  - conf: net: Fix deadlock if assignment of network def fails (rhbz#921777)
  - RPC: Support up to 16384 cpus on the host and 4096 in the guest (rhbz#960683)
  - conf: Don't fail to parse <boot> when parsing a single device (rhbz#895294)
  - conf: Allow for non-contiguous device boot orders (rhbz#889961)
  - qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976401)
  - build: Fix build with -Werror (rhbz#976401)
  - qemuDomainBlockStatsFlags: Guard disk lookup with a domain job (rhbz#916315)
  - qemu: Don't fail to shutdown domains with unresponsive agent (rhbz#889635)
  - qemu: Wrap controllers code into dummy loop (rhbz#870003)
  - qemu: Add controllers in specified order (rhbz#870003)
  - tests: Add test for controller order (rhbz#870003)
  - bandwidth: Attach sfq to leaf node (rhbz#895340)
  - bandwidth: Create hierarchical shaping classes (rhbz#895340)
  - remote: Forbid default "/session" connections when using ssh transport (rhbz#847822)
  - remote: Fix client crash when URI path is empty when using ssh (rhbz#847822)
  - udev: Fix crash in libudev logging (rhbz#971904)
  - iscsi: Don't leak portal string when starting a pool (rhbz#975392)
  - storage: Avoid double virCommandFree in virStorageBackendLogicalDeletePool (rhbz#921387)
  - manual: Fix copy-paste errors (rhbz#923613)
  - esx: Support virtualHW version 9 (rhbz#955575)
  - manual: Add info about migrateuri in virsh manual (rhbz#878765)
  - conf: Fix cpumask leak in virDomainDefFree (rhbz#977430)
  - qemu: Avoid leaking uri in qemuMigrationPrepareDirect (rhbz#977961)
  - Document that runtime changes may be lost after S4 suspend (rhbz#872419)
  - virsh iface-bridge: Ignore delay if stp is turned off (rhbz#892403)
  - virsh: Obey pool-or-uuid spec when creating volumes (rhbz#970495)
  - Add method for checking if a string is (probably) a log message (rhbz#954248)
  - Convert QEMU driver to use virLogProbablyLogMessage (rhbz#954248)
  - util: Escapes special characters in VIR_LOG_REGEX (rhbz#954248)
  - qemu: Move QEMU log reading into a separate function (rhbz#954248)
  - qemu: Ignore libvirt logs when reading QEMU error output (rhbz#954248)
  - logging: Make log regexp more compact (and readable) (rhbz#954248)
  - qemu: Do not report unsafe migration for local files (rhbz#913363)
  - Plug leak in virCgroupMoveTask (rhbz#978352)
  - Fix invalid read in virCgroupGetValueStr (rhbz#978356)
  - pci: Initialize virtual_functions array pointer to avoid segfault (rhbz#980339)
  - Node device driver: update driver name during dumpxml (rhbz#979330)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-20
changelog:
  - qemu: Don't force port=0 for SPICE (rhbz#975751)
  - qemu: Refactor graphics code to not hardcode a single display (rhbz#975751)
  - qemu: Graphics support for simultaneous one of each sdl, vnc, spice (rhbz#975751)
  - qemu: Don't miss errors when changing graphics passwords (rhbz#975751)
  - qemu: Allow seamless migration for domains with multiple graphics (rhbz#975751)
  - qemu_migration: Move waiting for SPICE migration (rhbz#920205)
  - util: Refactor iptables command construction into multiple steps (rhbz#851455)
  - net: Support set public ip range for forward mode nat (rhbz#851455)
  - net: Add support for specifying port range for forward mode nat (rhbz#851455)
  - qemu_migrate: Dispose listen address if set from config (rhbz#971485)
  - qemu: Remove maximum cpu limit when setting processor count using the API (rhbz#855296)
  - qemu_agent: Introduce helpers for agent based CPU hot(un)plug (rhbz#924400)
  - virsh-domain: Refactor cmdVcpucount and fix output on inactive domains (rhbz#924400)
  - API: Introduce VIR_DOMAIN_VCPU_AGENT, for agent based CPU hot(un)plug (rhbz#924400)
  - qemu: Implement request of vCPU state using the guest agent (rhbz#924400)
  - qemu: Implement support for VIR_DOMAIN_VCPU_AGENT in qemuDomainSetVcpusFlags (rhbz#924400)
  - qemuDomainGetVcpusFlags: Initialize ncpuinfo (rhbz#924400)
  - Fix commit 29c1e913e459058c12d02b3f4b767b3dd428a498 (rhbz#924400)
  - qemu: Make qemuMigrationIsAllowed more reusable (rhbz#972675)
  - qemu: Cancel migration if guest encoutners I/O error while migrating (rhbz#972675)
  - qemu: Forbid migration of machines with I/O errors (rhbz#972675)
  - migration: Make erroring out on I/O error controllable by flag (rhbz#972675)
  - migration: Don't propagate VIR_MIGRATE_ABORT_ON_ERROR (rhbz#972675)
  - Paused domain should remain paused after migration (rhbz#972675)
  - qemu: New vnc display sharing policy caps flag (rhbz#803602)
  - conf: Add 'sharePolicy' attribute to graphics element for vnc (rhbz#803602)
  - qemu: Add ', share=<policy>' to qemu commandline (rhbz#803602)
  - virsh: Distinguish errors between missing argument and wrong option (rhbz#924596)
  - virsh: Fix incorrect argument errors for long options (rhbz#924596)
  - virsh: Resolve Coverity 'MISSING_BREAK' (rhbz#924596)
  - virnetdev: Need to initialize 'pciConfigAddr' (rhbz#980339)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961)
  - sec_manager: Refuse to start domain with unsupported seclabel (rhbz#947387)
  - usb: Don't spoil decimal addresses (rhbz#981503)
  - storage: Return -1 when fs pool can't be mounted (rhbz#983539)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-21
changelog:
  - conf: Avoid NULL deref for pmsuspended domain state (rhbz#822306)
  - libvirt: Define domain crash event types (rhbz#822306)
  - qemu: Refactor processWatchdogEvent (rhbz#822306)
  - qemu: Expose qemuProcessShutdownOrReboot() (rhbz#822306)
  - qemu: Implement 'oncrash' events when guest panicked (rhbz#822306)
  - qemu: Implement 'oncrash' coredump events when guest panicked (rhbz#822306)
  - conf: Fix a memory leak when parsing nat port XML nodes (rhbz#851455)
  - security_manager: Fix comparison (rhbz#984793)
  - qemu: Prevent crash of libvirtd without guest agent configuration (rhbz#984821)
  - qemu: Fix double free of returned JSON array in qemuAgentGetVCPUs() (rhbz#984821)
  - qemu_agent: Add support for appending arrays to commands (rhbz#924400)
  - Add support for locking domain's memory pages (rhbz#947118)
  - qemu: Implement support for locking domain's memory pages (rhbz#947118)
  - qemu: Check for -realtime mlock=on|off support (rhbz#947118)
  - qemu: Move memory limit computation to a reusable function (rhbz#947118)
  - util: New virCommandSetMax(MemLock|Processes|Files) (rhbz#947118)
  - qemu: Set RLIMIT_MEMLOCK when memoryBacking/locked is used (rhbz#947118)
  - Add Gluster protocol as supported network disk backend (rhbz#849796)
  - qemu: Add support for gluster protocol based network storage backend. (rhbz#849796)
  - tests: Add tests for gluster protocol based network disks support (rhbz#849796)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-22
changelog:
  - virsh: Fix change-media bug on disk block type (rhbz#923053)
  - Fix patches for multiple graphics and spice migration (rhbz#975751)
  - Revert "qemu: Remove maximum cpu limit when setting processor count using the API" (rhbz#855296)
  - Remove VIR_DOMAIN_SHUTDOWN_CRASHED from public API (rhbz#822306)
  - Rename VIR_DOMAIN_PAUSED_GUEST_PANICKED to VIR_DOMAIN_PAUSED_CRASHED (rhbz#822306)
  - Improve LXC startup error reporting (rhbz#903092)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#928661)
  - util: Improve user lookup helper (rhbz#964359)
  - util: Add virGetGroupList (rhbz#964359)
  - util: Make virSetUIDGID async-signal-safe (rhbz#964359)
  - Fix potential deadlock across fork() in QEMU driver (rhbz#964359)
  - security: Framework for driver PreFork handler (rhbz#964359)
  - security_dac: Compute supplemental groups before fork (rhbz#964359)
  - security: Fix deadlock with prefork (rhbz#964359)
  - Split TLS test into two separate tests (rhbz#975201)
  - Avoid re-generating certs every time (rhbz#975201)
  - Change data passed into TLS test cases (rhbz#975201)
  - Fix validation of CA certificate chains (rhbz#975201)
  - Fix parallel runs of TLS test suites (rhbz#975201)
  - tests: Fix parallel runs of TLS test suites (rhbz#975201)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-23
changelog:
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#975201)
  - Fix qemuProcessReadLog with non-zero offset (rhbz#991334)
  - virSecurityManagerGenLabel: Skip seclabels without model (rhbz#997818)
  - bitmap: Add virBitmapCountBits (rhbz#997367)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997367)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997367)
  - network: Allow <vlan> in type='hostdev' networks (rhbz#999107)
  - python: Fix bindings that don't raise an exception (rhbz#912170)
  - storage: Update pool metadata after adding/removing/resizing volume (rhbz#965442)
  - storage: Fix coverity warning (rhbz#965442)
  - storage: Fix the use-after-free memory bug (rhbz#965442)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#928638)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-24
changelog:
  - security: Provide supplemental groups even when parsing label (rhbz#964359)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1000973)
  - virsh: Correct DESCRIPTION for virsh help blockcopy (rhbz#1002790)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004365)
  - build: More workarounds for if_bridge.h (rhbz#1002735)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-25
changelog:
  - migration: Do not restore labels on failed migration (rhbz#895826)
  - qemu: Use default machine type if missing it in qemu command line (rhbz#995312)
  - qemu: Don't leak vm on failure (rhbz#995312)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006710)
  - tests: Files named '.*-invalid.xml' should fail validation (rhbz#1006710)
  - tests: Use portable shell code (rhbz#1006710)
  - Add test for the nodemask double free crash (rhbz#1006710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-26
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - Introduce APIs for splitting/joining strings (rhbz#1006266)
  - Rename virKillProcess to virProcessKill (rhbz#1006266)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006266)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006266)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006266)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006266)
  - Include process start time when doing polkit checks (rhbz#1006266)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-28
changelog:
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1011981)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1013758)
  - docs: Discourage users to set hard_limit (rhbz#1013758)
  - docs: Clean 09adfdc62de2b up (rhbz#1013758)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1013758)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1013758)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014198)
  - qemu: Generate correct name for hostdev network devices (rhbz#1001881)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-30
changelog:
  - Fix race in starting transient VMs (rhbz#1022924)
  - qemuDomainDestroyFlags: Don't allow @vm to disappear while executing API (rhbz#1030736)
  - python: return dictionary without value in case of no blockjob (rhbz#999454)
  - remote: fix regression in event deregistration (rhbz#1020372)
  - Add virtio-scsi to fallback models of scsi controller (rhbz#1014943)
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1047659)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1043069)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)
  - Block info query: Add check for transient domain (rhbz#1040507)
  - network: only prevent forwarding of DNS requests for unqualified names (rhbz#1037741)
  - network: change default of forwardPlainNames to 'yes' (rhbz#1037741)
  - sanlock: Truncate domain names longer than SANLK_NAME_LEN (rhbz#1060557)
  - Remove contiguous CPU indexes assumption (rhbz#1066473)
  - qemu: monitor: Fix error message and comment when getting cpu info (rhbz#1066473)
  - qemu: monitor: Filter out thread ids of CPUS that were unplugged (rhbz#1066473)
  - qemu: monitor: Fix invalid parentheses (rhbz#1076719)
  - virNetClientSetTLSSession: Restore original signal mask (rhbz#1078589)
  - spec: Switch to "git am" for applying patches (rhbz#1076719)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-31
changelog:
  - doc: schema: Add basic documentation for the virtual RNG device support (rhbz#786408)
  - conf: Add support for RNG device configuration in XML (rhbz#786408)
  - conf: Add RNG device ABI compatibility check (rhbz#786408)
  - qemu: Implement support for default 'random' backend for virtio-rng (rhbz#786408)
  - qemu: Implement support for EGD backend for virtio-rng (rhbz#786408)
  - docs: domain: /dev/urandom isn't a valid rng patch (rhbz#786408)
  - tests: Add tests for virtio-rng device handling (rhbz#786408)
  - docs: Fix attribute name for virtio-rng backend (rhbz#786408)
  - rng: restrict passthrough names to known-good files (rhbz#786408)
  - Resolve valgrind error (rhbz#786408)
  - Fix crash parsing RNG device specification (rhbz#786408)
  - rng: allow default device in RNG grammar (rhbz#786408)
  - virtio-rng: Add rate limiting options for virtio-RNG (rhbz#786408)
  - qemu_caps: Enable virtio-rng for RHEL-6.6 qemu-kvm downstream (rhbz#786408)
  - audit: Audit resources used by VirtIO RNG (rhbz#786408)
  - virtio-rng: Remove double space in error message (rhbz#786408)
  - doc: fix XML for the RNG device example (rhbz#786408)
  - conf: Don't crash on invalid chardev source definition of RNGs and other (rhbz#786408)
  - conf: Fix XML formatting of RNG device info (rhbz#786408)
  - libvirt: fix error message when connection can't be opened (rhbz#851413)
  - conf: fix error for parallel port mismatch (rhbz#950830)
  - virsh: clarify vol-{down, up}load description (rhbz#955539)
  - virsh: fix doc typos (rhbz#1022872)
  - util: use string libvirt to prefix error message instead of libvir (rhbz#911996)
  - docs: use MiB/s instead of Mbps for migration speed (rhbz#948821)
  - schema: require target path in storage pool xml (rhbz#893273)
  - schema: make source optional in volume XML (rhbz#893273)
  - Add qxl ram size to ABI stability check (rhbz#1035134)
  - qemu: fix default spice password setting (rhbz#953721)
  - Expose ownership ID parsing (rhbz#963881)
  - Make qemuOpenFile aware of per-VM DAC seclabel. (rhbz#869053)
  - Use qemuOpenFile in qemu_driver.c (rhbz#963881)
  - virsh: Fix heading in manpage (rhbz#996840)
  - qemu: Change the default unix monitor timeout (rhbz#1051364)
  - qemu: fix live pinning to memory node on NUMA system (rhbz#857312)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#857312)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-32
changelog:
  - virsh-snapshot: Reject --no-metadata together with --print-xml (rhbz#892508)
  - snapshot: Mention disk-only snapshots in error message (rhbz#880521)
  - qemu: snapshot: Report better error message if migration isn't allowed (rhbz#884926)
  - qemu: snapshot: Remove memory image if external checkpoint fails (rhbz#885963)
  - virsh-snapshot: Fix XPath query to determine snapshot state (rhbz#890457)
  - conf: Check if number of vCPUs fits in the storage variable (rhbz#902652)
  - conf: Improve error messages if parsing of vCPU count fails (rhbz#902652)
  - qemu: snapshot: Don't kill access to disk if snapshot creation fails (rhbz#906639)
  - qemu: Un-mark volume as mirrored/copied if blockjob copy fails (rhbz#923125)
  - qemu-blockjob: Fix limit of bandwidth for block jobs to supported value (rhbz#927160)
  - virsh: Fix typo in docs (rhbz#949776)
  - virsh-domain: Report errors on invalid --holdtime value for cmdSendKey (rhbz#952938)
  - qemu: Don't update count of vCPUs if hot-plug fails silently (rhbz#1000357)
  - virsh: man: Mention that volumes need to be in storage pool for undefine (rhbz#1044790)
  - Disable nwfilter driver when running unprivileged (rhbz#1029299)
  - storage: reduce number of stat calls (rhbz#977706)
  - Ignore missing files on pool refresh (rhbz#977706)
  - sanlock: add missing test command in virt-sanlock-cleanup.in (rhbz#1000890)
  - virt-sanlock-cleanup; Fix augtool usage (rhbz#1000890)
  - conf: Fix typo in error message in ABI stability check (rhbz#961655)
  - qemu: Improve error when setting invalid count of vcpus via agent (rhbz#1035109)
  - doc: Clarify usage of SELinux baselabel (rhbz#954245)
  - selinux: Don't mask errors of virSecuritySELinuxGenNewContext (rhbz#954245)
  - qemu: Return meaningful error when qemu dies early (rhbz#844378)
  - sanlock: Forbid VIR_DOMAIN_LOCK_FAILURE_IGNORE (rhbz#905280)
  - Remove the redundant parentheses in migrate help (rhbz#927497)
  - virt-xml-validate: add missing schemas (rhbz#1006699)
  - tools: add missing 'interface' type and update man page (rhbz#1006699)
  - qemu: Don't require a block or file when looking for an alias (rhbz#1078328)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-33
changelog:
  - conf: fix error for parallel port mismatch (rhbz#950830)
  - virDomainReboot: Document that migration might be unsafe (rhbz#744967)
  - interface: list all interfaces with flags == 0 (rhbz#884382)
  - Fix the syntax-check failure (rhbz#884382)
  - Crash of libvirtd by unprivileged user in virConnectListAllInterfaces (rhbz#884382)
  - qemuDomainObjStart: Warn on corrupted image (rhbz#1022008)
  - QoS: make tc filters match all traffic (rhbz#1084477)
  - conf: add support for booting from redirected USB devices (rhbz#1035190)
  - Add redirdevs to ABI stability check (rhbz#1035529)
  - Fix incorrect values in redirdev ABI check error (rhbz#1035529)
  - virSecurityLabelDefParseXML: Don't parse label on model='none' (rhbz#1027096)
  - storage: Skip inactive lv volumes (rhbz#748282)
  - Check for existence of interface prior to setting terminate flag (rhbz#903480)
  - storage: Avoid forward declaration of virStorageVolDelete (rhbz#1024159)
  - storage: Don't update pool available/allocation if buildVol fails (rhbz#1024159)
  - conf: Report errors on cputune parameter parsing (rhbz#1040784)
  - Treat zero cpu shares as a valid value (rhbz#1040784)
  - Show the real cpu shares value in live XML (rhbz#1040784)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-34
changelog:
  - nwfilter: Remove error report in virNWFilterDHCPSnoopEnd (rhbz#903480)
  - conf: introduce generic ISA address (rhbz#1033984)
  - conf: add support for panic device (rhbz#1033984)
  - qemu: add support for -device pvpanic (rhbz#1033984)
  - PanicCheckABIStability: Need to check for existence (rhbz#1033984)
  - use virBitmapFree instead of VIR_FREE for cpumask (rhbz#1088165)
  - Properly free vcpupin info for unplugged CPUs (rhbz#1088165)
  - Save domain status after cpu hotplug (rhbz#1088703)
  - Document behavior of setvcpus during guest boot (rhbz#1088748)
  - qemu: Use maximum guest memory size when getting NUMA placement advice (rhbz#1011906)
  - qemu: Properly format the uuid string in error messages (rhbz#947974)
  - qemu: Split out code to generate SPICE command line (rhbz#953126)
  - qemu: Improve handling of channels when generating SPICE command line (rhbz#953126)
  - qemu: Split out SPICE port allocation into a separate function (rhbz#953126)
  - qemu: Do sensible auto allocation of SPICE port numbers (rhbz#953126)
  - qemu: fix failure to start with spice graphics and no tls (rhbz#953126)
  - qemu: Do not ignore address for USB disks (rhbz#985166)
  - qemu: pass -usb and usb hubs earlier, so USB disks with static address are handled properly (rhbz#985166)
  - qemu: refactor qemuDomainCheckDiskPresence for only disk presence check (rhbz#1014730)
  - qemu: add helper functions for diskchain checking (rhbz#1014730)
  - qemu: check presence of each disk and its backing file as well (rhbz#1014730)
  - conf: add startupPolicy attribute for harddisk (rhbz#1014730)
  - qemu: support to drop disk with 'optional' startupPolicy (rhbz#1014730)
  - qemu: Avoid overflow when setting migration speed (rhbz#1083483)
  - qemu: Avoid overflow when setting migration speed on inactive domains (rhbz#1083483)
  - caps: Add helpers to convert NUMA nodes to corresponding CPUs (rhbz#1012846)
  - qemu: Set cpuset.cpus for domain process (rhbz#1012846)
  - qemu: Unbreak p2p migration with complete migration URI (rhbz#1073227)
  - maint: don't lose error on canceled migration (rhbz#1073227)
  - virsh: suppress aliases in group help (rhbz#956968)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-35
changelog:
  - qemu: export disk snapshot support in capabilities (rhbz#1081032)
  - qemu: extract guest capabilities initialization (rhbz#1081032)
  - qemu: add unit tests for the capabilities xml (rhbz#1081032)
  - qemu: properly quit migration with abort_on_error (rhbz#1045833)
  - conf: restrict external snapshots to backing store formats (rhbz#1019926)
  - qemu: don't check for backing chains for formats w/o snapshot support (rhbz#1019926)
  - qemu: don't call virFileExists() for network type disks (rhbz#1019926)
  - net: Change argument type of virNetworkObjIsDuplicate() (rhbz#1057321)
  - net: Move creation of dnsmasq hosts file to function starting dnsmasq (rhbz#1057321)
  - net: Re-use checks when creating transient networks (rhbz#1057321)
  - network: prevent a few invalid configuration combinations (rhbz#1057321)
  - network: disallow <bandwidth>/<mac> for bridged/macvtap/hostdev networks (rhbz#1057321)
  - virsh-domain: Fix cmdSetvcpus error message (rhbz#1092412)
  - spice: detect if qemu can disable file transfer (rhbz#983018)
  - spice: expose the QEMU disable file transfer option (rhbz#983018)
  - qemu_caps: detect if qemu can disable file transfer for spice (rhbz#983018)
  - Device{Attach, Detach}: Document S4 limitations (rhbz#808463)
  - storageVolCreateXMLFrom: Allow multiple accesses to origvol (rhbz#1058700)
  - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-36
changelog:
  - virSecuritySELinuxSetFileconHelper: Don't fail on read-only NFS (rhbz#1095135)
  - storage: Resolve issues in failure path (rhbz#1092882)
  - interface: Introduce netcfInterfaceObjIsActive (rhbz#1095774)
  - interface: dump inactive xml when interface isn't active (rhbz#1095774)
  - qemu: add host-pci-multidomain capability (rhbz#1092390)
  - qemu: specify domain in host-side PCI addresses when needed/supported (rhbz#1092390)
  - util: fix virFileOpenAs return value and resulting error logs (rhbz#851411)
  - qemu: check actual netdev type rather than config netdev type during init (rhbz#1012834)
  - Fix parsing of bond interface XML (rhbz#1067062)
  - qemuSetupCgroup: Fix reference to cgroup (rhbz#1012846)
  - apibuild: Disallow 'returns' return decription (rhbz#808463)
  - ESX: Add support for virtualHW version 10 (rhbz#1089389)
  - storage: Ensure 'qemu-img resize' size arg is a 512 multiple (rhbz#1002813)
  - qemu: Adjust size for qcow2/qed if not on sector boundary (rhbz#1002813)
  - sanlock: code movement in virLockManagerSanlockAcquire (rhbz#1088034)
  - sanlock: don't fail with unregistered domains (rhbz#1088034)
  - sanlock: avoid leak in acquire() (rhbz#1088034)
  - networkStartNetwork: Be more verbose (rhbz#1064831)
  - network_conf: Expose virNetworkDefFormatInternal (rhbz#1064831)
  - Avoid crash when LXC start fails with no interface target (rhbz#1064831)
  - lxc_process: Avoid passing NULL iface->iname (rhbz#1064831)
  - network: Introduce network hooks (rhbz#1064831)
  - bridge_driver.h: Fix build --without-network (rhbz#1064831)
  - networkRunHook: Run hook only if possible (rhbz#1064831)
  - conf: clarify what is returned for actual bandwidth and vlan (rhbz#1064831)
  - conf: handle null pointer in virNetDevVlanFormat (rhbz#1064831)
  - conf: make virDomainNetDefFormat a public function (rhbz#1064831)
  - conf: re-situate <bandwidth> element in <interface> (rhbz#1064831)
  - conf: new function virDomainActualNetDefContentsFormat (rhbz#1064831)
  - Slightly refactor hostdev parsing / formating (rhbz#1064831)
  - conf: output actual netdev status in <interface> XML (rhbz#1064831)
  - network: include plugged interface XML in "plugged" network hook (rhbz#1064831)
  - network: don't even call networkRunHook if there is no network (rhbz#1064831)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-37
changelog:
  - udev: consider the device a CDROM when ID_CDROM=1 (rhbz#1016878)
  - Add support for timestamping QEMU logs (rhbz#997010)
  - Detect -msg-timestamp capability from QEMU help output (rhbz#997010)
  - qemu: Avoid leak in qemuDomainCheckRemoveOptionalDisk (rhbz#1014730)
  - Return right error code for baselineCPU (rhbz#1097969)
  - Add a port allocator class (rhbz#1018695)
  - Avoid integer wrap on remotePortMax in QEMU driver (rhbz#1018695)
  - Followup fix for integer wraparound in port allocator (rhbz#1018695)
  - Don't spam logs with "port 0 must be in range" errors (rhbz#1018695)
  - qemu: Avoid assigning unavailable migration ports (rhbz#1018695)
  - qemu: Make migration port range configurable (rhbz#1018695)
  - qemu: Fix augeas support for migration ports (rhbz#1018695)
  - qemu: clean up migration ports when migration cancelled (rhbz#1018695)
  - qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1083238)
  - qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1083238)
  - qemu: Ignore temporary job errors when checking migration status (rhbz#1083238)
  - qemu: Send migrate_cancel when aborting migration (rhbz#1098833)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-38
changelog:
  - remote: Don't leak priv->tls object on connection failure (rhbz#1099075)
  - Fix invalid read in virNetSASLSessionClientStep debug log (rhbz#1100173)
  - Tie SASL callbacks lifecycle to virNetSessionSASLContext (rhbz#1100173)
  - fix leak in memoryStats with older python (rhbz#1099860)
  - hooks: let virCommand do the error reporting (rhbz#1105397)
  - SELinux: don't fail silently when no label is present (rhbz#1105954)
  - qemu: Add qemuDomainReleaseDeviceAddress to remove any address (rhbz#807023)
  - qemu: Separate disk device removal into a standalone function (rhbz#807023)
  - qemu: Separate controller removal into a standalone function (rhbz#807023)
  - qemu: Separate net device removal into a standalone function (rhbz#807023)
  - qemu: Separate host device removal into a standalone function (rhbz#807023)
  - Add VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event (rhbz#807023)
  - examples: Handle VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event (rhbz#807023)
  - Clarify virDomainDetachDeviceFlags documentation (rhbz#807023)
  - Add virDomainDefFindDevice for looking up a device by its alias (rhbz#807023)
  - qemu: Add support for DEVICE_DELETED event (rhbz#807023)
  - qemu: Remove devices only after DEVICE_DELETED event (rhbz#807023)
  - qemu: Emit VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED events (rhbz#807023)
  - Add function to find a needle in a string array (rhbz#807023)
  - util: Non-existent string array does not contain any string (rhbz#807023)
  - conf: Make error reporting in virDomainDefFindDevice optional (rhbz#807023)
  - qemu: Introduce qemuMonitorGetDeviceAliases (rhbz#807023)
  - qemu: Unplug devices that disappeared when libvirtd was down (rhbz#807023)
  - qemu: Finish device removal in the original thread (rhbz#807023)
  - qemu: Process DEVICE_DELETED event in a separate thread (rhbz#807023)
  - qemu: Remove interface backend only after frontend is gone (rhbz#807023)
  - qemu: Remove disk backend only after frontend is gone (rhbz#807023)
  - qemu: Return in from qemuDomainRemove*Device (rhbz#807023)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-39
changelog:
  - Fix crash when saving a domain with type none dac label (rhbz#1108590)
  - Initialize threading & error layer in LXC controller (rhbz#1109120)


